Source: fangfrisch
Version: 1.7.0-1
Severity: grave
Tags: upstream

Control: forwarded -1 https://github.com/rseichter/fangfrisch/issues/30

The sanesecurity section of default configuration, if enabled, relies on 
an unofficial HTTP mirror which is seriously overloaded and probably 
seriously expensive for their operators, since it is located in 
Australia.
The only other known HTTP mirror is mentioned on 
https://wiki.gentoo.org/wiki/ClamAV_Unofficial_Signatures, with a vague 
note about it being available to the public.

Until fangfrisch will implement rsync support, I do not think that it is 
safe to include fangfrisch in a Debian release due to the possible 
effect on unsuspecting third party mirrors.

This has also been discussed upstream:
https://github.com/rseichter/fangfrisch/issues/30

-- 
ciao,
Marco

Attachment: signature.asc
Description: PGP signature

Reply via email to