Bug#1034713: php-guzzlehttp-psr7 1.7.0-1+deb11u2 flagged for acceptance

package release.debian.org tags 1034713 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: php-guzzlehttp-psr7

Bug#1035105: distro-info-data 0.51+deb11u4 flagged for acceptance

package release.debian.org tags 1035105 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: distro-info-data Version:

Bug#1034736: pev 0.81-3+deb11u1 flagged for acceptance

package release.debian.org tags 1034736 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: pev Version: 0.81-3+deb11u1

Bug#1034714: php-nyholm-psr7 1.3.2-2+deb11u1 flagged for acceptance

package release.debian.org tags 1034714 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: php-nyholm-psr7 Version:

Bug#1034812: installation-reports: Unbootable after install: UEFI installed to wrong ESP

I used "Guided - use entire disk and set up encrypted LVM" On April 25, 2023 12:55:27 PM CDT, Pascal Hambourg wrote: >Hello, > >On 25/04/2023 at 01:29, Adam wrote: >> >> I installed from a thumb drive, to another thumb drive, on a computer >> that had an

Bug#914807: ITP: muacrypt

t and muacrypt actually have the same main developer. With the last active development in 2019, it doesn't really qualify as a new project ¯\_(ツ)_/¯ > Thanks! So that is the current status. Patches are welcome. Or even feel free to take over the package. Regard, Adam P.S. CC-ing holger as the main devel

Bug#1035018: btrfs-progs: /sbin/fsck.btrfs missing from udeb

On Thu, Apr 27, 2023 at 04:58:46PM +0200, Emanuele Rocca wrote: > > the btrfs-progs udeb currently includes only /bin/btrfs and /bin/mkfs.btrfs. > > Please add /sbin/fsck.btrfs as well so that it can be included in the > initramfs > generated by the debian installer. Patch attached. That file

Bug#1034812: installation-reports: Unbootable after install: UEFI installed to wrong ESP

Package: installation-reports Severity: normal X-Debbugs-Cc: a...@hax0rbana.org (Please provide enough information to help the Debian maintainers evaluate the report efficiently - e.g., by filling in the sections below.) Boot method: USB Image version: Bullseye Date: 04/23/2023 Machine: Home

Bug#1022073: pam-u2f: new upstream release 1.2.1 available

Is there any process I can initiate to get the upstream versions into Debian while the package maintainer (nicoo) is away? It's been 9 months since I submitted the merge request to go from 1.1.0 to 1.1.1. I'd like to do more to help, but I'm not sure how to proceed. -- Adam Hacker

Bug#1029976: libzen 0.4.38-1+deb11u1 flagged for acceptance

package release.debian.org tags 1029976 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: libzen Version:

Bug#1034750:

I know this is the wrong way to do it, but d-i pkgsel/run_tasksel boolean false in my preseed.cfg was the easiest way for me to fix it. Just the d-i netcfg/choose_interface select auto problem to go now. This is possibly the wrong thread for it, IMO there needs to be a simple way to copy the

Bug#1034736: bullseye-pu: package pev/0.81-3+deb11u1

code assumes that > exp->NumberOfFunctions is greater than ordinal at each iteration. > This > can lead to arbitrary code execution. > Please go ahead. Regards, Adam

Bug#1034714: bullseye-pu: package php-nyholm-psr7/1.3.2-2+deb11u1

[CVE-2023-29197] > filed as #1034597. The security team reviewed this bug filed > with a non-RC severity, so I assume they don’t expect to release > a DSA for it (as for the other php-guzzlehttp-psr7 issue), > anyway the team is X-D-Cc. > Please go ahead. Regards, Adam

Bug#1034713: bullseye-pu: package php-guzzlehttp-psr7/1.7.0-1+deb11u2

ecurity team filed those bugs with a non-RC severity, so > I assume they don’t expect to release a DSA for it (as for the > previous main issue), anyway the team is X-D-Cc. > The Security Tracker agrees. Please go ahead. Regards, Adam

Bug#1034750: installation-reports: Automated install worked, but installed full desktop environment

Package: installation-reports Severity: minor X-Debbugs-Cc: deb...@voltagex.org (Please provide enough information to help the Debian maintainers evaluate the report efficiently - e.g., by filling in the sections below.) Boot method: USB Image version: debian-bookworm-DI-rc1-amd64-netinst.iso +

Bug#1034731: bullseye-pu: package pev/0.81-3

verity: important". That could have been changed without opening a new report, but in any case "normal" was correct. Regards, Adam

Bug#1034455: mariadb-10.5 10.5.19-0+deb11u2 flagged for acceptance

package release.debian.org tags 1034455 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: mariadb-10.5 Version:

Bug#1034548: glibc 2.31-13+deb11u6 flagged for acceptance

package release.debian.org tags 1034548 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: glibc Version:

Bug#1034454: galera-3 25.3.37-0+deb11u1 flagged for acceptance

package release.debian.org tags 1034454 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: galera-3 Version:

Bug#1031888: emacs-nox: bullseye-security update fails to install on mips64el

load today (or early tomorrow)? > With my DSA hat on, I'm not aware of it having been confirmed to fix the issue on bullseye. I'm happy to test an updated package in the meantime. (FWIW the update isn't in p-u currently because of this issue.) Regards, Adam

Bug#1034455: bullseye-pu: package mariadb-10.5 10.5.19-0+deb11u2

; mariadb-10.5 (1:10.5.19-0+deb11u2) bullseye; urgency=medium > > * Add patch to revert upstream libmariadb API change (Closes: > #1033654) > Thanks. Please go ahead, bearing in mind that the window for 11.7 closes during this weekend. Regards, Adam

Bug#1034562: installation-reports: "Works", graphical corruption & flashing once in Gnome

On Wed, 19 Apr 2023, at 05:58, Roland Clobus wrote: > Hello Adam, > > I've seen some issues on openQA which run on AMD hardware, but I > personally only have Intel processors, so I cannot reproduce such > issues. [1] > > Can you confirm that the microcode is active? >

Bug#1034493: libpod 3.0.1+dfsg1-3+deb11u4 flagged for acceptance

package release.debian.org tags 1034493 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: libpod Version:

Bug#1034264: nvidia-modprobe 470.182.03-1 flagged for acceptance

package release.debian.org tags 1034264 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: nvidia-modprobe Version:

Bug#1034578: tzdata 2021a-1+deb11u10 flagged for acceptance

package release.debian.org tags 1034578 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: tzdata Version:

Bug#1034103: nvidia-graphics-drivers-tesla-470 470.182.03-1~deb11u1 flagged for acceptance

package release.debian.org tags 1034103 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package:

Bug#1034001: nvidia-graphics-drivers-tesla-450 450.236.01-1~deb11u1 flagged for acceptance

package release.debian.org tags 1034001 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package:

Bug#1034548: bullseye-pu: package glibc/2.31-13+deb11u6

n of wcsnlen > Please go ahead. Regards, Adam

Bug#1030771: nmu: x11vnc_0.9.16-7

ibvncserver/-/blob/debian/bullseye/updates/debian/patches/0003-rfb-increase-update-buf-size.patch Given that this is apparently an ABI break, and libvncserver has several other reverse (build-)dependencies in stable, how confident are you that x11vnc is the only affected package? Regards, Adam

Bug#1034454: bullseye-pu: package galera-3 25.3.37-0+deb11u1

github.com/codership/galera/issues/313 > ). > Please go ahead. Regards, Adam

Bug#1029976: bullseye-pu: libzen/0.4.38-1+deb11u1

E-2020-36646 in Bullseye. > This got missed for a while due to the typoed suite tag (since fixed). Please go ahead. Regards, Adam

Bug#1034455: bullseye-pu: package mariadb-10.5 10.5.19-0+deb11u2

b11u2? (Note that this request never made it to debian-release, most likely due to the large size of the re-included diff from the earlier request.) Regards, Adam

Bug#1034096: nvidia-graphics-drivers 470.182.03-1 flagged for acceptance

package release.debian.org tags 1034096 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: nvidia-graphics-drivers

Bug#1033759: duktape 2.5.0-2+deb11u1 flagged for acceptance

package release.debian.org tags 1033759 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: duktape Version:

Bug#1023577: RM: python-matrix-nio/0.16.0-1

4) and no longer works as reported in [1] and I > tested > myself. > > Please also remove it's downstream dependencies, i.e. pantalaimon and > weechat-matrix. > For reference the chain also includes matrix-mirage. Regards, Adam

Bug#1034264: bullseye-pu: package nvidia-modprobe/470.182.03-1

> version > bump) in the older release branches when the corresponding driver > package gets updated, so in order not to have an nvidia-modprobe that > unneccessarily deviates from upstream behavior, lets update that, > too. Please go ahead. Regards, Adam

Bug#1034001: bullseye-pu: package nvidia-graphics-drivers-tesla-450/450.236.01-1~deb11u1

Control: tags -1 + confirmed On Thu, 2023-04-06 at 10:33 +0200, Andreas Beckmann wrote: > I'd like to update nvidia-graphics-drivers-tesla-450 in bullseye to a > new upstream release fixing a few CVEs. > Please go ahead. Regards, Adam

Bug#1034103: bullseye-pu: package nvidia-graphics-drivers-tesla-470/470.182.03-1~deb11u1

Control: tags -1 + confirmed On Sun, 2023-04-09 at 04:35 +0200, Andreas Beckmann wrote: > I'd like to update nvidia-graphics-drivers-tesla-470 to a new > upstream > version fixing a few CVEs. > Please go ahead. Regards, Adam

Bug#1034246: usb.ids 2023.01.16-0+deb11u1 flagged for acceptance

package release.debian.org tags 1034246 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: usb.ids Version:

Bug#1034198: golang-github-containers-common 0.33.4+ds1-1+deb11u2 flagged for acceptance

package release.debian.org tags 1034198 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package:

Bug#1026945: guix 1.2.0-4+deb11u1 flagged for acceptance

package release.debian.org tags 1026945 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: guix Version:

Bug#1032237: zfs-linux 2.0.3-9+deb11u1 flagged for acceptance

package release.debian.org tags 1032237 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: zfs-linux Version:

Bug#1034039: libpod 3.0.1+dfsg1-3+deb11u2 flagged for acceptance

package release.debian.org tags 1034039 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: libpod Version:

Bug#1034039: libpod 3.0.1+dfsg1-3+deb11u3 flagged for acceptance

package release.debian.org tags 1034039 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: libpod Version:

Bug#1033770: apache2 2.4.56-1~deb11u2 flagged for acceptance

package release.debian.org tags 1033770 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: apache2 Version:

Bug#1025654: x4d-icons 1.2-2+deb11u1 flagged for acceptance

package release.debian.org tags 1025654 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: x4d-icons Version:

Bug#1033993: unbound 1.13.1-1+deb11u1 flagged for acceptance

package release.debian.org tags 1033993 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: unbound Version:

Bug#1026845: systemd 247.3-7+deb11u2 flagged for acceptance

package release.debian.org tags 1026845 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: systemd Version:

Bug#1033506: libreoffice 7.0.4-4+deb11u6 flagged for acceptance

package release.debian.org tags 1033506 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: libreoffice Version:

Bug#1032921: node-webpack 4.43.0-6+deb11u1 flagged for acceptance

package release.debian.org tags 1032921 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: node-webpack Version:

Bug#1032134: node-cookiejar 2.1.2-1+deb11u1 flagged for acceptance

package release.debian.org tags 1032134 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: node-cookiejar Version:

Bug#1030598: lemonldap-ng 2.0.11+ds-4+deb11u4 flagged for acceptance

package release.debian.org tags 1030598 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: lemonldap-ng Version:

Bug#1031948: libgit2 1.1.0+dfsg.1-4+deb11u1 flagged for acceptance

package release.debian.org tags 1031948 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: libgit2 Version:

Bug#1031410: postgis 3.1.1+dfsg-1+deb11u1 flagged for acceptance

package release.debian.org tags 1031410 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: postgis Version:

Bug#1025703: libexplain 1.4.D001-11+deb11u1 flagged for acceptance

package release.debian.org tags 1025703 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: libexplain Version:

Bug#1033578: joblib 0.17.0-4+deb11u1 flagged for acceptance

package release.debian.org tags 1033578 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: joblib Version:

Bug#1033160: flatpak 1.10.8-0+deb11u1 flagged for acceptance

package release.debian.org tags 1033160 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: flatpak Version:

Bug#1031926: gtk+3.0 3.24.24-4+deb11u3 flagged for acceptance

package release.debian.org tags 1031926 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: gtk+3.0 Version:

Bug#1031630: containerd 1.4.13~ds1-1~deb11u4 flagged for acceptance

package release.debian.org tags 1031630 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: containerd Version:

Bug#1031109: crun 0.17+dfsg-1+deb11u1 flagged for acceptance

package release.debian.org tags 1031109 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: crun Version:

Bug#1027258: golang-github-containers-psgo 1.5.2-1+deb11u1 flagged for acceptance

package release.debian.org tags 1027258 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package:

Bug#1027257: golang-github-containers-storage 1.24.8+dfsg1-1+deb11u1 flagged for acceptance

package release.debian.org tags 1027257 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package:

Bug#1034039: bullseye-pu: package libpod/3.0.1+dfsg1-3+deb11u1

t this point, either I can reject the current upload, and you can then re-upload a fixed +deb11u1 or (possibly easier all around) you can upload +deb11u2 as an incremental change on top of +deb11u1 which simply fixes the dependency version. Regards, Adam

Bug#1031042: mariadb-10.5 10.5.19-0+deb11u1 flagged for acceptance

I'm pretty sure it's better to > file a new bug for that request than updating this bug (it's part of > the workflow). Yes, I have a preference for a second bug once the first upload has been accepted and the second request is not fixing a regression from the first. It makes some parts of our tracking simpler. Regards, Adam

Bug#1025654: bullseye-pu: package x4d-icons/1.2-2+deb11u1

Control: tags -1 -moreinfo +confirmed On Sun, 2023-04-02 at 01:14 +0200, Santiago Vila wrote: > El 1/4/23 a las 21:58, Adam D. Barratt escribió: > > Have you confirmed via a binary debdiff that there are no changes > > to > > the resulting packages? > > The package c

Bug#1033770: bullseye-pu: package apache2/2.4.56-1~deb11u2

conf despite having been > > > disabled > > > (#1018718) > > > > If we update Apache in Bullseye, how about also adding patches for > > #1033408 and #1033284? > > [...] > here is the new debdiff > Please go ahead. Regards, Adam

Bug#1032237: bullseye-pu: zfs-linux/2.0.3-9+deb11u1

Control: tags -1 + confirmed On Sun, 2023-04-02 at 10:53 +0800, Aron Xu wrote: > Control: tags -1 - moreinfo > > On Sun, Apr 2, 2023 at 3:10 AM Adam D. Barratt < > a...@adam-barratt.org.uk> wrote: > > Control: tags -1 + moreinfo > > > > On Thu, 2023-03-02 at

Bug#1027257: bullseye-pu: package golang-github-containers-storage/1.24.8+dfsg1-2~deb11u1

On Sat, 2023-04-01 at 19:04 -0400, Reinhard Tartler wrote: > > On 4/1/23 3:51 PM, Adam D. Barratt wrote: > > Control: tags -1 + moreinfo > > > > Apologies for the delay in getting back to you on this. > > > > On Wed, 2022-12-28 at 22:26 -0500, Reinhard Tart

Bug#1026845: bullseye-pu: package systemd/247.3-7+deb11u2

by reporters. > Please go ahead; sorry for the delay. Regards, Adam

Bug#1025703: bullseye-pu: package libexplain/1.4.D001-11+deb11u1

t; The two patches are taken verbatim from bookworm/sid, where this was > fixed one year ago. > Please go ahead; sorry for the delay. Regards, Adam

Bug#1025654: bullseye-pu: package x4d-icons/1.2-2+deb11u1

compatibility > level. I am well aware that this should not be done lightly and > without a good reason. > Have you confirmed via a binary debdiff that there are no changes to the resulting packages? Regards, Adam

Bug#1027257: bullseye-pu: package golang-github-containers-storage/1.24.8+dfsg1-2~deb11u1

e's upload history, the version should rather be 1.24.8+dfsg1-1+deb11u1. Regards, Adam

Bug#1027258: bullseye-pu: package golang-github-containers-psgo/1.5.2-2~deb11u1

g-any, + golang-github-containers-storage-dev (>= 1.24.8+dfsg1-2~deb11u1), Similarly I'd expect this to be 1.24.8+dfsg1-1+deb11u1, as I can only see one upload of 1.24.8+dfsg1 ever having been made to Debian. Regards, Adam

Bug#1029142: bullseye-pu: package geeqie/1:1.6-9+deb11u2 (pre-approval)

? If so, why does it depend on it to begin with? Looking at the diff, I think the change is actually the removal of a /build/ dependency, not a runtime one? If so, it would be good if that were slightly clearly in the changelog. Regards, Adam

Bug#1033653: bullseye-pu: package lemonldap-ng/2.0.11+ds-4+deb11u

fusing. Please go ahead. Regards, Adam

Bug#1031097: bullseye-pu: package conmon/2.0.25+ds1-1.1

Please go ahead; sorry for the delay. Regards, Adam

Bug#1031630: bullseye-pu: package containerd/1.4.13~ds1-1~deb11u4

Control: tags -1 + confirmed On Sun, 2023-02-19 at 22:56 +0800, Shengjing Zhu wrote: > Backport patches for 2 CVE: > > * CVE-2023-25153: OCI image importer memory exhaustion > * CVE-2023-25173: Supplementary groups are not set up properly > Please go ahead; sorry for the delay. Regards, Adam

Bug#1031410: bullseye-pu: package postgis/3.1.1+dfsg-1+deb11u1

ons. > Please go ahead. Regards, Adam

Bug#1031109: bullseye-pu: package crun/0.17+dfsg-1+deb11u1

programs with inheritable file capabilities to elevate > those capabilities to the permitted set when execve(2) runs." > Please go ahead; sorry for the delay. Regards, Adam

Bug#1031926: bullseye-pu: package gtk+3.0/3.24.24-4+deb11u3

go ahead, sorry for the delay. Regards, Adam

Bug#1031788: bullseye-pu: package publicsuffix/20230209.2326-0+deb11u1

it. > Please go ahead; sorry for the delay. Regards, Adam

Bug#1031948: bullseye-pu: package libgit2/1.1.0+dfsg.1-4+deb11u1

hich allows man-in-the-middle attacks. > +libgit2 (1.1.0+dfsg.1-4+deb11u1) bullseye-security; urgency=high That wants to just be "bullseye". + This is a backport of the upstream fix to the Debian stretch version. Presumably that comment could also do with an update. Please go ahead. Regards, Adam

Bug#1032134: bullseye-pu: package node-cookiejar/2.1.2-1+deb11u1

Control: tags -1 + confirmed On Tue, 2023-02-28 at 18:00 +0400, Yadd wrote: > node-cookiejar is vulnerable to ReDoS (CVE-2022-25901). > Please go ahead. Regards, Adam

Bug#1032237: bullseye-pu: zfs-linux/2.0.3-9+deb11u1

. > +This change reworks the zfs_file_[get|put] interface to not rely +on the file descriptor but instead pass the zfs_file_t pointer around. I'm assuming that nothing outside of zfs-linux depends on the signature of the affected functions? Regards, Adam

Bug#1032299: bullseye-pu: package node-css-what/4.0.0-3

e_attr variable of index.js. The > exploitation of > this vulnerability could be triggered via the parse function. > +node-css-what (4.0.0-3+deb11u1) bullseye-security; urgency=medium The distribution needs to simply be "bullseye" for a stable upload. With that change, please go ahead. Regards, Adam

Bug#1033160: bullseye-pu: package flatpak/1.10.8-0+deb11u1

fixes > backported from 1.12.x and 1.14.x for: > - temporary directories not being cleaned up if an upgrade is > cancelled, > in particular if it's blocked by parental controls (libmalcontent); > - the `flatpak history` command, which didn't previously work in > bullseye; > Please go ahead. Regards, Adam

Bug#1032921: bullseye-pu: package node-webpack/4.43.0-6+deb11u1

Control: tags -1 + confirmed On Tue, 2023-03-14 at 08:01 +0400, Yadd wrote: > node-webpack is vulnerable to cross-realm object access > (#1032904, CVE-2023-28154) > Please go ahead. Regards, Adam

Bug#1033759: bullseye-pu: duktape/2.5.0-2+deb11u1

Control: tags -1 + confirmed On Fri, 2023-03-31 at 22:28 +, Thorsten Alteholz wrote: > The attached debdiff for duktape fixes CVE-2021-46322 in Bullseye. > Please go ahead. Regards, Adam

Bug#1033578: bullseye-pu: package joblib/0.17.0-4+deb11u1

restricted to fairly basic > arithmetic expressions. Using it in another way was not intended. > Please go ahead. Regards, Adam

Bug#1033506: bullseye-pu: package libreoffice/1:7.0.4-4+deb11u6

Control: tags -1 + confirmed On Sun, 2023-03-26 at 14:23 +0200, Rene Engelhard wrote: > This fixes "CVE-2022-38745. Empty entry in Java class path risks > arbitrary code execution" just disclosed by Apache OpenOffice. > Please go ahead. Regards, Adam

Bug#1033770: bullseye-pu: package apache2/2.4.56-1~deb11u2

’s a Policy violation > Please go ahead. Regards, Adam

Bug#1033766: bullseye-pu: package cyrus-imapd/3.6.1-4

update for all users of the package in stable as it's purely a documentation issue. Regards, Adam

Bug#1033669: libdatetime-timezone-perl 2.47-1+2023c flagged for acceptance

package release.debian.org tags 1033669 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: libdatetime-timezone-perl

Bug#1033157: debian-archive-keyring 2021.1.1+deb11u1 flagged for acceptance

package release.debian.org tags 1033157 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: debian-archive-keyring

Bug#1033079: intel-microcode 3.20230214.1~deb11u1 flagged for acceptance

package release.debian.org tags 1033079 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: intel-microcode Version:

Bug#1032120: Tiledb-py fails to build (Was: tiledb: uses atomic operations, but is not linked to libatomic)

computer. Regards, Adam. On March 25, 2023 2:55:39 PM GMT+01:00, Andreas Tille wrote: >Hi, > >as you can read in the bug log, there was an upload of a new version of >tiledb a couple of hours before it has migrated to testing. Thus the >package remains affected by a testing re

Bug#1030113: openvswitch 2.15.0+ds1-2+deb11u3 flagged for acceptance

package release.debian.org tags 1030113 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: openvswitch Version:

Bug#1033412: libdatetime-timezone-perl 2.47-1+2023b flagged for acceptance

package release.debian.org tags 1033412 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: libdatetime-timezone-perl

Bug#1022222: valgrind-if-available shouldn't stop providing valgrind on mipsel

Control: severity -1 normal (I intended to avoid having to argue by implementing specific objective tests that valgrind has to meet to be declared available, but I did not manage to get that done. Thus, arguing...) On Sat, Oct 22, 2022 at 12:12:40PM +0300, Adrian Bunk wrote: > Package:

Bug#1033275: RFS: zstd-jni-java/1.5.4-2+ds-1 [Team] -- JNI bindings for Zstd (Architecture-specific files)

On Tue, Mar 21, 2023 at 01:13:35AM +, sun min wrote: > I am looking for a sponsor for my package "zstd-jni-java": > Changes since the last upload: > > zstd-jni-java (1.5.4-2+ds-1) unstable; urgency=medium + + * Team upload. + * New upstream release. + * Update debian/libzstd-jni1.symbols.

<    4   5   6   7   8   9   10   11   12   13   >