Public bug reported: (I am the debian maintainer for xerces-c and xerces-c2)
There are only three packages left in debian that have build dependencies on xerces-c2, and after my NMU goes through in a few days, there will only be two packages left. Of these, one is not in debian's testing release and the other seems to be dead upstream in its current form. I hope to be requesting removal of the xerces-c2 package in a few days, but I'm not sure whether it will happen in time for the sync freeze for trusty. Given that xerces-c2 is no longer maintained upstream and that the xerces code base does get occasional security updates, it might be worth considering exclusing xerces-c2 from trusty. This will reduce by two years the amount of time anyone has to worry about backporting security issues to it. I don't know if you have a way of doing that or not or even whether you think it's a good idea, but either way, I expect xerces-c2 to disappear from debian soon. I suppose there's a chance that the removal won't happen as soon as I think for some reason, so discretion is advised, of course... ** Affects: xerces-c2 (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1271718 Title: xerces-c2 will soon disappear from debian To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xerces-c2/+bug/1271718/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs