Package: debian-security-support Severity: normal Since nobody objected on debian-lts, I would like to request that we mark "axis2c" as unsupported on squeeze. See below for the rationale.
>From a quick check, the only reverse dependency that would be also affected is librampart0 (source: rampart) which has no reverse dependencies in squeeze. So you might want to mark that one as not supported as well. Thank you! On Mon, 22 Sep 2014, Holger Levsen wrote: > Hi, > > adding the security team to the loop :) > > On Montag, 22. September 2014, Raphael Hertzog wrote: > > while going through the list of open CVE in oldstable I stumbled upon two > > issues concerning axis2c: > > https://security-tracker.debian.org/tracker/source-package/axis2c > > > > None of those issues are fixed upstream and they are also not fixed > > in unstable. It looks like the software is mostly dead upstream with > > no new releases for years. > > > > Shall we declare that axis2c is no longer supportable on squeeze? > > > > If yes, what's the way to do that, opening a bug report against > > debian-security-support? (IIRC we used to drop the package > > from the release entirely during point releases but this > > is not possible here). -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexian.com/services/debian-lts.html Learn to master Debian: http://debian-handbook.info/get/ -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org