[openvrml maintainers added to CC]
On 2013-09-23 4:38, Cyril Brulebois wrote:
Control: tag -1 moreinfo wheezy
Ansgar Burchardt <ans...@debian.org> (2013-08-17):
I prepared an update for openvrml that disable JavaScript support as
the package fails to build with newer versions of libmozjs-dev. As
it
might be used to view downloaded files, I think it should not use
libmozjs185-dev which has broken sandboxing (as far as I
understand).
Note that this bug (#710616) is not fixed in unstable yet, but
included in the suggested patch for #710082.
I think this means we get to wait until it reaches unstable so that
we
get some feedback before considering it for stable? Hoping this is
correct, tagging the bug report accordingly.
Given the current state of the package in unstable, I'd be tempted to
sugggest it should rather be a removal candidate. The highest popcon of
any of the binary packages is less than 90, with the "recent" count only
making it to 2, it has no reverse-dependencies and a four-month old RC
bug with no follow-up (well, it's six months old, but it's only been RC
for four of those).
It looks like we'll be accepting the newer iceweasel packages from
security for 7.2, so under the circumstances I'd be prepared to accept
the direct fix so long as the remaining functionality of the package
gets some testing before the point release (assuming the consensus is to
fix rather than RM the package). If anyone has some insight in to how
useful the package is once the Javascript support has been removed, that
would be appreciated.
Regards,
Adam
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
