On Tue, 2010-08-03 at 09:43 +0100, Bastien Nocera wrote: > On Sun, 2010-08-01 at 09:24 +0200, Martin Sourada wrote: > > Hi, > > > > I've been wondering what's up with webkitgtk maintainership. It's pretty > > important gnome desktop component but it looks rather neglected. Last > > update on stable branches of fedora was done by rahul who even isn't in > > the commit acl's on webkitgtk and since then there where three upstream > > bugfix (no API/ABI changes) releases, last of which even contains a > > bunch of CVE fixes. I've filed a bug asking for update about 2 weeks ago > > [1][2] with no response. I'd be willing to help co-maintaining it, if > > there's shortcoming of time on the current maintainers' side. > > To be fair, you sent this mail at the week-end, straight after the CVS > was unaccessible due to the git migration. Sorry about that, that was not intentional... My mistake.
> If there were CVEs, why wasn't the security team involved? > Don't know. I'm not sure the fixed CVE's are even know to the security team, but they're CVEs that were fixed by debian security team and upstreamed (is there any kind of cooperation with other distros security teams?). I've added the Security keyword to the bugs referenced in my previous email. Not sure if that is enough? > Most of the people that look after the desktop packages were either at > GUADEC with limited internet connectivity, or on holidays. > Well, the problem is more long standing. To me webkitgtk looks absolutely neglected on stable fedora releases (yes, I'm receiving the bugzilla reports for webkitgtk and see no updates on them, as well as no commits in cvs/git other then devel/f14). Long term. > Feel free to nag on on #fedora-desktop on GIMPNet. > Thanks for the suggestion. Thanks, Martin
signature.asc
Description: This is a digitally signed message part
-- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel
