[Bug 1706471] [NEW] please demote exiv2 to universe

[Launchpad Bug Tracker]

*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Seth Arnold (seth-arnold):

Hello,

Please consider demoting exiv2 to universe.

http://dev.exiv2.org/issues/1248

The upstream author appears overwhelmed with the task of hardening exiv2
for use against untrusted inputs and thus far (~nine months) no users
have provided the project with patches against known issues.

$ reverse-depends -c main -r artful src:exiv2
Reverse-Depends
===============
* libgexiv2-2                   (for libexiv2-14)
* libgexiv2-dev                 (for libexiv2-dev)

Thanks

** Affects: exiv2 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
please demote exiv2 to universe
https://bugs.launchpad.net/bugs/1706471
You received this bug notification because you are a member of Ubuntu Package Archive Administrators, which is subscribed to the bug report.