Bug#789256: cmus: Pulls in unwanted and potentially dangerous DECnet packages through libroar2
Jonas Smedegaard
dr at jones.dk
Sun Jun 21 00:44:11 UTC 2015
Quoting John Paul Adrian Glaubitz (2015-06-20 13:50:28)
> On 06/20/2015 08:42 PM, Jonas Smedegaard wrote:
>> Please file bugreports regarding security flaws of DECnet packages
>> against those DECnet packages, *not* their reverse dependencies!
>
> Jonas, do you actually read what I wrote?
Yes.
> This very bug report exists because the maintainer of roaraudio
> refuses to handle any bug reports regarding this issue
That is no excuse for barking up the wrong tree: The proper way to
escalate is to move the bugreport for the real issue to the technical
committee.
> The sole reason for this bug report is to free cmus from broken and
> unwanted dependencies.
...and the sole relevancy to discuss in this bugreport is therefore the
bug reported.
It seems there are disagreement if cmus is broken and if the dependency
is unwanted.
- Jonas
--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
[x] quote me freely [ ] ask before reusing [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20150620/31035706/attachment-0001.sig>
More information about the pkg-multimedia-maintainers
mailing list