Hi Markus, On Thu, Feb 11, 2021 at 03:03:19AM +0100, Markus Koschany wrote: > Hi Salvatore, > > Am Mittwoch, den 10.02.2021, 22:03 +0100 schrieb Salvatore Bonaccorso: > [...] > > > > I'm not fully in favor to have all the (build-)rdeps forced out of > > Debian, that would likely not be a benefit as seems unfair to the > > castle-game-engine, game-data-packager and neurodebian packages, but > > still think having out xcftools out of bullseye would be the right > > thing. > > > > I believe it makes sense to remove xcftools from Debian because there is a > lack > of upstream support and development but I wouldn't be too aggressive about the > removal at the moment. My intention is to send a patch to fix the open CVE in > stable to you when we have addressed the remaining 32 bit issues.
Yes that sounds fine. Admittely it was for us in dsa-needed only because Hugo initially aimed to adress it across all suites top-down. It might just be an option to include a fix once it is stable enough via a point release. But we can look at it once you have a fix as well for the 32bit issues. So thanks for working on it! > I believe it > would be possible to substitute xcftools with imagemagick but as Simon > McVittie > for game-data-packager already pointed out, the result wouldn't always be the > same. So a bug report like "Should this package be removed from Debian" with > severity important should be sufficient for now and bug reports for reverse- > decencies that highlight the current problems are a good start. Yes so we have done this, but in double-checking with the release team the severities are RC (with the clear indication that if it turns not to be possible, that it can be revisited). I have seen Simon's reply, so the imagemagick convert variant does not look the same in in the game-data-packager case actually worse. It is late in the preparation for bullseye and we should have done this actually much earlier. So we will see if it is feasible or not and then have a desirable state or "bite the bullet". Regards, Salvatore
