Bug#354355: News up to date debian package for sympa

2006-12-16 Thread Raphael Hertzog
On Fri, 15 Dec 2006, Raphael Hertzog wrote:
  I'm following the sympa PTS for years and I'm afraid that I have to
  confirm Jean-Charles statement.
 
 Agreed. And given the request of the upstream authors I believe we should
 consider this bug as release critical, thus raising the severity of this
 bug.
 
 I know we're pretty late in the cycle but sympa is an external package
 (ie no other packages depend on it) and it can be easily removed/updated
 without creating trouble to the rest of the distribution. So I'm all in
 favor to request the inclusion of a new upstream version... on the ground
 that the current version is unsupported (including security-wise) upstream.

After some discussion with Andreas Barth, he indicated me that we need to
move very fast to resolve this for etch or we'll end up with no sympa
package at all.

Stefen, please take position quickly or I'll upload the new package of
Jean-Charles to unstable on monday/tuesday.

Cheers,
-- 
Raphaël Hertzog

Premier livre français sur Debian GNU/Linux :
http://www.ouaza.com/livre/admin-debian/



Bug#354355: News up to date debian package for sympa

2006-12-15 Thread Jean Charles Delepine
severity 354355 important
tags 354355 security patch
thank you

deb http://ldap.u-picardie.fr/~delepine/APT/sympa/ ./
deb-src http://ldap.u-picardie.fr/~delepine/APT/sympa/ ./

You will find here a new package for sympa based on latest stable
version 5.2.3. The packaging is based on my package
5.1.2-cvs.20060224-0.1 (same private repository) which itself was based on 
Stefan Hornburg (Racke) works in 5.1-0.0.7 (not releasd).

This package (5.2.3-0.6) is in a better state than sarge, sid and
experimental ones. Installation with apache and mysql works, upgrades
fine from unmodified (apparts from making it works) sid package.

The sympa debian package is in a very bad state since years. An obsolete
version of Sympa (released in 2004) is still the one distributed with Debian. 
This is unacceptable to the software authors because a) this version includes
many major security issues (1) b) they can't afford to provide user support on
such old releases c) it carries a very bad image of Sympa software in
the Debian community.

sympa-5.2.3-0.6 should be upload in unstable whith priority important and 
efforts
made to push it for etch, or sympa should be removed from etch.

As already said last year, I'm ready for comaintain or maintain this package.

-- 
 R : Tu vois !|| Jean Charles Delépine - Université de Picardie
  Q : Tu crois ?  
   R : Ça casse l'ordre chronologique de l'échange.
Q : En quoi répondre au dessus est-il gênant ?



Bug#354355: News up to date debian package for sympa

2006-12-15 Thread Christian Perrier
 As already said last year, I'm ready for comaintain or maintain this package.


I'm following the sympa PTS for years and I'm afraid that I have to
confirm Jean-Charles statement.

Indeed, having this sympa version in etch is simply useless. I very
much doubt that anyone really wants to run a mailing list server based
on *this* version of sympa, now.

I hereby confirm again that I'm ready to help Jean-Charles to keep an
up-to-date sympa, would he take the package over. That would mostly
include sponsoring as I can't really add more burden on my own
shoulders (and, anyway, my expertise on sympa is pretty low).

If needed, I think we can easily grab more contributors, either from
the French DD community, or from the very active (and sympa) sympa
community.

Stefan, I really think it's time to give the package away to
Jean-Charles. It's obviously too late for etch (I should maybe have
been more active and propose an hijack earlier)but this should be
done immediately after the release.




signature.asc
Description: Digital signature


Bug#354355: News up to date debian package for sympa

2006-12-15 Thread Raphael Hertzog
severity 354355 serious
thanks

On Fri, 15 Dec 2006, Christian Perrier wrote:
  As already said last year, I'm ready for comaintain or maintain this 
  package.
 
 I'm following the sympa PTS for years and I'm afraid that I have to
 confirm Jean-Charles statement.

Agreed. And given the request of the upstream authors I believe we should
consider this bug as release critical, thus raising the severity of this
bug.

I know we're pretty late in the cycle but sympa is an external package
(ie no other packages depend on it) and it can be easily removed/updated
without creating trouble to the rest of the distribution. So I'm all in
favor to request the inclusion of a new upstream version... on the ground
that the current version is unsupported (including security-wise) upstream.

 I hereby confirm again that I'm ready to help Jean-Charles to keep an
 up-to-date sympa, would he take the package over. That would mostly
 include sponsoring as I can't really add more burden on my own
 shoulders (and, anyway, my expertise on sympa is pretty low).

Same for me. I'm also using it so I can test it.

It's a pity Stefen never responded positively to co-maintenance offer.

Cheers,
-- 
Raphaël Hertzog

Premier livre français sur Debian GNU/Linux :
http://www.ouaza.com/livre/admin-debian/