A year after SUSE decided to remove its Deepin desktop packages over ongoing security concerns, Fedora Linux is now also removing their Deepin packages over similar concerns and lack of activity in maintaining the packages.

Opened a year ago was [1]this FESCo ticket to conduct a Deepin security review request following the security revelations by SUSE/openSUSE. Over that time Fedora developers have had issues getting in touch with some of the Deepin package maintainers. Part of the issue though in deciding what to do with the Deepin packages has been lack of policy to clearly outline expectations.

Now at today's Fedora Engineering and Steering Committee (FESCo), it has been decided to retire all the Deepin packages from Fedora:

"AGREED: Retire all packages in the list, with the message mentioning the fesco ticket. Ask releng to not unretire those packages if a request is made, unless they passed review again."



[1] https://pagure.io/fesco/issue/3409