[Secure-testing-team] please remove convirt and cgiwrap from testing

Thijs Kinkhorst thijs at debian.org
Sun Sep 28 08:45:30 UTC 2008


Hi,

Here's a request to remove two security-bugged packages from testing:

convirt:
 * Has security issue spread around the code. There's a patch but
   it's necessarily invasive and untested.
 * No maintainer response to the security bug or any other open bug.
 * Package not in stable, doesn't seem a good idea to introduce it into
   stable when it's unmaintained.

cgiwrap:
 * Security issue with no adequate patch available.
 * Security sensitive application but unmaintained; last maintainer
   upload in 2005.
 * Many newer upstreams available.


thanks,
Thijs
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 481 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20080928/086e5acb/attachment.pgp 


More information about the Secure-testing-team mailing list