Package: release.debian.org Severity: normal X-Debbugs-Cc: libpgj...@packages.debian.org, Christoph Berg <m...@debian.org>, t...@security.debian.org, car...@debian.org Control: affects -1 + src:libpgjava User: release.debian....@packages.debian.org Usertags: unblock
Hi Christoph, libpgjava cannot migrate from unstable to testing as it is considered a key package. The changes between 42.7.5-2 and 42.7.7-1 contain in particular the fix for CVE-2025-49146. Can you comment to the release team if you consider the package ready and suitable to be able to migrate? If not, how can CVE-2025-49146 be addressed for trixie? TTBOMK, libpgjava updates in stable have been done by following the respetive upstream branch including the fixes. Regards, Salvatore