On Mon, Apr 20, 2020 at 11:39:14AM -0500, Richard Laager wrote:
> forwarded 958027 https://gitlab.com/NTPsec/ntpsec/issues/651
>
> Two key upstream developers have said this does not affect NTPsec.
Thanks, I'll update the Debian Security Tracker.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove mod-authz-securepass. It's removed from testing June 2018
and dead upstream (http://www.gippa.net/securepass-eol)
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove libnss-securepass. It's removed from testing since
2018 and is dead upstream (http://www.gippa.net/securepass-eol).
Cheers,
Moritz
Source: crawl
Severity: important
Tags: security
This was assigned CVE-2020-11722:
https://dpmendenhall.blogspot.com/2020/03/dungeon-crawl-stone-soup.html
Patches:
https://github.com/crawl/crawl/commit/768f60da87a3fa0b5561da5ade9309577c176d04
Package: ftp.debian.org
Severity: normal
Please remove usbtc08-python. It depends on Python 2, is dead upstream, there
are no
reverse deps and the last maintainer upload was in 2015.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-gcm-client. It depends on Python 2, is dead upstream (last
commit
in 2013), there are no reverse deps and the last (and only) maintainer upload
was in
2013.
Cheers,
Moritz
Source: ntpsec
Severity: important
Tags: security
CVE-2020-11868 was assigned for NTP, does this also affect ntpsec in some way?
http://support.ntp.org/bin/view/Main/NtpBug3592
http://bugs.ntp.org/3592
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-prowlpy. It depends on Python 2, is dead upstream (last
commit nine years ago) and there are no remaining rdeps.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-shelltoolbox. It depends on Python 2, is dead upstream
(last commit in 2012), there are no reverse deps and the last maintainer
upload was in 2012.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove jaxml. It depends on Python 2, is dead upstream, there are no
reverse deps and the last maintainer upload was in 2010.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove slowaes. It depends on Python 2, is dead upstream (last commit in
2011) and there
are no reverse deps anymore.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-ipcalc. It depends on Python 2, there are no reverse deps,
it's orphaned and the former maintainer (CCed) suggested it's removal in
#945271.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-xmpp. It's dead upstream, depends on Python 2 and orphaned
since 2017 without an adopter.
There's one reverse dependency (dvcs-autosync), but it's being ported away from
python-xmpp (936459) and it's RC-buggy and dropped from testing,
Package: ftp.debian.org
Severity: normal
Please remove python-sptest. It depends on Python 2, is dead upstream (last
commit
from 2008) and there hasn't been a maintainer upload since 2008 either.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove ibniz. It depends on Python 2, is dead upstream (last
commit eight years ago) and the last (and only) upload was in 2013.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove drobo-utils. It depends on Python 2 and
https://github.com/petersilva/drobo-utils states:
| Is it Still Supported ?
| Not really. I no longer have any hardware to test with, so cannot
| validate anything. I switched to QNAP instead, which
Package: ftp.debian.org
Severity: normal
Please remove pyentropy. It depends on Python 2, there are no reverse
dependencies
and it FTBFSes since over four years now (813981).
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove shedskin. It depends on Python 2 (and it's not going to be
ported in the foreseeable future), see #938476.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove pycassa. It depends on Python 2, the last upstream commit happened
three years ago and the upstream PR for Py3 support (#178) hasn't seen any
update
since 2014.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove django-ratelimit. It depends on Python and is RC-buggy since
2015 (#806355) and consequently missed the last two stable releases. The
last maintainer upload was in 2014.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-cdd. It depends on Python 2, there are no reverse deps,
it's dead upstream and the last maintainer upload was in 2010.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove mpris-remote. It depends on Python 2, is dead upstream (last
commit
in 2013) and the last maintainer upload was in 2010.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove editobj. It depends on Python 2 and there are no reverse deps.
The package version currently in the archive is from 2006 and the last
upload was four years ago (and hasn't seen any action since the package
was adopted)
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove khmerconverter. It's dead upstream (last commit is from 2008, I
contacted
the authors, but all four email addresses bounced), depends on Python 2 and the
last
maintainer upload was in 2007.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove fusil. It's dead upstream, depends on Python 2 and the last
maintainer upload was in 2014.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove lavapdu. There hasn't been an upload since 2015, it depends on
Python 2 and the former upstream repository now redirects to
https://github.com/mattface/pdudaemon (which is ported to Python 3 and
available as src:pdudaemon)
Cheers,
Package: ftp.debian.org
Severity: normal
Please remove forg. It's dead upstream, depends on Python 2 and hasn't seen
a maintainer upload since 2006.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove syncthing-gtk. It depends on Python 2 and no Py3 is
foreseeable. Jelmer (CCed) acked the removal in #938614.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove petit. It depends on Python 2, is dead upstream and the last
maintainer upload
was in 2011.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove cron-deja-vu. It depends on Python 2, is dead upstream (last
commit in 2012) and hasn't
seen an upload since 2012.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-mk-livestatus. It depends on Python 2, there are no
reverse deps,
the last and only upload was in 2013 and the last upstream commit was five
years ago.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-naturalsort. There are no reverse deps, it depends on
Python 2,
the last and only maintainer upload was in 2013 and the last upstream commit
five
years ago.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove pydoubles. It depends on Python 2, there are no reverse deps
and it's dead upstream (has been replaced upstream by src:doublex)
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-bitbucket. It depends on Python 2, is dead upstream (last
commit 8 years ago),
there are no rev deps and the last and only upload was in 2012.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-fftw. It depends on Python 2, is dead upstream (last
commit from 8 years ago),
there are no reverse deps and src:pyfftw replaced it. The maintainer (CCed)
suggested removal
in #937751 before.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove mimms. It depends on Python 2, is dead upstream (last releases in
2008)
and the last maintainer upload was in 2012.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove fibranet. It depends on Python 2, there are no reverse deps, it's
dead upstream (last release in 2006) and the last maintainer upload was in 2008.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-rfoo. It's dead upstream (last commit from 2010), depends
on
Python 2 and hasn't seen an upload since 2012.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove pygtk. It depends on Python 2 and is dead upstream (last
release in 2011).
All remaining rdeps have been ported to GI/gtk3 or were removed, except
these four, but please force the removal at this point, they are all dropped
from testing for
Package: ftp.debian.org
Severity: normal
Please remove yorick-yao. It depends on pygtk2 and is dead upstream. The
maintainer
acked the removal in #885506.
Cheers,
Moritz
On Thu, Apr 02, 2020 at 02:58:38PM +0200, Thibaut Paumard wrote:
> Le 01/04/2020 à 23:13, Moritz Mühlenhoff a écrit :
> > On Mon, Oct 07, 2019 at 04:53:03PM +0200, Thibaut Paumard wrote:
> >> Dear Jeremy,
> >>
> >> Thanks, I have warned upstream that YAO will be removed if not updated
> >> to
Package: ftp.debian.org
Severity: normal
Please remove python-dingus. It depends on Python 2, there are no reverse deps,
the last upstream release was in 2012 and so was the last upload.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove ndpmon. It depends on Python 2, is dead upstream (last release
from 2012), hasn't seen a maintainer upload since 2012 and there's also an
open license issue (951861)
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove pwrkap. It depends on Python and pygtk, is dead upstream and
the last maintainer upload was in 2010.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove nicotine. It's one of the two last remaining
blockers of the pygtk removal and hasn't seen a maintainer
upload since 2011. It can be reintroduced when ported to
gi/gtk3.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-gasp. It's one of the two last remaining
blockers of the pygtk removal and hasn't seen an upload since
2015.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-elements. It's dead upstream (no commit since seven years,
depends on Python 2, there are no reverse deps and there hasn't been a
maintainer
upload since 2010 (and the package is RC-buggy since 2018 due to the invalid
maintainer
Package: csync2
Severity: important
Tags: security
Please see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15522
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-starpy. It depends on Python 2 (and is among the
remaining rdepy of Twisted/Py2) and there are no reverse deps.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove pebl. It depends on Python 2, it's dead upstream and there are
no reverse deps.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove asterisk-testsuite. It hasn't been updated since 2014, depends on
Python 2
and has already been removed from testing since October 2018 (and thus missed
testing)
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove identicurse. It depends on Python 2, it's dead upstream (last
commit
from 2014) and unmaintained (last maintainer upload in 2012)
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-stompy. It depends on Python 2, is dead upstream (last
release in 2010),
the last maintainer upload was in 2011 and there are no reverse deps.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove gameclock. It depends on pygtk2, which is going away.
The removal was acked by Antoine (maintainer and upstream, CCed) in
#885282
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-tcpwrap. It's dead upstream, depends on Python 2 and is
orphaned since 2017 without an adopter.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove securepass-tools. It depends on Python 2 and SecurePass was
shutdown in the mean time, so upstream vanished:
http://www.gippa.net/securepass-eol
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove go2. It's dead upstream (no activity after 2013), depends on
Python 2
and the last maintainer upload was in 2012. It also has open RC bugs (935204,
928324)
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-nids. It depends on Python 2, is dead upstream, there are
no reverse deps and the last maintainer upload was in 2010.
Cheers,
Moritz
On Fri, Mar 27, 2020 at 10:59:35PM +0100, Christoph Berg wrote:
> Re: Moritz Mühlenhoff 2020-03-27
> <20200327215634.GA1565432@pisco.westfalen.local>
> > On Sun, Oct 13, 2019 at 07:16:47PM +, Chris Knadle wrote:
> > > There has been some discussion about #936299 on the upstream mailing
> > >
Package: ftp.debian.org
Severity: normal
Please remove idjc. It depends on pygtk, which is going away. There is a little
movement upstream to port it, so when/if that materialises at some point, idjc
can be reintroduced.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove openalpr. The maintainer upload was in 2016 and it fails to
build from source for over a year now (922588)
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-mhash. It's dead upstream, depends on Python 2,
there are no reverse deps and the last maintainer upload was in 2009.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-poster. It depends on Python 2, is dead upstream, the last
maintainer
upload was in 2011 and there are no reverse deps.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove calabash. It depends on Python 2, is dead upstream (last release
in 2011),
the last maintainer upload was in 2014 and there are no reverse deps.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove freevial. It depends on Python 2, is dead upstream and the last
maintainer upload
was in 2011.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove pyntor. It depends on Python 2, is dead upstream and the last
maintainer upload was in 2011.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-ucltip. It depends on Python 2, there are no reverse deps,
the last upstream
release was in 2011 (and so was the last upload)
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-smbpasswd. It's dead upstream (last commit five years
ago), depends on Python 2, there
are no reverse deps and the last maintainer upload was in 2005.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-elib.intl. It's dead upstream (no material changes
after 2011), depends on Python 2 and there are no reverse deps left.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove jsonpipe. It's dead upstream, depends on Python 2, there are no
reverse deps and the last maintainer upload was in 2014.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-webunit. It's not ported to Python 3, is dead upstream
and there are no reverse deps.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove bbqsql. It depends on Python 2 and is dead upstream,
the maintainer (CCd) acked the removal.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove rest2web. It's dead upstream, depends on Python 2 and hasn't seen
a maintainer
upload since 2009.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove funkload, it depends on Python 2 and is dead upstream (last
release from 2015, homepage vanished).
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove wfrog. It depends on Python 2, hasn't seen an upload since
2015 and has been removed from testing for over a year due to removed
reverse dependencies.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove nautilus-image-manipulator. It depends on Python 2 and the former
maintainer/upstream suggested removal in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942775#12
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove nautilus-compare. It depends on Python 2, is dead upstream and
unmaintained.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove nitroshare. It depends on Python 2 and hasn't seen an upload
since 2016, it
already missed buster due to RC bugs.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-lightblue. It depends on Python 2, is dead upstream
and there are no reverse deps.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove gourmet. pygtk2 is now going away and it's among the
last handful of packages still using it. Upstream development has
stalled and https://github.com/thinkle/gourmet/issues/696 or
https://github.com/thinkle/gourmet/issues/696 haven't seen any
Package: ftp.debian.org
Severity: normal
Please remove nxt-python. It's among the last handful of package blocking
the pygtk2 removal and a port to Python 3 is not immiment, the homepage
carries the note "
| DISCLAIMER: The NXT-Python v3 implementation is incomplete. Development is
| not active
Package: ftp.debian.org
Severity: normal
Please remove meshlab on armel/armhf. These are outdated binaries and
no longer build with the new version (due to only having OpenGL-ES)
Cheers,
Moritz
Package: rubber
Severity: normal
rubber switched to Python 3, but still suggests python-prompt-toolkit and
python-pygments
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-macaron. It depends on Python 2, there are no
reverse deps and there hasn't been an upload since 2012.
Cheers,
Moritz
Package: ranger
Severity: normal
ranger switched to Python 3, but still suggests
highlight | python-pygments
That should now be python3-pygments.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove ptex2tex. It depends on Python 2, is dead upstream and
unmaintained (last upload in 2011)
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove pycha. It depends on pygtk2, which is going away and
there are no reverse deps.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove 4digits. The last upload was in 2014 and it depends on
python 2 and pygtk, which is going away. It can still be reintroduced
when ported to Python 3.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove pymissile. It's dead upstream, depends on Python 2
and blocks the Py2 migration for other packages (urwid, pyusb)
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove monkeysign. It depends on Python 2 and pygtk, which
is going away. The maintainer (CCed) acked the removal in 937066.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove sugar-base, it's only binary package is python-sugar, which
has no reverse dependencies but depends on pygtk, which is going away.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove xappy. It depends on Python 2 and is dead upstream.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove node-bowser. The version in the archive was last uploaded
in 2015 and is totally outdated (upstream is at 2.7.0) and there are no
reverse deps.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove openmama. It's totally outdated (current upstream is at 6.3.0),
hasn't seen a maintainer upload since 2013 and there are no reverse deps.
Package: ftp.debian.org
Severity: normal
Please remove avis-client-c. It's dead upstream, unmaintained and there
are no reverse dependencies.
Package: ftp.debian.org
Severity: normal
This is a rev dep of simpleid, for which a separate RM bug will be filed.
Package: ftp.debian.org
Severity: normal
Please remove simpleid, it's unmaintained (last upload in 2016) and the
version in the archive is incompatible with PHP7 (and thus already missed
Buster)
Package: ftp.debian.org
Severity: normal
Please remove avis. It's dead upstream, unmaintained and there
are no reverse dependencies.
Package: ftp.debian.org
Severity: normal
Please remove syslog-nagios-bridge. It depends on Python 2, which
is going away.
Cheers,
Moritz
Package: ftp.debian.org
Severity: normal
Please remove python-paisley. It's dead upstream, not ported to Python 2,
there are no reverse deps and couchdb itself has also been removed from
the archive.
Cheers,
Moritz
701 - 800 of 7407 matches
Mail list logo
