Package: ftp.debian.org Severity: normal Hello ftp-masters,
I'm requesting the removal of python-restkit due to a long-term security issue (CVE-2015-2674). Despite being reported upstream for more than three years, python-restkit still does not validate TLS certificates, and upstream has not had a commit since December 2015. python-restkit has two reverse-dependencies which have been RC-buggy due to python-restkit for nine months now, one of which also has a dead upstream. I am filing separate RoQA requests for both of those packages as well. Thank you for your help. Sincerely, -- Harlan Lieberman-Berg ~hlieberman