[Dev] [consensus][due: 2016-10-20] Quarentena for unsecured unmaintained packages

fauno fauno at endefensadelsl.org
Fri Oct 7 16:25:40 GMT 2016


Joshua Haase <xihh at riseup.net> writes:

> André Silva <emulatorman at riseup.net> writes:
>
>> [ Unknown signature status ]
>> On 10/04/2016 07:31 PM, Alejandro Hernández wrote:
>>> But I'm talking about what to do with detected unsecured (long time)
>>> unmaintained packages. I mean packages without updates with security
>>> vulnerabilities known. (Like nowadays 'icecat')
>>
>> We could move icecat to [libre-testing] until new version will be
>> released, what do you think guys?
>
> Agreed.

testing is for new, possible unstable packages, not for old and
unmaintained.

i'd remove them or move them to [unmaintained].  there's lots of
unmaintained packages on [pcr] too...

-- 
:D
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 584 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20161007/dc5c136e/attachment.sig>


More information about the Dev mailing list