The reason this package is often out of update is that whenever a new
dependency is introduced, that dependency will need to be packaged.
We, the developer, could develop with the dependency availability in
mind. Or create make dependencies and associated functions optional. If
that is necessary for other functional updates to be delivered in a
timely manner.
On 28/4/2022 3:05 pm, Antoine Beaupré wrote:
Control: tags -1 +patch
Control: found -1 4.34.0-1
Control: severity -1 grave
On 2022-04-18 17:40:13, Shelikhoo wrote:
This bug is submitted by upstream developers on behalf of end-users for
a Debian specific bug. We are ready to cooperate with the Debian side
to resolve this bug.
V2Ray 4.34.0-5 (Debian Unstable ver.) crashes when VMess protocol is
used because an unsynchronized update of Golang and V2Ray as HMAC
constructor fix is not applied on Debian version of V2Ray.
The version of the source code currently included in Debian will not
work if compiled with Golang 1.15+(or possibly 1.16+). We have already
fixed this issue more than 1 year
ago(https://github.com/v2fly/v2ray-core/commit/0024c6e028768d8516bdee11be9834b2617ff00c)
however this changeset is not included in Debian. We recommend this
commit be backported to the Debian version of V2Ray(I will exercise
self-control to refrain from asking you to keep the package up to date.).
No need for self control! The package should be kept up to date, and
feel free to file a bug to report this problem. :)
I think this probably also applies to stable (because it doesn't have a
different set of patches than unstable), so I marked it as affecting
that as well.
Finally, this seems to be more serious than "normal", as it completely
crashes the program ("makes the package in question unusable or mostly
so"), so I bumped the severity as well.
I think the way forward here is to update to latest upstream in
unstable. I don't see why that should be kept out. For stable, that
would need a stable update and it's a little more involved,
specifically:
https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#bug-security
or:
https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#upload-stable
a.
