Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 10/11/11 06:22, Matt Turner wrote: On Sun, Oct 9, 2011 at 11:22 AM, Markos Chandras hwoar...@gentoo.org wrote: I am not in QA fwiw just trying to keep a basic QA level in portage tree. Wait, what? If you're not even in QA, then who are you to start masking other people's packages? It seems you don't even bother to read the masking message or my comments on the bug. I said Talk to QA and CC me if you want to discuss this further. Did you? Of course not cause you like trolling publicly. - -- Regards, Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2 -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.18 (GNU/Linux) iQIcBAEBCgAGBQJOk+tAAAoJEPqDWhW0r/LCeUEP/j7Xgx5zhEKzGw7qn3a25+uu FxIu9rnqFb1mLTg7GzaCFb6KQNppvPwpcsV7SkE9AUoQCZf5L2RSwBPZQkVMXP4Z yMBrWHqBmGno9qmSZg5u9iKT7AwbwcukiPFSo1hwaiqosR17AsOXjTizG7BP6/OD UxhkuFHDOmKeeT4YiIPLRKiCw5K8gCLb9gdhu489oDoBOZueVTGyGVhNdkx7+sLB SRNH014anoDKLx3K7AF1/nNeYuc7+aozDU9KLhuy+OVmN843VCNZoNrTXzDQSKBB uD0iUnzRBHdVVNPs5N837IrxP4I5j8JUaLnyARcdWOCNyT/3ffPTTJr5pEMJbfGk SzF2CxdujfIDyx4MnYc9J/lc3NxQbqdYklzN9rTilIpN/chQ7P13U++W0ssZhFha cgGi/dlcvFp5BV32Hy74j+xzCU8+yFBKsEKgcaoyL0jkVY7XCTod4C0HYCoo5Rnc YfYXkN9lOEw4QmW0PQZlt5RskYcH1NwikfTM6d009cliM9DPmNb7EiuMGDIRwWae mYaMWR+8TMaFK61JaZfvpWMMZh/m8admxVcyld9n/wNskiHKDKPEKb3Wj1109m/S rrWQBZH2iLR2XMDDBltvyO4flgcmWYzK1KLJTWtn2c1Hqc7A8D8gLYovvDWYmQdZ 4WjciKu85C7HIt9ItnG6 =ByEN -END PGP SIGNATURE-
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On Tue, Oct 11, 2011 at 12:37 PM, Markos Chandras hwoar...@gentoo.org wrote: On 10/11/11 06:22, Matt Turner wrote: On Sun, Oct 9, 2011 at 11:22 AM, Markos Chandras hwoar...@gentoo.org wrote: I am not in QA fwiw just trying to keep a basic QA level in portage tree. Wait, what? If you're not even in QA, then who are you to start masking other people's packages? It seems you don't even bother to read the masking message or my comments on the bug. I said Talk to QA and CC me if you want to discuss this further. Did you? Of course not cause you like trolling publicly. What is going on here? Why are you and Matt publicly slinging mud at each other and defiling this mailing list? Please behave like gentlemen, and not angry kids. I request you both to please take this conversation off the mailing list, and I encourage the pair of you to resolve your differences personally and amicably[1]. Preferably after a 24hr break to cool yourselves. Thank you. 1. If you persist, I offer to instead schedule a duelling session on IRC. -- ~Nirbheek Chauhan Gentoo GNOME+Mozilla Team
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 10/11/11 08:21, Nirbheek Chauhan wrote: On Tue, Oct 11, 2011 at 12:37 PM, Markos Chandras hwoar...@gentoo.org wrote: On 10/11/11 06:22, Matt Turner wrote: On Sun, Oct 9, 2011 at 11:22 AM, Markos Chandras hwoar...@gentoo.org wrote: I am not in QA fwiw just trying to keep a basic QA level in portage tree. Wait, what? If you're not even in QA, then who are you to start masking other people's packages? It seems you don't even bother to read the masking message or my comments on the bug. I said Talk to QA and CC me if you want to discuss this further. Did you? Of course not cause you like trolling publicly. What is going on here? Why are you and Matt publicly slinging mud at each other and defiling this mailing list? Please behave like gentlemen, and not angry kids. I request you both to please take this conversation off the mailing list, and I encourage the pair of you to resolve your differences personally and amicably[1]. Preferably after a 24hr break to cool yourselves. Thank you. 1. If you persist, I offer to instead schedule a duelling session on IRC. The discussion was meant to be between us and QA but public noise is more fun and draws more attention. The masking message and bug comments clearly state to consult QA for anything related to this package. - -- Regards, Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2 -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.18 (GNU/Linux) iQIcBAEBCgAGBQJOk++pAAoJEPqDWhW0r/LCRp0P/iGE/coVqC9kF0CKggOkcLU6 Dgp7oY5/l+nn1H+MyLBUH1yCGiTz7v2mrGt2ZzjwlYOnCiI8ApHCrW3J6g9sgKa3 8PvvamORbHRYVRty7DAyGoJmr2cZ8bEu172qUkPp5lWuv0C3fHBh2N8KgWV8Yntk UJkOhADwMKVSZYKe3Pfb1+j8eX0Oad+2jZIhDaL9JgCobzFYE/ixm6WRjuhvE01n Yhpj+/8G83jcS3n+NyYNMAPMtymxBOZJcv0KZf+5NsF3tG3oBW6ObzuWYt+NaYE/ 6gXgv/UEUMWDb0zSdxzUi0P1kmQEDCtDbRR+Zcv0vBHElvxpsmN6py852hkCQR0S fojHpd5vaBvzbXUEl1FeRh2dY72kkHVrnWAok1jTM3VFBsAcWgu5Ps6sZQaF+/bB y8JreIPVJL/tmkI1aqBSUP0NwUi7cLaGPHQBhXKJJU0XK4dYGpGKc+fahxc4SINq 6t+UyTNfZqEQoUcgLCgQSMDxn1lY0r35e4Oi+k6lMSib9ppO9cFHr+tSl56QtGOl MnJZSD+Vp14KdPaZ0KlTqBpt8+djCVGmEXYp0fYgilHAgLs+IPujIpjDwF2dU7LT iD8N8/xZVa8wsXc9334jESJIEf8RKbeEvaJ/8kU8dQZfhuNn+8uVIB8l8uaMrbyX OXOj/+xSTmCJy+QN2rHp =8DqH -END PGP SIGNATURE-
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On Tue, Oct 11, 2011 at 3:07 AM, Markos Chandras hwoar...@gentoo.org wrote: Wait, what? If you're not even in QA, then who are you to start masking other people's packages? It seems you don't even bother to read the masking message or my comments on the bug. I said Talk to QA and CC me if you want to discuss this further. Did you? Of course I did. And at the time Talk to QA and CC me made sense since I thought you were in QA. I don't understand why you'd ask this. Of course not cause you like trolling publicly. Rather, I'm confused. I wouldn't drop into a bug report about another developer's package and mask it, especially after the temporarily solution was already acked by another developer.
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On Sun, Oct 9, 2011 at 11:22 AM, Markos Chandras hwoar...@gentoo.org wrote: I am not in QA fwiw just trying to keep a basic QA level in portage tree. Wait, what? If you're not even in QA, then who are you to start masking other people's packages?
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 10/09/11 02:47, Matt Turner wrote: On Sat, Oct 8, 2011 at 9:41 PM, Markos Chandras hwoar...@gentoo.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 10/08/11 22:45, Matt Turner wrote: On Sat, Oct 8, 2011 at 10:20 AM, Markos Chandras hwoar...@gentoo.org wrote: On 10/08/2011 02:19 PM, Matt Turner wrote: On Sat, Oct 8, 2011 at 4:47 AM, Samuli Suominen ssuomi...@gentoo.org wrote: # Samuli Suominen ssuomi...@gentoo.org (08 Oct 2011) # Fails to compile against system libpng15, bug 356127 # Removal in 14 days 14 days? media-gfx/pngcrush We can't really wait forever for slacking maintainers to fix their packages. amd64 is almost ready to have libpng-1.5 stable in the very near future Two things: 1) I'm *really* tired of the usage of the word slacking on this mailing list. If you or someone else wants to pay me to work on Gentoo, *then* you can tell me that I'm slacking. Otherwise, I'm a volunteer working on things that interest me in my free time. I truly do have more important things to do than to figure out how to port pngcrush to libpng1.5. Namely, graduate school and midterm exams. The bug is open since February (9 months). If you can't handle a bug in 9 months then maybe you should consider stepping down as a maintainer. Handling does not necessarily mean fixing. Masking could be an acceptable solution as well. The fact that nobody pays us does not mean that we can use that as an excuse for lower the QA barrier of portage tree. If only I got a $1 everytime I hear this excuse... Maybe you could check the fucking changelog and see that I added myself as a maintainer in August? Don't ever ask me for anything again. Watch your language. This is not your $home playroom - -- Regards, Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2 -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.18 (GNU/Linux) iQIcBAEBCgAGBQJOkWbhAAoJEPqDWhW0r/LCvBYQAKFNFKaK0hxXYtCVWmPHcf7D RIWs5LtXMXrAaJwR/YRCbIncsWxn6QvEaPKjmovO3WQ5AAOKcFdHMwFqhLipXPfS Oyn0NAdwZjXFNrOwC88Usfhu0G5yMqqcbF3IucdR538cZS1UA045zmGdkSs1JObp J7JF1Ac0xv/iVSMsUcvp8e6CNtet/dwj48FdG3gt5dM4F9KkJMwPd87UsomcvjPm IZMAj+7+yG4JUfabXbBJK9FVw3tLMmBc67xBDyO0Jn4T7X3o6lUapySNHdWApH65 dSPxG5QhH1Knlv6xP238RG2R43AEqBWWyG5IQjim6VwOIE1Z0rYLI+MfvQDHdyFy BjX+HdXCRoMqsOVvBYvNUAx9yG+5b7iJFsIOKjlE7xaRDA1L/U6+Ltw8xG2ETosO /0zq9MNvSnUXAvwyvyENcZj3Dnq+TYo67Se7WUIbhtbcT3XIKEo0Fn3FRufCEJIO AIjm1/8GI1vIgyfzbVlGgiS0POnrR2sb9jpvcy+7GFADY60TwLT9NgbuIGsO5aK8 ykbUEfNqqxOB7S3KwbEVafDX4FLRnS8nk3vH13jz9wDUlfr/wQ6B8Su5eEEtE3zy FrX4Hqyx+QyncuHyzABqehVVP0H8fyUrpIj07NwA4AaR9kuY6appZftGxxrYl5H4 0cOpv+TR4hLn+iBCbuGF =7iBJ -END PGP SIGNATURE-
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On Sun, Oct 9, 2011 at 5:18 AM, Markos Chandras hwoar...@gentoo.org wrote: Watch your language. This is not your $home playroom And it's not your mailing list. I'm sure I'm not the only one that's tired of your Let Me Insert Myself Into Everything syndrome just because you're on QA. QA's a joke that's only used as a stick to bludgeon other developers with.
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 10/09/11 16:15, Matt Turner wrote: On Sun, Oct 9, 2011 at 5:18 AM, Markos Chandras hwoar...@gentoo.org wrote: Watch your language. This is not your $home playroom And it's not your mailing list. I'm sure I'm not the only one that's tired of your Let Me Insert Myself Into Everything syndrome just because you're on QA. QA's a joke that's only used as a stick to bludgeon other developers with. I am not in QA fwiw just trying to keep a basic QA level in portage tree. - -- Regards, Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2 -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.18 (GNU/Linux) iQIcBAEBCgAGBQJOkbwZAAoJEPqDWhW0r/LC8JUP/jAFGT5tDyeqg8jr+WxYp/Z5 YQzadcHOh6vhM60O+mTJeC8ycwRn/fBQXLzvYRtcUytkrUjreBKNwQbvfyPK9F/g 4cW2pwa+QH9w/lGHhsdvvl6qV3rBWZu8BzTUkclIuSLwWrOfBE/Gn/WahBT3wLbw msjBq837FTTukQUKnFf8HBIotiiikecniNvuINjGKvPmts9C8O5Vu5QOIhNQKltC mtF9rC9uAuSJuc5m46YCB8RLZpQpw0eZogfCBryRRnd5jv7/B1bTbKfTAtWmwHdf fXvdAzPsDrb5otRuZYGfmmYtN1tItV87L6kjt8YxT5mv/Gaq4Udy+h32hAOjZJzy DlsF3xhdZfzVUvEHEkKCxcVqQLBP5LaWmCTOcKYZL8NzZRoLbuOo9VPozc+ayRid LI13urz7C2fEsb52dWCpO439reZtmWuFTjzIc41p3kMKmbB8ZgvI1HLESQQp6uK4 aGavTdac64rB/iR/jbnnkNvgrC+zPzgjV7eUKELH77krhJ/Jq+LWPY8RMYs3Km1n +60PzfumFVEp2C/Nk7efOip66QRuNUNU040l3AIGNNFM56OLIJuONXx4uOUViyc0 SszGzPF0OVNzRWMX2Z4BlMkSgpOneInf4v3Ak0EqX/W/0xo/FnDzLCUtik8KwTMz elVdrJNXCjXa7O+srCE1 =s+wQ -END PGP SIGNATURE-
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On Sat, Oct 8, 2011 at 4:47 AM, Samuli Suominen ssuomi...@gentoo.org wrote: # Samuli Suominen ssuomi...@gentoo.org (08 Oct 2011) # Fails to compile against system libpng15, bug 356127 # Removal in 14 days 14 days? media-gfx/pngcrush
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On 10/08/2011 04:19 PM, Matt Turner wrote: On Sat, Oct 8, 2011 at 4:47 AM, Samuli Suominen ssuomi...@gentoo.org wrote: # Samuli Suominen ssuomi...@gentoo.org (08 Oct 2011) # Fails to compile against system libpng15, bug 356127 # Removal in 14 days 14 days? approx. 14 days and counting to CC archteams in the libpng15 stabilization bug. the same day the tree is fully prepared for it. the same day amd64 moves it to stable. should come as no suprise to anyone at this point... media-gfx/pngcrush
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 10/08/2011 02:19 PM, Matt Turner wrote: On Sat, Oct 8, 2011 at 4:47 AM, Samuli Suominen ssuomi...@gentoo.org wrote: # Samuli Suominen ssuomi...@gentoo.org (08 Oct 2011) # Fails to compile against system libpng15, bug 356127 # Removal in 14 days 14 days? media-gfx/pngcrush We can't really wait forever for slacking maintainers to fix their packages. amd64 is almost ready to have libpng-1.5 stable in the very near future - -- Regards, Markos Chandras / Gentoo Linux Developer / Key ID: B4AFF2C2 -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.18 (GNU/Linux) iQIcBAEBCgAGBQJOkFxIAAoJEPqDWhW0r/LCDf4P/jPUyoxorEdg6dxl9PfHMvZw tmSICvBsqqcd0QRAJ77UKUqoiS/QrPdu/JSvSjJul7wxl86CYoNtgUKF1vYPhxOb akWxBQxkxHdGjWLQl8ScfueW0eMemMaXaM3dV9ZTCPj8Y0jVS9+SMfTbQXjflZ+N 7A0QPoW0Y8/U8wKjqFyS2HhR1s6KnGYKzoPXb2PdyEWG1CJ9d2iK+RGUNoVEBzxs HaE3pe7lMkboERhKd2U1grrGDUnsGvJyn6mHo1Q7Jz28eZ3V/tFrYEN9n3AgqYj4 ANvYtUZwdSXeRnp6JxrSUJGo6yqtwVYc2td/V0+x3hxt2gzhyq31ji4kRBq/8jQ2 ZrQ6DKz6aiWLnZS6Oouv5tUr5HPg+qMdNjoOFUz5CxwrfaESQyBS9QxYYhUU3gPh fF/KZjnkxWx7WTddqBuawqn08KdY0BMIdPvXZZFG2At2ftOlv+ItMSPPRLJfF/ee ew5SYw0HHa37vYTx30rgS/YfrrWKhpdvvNSw94VYfN1YHgSZmqrLQhooJxbt+q3h sZWc3L7N9LADZ1ZdqHrrHUZfICCt0JkwlR2TXQ247M06ajPbJu3Vl5EKCR1XGJ+L DfCFJ72ZriMNvgipfvjUAb4G2FzrEu/5Tt3LEhBC8Zj9Hpnt1ia8lJSasnwnhVzW TtTkXrCoZlaK9Djri5AD =4gEc -END PGP SIGNATURE-
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On 08-10-2011 15:20:56 +0100, Markos Chandras wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 10/08/2011 02:19 PM, Matt Turner wrote: On Sat, Oct 8, 2011 at 4:47 AM, Samuli Suominen ssuomi...@gentoo.org wrote: # Samuli Suominen ssuomi...@gentoo.org (08 Oct 2011) # Fails to compile against system libpng15, bug 356127 # Removal in 14 days 14 days? media-gfx/pngcrush We can't really wait forever for slacking maintainers to fix their packages. amd64 is almost ready to have libpng-1.5 stable in the very near future http://www.gentoo.org/proj/en/devrel/handbook/handbook.xml?part=2chap=5#doc_chap8 -- Fabian Groffen Gentoo on a different level signature.asc Description: Digital signature
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On 08-10-2011 15:49:00 +0100, Markos Chandras wrote: We can't really wait forever for slacking maintainers to fix their packages. amd64 is almost ready to have libpng-1.5 stable in the very near future http://www.gentoo.org/proj/en/devrel/handbook/handbook.xml?part=2chap=5#doc_chap8 In fact, like Samuli said, the waiting period is 14+days for ATs to test is an become stable which will be more than 30. No reason to s/14/30/ No reason then to confuse people by suggesting the opposite either. -- Fabian Groffen Gentoo on a different level signature.asc Description: Digital signature
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On Sat, Oct 8, 2011 at 10:20 AM, Markos Chandras hwoar...@gentoo.org wrote: On 10/08/2011 02:19 PM, Matt Turner wrote: 14 days? We can't really wait forever for slacking maintainers to fix their packages. amd64 is almost ready to have libpng-1.5 stable in the very near future Didn't we just do this thread a few days ago? :) Matt - will an extra 16 days make any difference? This bug has been open since Feb. Will something happen in 30 days that won't happen in 14? Next, time, though posting an FYI - we're masking blockers on Oct 7th or whatever would probably make some happier. If the extra 16 days will actually accomplish something beyond just delaying libpng then we can debate the finer points of policy. However, if we're just arguing policy for its own sake then I don't see the value. Perhaps a package maintainer might have the right to a few weeks to fix things, but in the end you have to put the distro and its users first. You can do that either by speaking up or standing aside, but if you're going to speak up, then make sure you can follow through. Rich
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On 08-10-2011 11:05:08 -0400, Rich Freeman wrote: If the extra 16 days will actually accomplish something beyond just delaying libpng then we can debate the finer points of policy. However, if we're just arguing policy for its own sake then I don't see the value. Perhaps a package maintainer might have the right to a few weeks to fix things, but in the end you have to put the distro and its users first. You can do that either by speaking up or standing aside, but if you're going to speak up, then make sure you can follow through. It seems to me like you say here that any policy that Gentoo has that you just don't like can be ignored because, well, you just don't like it. We can discuss whether or not the policy is ok, but should we ignore the policy for that reason? I think not. -- Fabian Groffen Gentoo on a different level signature.asc Description: Digital signature
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
Guys, the policy makes perfect sense, there are people that sync just monthly, so they might want to get some headsup why their packages are going away, and not just remove them. Thats why the recommended value is 60 days, 30 for urgent cases, lately we just moved to 30 for everything, but please stick with that, do not make it lower. This is not about waiting for maintainer, or slowing up distro, but letting our users to catch up with what we do. As a side note masked packages CAN be broken, so the stab can proceed from the point you mask all the broken ones. Tom
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On 10/08/2011 06:13 PM, Fabian Groffen wrote: On 08-10-2011 11:05:08 -0400, Rich Freeman wrote: If the extra 16 days will actually accomplish something beyond just delaying libpng then we can debate the finer points of policy. However, if we're just arguing policy for its own sake then I don't see the value. Perhaps a package maintainer might have the right to a few weeks to fix things, but in the end you have to put the distro and its users first. You can do that either by speaking up or standing aside, but if you're going to speak up, then make sure you can follow through. It seems to me like you say here that any policy that Gentoo has that you just don't like can be ignored because, well, you just don't like it. We can discuss whether or not the policy is ok, but should we ignore the policy for that reason? I think not. It's not like fastened lastriting hasn't happened before. I question your motives in picking this particular one. It's not like I expected cookies for the time I've put into this porting effort, but not this attack either. whatever - Samuli
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On 08-10-2011 18:33:15 +0300, Samuli Suominen wrote: It's not like fastened lastriting hasn't happened before. I question your motives in picking this particular one. It's not like I expected cookies for the time I've put into this porting effort, but not this attack either. If you feel I'm attacking you, then I apologise. My personal feeling is that my response was very mild and not directed to you. I haven't responded to your earlier fastened lastriting messages on purpose. Now that Matt brought it up for this package, I just liked to point out that we have a policy, that was made for some reason, and that you violated it. I realise that it may look like I'm picking just on you. I'm not. This is the risk you run as one of the top committers of Gentoo. I think you do a lot of good work, and I hope you'll keep on doing so for a long time. You just tend to change rules as you see fit every once in a while, which is a bad thing for Gentoo. I don't like all policies either, but I stick to them (for as far as I'm aware of them), because if we all would start to ignore what we don't like, then what would be the point in having those policies at first? Again, this doesn't mean that each policy in its current form is de-facto the best thing or something like that. -- Fabian Groffen Gentoo on a different level signature.asc Description: Digital signature
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On Sat, Oct 8, 2011 at 10:20 AM, Markos Chandras hwoar...@gentoo.org wrote: On 10/08/2011 02:19 PM, Matt Turner wrote: On Sat, Oct 8, 2011 at 4:47 AM, Samuli Suominen ssuomi...@gentoo.org wrote: # Samuli Suominen ssuomi...@gentoo.org (08 Oct 2011) # Fails to compile against system libpng15, bug 356127 # Removal in 14 days 14 days? media-gfx/pngcrush We can't really wait forever for slacking maintainers to fix their packages. amd64 is almost ready to have libpng-1.5 stable in the very near future Two things: 1) I'm *really* tired of the usage of the word slacking on this mailing list. If you or someone else wants to pay me to work on Gentoo, *then* you can tell me that I'm slacking. Otherwise, I'm a volunteer working on things that interest me in my free time. I truly do have more important things to do than to figure out how to port pngcrush to libpng1.5. Namely, graduate school and midterm exams. 2) What exactly is it that you want me to do here? Upstream is aware of the problem, and seems to be working on it as there are comments about libpng15 in pngcrush.c. Hanno kindly stepped in and made pngcrush use a bundled libpng14 (and at the same time bundled zlib, which has now been fixed), which you promptly masked. I'm not sure if the problem is bundled libs in general or specifically zlib, but we *know* it's distasteful. It's not like that's a preferred or permanent solution. Do you find that somehow more distasteful than removing a piece of software from from portage that's been in the tree since 2002?
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On Sat, Oct 8, 2011 at 9:41 PM, Markos Chandras hwoar...@gentoo.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 10/08/11 22:45, Matt Turner wrote: On Sat, Oct 8, 2011 at 10:20 AM, Markos Chandras hwoar...@gentoo.org wrote: On 10/08/2011 02:19 PM, Matt Turner wrote: On Sat, Oct 8, 2011 at 4:47 AM, Samuli Suominen ssuomi...@gentoo.org wrote: # Samuli Suominen ssuomi...@gentoo.org (08 Oct 2011) # Fails to compile against system libpng15, bug 356127 # Removal in 14 days 14 days? media-gfx/pngcrush We can't really wait forever for slacking maintainers to fix their packages. amd64 is almost ready to have libpng-1.5 stable in the very near future Two things: 1) I'm *really* tired of the usage of the word slacking on this mailing list. If you or someone else wants to pay me to work on Gentoo, *then* you can tell me that I'm slacking. Otherwise, I'm a volunteer working on things that interest me in my free time. I truly do have more important things to do than to figure out how to port pngcrush to libpng1.5. Namely, graduate school and midterm exams. The bug is open since February (9 months). If you can't handle a bug in 9 months then maybe you should consider stepping down as a maintainer. Handling does not necessarily mean fixing. Masking could be an acceptable solution as well. The fact that nobody pays us does not mean that we can use that as an excuse for lower the QA barrier of portage tree. If only I got a $1 everytime I hear this excuse... Maybe you could check the fucking changelog and see that I added myself as a maintainer in August? Don't ever ask me for anything again.
Re: [gentoo-dev] Lastrite: media-gfx/pngcrush
On Sat, Oct 8, 2011 at 9:41 PM, Markos Chandras hwoar...@gentoo.org wrote: 1) use bundled zlib and libpng14. Doh this is not a fix. It is barely a workaround. What if a vulnerability is discovered in the bundled version of libpng in the next months? Will upstream fix it? Highly unlikely since they don't seem able to keep up with libpng releases. I'm no sure why a bundled library needs to be cause for masking. If there is a vulnerability, of course we should mask away if we can't fix it within the GLSA guidelines. I think that the general principle of not bundling libraries is a good one. However, that shouldn't be the sole reason for excluding a package from the tree, and right now I can't see any other reason to exclude this package since bundling the library fixes the block. I haven't seen any evidence presented that upstream is lax with security - not using the latest version of a library simply is a case of if it ain't broke, don't fix it. Rich
