Processed:

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> retitle -1 bookworm-pu: package zfs-linux/2.1.11-1+deb12u1
Bug #1042730 [release.debian.org] bookworm-pu: package 
zfs-linux/2.1.12-1~deb12u1
Changed Bug title to 'bookworm-pu: package zfs-linux/2.1.11-1+deb12u1' from 
'bookworm-pu: package zfs-linux/2.1.12-1~deb12u1'.

-- 
1042730: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1042730
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1042730:

2023-12-19 Thread Aron Xu
Control: retitle -1 bookworm-pu: package zfs-linux/2.1.11-1+deb12u1

Hi,

Please find a further updated version of debdiff in the attachment, it
includes the fix for Bug #1056752 which is a data loss issue.

The debdiff itself looks very large (2298 insertions), but filtering
the actual changes there are quite a lot of upstream commit messages
and noises of test cases:

 $ cd zfs-linux-2.1.11/debian/patches/
 $ diffstat 001[2-9]*.patch 002*.patch
 b/cmd/zed/agents/zfs_mod.c
   |2
 b/cmd/zed/agents/zfs_retire.c
   |8 +
 b/contrib/bash_completion.d/zfs.in
   |2
 b/contrib/initramfs/scripts/zfs
   |6 -
 b/contrib/pam_zfs_key/pam_zfs_key.c
   |   13 --
 b/include/sys/spa.h
   |1
 b/module/os/linux/spl/spl-kmem-cache.c
   |   12 ++
 b/module/os/linux/zfs/zfs_vnops_os.c
   |6 +
 b/module/zfs/dmu_recv.c
   |   26 +
 b/module/zfs/dmu_send.c
   |8 +
 b/module/zfs/dnode.c
   |   12 ++
 b/module/zfs/mmp.c
   |2
 b/module/zfs/spa.c
   |5 -
 b/module/zfs/spa_misc.c
   |   29 +-
 b/module/zfs/vdev.c
   |   12 ++
 b/module/zfs/vdev_label.c
   |3
 b/module/zfs/vdev_trim.c
   |   28 --
 b/module/zfs/zil.c
   |1
 b/tests/runfiles/common.run
   |2
 b/tests/runfiles/sanity.run
   |1
 b/tests/zfs-tests/tests/functional/cli_root/zpool_import/Makefile.am
   |1
 b/tests/zfs-tests/tests/functional/cli_root/zpool_import/import_log_missing.ksh
 |   75 +
 b/tests/zfs-tests/tests/functional/cli_root/zpool_resilver/Makefile.am
  |3
 
b/tests/zfs-tests/tests/functional/cli_root/zpool_resilver/zpool_resilver_concurrent.ksh
|  101 +++
 b/tests/zfs-tests/tests/functional/l2arc/persist_l2arc_001_pos.ksh
   |   19 +---
 b/tests/zfs-tests/tests/functional/rsend/Makefile.am
   |1
 b/tests/zfs-tests/tests/functional/rsend/send_encrypted_freeobjects.ksh
 |   87 +++
 cmd/zed/agents/zfs_retire.c
   |5 +
 include/sys/spa.h
   |2
 module/zfs/spa.c
   |   15 +++
 module/zfs/vdev.c
   |   24 -
 tests/runfiles/common.run
   |9 +-
 32 files changed, 460 insertions(+), 61 deletions(-)

There are totally 299 changes in tests which are mostly insertions.


Thanks,
Aron


zfs-linux_2.1.11-1+deb12u1.debdiff
Description: Binary data


Bug#1057107: bullseye-pu: package libssh2/1.9.0-2

2023-12-19 Thread Nicolas Mora

Hello,

Thank you for the feedback, the new attached debdiff should fix these.

Thanks!diff -Nru libssh2-1.9.0/debian/changelog libssh2-1.9.0/debian/changelog
--- libssh2-1.9.0/debian/changelog  2020-12-14 10:02:16.0 -0500
+++ libssh2-1.9.0/debian/changelog  2023-11-29 07:00:07.0 -0500
@@ -1,3 +1,10 @@
+libssh2 (1.9.0-2+deb11u1) bullseye; urgency=medium
+
+  * Fix CVE-2020-22218: missing check in _libssh2_packet_add() allows
+attackers to access out of bounds memory.
+
+ -- Nicolas Mora   Wed, 29 Nov 2023 07:00:07 -0500
+
 libssh2 (1.9.0-2) unstable; urgency=medium
 
   * d/control: Fix VCS URIs
diff -Nru libssh2-1.9.0/debian/patches/CVE-2020-22218.patch 
libssh2-1.9.0/debian/patches/CVE-2020-22218.patch
--- libssh2-1.9.0/debian/patches/CVE-2020-22218.patch   1969-12-31 
19:00:00.0 -0500
+++ libssh2-1.9.0/debian/patches/CVE-2020-22218.patch   2023-11-29 
07:00:07.0 -0500
@@ -0,0 +1,14 @@
+Description: Fix CVE-2020-22218
+Author: Nicolas Mora 
+Forwarded: not-needed
+--- a/src/transport.c
 b/src/transport.c
+@@ -472,7 +472,7 @@
+ /* Get a packet handle put data into. We get one to
+hold all data, including padding and MAC. */
+ p->payload = LIBSSH2_ALLOC(session, total_num);
+-if(!p->payload) {
++if(total_num == 0 || !p->payload) {
+ return LIBSSH2_ERROR_ALLOC;
+ }
+ p->total_num = total_num;
diff -Nru libssh2-1.9.0/debian/patches/series 
libssh2-1.9.0/debian/patches/series
--- libssh2-1.9.0/debian/patches/series 2020-12-14 10:02:16.0 -0500
+++ libssh2-1.9.0/debian/patches/series 2023-11-29 07:00:07.0 -0500
@@ -1,3 +1,4 @@
+CVE-2020-22218.patch
 manpage.patch
 0001-Add-lgpg-error-to-.pc-to-facilitate-static-linking.patch
 0001-Do-not-expose-private-libraries-nor-link-flags-to-us.patch


NEW changes in oldstable-new

2023-12-19 Thread Debian FTP Masters
Processing changes file: opendkim_2.11.0~beta2-4+deb11u1_amd64-buildd.changes
  ACCEPT
Processing changes file: opendkim_2.11.0~beta2-4+deb11u1_arm64-buildd.changes
  ACCEPT
Processing changes file: opendkim_2.11.0~beta2-4+deb11u1_armel-buildd.changes
  ACCEPT
Processing changes file: opendkim_2.11.0~beta2-4+deb11u1_armhf-buildd.changes
  ACCEPT
Processing changes file: opendkim_2.11.0~beta2-4+deb11u1_i386-buildd.changes
  ACCEPT
Processing changes file: opendkim_2.11.0~beta2-4+deb11u1_mips64el-buildd.changes
  ACCEPT
Processing changes file: opendkim_2.11.0~beta2-4+deb11u1_mipsel-buildd.changes
  ACCEPT
Processing changes file: opendkim_2.11.0~beta2-4+deb11u1_ppc64el-buildd.changes
  ACCEPT
Processing changes file: opendkim_2.11.0~beta2-4+deb11u1_s390x-buildd.changes
  ACCEPT



Processed: tagging 1021176

2023-12-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 1021176 + moreinfo
Bug #1021176 [release.debian.org] bullseye-pu: package 
openvswitch/2.15.0+ds1-2+deb11u1
Added tag(s) moreinfo.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1021176: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1021176
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#1037219: bullseye-pu: package imagemagick/8:6.9.11.60+dfsg-1.3+deb11u2

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1037219 [release.debian.org] bullseye-pu: package 
imagemagick/8:6.9.11.60+dfsg-1.3+deb11u2
Added tag(s) confirmed.

-- 
1037219: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1037219
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1037219: bullseye-pu: package imagemagick/8:6.9.11.60+dfsg-1.3+deb11u2

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

Hi,

On Thu, Jun 08, 2023 at 06:57:56AM +, Bastien Roucariès wrote:
> diff -Nru 
> imagemagick-6.9.11.60+dfsg/debian/debian/salsa-ci-enable-sec-and-update-repos.sh
>  
> imagemagick-6.9.11.60+dfsg/debian/debian/salsa-ci-enable-sec-and-update-repos.sh
> --- 
> imagemagick-6.9.11.60+dfsg/debian/debian/salsa-ci-enable-sec-and-update-repos.sh
>   1970-01-01 00:00:00.0 +
> +++ 
> imagemagick-6.9.11.60+dfsg/debian/debian/salsa-ci-enable-sec-and-update-repos.sh
>   2023-05-26 07:10:27.0 +

Is this a stray file? Seems an odd subdirectory and there's a similar file
one level up.

Please go ahead with or without it, and sorry for the delay.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Bug#1059066: transition: nauty

2023-12-19 Thread Torrance, Douglas

Package: release.debian.org
User: release.debian@packages.debian.org
Usertags: transition
X-Debbugs-Cc: dtorra...@piedmont.edu
Severity: normal

Hello!

I am requesting a transition slot for nauty.

The version number is now included in the library name to force a
transition at each new release and avoid bugs like #1057405.  (A program
linked against a newer version of libnauty than the one it was compiled
against will exit.)  The development package has also been renamed from
libnauty2-dev -> libnauty2-dev.

The new package (nauty 2.8.8+ds-2~exp1) just cleared the NEW queue and
its auto transition page at [1] looks correct.

All three reverse dependencies (pynauty, libgraph-nauty-perl, and
normaliz) will need source uploads to switch libnauty2-dev to
libnauty-dev in their Build-Depends.  But future transitions should be
much smoother!

Thanks,
Doug

Ben file:

title = "nauty";
is_affected = .depends ~ "libnauty2" | .depends ~ "libnauty2-dev" | .depends ~ 
"libnauty-2.8.8" | .depends ~ "libnauty-dev";
is_good = .depends ~ "libnauty-2.8.8" | .depends ~ "libnauty-dev";
is_bad = .depends ~ "libnauty2" | .depends ~ "libnauty2-dev";

[1] https://release.debian.org/transitions/html/auto-nauty.html


signature.asc
Description: PGP signature


Processed: Re: Bug#1050591: bullseye-pu: package awstats/7.8-2+deb11u2

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1050591 [release.debian.org] bullseye-pu: package awstats/7.8-2+deb11u2
Added tag(s) confirmed.

-- 
1050591: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1050591
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1050591: bullseye-pu: package awstats/7.8-2+deb11u2

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

On Sat, Aug 26, 2023 at 03:03:30PM -0300, Lourisvaldo Figueredo Junior wrote:
> [ Reason ]
> The package has a policy violation bug, caused by an error in posting file.
> 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1037213
> 
> 
> The bug was introduced in version 7.8-2+deb11u1 (bullseye), and I am fixing it
> backwards.

Please go ahead.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Processed: Re: Bug#1055349: bullseye-pu: package python-websockets/8.1-1+deb11u1

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1055349 [release.debian.org] bullseye-pu: package 
python-websockets/8.1-1+deb11u1
Added tag(s) confirmed.

-- 
1055349: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055349
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1055349: bullseye-pu: package python-websockets/8.1-1+deb11u1

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

On Sat, Nov 04, 2023 at 06:14:36PM +0100, Bastian Germann wrote:
> diff -Nru python-websockets-8.1/debian/changelog 
> python-websockets-8.1/debian/changelog
> --- python-websockets-8.1/debian/changelog2019-12-31 18:02:56.0 
> +0100
> +++ python-websockets-8.1/debian/changelog2023-11-04 17:59:13.0 
> +0100
> @@ -1,3 +1,9 @@
> +python-websockets (8.1-1+deb11u1) bullseye; urgency=medium
> +
> +  * Fix CVE-2021-33880 with upstream patch (closes: 989561)
> +
> + -- Bastian Germann   Sat, 04 Nov 2023 17:59:13 +0100

I'd prefer a bit more description about what actually changes (the patch
description seems a good start); other than that, please go ahead.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Processed: Re: Bug#1055988: bullseye-pu: package symfony/4.4.19+dfsg-2+deb11u4

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1055988 [release.debian.org] bullseye-pu: package 
symfony/4.4.19+dfsg-2+deb11u4
Added tag(s) confirmed.

-- 
1055988: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055988
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1055988: bullseye-pu: package symfony/4.4.19+dfsg-2+deb11u4

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

On Wed, Nov 15, 2023 at 02:04:50PM +0100, David Prévot wrote:
> As per #1055986 for Bookworm, I’d like to fix the following security
> issue in the next point release, as advised by the security team (they
> do not intend to issue a DSA for that).
> 
> [TwigBridge] Ensure CodeExtension's filters properly escape their input
> [CVE-2023-46734] (Closes: #1055774)
> 
> It also fixes the testsuite using a patch prepared a while ago.
> 
> [Mime] regenerate test certificates (Closes: #1034854)

Please go ahead.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Re: Planning for 12.5/11.9

2023-12-19 Thread Andy
On 19 December 2023 21:25:06 GMT, Jonathan Wiltshire  wrote:
>  Saturday  3rd February (preferred for cadence)
>  Saturday 10th February
>  Saturday 17th February
>
Isy and I are available for any of those dates.  Slight preference for the 3rd 
or 10th.

Cheers
Andy 



Bug#1053608: bullseye-pu: zeromq3/4.3.4-1+deb11u1

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

On Sat, Oct 07, 2023 at 12:28:46PM +0200, László Böszörményi wrote:
> [ Checklist ]
>   [x] *all* changes are documents in the d/changelog

The licensing fix isn't in debian/changelog. I don't mind if you include or
skip it, but please document it if you're including.

Either way please go ahead.


-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Processed: Re: Bug#1053608: bullseye-pu: zeromq3/4.3.4-1+deb11u1

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1053608 [release.debian.org] bullseye-pu: zeromq3/4.3.4-1+deb11u1
Added tag(s) confirmed.

-- 
1053608: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053608
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



NEW changes in oldstable-new

2023-12-19 Thread Debian FTP Masters
Processing changes file: opendkim_2.11.0~beta2-4+deb11u1_source.changes
  ACCEPT



Processed: Re: Bug#1057137: bullseye-pu: package gnutls28/3.7.1-5+deb11u4

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1057137 [release.debian.org] bullseye-pu: package gnutls28/3.7.1-5+deb11u4
Added tag(s) confirmed.

-- 
1057137: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057137
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1057137: bullseye-pu: package gnutls28/3.7.1-5+deb11u4

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

On Thu, Nov 30, 2023 at 12:47:32PM +0100, Andreas Metzler wrote:
> +- * channel that can be used as an oracle, so treat very carefully */
> ++ * channel that can be used as an oracle, so tread carefully */

Cautious downgrade :)

Please go ahead.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Processed: opendkim 2.11.0~beta2-4+deb11u1 flagged for acceptance

2023-12-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> package release.debian.org
Limiting to bugs with field 'package' containing at least one of 
'release.debian.org'
Limit currently set to 'package':'release.debian.org'

> tags 1057221 = bullseye pending
Bug #1057221 [release.debian.org] bullseye-pu: package 
opendkim/2.11.0~beta2-4+deb11u1
Added tag(s) pending.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1057221: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057221
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1057221: opendkim 2.11.0~beta2-4+deb11u1 flagged for acceptance

2023-12-19 Thread Jonathan Wiltshire
package release.debian.org
tags 1057221 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: opendkim
Version: 2.11.0~beta2-4+deb11u1

Explanation: properly delete Authentication-Results headers [CVE-2022-48521]



Bug#1057280: bullseye-pu: package gimp/2.10.22-4+deb11u2

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

On Sat, Dec 02, 2023 at 06:04:18PM +0200, Adrian Bunk wrote:
> 
>   * Add Conflicts+Replaces: gimp-dds to remove old versions of this
> plugin shipped by gimp itself since 2.10.10. (Closes: #1057149)
> 

Please go ahead.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Processed: Re: Bug#1057280: bullseye-pu: package gimp/2.10.22-4+deb11u2

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1057280 [release.debian.org] bullseye-pu: package gimp/2.10.22-4+deb11u2
Added tag(s) confirmed.

-- 
1057280: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057280
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#1056970: bullseye-pu: package swupdate/2020.11-2+deb11u1

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1056970 [release.debian.org] bullseye-pu: package 
swupdate/2020.11-2+deb11u1
Added tag(s) confirmed.

-- 
1056970: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056970
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: tagging 1056711

2023-12-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 1056711 + confirmed pending
Bug #1056711 [release.debian.org] RM: gimp-dds/3.0.1-1
Added tag(s) pending and confirmed.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1056711: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056711
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1056970: bullseye-pu: package swupdate/2020.11-2+deb11u1

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

On Mon, Nov 27, 2023 at 12:12:27PM +0100, Bastian Germann wrote:
> There is a local privilege escalation in swupdate package because the
> service's control socket has world-writable file permissions.

Please go ahead.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Bug#1056738: bullseye-pu: minizip/1.1-8+deb11u1

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

On Sat, Nov 25, 2023 at 06:03:08PM +, Thorsten Alteholz wrote:
> The attached debdiff for minizip fixes CVE-2023-45853 in Bullseye. This
> CVE has been marked as no-dsa by the security team.

Please go ahead.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Processed: Re: Bug#1056738: bullseye-pu: minizip/1.1-8+deb11u1

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1056738 [release.debian.org] bullseye-pu: minizip/1.1-8+deb11u1
Added tag(s) confirmed.

-- 
1056738: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056738
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1056935: bullseye-pu: libde265/1.0.11-0+deb11u2

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

On Sun, Nov 26, 2023 at 10:43:36PM +, Thorsten Alteholz wrote:
> The attached debdiff for libde265 fixes CVE-2023-27102, CVE-2023-27103,
> CVE-2023-43887 and CVE-2023-47471 in Bullseye.
> Except CVE-2023-43887 all others are marked as no-dsa by the security team
> (CVE-2023-43887 appeared recently and was not evaluated yet).

Please go ahead.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Processed: Re: Bug#1056935: bullseye-pu: libde265/1.0.11-0+deb11u2

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1056935 [release.debian.org] bullseye-pu: libde265/1.0.11-0+deb11u2
Added tag(s) confirmed.

-- 
1056935: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056935
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#1057084: bullseye-pu: package nvidia-graphics-drivers-tesla-450/450.248.02-4~deb11u1

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1057084 [release.debian.org] bullseye-pu: package 
nvidia-graphics-drivers-tesla-450/450.248.02-4~deb11u1
Added tag(s) confirmed.

-- 
1057084: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057084
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1057084: bullseye-pu: package nvidia-graphics-drivers-tesla-450/450.248.02-4~deb11u1

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

On Wed, Nov 29, 2023 at 02:38:08PM +0100, Andreas Beckmann wrote:
> The Tesla 450 driver series has reached End of Life. I'd like to turn it
> into transitional packages to ease switching to the Tesla 470 driver
> series. We did the same with the Tesla 460 series after that reached EoL
> last year. The 470 series supports a superset of GPUs, so this switch is
> not a regression in terms of supported devices or features.

I trust you :) Go ahead, and if you can furnish me with a CVE list I'd
appreciate that too.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Processed: Re: Bug#1057330: bullseye-pu: package midge/0.2.41+dfsg-1~deb11u1

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 moreinfo
Bug #1057330 [release.debian.org] bullseye-pu: package 
midge/0.2.41+dfsg-1~deb11u1
Added tag(s) moreinfo.

-- 
1057330: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057330
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1057330: bullseye-pu: package midge/0.2.41+dfsg-1~deb11u1

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 moreinfo

Hi,

I'm fine with the changes but I'm a bit uncomfortable about the backwards
version history in debian/changelog. Shouldn't 0.2.41+dfsg-1~deb12u1 just
be dropped in this upload?

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



NEW changes in oldstable-new

2023-12-19 Thread Debian FTP Masters
Processing changes file: chromium_120.0.6099.109-1~deb11u1_source.changes
  ACCEPT
Processing changes file: chromium_120.0.6099.109-1~deb11u1_all-buildd.changes
  ACCEPT
Processing changes file: chromium_120.0.6099.109-1~deb11u1_amd64-buildd.changes
  ACCEPT
Processing changes file: chromium_120.0.6099.109-1~deb11u1_arm64-buildd.changes
  ACCEPT
Processing changes file: chromium_120.0.6099.109-1~deb11u1_armhf-buildd.changes
  ACCEPT
Processing changes file: chromium_120.0.6099.109-1~deb11u1_i386-buildd.changes
  ACCEPT
Processing changes file: 
chromium_120.0.6099.109-1~deb11u1_ppc64el-buildd.changes
  ACCEPT



Processed: Re: Bug#1057107: bullseye-pu: package libssh2/1.9.0-2

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 moreinfo
Bug #1057107 [release.debian.org] bullseye-pu: package libssh2/1.9.0-2
Added tag(s) moreinfo.

-- 
1057107: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057107
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1057107: bullseye-pu: package libssh2/1.9.0-2

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 moreinfo

Hi,

On Wed, Nov 29, 2023 at 04:31:36PM -0500, Nicolas Mora wrote:
> See the debdiff attached

> diff -Nru libssh2-1.9.0/debian/changelog libssh2-1.9.0/debian/changelog
> --- libssh2-1.9.0/debian/changelog2020-12-14 10:02:16.0 -0500
> +++ libssh2-1.9.0/debian/changelog2023-11-29 07:00:07.0 -0500
> @@ -1,3 +1,9 @@
> +libssh2 (1.9.0-2+debu11u1) bullseye; urgency=medium

Extra 'u' in the version.

> +
> +  * d/patches: Fix CVE-2020-22218
> +
> + -- Nicolas Mora   Wed, 29 Nov 2023 07:00:07 -0500

This is not a good changelog description, please expand it.


Thanks,


-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Processed: Re: Bug#1054455: bullseye-pu: package weborf/0.17-3

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1054455 [release.debian.org] bullseye-pu: package weborf/0.17-3
Added tag(s) confirmed.

-- 
1054455: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054455
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1054455: bullseye-pu: package weborf/0.17-3

2023-12-19 Thread Jonathan Wiltshire
Control: tag -1 confirmed

On Sat, Nov 04, 2023 at 10:34:49PM +0100, Salvo Tomaselli wrote:
> +Author: Salvo "LtWorf" Tomaselli 
> +Origin: upstream
> +Bug: 

DEP-3 says Origin should normally be a URL, 'upstream' is a prefix. The
Bug field should also be fixed or removed; with those fixes, please go
ahead.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



Planning for 12.5/11.9

2023-12-19 Thread Jonathan Wiltshire
Hi,

It's time to set a date for 12.5 (taking account of the emergency .4) and
11.9. I expect this to be the penultimate update for bullseye before LTS.

Please indicate availability for:

  Saturday  3rd February (preferred for cadence)
  Saturday 10th February
  Saturday 17th February

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



signature.asc
Description: PGP signature


Bug#1058938: bookworm-pu: package onionprobe/1.0.0+ds-2.1+deb12u1

2023-12-19 Thread Antoine Beaupré
I have reviewed this patch and it looks sane to me. I have deployed the
updated package on our servers and it is so far running without flaw.

A.

-- 
There is no cloud, it's just someone else's computer.
   - Chris Watterson



Processed: transition: rocksdb

2023-12-19 Thread Debian Bug Tracking System
Processing control commands:

> affects -1 + src:rocksdb
Bug #1059026 [release.debian.org] transition: rocksdb
Added indication that 1059026 affects src:rocksdb

-- 
1059026: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059026
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1059026: transition: rocksdb

2023-12-19 Thread GCS
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition
Control: affects -1 + src:rocksdb

Hi RMs,

Small transition of RocksDB to the 8.9.1 release, available from
experimental. Affected packages are balboa, oxigraph and sortmerna.
While oxigraph is Sid only currently, all three build fine with this
version of RocksDB as well.

Thanks for considering,
Laszlo/GCS



Bug#1057706: transition: dpdk

2023-12-19 Thread Luca Boccassi
Hi Sebastian,

Please binnmu src:collectd as well, when you have a moment - there's a
runtime recommends instead of a depends, so it won't appear on the
automated tracker. Thanks!

On Mon, 18 Dec 2023, 11:57 Luca Boccassi,  wrote:

> On Sat, 16 Dec 2023 at 21:52, Sebastian Ramacher 
> wrote:
> >
> > Control: tags -1 confirmed
> >
> > Hi Luca
> >
> > On 2023-12-07 11:41:04 +, Luca Boccassi wrote:
> > > We have prepared the src:dpdk 23.11 ABI transition.
> >
> > Please go ahead
>
> Thank you, uploaded to unstable.
>