From owner-freebsd-ports@FreeBSD.ORG Tue Aug 10 15:04:34 2010 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 300C51065670 for ; Tue, 10 Aug 2010 15:04:34 +0000 (UTC) (envelope-from linimon@lonesome.com) Received: from mail.soaustin.net (lefty.soaustin.net [66.135.55.46]) by mx1.freebsd.org (Postfix) with ESMTP id 15CE78FC19 for ; Tue, 10 Aug 2010 15:04:33 +0000 (UTC) Received: by mail.soaustin.net (Postfix, from userid 502) id 5CEE18C065; Tue, 10 Aug 2010 10:04:33 -0500 (CDT) Date: Tue, 10 Aug 2010 10:04:33 -0500 From: Mark Linimon To: Helmut Schneider Message-ID: <20100810150433.GB32263@lonesome.com> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.18 (2008-05-17) Cc: freebsd-ports@freebsd.org Subject: Re: PRs for Typo3 time out X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Aug 2010 15:04:34 -0000 On Tue, Aug 10, 2010 at 10:56:44AM +0000, Helmut Schneider wrote: > in the past I created a few PRs with patches for important security > updates for typo3. Unfortunately they all timed out. > > What is the time GNATS is waiting for feedback of the maintainer? It's 14 days for a normal update or bugfix. For security problems, that doesn't matter: they should be fixed as soon as possible. If the security problem is not serious, I think it's fair to notify the maintainer before the commit; otherwise, it can go in immediately. > Does it make a difference if importance and/or severity are raised? No, not really. The values of these have been so over-set in GNATS that the only people that notice them are the bugbusting team. I try to keep the Severity=critical ones in order, but everything else is meaningless. > IMHO it is a problem if important security fixes are approved only > after a 14-day-or-more timeout. Are there mechanisms to avoid such a > delay? a) you can try adding "[security]" to the Synopsis line; this may help make it more visible. b) I will email the maintainer and ask if he is willing to transfer maintainership to you. In general, if people are having problems with how individual ports are maintained, they should email portmgr@FreeBSD.org and bring it to our attention directly. Thanks. mcl