Bug#1011146: upgrade-system is marked for autoremoval from testing
Hi all, As other dev/maintainers, I got a the autoremoval notification for package resource-agents-paf, which has nothing to do with nvidia things. Maybe what maintainers should do might be clarified here? Should we just sit & wait for the next notification about the false positive bug being fixed? Regards, On Thu, 26 May 2022 09:31:00 +0300 =?UTF-8?Q?Martin=2D=C3=89ric_Racine?= wrote: > I'd really like to know how anyone could ever come to the conclusion > that a package that has nothing to do with graphic drivers needs to be > auto-removed. > > Martin-Éric > > On Thu, May 26, 2022 at 9:01 AM Debian testing autoremoval watch > wrote: > > > > upgrade-system 1.9.1.0 is marked for autoremoval from testing on 2022-06-30 > > > > It (build-)depends on packages with these RC bugs: > > 1011146: nvidia-graphics-drivers-tesla-470: CVE-2022-28181, CVE-2022-28183, > > CVE-2022-28184, CVE-2022-28185, CVE-2022-28191, CVE-2022-28192 > > https://bugs.debian.org/1011146 > > > > > > > > This mail is generated by: > > https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl > > > > Autoremoval data is generated by: > > https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl > >
Bug#1011146: upgrade-system is marked for autoremoval from testing
Control: retitle -1 autoremoval false positive bug: https://bugs.debian.org/1011268 -- nvidia-graphics-drivers-tesla-470: CVE-2022-28181, CVE-2022-28183, CVE-2022-28184, CVE-2022-28185, CVE-2022-28191, CVE-2022-28192 Control: block -1 with 1011268 On 26/05/2022 08.31, Martin-Éric Racine wrote: I'd really like to know how anyone could ever come to the conclusion that a package that has nothing to do with graphic drivers needs to be auto-removed. It's a false positive: https://bugs.debian.org/1011268 Andreas
Bug#1011146: upgrade-system is marked for autoremoval from testing
On Thursday, 26 May 2022 08:38:04 CEST Ramon Fried wrote: > On Thu, 26 May 2022 09:31:00 +0300 > =?UTF-8?Q?Martin=2D=C3=89ric_Racine?= > wrote: > > I'd really like to know how anyone could ever come to the conclusion > > that a package that has nothing to do with graphic drivers needs to be > > auto-removed. [...] > Same here: > > bitwise 0.43-1 is marked for autoremoval from testing on 2022-06-30 > > It (build-)depends on packages with these RC bugs: > 1011146: nvidia-graphics-drivers-tesla-470: CVE-2022-28181, > CVE-2022-28183, CVE-2022-28184, CVE-2022-28185, CVE-2022-28191, > CVE-2022-28192 > https://bugs.debian.org/1011146 Seems to be a severe problem because even packages which only depend on debhelper were marked as auto-removal: https://sources.debian.org/src/ap51-flash/2022.0-1/debian/control/ So I would guess that (nearly) all maintainers received a lot of these mails one hour ago. But maybe it was just a temporary glitch Kind regards, Sven signature.asc Description: This is a digitally signed message part.
Bug#1011146: upgrade-system is marked for autoremoval from testing
On Thu, 26 May 2022 09:31:00 +0300 =?UTF-8?Q?Martin=2D=C3=89ric_Racine?= wrote: > I'd really like to know how anyone could ever come to the conclusion > that a package that has nothing to do with graphic drivers needs to be > auto-removed. > > Martin-Éric > > On Thu, May 26, 2022 at 9:01 AM Debian testing autoremoval watch > wrote: > > > > upgrade-system 1.9.1.0 is marked for autoremoval from testing on 2022-06-30 > > > > It (build-)depends on packages with these RC bugs: > > 1011146: nvidia-graphics-drivers-tesla-470: CVE-2022-28181, CVE-2022-28183, > > CVE-2022-28184, CVE-2022-28185, CVE-2022-28191, CVE-2022-28192 > > https://bugs.debian.org/1011146 > > > > > > > > This mail is generated by: > > https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl > > > > Autoremoval data is generated by: > > https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl > > Same here: bitwise 0.43-1 is marked for autoremoval from testing on 2022-06-30 It (build-)depends on packages with these RC bugs: 1011146: nvidia-graphics-drivers-tesla-470: CVE-2022-28181, CVE-2022-28183, CVE-2022-28184, CVE-2022-28185, CVE-2022-28191, CVE-2022-28192 https://bugs.debian.org/1011146
Bug#1011146: upgrade-system is marked for autoremoval from testing
I'd really like to know how anyone could ever come to the conclusion that a package that has nothing to do with graphic drivers needs to be auto-removed. Martin-Éric On Thu, May 26, 2022 at 9:01 AM Debian testing autoremoval watch wrote: > > upgrade-system 1.9.1.0 is marked for autoremoval from testing on 2022-06-30 > > It (build-)depends on packages with these RC bugs: > 1011146: nvidia-graphics-drivers-tesla-470: CVE-2022-28181, CVE-2022-28183, > CVE-2022-28184, CVE-2022-28185, CVE-2022-28191, CVE-2022-28192 > https://bugs.debian.org/1011146 > > > > This mail is generated by: > https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl > > Autoremoval data is generated by: > https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl