On Mon, Oct 05, 2026 at 10:15:25AM +0200, Andrew Lee (李健秋) wrote:
> Source: golang-github-google-cel-go
> Followup-For: Bug #1147513
> X-Debbugs-Cc: [email protected]
> 
> 
> Hi Santiago,
> 
> There are two different projects maintained in paralle from upsteam.
> 
> The patch you applied seems was from https://github.com/cel-expr/cel-go
> Correct repo for this package should be https://github.com/google/cel-go
> 
> The correct patch for github.com/google/cel-go is this one:
> https://github.com/google/cel-go/commit/2814acd9e1edc48811cbd88c6f60432638334e5a

Thanks for the pointer, I'll see if I can manage it myself.
(Yesterday I was in the middle of an archive rebuild for glibc in experimental).

> You may also simply update this golang-github-google-cel-go package to
> newer upstream version (>= v0.29.0) which included this fix.

Well, but that will not fix the CVE problem in trixie, which is also
my concern here.

Thanks.

Reply via email to