[Secure-testing-team] Bug#811216: chiark-utils-bin: old crypto dependency

[Ben Hildred]

Package: chiark-utils-bin
Version: 4.4.2
Severity: normal
Tags: security

>From the description:
    summer and watershed require the installation of the Recommended crypto
libraries;

the recommended crypto libraries are libgmp10 (which does not appear th have
any issues) and libnettle4 which is outdated and has known issues. A binnmu may
resolve the issues completely for the moment, but the better long term solution
would be to repackage summer and watershed into a septate package with real
dependencies.



-- System Information:
Debian Release: stretch/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 4.2.0-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages chiark-utils-bin depends on:
ii  libc6  2.21-6

Versions of packages chiark-utils-bin recommends:
ii  libgmp10    2:6.1.0+dfsg-2
pn  libnettle4  <none>

Versions of packages chiark-utils-bin suggests:
ii  libice6    2:1.0.9-1+b1
ii  libsm6     2:1.2.2-1+b1
ii  libx11-6   2:1.6.3-1
ii  libxau6    1:1.0.8-1
ii  libxcb1    1.10-3+b1
ii  libxdmcp6  1:1.1.2-1
ii  libxext6   2:1.3.3-1
ii  libxmu6    2:1.1.2-2
ii  libxt6     1:1.1.5-1

-- no debconf information