#1479 non-responsive maintainer exception process for affix
Closed Opened by swilkerson.

= phenomenon =
Several CVE's exist for nagios, affix has not been responsive in fixing them. They are YEARS old.

= background analysis =
https://bugzilla.redhat.com/show_bug.cgi?id=958305
https://bugzilla.redhat.com/show_bug.cgi?id=1121499
https://bugzilla.redhat.com/show_bug.cgi?id=1066580
https://bugzilla.redhat.com/show_bug.cgi?id=1046333

Many attempts have been made to contact affix on the above bugs and via email, devel mailing list. Finally, 2 weeks ago I was able to contact him via #fedora-uk channel on Freenode where he told me they would be updated in a couple days.

At this time I offered to co-maintain the package, but still do not have ACL's approved.

Full disclosure, I work for upstream Nagios.

= implementation recommendation =

Reassign nagios to swilkerson so CVE's can finally be addressed.


These will be resolved within the next week.

@swilkerson I have approved your ACL to co-maintain the package

This is great!

Looking forward to working with you, I'm resolving this ticket as fixed as to not waste FESCo's meeting time.

swilkerson or affix, could you please approve my ACLs also?

@nb, approved.

Metadata