[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Removal of Libdb5.3



Hi,

On Wed, Nov 08, 2023 at 03:57:15PM +0000, Busireddy, Nikhitha Reddy wrote:
> Hey Team,

Here we are all volunteer users of Debian; we are a "team" only in
the sense of our informal interest in Debian.

> We are building a project on Debian:bullseye, and due to security
> issues, we are trying to remove libdb5.3 package.

As you have discovered, libdb3.5 is required for several essential
parts of the Debian 12 release, such as libpam-modules.

If you can't solve your security issues you'll need to avoid using
Debian.

It is likely that your "security issues" are that something says a
particular version of libdb has a certain bug and must not be used,
but you will probably find upon research that Debian has already
patched that particular bug or is not affected by it in the first
place.

Looking for the particular CVE number at
https://security-tracker.debian.org/tracker/ can often help to
resolve these sorts of issues.

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting


Reply to: