[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#815360: Bug#795428: OpenSLP 1.2 should not be part of stretch



On Sun, Feb 21, 2016 at 12:20:52AM +0000, Julien Cristau wrote:
> Control: clone -1 -2 -3 -4 -5 -6 -7 -8
> Control: reassign -2 cups 2.1.3-1
> Control: retitle -2 cups: build-depends on libslp-dev
> Control: reassign -3 kde-runtime 4:15.08.3-1
> Control: retitle -3 kde-runtime: build-depends on libslp-dev
> Control: reassign -4 kio-extras 4:15.08.3-1
> Control: retitle -4 kio-extras: build-depends on libslp-dev
> Control: reassign -5 nis 3.17-34
> Control: retitle -5 nis: build-depends on libslp-dev
> Control: reassign -6 ola 0.9.8-1
> Control: retitle -6 ola: build-depends on libslp-dev
> Control: reassign -7 openldap 2.4.42+dfsg-2
> Control: retitle -7 openldap: build-depends on libslp-dev
> Control: reassign -8 roaraudio 1.0~beta11-5
> Control: retitle -8 roaraudio: build-depends on libslp-dev
> 
> On Thu, Aug 13, 2015 at 23:55:59 +0200, Moritz Muehlenhoff wrote:
> 
> > Source: openslp-dfsg
> > Severity: serious
> > 
> > The last maintainer upload of openslp happened in 2007
> > and it's orphaned for 5.5 years now. The 1.2 branch is
> > completely abandoned upstream.
> > 
> > At the minimum the package should be upgraded to 2.0,
> > but the comment at
> > https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5177
> > suggests it's completely abandoned upstream.
> > 
> Cloning the bug against the reverse dependencies.

Dear KDE maintainers,
this seems to be a forgotten/unused build dep? While kde-runtime build depends
on libslp-dev, none of the binary packages actually link against it.

Cheers,
        Moritz


Reply to: