From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mark H Weaver Subject: Re: Ruby security updates Date: Sat, 09 Jan 2016 22:05:13 -0500 Message-ID: <87bn8ujfrq.fsf@netris.org> References: <87si271vks.fsf@netris.org> <20160109044056.GA18179@thebird.nl> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:54430) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aI6K3-0000Ti-Du for guix-devel@gnu.org; Sat, 09 Jan 2016 22:05:40 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aI6Jy-00041o-CX for guix-devel@gnu.org; Sat, 09 Jan 2016 22:05:39 -0500 Received: from world.peace.net ([50.252.239.5]:33026) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aI6Jy-00041d-8i for guix-devel@gnu.org; Sat, 09 Jan 2016 22:05:34 -0500 In-Reply-To: <20160109044056.GA18179@thebird.nl> (Pjotr Prins's message of "Sat, 9 Jan 2016 05:40:56 +0100") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Pjotr Prins Cc: guix-devel@gnu.org Pjotr Prins writes: > Ruby 1.8.7 is still being used. For me one of the selling points of > GNU Guix is that we can retain older packages when they are still > useful. The switch from Ruby 1.8 to 1.9 was quite intrusive and not > all software made the switch (similar to the python 2 to 3 > switch). Some people argue that the software should be updated, but it > sometimes proves to be (too) hard or not worth the effort. Ruby 1.8 is > still a nice interpreter (it was the original Ruby by Matz). Given this, there's a good chance that someone will backport the security fix to Ruby 1.8. Maybe it has already been done. Would you like to look? Mark