Version 2.17-9 of libapreq2 is marked for autoremoval from testing on Tue 18 Aug 2026. It is affected by #1139634. The removal of libapreq2 will also cause the removal of (transitive) reverse dependency: libapache2-sitecontrol-perl. You should try to prevent the removal by fixing these RC bugs.
CVE-2022-22728:
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.
This package has been
orphaned. This means that it does not have a real
maintainer at the moment. Please consider adopting this package
if you are interested in it. Please see bug number #1051034 for more information.
testing migrations
This package is part of the ongoing testing transition known as perl-5.42.
Please avoid uploads unrelated to this transition, they would
likely delay it and require supplementary work from the release
managers. On the other hand, if your package has problems
preventing it to migrate to testing, please fix them
as soon as possible.
You can probably find supplementary information in the
debian-release
archives or in the corresponding
release.debian.org
bug.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/liba/libapreq2.png){kind=link}