squirrelmail package in lenny

2010-02-21 Thread Benjamin Vetter

Hi

I'm wondering why the squirrelmail package has a php4 -or- php5 
dependency http://packages.debian.org/en/lenny/squirrelmail
I updated from etch to lenny long time ago, but I still had etch's php4 
installed through this optional dependency, because lenny does not have 
any php4 packages (only php5).


Furthermore, there is no security support for etch anymore, so it would 
result in using a rather old php4 package without security support?


Best regards
   Benjamin


--
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4b815d12.6000...@plainpicture.de



Re: squirrelmail package in lenny

2010-02-21 Thread Rolf Kutz

On 21/02/10 16:19 +, Benjamin Vetter wrote:
Furthermore, there is no security support for etch anymore, so it would  
result in using a rather old php4 package without security support?


It's recommended to check your system with
deborphan after upgrading to a new release.

regards
Rolf

--
... Expediency asks the question, 'Is it politic?' ...


--
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20100221160527.gn11...@vzsze.de



Re: squirrelmail package in lenny

2010-02-21 Thread Benjamin Vetter
imho, deborphan only tells you which packages are not used by other 
packages on your system.
but in the case i told, the etch php4 package is used (by squirrelmail) 
under lenny (when you upgrade from etch to lenny).

Therefore deborphan does not show it.

the squirrelmail package allows you to use the old etch php4 package, 
though there is no php4 within lenny.

therefore, the php package won't get updated, ever.

right?

Rolf Kutz wrote:

On 21/02/10 16:19 +, Benjamin Vetter wrote:
Furthermore, there is no security support for etch anymore, so it 
would  result in using a rather old php4 package without security 
support?


It's recommended to check your system with
deborphan after upgrading to a new release.

regards
Rolf




--
Benjamin Vetter
IT Department
plainpicture GmbH  Co. KG
Eimsbütteler Chausse 23
20259 Hamburg
++49 40 80 81 288 46


--
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4b81bfb1.60...@plainpicture.de



Re: squirrelmail package in lenny

2010-02-21 Thread Christian Kujau
On Sun, 21 Feb 2010 at 23:20, Benjamin Vetter wrote:
 the squirrelmail package allows you to use the old etch php4 package, though
 there is no php4 within lenny.

$ apt-cache dump | grep -B2 '^ File.*/status'

Package: php4-common
 Version: 6:4.4.4-8+etch6
 File: /var/lib/dpkg/status

...lists all packages only referenced in the status file, but are not 
listed in the Packages files of your repositories.

 therefore, the php package won't get updated, ever.

Well, it's one thing to keep PHP4 around and squirrelmail (and probably) 
others wil happily continue to work, but yes - it doesn't make sense to me 
when the squirrelmail package page lists:

   depends on ... or php4 - Package not available.

Maybe you could open a bug to remove this obsolete dependency?

Christian.
-- 
BOFH excuse #234:

Someone is broadcasting pygmy packets and the router doesn't know how to deal 
with them.


-- 
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/alpine.deb.2.01.1002211521090.28...@bogon.housecafe.de