Bastian, I see you have raised the severity on this bug again.
What is your goal here?Cyrus SASL has reverse (binary) dependencies in the ballpark of 7,500. Quickly taking that list through UDD gives me just over 4,500 source packages. Surely, a large number of those are going to be GPL licensed. Is your plan to file Severity: serious bugs against all of them?
If so, isn't that an MBF that needs discussion on debian-devel first? If not, then why are you singling out Pidgin, a project that is struggling to stay alive right now?Your position in bug #996892 is that cyrus-sasl2 / libsasl2 should be considered a system library. If libsasl2 can be considered a system library, then by your own position, there is no bug in libpurple0. I don't see how you can have it both ways.
-- Richard
OpenPGP_signature
Description: OpenPGP digital signature
