Bug#789256: cmus: Pulls in unwanted and potentially dangerous DECnet packages through libroar2

[James Cowgill]

(sorry I got the pts email addresses wrong before)

On Fri, 2015-06-19 at 13:06 +0200, John Paul Adrian Glaubitz wrote:
> On 06/19/2015 01:02 PM, James Cowgill wrote:
> > Using apt-get with --install-suggests isn't that common so I don't 
> > think this warrants an RC severity (it doesn't break the package
> > for everyone).
> 
> It was RC severity before, see [1]. Furthermore, ROAR audio currently
> breaks cmus because of DECnet and the ROAR developers refuse to
> remove support for it.

From the bug:
> RC severity mostly so this shows up on the radars of all the right
> people crossing off the details we need to finalise for the release.

That doesn't apply here.

Hmm I personally can't get cmus to break this way but it could be RC if
it breaks in default installations.

> > If you look at the status of DECnet:
> > 
> > No kernel maintainer (except general net/ maintenance): 
> > https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/tree/M
> AINTAINERS?id=v4.1-rc8#n3060
> > 
> >  dnprogs upstream appears to be dead: 
> > http://sourceforge.net/projects/linux-decnet/
> > 
> > dnprogs is orphaned: 
> > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750670
> 
> Which is my whole point.

Then this is a bug in roaraudio / dnprogs, not cmus.

> > IMHO dnprogs should be removed and roaraudio should drop support
> > for DECnet - unless someone who actually uses DECnet is willing to
> > maintain this stuff.
> 
> The ROAR developers and maintainers refuse to do that which is why
> we should drop it from cmus. They, for some reason, think it's important
> to support a pre-historic networking protocol.

I found this bug:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675014

This is the newer one:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=755934

But I couldn't find any evidence the _current_ maintainer of roaraudio
has refused to remove DECnet support. The current bug about it has no
replies.

James
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20150619/05832214/attachment.sig>