Hi! On 11/9/26 2:45 PM, Sylvain Beucler wrote: > > On 05/11/2026 11:13, Hans van Kranenburg wrote: >> On 11/4/26 8:41 PM, Sylvain Beucler wrote: >>> On 04/11/2026 19:02, Hans van Kranenburg wrote: >>>> Can you please assist again with a Xen security update: >>>> >>>> [...] >>>> >>>> The changes are already in unstable since yesterday, and the stable >>>> security update for Trixie is at the security team with DSA about to be >>>> released. >>> >>> I'll take care of the upload :) security-tracker updated following your >>> remarks. >> I see it. Thanks a lot! > Incidentally, would you mind pushing a matching Git tag to > bookworm-security? This is part of our upload process, and it helps > identifying the last upload in the Git history. Yes, I certainly do.
I just created and pushed the signed tag debian/4.17.7+13-g2445b30a44-0+deb12u1 https://salsa.debian.org/xen-team/debian-xen/-/tags/debian%2F4.17.7+13-g2445b30a44-0+deb12u1 [ more stuff, optional to read -> ] (And also debian/4.20.4+39-gf1e1321c87-0+deb13u1 and debian/4.20.4+63-g7abfd2bce2-0+deb13u1...) We (Debian Xen Team, which is Maximilian and me now) have a TODO item around tags. For the normal regular uploads that I can do as DM, to unstable and for (old)stable point releases, I use dgit push-source, which does all kinds of taggery thingies itself. If I'm not able to use that, and have to provide signed files to you or/and the security team, all of that does not happen, and I have to create whatever is needed manually. I think at some point it'd be good to have a chat with Ian where we can together think out loud about some cases of tooling use where you're not actually a DD, or which fall a bit outside of the regular process. :-) Hans
