[pkg-horde] Re: Dropping horde2

Ola Lundqvist ola at opalsys.net
Mon Jan 30 09:22:43 UTC 2006


Hello

On Mon, Jan 30, 2006 at 09:01:58AM +0100, Lionel Elie Mamane wrote:
> On Mon, Jan 30, 2006 at 06:53:11AM +0100, Ola Lundqvist wrote:
> > On Sun, Jan 29, 2006 at 09:33:12PM +0100, Lionel Elie Mamane wrote:
> >> On Sun, Jan 29, 2006 at 06:15:23PM +0000, Neil McGovern wrote:
> 
> >>>  kronolith seems to be fairly badly coded wrt security issues
> >>> though. I'd suggest depreciating kronolith1 and forcing people on
> >>> to kronolith2, whcih although only a little better, is actually
> >>> supported upstream.
> 
> >> The problem is that kronolith2 depends on version 3 of the horde
> >> framework (rather than version 2), that the two versions of horde
> >> cannot meaningfully cooperate and there are still some horde2
> >> applications that have not been ported to horde3. Basically,
> >> upstream has abandoned horde2 before they ported all their OWN code
> >> to horde3.
> 
> >> So dropping horde2 is a regression, which explains why we haven't
> >> done it yet. But I'm toying with the idea, as we cannot
> >> meaningfully support it anyway. Ola, your opinion?
> 
> > If kronolith1 (named kronolith) can not be fixed, and is not
> > supported at all by upstream I think we should drop it.
> 
> I was talking about dropping horde2 and all the apps for it. None of
> them is supported upstream, are they? Hmmm... Now I see that they
> security-updated Horde2 (November 2005), but none of the apps. I'm
> confused. Do we have a statement by them on the extent they *do*
> support it or not? If not, maybe we should just straight ask them?
> 
> I propose:
> 
>  1) If upstream commits to security support the horde2 suite for the
>     etch timeframe, we keep it.

They do not. No guarantees anyway.

>  2) If upstream has completely dropped support (even security) for
>     horde2 and its apps, drop them.

Officially they do not support it at all anymore. They have made some
exceptions though.

I suggest we drop them all from Debian unstable/testing, now when sarge
has been released.

Regards,

// Ola

> -- 
> Lionel
> 

-- 
 --- Ola Lundqvist systemkonsult --- M Sc in IT Engineering ----
/  ola at opalsys.net                   Annebergsslingan 37        \
|  opal at debian.org                   654 65 KARLSTAD            |
|  http://www.opal.dhs.org           Mobile: +46 (0)70-332 1551 |
\  gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9  /
 ---------------------------------------------------------------



More information about the pkg-horde-hackers mailing list