On Mon, Sep 05, 2011 at 06:32:00PM +0100, Chris Rees wrote:

No, it is not a noise.

First, note that an issue in the local deamon can be only utilized by local users. As a consequence, there is a huge set of machines for which the cited issue is simply irrelevant.

For the analogous issues that are irrelevant for 90% of the port users, look at the vulnerabilities listed for the quake ports.

Second, I personally consider the crusade to remove old but compiling and working (*) ports as a damage both to the project functionality and to the project reputation.

* Working exactly because users report bugs in the software, otherwise they would not be able to describe corner cases that break.

See above. This is the sort of rethoric that I find damaging.

The only point that I buy from the list is 'had been removed by other distributions'. Everything else is relative, and since _you_ are not the user of the package, did not even tried to use it, and obviously not estimated the risks and brokeness of the package right (as shown by two episodes, once with the NLM, second with the vulnerability), I consider the removal as frivolous and damaging.

It only continues the trend, I agree.