Bug#758516: Struts 1.2 should not be shipped with jessie

Emmanuel Bourg ebourg at apache.org
Mon Sep 15 22:12:03 UTC 2014


Le 15/09/2014 23:56, Moritz Mühlenhoff a écrit :

> Then it should be easy to remove?

Actually it's easier to keep it, since a removal induces more work to
update the reverse dependencies.


> Well, but if we keep old, unsupported libs around, people might be exposed
> by running code not shipped in Debian, but using these libraries.

Sure but we are not responsible for such things. This library can be
downloaded from other places like Maven Central, removing it won't
change anything.

Emmanuel Bourg



More information about the pkg-java-maintainers mailing list