[openvrml maintainers added to CC] On 2013-09-23 4:38, Cyril Brulebois wrote:
Control: tag -1 moreinfo wheezy Ansgar Burchardt <ansgar@debian.org> (2013-08-17):I prepared an update for openvrml that disable JavaScript support asthe package fails to build with newer versions of libmozjs-dev. As itmight be used to view downloaded files, I think it should not uselibmozjs185-dev which has broken sandboxing (as far as I understand).Note that this bug (#710616) is not fixed in unstable yet, but included in the suggested patch for #710082.I think this means we get to wait until it reaches unstable so that weget some feedback before considering it for stable? Hoping this is correct, tagging the bug report accordingly.
Given the current state of the package in unstable, I'd be tempted to sugggest it should rather be a removal candidate. The highest popcon of any of the binary packages is less than 90, with the "recent" count only making it to 2, it has no reverse-dependencies and a four-month old RC bug with no follow-up (well, it's six months old, but it's only been RC for four of those).
It looks like we'll be accepting the newer iceweasel packages from security for 7.2, so under the circumstances I'd be prepared to accept the direct fix so long as the remaining functionality of the package gets some testing before the point release (assuming the consensus is to fix rather than RM the package). If anyone has some insight in to how useful the package is once the Javascript support has been removed, that would be appreciated.
Regards, Adam