On Fri, Mar 01, 2013 at 09:06:12PM +0100, Thomas Müller wrote: > > Am Freitag, dem 01.03.2013 um 20:12 schrieb David Prévot: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA256 > > > > Hi, > > > > Le 01/03/2013 12:54, Moritz Mühlenhoff a écrit : > > > I'm skeptical that owncloud should be shipped in Wheezy. It has > > > frequent security issues and the initial maintainers appear to > > > be inactive, all updates after October have been NMUs... > > > > Including owncloud maintainers to the loop in hope this wake up call > > from the security team could lead to some visible activity, or if > > previous NMUers would be happy to join the team, if such a team could be > > set up, or whatever positive sign in that regard. > > > > Talking to you with the hat of an ownCloud core developer on my head: > We will release OC5 in 2-3 weeks which will lead to 3 stable version to be maintained: > 4.0.x, 4.5.x and 5.0.x which is a tough job. I would not be surprised if 4.0.x will be > dropped within 2013 and then maintenance will be a pure nightmare. This is a grave concern. Having OC5 in Wheezy is just not going to be an option; having to carry security support on our own for three years for 4.0.x equally so. Having an upstream developer on the Debian packaging team would be a help, of course, but we can't ignore the recent NMU history of the package. I don't mean to blame anyone, facts are facts. > Talking to you with the hat of an almost inactive package maintainer: > Sorry for the inactivity - sometimes it's simply too much! > Any other debain devs and maintainers are welcome to join our team and keep the package alive! > Paul and myself spend many nighty in April 2012 to get ownCloud into Wheezy before the freeze. > It really would be sad to see it being dropped! :-( It would indeed be sad but we don't have many options at this stage. I will put my cards on the table and say I favour having a good quality package in backports and the chance for ownCloud to be in Jessie. I suggest there is a further week or so for the maintainers to put together a maintenance plan if they wish but after that we look seriously at removal. -- Jonathan Wiltshire jmw@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 <directhex> i have six years of solaris sysadmin experience, from 8->10. i am well qualified to say it is made from bonghits layered on top of bonghits
Attachment:
signature.asc
Description: Digital signature