Public bug reported: Autotrace has been removed from Debian.[0] It recently underwent a security audit by Agostino Sarubbo who found a significant number of issues.[1] The last status note from upstream was from Jan. 28, 2004.[3] The GitHub mirror of the project shows the last commit was September 19, 2005 (although the mirror was created on July 23, 2013 and hasn't seen a commit in 4 years).[4]
Autotrace has no reverse dependencies on Artful. $ reverse-depends -b src:autotrace No reverse dependencies found Please remove autotrace from artful. [0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863210 [1] https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/ [3] http://autotrace.sourceforge.net/ [4] https://github.com/autotrace/autotrace ** Affects: autotrace (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1694825 Title: Please remove autotrace from Artful To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/autotrace/+bug/1694825/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
