#1136949 RM: smb4k -- RoST; difficult to fix security issues

Package:
release.debian.org
Source:
release.debian.org
Submitter:
Salvatore Bonaccorso
Date:
2026-05-17 16:53:02 UTC
Severity:
normal
Tags:
#1136949#5
Date:
2026-05-17 14:14:56 UTC
From:
To:
Hi

smb4k was e.g. affected in past by CVE-2025-66002 and CVE-2025-66003
which remained unpatched in bookworm because the fixes were already
too intrusive to backport.

After the DSA 6092-1 we both tried to still make this possible,
reached as well out to Pino to see for opinions on removal. So far I
did not got a reply, but given bookworm will move to LTS I think it is
now best to have the package removed.

Removal is possible in bookworm:

$ dak rm --suite=bookworm -n -R smb4k
Will remove the following packages from bookworm:

     smb4k |    3.1.7-1 | source, amd64, arm64, armel, armhf, i386, mips64el, mipsel, ppc64el, s390x

Maintainer: Debian KDE Extras Team <pkg-kde-extras@lists.alioth.debian.org>
------------------- Reason -------------------

----------------------------------------------

Checking reverse dependencies...
No dependency problem found.

Regards,
Salvatore