Hello, On Sun, 17 Dec 2017, Ola Lundqvist wrote: > After some more reading I think removing it should be ok anyway. I'll > change the wording from "will be removed" to "may be removed" to allow > us the freedom to keep it if nobody takes the action to actually > remove it.
Actually it got removed from wheezy in the mean time. Since it was marked that way in dla-needed.txt, I pinged the ftp.d.o bug report and pinged Chris Lamb (as ftp assistant) and the package is gone from wheezy: $ rmadison libnet-ping-external-perl libnet-ping-external-perl | 0.13-1 | oldstable-kfreebsd | source, all https://tracker.debian.org/pkg/libnet-ping-external-perl Cheers, > On 17 December 2017 at 20:28, Ola Lundqvist <o...@inguza.com> wrote: > > Hi > > > > I agree that it may not be the best to remove it then. I suggest we > > mark it as no-dsa then. Any objections? > > > > // Ola > > > > On 22 November 2017 at 21:00, Emilio Pozuelo Monfort <po...@debian.org> > > wrote: > >> On 08/11/17 20:19, Ola Lundqvist wrote: > >>> Hi > >>> > >>> Considering that this package is about to be removed from jessie I > >>> guess it should be removed from wheezy too. How is that done? Should I > >>> contact the FTP maintainers about it, or do we simply ignore the > >>> issue? > >> > >> We don't have point releases, so I'm not sure we can get a package removed > >> at > >> this stage without extra work by the ftp masters. So our options would be: > >> > >> - mark as no-dsa if it's not important enough > >> - mark as unsupported / end-of-life > >> - fix it > >> - get it removed > >> > >> The issue seems only exploitable if it's used by a service that is exposed > >> remotely or to other issues... and has no rdeps in wheezy. OTOH there is at > >> least one sponsor using that package. So removing it may not be the best > >> course > >> given there is a proposed patch. So I'd go with either no-dsa or fix it, > >> depending on the assessed importance. > >> > >> Cheers, > >> Emilio > > > > > > > > -- > > --- Inguza Technology AB --- MSc in Information Technology ---- > > / o...@inguza.com Folkebogatan 26 \ > > | o...@debian.org 654 68 KARLSTAD | > > | http://inguza.com/ Mobile: +46 (0)70-332 1551 | > > \ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 / > > --------------------------------------------------------------- > > > > -- > --- Inguza Technology AB --- MSc in Information Technology ---- > / o...@inguza.com Folkebogatan 26 \ > | o...@debian.org 654 68 KARLSTAD | > | http://inguza.com/ Mobile: +46 (0)70-332 1551 | > \ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 / > --------------------------------------------------------------- > -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: https://www.freexian.com/services/debian-lts.html Learn to master Debian: https://debian-handbook.info/get/