Re: [gentoo-dev] removing vulnerable versions of dev-lang/v8

2013-11-08 Thread Ian Stakenvicius
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/11/13 12:22 AM, Paweł Hajdan, Jr. wrote: For some context of this please see http://thread.gmane.org/gmane.linux.gentoo.devel/88222 v8-3.20.17.7 fixes a memory corruption vulnerability, see

Re: [gentoo-dev] removing vulnerable versions of dev-lang/v8

2013-11-08 Thread Rich Freeman
On Fri, Nov 8, 2013 at 9:42 AM, Ian Stakenvicius a...@gentoo.org wrote: I'm still a little concerned about the potential security issues caused by embedded V8's in projects, but as we've already concluded in that other thread, there's no other way until the API stabilizes.. Yup. When a

Re: [gentoo-dev] removing vulnerable versions of dev-lang/v8

2013-11-08 Thread Diego Elio Pettenò
On Fri, Nov 8, 2013 at 5:22 AM, Paweł Hajdan, Jr. phajdan...@gentoo.orgwrote: Problem #1 is that sci-geosciences/osgearth-2.4 depends on =dev-lang/v8-3.18.5.14 (see https://bugs.gentoo.org/show_bug.cgi?id=484786 for context). It doesn't work with more recent v8, but it can be made to not

Re: [gentoo-dev] removing vulnerable versions of dev-lang/v8

2013-11-08 Thread Peter Stuge
Diego Elio Pettenò wrote: Problem #1 is that sci-geosciences/osgearth-2.4 depends on =dev-lang/v8-3.18.5.14 (see https://bugs.gentoo.org/show_bug.cgi?id=484786 for context). It doesn't work with more recent v8, but it can be made to not depend on v8. If made not to depend means bundle,

Re: [gentoo-dev] removing vulnerable versions of dev-lang/v8

2013-11-08 Thread hasufell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/08/2013 04:18 PM, Diego Elio Pettenò wrote: On Fri, Nov 8, 2013 at 5:22 AM, Paweł Hajdan, Jr. phajdan...@gentoo.org mailto:phajdan...@gentoo.org wrote: Problem #1 is that sci-geosciences/osgearth-2.4 depends on =dev-lang/v8-3.18.5.14

Re: [gentoo-dev] Policy-level discussion for minimum versions on dependencies

2013-11-08 Thread William Hubbs
On Wed, Nov 06, 2013 at 01:28:13PM -0500, Rich Freeman wrote: On Wed, Nov 6, 2013 at 11:15 AM, Alan McKinnon alan.mckin...@gmail.com wrote: I agree with this sentiment. It's always been my view that the needs of a package are driven by the package itself, not by the tree. Rationale: A

[gentoo-dev] Drop net-analyzer/nagios-* to maintainer-needed

2013-11-08 Thread Markos Chandras
Hi, I see nobody seems to take care of nagios packages anymore. There are numerous bugs (and many of them are pending version bumps). Is the sysadmin@ herd still interested in this package? If not, could you please consider moving it to maintainer-needed@? Maybe users are interested in working

Re: [gentoo-dev] Drop net-analyzer/nagios-* to maintainer-needed

2013-11-08 Thread Chris Reffett
On 11/8/2013 7:14 PM, Markos Chandras wrote: Hi, I see nobody seems to take care of nagios packages anymore. There are numerous bugs (and many of them are pending version bumps). Is the sysadmin@ herd still interested in this package? If not, could you please consider moving it to

Re: [gentoo-dev] Policy-level discussion for minimum versions on dependencies

2013-11-08 Thread Ben de Groot
On 8 November 2013 08:55, Rémi Cardona r...@gentoo.org wrote: Le jeudi 07 novembre 2013 à 10:44 +0100, Alexis Ballier a écrit : in short: if a package requires version X then the ebuild should require version X; it can be forgotten but it's a bug. That _is_ our policy. Since this thread was

[gentoo-dev] Looking for app-i18n/poedit maintainer

2013-11-08 Thread Ryan Hill
Is anyone interested in maintaining poedit? It's currently covered by wxwidgets and I check in on it a couple times a year for bumps/stabilization, but I don't use it myself. Feel free to add yourself or take it over if you're interested. Thanks. -- Ryan Hillpsn:

Re: [gentoo-dev] Suggestion: support the Dev team with system resources

2013-11-08 Thread heroxbd
Johann Schmitz er...@gentoo.org writes: Is it possible to run, say, mips on xen/whatever through some emulation layer or is real hardware a requirement for this archs? Yes, via qemu. But very slow, nearly unusable even on a powerful mainstream amd64 server.