Package: debian-security-support X-Debbugs-Cc: Sergio Durigan Junior <[email protected]>
Please mark the oscar package as unsupported in bookworm and trixie. Since bookworm, it vendored botan and since 2.1.0-3~exp1 (soon to be part of forky) botan is unvendored. The vendored version is vulnerable to several CVEs. Fixing this vendor copy is not feasible. Please refer to #1152371 for details. Helmut
