Accepted qtcreator 13.0.0-1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 05 Apr 2024 07:35:07 +0200 Source: qtcreator Architecture: source Version: 13.0.0-1 Distribution: experimental Urgency: medium Maintainer: Debian Qt/KDE Maintainers Changed-By: Pino Toscano Changes: qtcreator (13.0.0-1)

Bug#1068434: ITP: python-asv-runner -- Core Python benchmark code for ASV

Package: wnpp Severity: wishlist Owner: Yogeswaran Umasankar X-Debbugs-Cc: debian-devel@lists.debian.org, kd8...@gmail.com * Package name: python-asv-runner Version : 0.2.1 Upstream Contact: Rohit Goswami , Michael Droettboom * URL :

Accepted rust-parsec-tool 0.7.0-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 05 Apr 2024 04:55:32 + Source: rust-parsec-tool Architecture: source Version: 0.7.0-4 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers Changed-By: Peter Michael Green Closes: 1067572 Changes:

Accepted mtail 3.0.0~rc54+git0ff5-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 05 Apr 2024 04:02:35 + Source: mtail Architecture: source Version: 3.0.0~rc54+git0ff5-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team Changed-By: Martina Ferrari Closes: 1067352 Changes:

Accepted apache2 2.4.59-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 05 Apr 2024 08:08:11 +0400 Source: apache2 Built-For-Profiles: nocheck Architecture: source Version: 2.4.59-1 Distribution: unstable Urgency: medium Maintainer: Debian Apache Maintainers Changed-By: Yadd Closes: 1032628

Accepted xapers 0.9.0-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 23:41:55 -0400 Source: xapers Architecture: source Version: 0.9.0-3 Distribution: unstable Urgency: medium Maintainer: Jameson Graef Rollins Changed-By: Daniel Kahn Gillmor Closes: 1061860 Changes: xapers

Accepted node-graphql 16.8.1-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 05 Apr 2024 02:58:21 +0530 Source: node-graphql Architecture: source Version: 16.8.1-2 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers Changed-By: Ananthu C V Closes: 1046929 1049548

Accepted macaulay2 1.23+ds-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 23:18:37 -0400 Source: macaulay2 Built-For-Profiles: noudeb Architecture: source Version: 1.23+ds-2 Distribution: unstable Urgency: medium Maintainer: Debian Math Team Changed-By: Doug Torrance Changes:

Accepted tremotesf 2.6.2-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 22:27:59 -0400 Source: tremotesf Architecture: source Version: 2.6.2-1 Distribution: unstable Urgency: medium Maintainer: Antoine Beaupré Changed-By: Antoine Beaupré Changes: tremotesf (2.6.2-1) unstable;

Accepted xapers 0.9.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 22:50:12 -0400 Source: xapers Architecture: source Version: 0.9.0-2 Distribution: unstable Urgency: medium Maintainer: Jameson Graef Rollins Changed-By: Daniel Kahn Gillmor Changes: xapers (0.9.0-2) unstable;

Accepted photopc 3.07-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 05 Apr 2024 03:45:07 +0200 Source: photopc Architecture: source Version: 3.07-3 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1066511 Changes: photopc (3.07-3)

Accepted gkermit 2.01-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 05 Apr 2024 03:32:43 +0200 Source: gkermit Architecture: source Version: 2.01-4 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1066387 Changes: gkermit (2.01-4)

Accepted flask-session 0.8.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 22:23:36 -0300 Source: flask-session Architecture: source Version: 0.8.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Josenilson Ferreira da Silva Changes: flask-session

Accepted tcp-wrappers 7.6.q-33 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 05 Apr 2024 03:22:50 +0200 Source: tcp-wrappers Architecture: source Version: 7.6.q-33 Distribution: unstable Urgency: medium Maintainer: Marco d'Itri Changed-By: Marco d'Itri Closes: 1068311 Changes: tcp-wrappers

Accepted splitvt 1.6.6-16 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 05 Apr 2024 03:02:37 +0200 Source: splitvt Architecture: source Version: 1.6.6-16 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1066614 Changes: splitvt (1.6.6-16)

Accepted sop-java 7.0.1-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 20:56:36 -0400 Source: sop-java Architecture: source Version: 7.0.1-2 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers Changed-By: Jérôme Charaoui Changes: sop-java (7.0.1-2) unstable;

Accepted pidgin-gnome-keyring 2.0-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 05 Apr 2024 01:35:23 +0100 Source: pidgin-gnome-keyring Architecture: source Version: 2.0-3 Distribution: unstable Urgency: medium Maintainer: Luca Boccassi Changed-By: Luca Boccassi Closes: 1068420 Changes:

Accepted mksh 59c-37 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA384 Format: 1.8 Date: Fri, 05 Apr 2024 02:33:34 +0200 Source: mksh Architecture: source Version: 59c-37 Distribution: unstable Urgency: medium Maintainer: Thorsten Glaser Changed-By: Thorsten Glaser Changes: mksh (59c-37) unstable; urgency=medium .

Accepted epm 4.2-12 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 05 Apr 2024 02:33:54 +0200 Source: epm Architecture: source Version: 4.2-12 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 667930 1044273 1066241 Changes: epm

Accepted golang-github-prometheus-common 0.52.2-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 05 Apr 2024 00:20:27 + Source: golang-github-prometheus-common Architecture: source Version: 0.52.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team Changed-By: Daniel Swarbrick Changes:

Re: New supply-chain security tool: backseat-signed

On Fri, Apr 05, 2024 at 01:30:51AM +0200, kpcyrd wrote: > On 4/5/24 12:31 AM, Adrian Bunk wrote: > > Hashes of "git archive" tarballs are anyway not stable, > > so whatever a maintainer generates is not worse than what is on Github. > > > > Any proper tooling would have to verify that the

Accepted flask-paginate 2024.3.28-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 20:29:44 -0300 Source: flask-paginate Architecture: source Version: 2024.3.28-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Josenilson Ferreira da Silva Changes:

Accepted wily 0.13.42-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 05 Apr 2024 01:30:35 +0200 Source: wily Architecture: source Version: 0.13.42-2 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1047100 1066343 Changes: wily

Accepted apprise 1.7.5-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 19:22:40 -0300 Source: apprise Architecture: source Version: 1.7.5-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Josenilson Ferreira da Silva Changes: apprise (1.7.5-1)

Re: New supply-chain security tool: backseat-signed

On 4/5/24 12:31 AM, Adrian Bunk wrote: Hashes of "git archive" tarballs are anyway not stable, so whatever a maintainer generates is not worse than what is on Github. Any proper tooling would have to verify that the contents is equal. ... Being able to disregard the compression layer is still

Accepted pglistener 5.1-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 18:10:09 -0300 Source: pglistener Architecture: source Version: 5.1-1 Distribution: unstable Urgency: medium Maintainer: Paulo Henrique de Lima Santana (phls) Changed-By: Paulo Henrique de Lima Santana (phls)

Re: New supply-chain security tool: backseat-signed

On Fri, Apr 05, 2024 at 01:31:25AM +0300, Adrian Bunk wrote: > On Thu, Apr 04, 2024 at 09:39:51PM +0200, kpcyrd wrote: > >... > > I've checked both, upstreams github release page and their website[1], but > > couldn't find any mention of .tar.xz, so I think my claim of Debian doing > > the

Accepted r-cran-mvnormtest 0.1-9-3-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 17:57:22 -0500 Source: r-cran-mvnormtest Architecture: source Version: 0.1-9-3-1 Distribution: unstable Urgency: medium Maintainer: Dirk Eddelbuettel Changed-By: Dirk Eddelbuettel Changes: r-cran-mvnormtest

Accepted nghttp2 1.61.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 05 Apr 2024 00:56:35 +0200 Source: nghttp2 Architecture: source Version: 1.61.0-1 Distribution: unstable Urgency: high Maintainer: Tomasz Buchert Changed-By: Tomasz Buchert Changes: nghttp2 (1.61.0-1) unstable; urgency=high

Accepted railway-gtk 2.4.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 18:53:47 -0400 Source: railway-gtk Built-For-Profiles: noudeb Architecture: source Version: 2.4.0-2 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha Closes:

Accepted lightdm 1.32.0-5~exp1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 05 Apr 2024 00:36:32 +0200 Source: lightdm Architecture: source Version: 1.32.0-5~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Xfce Maintainers Changed-By: Mike Gabriel Closes: 1067561 Changes: lightdm

Re: New supply-chain security tool: backseat-signed

On Thu, Apr 04, 2024 at 09:39:51PM +0200, kpcyrd wrote: >... > I've checked both, upstreams github release page and their website[1], but > couldn't find any mention of .tar.xz, so I think my claim of Debian doing > the compression is fair. > > [1]: https://www.vim.org/download.php >... Perhaps

Accepted lpr 1:2008.05.17.3+nmu2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 25 Mar 2024 21:31:09 + Source: lpr Architecture: source Version: 1:2008.05.17.3+nmu2 Distribution: unstable Urgency: medium Maintainer: Adam Majer Changed-By: Bastian Germann Closes: 1007664 Changes: lpr

Accepted golang-github-mattn-go-xmpp 0.1.5-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 22:15:11 + Source: golang-github-mattn-go-xmpp Architecture: source Version: 0.1.5-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team Changed-By: Martin Dosch Changes:

Accepted stress-ng 0.17.07-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 4 Apr 2024 22:33:12 +0100 Source: stress-ng Architecture: source Version: 0.17.07-1 Distribution: unstable Urgency: medium Maintainer: Colin Ian King Changed-By: Colin Ian King Changes: stress-ng (0.17.07-1) unstable;

Accepted pygame 2.5.2-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 23:59:27 +0200 Source: pygame Built-For-Profiles: noudeb Architecture: source Version: 2.5.2-2 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Gianfranco Costamagna Closes:

Accepted logtools 0.13e+nmu3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 25 Mar 2024 21:13:33 + Source: logtools Architecture: source Version: 0.13e+nmu3 Distribution: unstable Urgency: medium Maintainer: Russell Coker Changed-By: Bastian Germann Closes: 977940 1007513 Changes: logtools

Accepted appmenu-gtk-module 24.02-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 23:35:45 +0200 Source: appmenu-gtk-module Architecture: source Version: 24.02-1 Distribution: unstable Urgency: medium Maintainer: Ayatana Packagers Changed-By: Mike Gabriel Changes: appmenu-gtk-module (24.02-1)

Accepted weplab 0.1.5-7 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 23:20:58 +0200 Source: weplab Architecture: source Version: 0.1.5-7 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1066521 Changes: weplab (0.1.5-7)

Re: Debian openssh option review: considering splitting out GSS-API key exchange

On Thu, Apr 04, 2024 at 06:42:08PM -0300, Henrique de Moraes Holschuh wrote: > If libwrap is bringing in complex libs, maybe we could reduce the > attack surface on libwrap itself? It would be nice to have a variant > that only links to the libc and that's it... Yeah, that's

Accepted lockfile-progs 0.1.19+nmu1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 25 Mar 2024 20:52:38 + Source: lockfile-progs Architecture: source Version: 0.1.19+nmu1 Distribution: unstable Urgency: medium Maintainer: Rob Browning Changed-By: Bastian Germann Closes: 1007071 Changes: lockfile-progs

Accepted libvirt 10.2.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 02 Apr 2024 23:42:38 +0200 Source: libvirt Architecture: source Version: 10.2.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Libvirt Maintainers Changed-By: Andrea Bolognani Closes: 1067461 Changes: libvirt

Accepted ibus-avro 1.2+git20230914-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 17:29:47 -0400 Source: ibus-avro Architecture: source Version: 1.2+git20230914-1 Distribution: unstable Urgency: medium Maintainer: Debian Input Method Team Changed-By: Boyuan Yang Changes: ibus-avro

Accepted fonts-atkinson-hyperlegible 0.0~git20210430.1cb3116-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 17:36:46 -0400 Source: fonts-atkinson-hyperlegible Architecture: source Version: 0.0~git20210430.1cb3116-3 Distribution: unstable Urgency: medium Maintainer: Debian Fonts Task Force Changed-By: Boyuan Yang

Re: Debian openssh option review: considering splitting out GSS-API key exchange

On Tue, Apr 2, 2024, at 07:04, Marco d'Itri wrote: > On Apr 02, Colin Watson wrote: > >> At the time, denyhosts was popular, but it was removed from Debian >> several years ago. I remember that, when I dealt with that on my own >> systems, fail2ban seemed like the obvious replacement, and my

Accepted rocrand 5.7.1-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 31 Mar 2024 23:40:09 -0600 Source: rocrand Architecture: source Version: 5.7.1-3 Distribution: unstable Urgency: medium Maintainer: Debian ROCm Team Changed-By: Cordell Bloor Changes: rocrand (5.7.1-3) unstable;

Accepted reform-firedecor 2023-10-23-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 23:08:17 +0200 Source: reform-firedecor Architecture: source Version: 2023-10-23-4 Distribution: unstable Urgency: medium Maintainer: Lukas F. Hartmann Changed-By: Johannes Schauer Marin Rodrigues Changes:

Accepted lomiri-system-settings-security-privacy 1.0.2-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 23:16:44 +0200 Source: lomiri-system-settings-security-privacy Architecture: source Version: 1.0.2-3 Distribution: unstable Urgency: medium Maintainer: Debian UBports Team Changed-By: Mike Gabriel Closes: 1068399

Accepted lomiri-filemanager-app 1.0.4+dfsg-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 23:07:14 +0200 Source: lomiri-filemanager-app Architecture: source Version: 1.0.4+dfsg-2 Distribution: unstable Urgency: medium Maintainer: Debian UBports Team Changed-By: Mike Gabriel Closes: 1068400 Changes:

Accepted keyboards-rg 0.3+nmu2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 25 Mar 2024 20:29:24 + Source: keyboards-rg Architecture: source Version: 0.3+nmu2 Distribution: unstable Urgency: medium Maintainer: Radovan Garabík Changed-By: Bastian Germann Closes: 1007318 Changes: keyboards-rg

Accepted openssl 3.2.1-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 22:00:04 +0200 Source: openssl Architecture: source Version: 3.2.1-3 Distribution: unstable Urgency: medium Maintainer: Debian OpenSSL Team Changed-By: Sebastian Andrzej Siewior Closes: 1066116 Changes: openssl

Accepted ibus-unikey 0.7.0~beta1-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 16:56:07 -0400 Source: ibus-unikey Architecture: source Version: 0.7.0~beta1-2 Distribution: unstable Urgency: medium Maintainer: Debian Input Method Team Changed-By: Boyuan Yang Changes: ibus-unikey

Accepted rpy2 3.5.16-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 15:42:35 -0500 Source: rpy2 Architecture: source Version: 3.5.16-1 Distribution: unstable Urgency: medium Maintainer: Dirk Eddelbuettel Changed-By: Dirk Eddelbuettel Changes: rpy2 (3.5.16-1) unstable;

Accepted ifupdown-extra 0.33+nmu2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 25 Mar 2024 20:05:07 + Source: ifupdown-extra Architecture: source Version: 0.33+nmu2 Distribution: unstable Urgency: medium Maintainer: Javier Fernandez-Sanguino Peña Changed-By: Bastian Germann Closes: 1007497 Changes:

Accepted tla 1.3.5+dfsg1-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 22:26:37 +0200 Source: tla Architecture: source Version: 1.3.5+dfsg1-3 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1046988 1066352 Changes: tla

Accepted python-engineio 4.3.4-2.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 21:39:18 +0200 Source: python-engineio Architecture: source Version: 4.3.4-2.1 Distribution: unstable Urgency: medium Maintainer: Paulo Henrique de Lima Santana (phls) Changed-By: Alexandre Detiste Changes:

Accepted nheko 0.11.3+~0.9.2+~1.0.0+~0.3.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 21:17:09 +0200 Source: nheko Architecture: source Version: 0.11.3+~0.9.2+~1.0.0+~0.3.0-2 Distribution: unstable Urgency: medium Maintainer: Matrix Packaging Team Changed-By: Jonas Smedegaard Closes: 1042967

Accepted libsoup2.4 2.74.3-7 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 16:13:26 -0400 Source: libsoup2.4 Built-For-Profiles: noudeb Architecture: source Version: 2.74.3-7 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha Changes:

Accepted hp-ppd 0.9+nmu2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 25 Mar 2024 19:45:21 + Source: hp-ppd Architecture: source Version: 0.9+nmu2 Distribution: unstable Urgency: medium Maintainer: A Mennucc1 Changed-By: Bastian Germann Closes: 715806 1007459 Changes: hp-ppd (0.9+nmu2)

Re: New supply-chain security tool: backseat-signed

On 2024-04-04 21:39:51 +0200 (+0200), kpcyrd wrote: [...] > I don't know if Debian has this kind of provenance information available, to > my knowledge, Debian operates on "our maintainers upload .tar.xz files into > our archive and we take them for face value". Which does make sense, >

Accepted fortunes-bg 1.4+nmu1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 25 Mar 2024 19:02:15 + Source: fortunes-bg Architecture: source Version: 1.4+nmu1 Distribution: unstable Urgency: medium Maintainer: Anton Zinoviev Changed-By: Bastian Germann Closes: 1007683 Changes: fortunes-bg

Re: New supply-chain security tool: backseat-signed

On 4/3/24 4:21 AM, Adrian Bunk wrote: On Wed, Apr 03, 2024 at 02:31:11AM +0200, kpcyrd wrote: ... I figured out a somewhat straight-forward way to check if a given `git archive` output is cryptographically claimed to be the source input of a given binary package in either Arch Linux or Debian

Accepted pycparser 2.22-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 15:13:07 -0400 Source: pycparser Architecture: source Version: 2.22-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Stefano Rivera Changes: pycparser (2.22-1) unstable;

Accepted dh-buildinfo 0.11+nmu3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 25 Mar 2024 18:37:09 + Source: dh-buildinfo Architecture: source Version: 0.11+nmu3 Distribution: unstable Urgency: medium Maintainer: Yann Dirson Changed-By: Bastian Germann Closes: 1007066 Changes: dh-buildinfo

Accepted vte2.91 0.76.0-1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 14:48:07 -0400 Source: vte2.91 Built-For-Profiles: noudeb Architecture: source Version: 0.76.0-1 Distribution: experimental Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha Changes:

Accepted gdal 3.8.5+dfsg-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 19:45:27 +0200 Source: gdal Architecture: source Version: 3.8.5+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian GIS Project Changed-By: Bas Couwenberg Changes: gdal (3.8.5+dfsg-1) unstable;

Accepted kf6-kitemmodels 6.0.0-1 (source amd64 all) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 31 Mar 2024 13:55:27 +0200 Source: kf6-kitemmodels Binary: libkf6itemmodels-dev libkf6itemmodels-doc libkf6itemmodels6 libkf6itemmodels6-dbgsym qml6-module-org-kde-kitemmodels qml6-module-org-kde-kitemmodels-dbgsym

Accepted python-parsel 1.9.0+dfsg-2 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 01:12:06 +0500 Source: python-parsel Binary: python-parsel-doc python3-parsel Architecture: source all Version: 1.9.0+dfsg-2 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Andrey

Accepted kf6-kholidays 6.0.0-1 (source all amd64) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sat, 30 Mar 2024 11:59:40 +0100 Source: kf6-kholidays Binary: libkf6holidays-data libkf6holidays-dev libkf6holidays-doc libkf6holidays6 libkf6holidays6-dbgsym qml6-module-org-kde-kholidays qml6-module-org-kde-kholidays-dbgsym

Accepted link-grammar 5.12.4~dfsg-1 (source amd64 all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 02 Apr 2024 14:28:09 +0200 Source: link-grammar Binary: liblink-grammar-dev liblink-grammar-java liblink-grammar-java-dbgsym liblink-grammar5t64 liblink-grammar5t64-dbgsym link-grammar link-grammar-dbgsym

Accepted kf6-kidletime 6.0.0-1 (source amd64 all) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 31 Mar 2024 13:52:34 +0200 Source: kf6-kidletime Binary: libkf6idletime-dev libkf6idletime-doc libkf6idletime6 libkf6idletime6-dbgsym Architecture: source amd64 all Version: 6.0.0-1 Distribution: experimental Urgency: medium

Accepted kf6-ki18n 6.0.0-1 (source all amd64) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sat, 30 Mar 2024 13:33:46 +0100 Source: kf6-ki18n Binary: libkf6i18n-data libkf6i18n-dev libkf6i18n-doc libkf6i18n6 libkf6i18n6-dbgsym libkf6i18nlocaledata6 libkf6i18nlocaledata6-dbgsym qml6-module-org-kde-i18n-localedata

Accepted kf6-kguiaddons 6.0.0-1 (source amd64 all) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sat, 30 Mar 2024 01:38:09 +0100 Source: kf6-kguiaddons Binary: libkf6guiaddons-bin libkf6guiaddons-data libkf6guiaddons-dev libkf6guiaddons-doc libkf6guiaddons6 libkf6guiaddons6-dbgsym Architecture: source amd64 all Version:

Accepted kf6-kdnssd 6.0.0-1 (source all amd64) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 28 Mar 2024 23:26:51 +0100 Source: kf6-kdnssd Binary: libkf6dnssd-data libkf6dnssd-dev libkf6dnssd-doc libkf6dnssd6 libkf6dnssd6-dbgsym Architecture: source all amd64 Version: 6.0.0-1 Distribution: experimental Urgency:

Accepted kf6-kdbusaddons 6.0.0-1 (source amd64 all) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 28 Mar 2024 22:56:43 +0100 Source: kf6-kdbusaddons Binary: libkf6dbusaddons-bin libkf6dbusaddons-bin-dbgsym libkf6dbusaddons-data libkf6dbusaddons-dev libkf6dbusaddons-doc libkf6dbusaddons6 libkf6dbusaddons6-dbgsym

Accepted bioawk 1.0-5 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 18:50:00 +0200 Source: bioawk Architecture: source Version: 1.0-5 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team Changed-By: Santiago Vila Closes: 1068341 Changes: bioawk (1.0-5)

Accepted xshisen 1:1.51-8 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 19:01:55 +0200 Source: xshisen Architecture: source Version: 1:1.51-8 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1003064 1066426 Changes: xshisen

Re: Debian openssh option review: considering splitting out GSS-API key exchange

On Thu, 4 Apr 2024 13:25:04 +0200, Stephan Seitz wrote: >Am Di, Apr 02, 2024 at 13:30:43 +0200 schrieb Marc Haber: >>from being vulnerable to the current xz-based attack. Just having to >>dump an ALL: ALL into /etc/hosts.deny is vastly easier than having to >>maintain a packet filter. > >Stupid

Accepted xfrisk 1.2-9 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 18:36:26 +0200 Source: xfrisk Architecture: source Version: 1.2-9 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1066617 Changes: xfrisk (1.2-9) unstable;

Accepted python-ofxclient 2.0.4-7 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 18:27:34 +0200 Source: python-ofxclient Architecture: source Version: 2.0.4-7 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Alexandre Detiste Changes: python-ofxclient

Accepted xscavenger 1.4.5-6 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 18:17:25 +0200 Source: xscavenger Architecture: source Version: 1.4.5-6 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1066550 Changes: xscavenger

Accepted pentobi 24.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 17:29:57 +0200 Source: pentobi Architecture: source Version: 24.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Games Team Changed-By: Alexandre Detiste Changes: pentobi (24.0-1) unstable;

Accepted liferea 1.15.6-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 17:55:26 +0200 Source: liferea Architecture: source Version: 1.15.6-1 Distribution: unstable Urgency: medium Maintainer: Paul Gevers Changed-By: Paul Gevers Changes: liferea (1.15.6-1) unstable; urgency=medium

Accepted gtk4 4.14.2+ds-1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 18:09:08 +0200 Source: gtk4 Built-For-Profiles: noudeb Architecture: source Version: 4.14.2+ds-1 Distribution: experimental Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Sebastien Bacher

Accepted mtd-utils 1:2.2.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sat, 30 Mar 2024 14:37:16 +0100 Source: mtd-utils Architecture: source Version: 1:2.2.0-1 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Bastian Germann Changes: mtd-utils (1:2.2.0-1) unstable;

Accepted dmitry 1.3a-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 17:54:05 +0200 Source: dmitry Architecture: source Version: 1.3a-3 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1066509 Changes: dmitry (1.3a-3)

Accepted bluemon 1.4-9 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 17:55:45 +0200 Source: bluemon Architecture: source Version: 1.4-9 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 900194 1066330 Changes: bluemon (1.4-9)

Re: Debian openssh option review: considering splitting out GSS-API key exchange

Florian Lohoff writes: > These times have long gone and tcp wrapper as a security mechanism has > lost its reliability, this is why people started moving away from tcp > wrapper (which i think is a shame) > I personally moved to nftables which is nearly as simple once you get > your muscle

Accepted dropbear 2024.84-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 17:18:48 +0200 Source: dropbear Architecture: source Version: 2024.84-1 Distribution: unstable Urgency: medium Maintainer: Guilhem Moulin Changed-By: Guilhem Moulin Changes: dropbear (2024.84-1) unstable;

Accepted ncl 6.6.2.dfsg.1-5 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 13:15:26 +0200 Source: ncl Architecture: source Version: 6.6.2.dfsg.1-5 Distribution: unstable Urgency: medium Maintainer: Alastair McKinstry Changed-By: Bas Couwenberg Closes: 1066408 1068387 Changes: ncl

Accepted cronolog 1.6.2+rpk-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 17:15:35 +0200 Source: cronolog Architecture: source Version: 1.6.2+rpk-4 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1066637 Changes: cronolog

Accepted sshpass 1.10-0.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 16:49:55 +0200 Source: sshpass Architecture: source Version: 1.10-0.1 Distribution: unstable Urgency: medium Maintainer: Shachar Shemesh Changed-By: Alexandre Detiste Closes: 1032978 Changes: sshpass (1.10-0.1)

Accepted icewm 3.4.7-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 12:23:39 +0200 Source: icewm Architecture: source Version: 3.4.7-1 Distribution: unstable Urgency: low Maintainer: Eduard Bloch Changed-By: Eduard Bloch Changes: icewm (3.4.7-1) unstable; urgency=low . * New

Accepted xdg-desktop-portal 1.18.3-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 10:53:28 -0400 Source: xdg-desktop-portal Built-For-Profiles: noudeb Architecture: source Version: 1.18.3-1 Distribution: unstable Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Jeremy Bícha

Accepted gcr4 4.2.0-5 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 16:50:15 +0200 Source: gcr4 Built-For-Profiles: noudeb Architecture: source Version: 4.2.0-5 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Sebastien Bacher Changes:

Accepted snacc 1.3.1-10 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 16:03:06 +0200 Source: snacc Architecture: source Version: 1.3.1-10 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1015664 1046185 1065981 1066242 Changes:

Accepted python-drf-spectacular-sidecar-nonfree 2024.4.1-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 16:14:10 +0200 Source: python-drf-spectacular-sidecar-nonfree Binary: python3-drf-spectacular-sidecar-nonfree Architecture: source all Version: 2024.4.1-1 Distribution: unstable Urgency: medium Maintainer: Debian

Accepted convlit 1.8-5 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Apr 2024 16:21:28 +0200 Source: convlit Architecture: source Version: 1.8-5 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Andreas Beckmann Closes: 1066270 Changes: convlit (1.8-5)

Re: Seeking a small group to package Apache Arrow (was: Bug#970021: RFP: apache-arrow -- cross-language development platform for in-memory analytics)

On 3/25/24 19:17, Julian Gilbey wrote: Hi all, [NB: sent to d-science, d-python, d-devel and the RFP bug; reply-to set to d-science and the RFP bug only] An update on Apache Arrow, and in particular the Python library PyArrow. For those who don't know: Apache Arrow is a development

Accepted gnome-snapshot 46.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 15:21:16 +0200 Source: gnome-snapshot Architecture: source Version: 46.0-2 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Matthias Geiger Changes: gnome-snapshot

  1   2   >