Package: osiris
Severity: important

I'm currently looking over all packages which had  a DSA in the
last five years to add hardened build flags.

osiris looks like it should rather be removed?
- Dead upstream (website has vanished off the net)
- Practically unused according to popcon
- Embeds and uses a very old version of DB (which actually has
  an incorrect format string exposed when building with hardened
  build flags)
- No maintainer upload since 2009

Cheers,
        Moritz



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to