#1143950 libcrypt-password-perl: Upstream not maintained since 2012, has security issues; should not be released with forky

Package:
src:libcrypt-password-perl
Source:
src:libcrypt-password-perl
Submitter:
Salvatore Bonaccorso
Date:
2026-08-08 18:55:02 UTC
Severity:
normal
#1143950#5
Date:
2026-08-08 18:53:35 UTC
From:
To:
Hi

libcrypt-password-perl has not been update upstream since 2012, and
has open security issues (CVE-2026-16235, CVE-2026-6656).

So rather than providing libcrypt-password-perl in Debian forky (which
got freshly introduced), we might keep it out of testing (or maybe get
it removed completely)?

Gregor, what is your opinion here?

Regards,
Salvatore