From nobody Sat Mar 30 16:00:08 2024 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4V6MS946RLz5FvLS; Sat, 30 Mar 2024 16:00:25 +0000 (UTC) (envelope-from fernando.apesteguia@gmail.com) Received: from mail-lj1-x22e.google.com (mail-lj1-x22e.google.com [IPv6:2a00:1450:4864:20::22e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4V6MS861Rzz4HgX; Sat, 30 Mar 2024 16:00:24 +0000 (UTC) (envelope-from fernando.apesteguia@gmail.com) Authentication-Results: mx1.freebsd.org; none Received: by mail-lj1-x22e.google.com with SMTP id 38308e7fff4ca-2d71765d3e1so19780141fa.0; Sat, 30 Mar 2024 09:00:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1711814421; x=1712419221; darn=freebsd.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=AX4AI2AEROiRL1f5L7V52wHdI+qsqhaI2tDzSE/zUI0=; b=C0TI0/CtiDQLPLsOqeIZcWkQQV2rc4+6P/zyGimhliE6Lb4VDnzGiQVdzpAMAIBuWx NyEUftwNvfwy/TNvFVCWG6LqsjIkrvGUR9l9TgJW3xTNX++pTmW2j/rUrmk45NJZi8+w VozztJ5Yjf6IO13G607Drs2cUpgcjq5mAi7hNsvftSxYlw1dLXw45wPEhDmYtq8swokN 7LZgAeF7NtjslO4xOS/widbXXCD49JyuBWYcQDdkcpz2KNqS5q7V81bYO00r0GFVwad+ +QNqus67FC0X8riBKGMmuJmNtP4YGQHDeBoHu4buzBc2eyrTQ1lJfpv6NHiE14DrfCeL MZaQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1711814421; x=1712419221; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=AX4AI2AEROiRL1f5L7V52wHdI+qsqhaI2tDzSE/zUI0=; b=w3CLNEW/1D41w0zvPMY714D++1YnjFy2ZyvzRnb0CoJ/ZXzxm+W7UTlJiEA5eOidlZ xF+2bd4/qlJAsTy+/XEOkP1HJz7GljNOcW/XgKoZUZ4arGBO6ORT0fxGv6Qum3fhznMc HCQV5D2ACfvB5rCawS5W92mI9jpFEXPV2vYz9O0YNIwKMcD/vLDyz7oc9iefbm9RJSPm FkfCAxnXEfWoXvJ1x6mlUwAQxfcl+QMlBDFV0SP5O9qUT64bHOZ6iJrLYCkKLZU62SDE /c9NW/eRHdNqF69w2TuVA3DcRdNZvd/h1v1sfS07GzMG/QrsB32575iuhoK1VDmdAne7 piMw== X-Forwarded-Encrypted: i=1; AJvYcCUYIMpKdlXmj3TMEeicLswFwHVEw8s7V/VOLcTJxFHuNy9K/JITCqm9veZ0NPL0bNufJq+SuQ+0UNh0QlUPCYeCGHLnc+opZlOYOWo9U095evczKvHbNP8ilafGuXcbbEpRNj8Xf5ZaUCYXF2daPJ3Xptgv0VDrfTWJXyLpecoJqBgBSy5J0UnB7PBQFBLvISLsn8yXSuhz0sPcC2+uDXz65liMvWL/ X-Gm-Message-State: AOJu0YwYlXNCyoFp/5St5n9JFYoqVdXb3ez5oGSCiSGc9OyMAB5a501H zV6RWljjQhI21iqRmXtrjNK2zrl7HQ4++JF3lwOOyYDRyDf05oWSYwVOkDspTgbVSnWHMIwq//K GSMVEfX9lNOPZbTGRXJLQE153oC3nzVO21iU= X-Google-Smtp-Source: AGHT+IEr5TlvVNrdq6W6O8fKilAxcffR6aSe6cVP7qwN3TWicZEDh6dkYVUJyyCK0tz3Hcc08laUXlqHGQtORYOPRf0= X-Received: by 2002:a2e:bc06:0:b0:2d3:efc0:6f25 with SMTP id b6-20020a2ebc06000000b002d3efc06f25mr4118535ljf.42.1711814420564; Sat, 30 Mar 2024 09:00:20 -0700 (PDT) List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-all@freebsd.org X-BeenThere: dev-commits-ports-all@freebsd.org MIME-Version: 1.0 References: <202403300538.42U5c9Fc039162@gitrepo.freebsd.org> <03cc3443b1bbb8ec3ff881e73483b2cb@mail.infomaniak.com> In-Reply-To: <03cc3443b1bbb8ec3ff881e73483b2cb@mail.infomaniak.com> From: =?UTF-8?Q?Fernando_Apestegu=C3=ADa?= Date: Sat, 30 Mar 2024 17:00:08 +0100 Message-ID: Subject: Re: git: 020281bef16d - main - archivers/fastjar: remove undue deprecation of maintained port To: Daniel Engberg Cc: Gleb Popov , Alexey Dokuchaev , "ports-committers@FreeBSD.org" , dev-commits-ports-all@freebsd.org, dev-commits-ports-main@freebsd.org Content-Type: multipart/alternative; boundary="0000000000007596de0614e2daa9" X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; TAGGED_FROM(0.00)[]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US] X-Rspamd-Queue-Id: 4V6MS861Rzz4HgX --0000000000007596de0614e2daa9 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable El s=C3=A1b, 30 mar 2024, 14:21, Daniel Engberg escribi=C3=B3: > On 2024-03-30T09:06:51.000+01:00, Gleb Popov wrote: > > On Sat, Mar 30, 2024 at 8:38=E2=80=AFAM Alexey Dokuchaev > wrote: > > > > > > > > The branch main has been updated by danfe: > > > > > > URL: > https://cgit.FreeBSD.org/ports/commit/?id=3D020281bef16d866a64bac35850f21= ae27f956b5c > > > > > > commit 020281bef16d866a64bac35850f21ae27f956b5c > > > Author: Alexey Dokuchaev > > > AuthorDate: 2024-03-30 05:36:18 +0000 > > > Commit: Alexey Dokuchaev > > > CommitDate: 2024-03-30 05:36:18 +0000 > > > > > > archivers/fastjar: remove undue deprecation of maintained port > > > > It is my personal opinion, but I think that one should assume > > maintainership when undeprecating a port (especially maintained by a > group) > > I also found an old CVE which I don't know if it's fixed or not. > https://www.opencve.io/cve/CVE-2006-3619 If you don't know, then it is not an argument to keep the port deprecated. If you are, then it might be. Even in that case, as per the handbook, ports with security issues are marked as FORBIDDEN, not DEPRECATED: https://docs.freebsd.org/en/books/porters-handbook/book/#security-fix > > There's also a fork here from what I can tell: > http://download.savannah.nongnu.org/releases/fastjar/ > > I don't know if it's worth keeping for less than a sec of processing and > newer version of openjdk might have improved performance too (openjdk8 is > pretty old). > *might*? I think arguments for or against deprecating should not be guesses= . Don't get me wrong, I'm all for keeping the ports tree clean, but these "a posteriori" (non) arguments sound a bit weak :-) > Best regards, > Daniel > --0000000000007596de0614e2daa9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


El s=C3=A1b, 30 mar 2024, 14:21, Daniel Engberg <daniel.engberg.lists@pyret.net> escribi=C3=B3:
On 2024-03-30T09:06:51.000+01:00, Gleb Popov &= lt;arrowd@freebsd.org> wrote:
>=C2=A0 On Sat, Mar 30, 2024 at 8:38=E2=80=AFAM Alexey Dokuchaev <danfe@freebsd.org> wrote:
>
> >=C2=A0 =C2=A0
> >=C2=A0 The branch main has been updated by danfe:
> >
> >=C2=A0 URL: https://cgit.FreeBSD.org/ports/commit/?id=3D02= 0281bef16d866a64bac35850f21ae27f956b5c
> >
> >=C2=A0 commit 020281bef16d866a64bac35850f21ae27f956b5c
> >=C2=A0 Author:=C2=A0 =C2=A0 =C2=A0Alexey Dokuchaev <danfe@FreeB= SD.org>
> >=C2=A0 AuthorDate: 2024-03-30 05:36:18 +0000
> >=C2=A0 Commit:=C2=A0 =C2=A0 =C2=A0Alexey Dokuchaev <danfe@FreeB= SD.org>
> >=C2=A0 CommitDate: 2024-03-30 05:36:18 +0000
> >
> >=C2=A0 =C2=A0 =C2=A0 archivers/fastjar: remove undue deprecation o= f maintained port
>=C2=A0
> It is my personal opinion, but I think that one should assume
> maintainership when undeprecating a port (especially maintained by a group)

I also found an old CVE which I don't know if it's fixed or not. https://www.opencve.io/cve/CVE-2006-36= 19

If you don't know, then it is not an argument to keep the port deprec= ated. If you are, then it might be. Even in that case, as per the handbook,= ports with security issues are marked as FORBIDDEN, not DEPRECATED:
<= div dir=3D"auto">
<= br>



There's also a fork here from what I can tell: http://download.savannah.nongnu.org/releases/fast= jar/

I don't know if it's worth keeping for less than a sec of processin= g and newer version of openjdk might have improved performance too (openjdk= 8 is pretty old).

<= div dir=3D"auto">*might*? I think arguments for or against deprecating shou= ld not be guesses.

Don&#= 39;t get me wrong, I'm all for keeping the ports tree clean, but these = "a posteriori" (non) arguments sound a bit weak :-)


Best regards,
Daniel
--0000000000007596de0614e2daa9--