Source: pygpgme Version: 0.3-1.2 Severity: serious Hi,
I'm filing this RC bug very early in our next release cycle, so that the two depending packages have a chance to switch to an alternative. The package pygpgme has been abandoned upstream about four years ago. The packages python-gpg and python3-gpg (built from source package gpgme1.0) provide python bindings for interactions with the gpgme library. Both packages are already available in stretch. There are only two packages which depend on pygpgme, namely alot and caja-dropbox (non-free). Upstream of alot is already working on migrating away from the obsolete pypgpme package: <https://github.com/pazz/alot/pull/915> For caja-dropbox, I could not find any activities yet. However, it seems that the package only uses gpgme to verify a file signature, so it appears to be a rather simple task to rewrite the signature checking code. Regards, Tobias
signature.asc
Description: OpenPGP digital signature
