Bug#1143950: libcrypt-password-perl: Upstream not maintained since 2012, has security issues; should not be released with forky

[Salvatore Bonaccorso]

Source: libcrypt-password-perl
Version: 0.28-2
Severity: serious
Justification: unfit for forky release
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>, team at security.debian.org

Hi

libcrypt-password-perl has not been update upstream since 2012, and
has open security issues (CVE-2026-16235, CVE-2026-6656).

So rather than providing libcrypt-password-perl in Debian forky (which
got freshly introduced), we might keep it out of testing (or maybe get
it removed completely)?

Gregor, what is your opinion here?

Regards,
Salvatore