Re: [gentoo-dev] Dropping phpgroupware from the Portage tree

2005-11-21 Thread Thierry Carrez
Stuart Herbert wrote:

 I've just masked the package 'www-apps/phpgroupware', and will be
 dropping it from the tree soon.  There are a number of issues with the
 project, including:
 
 * Outstanding security bugs
 * Upstream homepage no longer available
 * No real releases in over a year

FYI, I just received the following from Dave Hall
[EMAIL PROTECTED] :

 Hi all,
 
 You are encouraged to update to the latest version of phpGroupWare -
 0.9.16.009.  The release contains several major bug fixes as well as
 some important security fixes.
 
 You can grab the new version from -
 http://sourceforge.net/project/showfiles.php?group_id=7305
 
 Or update from cvs
 $ cd /path/to/phpgroupware
 $ export CVS_RSH=ssh
 $ cvs update -dP
 
 Changelog is as follows:
 
 Fixes for the following security issues:
 * phpSysInfo 
   - XSS CVE-2005-0870
   - arbitrary file inclusion CVE-2005-3347
   - anti XSS measure CVE-2005-3348
 * FUDForum
   - arbitary code execution SA16627
 
 Major bug fixes:
   - LDAP account returns only phpGroupWare accounts
   - accounts list pages and sorts properly
   - Next account id is properly generated
   - First group shows properly in ACL manager
   - Calendar footer now shows again
   - Calendar alarms can be set, editted and viewed
   - Fix apps to work with anti XSS code from 007/8
 - News Admin 
 - Sitemgr
 
 Additional languages and translated phrases
 
 We hope to have our website back up and running in the 24hours, so for
 the inconvenience this may be causing people.
 
 Cheers
 Dave

So it looks like it's still maintained and the homepage problem is
temporary...

-- 
Koon
-- 
gentoo-dev@gentoo.org mailing list



[gentoo-dev] Dropping phpgroupware from the Portage tree

2005-11-20 Thread Stuart Herbert
Hi,

I've just masked the package 'www-apps/phpgroupware', and will be
dropping it from the tree soon.  There are a number of issues with the
project, including:

* Outstanding security bugs
* Upstream homepage no longer available
* No real releases in over a year

'www-apps/egroupware' is an actively-maintained fork of phpgroupware,
and is available via Portage for anyone looking for an alternative.

Best regards,
Stu
-- 
Stuart Herbert [EMAIL PROTECTED]
Gentoo Developer  http://www.gentoo.org/
  http://stu.gnqs.org/diary/

GnuGP key id# F9AFC57C available from http://pgp.mit.edu
Key fingerprint = 31FB 50D4 1F88 E227 F319  C549 0C2F 80BA F9AF C57C
--


signature.asc
Description: This is a digitally signed message part


Re: [gentoo-dev] Dropping phpgroupware from the Portage tree

2005-11-20 Thread Jason Huebel
On Sunday 20 November 2005 5:38 am, Stuart Herbert wrote:
 Hi,

 I've just masked the package 'www-apps/phpgroupware', and will be
 dropping it from the tree soon.  There are a number of issues with the
 project, including:

 * Outstanding security bugs
 * Upstream homepage no longer available
 * No real releases in over a year

 'www-apps/egroupware' is an actively-maintained fork of phpgroupware,
 and is available via Portage for anyone looking for an alternative.

 Best regards,
 Stu

This looks like one of those things that should be announced in GWN or 
something.  phpgroupware is still widely used and users need to know Gentoo 
is dropping support for it in favor of egroupware.

-- 
Jason Huebel
Gentoo Board Of Trustees Member
Gentoo Developer Relations/Recruiter

GPG Public Key:
http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x9BA9E230

Do not weep; do not wax indignant. Understand.
Baruch Spinoza (1632 - 1677)


pgpEBZuAbRR0P.pgp
Description: PGP signature


Re: [gentoo-dev] Dropping phpgroupware from the Portage tree

2005-11-20 Thread Petteri Räty
Jason Huebel wrote:
 On Sunday 20 November 2005 5:38 am, Stuart Herbert wrote:
 
Hi,

I've just masked the package 'www-apps/phpgroupware', and will be
dropping it from the tree soon.  There are a number of issues with the
project, including:

* Outstanding security bugs
* Upstream homepage no longer available
* No real releases in over a year

'www-apps/egroupware' is an actively-maintained fork of phpgroupware,
and is available via Portage for anyone looking for an alternative.

Best regards,
Stu
 
 
 This looks like one of those things that should be announced in GWN or 
 something.  phpgroupware is still widely used and users need to know Gentoo 
 is dropping support for it in favor of egroupware.
 

gentoo-announce mailing list too if it is still widely used

Regards,
Petteri Räty



signature.asc
Description: OpenPGP digital signature