Skip to content

Mark src:vte as limited supported in Debian bookworm and above

Salvatore Bonaccorso requested to merge vte-limited-support into master

vte is only used in the debian-installer (which is using up to date GTK 2).

For anything outside the installer, the replacement is src:vte2.91, which is compiled in GTK 3 and GTK 4 flavours (but does not support GTK 2).

The GNOME team does not intend to support the use of src:vte for untrusted content, and they do not intend to fix DoS vulnerabilities like #1081907, or any bugs at all, really (unless they are critical for d-i).

Thanks: Simon McVittie smcv@debian.org Closes: #1082885 Signed-off-by: Salvatore Bonaccorso carnil@debian.org

Merge request reports