#1141192 angular.js: Do not release ancient Angular.js version with Debian forky

#1141192#5
Date:
2026-07-01 05:43:45 UTC
From:
To:
Hi

As discussed with László, filling a 'blocking bug' for Debian forky
for src:angular.js to make sure we have a flag raised to (try) not to
release Debian forky with the ancient angular.js version.

While upstream was rewritten, Angular get regularly CVEs, where
determining if the ancient version is affected as well involves
substantial work.

If it becomes unrealistic to get it removed or replaced accordingly we
might re-evaluate towards the forky release (in sync with the release
team obviously).

Upstream support for AngularJS already ended on 7th April, 2022 and
assuming Debian forky to be released in 2027, we already start with a
5 years unsupported still shipped AngularJS version.

Regards,
Salvatore