Package: mantis
Severity: grave
Justification: user security hole
Mantis shouldn't ship with Etch. It is very much out of date (current stable
is 1.0 something), has a horrible security history (19 CVE IDs since 2005,
many describing several vulnerabilities), upstream is hiding the details in
private bugs, making it hard to support it and it has a tiny user base.
Also, Igor Genibel has resigned due to a lack of time, so it's currently
unmaintained.
Cheers,
Moritz
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-1-686
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
