DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 581BA3858039
To: Eliot Moss <moss@cs.umass.edu>, "cygwin@cygwin.com" <cygwin@cygwin.com>
CC: "Eric @ Gmail" <ericdavidhendrickson@gmail.com>
Subject: RE: Ruby EOL in Cygwin 3.4.9?
Thread-Topic: Ruby EOL in Cygwin 3.4.9?
Thread-Index: Adn8YMNDXmVDKz+NSu2EZiG/1p4RjwALfysAAABiikA=
Date: Wed, 11 Oct 2023 22:36:35 +0000
Message-ID: <PH7PR22MB3120ED5DF8EB2AA48EB8C436AFCCA@PH7PR22MB3120.namprd22.prod.outlook.com>
References: <PH7PR22MB31209C697AD372E36AD384ABAFCCA@PH7PR22MB3120.namprd22.prod.outlook.com>
 <8cae1a30-cc92-cbea-4599-d7d550850ac5@cs.umass.edu>
In-Reply-To: <8cae1a30-cc92-cbea-4599-d7d550850ac5@cs.umass.edu>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?utf-8?B?cDVPU0EvQjBuK1JKaXE3OFJ6NWNnU2Vabjc1eFJ0SEFSRnQxSkZ6cGlSUFly?=
 =?utf-8?B?d1BvUzNPUmRYZkk3ZjVNS1E0UStnNm5qZUpsQ0g4Y0tKcGV4bHIvQjhQNVNo?=
 =?utf-8?B?cU5MMTVuWlZxNUMrak94blZ4dHZNRVJsZ3RoWHhTTkM3dUQ5a2cvVDBPdUZM?=
 =?utf-8?B?SjIxWjBLcGlhTWEvNlhGL3dPMzNJMkNUamxzRzNtWWUvN3lLdVplU0dDUWFS?=
 =?utf-8?B?UHhIeUI1S2c0MnZhTkdHS1pMY3Y0cER2L0thZjlpQjRDdElLSDl5ekVraXRH?=
 =?utf-8?B?eHBpMElBeVoySHFwSmJyMVVmSDB1cnZZamxQdkM4MnUzVlc2aTQ1NGhCbDY3?=
 =?utf-8?B?bXlKMy9xY2xDd0FxaU1lOHRWS3VUMUZScWVlc2NndG5lcGx6bVkrbHF2cS91?=
 =?utf-8?B?TFZRbjV4R3BVL2o3UEk3QWZDcCtkdWZEZGVDOVpVbUgrZGpWRm9iQXpJU3Zo?=
 =?utf-8?B?UXZtZEtoQkx1em5IZVBXUFh1dWM1cHF1dzVxaDFkMlowNmxVc0xaQWJwZnM4?=
 =?utf-8?B?Q2krdGhjUEpXd2VLUnRLd3pkMzhtZGVKaWlRQTlwYkNvakVldjhWU1VjbGJY?=
 =?utf-8?B?bFZHL1g0QXdmNXFmMklXMHFNb1NaSWlDUk1yZmE3SlhWeVE4RWNpakgvWDEv?=
 =?utf-8?B?a0xlU2pwdjJVcUYzY1lOZDhZRnU0WlJmb2NRUTZGSTBwbkd5SGZ1UUx2Smli?=
 =?utf-8?B?SzA4L2Y3ZXRHcFhKdlFlT09WVC8vVSt4WkxKZHM0U3JoTStXU1RXNlJtN1Fq?=
 =?utf-8?B?T0MxSnU0Z1duTUlaNDNHZDZIbzQ3dUpmTE9KQk45VHArQ3VubUZWMFd4ZHRH?=
 =?utf-8?B?YTBHWEVwKzhSQ01WY3BYdjNoVDNYSXpVTlFmZEgvT0dqRE1wS0RPZ2E1Q1Bt?=
 =?utf-8?B?ZU9vcFNyTUN5bzRnanVjZ0pTOXYyeWxUZVEyN2Q5VElXM2tIN0trVHBIaFFu?=
 =?utf-8?B?bk5NZ2hRTHRnYkxOcVpDUWtpY0p2QnE4bUtYMkZXWEZiVmc2UVc3b3Y0RUFt?=
 =?utf-8?B?ZVQySjhxdmRIMXZ1R25PazNIWVFWSG44ZFJQbWtjT2I2UU96cTRkSXFEZW8x?=
 =?utf-8?B?SXBQUy9wRWxvY0VMNFR3RXNrM29QN1kyUVIzTWNxVFB0aElHYm03d1ZvMEtG?=
 =?utf-8?B?T00wOENUZHVBU0FhSlZDU0dXb2docjZITXA0UmZIYVR6ZGNyZFd4YWZHTVVI?=
 =?utf-8?B?ZTZMSDJuUUVsUlFZV29KOWI1T3hVcGI3Sk9Dbi9YbWhKWmk3U1ZsOEtlT1J2?=
 =?utf-8?B?NVBiM3BqQlpERFUzUGJxWWhwdFpZY0FRWk9qQ2huODF4VmVkVkRqVXFYSTcz?=
 =?utf-8?B?WldrTzg5RHVEdTlZUmVlYnZKUE5KUnZNREJvSU52MkR6S2ZNSCswNTl0RkVD?=
 =?utf-8?B?YW9kWDc2TXdkaGRyRHdjU1FxUWhyaEFPdlNTZUE0WnF3cHJkVkp1cE9OSDRU?=
 =?utf-8?B?SkxCZDgyTk9KY3M3YkxMbkRsTTJDd0l4YTRkTTk3eGRCOSsrVG90MnFTTDcx?=
 =?utf-8?B?dWQrK1NqZFlFaEphZ1NKZ0RZUUNkUE5wdS9RMUJpSmVVSEo4c0VvclQ4TThk?=
 =?utf-8?B?ZTdjcG5yazZIdXdNanNabXFkUk9ZQ0pRRXMwVEFtQngwWTltTmF4SWNBYnZ6?=
 =?utf-8?B?Y2xXM3E5djRWQXZUb0VhZ3BpRklsYm50YXZpSVFoVmw0NmdzeENRaFpDWDUx?=
 =?utf-8?B?SERwNVJjZ21hU2xUTzN3SXJQbnU4blhZQ2lYRU5hNlFIa2kxbVV2V01yWWdD?=
 =?utf-8?B?SFdUVGV0K0h1Nmk1cGxKVDhJUU1BQ09pd3A0eTZINkpaeUJoRnE2RDRickMy?=
 =?utf-8?B?RjhPcDhGNHo0RkhnZlBIamdTeGZEYk1tdlUwaWIzak91ZW83Vy9qcVNHOTcr?=
 =?utf-8?B?ZVVSb3FVQmFtL00veVNGanBuakZXWXJscVY4Y0xWVjVYTmxhbi8yVkhob1Zv?=
 =?utf-8?B?OEp0Ky9tc2hIUGpiaGtHWkhLVmZ0ZXU0U201L3dyVk5NK1BiQUpaZWtKdEN3?=
 =?utf-8?B?bjgySmhjSUd0NDRTaXZJKzkxN2RwY2REeTlxUkNJZGs3MU1uSFBhUVBPSDU5?=
 =?utf-8?B?MU5ob01tOUg4a1pOSG1UZGtmcU51SjFoWE1lRzZ4R2pqNURMZXJtTDY4WlJ2?=
 =?utf-8?Q?wP4A=3D?=
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 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
X-OriginatorOrg: optum.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH7PR22MB3120.namprd22.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 395e4421-d535-4cf7-2201-08dbcaaa8688
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Oct 2023 22:36:35.3316 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: db05faca-c82a-4b9d-b9c5-0f64b6755421
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: /r58xy2+KKKR6TnoUYsEH5wAYaDbf1Ag+cWC7z0u9rZnbTAMbREXIBsTHQYzOEPJ
X-MS-Exchange-Transport-CrossTenantHeadersStamped: EA2PR22MB5143
X-CONF-FOOTER: True
x-corp: true
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.267,Aquarius:18.0.980,Hydra:6.0.619,FMLib:17.11.176.26
 definitions=2023-10-11_18,2023-10-11_01,2023-05-22_02
X-Proofpoint-AV-Result: Clean
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0
 priorityscore=1501
 phishscore=0 adultscore=0 bulkscore=0 clxscore=1011 impostorscore=0
 mlxlogscore=997 suspectscore=0 malwarescore=0 spamscore=0
 lowpriorityscore=0 mlxscore=0 classifier=spam adjust=0 reason=mlx
 scancount=1 engine=8.12.0-2309180000 definitions=main-2310110199
X-IP-VFilter-R: R
X-Proofpoint-ORIG-GUID: JlZGcVmgpBhsHBOsJtlDSwOl9aA6aTGz
X-Proofpoint-GUID: JlZGcVmgpBhsHBOsJtlDSwOl9aA6aTGz
x-tag: accept
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.267,Aquarius:18.0.980,Hydra:6.0.619,FMLib:17.11.176.26
 definitions=2023-10-11_18,2023-10-11_01,2023-05-22_02
X-Proofpoint-AV-Result: Clean
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0
 priorityscore=1501
 phishscore=0 mlxlogscore=999 impostorscore=0 lowpriorityscore=0
 adultscore=0 mlxscore=0 clxscore=1015 spamscore=0 bulkscore=0
 malwarescore=0 suspectscore=0 classifier=spam adjust=0 reason=mlx
 scancount=1 engine=8.12.0-2309180000 definitions=main-2310110199
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00, DKIM_SIGNED,
 DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,
 SPF_NONE,
 TVD_PH_BODY_ACCOUNTS_PRE autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
 server2.sourceware.org
X-BeenThere: cygwin@cygwin.com
X-Mailman-Version: 2.1.30
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-request@cygwin.com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request@cygwin.com?subject=subscribe>
From: "Hendrickson, Eric D via Cygwin" <cygwin@cygwin.com>
Reply-To: "Hendrickson, Eric D" <edh@optum.com>
Content-Type: text/plain; charset="utf-8"
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie.com@cygwin.com>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 39BMbKsX011485

Hi Eliot,

Thanks for responding.  That makes total sense.  

Totally taking into account the all volunteer nature of Cygwin, would it make sense to defer on further non-emergency releases of Cygwin until all packages that are EOL have been updated?  Since this is the case with ruby, I am guessing it's likely the case with other packages in Cygwin too.

Is there a backlog for Cygwin somewhere, so that I can investigate this myself if I have time this winter?

Thank you and all the best,
Eric

-----Original Message-----
From: Eliot Moss <moss@cs.umass.edu> 
Sent: Wednesday, October 11, 2023 5:03 PM
To: Hendrickson, Eric D <edh@optum.com>; cygwin@cygwin.com
Cc: Eric @ Gmail <ericdavidhendrickson@gmail.com>
Subject: Re: Ruby EOL in Cygwin 3.4.9?

On 10/11/2023 12:37 PM, Hendrickson, Eric D via Cygwin wrote:
> Hello all,
> 
> As a ~25 year user and sometime contributor to Cygwin, I support Cygwin here at my place of work.  Does anyone know why we are deploying Ruby 2.6 which EOL about 18 months ago?
> 
> https://www.ruby-lang.org/en/downloads/branches/
> 
> I'm concerned about proliferation of EOL versions of Ruby in case some security risk / 0Day is identified.
> 
> Please advise.
> Eric Hendrickson

If nobody has responded I can give a generic response:
"Because cygwin is all volunteer and someone has not volunteered, or did volunteer and is behind, or fell off the radar."

Someone else will know how to look up if there is a currently registered volunteer for Ruby ...

Eliot Moss

> This e-mail, including attachments, may include confidential and/or 
> proprietary information, and may be used only by the person or entity 
> to which it is addressed. If the reader of this e-mail is not the 
> intended recipient or intended recipient’s authorized agent, the 
> reader is hereby notified that any dissemination, distribution or 
> copying of this e-mail is prohibited. If you have received this e-mail 
> in error, please notify the sender by replying to this message and delete this e-mail immediately.
> 

This e-mail, including attachments, may include confidential and/or
proprietary information, and may be used only by the person or entity
to which it is addressed. If the reader of this e-mail is not the intended
recipient or intended recipient’s authorized agent, the reader is hereby
notified that any dissemination, distribution or copying of this e-mail is
prohibited. If you have received this e-mail in error, please notify the
sender by replying to this message and delete this e-mail immediately.

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple