#210 Proposal to retire findbugs-bcel from EPEL 7
Closed: Fixed a year ago by tdawson. Opened a year ago by richardfearn.

Please see this epel-devel thread: https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org/thread/4VFERXQN6Y6TTVFI45JLX2O6SYLY6ELT/

findbugs-bcel is an old snapshot of Apache Commons BCEL packaged for use by FindBugs, but FindBugs itself was never added to EPEL 7.

A CVE bug was recently filed against it: https://bugzilla.redhat.com/show_bug.cgi?id=2142726

No other packages depend on findbugs-bcel.


Metadata Update from @smooge:
- Issue tagged with: meeting

a year ago

I don't understand why the steering committee needs to decide whether a package can be retired for "Security Reasons" but not for "No Time or Desire." Was this part of the policy change not discussed in a meeting or did I just miss it?

FTR, I'm +1 to retiring this

I don't understand why the steering committee needs to decide whether a package can be retired for "Security Reasons" but not for "No Time or Desire." Was this part of the policy change not discussed in a meeting or did I just miss it?

I think you are right, I think this part got skipped in the discussion. I think other things have slowed down enough that it would be a good time to discuss it this week.

I'm also +1 for retiring it.

We discussed this in the EPEL Steering Committee.
First off, we all wanted to thank you for following the policy.
Second, we all approved this.
and Third, we are re-writting the policy so that you don't have to get approval from the council. You will need to send an email like you did, and give a week for feedback and questions. But you won't need the councils approval.

Metadata Update from @tdawson:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

a year ago

Metadata Update from @tdawson:
- Issue untagged with: meeting

a year ago

First off, we all wanted to thank you for following the policy.

No problem at all!

Second, we all approved this.

Thanks for discussing it - I'll get on with the rest of the retirement process.

Login to comment on this ticket.

Metadata