From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:c151::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id IEQXNEtYUmCUNgAA0tVLHw (envelope-from ) for ; Wed, 17 Mar 2021 19:28:11 +0000 Received: from aspmx2.migadu.com ([2001:41d0:2:c151::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id oA/aL0tYUmBtaQAAB5/wlQ (envelope-from ) for ; Wed, 17 Mar 2021 19:28:11 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx2.migadu.com (Postfix) with ESMTPS id 5024C21D07 for ; Wed, 17 Mar 2021 20:28:11 +0100 (CET) Received: from localhost ([::1]:54972 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lMbpy-0004vv-H4 for larch@yhetil.org; Wed, 17 Mar 2021 15:28:10 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:48814) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lMbZs-000617-H6 for guix-devel@gnu.org; Wed, 17 Mar 2021 15:11:33 -0400 Received: from mail.zaclys.net ([178.33.93.72]:58129) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lMbZn-00083B-Jz for guix-devel@gnu.org; Wed, 17 Mar 2021 15:11:32 -0400 Received: from guix-xps.local (82-64-145-38.subs.proxad.net [82.64.145.38]) (authenticated bits=0) by mail.zaclys.net (8.14.7/8.14.7) with ESMTP id 12HJBOpq039519 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Wed, 17 Mar 2021 20:11:24 +0100 DMARC-Filter: OpenDMARC Filter v1.3.2 mail.zaclys.net 12HJBOpq039519 Authentication-Results: mail.zaclys.net; spf=fail smtp.mailfrom=lle-bout@zaclys.net DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zaclys.net; s=default; t=1616008284; bh=SMn1gM/erdabNXlJdLsjdukmwryNyd2Ij2RT79MuYbo=; h=Subject:From:To:Cc:Date:In-Reply-To:References:From; b=iqtLJBShVGc6sWTKrS3alkQ8X6sBot6zqXMI3ZCmBSSRCaJ7EOpqVaYye/qtYDBWb zZ2L4jZxHC99/PQkgash4vWTUbHXh/8qNtFKj1nCSLHA10cVtxAkNVNO15uru79y5Z d0pH8jo2fKUDMnRuw1IO1VmwpOq1nanSmhqV1Vhc= Message-ID: Subject: Re: Why [bug#47081] Remove mongodb? From: =?ISO-8859-1?Q?L=E9o?= Le Bouter To: zimoun Cc: guix-devel@gnu.org Date: Wed, 17 Mar 2021 20:11:24 +0100 In-Reply-To: <86zgz1vcjx.fsf@gmail.com> References: <20210312005632.13690-1-lle-bout@zaclys.net> <86ft0twwg8.fsf@gmail.com> <86a6r1wtnz.fsf@gmail.com> <61252a58340e1491b950bd619e73103e93515877.camel@zaclys.net> <86zgz1vcjx.fsf@gmail.com> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-x4vBhPDF9eht1t7maYpA" User-Agent: Evolution 3.34.2 MIME-Version: 1.0 Received-SPF: pass client-ip=178.33.93.72; envelope-from=lle-bout@zaclys.net; helo=mail.zaclys.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1616009291; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=SMn1gM/erdabNXlJdLsjdukmwryNyd2Ij2RT79MuYbo=; b=dLupZk/2piZM6CNn73b7D7K/dLa2nOLmUbGBrkjvwnnfoa5D5B/25ZgafyMGEPinQtELif Z6plJrxUTQOe0Pnf9V/QWHqh8jMiXefsO7cR+yCSxlpoIBqyG6dks5x1SG4CokYUYSO8oY LcPG+9Dq6MMxJTf2x1OoSW6MzGL7AnpacjWfYcBvUm7Hk4WkQ9GmVR5rCGaPlEu8gzrHUG C3HCiy6RG2f5HGtncGlgQM8sYihau2B+SfMfIozLuhti4zIY2Lml6Hszy1di854rukZ0uM vUywI58RkaSlBl8YuPAmEFSdD3W+z87wa4/vRwFeHeAI0VTwyBITpEbRuBTDGA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1616009291; a=rsa-sha256; cv=none; b=W7ikskwsvbq3aonc1++7ppnUSwom2i1mrI3dDpBWkg1WHzlaOXqtA2tkve1vmmdDN3gXfO PfS4vVg14VpZQGA/NBYS4AcwQCtMz4bGpRPqoIVdSGU32/AIGdlAHAuDkHshMhHij6aVTC m1BDLICqsZuKubtEQA0AS+CmVTRhyfjiEmSRl83t9ZolvpsQFQsMwb1HXjonIUzNylCvrm rGASpjboi1q5iqEVu7pvT9EUtxvOXqOJbgsRwTZvZm/pzqypd280BprIWnaIYZFYDUEhJj FMfFP7p9UT9BL63NR2fg+gH9LBN+6dQem0pR/4dri0am8zHQwxOJ5kgj27jYew== ARC-Authentication-Results: i=1; aspmx2.migadu.com; dkim=pass header.d=zaclys.net header.s=default header.b=iqtLJBSh; dmarc=pass (policy=reject) header.from=zaclys.net; spf=pass (aspmx2.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -4.20 Authentication-Results: aspmx2.migadu.com; dkim=pass header.d=zaclys.net header.s=default header.b=iqtLJBSh; dmarc=pass (policy=reject) header.from=zaclys.net; spf=pass (aspmx2.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 5024C21D07 X-Spam-Score: -4.20 X-Migadu-Scanner: scn0.migadu.com X-TUID: t1Lb05JoPcfm --=-x4vBhPDF9eht1t7maYpA Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, 2021-03-17 at 19:51 +0100, zimoun wrote: > It shows exactly my point. The correct and polite way of doing the > thing is first to examine the issue at hand (3.4.10 is old with > security > vulnerabilities), then propose a fix (e.g., the removal), wait > feedback, > and complete. Actually we did not know pushing a security fix with 3.4.24 was not fine, from quick auditing I have made 3.4.24 would still be under AGPL so it would be fine to upgrade, turns out not since some files inside are under SSPL but that was discovered way later, even when Efraim had doubt and reverted my commit we had a debate and Efraim bought my arguing even though I was wrong and they were right, if for every security issue I have to ask feedback I may not ship them in a timely manner, so that's also why they tend to be pushed faster than usual.. we may want to establish a clear process here. I usually create issues for things I need help on, if I can do it myself and feel confident, I just push, I can be wrong of course and always sorry for issues, I fix them shortly in next commits if any. --=-x4vBhPDF9eht1t7maYpA Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEFIvLi9gL+xax3g6RRaix6GvNEKYFAmBSVFwACgkQRaix6GvN EKZhgw/6A3yOAem82OSkyzEIVWibU+QMpMjWzVyH3q3DZF/lDdwsUXvMTntxj4gh /KdBC7bzGcUPOexISE+nyZyNVKuDfDutAG6JiGqv1DsVclK2Pd35cCuS4lr3jAwv rV1h3Uaeiz/Jj8pE045EOJOAcPXRU/YLyg87r+zHxRueNw6AFme8J7yWFxdTP/vm sB8wPAgTLldC2W46waS2pFh2On3W+1yCm2qA0FK+Ic4B1KZ0zXPfVN44o/CLvxNX ac/4F8kxyMi2DTfQF0w3O6nnu+kjPj5jfC45w+/XB98fUjUACDNkm8sKS5LwZWf0 UgD7EtlWrGqZoJaPZn6IoTTQt4F+MH4CVrphrCRwYtGYnBPXw1AAbkwVqG2RG7J9 GhQAdAfj89HIRnFgj66O8XM0/IzeSknxmThe14/nzmJ5ePlrt6LFG606nWDgTrP9 VKrST7spY+PM/1vjn/BWlxjKRr2sDpsPQs/a+mpUf5VAhY6Rw1jtI35X32HJn3cr 2wtChgM68r86osTtzPo0EFj3w2JM/YOosXp+FVlGGTatZxye3EYEmMhaR6c1ZBya FvDEWbB/jwvqh64pJs/mbznEAk7wTx/mGz/+JvsQ7B2G0H6WkNweT0+2Qs5BYAyq rxIh64iPP6vYX7N7Yda//zRUeguNaVkoth7XjAZpJ245nCGXZ9M= =chU5 -----END PGP SIGNATURE----- --=-x4vBhPDF9eht1t7maYpA--