Subject: [Bug 539912] New: Review Request: javacsv - Stream-based Java library for reading and writing CSV and other delimited data - msg#02556

Previous Message by Date: click to view message preview

[Bug 527986] Review Request: taoframework - Multimedia bindings for Mono

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=527986 --- Comment #12 from Paul Lange <palango@xxxxxx> 2009-11-21 10:22:32 EDT --- I fully agree with you! Only including binding for libraries that we support in fedora sound like the best way. Is there a way to exclude some subpackages from being built? -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. _______________________________________________ Fedora-package-review mailing list Fedora-package-review@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-package-review

Next Message by Date: click to view message preview

[Bug 539472] Review Request: libmemcache - C API to memcached

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=539472 --- Comment #1 from Jeroen van Meeuwen <kanarip@xxxxxxxxxxx> 2009-11-21 10:54:59 EDT --- New SPEC: http://www.kanarip.com/custom/SPECS/libmemcache.spec New SRPM: http://www.kanarip.com/custom/f13/SRPMS/libmemcache-1.4.0-0.2rc2.fc13.src.rpm -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. _______________________________________________ Fedora-package-review mailing list Fedora-package-review@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-package-review

Previous Message by Thread: click to view message preview

[Bug 524992] Review Request: toppler - platform game

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=524992 Hans de Goede <hdegoede@xxxxxxxxxx> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED AssignedTo|nobody@xxxxxxxxxxxxxxxxx |hdegoede@xxxxxxxxxx Flag| |fedora-review? --- Comment #7 from Hans de Goede <hdegoede@xxxxxxxxxx> 2009-11-21 09:09:31 EDT --- Hi, Full review (md5sum, license, spec file readability, etc.) done, the package looks good. I have only one remark. I'm not completely happy with how the highscore file is handled. My problem is that toppler does not drop its sgid rights, it changes its egid, but it keeps the rights. So if someone is able to take control of the toppler process, he can then use the sgid games rights to get access to highscore files of other games, which in turn could be used to inject data into other people's processes with the purpose of taking over control of said process. I would like to see toppler patched to open the highscore file at startup (in rw mode) as the first thing in main, and then drop the sgid rights completely. This means the lock file will have to go, this lack of highscore file locking is a problem with many games in general, but one which is usually just ignored as in practice it never gets triggered. Regards, Hans -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. _______________________________________________ Fedora-package-review mailing list Fedora-package-review@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-package-review

Next Message by Thread: click to view message preview

[Bug 539912] Review Request: javacsv - Stream-based Java library for reading and writing CSV and other delimited data

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=539912 --- Comment #1 from Andreas Osowski <th0br0@xxxxxxxxxx> 2009-11-25 08:11:14 EDT --- Based upon some discussion in #fedora-devel today, this missing license file appears not to be a violation of the license, I guess the rpmlint message for no doc files included can be ignored... (and the package be reviewed as it is right now) Sorry for that violation talk in #1 then :) -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. _______________________________________________ Fedora-package-review mailing list Fedora-package-review@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-package-review