Hi Christoph, hi Jonas,
On Tue, Jun 01, 2021 at 09:41:25PM +0200, Moritz Mühlenhoff wrote:
> Am Mon, May 31, 2021 at 04:31:13PM +0200 schrieb Christoph Berg:
> > Re: Moritz Muehlenhoff
> > > Package: dacs
> > > Severity: important
> > > Tags: security
> > > X-Debbugs-Cc: Debian Security Team <t...@security.debian.org>
> > >
> > > dacs bundles a copy in src/libradius/src/radlib.c:
> > > https://www.freebsd.org/security/advisories/FreeBSD-SA-21:12.libradius.asc
> >
> > Fwiw, the package is orphaned, I do not intend to fix this personally.
> >
> > I am not aware of anyone using the package (the company for which we
> > were packaging it has moved to something else, and iirc Jonas who was
> > interested in it some time ago has also said he went for something
> > else), so removal from bullseye is certainly an option.
>
> Fair enough, unless anyone steps forward, can you file an RM bug
> in time of the freeze?
Agreed, if there is not anymore much use of it (and popcon is very low
as well, indicating this might be the case in general), then removal
would be good. In fact is it as well possible:
carnil@coccia:~$ dak rm --suite=testing -n -R dacs
Will remove the following packages from testing:
dacs | 1.4.40-2 | source
dacs | 1.4.40-2+b1 | amd64, arm64, armel, armhf, i386, mips64el, mipsel,
ppc64el, s390x
dacs-examples | 1.4.40-2 | all
libapache2-mod-dacs | 1.4.40-2+b1 | amd64, arm64, armel, armhf, i386, mips64el,
mipsel, ppc64el, s390x
libdacs-dev | 1.4.40-2+b1 | amd64, arm64, armel, armhf, i386, mips64el, mipsel,
ppc64el, s390x
libdacs1 | 1.4.40-2+b1 | amd64, arm64, armel, armhf, i386, mips64el, mipsel,
ppc64el, s390x
Maintainer: Christoph Berg <m...@debian.org>
------------------- Reason -------------------
----------------------------------------------
Checking reverse dependencies...
No dependency problem found.
carnil@coccia:~$
but time is getting tight, so this needs to be done quite soon.
Regards,
Salvatore
