Hi,
On 21/03/2025 22:13, Sylvain Beucler wrote:
On 01/10/2024 19:02, Sylvain Beucler wrote:
On 12/08/2024 18:40, Santiago Ruano Rincón wrote:
El 12/08/24 a las 00:27, Mike Gabriel escribió:
On So 11 Aug 2024 12:57:23 CEST, Moritz Muehlenhoff wrote:
Horde is pretty much unmaintained. php-horde-mime-viewer and php-
horde-turba
are in dsa-needed.txt for a long time, but pings were never replied to
either.
It seems best to drop Horde (and ckeditor3 alongside) from testing.
I will take a look at this the coming week or the week after (when I
will
have plenty of time for Debian stuff).
For ckeditor3, I will drop the symlinking of ckeditor3 and use the
bundled
version instead (which currently gets removed). I will also check
the diff
between Horde's bundled version of ckeditor3 and the version we have
inhttps://bugs.debian.org/cgi-bin/pkgreport.cgi?
dist=unstable;maint=team%2Bdebian-horde-team%40tracker.debian.org
Debian and amend things if needed.
Regarding the nearly-non-maintenance state of Horde: Horde hasn't been
ported to PHP 8, yet. One of the upstream devs is working on that,
but there
are not official releases, yet. I will ping them about the current
status.
OK, that is for debian testing, right? Mike, any thought about bullseye?
I am finding hard to find arguments to keep it supported, but I would
like to hear from you (or from somebody else in the LTS Team) :-) ?
Mike, could you please save me some time and point me to the bundled
version of ckeditor3?
Mike,
Has there been news on horde* and ckeditor3? :)
If not I believe it's best we drop support for these packages in
bullseye.
Following discussions with the Debian Horde Team notably at https://
salsa.debian.org/horde-team/php-horde-editor/-/merge_requests/1
- php-horde-* is broken with PHP8, starting with and sadly including
bookworm/stable. 5 grave bugs confirm it:
https://bugs.debian.org/cgi-bin/pkgreport.cgi?
dist=stable;maint=team%2Bdebian-horde-team%40tracker.debian.org
- We already ship the latest Horde 5.2.x. Upstream work towards PHP8
support is present but in 6.0alpha branches, incomplete, and slow.
- We do have an upgrade path for ckeditor -> ckeditor[v4]
https://lists.debian.org/debian-lts/2025/03/msg00011.html
- php-horde-* is currently removed from trixie/testing.
- The Debian Horde Team wishes to keep php-horde-* in unstable with the
goal of making it usable for Debian /forky/.
Consequently:
- For bookworm, we suggest marking php-horde-* as EOL for Debian support
in bookworm. If that makes sense we can also RM it from Debian bookworm.
- For bullseye-lts and *-elts we should be able to keep support, as we
should be able to write fixes for this PHP code base. However since
upstream activity for 5.2.x is very low, we could also drop support in
bullseye-lts, though I'm neutral on this point.
A little recap:
- php-horde* now uses ckeditor[v4] in unstable and bullseye/oldstable:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1042715
https://lists.debian.org/debian-lts-announce/2025/04/msg00007.html
- php-horde* remains broken in bookworm due to incompatibility with
PHP8. It is now marked EOL in debian-security-support.
https://salsa.debian.org/debian/debian-security-support/-/commit/1dea5e2eb31a2cb2ac7bffd8a492a4f55fc4942a
- We also reached the Release Team to RM php-horde* from bookworm, but
this would mean removing 121 packages mid-release and is impractical:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1101047
- php-horde* support continues in bullseye-lts, with upstream help, as
shown when handling CVE-2025-30349/php-horde-imp this week:
https://github.com/horde/imp/pull/15/
https://lists.debian.org/debian-lts-announce/2025/04/msg00008.html
This should close immediate Horde issues.
(ckeditor3 is handled differently in a separate thread.)
Cheers!
Sylvain Beucler
Debian LTS Team
