Re: Re: BerkeleyDB CVEs

Juraj Longauer <[email protected]> Wed, 15 Oct 2025 08:48:51 +0000
Newsgroups gmane.linux.debian.devel.security
Message-ID <AS8PR01MB8796060A86A93DDBAD51C94E93E8A@AS8PR01MB8796.eurprd01.prod.exchangelabs.com>
--_000_AS8PR01MB8796060A86A93DDBAD51C94E93E8AAS8PR01MB8796eurp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi,

A follow up questions if I may...

May I assume that when the CRITICAL CVE is identified on Berkeley DB (libdb=
5.3) and enough information is shared the package maintainer will fix it?
I talked to maintainer and he mentioned that library is now orphaned which =
suggests that the fix will not be developed?
Bastian Germann: "...The request was placed better at the Security Team. I =
have orphaned the pkg."
https://packages.debian.org/bookworm/libdb5.3

Thank you,
j.

--_000_AS8PR01MB8796060A86A93DDBAD51C94E93E8AAS8PR01MB8796eurp_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div style=3D"font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(3=
6, 36, 36);">
<b>Hi,</b></div>
<div style=3D"font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(3=
6, 36, 36);" class=3D"elementToProof">
<b><br>
</b></div>
<div style=3D"font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(3=
6, 36, 36);" class=3D"elementToProof">
<b>A follow up questions if I may...</b></div>
<div style=3D"font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(3=
6, 36, 36);" class=3D"elementToProof">
<b><br>
</b></div>
<div style=3D"font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(3=
6, 36, 36);" class=3D"elementToProof">
<b>May I assume that when the CRITICAL CVE is identified on Berkeley DB (li=
bdb5.3) and enough information is shared the package maintainer will fix it=
?</b></div>
<div style=3D"font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(3=
6, 36, 36);" class=3D"elementToProof">
<b>I talked to maintainer and he mentioned that library is now orphaned whi=
ch suggests that the fix will not be developed?</b></div>
<div style=3D"font-family: Aptos, sans-serif; font-size: 12pt;" class=3D"el=
ementToProof">
<span style=3D"color: rgb(36, 36, 36);"><b>Bastian Germann: &quot;...</b></=
span><span style=3D"color: rgb(0, 0, 0);">The request was placed better at =
the Security Team. I have orphaned the pkg.&quot;</span></div>
<div style=3D"font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(3=
6, 36, 36);" class=3D"elementToProof">
<b><a id=3D"LPlnk168143" href=3D"https://packages.debian.org/bookworm/libdb=
5.3">https://packages.debian.org/bookworm/libdb5.3</a></b></div>
<div style=3D"font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(3=
6, 36, 36);" class=3D"elementToProof">
<b><br>
</b></div>
<div style=3D"font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(3=
6, 36, 36);" class=3D"elementToProof">
<b>Thank you,</b></div>
<div style=3D"font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(3=
6, 36, 36);" class=3D"elementToProof">
<b>j.</b></div>
</body>
</html>

--_000_AS8PR01MB8796060A86A93DDBAD51C94E93E8AAS8PR01MB8796eurp_--