[Secure-testing-team] Bug#883629: netcat6: Please remove from Debian.

[Witold Baryluk]

Package: netcat6
Version: 1.0-8
Severity: important
Tags: security


According to netcat6 website:

"""
THIS PAGE IS OUTDATED AND ONLY STILL ACCESSABLE FOR HISTORICAL REASONS. URLs for downloading outdated sources were removed.

Since longer time, following implementations got native IPv6 support:

(the original) nc: http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/nc/

nmap-ncat: http://nmap.org/
"""


normal netcat available in Debian (netcat-openbsd, but not
netcat-traditional) does provide now IPv6, and default to IPv6 according
to system wide preferences, example:

# nc -v google.com 80
nc: zrh04s06-in-x0e.1e100.net (2a00:1450:400a:805::200e) 80 [http] open
GET / HTTP/1.0

HTTP/1.0 302 Found
....
#


-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-1-amd64 (SMP w/12 CPU cores)
Locale: LANG=pl_PL.utf8, LC_CTYPE=pl_PL.utf8 (charmap=UTF-8), LANGUAGE=pl_PL.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages netcat6 depends on:
ii  libc6  2.25-3

netcat6 recommends no packages.

netcat6 suggests no packages.

-- no debconf information