[aur-general] Orphan Request: xen
Hi, I'd like to request that xen be orphaned so that I can adopt it: https://aur.archlinux.org/packages.php?ID=14640 I've contacted the maintainer (revellion) by e-mail yesterday (I know nowhere near the two weeks but believe the rest of this post is relevant). Since the last update in 2011, there have been three serious Xen Security Advisories with patches: http://lists.xen.org/archives/html/xen-announce/2012-06/msg00001.html http://lists.xen.org/archives/html/xen-announce/2012-06/msg00003.html http://lists.xen.org/archives/html/xen-announce/2012-06/msg00002.html The maintainer has not upgraded the package to support these patches. He also hasn't changed the dependency for 'xz-utils' to 'xz'. The package was marked out of date. Finally, he has not responded on the AUR comments, including two addressed directly to him by 'aaronfitz' and 'fatmike' in January and March respectively. All of the above leads me to believe that he's no longer active. I will update this thread after 2 weeks if he hasn't responded, unless a TU takes the decision that my research is enough to show that the user is not active.
On Sat, Jul 21, 2012 at 1:38 AM, Luceo Astrum <luceoastrum@gmail.com> wrote:
Hi,
I'd like to request that xen be orphaned so that I can adopt it:
https://aur.archlinux.org/packages.php?ID=14640
I've contacted the maintainer (revellion) by e-mail yesterday (I know nowhere near the two weeks but believe the rest of this post is relevant).
Since the last update in 2011, there have been three serious Xen Security Advisories with patches:
http://lists.xen.org/archives/html/xen-announce/2012-06/msg00001.html http://lists.xen.org/archives/html/xen-announce/2012-06/msg00003.html http://lists.xen.org/archives/html/xen-announce/2012-06/msg00002.html
The maintainer has not upgraded the package to support these patches. He also hasn't changed the dependency for 'xz-utils' to 'xz'.
The package was marked out of date.
Finally, he has not responded on the AUR comments, including two addressed directly to him by 'aaronfitz' and 'fatmike' in January and March respectively.
All of the above leads me to believe that he's no longer active.
I will update this thread after 2 weeks if he hasn't responded, unless a TU takes the decision that my research is enough to show that the user is not active.
Your research is substantial, but let's wait out the two weeks. :)
On 21 July 2012 06:36, Evangelos Foutras <evangelos@foutrelis.com> wrote:
On Sat, Jul 21, 2012 at 1:38 AM, Luceo Astrum <luceoastrum@gmail.com> wrote:
Hi,
I'd like to request that xen be orphaned so that I can adopt it:
https://aur.archlinux.org/packages.php?ID=14640
I've contacted the maintainer (revellion) by e-mail yesterday (I know nowhere near the two weeks but believe the rest of this post is relevant).
Since the last update in 2011, there have been three serious Xen Security Advisories with patches:
http://lists.xen.org/archives/html/xen-announce/2012-06/msg00001.html http://lists.xen.org/archives/html/xen-announce/2012-06/msg00003.html http://lists.xen.org/archives/html/xen-announce/2012-06/msg00002.html
The maintainer has not upgraded the package to support these patches. He also hasn't changed the dependency for 'xz-utils' to 'xz'.
The package was marked out of date.
Finally, he has not responded on the AUR comments, including two addressed directly to him by 'aaronfitz' and 'fatmike' in January and March respectively.
All of the above leads me to believe that he's no longer active.
I will update this thread after 2 weeks if he hasn't responded, unless a TU takes the decision that my research is enough to show that the user is not active.
Your research is substantial, but let's wait out the two weeks. :)
Well, now I'm not particularly sure he'll get my e-mail at all: *Luceo Astrum * <luceoastrum@gmail.com> 20 July 2012 22:19 To: revellion@anirev.net Hi, I'm writing to let you know about security advisories XSA 7, 8, 9 which affect this package. Do you plan to update it for these and also for the broken xz-tools dependency? If not, would you mind making a disownment request so that I can fix the PKGBUILD? Thanks and awaiting your reply, Luceo. ------------------------------ * Mail Delivery Subsystem * <mailer-daemon@googlemail.com> 21 July 2012 23:30 To: luceoastrum@gmail.com This is an automatically generated Delivery Status Notification THIS IS A WARNING MESSAGE ONLY. YOU DO NOT NEED TO RESEND YOUR MESSAGE. Delivery to the following recipient has been delayed: revellion@anirev.net Message will be retried for 2 more day(s) Technical details of temporary failure: The recipient server did not accept our requests to connect. Learn more at http://support.google.com/mail/bin/answer.py?answer=7720 [(0) anirev.net. [82.196.122.239]:25: Connection refused] ----- Original message ----- DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=vZPy/0d+MTNxUs8mCIx675+x37p4ByuUPnhqhjQikq8=; b=AweJd/d7P5iYyL/tgjl0bEJ3EZZrhGUEZWeoNFva1RdTEUeb3v8uDw//N3n9teB3wz EAy0eqnOWhJ4a27vS2cxyM33fHO8gnFl+TBl5EyYe7AqK7SJAxIyI7hTbDNkeMkmlftY FmJFSbDKUyxgyCPrt/kWOSj7Jz/vrlEQmACVGqbvlePAWj5LVyt5ybLCb8SPGlNf49l3 Zciqt5f+ZjqoJUYZ1Wvqljm+y8Yg/R/EVRK129+yAZYH3yZK37sJlYa7sfHzYKnyaP7j k4KmXhraXMzPnpQuHuUhSk3qjAqvuTZ2SwlYaNd1eMkFQZ7ib7EuFuKqXCGZ9E4xaCAS DFKg== MIME-Version: 1.0 Received: by 10.60.14.227 with SMTP id s3mr8885781oec.36.1342819170600; Fri, 20 Jul 2012 14:19:30 -0700 (PDT) Received: by 10.76.70.228 with HTTP; Fri, 20 Jul 2012 14:19:30 -0700 (PDT) Date: Fri, 20 Jul 2012 22:19:30 +0100 Message-ID: <CAF3ZPQ71UJx3KFaxxcboFYPwCNU7AyTTm_+bc= jhLsVT9syKeQ@mail.gmail.com> Subject: AUR Package: xen 4.1.2 From: Luceo Astrum <luceoastrum@gmail.com> To: revellion@anirev.net Content-Type: multipart/alternative; boundary=e89a8ff25334a9485704c5497371
On Sun, Jul 22, 2012 at 1:33 AM, Luceo Astrum <luceoastrum@gmail.com> wrote:
Well, now I'm not particularly sure he'll get my e-mail at all:
Yeah, my email to him bounced as well. I have disowned the package.
participants (2)
-
Evangelos Foutras
-
Luceo Astrum