[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RFC: Removal of old cyrus-sasl (libsasl7) from sarge and sid



As of this writing, all packages in Debian have transitioned to the newer
libsasl2 (cyrus-sasl2).  The last user of libsasl7 (sendmail-wide) is being
removed from sid at the request of its maintainer.

Cyrus-SASL 1.5 (libsasl7) has been deprecated upstream for years.

Can we remove cyrus-sasl and libsasl7 packages from sarge and sid?  Moving
them to oldlibs is the other possibility.  However, oldlibs would require
security efforts to be maintained for sarge at the very least.  libsasl7
is an occasional target for a security upgrade, AND it almost always causes
trouble... there is real benefit on dropping it from the distribution.

I am still waiting word from the SASL maintainer (dima@d.o) on the issue,
but assuming he has nothing against the removal, it would be good to know
what our users think of it.

It is important to note that anything still using cyrus-sasl 1.5 is way past
due time for an upgrade, and you are better off without it IMHO (I speak as
a long user of SASL-using apps, long time maintainer of SASL-using apps, and
part time co-maintainer of cyrus-sasl*).

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh



Reply to: