X-Recipient: archive-cygwin AT delorie DOT com DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 7E8D63857B98 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com; s=default; t=1697073129; bh=FzwApwUwD4OIXpV4oV5flHrr3oebQQgYOdp9p01erV4=; h=Date:Subject:To:Cc:References:In-Reply-To:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: From:Reply-To:From; b=eH6zJ1KAHj55sg70O5xqNYX8gfDK6Wdkhpa+GgbhG8Qgwu+cmYkL+VDrGRT5rAg44 QK17RDxIgzR0b4wgQtj2TM4MXww/LaqVb0mNNwmi2bKt26VAMQKuUnO1bwguVAVI2o +h0dmPS2QnAi/eGLmQ6c31ZHq+/g6HSnVoWgNP2w= X-Original-To: cygwin AT cygwin DOT com Delivered-To: cygwin AT cygwin DOT com DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 7CEEA3858D28 X-ASG-Debug-ID: 1697073090-24039d4bd710634a0001-w5GHUG X-Barracuda-Envelope-From: moss AT cs DOT umass DOT edu X-Barracuda-RBL-Trusted-Forwarder: 128.119.240.136 Message-ID: X-Barracuda-RBL-Trusted-Forwarder: 192.168.50.223 Date: Wed, 11 Oct 2023 21:11:28 -0400 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.15.1 Subject: Re: Ruby EOL in Cygwin 3.4.9? Content-Language: en-US X-ASG-Orig-Subj: Re: Ruby EOL in Cygwin 3.4.9? To: "Hendrickson, Eric D" , "cygwin AT cygwin DOT com" Cc: "Eric @ Gmail" References: <8cae1a30-cc92-cbea-4599-d7d550850ac5 AT cs DOT umass DOT edu> In-Reply-To: X-Barracuda-Connect: mailsrv.cs.umass.edu[128.119.240.136] X-Barracuda-Start-Time: 1697073090 X-Barracuda-Encrypted: ECDHE-RSA-AES128-GCM-SHA256 X-Barracuda-URL: https://barramail.cs.umass.edu:443/cgi-mod/mark.cgi X-Barracuda-BRTS-Status: 1 X-Virus-Scanned: by bsmtpd at cs.umass.edu X-Barracuda-Scan-Msg-Size: 2852 X-Barracuda-Spam-Score: 0.00 X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=5.7 tests= X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.115286 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- X-Spam-Status: No, score=-3.7 required=5.0 tests=BAYES_00, JMQ_SPF_NEUTRAL, KAM_DMARC_STATUS, NICE_REPLY_A, SPF_HELO_NONE, SPF_PASS, TVD_PH_BODY_ACCOUNTS_PRE, TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: cygwin AT cygwin DOT com X-Mailman-Version: 2.1.30 List-Id: General Cygwin discussions and problem reports List-Archive: List-Post: List-Help: List-Subscribe: , From: Eliot Moss via Cygwin Reply-To: Eliot Moss Content-Type: text/plain; charset="utf-8"; Format="flowed" Sender: "Cygwin" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 39C1CBcV025878 On 10/11/2023 6:36 PM, Hendrickson, Eric D wrote: > Hi Eliot, > > Thanks for responding. That makes total sense. > > Totally taking into account the all volunteer nature of Cygwin, would it make sense to defer on further non-emergency releases of Cygwin until all packages that are EOL have been updated? Since this is the case with ruby, I am guessing it's likely the case with other packages in Cygwin too. > > Is there a backlog for Cygwin somewhere, so that I can investigate this myself if I have time this winter? > > Thank you and all the best, > Eric > > -----Original Message----- > From: Eliot Moss > Sent: Wednesday, October 11, 2023 5:03 PM > To: Hendrickson, Eric D ; cygwin AT cygwin DOT com > Cc: Eric @ Gmail > Subject: Re: Ruby EOL in Cygwin 3.4.9? > > On 10/11/2023 12:37 PM, Hendrickson, Eric D via Cygwin wrote: >> Hello all, >> >> As a ~25 year user and sometime contributor to Cygwin, I support Cygwin here at my place of work. Does anyone know why we are deploying Ruby 2.6 which EOL about 18 months ago? >> >> https://www.ruby-lang.org/en/downloads/branches/ >> >> I'm concerned about proliferation of EOL versions of Ruby in case some security risk / 0Day is identified. >> >> Please advise. >> Eric Hendrickson You should send such things to the list, not me. I'm just a user who has only made occasional small contributions ... Eliot > If nobody has responded I can give a generic response: > "Because cygwin is all volunteer and someone has not volunteered, or did volunteer and is behind, or fell off the radar." > > Someone else will know how to look up if there is a currently registered volunteer for Ruby ... > > Eliot Moss > >> This e-mail, including attachments, may include confidential and/or >> proprietary information, and may be used only by the person or entity >> to which it is addressed. If the reader of this e-mail is not the >> intended recipient or intended recipient’s authorized agent, the >> reader is hereby notified that any dissemination, distribution or >> copying of this e-mail is prohibited. If you have received this e-mail >> in error, please notify the sender by replying to this message and delete this e-mail immediately. >> > > This e-mail, including attachments, may include confidential and/or > proprietary information, and may be used only by the person or entity > to which it is addressed. If the reader of this e-mail is not the intended > recipient or intended recipient’s authorized agent, the reader is hereby > notified that any dissemination, distribution or copying of this e-mail is > prohibited. If you have received this e-mail in error, please notify the > sender by replying to this message and delete this e-mail immediately. -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple