[From nobody Tue Jun 23 08:06:05 2026
Received: (at submit) by bugs.debian.org; 16 Jun 2026 03:48:50 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-10.0 required=4.0 tests=BAYES_00,FROMDEVELOPER,
 NO_RELAYS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 9; hammy, 140; neutral, 37; spammy, 2.
 spammytokens:0.995-1--sinking, 0.941-+--H*r:bugs.debian.org
 hammytokens:0.000-+--H*F:U*carnil, 0.000-+--XDebbugsCc,
 0.000-+--X-Debbugs-Cc, 0.000-+--H*M:valinor, 0.000-+--H*Ad:N*Bug
Return-path: <carnil@debian.org>
Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96)
 (envelope-from <carnil@debian.org>) id 1wZKnC-00E9Zc-1L
 for submit@bugs.debian.org; Tue, 16 Jun 2026 03:48:50 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Salvatore Bonaccorso <carnil@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: libcrypt-dsa-perl: keep out of testing (eventually remove)
Message-ID: <178158172282.1090918.4202509564240401768.reportbug@elende.valinor.li>
X-Mailer: reportbug 13.2.0
Date: Tue, 16 Jun 2026 05:48:42 +0200
Delivered-To: submit@bugs.debian.org

Source: libcrypt-dsa-perl
Version: 1.20-1
Severity: serious
Justification: not suitable for stable release
X-Debbugs-Cc: Dominic Hargreaves <dom@earth.li>, carnil@debian.org, team@security.debian.org

Hi

Cc'ing in particular Dominic if he wants to raise an objection.

Crypt::DSA is deprecated and should actually not be used anymore, has
security issues (which though got fixed so far).

I propose to still keep libcrypt-dsa-perl out of testing and not to
get included in forky. If Dominic agrees maybe even already remove it
from unstable/testing. There are no issues with the removal itself:

,---- [ dak rm --suite=unstable -n -R libcrypt-dsa-perl ]
| Will remove the following packages from unstable:
|
| libcrypt-dsa-perl |     1.21-1 | source, all
|
| Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
|
| ------------------- Reason -------------------
|
| ----------------------------------------------
|
| Checking reverse dependencies...
| No dependency problem found.
`----

And there is low and sinking popcon usage:
https://qa.debian.org/popcon.php?package=libcrypt-dsa-perl

Regards,
Salvatore
]