Source: openslp-dfsg
Severity: serious
The last maintainer upload of openslp happened in 2007
and it's orphaned for 5.5 years now. The 1.2 branch is
completely abandoned upstream.
At the minimum the package should be upgraded to 2.0,
but the comment at
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5177
suggests it's completely abandoned upstream.
Cheers,
Moritz