Re: Security update for Neutron (CVE-2026-55707 aka #1143170, OSSN-0102 aka #1142937)

On 2026-08-19 23:14, Moritz Mühlenhoff wrote:
> Am Tue, Aug 18, 2026 at 05:21:11PM +0200 schrieb Philipp Kern:
>> AIUI here it's only needed as a build dependency and not as an actual
>> runtime dependency, right?
> 
> In this case there's also runtime impact: The broken Python 3.13
> made neutron fail since the test suite triggered the regression,
> but so would have been using Neutron itself.

Maybe that would have been the time to add language to the DSA that 
-updates is required for the update. But it's all kind of a kludge. :/

Kind regards
Philipp Kern