Bug#1011146: upgrade-system is marked for autoremoval from testing

2022-05-29 Thread Jehan-Guillaume de Rorthais
Hi all,

As other dev/maintainers, I got a the autoremoval notification for package
resource-agents-paf, which has nothing to do with nvidia things.

Maybe what maintainers should do might be clarified here? Should we just sit &
wait for the next notification about the false positive bug being fixed?

Regards,

On Thu, 26 May 2022 09:31:00 +0300 =?UTF-8?Q?Martin=2D=C3=89ric_Racine?=
 wrote:
> I'd really like to know how anyone could ever come to the conclusion
> that a package that has nothing to do with graphic drivers needs to be
> auto-removed.
> 
> Martin-Éric
> 
> On Thu, May 26, 2022 at 9:01 AM Debian testing autoremoval watch
>  wrote:
> >
> > upgrade-system 1.9.1.0 is marked for autoremoval from testing on 2022-06-30
> >
> > It (build-)depends on packages with these RC bugs:
> > 1011146: nvidia-graphics-drivers-tesla-470: CVE-2022-28181, CVE-2022-28183,
> > CVE-2022-28184, CVE-2022-28185, CVE-2022-28191, CVE-2022-28192
> > https://bugs.debian.org/1011146
> >
> >
> >
> > This mail is generated by:
> > https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl
> >
> > Autoremoval data is generated by:
> > https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl
> 
> 



Bug#1011146: upgrade-system is marked for autoremoval from testing

2022-05-26 Thread Andreas Beckmann

Control: retitle -1 autoremoval false positive bug: 
https://bugs.debian.org/1011268  --  nvidia-graphics-drivers-tesla-470: 
CVE-2022-28181, CVE-2022-28183, CVE-2022-28184, CVE-2022-28185, CVE-2022-28191, 
CVE-2022-28192
Control: block -1 with 1011268

On 26/05/2022 08.31, Martin-Éric Racine wrote:

I'd really like to know how anyone could ever come to the conclusion
that a package that has nothing to do with graphic drivers needs to be
auto-removed.


It's a false positive:  https://bugs.debian.org/1011268

Andreas



Bug#1011146: upgrade-system is marked for autoremoval from testing

2022-05-26 Thread Sven Eckelmann
On Thursday, 26 May 2022 08:38:04 CEST Ramon Fried wrote:
> On Thu, 26 May 2022 09:31:00 +0300
> =?UTF-8?Q?Martin=2D=C3=89ric_Racine?= 
> wrote:
> > I'd really like to know how anyone could ever come to the conclusion
> > that a package that has nothing to do with graphic drivers needs to be
> > auto-removed.
[...]
> Same here:
> 
> bitwise 0.43-1 is marked for autoremoval from testing on 2022-06-30
> 
> It (build-)depends on packages with these RC bugs:
> 1011146: nvidia-graphics-drivers-tesla-470: CVE-2022-28181,
> CVE-2022-28183, CVE-2022-28184, CVE-2022-28185, CVE-2022-28191,
> CVE-2022-28192
>  https://bugs.debian.org/1011146

Seems to be a severe problem because even packages which only depend on 
debhelper were marked as auto-removal:

https://sources.debian.org/src/ap51-flash/2022.0-1/debian/control/

So I would guess that (nearly) all maintainers received a lot of these mails 
one hour ago. But maybe it was just a temporary glitch

Kind regards,
Sven

signature.asc
Description: This is a digitally signed message part.


Bug#1011146: upgrade-system is marked for autoremoval from testing

2022-05-26 Thread Ramon Fried
On Thu, 26 May 2022 09:31:00 +0300
=?UTF-8?Q?Martin=2D=C3=89ric_Racine?= 
wrote:
> I'd really like to know how anyone could ever come to the conclusion
> that a package that has nothing to do with graphic drivers needs to be
> auto-removed.
>
> Martin-Éric
>
> On Thu, May 26, 2022 at 9:01 AM Debian testing autoremoval watch
>  wrote:
> >
> > upgrade-system 1.9.1.0 is marked for autoremoval from testing on 2022-06-30
> >
> > It (build-)depends on packages with these RC bugs:
> > 1011146: nvidia-graphics-drivers-tesla-470: CVE-2022-28181, CVE-2022-28183, 
> > CVE-2022-28184, CVE-2022-28185, CVE-2022-28191, CVE-2022-28192

> >  https://bugs.debian.org/1011146
> >
> >
> >
> > This mail is generated by:
> > https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl
> >
> > Autoremoval data is generated by:
> > https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl
>
>

Same here:

bitwise 0.43-1 is marked for autoremoval from testing on 2022-06-30

It (build-)depends on packages with these RC bugs:
1011146: nvidia-graphics-drivers-tesla-470: CVE-2022-28181,
CVE-2022-28183, CVE-2022-28184, CVE-2022-28185, CVE-2022-28191,
CVE-2022-28192
 https://bugs.debian.org/1011146



Bug#1011146: upgrade-system is marked for autoremoval from testing

2022-05-26 Thread Martin-Éric Racine
I'd really like to know how anyone could ever come to the conclusion
that a package that has nothing to do with graphic drivers needs to be
auto-removed.

Martin-Éric

On Thu, May 26, 2022 at 9:01 AM Debian testing autoremoval watch
 wrote:
>
> upgrade-system 1.9.1.0 is marked for autoremoval from testing on 2022-06-30
>
> It (build-)depends on packages with these RC bugs:
> 1011146: nvidia-graphics-drivers-tesla-470: CVE-2022-28181, CVE-2022-28183, 
> CVE-2022-28184, CVE-2022-28185, CVE-2022-28191, CVE-2022-28192
>  https://bugs.debian.org/1011146
>
>
>
> This mail is generated by:
> https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl
>
> Autoremoval data is generated by:
> https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl