On Fri, Dec 10, 2010 at 04:05:09PM -0500, Michael Gilbert wrote:
On Fri, 10 Dec 2010 21:24:57 +0100, Jonas Smedegaard wrote:
[snip]
>On Thu, Dec 09, 2010 at 10:48:46PM -0500, Michael Gilbert wrote:>> I've isolated and applied the patches needed to fix CVE-2010-2055 >> in ghostscript. See attached debdiff.>>>> Would anyone be so kind to sponsor this? The package is at: >> http://mentors.debian.net/debian/pool/main/g/ghostscript/
[snip]
@Michael: Sorry, I won't sponsor your patch. As stated earlier as well, I consider myself incompetent juggling any more patches on top of the 8.71 stack.The patches are actually rather small.
Still. Most of the 55 existing patches are rather small as well. It all adds up.
You are quite welcome to join the ghostscript packaging team and take responsibility of it yourself - for the full duration of the next stable release cycle!What exactly do you want me to do?
I want you not only to provide a patch, but devote interest and time in maintaining the patched ghostscript for 2-3 years.
Not alone - I am still around - but I do hope you will be more active than my two other fellow maintainers: They have been silent here for more than a year now :-(
I'm a DM, so I can't upload myself (without dm-upload-allowed). I could add that, but I still need an initial sponsor.
You are a DM. That's great - as that indicates you are not new to maintaining packages.
What I propose is that you join a team. Which means we work together - teamwork.
Sponsoring is different: It is you working on your own, and me approving your work.
You are right that technically I need to (initially) upload, no matter what we call it, but the important thing for me is that you are long-term committed to working on this, not just short-term "fixing a bug".
In the meantime I've joined the ghostscript mailing list and requested to join the alioth project.
Seems you are interested, then. Great!You probably requested to join the ghostscript project. Confusingly that's not relevant: ghostscript git is hosted in the collab-maint project. Please request membership of that (if you are not member already - I do not rmember if DMs are automagically member there), and mention as explanation that you need it to work on the ghostscript package.
- Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private
signature.asc
Description: Digital signature
