Package: ftp.debian.org
Severity: normal

Hello ftp-masters,

I'm requesting the removal of python-restkit due to a long-term
security issue (CVE-2015-2674).  Despite being reported upstream for
more than three years, python-restkit still does not validate TLS
certificates, and upstream has not had a commit since December 2015.

python-restkit has two reverse-dependencies which have been RC-buggy due to 
python-restkit for nine months now, one of which also has a dead upstream.  I 
am filing separate RoQA requests for both of those packages as well.

Thank you for your help.

Sincerely,

--
Harlan Lieberman-Berg
~hlieberman

Reply via email to