Bug#789256: cmus: Pulls in unwanted and potentially dangerous DECnet packages through libroar2

[Jonas Smedegaard]

Quoting Jonas Smedegaard (2015-06-20 12:51:10)
> Quoting John Paul Adrian Glaubitz (2015-06-20 12:22:09)
> > On 06/20/2015 05:45 PM, Jonas Smedegaard wrote:
> >> Please elaborate what in cmus is "broken by default" - seems this 
> >> whole "issue" of yours stems from installing an additional package 
> >> only _suggested_ by cmus.
> >
> > It's not a Suggests, it's a Recommends:
> >
> > glaubitz at ikarus:~$ apt-cache depends cmus |grep roar
> >   Recommends: libroar2
> > glaubitz at ikarus:~$
> > 
> > and apt is - by default - configured to install Recommends.
> > 
> > Installing cmus on a newly installed system will therefore install 
> > libdnet as a transitive dependency
> 
> Agreed cmus pulls in the _library_ for dnet.

Correction: I agree cmus pulls in the library for _ROAR_.


> > and will result in cmus getting stuck directly after start as I have 
> > reported earlier in the first message in this bug report [1].
> 
> The first message for this bugreport talks about --with-suggests.
> 
> Can you please clarify how cmus causes beakage rather than the use of 
> --with-suggests.

Please do clarify above,

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20150620/8d61bca9/attachment-0001.sig>