GNOME Bugzilla – Bug 60186
Bugzilla should be upgraded!
Last modified: 2004-12-22 21:47:04 UTC
Security Advisory: http://mozilla.org/projects/bugzilla/security2_14.html Could be interesting to merge due to the many GNOME patches - please give me a yell if I can help out.
OK, so, since this has been brought up: 1) We should work on the upgrade, but it isn't /that/ pressing, because the security issues are basically all related to group security- which we probably shouldn't be using all that much anyway. 2) I'm working on upgrading ximian to 2.14, so once I'm done with that I'll have some experience and some useful patches for gnome. 3) We should, whenever possible, try to ditch all gnome specific patches to bugzilla instead of updating them to 2.14. Running a fork from the main tree is a bad idea for a lot of reasons, and make no mistake- this is basically a fork. If there are features we use that aren't in the main bugzilla, we should be lobbying to get them in upstream or dropping them completely to as great an extent as possible.
I'd like to suggest using cvs for our copy of bugzilla to make this merging process easier, and to make it easier to see what changes we have made.
Well, it is currently in gnome CVS. Ideally, though, we'd use some vendor branch tricks to import 'trunk' bugzilla 2.14 and then allow us to stay reasonably up to date. I'm no CVS expert, though, nor do I have much of an idea (yet) how this can be done within the context of the current usage of bugzilla in CVS.
Bugzilla 2.16 is just around the corner. Are any upgrade planned soon? I'm missing all nice new features.
There's a good chance that we'll look at upgrading once 2.16 is available, but even with the templating, there will be a fair bit of work to get it into a usable state. We'll see how it goes, but not until 2.16 actually gets here.
Reassigning to The Man and adding some depends on bugs we're pretty sure are fixed in 2.16 but need to be checked.
There has not been a comment on this bug report in roughly six months. The latest stable bugzilla is 2.16.2 http://www.mozilla.org/projects/bugzilla/ Any chances of an upgrade happening anytime soon? weeks, months, years?
Porting is in progress. See http://mail.gnome.org/archives/gnome-bugsquad/2003-February/msg00017.html if you can help, since we're badly undermanned on this one. Ask luis or aldug in #bugs for a status upgrade.
Ping? Years of security holes have accumulated now.
I asked luis on IRC and he was very helpful (as always): <luis> Alan: current status is 'completely stalled, if you want to contribute cycles, check out bugzilla-new from cvs.gnome.org and email gnome-bugsquad@gnome.org'
I'd like to change my email address, but this bugzilla is so ancient that this feature is missing. Please upgrade...
Upgrade is done. Other issues still in place, of course. But closing the parent bug.
Woohoo! This is a really nice silver lining to this weeks cloud over Gnome.org Thanks to all involved. (I'd verify this bug as being fixed but I'm not sure, perhaps people want to more thoroughly verify it that my simple recognition of all the nice new changes).