Please remove xerces-c2 from Ubuntu
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
anon-proxy (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
clam (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
uns (Ubuntu) |
Fix Released
|
Wishlist
|
Unassigned | ||
xerces-c2 (Ubuntu) |
Fix Released
|
Wishlist
|
Unassigned |
Bug Description
(I am the debian maintainer for xerces-c and xerces-c2)
There are only three packages left in debian that have build dependencies on xerces-c2, and after my NMU goes through in a few days, there will only be two packages left. Of these, one is not in debian's testing release and the other seems to be dead upstream in its current form. I hope to be requesting removal of the xerces-c2 package in a few days, but I'm not sure whether it will happen in time for the sync freeze for trusty. Given that xerces-c2 is no longer maintained upstream and that the xerces code base does get occasional security updates, it might be worth considering exclusing xerces-c2 from trusty. This will reduce by two years the amount of time anyone has to worry about backporting security issues to it. I don't know if you have a way of doing that or not or even whether you think it's a good idea, but either way, I expect xerces-c2 to disappear from debian soon.
I suppose there's a chance that the removal won't happen as soon as I think for some reason, so discretion is advised, of course...
Changed in xerces-c2 (Ubuntu): | |
status: | Confirmed → Fix Released |
Changed in uns (Ubuntu): | |
status: | Confirmed → Fix Released |
Adding the other two affected packages. all affected packages are in sync with debian and are in universe component, thus there is no additional maintenance burden. Removals from Debian, are also processed and packages are removed from Ubuntu Archive as well.