Cyril Brulebois <k...@debian.org> (09/12/2009):
> Tagging security accordingly, so that it gets some attention from
> security folks. (Wild guess: checking packages BD'ing on it uploaded
> since the .so symlink got broken should help get a list of
> candidates.)

I proceeded differently:
| $ grep-dctrl -s Package,Binary -F Build-Depends libslang2-dev 
/var/lib/apt/lists/*sid*Sources

Then I took at look at source packages for which no binary was
depending on libslang2. Candidates for sid as of today (looking up the
dependencies through packages.debian.org):
| [main]
|   pearpc
| [contrib]
|   gnuboy
|   stella

Looking at libslang2-dev's contents, it only ships two headers, which
aren't used by those packages; I guess I'm going to open a wishlist
bug against all of them so that they drop the Build-Depends which
triggers those false-positives.

This also means the following packages (still: as of today in sid)
were OK:
| [main]
|   aalib
|   asciijump
|   cdebconf
|   dbacl
|   francine
|   freej
|   fte
|   jed
|   jed
|   lpe
|   libcaca
|   libterm-slang-perl
|   mc
|   most
|   nano
|   newt
|   newt
|   pdmenu
|   redhat-cluster
|   slang-slirp
|   slcfitsio
|   slcurl
|   slexpat
|   slgdbm
|   slgsl
|   slgtk
|   slhist
|   slmon
|   slpvm
|   slrn
|   slsqlite
|   slwildcard
|   slxfig
|   ticker
|   timidity
|   util-linux
|   util-linux
|   yatm
| [contrib]
|   dosemu

I'm tempted to remove the security tag, but it wouldn't be nice if
some packages would be built against libslang2 while it's still buggy,
so I'm leaving the security tag for now.

Mraw,
KiBi.

Attachment: signature.asc
Description: Digital signature

Reply via email to