Re: [Gimp-web] Drupal vulnerability... (registry.gimp.org)



Hi Pat, and all,

thanks for understanding :-)

Regarding a static site, I'm not entirely sure Drupal can be mirrored
easily, but I've started a mirroring process and will have a look at the
result tomorrow (it's taking a while...). I'll keep you posted.

cheers

On Thu, Nov 13, 2014 at 6:15 PM, Pat David <patdavid gmail com> wrote:

Hi Ingo!

I'm CC'ing the list as your email came in off-list.

I completely understand, and was somewhat aware that you were winding
things down. :)

At the moment, I was wondering if there would be a way to 'freeze' the
current state of the registry as a static site, and to leave it in place
for the time being?  This way the registry itself can stay online (though
not-functional for dynamic use), until we can find a new
home/leader/implementation that makes the most sense moving forward.

I know there was some discussion around how best to utilize it moving
forward, and I have some thoughts around this that I'll detail in a later
email.

For now, I will go investigate what might be required to generate a static
site to de-couple the registry from Drupal so we can avoid any issues with
vulnerabilities for the time being.

Oh, and thank you, thank you, thank you for maintaining it for so long! :)

pat

On Thu Nov 13 2014 at 11:09:28 AM Ingo Lütkebohle <iluetkeb gmail com>
wrote:

Hi,

unfortunately this is not fixed, yet.

As many if you know, I no longer have time to maintain the registry. For
a while I was content in just letting it run, but with security problems
such as this one, I am uncomfortable doing so any longer.

If a responsible someone else (or a group) could host and maintain the
site, I'd be happy to hand it over. Alternatively, I could also give
someone just the plugin files and meta-data, for import into another site.

If nobody steps up within the next few weeks, I think I will have to shut
it down, as sad as that would make me. I would keep the data around for
later recovery, however.

Best Regards,

Ingo
Am 30.10.2014 20:51 schrieb "Pat David" <patdavid gmail com>:

https://www.drupal.org/SA-CORE-2014-005

I am wondering if registry.gimp.org should be updated and/or taken
offline
until an upgrade or alternate solution is in place?

--
pat david
http://blog.patdavid.net

_______________________________________________
gimp-web-list mailing list
gimp-web-list gnome org
https://mail.gnome.org/mailman/listinfo/gimp-web-list




-- 
Ingo Lütkebohle, Dr.-Ing.

PGP Fingerprint 3187 4DEC 47E6 1B1E 6F4F  57D4 CD90 C164 34AD CE5B


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]