Bug#1102138: RM: libbson-xs-perl -- RoQA; EOL upstream, has security issues

Salvatore Bonaccorso carnil at debian.org
Sat Apr 5 16:15:41 BST 2025


Package: ftp.debian.org
Severity: normal
Tags: security
X-Debbugs-Cc: libbson-xs-perl at packages.debian.org, Adrian Bunk <bunk at debian.org>, Yadd <yadd at debian.org>, gregor herrmann <gregoa at debian.org>, team at security.debian.org, carnil at debian.org, Debian Security Team <team at security.debian.org>
Control: affects -1 + src:libbson-xs-perl
User: ftp.debian.org at packages.debian.org
Usertags: remove

Hi FTP masters,

Please remove libbson-xs-perl from unstable. As per upstream, cf.
#1101756, it is

> As of August 13, 2020, the BSON-XS library has reached end of life and
> is no longer supported by MongoDB.

Additionally it inherits some of the bson CVEs from mongo-c-driver.

Please do remove libbson-xs-perl from unstable so it will not be
included in upcoming trixie.

$ dak rm --suite=unstable -n -R libbson-xs-perl
Will remove the following packages from unstable:

libbson-xs-perl |    0.8.4-3 | source
libbson-xs-perl | 0.8.4-3+b1 | armel, armhf
libbson-xs-perl | 0.8.4-3+b2 | amd64, arm64, i386, mips64el, ppc64el, s390x

Maintainer: Debian Perl Group <pkg-perl-maintainers at lists.alioth.debian.org>

------------------- Reason -------------------

----------------------------------------------

Checking reverse dependencies...
No dependency problem found.

Regards,
Salvatore



More information about the pkg-perl-maintainers mailing list