2015-12-30 18:50 GMT+01:00 marguerite <i...@marguerite.su>: > Hi, > > > 在 2015年12月31日,00:07,Tomáš Chvátal <tomas.chva...@gmail.com> 写道: > > > > > > > > 2015-12-30 15:39 GMT+01:00 Marguerite Su <i...@marguerite.su>: > >> Hi, > >> > >> On Sat, Dec 19, 2015 at 12:31 AM, Tomáš Chvátal < > tomas.chva...@gmail.com> wrote: > >> > as xmms is old as ages it is still used as multimedia player, but it > pulls > >> > in ton of things like gtk1 and libxml1 that are quite expected to have > >> > security vulterabilities. > >> > > >> > It would probably be good to: > >> > > >> > a) remove it - everyone would scream > >> > b) move it to some xmms repository to not let people on essentials > >> > accidentaly install some sec hole. > >> > >> Advice taken, moved to Multimedia :-) > > > > That is not good idea either, it should all go to another repo as whole. > Also you have to move all the glib1 gtk1 and so on. > > > > Tom > > Okay, I will move them too tomorrow. > > BTW, we have a repository named "R.I.P", how about moving xmms and all its > dependencies there? > > That's almost the same as removal, but specfile, patches can be preserved. >
That should be enough I guess. :) Tom _______________________________________________ Packman mailing list Packman@links2linux.de http://lists.links2linux.de/cgi-bin/mailman/listinfo/packman