Bug#1021266: SOLVED - Re: curl CVE patches applied at curl 7.74.0-1.3+deb11u2 breaks janus package working with RTSP sources

2023-01-04 Thread Samuel Henrique
Hello Raimon,

> This bug could be closed as reported issue is solved in curl 
> (7.87.0-1~bpo11+1)

I'm happy to hear that the backport package of curl fixes your issue,
this is exactly the kind of thing I try to achieve by pushing the
newer releases to the backports repo :)

Although I'm still worried that there's a real regression in the
stable repo with 7.74.0-1.3+deb11u2, which could impact users who do
not make use of backports.

Unfortunately 7.74.0-1.3+deb11u2 has a lot of patches. It will be hard
to track the regression, but I'll review it and check if I can spot
any issues.

We don't really use this bugtracker for packages in the backports
repository, so I'm not sure I can/should tag the bug as closed for
"7.87.0-1~bpo11+1", but at least we have this workaround documented
here for others.

Thanks for helping!

--
Samuel Henrique 



Bug#1021266: SOLVED - Re: curl CVE patches applied at curl 7.74.0-1.3+deb11u2 breaks janus package working with RTSP sources

2023-01-04 Thread Raimon Alba
Dear Markus & Samuel,

This bug could be closed as reported issue is solved in curl (7.87.0-1~bpo11+1)

Patches previously applied to older version have been integrated in new
release without breaking JANUS interop.

* New upstream version 7.87.0

  * d/patches:
- Update patches
- Drop all backported patches that are applied in the new release


Thanks in advance,
Raimundo Alba


Bug#1021266: SOLVED - Re: curl CVE patches applied at curl 7.74.0-1.3+deb11u2 breaks janus package working with RTSP sources

2023-01-04 Thread Raimon Alba
Dear Markus & Samuel,

This bug could be closed as issue is solved in curl (7.87.0-1~bpo11+1)

Patches previously applied to older version have been integrated in new
release without breaking JANUS interop.

* New upstream version 7.87.0

  * d/patches:
- Update patches
- Drop all backported patches that are applied in the new release


Thanks in advance,

Raimundo Alba