Bug#1140120: libcrypt-dsa-perl: keep out of testing (eventually remove)

Salvatore Bonaccorso carnil at debian.org
Tue Jun 16 04:48:42 BST 2026


Source: libcrypt-dsa-perl
Version: 1.20-1
Severity: serious
Justification: not suitable for stable release
X-Debbugs-Cc: Dominic Hargreaves <dom at earth.li>, carnil at debian.org, team at security.debian.org

Hi

Cc'ing in particular Dominic if he wants to raise an objection.

Crypt::DSA is deprecated and should actually not be used anymore, has
security issues (which though got fixed so far).

I propose to still keep libcrypt-dsa-perl out of testing and not to
get included in forky. If Dominic agrees maybe even already remove it
from unstable/testing. There are no issues with the removal itself:

,---- [ dak rm --suite=unstable -n -R libcrypt-dsa-perl ]
| Will remove the following packages from unstable:
|
| libcrypt-dsa-perl |     1.21-1 | source, all
|
| Maintainer: Debian Perl Group <pkg-perl-maintainers at lists.alioth.debian.org>
|
| ------------------- Reason -------------------
|
| ----------------------------------------------
|
| Checking reverse dependencies...
| No dependency problem found.
`----

And there is low and sinking popcon usage:
https://qa.debian.org/popcon.php?package=libcrypt-dsa-perl

Regards,
Salvatore



More information about the pkg-perl-maintainers mailing list