severity 497225 normal thanks On Sun, Aug 31, 2008, Osamu Aoki wrote: > Severity: grave
I lowered the severity to "normal". Nothing prevents the package to be in a stable release. > Tags: security > Justification: user security hole Ahem. Where is the security hole? > I am filing this bug to discuss removal of this package from leny. OK, let us discuss :-) > 1. The upstream is dead. True. > Last release 2006-08-06 (CVS) True. > Current Gnome distribution does not include this software. Maybe. > 2. gnome-alsamixer does not identify new hardwares correctly. > I have HDA Intel but gnome-alsamixer show it as Sigmatel .... Is this your Modem? Are you hit by #495782. > 3. The better alsa mixer support functionality is in GNOME-Applets. > New gnome-volume-control does better job. Yep, there is no doubt there are alternatives. They may even be better alternatives. > 4. No dependency requireis this package in lenny. Yes. > 5. There are 2 bugs marked upstream. > The maintainer did not look into these bugs. > (I think one of it is just warning, so it may be OK ...) Do they prevent a releasable state? If you find someone willing to take over the package, I'll give it away without any problem. Meanwhile, I'll continue maintaining it. > I know current maintainer took effort for lenny: > http://packages.qa.debian.org/g/gnome-alsamixer.html I am trying, even if I have to recognise this has been a busy summer and a 6-weeks-with-no-laptop one (if you read debian-private@). > I think having unmaintained package our archive with no added benefits > is bad idea for security review. I agree with that. > If my asessment is wrong, maintainer can close this bug. > But I think it is time to request removal. I don't think it is: popcon says 2389 users. I intend to close the bug too. But there is nothing urgent with this :-) > (Or maintainer to upload transition package and hint it to > debian-release to include it to lenny) What do you mean by transition package? Do you think the release team would agree upstream fixes for normal bugs during the freeze? I don't think so :-) > Thans for your work and best regards, Thanks for taking care and having a look. I take your remarks into account even if I don't agree with all of them. Once again, if you find a new maintainer for the package willing to fix upsteam's bug, he will be more than welcome. Best regards, -- Mohammed Adnène Trojette -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
