On Tue, Jul 9, 2019 at 3:26 PM Rob Crittenden rcritten@redhat.com wrote:
Fabio Valentini wrote:
Hi everybody,
While working on packages of the Stewardship SIG, I again came across another package that is in dire need of attention, while its main admin seems to be AWOL (even though the email address associated with his FAS account is a Red Hat one):
- no bodhi updates in 4 years [0]
- no bodhi comments in 2 years [0]
- no koji builds in 4 years [1]
There's also been no response to security issues on bugzilla, including CVE-2016-6346, CVE-2016-6347, CVE-2018-1051, CVE-2016-9606, CVE-2016-6345, CVE-2016-6348 - all of which are filed against the resteasy package, which is, entirely by coincidence (*sigh*), exactly the package that we need fixed for some Stewardship SIG packages.
Since it looks like he's not been contributing to fedora in about 2-4 years, I will initiate the non-responsive maintainer process with FESCo if I don't get any negative feedback within a week.
Fabio (decathorpe)
He's on PTO for a few weeks.
rob
Good to know, thanks!
If it's necessary to fix the broken package (resteasy) before he's back, I'll use my provenpackager powers.
Fabio
On Tue, Jul 9, 2019 at 3:26 PM Rob Crittenden rcritten@redhat.com wrote:
He's on PTO for a few weeks.
I wonder how valid this remark is when he has not responded in years.
Miro Hrončok wrote:
On Tue, Jul 9, 2019 at 3:26 PM Rob Crittenden rcritten@redhat.com wrote:
He's on PTO for a few weeks.
I wonder how valid this remark is when he has not responded in years.
I can't speak to his previous work as a maintainer that but I have personal knowledge that he is away. I'll otherwise take your comment in the most excellent way and not assume you are questioning my truthfulness.
rob
Hello everyone,
As Rob had responded earlier, he is away for few weeks. A while back, I spoke to him in person about handing over the RESTeasy packages to the Fedora SIG. He had agreed to it. Once he is back, I will remind him to transfer those packages to the SIG.
PS: Dogtag PKI depends on those RESTeasy packages.
Regards, --Dinesh
On Tue, 2019-07-09 at 10:16 -0400, Rob Crittenden wrote:
Miro Hrončok wrote:
On Tue, Jul 9, 2019 at 3:26 PM Rob Crittenden rcritten@redhat.com wrote:
He's on PTO for a few weeks.
I wonder how valid this remark is when he has not responded in years.
I can't speak to his previous work as a maintainer that but I have personal knowledge that he is away. I'll otherwise take your comment in the most excellent way and not assume you are questioning my truthfulness.
rob _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
On Tue, Jul 9, 2019 at 7:51 PM Dinesh Prasanth Moluguwan Krishnamoorthy dmoluguw@redhat.com wrote:
Hello everyone,
As Rob had responded earlier, he is away for few weeks. A while back, I spoke to him in person about handing over the RESTeasy packages to the Fedora SIG. He had agreed to it. Once he is back, I will remind him to transfer those packages to the SIG.
PS: Dogtag PKI depends on those RESTeasy packages.
I know, which is why I am interested in fixing it (it's currently broken in rawhide).
Fabio
Regards, --Dinesh
On Tue, 2019-07-09 at 10:16 -0400, Rob Crittenden wrote:
Miro Hrončok wrote:
On Tue, Jul 9, 2019 at 3:26 PM Rob Crittenden rcritten@redhat.com wrote:
He's on PTO for a few weeks.
I wonder how valid this remark is when he has not responded in years.
I can't speak to his previous work as a maintainer that but I have personal knowledge that he is away. I'll otherwise take your comment in the most excellent way and not assume you are questioning my truthfulness.
rob _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
On Tue, Jul 9, 2019 at 8:17 PM Fabio Valentini decathorpe@gmail.com wrote:
On Tue, Jul 9, 2019 at 7:51 PM Dinesh Prasanth Moluguwan Krishnamoorthy dmoluguw@redhat.com wrote:
Hello everyone,
As Rob had responded earlier, he is away for few weeks. A while back, I spoke to him in person about handing over the RESTeasy packages to the Fedora SIG. He had agreed to it. Once he is back, I will remind him to transfer those packages to the SIG.
PS: Dogtag PKI depends on those RESTeasy packages.
I know, which is why I am interested in fixing it (it's currently broken in rawhide).
Just a quick update: After two more months, the package has still not been touched (since 2016), and it is still broken on fedora 31+.
Fabio
Fabio
Regards, --Dinesh
On Tue, 2019-07-09 at 10:16 -0400, Rob Crittenden wrote:
Miro Hrončok wrote:
On Tue, Jul 9, 2019 at 3:26 PM Rob Crittenden rcritten@redhat.com wrote:
He's on PTO for a few weeks.
I wonder how valid this remark is when he has not responded in years.
I can't speak to his previous work as a maintainer that but I have personal knowledge that he is away. I'll otherwise take your comment in the most excellent way and not assume you are questioning my truthfulness.
rob _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
On 13. 09. 19 12:05, Fabio Valentini wrote:
On Tue, Jul 9, 2019 at 8:17 PM Fabio Valentinidecathorpe@gmail.com wrote:
On Tue, Jul 9, 2019 at 7:51 PM Dinesh Prasanth Moluguwan Krishnamoorthydmoluguw@redhat.com wrote:
Hello everyone,
As Rob had responded earlier, he is away for few weeks. A while back, I spoke to him in person about handing over the RESTeasy packages to the Fedora SIG. He had agreed to it. Once he is back, I will remind him to transfer those packages to the SIG.
PS: Dogtag PKI depends on those RESTeasy packages.
I know, which is why I am interested in fixing it (it's currently broken in rawhide).
Just a quick update: After two more months, the package has still not been touched (since 2016), and it is still broken on fedora 31+.
I've opened https://bugzilla.redhat.com/show_bug.cgi?id=1751976
Does anyone knows how to contact the maintainer?
Links to all other bug reports open on resteasy:
https://bugzilla.redhat.com/show_bug.cgi?id=1736585 (FTBFS) https://bugzilla.redhat.com/show_bug.cgi?id=1372118 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1372122 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1372125 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1372130 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1404912 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1456313 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1471273 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1471275 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1471277 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1471279 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1480769 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1481780 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1539175 (CVE) https://bugzilla.redhat.com/show_bug.cgi?id=1590941 (CVE)
On 09. 07. 19 16:16, Rob Crittenden wrote:
Miro Hrončok wrote:
On Tue, Jul 9, 2019 at 3:26 PM Rob Crittenden rcritten@redhat.com wrote:
He's on PTO for a few weeks.
I wonder how valid this remark is when he has not responded in years.
I can't speak to his previous work as a maintainer that but I have personal knowledge that he is away. I'll otherwise take your comment in the most excellent way and not assume you are questioning my truthfulness.
Apologies, Rob, I was not at all suggesting that what you say is not true. I was simply suggesting that being on PTO now is not a reason to stop the nonresponsive maintainer procedure.
Sorry for the confusion.
-
Dinesh Prasanth Moluguwan Krishnamoorthy -
Fabio Valentini -
Miro Hrončok -
Rob Crittenden