Hi Eric and all,
Just as a point of information, if you all are interested in following already-
existing Fedora Legacy bugs in Bugzilla, it is pretty easy if you have a
Bugzilla account.
All you need to do is, once logged in to Bugzilla, click the grey Account tab
at the top of the page to get to your Bugzilla user preferences. Once there,
click on the Email tab. That should put you on web-page
https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email.
There is a form entry on this page, Users to watch. If you enter
[EMAIL PROTECTED] in that form, then suddenly you will be able to watch
(that is get emails about) all bug activity happening on Fedora Legacy-related
bugs, without having to be added to the [EMAIL PROTECTED] email alias by
Jesse.
Here are some bugs that have lately received at least some attention (that I am
aware of):
* Bug 209116 http://tinyurl.com/yz6n2e, openssl. A FC4 source package,
openssl-0.9.7f-7.11.legacy, has been proposed for source-level 'PUBLISH'
QA (are we still doing this?), and there are binary packages out there
one can also look at and play with if one wants to. The openssl097a
compatibility package still needs to be worked on for FC4. For FC3
(which maybe we can create a new Bug item for?), both its native openssl
and its compatibility openssl096b packages need work. I have been hoping
to get work done on these myself, but I am slow.
Note that Red Hat employee Florian La Roche was kind enough to add
some suggestions to make our work easier on this bug.
* Bug 209167 http://tinyurl.com/yk284t, seamonkey. Seamonkey is the
best we can do to fix Mozilla, because the Mozilla foundation has stopped
supporting the Mozilla suite (web browser, email irc client) as of
Mozilla-1.7.13. However, Seamonkey has up until now been produced by
Fedora Extras, and Kai Engert has been its maintainer. Michal Jaegermann
was kind enough to share information with us about his seamonkey replace-
ment packages, and older versions for Red Hat/FC1/FC2 we can probably get
from RHEL sources.
So this bug is partly to work with Kai in getting the ball rolling and
negotiating a (necessary, in my opinion) port of seamonkey from being an
Extras package into becoming a Mozilla-replacement Core (Legacy) package,
upon which other software (like epiphany and yelp) depend. That way we fix
*all* Mozilla-related security bugs.
* Other bugs needing some attention:
- mailman (bugs 209891 for FC4, 211676 for FC3, I guess ). There is
also a much older mailman bug report (bug #193843) that perhaps we can
still get work done on for RHL 7.3, RHL 9, FC1 FC2.
- openssh (bug 208727). Originally opened to deal with FC3, FC4, RHL 7.3
RHL 9 releases.
- kernel (Bug 200034). Many patches were added for FC3 when this bug
was being worked originally, but time has elapsed and this bug has
grown stale. We now need packages for fc4 as well as fc3, since no
doubt there are new kernel vulnerabilities since Legacy was given fc4.
This bug was also opened to help RHL 7.3, RHL 9, FC1 FC2 distros.
By the way, Pekka Savola (bless his heart!) still maintains his Fedora Legacy
bug-list, here:
http://www.netcore.fi/pekkas/buglist.html.
There are also, no doubt, scores packages with security bugs that have never
been filed in Bugzilla for FC3 and FC4. Like for firefox/thunderbird/httpd/
kdelibs/php/etc. etc.
Hope this helped.
Regards,
David Eisenstein
--
fedora-legacy-list mailing list
fedora-legacy-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-legacy-list
