Path: csiph.com!eternal-september.org!feeder.eternal-september.org!aioe.org!bofh.it!news.nic.it!robomod From: "Kai Storbeck" Newsgroups: linux.debian.maint.python Subject: Searching for a roundup sponsor Date: Thu, 01 Oct 2015 22:20:02 +0200 Message-ID: X-Original-To: debian-python@lists.debian.org X-Mailbox-Line: From debian-python-request@lists.debian.org Thu Oct 1 20:11:24 2015 Old-Return-Path: X-Amavis-Spam-Status: No, score=-12.72 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -7 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=_MailMate_7960EEB0-62CA-4E8E-9F2A-AB54A64F89D1_="; micalg=pgp-sha1; protocol="application/pgp-signature" X-Mailer: MailMate Trial (1.9.2r5141) X-Mailing-List: archive/latest/12709 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/2DC14910-C100-48CC-B042-BC0D967522B9@xs4all.nl Approved: robomod@news.nic.it Lines: 59 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Thu, 01 Oct 2015 22:11:01 +0200 X-Original-Message-ID: <2DC14910-C100-48CC-B042-BC0D967522B9@xs4all.nl> Xref: csiph.com linux.debian.maint.python:7398 This is an OpenPGP/MIME signed message (RFC 3156 and 4880). --=_MailMate_7960EEB0-62CA-4E8E-9F2A-AB54A64F89D1_= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi, Roundup 1.4.20-1.1 is still the version in stable. Roundup 1.5 was releas= ed a few years back, and I need someone to help me with the final stages = in getting 1.5 in stretch, or getting it removed. Roundup is a python web application with quite some vendored code (javasc= ript libs and fonts), 5 different licenses, and in 1.5.0 there is an offe= nding file that has an incompatible licensing, so I had to "dfsg" it. (is= there a verb for that?) During this work a security issue came along and this made me realise tha= t the architecture of roundup isn't exactly compatible with what I would = expect from a proper Debain package. We can create security updates for roundup, but that won't help any exist= ing user as all actual issue trackers are using a copy of the lib at the = time of their birth. I'm quite unsure on how to proceed here, but perhaps someone with more ex= perience can help me with the steps needed. Thanks, -- = Kai Storbeck kaisan on (oftc, freenet) irc --=_MailMate_7960EEB0-62CA-4E8E-9F2A-AB54A64F89D1_= Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc -----BEGIN PGP SIGNATURE----- iQIcBAEBAgAGBQJWDZNVAAoJEF40nm+zxNXzC8AP+QG9wLtRn8qghrZ5naN9AYO+ lqW/bkBF5PTgsP8QoC3gFfn9mhUGTD/5KcwFRzXbZ7zoOrP7T2eZ4GxwedMVP1SV lwnyKWLj01dSlbeAdKUhVxscJZTm82DSD/Xb2czbOmCDKvo/+6I0MJ2BpAhdPkyJ an8+HAivSP9izI+GAJpKGyunoT+xbyrMtL/X3R0zjBe9zsuCnq/TvAShulwfhcrZ JCU9LQkr2QnzjrRZ8viLZdlhIoTqh5ncIu96M5R5uTxFiZVd5yDwy4EzzS4knLGZ 1p0AeZCoWZ16FIKWkYWnQCCUrSsh9N6bj9mqaAQf+oM9+DSbILGxduGWJquV0Fd8 pP0nNnaZ1+Qy9iHWZmzAX1TOqC96RywvqLX97Qa0nVwc1DDI+GcCPk2djMjwfD+U vARUyBRDJAT5P98YPsvA0q8qDQ+BZBvru8jKTxzs4LO5c2ryXpfEVTaGCRJRtssR E+u+VdXTUHkYD5vYHAZt3/MSSPB+h8SG/aiFyYx/+RaNpepIoaG1W+FaWfwHh3/r zawu3O3Z2QsG5nqnbTTacPye4QRdTnY1Af5VQdm49zanzPHbCMinZSie1xt6yQIP FSOHQbHgToe7XLSmQlLFaZrQ07kpYk0s0lijhPU7zgmh4LpH9LoPeoweeYeC4khT w+Ub0KdjrZnKURjUIyAA =z2gq -----END PGP SIGNATURE----- --=_MailMate_7960EEB0-62CA-4E8E-9F2A-AB54A64F89D1_=--