On 5/6/25 18:22, Bastien Roucaries wrote:
Le mardi 6 mai 2025, 16:41:17 heure d’été d’Europe centrale Sylvain Beucler a écrit :Hi, I just noticed that angular.js is EOL'd by Google since 2022. AFAICS none of the 9 CVEs reported since had a fix: https://security-tracker.debian.org/tracker/source-package/angular.js https://deb.freexian.com/extended-lts/tracker/source-package/angular.js There's a successor, "angular.io", but it doesn't seem that helped with any of our current vulnerabilities. Discussion on the first Debian bug suggested attempting to drop the package entirely in trixie (though that didn't seem to have happened): https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014779What are the reverse deps ?
Reverse-Build-Depends ===================== * civicrm (for libjs-angularjs) Reverse-Depends =============== * glowing-bear (for libjs-angularjs) * libjs-angular-file-upload (for libjs-angularjs) * libjs-angular-gettext (for libjs-angularjs) * libjs-angular-schema-form (for libjs-angularjs) * libjs-angularjs-smart-table (for libjs-angularjs) * libjs-lrdragndrop (for libjs-angularjs) * libjs-magic-search (for libjs-angularjs) * liblemonldap-ng-manager-perl * ola [amd64 arm64 armel armhf i386 mips64el ppc64el riscv64 s390x] * python3-rally (for libjs-angularjs) * python3-xstatic-angular (for libjs-angularjs) * python3-xstatic-angular-cookies * python3-xstatic-angular-mock * python3-xstatic-angular-schema-form * qcumber (for libjs-angularjs)
Did you try a source search in order to see embded copy ? RoucaIt doesn't seem like we can support angular.js, this is similar to bootstrap: https://lists.debian.org/debian-lts/2025/04/msg00051.html What do you think? Cheers! Sylvain Beucler Debian LTS Team