„Entschuldigung für die vielen Security Fixe“

Aus der Schmunzelecke von Fedora … könnte man meinen …

Update Chromium to 99.0.4844.51. Fixes, well, a LOT of security bugs. Sorry
about that.  CVE-2021-22570 CVE-2022-0096 CVE-2022-0097 CVE-2022-0098
CVE-2022-0099 CVE-2022-0100 CVE-2022-0101 CVE-2022-0102 CVE-2022-0103
CVE-2022-0104 CVE-2022-0105 CVE-2022-0106 CVE-2022-0107 CVE-2022-0108
CVE-2022-0109 CVE-2022-0110 CVE-2022-0111 CVE-2022-0112 CVE-2022-0113
CVE-2022-0114 CVE-2022-0115 CVE-2022-0116 CVE-2022-0117 CVE-2022-0118
CVE-2022-0120 CVE-2022-0789 CVE-2022-0790 CVE-2022-0791 CVE-2022-0792
CVE-2022-0793 CVE-2022-0794 CVE-2022-0795 CVE-2022-0796 CVE-2022-0797
CVE-2022-0798 CVE-2022-0799 CVE-2022-0800 CVE-2022-0801 CVE-2022-0802
CVE-2022-0803 CVE-2022-0804 CVE-2022-0805 CVE-2022-0806 CVE-2022-0807
CVE-2022-0808 CVE-2022-0809

… ist es aber nicht 🙁

„Entschuldigung für die vielen Security Fixe“

Der Hintergrund ist, daß vor einigen Tagen festgestellt wurde, daß Chromium bei Securityfixen weit hinten lag bei Fedora, weil wichtige Security-Fixe nicht durch Updates verteilt wurden. Der Maintainer war leider nicht so aktiv, wie es das Projekt erfordert.

Das wurde nun offensichtlich von Tom nachgeholt, der in der Vergangenheit eigentlich als sehr aktiver Maintainer aufgefallen war. Man weiß nicht, was dazu führte und spekulieren will ich da auch nicht.

Ich fordere analog zum Sysadmin-Tag noch den Maintainer-Tag einzuführen. Wer nicht so lange warten will, kann seinen Lieblingsmaintainern ja auch einfach mal ein dickes „Thank You“ per Email schicken, was deutlich zur Langzeitmotivation der Menschen beiträgt, die für uns die Arbeit machen!

Und so kommt man die Mailadressen ran

Unter Fedora ist das relativ einfach: Entweder Ihr abonniert die Package-Announce Mailingliste „package-announce@lists.fedoraproject.org“ oder Ihr schaut ins Changelog des Pakets auf Eurem PC rein:

# rpm -qi –changelog httpd | grep „@“ | head -n 1
* Do Okt 07 2021 Patrick Uiterwijk <patrick@puiterwijk.org> – 2.4.51-1

Ich glaube, den muß ich auch mal motivieren 😀

Fedora: Weisen suchen Maintainer

Vor einigen Wochen hatte ich schon einmal auf die erwünschte Hilfe beim Packagemaintaining für Fedora hingewiesen:  Fedora braucht Maintainer

Hier die aktuelle Liste von Paketen in Nöten:

            Package                      (co)maintainers           Status Change
================================================================================
PyMca                             orphan                           3 weeks ago
Ray                               orphan                           3 weeks ago
aeskulap                          orphan                           1 weeks ago
ahkab                             orphan                           2 weeks ago
arc-theme                         besser82, dbenoit, nonamedotc,   0 weeks ago
                                  orphan
cmusphinx3                        jjames, orphan                   7 weeks ago
cwiid                             orphan                           3 weeks ago
dvdbackup                         cicku, orphan                    1 weeks ago
emacs-pymacs                      orphan                           1 weeks ago
gnome-dvb-daemon                  orphan                           1 weeks ago
gnome-shell-extension-            orphan                           1 weeks ago
openweather
gnome-shell-extension-panel-osd   orphan                           1 weeks ago
gnue-common                       orphan                           3 weeks ago
jam-control                       orphan                           3 weeks ago
lightdm-gtk                       cwickert, dbenoit, orphan,       3 weeks ago
                                  rdieter
ltspfs                            enslaver, orphan                 0 weeks ago
ninja-ide                         echevemaster, orphan             0 weeks ago
nodejs-after                      nodejs-sig, orphan               5 weeks ago
nodejs-alter                      nodejs-sig, orphan               5 weeks ago
nodejs-ansi-font                  nodejs-sig, orphan               5 weeks ago
nodejs-ansidiff                   nodejs-sig, orphan               5 weeks ago
nodejs-archiver                   nodejs-sig, orphan               5 weeks ago
nodejs-archiver-utils             nodejs-sig, orphan               5 weeks ago
nodejs-ast-traverse               nodejs-sig, orphan               5 weeks ago
nodejs-ast-types                  nodejs-sig, orphan               5 weeks ago
nodejs-astral                     nodejs-sig, orphan               5 weeks ago
nodejs-astral-angular-annotate    nodejs-sig, orphan               5 weeks ago
nodejs-astral-pass                nodejs-sig, orphan               5 weeks ago
nodejs-async-cache                nodejs-sig, orphan               5 weeks ago
nodejs-async-each                 nodejs-sig, orphan               5 weeks ago
nodejs-aws-sign2                  nodejs-sig, orphan               5 weeks ago
nodejs-base64-js                  nodejs-sig, orphan               5 weeks ago
nodejs-basic-auth-parser          nodejs-sig, orphan               5 weeks ago
nodejs-bl                         nodejs-sig, orphan               5 weeks ago
nodejs-bluebird                   nodejs-sig, orphan               5 weeks ago
nodejs-breakable                  nodejs-sig, orphan               5 weeks ago
nodejs-camel-case                 nodejs-sig, orphan               5 weeks ago
nodejs-caniuse-db                 nodejs-sig, orphan               5 weeks ago
nodejs-change-case                nodejs-sig, orphan               5 weeks ago
nodejs-clean-css                  nodejs-sig, orphan               5 weeks ago
nodejs-clone                      nodejs-sig, orphan               5 weeks ago
nodejs-cls                        nodejs-sig, orphan               5 weeks ago
nodejs-co                         nodejs-sig, orphan               5 weeks ago
nodejs-commoner                   nodejs-sig, orphan               5 weeks ago
nodejs-compress-commons           nodejs-sig, orphan               5 weeks ago
nodejs-console-browserify         nodejs-sig, orphan               5 weeks ago
nodejs-constant-case              nodejs-sig, orphan               5 weeks ago
nodejs-crc32-stream               nodejs-sig, orphan               5 weeks ago
nodejs-dashdash                   nodejs-sig, orphan               5 weeks ago
nodejs-date-now                   nodejs-sig, orphan               5 weeks ago
nodejs-deferred                   nodejs-sig, orphan               5 weeks ago
nodejs-defs                       nodejs-sig, orphan               5 weeks ago
nodejs-degenerator                nodejs-sig, orphan               5 weeks ago
nodejs-dom-serializer             nodejs-sig, orphan               5 weeks ago
nodejs-domelementtype             nodejs-sig, orphan               5 weeks ago
nodejs-domhandler                 nodejs-sig, orphan               5 weeks ago
nodejs-domutils                   nodejs-sig, orphan               5 weeks ago
nodejs-dot-case                   nodejs-sig, orphan               5 weeks ago
nodejs-dreamopt                   nodejs-sig, orphan               5 weeks ago
nodejs-each-async                 nodejs-sig, orphan               5 weeks ago
nodejs-entities                   nodejs-sig, orphan               5 weeks ago
nodejs-etag                       nodejs-sig, orphan               5 weeks ago
nodejs-extend                     nodejs-sig, orphan               5 weeks ago
nodejs-extsprintf                 nodejs-sig, orphan               5 weeks ago
nodejs-far                        nodejs-sig, orphan               5 weeks ago
nodejs-fd                         nodejs-sig, orphan               5 weeks ago
nodejs-fg-lodash                  nodejs-sig, orphan               5 weeks ago
nodejs-file-uri-to-path           nodejs-sig, orphan               5 weeks ago
nodejs-fn-name                    nodejs-sig, orphan               5 weeks ago
nodejs-formatio                   nodejs-sig, orphan               5 weeks ago
nodejs-fs2                        nodejs-sig, orphan               5 weeks ago
nodejs-ftp                        nodejs-sig, orphan               5 weeks ago
nodejs-generate-function          nodejs-sig, orphan               5 weeks ago
nodejs-generate-object-property   nodejs-sig, orphan               5 weeks ago
nodejs-get-stdin                  nodejs-sig, orphan               5 weeks ago
nodejs-get-uri                    nodejs-sig, orphan               5 weeks ago
nodejs-grunt-angular-templates    nodejs-sig, orphan               5 weeks ago
nodejs-grunt-contrib-connect      nodejs-sig, orphan               5 weeks ago
nodejs-grunt-contrib-cssmin       nodejs-sig, orphan               5 weeks ago
nodejs-grunt-contrib-htmlmin      nodejs-sig, orphan               5 weeks ago
nodejs-grunt-contrib-less         nodejs-sig, orphan               5 weeks ago
nodejs-grunt-contrib-requirejs    nodejs-sig, orphan               5 weeks ago
nodejs-grunt-known-options        nodejs-sig, orphan               5 weeks ago
nodejs-grunt-saucelabs            nodejs-sig, orphan               5 weeks ago
nodejs-grunt-util-args            nodejs-sig, orphan               5 weeks ago
nodejs-grunt-util-options         nodejs-sig, orphan               5 weeks ago
nodejs-grunt-util-process         nodejs-sig, orphan               5 weeks ago
nodejs-grunt-util-property        nodejs-sig, orphan               5 weeks ago
nodejs-har-validator              nodejs-sig, orphan               5 weeks ago
nodejs-hash_file                  nodejs-sig, orphan               5 weeks ago
nodejs-hock                       nodejs-sig, orphan               5 weeks ago
nodejs-html-minifier              nodejs-sig, orphan               5 weeks ago
nodejs-https-proxy-agent          nodejs-sig, orphan               5 weeks ago
nodejs-install                    nodejs-sig, orphan               5 weeks ago
nodejs-is-lower-case              nodejs-sig, orphan               5 weeks ago
nodejs-is-my-json-valid           nodejs-sig, orphan               5 weeks ago
nodejs-is-property                nodejs-sig, orphan               5 weeks ago
nodejs-is-typedarray              nodejs-sig, orphan               5 weeks ago
nodejs-is-upper-case              nodejs-sig, orphan               5 weeks ago
nodejs-isstream                   nodejs-sig, orphan               5 weeks ago
nodejs-istanbul                   nodejs-sig, orphan               5 weeks ago
nodejs-jison                      nodejs-sig, orphan               5 weeks ago
nodejs-jsonpointer                nodejs-sig, orphan               5 weeks ago
nodejs-log-symbols                nodejs-sig, orphan               5 weeks ago
nodejs-lolex                      nodejs-sig, orphan               5 weeks ago
nodejs-lower-case                 nodejs-sig, orphan               5 weeks ago
nodejs-lower-case-first           nodejs-sig, orphan               5 weeks ago
nodejs-mkfiletree                 nodejs-sig, orphan               5 weeks ago
nodejs-multiline                  nodejs-sig, orphan               5 weeks ago
nodejs-next                       nodejs-sig, orphan               5 weeks ago
nodejs-onetime                    nodejs-sig, orphan               5 weeks ago
nodejs-oop                        nodejs-sig, orphan               5 weeks ago
nodejs-opn                        nodejs-sig, orphan               5 weeks ago
nodejs-pac-proxy-agent            nodejs-sig, orphan               5 weeks ago
nodejs-pac-resolver               nodejs-sig, orphan               5 weeks ago
nodejs-param-case                 nodejs-sig, orphan               5 weeks ago
nodejs-parserlib                  nodejs-sig, orphan               5 weeks ago
nodejs-pascal-case                nodejs-sig, orphan               5 weeks ago
nodejs-path-case                  nodejs-sig, orphan               5 weeks ago
nodejs-path-exists                nodejs-sig, orphan               5 weeks ago
nodejs-pend                       nodejs-sig, orphan               5 weeks ago
nodejs-pify                       nodejs-sig, orphan               5 weeks ago
nodejs-portscanner                nodejs-sig, orphan               5 weeks ago
nodejs-private                    nodejs-sig, orphan               5 weeks ago
nodejs-proxy                      nodejs-sig, orphan               5 weeks ago
nodejs-recast                     nodejs-sig, orphan               5 weeks ago
nodejs-regenerator                nodejs-sig, orphan               5 weeks ago
nodejs-relateurl                  nodejs-sig, orphan               5 weeks ago
nodejs-requestretry               nodejs-sig, orphan               5 weeks ago
nodejs-require-directory          nodejs-sig, orphan               5 weeks ago
nodejs-run-parallel-limit         nodejs-sig, orphan               5 weeks ago
nodejs-safe-buffer                nodejs-sig, orphan, pnemade      5 weeks ago
nodejs-samsam                     nodejs-sig, orphan               5 weeks ago
nodejs-sauce-tunnel               nodejs-sig, orphan               5 weeks ago
nodejs-saucelabs                  nodejs-sig, orphan               5 weeks ago
nodejs-sentence-case              nodejs-sig, orphan               5 weeks ago
nodejs-sinon                      nodejs-sig, orphan               5 weeks ago
nodejs-smart-buffer               nodejs-sig, orphan               5 weeks ago
nodejs-snake-case                 nodejs-sig, orphan               5 weeks ago
nodejs-socks-client               nodejs-sig, orphan               5 weeks ago
nodejs-socks-proxy-agent          nodejs-sig, orphan               5 weeks ago
nodejs-st                         nodejs-sig, orphan               5 weeks ago
nodejs-std-mocks                  nodejs-sig, orphan               5 weeks ago
nodejs-stream-equal               nodejs-sig, orphan               5 weeks ago
nodejs-stream-to-array            nodejs-sig, orphan               5 weeks ago
nodejs-streamsink                 nodejs-sig, orphan               5 weeks ago
nodejs-string                     nodejs-sig, orphan               5 weeks ago
nodejs-stringstream               nodejs-sig, orphan               5 weeks ago
nodejs-strip-indent               nodejs-sig, orphan               5 weeks ago
nodejs-swap-case                  nodejs-sig, orphan               5 weeks ago
nodejs-tar-stream                 nodejs-sig, orphan               5 weeks ago
nodejs-title-case                 nodejs-sig, orphan               5 weeks ago
nodejs-tough-cookie               nodejs-sig, orphan               5 weeks ago
nodejs-upper-case                 nodejs-sig, orphan               5 weeks ago
nodejs-upper-case-first           nodejs-sig, orphan               5 weeks ago
nodejs-util                       nodejs-sig, orphan               5 weeks ago
nodejs-vary                       nodejs-sig, orphan               5 weeks ago
nodejs-verror                     nodejs-sig, orphan               5 weeks ago
nodejs-xregexp                    nodejs-sig, orphan               5 weeks ago
nodejs-yargs                      nodejs-sig, orphan               5 weeks ago
nodejs-zip-stream                 nodejs-sig, orphan               5 weeks ago
prover9                           orphan                           3 weeks ago
python-deltasigma                 orphan                           2 weeks ago
python-django-notifications-hq    orphan                           4 weeks ago
python-jabberbot                  orphan                           3 weeks ago
python-port-for                   orphan                           4 weeks ago
pywebkitgtk                       ivazquez, orphan, walters        0 weeks ago
qblade                            orphan                           7 weeks ago
rubygem-chunky_png                mmorsi, orphan                   1 weeks ago
rubygem-codemirror-rails          orphan                           1 weeks ago
rubygem-compass-960-plugin        orphan                           1 weeks ago
rubygem-fog                       orphan                           6 weeks ago
rubygem-fog-atmos                 orphan                           6 weeks ago
rubygem-fog-brightbox             orphan                           6 weeks ago
rubygem-fog-ecloud                orphan                           6 weeks ago
rubygem-fog-profitbricks          orphan                           6 weeks ago
rubygem-fog-radosgw               orphan                           6 weeks ago
rubygem-fog-riakcs                orphan                           6 weeks ago
rubygem-fog-sakuracloud           orphan                           6 weeks ago
rubygem-fog-serverlove            orphan                           6 weeks ago
rubygem-fog-softlayer             orphan                           6 weeks ago
rubygem-fog-storm_on_demand       orphan                           6 weeks ago
rubygem-fog-terremark             orphan                           6 weeks ago
rubygem-fog-vmfusion              orphan                           6 weeks ago
rubygem-fog-voxel                 orphan                           6 weeks ago
rubygem-jnunemaker-matchy         orphan, tdawson                  4 weeks ago
rubygem-kaminari                  orphan                           5 weeks ago
rubygem-map                       orphan                           4 weeks ago
rubygem-multipart                 orphan                           6 weeks ago
rubygem-rabl                      orphan                           7 weeks ago
rubygem-riot                      orphan                           7 weeks ago
rubygem-sprite-factory            orphan                           2 weeks ago
rubygem-webrat                    mmorsi, orphan                   1 weeks ago
sphinxbase                        jjames, orphan                   7 weeks ago
sphinxtrain                       jjames, orphan                   7 weeks ago
synaptic                          moceap, orphan                   8 weeks ago
thermald                          dbenoit, orphan                  3 weeks ago

Wer also einem dieser Pakete helfen will, z.b. weil bald eine Kniespiegelung ansteht und man Aeskulap als Viewer braucht, der kann sich vertrauensvoll an Miro Hrončok <mhroncok@redhat.com> wenden.

Fedora braucht Maintainer

Ich lese ja jetzt seit einiger Zeit auf der Fedora Developer Liste mit, da ich auch den Contributer Status anstrebe. Da fällt mir grade jetzt beim ersten RC von FC30 massiv auf, daß nicht genug Maintainer für alle Pakete vorhanden sind.

Nicht genug Maintainer

Einige Pakete sind verlassen und haben keinen Maintainer mehr, so daß sie über kurz oder lang aus der Distribution fliegen. Und das sind nicht nur kleine, eher unbekannte Programme, nein auch groovy, gradle, ant, apache-commons-*, avalon, clang, Teile von Eclipse, javacc und javamail um nur einige zu nennen.

Diese Pakete haben noch Maintainer zugewiesen, aber tragen schon die Markierung des Todes, so will ich das mal nennen, den Orphan Tag. Ihr Tag wird also kommen, wenn sich nichts ändert.

Deswegen hier der Aufruf, wenn Ihr C,C++,Java,Bash könnt und mit einem Compiler umzugehen wisst, dann überlegt Euch doch mal eine Karriere als Paketmaintainer. Die Arbeitszeiten sind flexibel, die Bezahlung miserable, das Lob nicht vorhanden, die Aufgabe ist wichtig und wer seinen Job gut macht, kann richtig was in der Welt bewegen.

https://developer.fedoraproject.org/