Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1247066

Bug#1104054: CVE-2025-46421 tests backporting

From Simon McVittie <smcv@debian.org>
Newsgroups linux.debian.bugs.dist
Subject Bug#1104054: CVE-2025-46421 tests backporting
Date 2025-05-19 16:40 +0200
Message-ID <KO9OO-4eop-5@gated-at.bofh.it> (permalink)
References <KO5Lb-4bVY-1@gated-at.bofh.it> <KFjaF-g4ka-1@gated-at.bofh.it> <KO7MZ-4d9G-35@gated-at.bofh.it> <KFjaF-g4ka-1@gated-at.bofh.it> <KO7MZ-4d9G-35@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Mon, 19 May 2025 at 12:20:21 +0000, Andreas Henriksson wrote:
>In general since libsoup2.4 has been abandoned for many years, I'm
>completely fine with doing whatever that keeps it afloat in the already
>shipped releases until we can hopefully completely remove it in forky.

We have been aiming to remove it since at least 2023 
(see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056125) and I'm 
intending to raise the severity of the bugs listed in 
https://udd.debian.org/cgi-bin/bts-usertags.cgi?user=pkg-gnome-maintainers%40lists.alioth.debian.org&tag=libsoup2 
to RC as soon as trixie is out.

This is one of several former GNOME libraries that is dead upstream and 
should be removed from Debian, but cannot be removed because it still 
has rdeps. If someone in the LTS team has time available for 
preemptively reducing the support cost of old libraries that are dead 
upstream in future LTS releases, any progress towards reducing the 
length of 
https://udd.debian.org/cgi-bin/bts-usertags.cgi?user=pkg-gnome-maintainers%40lists.alioth.debian.org&tag=oldlibs 
would be very welcome.

     smcv

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#1104054: libsoup2.4: CVE-2025-46421 Salvatore Bonaccorso <carnil@debian.org> - 2025-04-25 06:50 +0200
  Bug#1104054: libsoup2.4: CVE-2025-46421 Jeremy Bícha <jeremy.bicha@canonical.com> - 2025-05-08 19:50 +0200
    Bug#1104054: libsoup2.4: CVE-2025-46421 Sean Whitton <spwhitton@spwhitton.name> - 2025-05-10 13:10 +0200
  Bug#1104054: CVE-2025-46421 tests backporting Sean Whitton <spwhitton@spwhitton.name> - 2025-05-19 12:20 +0200
    Bug#1104054: CVE-2025-46421 tests backporting Andreas Henriksson <andreas@fatal.se> - 2025-05-19 14:30 +0200
      Bug#1104054: CVE-2025-46421 tests backporting Simon McVittie <smcv@debian.org> - 2025-05-19 16:40 +0200
      Bug#1104054: CVE-2025-46421 tests backporting Sean Whitton <spwhitton@spwhitton.name> - 2025-05-20 11:10 +0200
    Bug#1104054: CVE-2025-46421 tests backporting Sean Whitton <spwhitton@spwhitton.name> - 2025-05-20 12:10 +0200

csiph-web