Removal of ircii-pana

Bug #162870 reported by Stephan Rügamer
6
Affects Status Importance Assigned to Milestone
ircii-pana (Debian)
Fix Released
Unknown
ircii-pana (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Dear Colleagues,

I would like to request the removal of the ircii-pana (aka bitchx) package.

Reasons:

1. Upstream seams to be dead
2. Right now 3 CVEs
3. More exploits will be determined in the future (imho).

I filed a removal request against debian...link is attached to this bug, too.

Regards,

\sh

Revision history for this message
Emmet Hikory (persia) wrote :

The removal request seems sane. Lots of alternatives (although the scripting interfaces differ), and lack of upstream support to fix security issues seems to not be a package we'd like to support.

If a specific package is required for Obsoleted-By: the consensus appears to be with irssi.

Revision history for this message
Martin Pitt (pitti) wrote :

Will remove the following packages from hardy:

    bitchx | 1:1.1-4ubuntu4 | amd64, hppa, i386, ia64, lpia, powerpc, sparc
bitchx-dev | 1:1.1-4ubuntu4 | amd64, hppa, i386, ia64, lpia, powerpc, sparc
bitchx-gtk | 1:1.1-4ubuntu4 | amd64, hppa, i386, ia64, lpia, powerpc, sparc
bitchx-ssl | 1:1.1-4ubuntu4 | amd64, hppa, i386, ia64, lpia, powerpc, sparc
ircii-pana | 1:1.1-4ubuntu4 | source

------------------- Reason -------------------
(pitti) unmaintained, vulnerable, removed in Debian
----------------------------------------------

Changed in ircii-pana:
status: New → Fix Released
Changed in ircii-pana:
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.