Content-Type: text/plain;
	charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.200.110.1.12\))
Subject: Re: Package takeover: bzlib
From: Andrew Lelechenko <andrew.lelechenko@gmail.com>
In-Reply-To: <7ee87a62683addd174f42a81ed4571888f1320d9.camel@well-typed.com>
Date: Sat, 9 Mar 2024 19:36:54 +0000
Cc: Haskell Libraries <libraries@haskell.org>,
 haskell-cafe@haskell.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <7A79C2D4-DD67-4434-8AD9-C410DF33478C@gmail.com>
References: <635FF9C8-BFEE-420C-8D41-9A1FDEF0AA00@gmail.com>
 <7ee87a62683addd174f42a81ed4571888f1320d9.camel@well-typed.com>
To: Duncan Coutts <duncan@well-typed.com>

Thanks a ton, Duncan!

> On 9 Mar 2024, at 19:20, Duncan Coutts <duncan@well-typed.com> wrote:
>=20
> Done!
>=20
> https://hackage.haskell.org/package/bzlib/maintainers/
>=20
> On Sat, 2024-03-09 at 15:30 +0000, Andrew Lelechenko wrote:
>> I=E2=80=99d like to take over `bzlib` package =
(https://hackage.haskell.org/package/bzlib).=20
>>=20
>> I=E2=80=99ve contacted the package maintainer (Duncan Coutts, CC'd) =
by email twice in Aug 2023 and Oct 2023, but never heard back. Earlier =
Duncan granted me rights for `tar` and `zlib` packages, so I imagine he =
is just exceedingly busy.=20
>>=20
>> `bzlib` package has been on life support by Hackage Trustees for many =
years with a fork maintained at =
https://github.com/hackage-trustees/bzlib. While I can do another =
non-maintainer upload in my Trustee hat, I=E2=80=99d like to seek a more =
permanent solution and maintain `bzlib` back to its canonical home at =
https://github.com/haskell/bzlib (which I already have access to).
>>=20
>> I do not plan any drastic changes. The immediate cause of this =
request is HSEC-2024-0002 =
(https://github.com/haskell/security-advisories/pull/157, =
https://github.com/hackage-trustees/bzlib/issues/4), which identifies a =
security vulnerability in `bzlib`, thus raising a need for urgent =
update.=20
>>=20
>> Best regards,
>> Andrew
>=20