Package: swupdate
Version: 2025.12+dfsg-10~bpo13+1
Severity: normal
X-Debbugs-Cc: [email protected]

Dear Maintainer,

Thanks for your work on swupdate!

You are probably already aware of this, but there is no open issue about it 
yet: the current version of 'swupdate' in trixie-backports cannot be installed, 
because it depends on libwolfssl42t64 (>= 5.9), which is not available in the 
stable or backports repositories.
I've seen the other open issue (#1136309), but that issue centers around 
security issues in libwolfssl, but the 'not installable' aspect of swupdate is 
not mentioned there.

Just a thought: given the apparent security issues in libwolfssl, and the fact 
that swupdate can be built with support for multiple crypto providers, would it 
be an option to package different variants of 'swupdate', in which certain 
provider libraries (and thus dependencies) have been excluded? E.g. for my 
purposes, having OpenSSL support would already suffice.

Kind regards,

Matthijs ten Berge

(note: the system information below is from a dev system, not the targets on 
which swupdate will be running)


-- System Information:
Debian Release: 13.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.6.87.2-microsoft-standard-WSL2 (SMP w/24 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages swupdate depends on:
ii  init-system-helpers         1.69~deb13u1
ii  libarchive13t64             3.7.4-4+deb13u1
ii  libblkid1                   2.41-5
pn  libbtrfsutil1t64            <none>
ii  libc6                       2.41-12+deb13u3
ii  libconfig11                 1.7.3-2
ii  libcurl3t64-gnutls          8.14.1-2+deb13u3
ii  libext2fs2t64               1.47.2-3+b11
ii  libfdisk1                   2.41-5
ii  libgpgme11t64               1.24.2-3
pn  libgpiod3                   <none>
ii  libjson-c5                  0.18+ds-1
ii  liblua5.4-0                 5.4.7-1+b2
ii  liblzma5                    5.8.1-1
ii  libmbedcrypto16             3.6.5-0.1~deb13u1
pn  libmbedtls21                <none>
pn  libmbedx509-7               <none>
ii  libp11-kit0                 0.25.5-3
pn  librsync2t64                <none>
pn  libswupdate0.1              <none>
ii  libsystemd0                 257.13-1~deb13u1
pn  libubootenv0.1              <none>
pn  liburiparser1               <none>
ii  libuuid1                    2.41-5
pn  libwebsockets19t64          <none>
pn  libwolfssl42t64             <none>
pn  libzck1                     <none>
ii  libzstd1                    1.5.7+dfsg-1
ii  systemd [systemd-sysusers]  257.13-1~deb13u1
ii  zlib1g                      1:1.3.dfsg+really1.3.1-1+b1

Versions of packages swupdate recommends:
pn  libebgenv0  <none>

swupdate suggests no packages.
AWL Disclaimer: This e-mail is intended only for the addressee(s) and contains 
confidential information. If you have received this e-mail in error, please 
immediately notify the sender, delete the e-mail from your computer and destroy 
all copies or print-outs (if any). This e-mail is not intended to be relied 
upon by any person or entity without subsequent confirmation of its contents in 
the form of a (fax) letter. AWL accepts no liability for the use of the 
information contained in this e-mail. For our full disclaimer, please visit 
https://www.awl.nl/disclaimer/

Reply via email to