universe demotion: Moodle

[Steve Langasek]

On Tue, Jan 26, 2010 at 07:47:03PM +0200, Jonathan Carter (highvoltage) wrote:

> On Tue, Jan 26, 2010 at 7:28 PM, Kees Cook <kees at ubuntu.com> wrote:
> > I would like to propose demoting Moodle to universe.  It has no active
> > stable (or devel[1]) maintainer in Ubuntu, and the level of effort
> > required to maintain security support on this PHP application is very
> > high.  I do not want to see it in a second LTS release.

> > http://people.canonical.com/~ubuntu-security/cve/pkg/moodle.html

> I believe it's only in main because Edubuntu shipped it before as part
> of the edubuntu-server task. Canonical planned to provide support for
> it at one stage, but besides that I don't think there's any reason for
> it to be in main and it seems like something that really should be in
> universe.

That's correct; it's in main as part of the 'education' seed, whose
explanation is:

  This seed exists for the purpose of being included on the DVD. The
  packages here are also in the Edubuntu seeds, but it's tricky to include
  them automatically because the Edubuntu seeds already inherit from the
  Ubuntu seeds a nd so we'd end up with a loop. We take the low-tech
  approach of just copying over the ones that aren't already here.

This dates to June 2009 as part of the package set reorg; prior to that it
was included directly in the 'dvd' seed.  Given that edubuntu is itself now
a DVD, I don't think there's any longer a reason to ship them on the Ubuntu
DVD (if we were to ship edubuntu components on the DVD, surely it would be
better to ship the edubuntu *core* instead of the extra server packages?),
and that appears to mean there's no reason to keep them in main either.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 828 bytes
Desc: Digital signature
Url : https://lists.ubuntu.com/archives/ubuntu-devel/attachments/20100126/73815af0/attachment.pgp