[Pkg-zsh-devel] Bug#1005876: zsh: Version mismatch with zsh-common

[inasprecali]

Package: zsh
Version: 5.8-6
Severity: important
X-Debbugs-Cc: inasprecali at disroot.org

Dear Maintainer,

package zsh-common was recently updated from version 5.8-6 to version
5.8-6+deb11u1 to address CVE-2021-45444.  However, package zsh is still
stuck at version 5.8-6, and it still depends on the older specific
version of zsh-common (= 5.8-6).  This makes it impossible to effectively
update the packages (or install zsh at all if not present) without
deliberately voilating dependency constraints.  Please update the versions
so that they match.

Thank you for your time.

-- System Information:
Debian Release: 11.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-11-amd64 (SMP w/4 CPU threads)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages zsh depends on:
ii  libc6       2.31-13+deb11u2
ii  libcap2     1:2.44-1
ii  libtinfo6   6.2+20201114-2
pn  zsh-common  <none>

Versions of packages zsh recommends:
ii  libgdbm6      1.19-2
ii  libncursesw6  6.2+20201114-2
ii  libpcre3      2:8.39-13

Versions of packages zsh suggests:
pn  zsh-doc  <none>