Control: clone -1 -2 -3 -4 -5 -6 -7 -8 Control: reassign -2 cups 2.1.3-1 Control: retitle -2 cups: build-depends on libslp-dev Control: reassign -3 kde-runtime 4:15.08.3-1 Control: retitle -3 kde-runtime: build-depends on libslp-dev Control: reassign -4 kio-extras 4:15.08.3-1 Control: retitle -4 kio-extras: build-depends on libslp-dev Control: reassign -5 nis 3.17-34 Control: retitle -5 nis: build-depends on libslp-dev Control: reassign -6 ola 0.9.8-1 Control: retitle -6 ola: build-depends on libslp-dev Control: reassign -7 openldap 2.4.42+dfsg-2 Control: retitle -7 openldap: build-depends on libslp-dev Control: reassign -8 roaraudio 1.0~beta11-5 Control: retitle -8 roaraudio: build-depends on libslp-dev
On Thu, Aug 13, 2015 at 23:55:59 +0200, Moritz Muehlenhoff wrote: > Source: openslp-dfsg > Severity: serious > > The last maintainer upload of openslp happened in 2007 > and it's orphaned for 5.5 years now. The 1.2 branch is > completely abandoned upstream. > > At the minimum the package should be upgraded to 2.0, > but the comment at > https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5177 > suggests it's completely abandoned upstream. > Cloning the bug against the reverse dependencies. Cheers, Julien