[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#765374: Please mark axis2c as unsupported on Squeeze



Package: debian-security-support
Severity: normal

Since nobody objected on debian-lts, I would like to request
that we mark "axis2c" as unsupported on squeeze. See below for the
rationale.

>From a quick check, the only reverse dependency that would be
also affected is librampart0 (source: rampart) which has no reverse
dependencies in squeeze. So you might want to mark that one
as not supported as well. 

Thank you!

On Mon, 22 Sep 2014, Holger Levsen wrote:
> Hi,
> 
> adding the security team to the loop :)
> 
> On Montag, 22. September 2014, Raphael Hertzog wrote:
> > while going through the list of open CVE in oldstable I stumbled upon two
> > issues concerning axis2c:
> > https://security-tracker.debian.org/tracker/source-package/axis2c
> > 
> > None of those issues are fixed upstream and they are also not fixed
> > in unstable. It looks like the software is mostly dead upstream with
> > no new releases for years.
> > 
> > Shall we declare that axis2c is no longer supportable on squeeze?
> > 
> > If yes, what's the way to do that, opening a bug report against
> > debian-security-support? (IIRC we used to drop the package
> > from the release entirely during point releases but this
> > is not possible here).

-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


Reply to: