Your message dated Sat, 14 Jan 2017 10:40:52 +0000 with message-id <[email protected]> and subject line Bug#850105: Removed package(s) from stable has caused the Debian Bug report #850105, regarding RM: sogo -- RoST; multiple security issues to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 850105: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850105 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: release.debian.org Severity: normal User: [email protected] Usertags: rm Hi Stable release managers, sogo in the 2.x series is security-wise unsupportable (confirmed as well by Jeroen). It is affected by several CVEs which are unfixed in stable as well. Could you please remove sogo from stable in the next point release? I know it is a seprate thing, so take this just as comment: Stretch as well ideally should not contain any 2.x version, that one should be autoremoved again in some days. Unclear if the situation would be different for 3.x. Regards, Salvatore
--- End Message ---
--- Begin Message ---We believe that the bug you reported is now fixed; the following package(s) have been removed from stable: sogo | 2.2.9+git20141017-1 | source, amd64, arm64, armel, armhf, i386, mips, mipsel, powerpc, ppc64el, s390x sogo-common | 2.2.9+git20141017-1 | all sogo-dbg | 2.2.9+git20141017-1 | amd64, arm64, armel, armhf, i386, mips, mipsel, powerpc, ppc64el, s390x sogo-openchange | 2.2.9+git20141017-1 | amd64, arm64, armel, armhf, i386, mips, mipsel, powerpc, ppc64el, s390x ------------------- Reason ------------------- RoST; multiple security issues ---------------------------------------------- Note that the package(s) have simply been removed from the tag database and may (or may not) still be in the pool; this is not a bug. The package(s) will be physically removed automatically when no suite references them (and in the case of source, when no binary references it). Please also remember that the changes have been done on the master archive and will not propagate to any mirrors until the next dinstall run at the earliest. Packages are usually not removed from testing by hand. Testing tracks unstable and will automatically remove packages which were removed from unstable when removing them from testing causes no dependency problems. The release team can force a removal from testing if it is really needed, please contact them if this should be the case. Bugs which have been reported against this package are not automatically removed from the Bug Tracking System. Please check all open bugs and close them or re-assign them to another package if the removed package was superseded by another one. The version of this package that was in Debian prior to this removal can still be found using http://snapshot.debian.org/. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected]. The full log for this bug can be viewed at https://bugs.debian.org/850105 This message was generated automatically; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]. Debian distribution maintenance software pp. Archive Administrator (the ftpmaster behind the curtain)
--- End Message ---
