[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1027355: marked as done (src:libapreq2: Should not migrate to testing.)



Your message dated Sat, 10 Jun 2023 18:42:02 +0200
with message-id <300af957-6854-50b8-8d4b-3cd6e12947b3@xs4all.nl>
and subject line Re: Bug#1027355: src:libapreq2: Should not migrate to testing.
has caused the Debian Bug report #1027355,
regarding src:libapreq2: Should not migrate to testing.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1027355: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1027355
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Source: libapreq2
Severity: serious
Justification: possibly not suitable for a stable release
X-Debbugs-Cc: Debian Security Team <team@security.debian.org>, Salvatore Bonaccorso <carnil@debian.org>
Control: affects -1 lua-apr
Control: affects -1 rapache
Control: affects -1 libapache2-authcassimple-perl
Control: affects -1 libapache2-sitecontrol-perl

The package should probably be removed for bookworm,
at least without clarification from upstream about the security issue.
(see for details #1018191)

-- 
tobi

--- End Message ---
--- Begin Message ---
Version: 2.17-2

On Mon, 23 Jan 2023 20:34:04 +0100 Salvatore Bonaccorso wrote:
FTR, let's not close this bug and migrate libapreq2 further for
bookworm (even the open known CVEs are addressed) as long it does not
get an active maintainer interested supporting potential updates
needed for the bookworm release.
I've updated the package because I have a whole bunch of legacy code which requires libapreq2. For now it's a QA upload, if QA uploads are not deemed enough to fix this issue and get this package back into trixie I'll maintain it within the Perl team.

Kind Regards,

Bas

--
 GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1

--- End Message ---

Reply to: