[From nobody Sun Oct 18 10:03:10 2026 Received: (at submit) by bugs.debian.org; 4 Dec 2025 16:27:04 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-12.6 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,FREEMAIL_ENVFROM_END_DIGIT, FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,FROMDEVELOPER, HEADER_FROM_DIFFERENT_DOMAINS,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE, SPF_PASS,XMAILER_REPORTBUG,X_DEBBUGS_CC autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 39; hammy, 131; neutral, 25; spammy, 0. spammytokens: hammytokens:0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking, 0.000-+--HTo:N*Debian Return-path: <pochu27@gmail.com> Received: from mail-wm1-x32b.google.com ([2a00:1450:4864:20::32b]:43332) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_128_GCM:128) (Exim 4.96) (envelope-from <pochu27@gmail.com>) id 1vRCAa-00GEyN-1x for submit@bugs.debian.org; Thu, 04 Dec 2025 16:27:04 +0000 Received: by mail-wm1-x32b.google.com with SMTP id 5b1f17b1804b1-4779a4fc95aso16271825e9.1 for <submit@bugs.debian.org>; Thu, 04 Dec 2025 08:27:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1764865621; x=1765470421; darn=bugs.debian.org; h=date:message-id:subject:to:from:content-transfer-encoding :mime-version:sender:from:to:cc:subject:date:message-id:reply-to; bh=NgnFAjmzub6bG6UWJH5ufGI3GzBC0909NZWnzfxlWWg=; b=IO0Me0O6vHb27laRHtNSM7+bOfXZdfYZWBnmlMr38tLziF5bT0nOR78IdkFuN7KR0c UwHjdUxqF1CEMvlih7tyxRa7R4h6MWvHdxGnOdkQkEsN0yliC2bahMVrTehAu++LOCCm fNrbhWkh89P0fOT+g0oGl5iqeVsHcjkr+0OnEC9kGY9Xq9Y3qi7xnepEX96ICJmllFMi zxdg08EruEyyUfiEl0NRExkFjAqEDlO6aLhJvZXkTzYZvL1xC59Nnga17v3jU9dnJlt9 XQqg4LeNqjtorKmu4gb+LN7Yz6DggzkAhgbPkqJ2J5TN0PzCX/y3rBYWQEUr9gTvgwFa ja2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1764865621; x=1765470421; h=date:message-id:subject:to:from:content-transfer-encoding :mime-version:sender:x-gm-gg:x-gm-message-state:from:to:cc:subject :date:message-id:reply-to; bh=NgnFAjmzub6bG6UWJH5ufGI3GzBC0909NZWnzfxlWWg=; b=W1knp3/KLMCvXfehtrGPj2/UogL7b3n+NNnUDBggTuFXwjizk7qFIU8ziQrtdJpyUQ XEERGhNNdUlcfpXjKf8qKjHdVHEW0bhBvPK13UI7GfkH/Wx3Ho21AtAOQXYgWUiT4NK5 GMdVTgPnIfue+nQTp1RBZN9hvN1S7Sud/yNIqqDyfL4nCAe63ZxlK08TK7WIp7sm5xK0 9qUu0W6takQUwgZjhZlcI58nKaJhnVIR0YP6LsDWeCWt5G5o3s5yitTayR1MZKxOKpXm gVH3OsdJPNEwTdCtoAvpYqluWXtl2XW/Co4t5Gmyi49yDW3iqseT/tSekZjLAaQvmarn M+IA== X-Gm-Message-State: AOJu0YzGACzoXWo4Eh7duvnhH1E/GzYoQRuV8z3QagUO1rb9Xpmqhcva vV2aeyqpXNYBXjsdl/4MWTUGbOf21kaYlHtOvO7Kcw2cJCoB5Or10OiAJwbF3Q== X-Gm-Gg: ASbGncvbSy1NeO+YJ5rLIORgviwjHUSuya6vjuk8okQfw5cScV1t/LdJwQ+K+EK17iy pjtjL5gDBcMPNsmPDHS4l10R3nW98P+xItULAFAP4wav/KkmquXTBKH71wqj7lXL98ihl7rw7Mc P+3LHnGTwCNkYUduppBtwbXcgvMmGjp7Fnt959k/TLjJuc59LL2TZnxt+hxiknyQVzUwt2SFRoT xNGX5o+QBLR6/xp8hBkR1DYFZ9G/CFc/mP4/SJ3nuC862Cfny+DQmfXFEHgzOxajUl8BPpP7xfb zg0Xd4KIxFF80SxGbyhpZu69RDE0IwOnQk5ARFlm1tAWTVOF9nHeJyBPa28h9sF7xX+MsspCGWq SeZE7sgw+dBIXpyUGxSUJ9XxKF7rJGcmWA0sOYXt1DCMfOvRuczwlKp/47HD6+9sTQk7qZIrUYF LUWa5wY5POPF4= X-Google-Smtp-Source: AGHT+IGkoVTlDmuXhXgKH8KEBcln0qrx0fcFsmQTlckYyl4jpEVBiAJzwLEO1xr/2XUaO9zovHxOEA== X-Received: by 2002:a05:600c:c093:b0:477:14ba:28da with SMTP id 5b1f17b1804b1-4792eb1675amr42256545e9.5.1764865620554; Thu, 04 Dec 2025 08:27:00 -0800 (PST) Received: from kamino ([79.117.198.178]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-42f7d222478sm3978450f8f.20.2025.12.04.08.26.59 for <submit@bugs.debian.org> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 04 Dec 2025 08:26:59 -0800 (PST) Sender: Emilio Pozuelo Monfort <pochu27@gmail.com> Received: by kamino (Postfix, from userid 1000) id 32B335F00082; Thu, 04 Dec 2025 17:26:59 +0100 (CET) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Emilio Pozuelo Monfort <pochu@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: freeimage: dead upstream, open security issues Message-ID: <176486561917.712432.5070065168957275586.reportbug@kamino> X-Mailer: reportbug 13.2.0 Date: Thu, 04 Dec 2025 17:26:59 +0100 X-Debbugs-Cc: pochu@debian.org Delivered-To: submit@bugs.debian.org Source: freeimage Version: 3.18.0+ds2-11 Severity: serious Tags: security X-Debbugs-Cc: team@security.debian.org Hi, It looks like freeimage is dead upstream (last upstream release in 2018, upstream maintainer email bounces[1]). With many open security issues[2], I believe freeimage is not in a shape to be released in Debian, and should be removed. This bug at RC severity should kick it out of testing for the time being, and if nobody is willing to take over it and look at the security issues, it should eventually be dropped from sid as well. Cheers, Emilio [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1082375 [2] https://security-tracker.debian.org/tracker/source-package/freeimage ]