EPEL 7 retirement of findbugs-bcel

[Richard Fearn]

Hi all,

In July 2021 I retired the FindBugs packages from Fedora:

https://lists.fedoraproject.org/archives/list/[e-mail].o...

This included the findbugs-bcel package, which was an old snapshot of
Apache Commons BCEL packaged for use by FindBugs. findbugs-bcel is
still present in EPEL 7, but has just had a CVE bug filed against it:

https://bugzilla.redhat.com/show_bug.cgi?id=2142726

Rather than attempt to address this vulnerability, and since FindBugs
was never packaged for EPEL 7, I intend to retire findbugs-bcel from
EPEL 7.

As per the EPEL Package Retirement guidelines
(https://docs.fedoraproject.org/en-US/epel/epel-policy-retirement/),
I'm sending this email to announce my proposal to retire it.

According to repoquery, no other packages depend on findbugs-bcel.

Regards,

Richard

-- 
Richard Fearn
richardfearn(a)gmail.com

[Stephen Smoogen]

On Sun, 27 Nov 2022 at 14:32, Richard Fearn <richardfearn(a)gmail.com&gt; wrote:

>  Hi all,
>
>  In July 2021 I retired the FindBugs packages from Fedora:
>
>  
Thanks for announcing the retirement and giving a good example for how
people should do so in the future.


-- 
Stephen Smoogen, Red Hat Automotive
Let us be kind to one another, for most of us are fighting a hard battle.
-- Ian MacClaren

[Richard Fearn]

It looks like the next step is to get this on the agenda for the EPEL
Steering Committee meeting.

Should I create a ticket here? https://pagure.io/epel/issues

Regards,

Richard

-- 
Richard Fearn
richardfearn(a)gmail.com

[Troy Dawson]

Yes, and if you can, tag it with "meeting"
If it doesn't let you tag it with meeting, let me know and I'll do it.

On Fri, Dec 2, 2022 at 11:49 AM Richard Fearn <richardfearn(a)gmail.com&gt;
wrote:

>  It looks like the next step is to get this on the agenda for the
> EPEL
>  Steering Committee meeting.
>
>  Should I create a ticket here? https://pagure.io/epel/issues
>
>  Regards,
>
>  Richard
>
>  --
>  Richard Fearn
>  richardfearn(a)gmail.com
>  _______________________________________________
>  epel-devel mailing list -- epel-devel(a)lists.fedoraproject.org
>  To unsubscribe send an email to epel-devel-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedoraproject.org/archives/list/[e-mail]...
>  Do not reply to spam, report it:
>  https://pagure.io/fedora-infrastructure/new_issue
>

[Richard Fearn]

Hi Troy,

Please add the meeting tag - I can't see a way to do it.

https://pagure.io/epel/issue/210

Thanks!

Richard

On Fri, 2 Dec 2022 at 21:21, Troy Dawson <tdawson(a)redhat.com&gt; wrote:
>  Yes, and if you can, tag it with "meeting"
>  If it doesn't let you tag it with meeting, let me know and I'll do it.
>
>  On Fri, Dec 2, 2022 at 11:49 AM Richard Fearn <richardfearn(a)gmail.com&gt; wrote:
> >
> > It looks like the next step is to get this on the agenda for the EPEL
> > Steering Committee meeting.
> >
> > Should I create a ticket here? https://pagure.io/epel/issues
> >
> > Regards,
> >
> > Richard
> >
> > --
> > Richard Fearn
> > richardfearn(a)gmail.com
> > _______________________________________________
> > epel-devel mailing list -- epel-devel(a)lists.fedoraproject.org
> > To unsubscribe send an email to epel-devel-leave(a)lists.fedoraproject.org
> > Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]...
> > Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
>
>  _______________________________________________
>  epel-devel mailing list -- epel-devel(a)lists.fedoraproject.org
>  To unsubscribe send an email to epel-devel-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]...
>  Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue


-- 
Richard Fearn
richardfearn(a)gmail.com