Your message dated Sat, 10 Jan 2026 11:52:34 +0000
with message-id <[email protected]>
and subject line Released with 13.3
has caused the Debian Bug report #1124429,
regarding trixie-pu: package gnupg2/2.4.7-21+deb13u1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1124429: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1124429
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
Tags: trixie
X-Debbugs-Cc: [email protected], [email protected]
Control: affects -1 + src:gnupg2
User: [email protected]
Usertags: pu
Good morning,
we would like to fix CVE-2025-68973 and three other issues from
gnupg(dot)fail in the January stable (and oldstable) update.
Quoting Salvatore Bonaccorso in
https://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/2025-December/010435.html
| Anyway, Moritz and I were today bit discussing anyway the gnupg2
| status and came back to the comment from Moritz about the point
| release. Given gnupg2 is so crucial in various ways within Debian and
| the point releases in 1.5 weeks ahead, we wanted to come back to
| suggest to make the point release updates with the key benefit to have
| gnupg2 exposed in public via the proposed updates suites as soon
| accepted.
|
| Would you agree on this approach? The stable release managers private
| alias is CC'ed here so they are aware of this suggestion.
[ Checklist ]
[x] *all* changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in (old)stable
[x] the issue is verified as fixed in unstable
cu Andreas
PS: second try, 1st one was blocked because gnupg(dot)fail is in
spamhaus.
--
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'
gnupg2_2.4.7-21+deb13u1.deb.diff.gz
Description: application/gzip
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Package: release.debian.org\nVersion: 13.3\n\nThis update has been released as
part of Debian 13.3.
--- End Message ---
