Bug#789256: cmus: Pulls in unwanted and potentially dangerous DECnet packages through libroar2

Jonas Smedegaard dr at jones.dk
Sun Jun 21 00:44:11 UTC 2015

Quoting John Paul Adrian Glaubitz (2015-06-20 13:50:28)
> On 06/20/2015 08:42 PM, Jonas Smedegaard wrote:
>> Please file bugreports regarding security flaws of DECnet packages 
>> against those DECnet packages, *not* their reverse dependencies!
> Jonas, do you actually read what I wrote?


> This very bug report exists because the maintainer of roaraudio 
> refuses to handle any bug reports regarding this issue

That is no excuse for barking up the wrong tree: The proper way to 
escalate is to move the bugreport for the real issue to the technical 

> The sole reason for this bug report is to free cmus from broken and 
> unwanted dependencies.

...and the sole relevancy to discuss in this bugreport is therefore the 
bug reported.

It seems there are disagreement if cmus is broken and if the dependency 
is unwanted.

 - Jonas

 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20150620/31035706/attachment-0001.sig>

More information about the pkg-multimedia-maintainers mailing list