Re: What to do about t1lib / RC #637488

[Moritz Mühlenhoff <jmm@inutil.org>]

On Sat, Aug 04, 2012 at 12:37:23AM +0200, Tobias Hansen wrote:
> Hi,
> 
> t1lib has no upstream, but a number of security vulnerabilities and reverse dependencies.
> 
> We need to know if #637488 can be ignored for wheezy or if we should go for removal and file bugs against the reverse dependencies.

We fixed up the known security issues in DSAs and while the code base is
admittedly old and crusty, I don't see this issue as pressing that the removal
cannot wait until Jessie.

Cheers,
        Moritz