Hi Salvatore, Am Mittwoch, den 10.02.2021, 22:03 +0100 schrieb Salvatore Bonaccorso: [...] > > I'm not fully in favor to have all the (build-)rdeps forced out of > Debian, that would likely not be a benefit as seems unfair to the > castle-game-engine, game-data-packager and neurodebian packages, but > still think having out xcftools out of bullseye would be the right > thing. >
I believe it makes sense to remove xcftools from Debian because there is a lack of upstream support and development but I wouldn't be too aggressive about the removal at the moment. My intention is to send a patch to fix the open CVE in stable to you when we have addressed the remaining 32 bit issues. I believe it would be possible to substitute xcftools with imagemagick but as Simon McVittie for game-data-packager already pointed out, the result wouldn't always be the same. So a bug report like "Should this package be removed from Debian" with severity important should be sufficient for now and bug reports for reverse- decencies that highlight the current problems are a good start. Cheers, Markus
signature.asc
Description: This is a digitally signed message part
