https://seclists.org/oss-sec/2026/q3/150
We have the above public announcement about seunshare. https://packages.debian.org/search?keywords=policycoreutils-sandbox The package is only supplied in Bookworm and not in Trixie. After that we stopped packaging it for Debian because no-one was interested in using it. I don't think that there is a good use case for this or any evidence of anyone ever using it. The best thing to do is to get rid of it. The bookworm version is still installable in Trixie (no dependencies on things that have conflicts) which means that someone who installed it on a whim (or got it through having apt install Recommended packages) years ago could have upgraded their system and had it stick around. So I think we just want a Conflicts line to force uninstall or a new version of the package that doesn't have a binary with a changelog saying that it's removed for security reasons. Do we need an update for oldstable for this or just for stable? What do you think? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/
