On Fri, May 26, 2017 at 03:51:58PM +0200, Raphael Hertzog wrote: > Hello, > > we have a very large number of CVE on autotrace which has been dropped > from all Debian releases except wheezy. The package is not used by any > LTS sponsor and its popcon is rather low (~400 but with 35 active users > only). > > It's in Suggests of imagemagick and fontforge, and in a non-default OR > dependency of mftrace. Thus there are no reverse dependencies that would > be broken by the loss of that package. > > I thus suggest to mark the package as unsupported in wheezy. Any > objections? > > https://security-tracker.debian.org/tracker/source-package/autotrace
Agreed. Cheers, -- Guido
