Bug#789256: cmus: Pulls in unwanted and potentially dangerous DECnet packages through libroar2

[John Paul Adrian Glaubitz]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 06/20/2015 05:45 PM, Jonas Smedegaard wrote:
> Please elaborate what in cmus is "broken by default" - seems this
> whole "issue" of yours stems from installing an additional package
> only _suggested_ by cmus.

It's not a Suggests, it's a Recommends:

glaubitz at ikarus:~$ apt-cache depends cmus |grep roar
  Recommends: libroar2
glaubitz at ikarus:~$

and apt is - by default - configured to install Recommends.

Installing cmus on a newly installed system will therefore install
libdnet as a transitive dependency and will result in cmus getting
stuck directly after start as I have reported earlier in the
first message in this bug report [1].

Thanks,
Adrian

> [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789256#5

- -- 
 .''`.  John Paul Adrian Glaubitz
: :' :  Debian Developer - glaubitz at debian.org
`. `'   Freie Universitaet Berlin - glaubitz at physik.fu-berlin.de
  `-    GPG: 62FF 8A75 84E0 2956 9546  0006 7426 3B37 F5B5 F913
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=EfCN
-----END PGP SIGNATURE-----