Accepted tomcatjss 7.1.3-2 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Thu, 03 Sep 2015 17:33:05 +0300 Source: tomcatjss Binary: libtomcatjss-java Architecture: source all Version: 7.1.3-2 Distribution: unstable Urgency: medium Maintainer: Debian FreeIPA Team

Accepted wmfire 1.2.4-2 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 23 Aug 2015 23:36:05 -0400 Source: wmfire Binary: wmfire Architecture: source amd64 Version: 1.2.4-2 Distribution: unstable Urgency: medium Maintainer: Debian Window Maker Team

Accepted chromium-browser 45.0.2454.85-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2015 22:07:59 + Source: chromium-browser Binary: chromium chromium-dbg chromium-l10n chromedriver Architecture: source Version: 45.0.2454.85-1 Distribution: unstable Urgency: medium Maintainer: Debian Chromium

Accepted libkeduvocdocument 4:15.08.0-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 10:08:12 -0400 Source: libkeduvocdocument Binary: libkeduvocdocument5 libkeduvocdocument-dev libkeduvocdocument-dbg Architecture: source amd64 Version: 4:15.08.0-1 Distribution: unstable Urgency: medium Maintainer:

Accepted ksshaskpass 4:5.4.0-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 15:10:14 +0200 Source: ksshaskpass Binary: ksshaskpass Architecture: source amd64 Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Accepted openttd 1.5.2-1 (source all amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 13:07:54 +0200 Source: openttd Binary: openttd openttd-dbg openttd-data Architecture: source all amd64 Version: 1.5.2-1 Distribution: unstable Urgency: medium Maintainer: Matthijs Kooijman

Accepted nuxwdog 1.0.3-3 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Thu, 03 Sep 2015 17:06:05 +0300 Source: nuxwdog Binary: nuxwdog libnuxwdog0 libnuxwdog-dev libnuxwdog-java Architecture: source amd64 Version: 1.0.3-3 Distribution: unstable Urgency: medium Maintainer: Debian FreeIPA Team

Accepted gcc-5 5.2.1-16 (source ppc64el all) into unstable

nitizer (x32) libx32ubsan0-dbg - UBSan -- undefined behaviour sanitizer (x32 debug symbols) Changes: gcc-5 (5.2.1-16) unstable; urgency=medium . * Update to SVN 20150903 (r227431, 5.2.1) from the gcc-5-branch. - Backport the filesystem TS library. * libstdc++-dev: Install libstdc++fs.a

Accepted kwrited 4:5.4.0-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 15:12:05 +0200 Source: kwrited Binary: kwrited kwrited-dbg Architecture: source amd64 Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Bug#797908: ITP: drf-fsm-transitions -- Django-FSM transitions for Django REST Framework

Package: wnpp Severity: wishlist Owner: Michael Fladischer -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 * Package name: drf-fsm-transitions Version : 0.2.0 Upstream Author : Jacob Haslehurst * URL :

Accepted golang-check.v1 0.0+git20150729.11d3bc7-2 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 14:06:46 + Source: golang-check.v1 Binary: golang-check.v1-dev Architecture: source all Version: 0.0+git20150729.11d3bc7-2 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team

Bug#797909: ITP: django-downloadview -- efficient static file serving with Django

Package: wnpp Severity: wishlist Owner: Michael Fladischer -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 * Package name: django-downloadview Version : 1.8 Upstream Author : Benoît Bryon * URL :

Re: Improving your archive and package system for small package

On 03/09/15, 03:13pm, Bastien ROUCARIES wrote: > I was thinking generally, perl latex python have a lot of small > package. Each language could not come with its own solution. Maybe > creating a tool agregating small debian package in a big one. But > doing something only for javascript is not a

Re: Improving your archive and package system for small package

Le 03/09/2015 13:36, Bastien ROUCARIES a écrit : > Hi, > > In order to improve node situation we need to improve the small > packages problems. > > What are the main bottlenet ? What could be done to improve the situation ? > > The node small package does not change often so it could be a win to >

Bug#797914: ITP: jasp -- graphical statistical package designed to familiar to users of SPSS

Package: wnpp Severity: wishlist Owner: Jonathon * Package name: jasp Version : 0.7.1.12 Upstream Author : Jonathon Love * URL : https://jasp-stats.org * License : AGPL Programming Lang: C++, JavaScript, R Description :

Accepted solarwolf 1.5-2.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2015 17:19:25 +0200 Source: solarwolf Binary: solarwolf Architecture: source Version: 1.5-2.1 Distribution: unstable Urgency: medium Maintainer: Josselin Mouette Changed-By: Graham Inggs

Accepted sddm 0.11.0-4 (source amd64 all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 17:23:08 +0200 Source: sddm Binary: sddm sddm-theme-maui sddm-theme-circles sddm-theme-elarun sddm-theme-maldives sddm-dbg Architecture: source amd64 all Version: 0.11.0-4 Distribution: unstable Urgency: medium

Accepted kanagram 4:15.08.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 12:50:25 -0400 Source: kanagram Binary: kanagram Architecture: source Version: 4:15.08.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Accepted glib2.0 2.45.7-1 (all amd64 i386 source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2015 14:09:02 +0100 Source: glib2.0 Binary: libglib2.0-0 libglib2.0-tests libglib2.0-udeb libglib2.0-bin libglib2.0-dev libglib2.0-0-dbg libglib2.0-data libglib2.0-doc libgio-fam libglib2.0-0-refdbg Architecture: all

Accepted openjdk-7 7u85-2.6.1-1 (source ppc64el all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 12:47:16 +0200 Source: openjdk-7 Binary: openjdk-7-jdk openjdk-7-jre-headless openjdk-7-jre openjdk-7-jre-lib openjdk-7-demo openjdk-7-source openjdk-7-doc openjdk-7-dbg icedtea-7-jre-jamvm openjdk-7-jre-zero

Accepted ruby-omniauth-kerberos 0.3.0-2 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 24 Aug 2015 11:45:29 +0530 Source: ruby-omniauth-kerberos Binary: ruby-omniauth-kerberos Architecture: source all Version: 0.3.0-2 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Extras Maintainers

Accepted systemsettings 4:5.4.0-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 19:08:32 +0200 Source: systemsettings Binary: systemsettings systemsettings-dbg Architecture: source amd64 Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Accepted sddm-kcm 4:5.4.0-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 19:07:56 +0200 Source: sddm-kcm Binary: kde-config-sddm kde-config-sddm-dbg Architecture: source amd64 Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Accepted plasma-sdk 5.4.0-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 18:52:39 +0200 Source: plasma-sdk Binary: plasma-sdk plasma-sdk-dbg Architecture: source amd64 Version: 5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Accepted plasma-workspace-wallpapers 4:5.4.0-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 18:52:59 +0200 Source: plasma-workspace-wallpapers Binary: plasma-workspace-wallpapers Architecture: source all Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE

Accepted user-manager 4:5.4.0-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 19:09:46 +0200 Source: user-manager Binary: user-manager Architecture: source amd64 Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Accepted oxygen-fonts 4:5.4.0-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 3 Sep 2015 18:48:26 CEST Source: oxygen-fonts Binary: fonts-oxygen ttf-oxygen-font-family Architecture: source all Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Re: Security concerns with minified javascript code

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Sep 03, 2015 at 08:47:11AM +0200, Vincent Bernat wrote: > Without minification, we'll just ship packages that people won't > use. Why would I run a crippled installation of Wordpress that will > drive of part of my users to another competitor?

Accepted polkit-kde-agent-1 4:5.4.0-1 (source all amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 18:53:35 +0200 Source: polkit-kde-agent-1 Binary: polkit-kde-agent-1 polkit-kde-1 Architecture: source all amd64 Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE

Accepted likwid 3.1.3+dfsg1-1 (source amd64) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 02 Sep 2015 17:49:02 +0200 Source: likwid Binary: likwid Architecture: source amd64 Version: 3.1.3+dfsg1-1 Distribution: unstable Urgency: medium Maintainer: Christoph Martin Changed-By: Christoph Martin

Accepted node-jsonparse 1.0.0-1 (source all) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 00:11:10 +0200 Source: node-jsonparse Binary: node-jsonparse Architecture: source all Version: 1.0.0-1 Distribution: unstable Urgency: low Maintainer: Debian Javascript Maintainers

Accepted opencolorio 1.0.9~dfsg0-4 (source amd64 all) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2015 13:55:34 +0200 Source: opencolorio Binary: libopencolorio-dev libopencolorio1v5 opencolorio-tools opencolorio-doc python-pyopencolorio Architecture: source amd64 all Version: 1.0.9~dfsg0-4 Distribution: unstable

Re: Security concerns with minified javascript code

* Bas Wijnen [150902 17:36]: > > On Wed, 2 Sep 2015 13:33:57 -0400 Marvin Renich wrote: > > > No, "A preferred form" is what upstream uses. The DFSG does not use > > > the term "THE preferred form", and I believe that was wise. > > The DFSG doesn't define

Accepted lynx-cur 2.8.9dev6-4 (source amd64 all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 20:51:23 +0200 Source: lynx-cur Binary: lynx-cur lynx Architecture: source amd64 all Version: 2.8.9dev6-4 Distribution: unstable Urgency: low Maintainer: Debian Lynx Packaging Team

Accepted diffoscope 32 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 20:00:45 +0200 Source: diffoscope Binary: diffoscope debbindiff Architecture: source all Version: 32 Distribution: unstable Urgency: medium Maintainer: Reproducible builds folks

Accepted links2 2.11-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 20:26:12 +0200 Source: links2 Binary: links2 links Architecture: source amd64 Version: 2.11-1 Distribution: unstable Urgency: medium Maintainer: Axel Beckert Changed-By: Axel Beckert

Accepted nufw 2.4.3-3.3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2015 23:14:06 +0500 Source: nufw Binary: nufw nuauth nuauth-extra nuauth-log-mysql nuauth-log-pgsql nutcpc nuauth-utils libnuclient4 libnuclient-dev libpam-nufw libnussl1 libnussl-dev Architecture: source Version:

Bug#797928: ITP: python-cbor -- Python Implementation of RFC 7049. Concise Binary Object Representation (CBOR)

Package: wnpp Severity: wishlist X-Debbugs-CC: debian-devel@lists.debian.org Package name: python-cbor Version: 0.1.21 Upstream Author: 2014-2015 Brian Olson URL: https://bitbucket.org/bodhisnarkva/cbor License: Apache-2.0 Description: Python Implementation of

Re: Security concerns with minified javascript code

❦ 3 septembre 2015 17:22 GMT, Bas Wijnen  : > Because you know you have the right and the ability to be a part of the free > software community that created the software. That is why you are running > Debian and don't have contrib or non-free in your sources.list. > > From

Accepted python-characteristic 14.3.0-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 20:06:31 +0200 Source: python-characteristic Binary: python-characteristic python3-characteristic Architecture: source all Version: 14.3.0-1 Distribution: unstable Urgency: medium Maintainer: Matthias Klose

Accepted ax25-tools 0.0.10-rc4-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 12:21:10 +0100 Source: ax25-tools Binary: ax25-tools ax25-xtools Architecture: source amd64 Version: 0.0.10-rc4-1 Distribution: unstable Urgency: medium Maintainer: Debian Hamradio Maintainers

Accepted ax25mail-utils 0.13-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 18:58:50 +0100 Source: ax25mail-utils Binary: ax25mail-utils Architecture: source amd64 Version: 0.13-1 Distribution: unstable Urgency: medium Maintainer: Debian Hamradio Maintainers

Accepted libetpan 1.6-1 (source amd64 all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 16:48:32 +0200 Source: libetpan Binary: libetpan17 libetpan-dev libetpan-doc libetpan-dbg Architecture: source amd64 all Version: 1.6-1 Distribution: unstable Urgency: medium Maintainer: Ricardo Mones

Accepted logwatch 7.4.1+svn20150731rev294-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 02 Sep 2015 18:50:14 +0200 Source: logwatch Binary: logwatch Architecture: source all Version: 7.4.1+svn20150731rev294-1 Distribution: unstable Urgency: medium Maintainer: Willi Mann Changed-By: Willi Mann

Accepted clawsker 0.7.13-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 20:39:06 +0200 Source: clawsker Binary: clawsker Architecture: source all Version: 0.7.13-1 Distribution: unstable Urgency: medium Maintainer: Ricardo Mones Changed-By: Ricardo Mones

Re: Security concerns with minified javascript code

* Neil Williams [150902 14:15]: > On Wed, 2 Sep 2015 13:14:31 -0400 Marvin Renich wrote: > > It is presumed that upstream already has what it considers "source"; > > in the case of this thread, that is minified JS. > > Actually, not. Source, for upstream of

Re: Improving your archive and package system for small package

Quoting Bastien ROUCARIES (2015-09-03 13:36:15) > In order to improve node situation we need to improve the small > packages problems. > > What are the main bottlenet ? What could be done to improve the > situation ? > > The node small package does not change often so it could be a win to >

Accepted kdeplasma-addons 4:5.4.0-1 (source all amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 18:00:02 +0200 Source: kdeplasma-addons Binary: kdeplasma-addons-data kwin-addons plasma-widgets-addons plasma-dataengines-addons plasma-runners-addons plasma-wallpapers-addons plasma-widget-kimpanel

Accepted libkscreen 4:5.4.0-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 17:59:24 +0200 Source: libkscreen Binary: libkf5screen-dev libkf5screen6 libkscreen-dbg Architecture: source amd64 Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE

Accepted kdeedu-data 4:15.08.0-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 12:17:07 -0400 Source: kdeedu-data Binary: libkdeedu-data kdeedu-data kdeedu-kvtml-data Architecture: source all Version: 4:15.08.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE

Re: Security concerns with minified javascript code

Lars Wirzenius dijo [Wed, Sep 02, 2015 at 09:32:12AM +0300]: > However, I want to raise the point that upstreams do not always make > sensible decisions, and if they don't, it's good to raise that with > them. For example, there was recently an ITP bug for > node-number-is-nan. Upstream source

Accepted kdepim 4:4.14.10-2 (source amd64 all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 11:05:40 -0400 Source: kdepim Binary: kdepim kdepim-mobile kdepim-doc akregator kaddressbook kaddressbook-mobile kalarm kdepim-kresources storageservicemanager kleopatra kmail kmail-mobile knode knotes

Accepted libdist-zilla-plugins-cjm-perl 4.27-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 02 Sep 2015 22:10:30 -0300 Source: libdist-zilla-plugins-cjm-perl Binary: libdist-zilla-plugins-cjm-perl Architecture: source Version: 4.27-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group

Accepted libksysguard 4:5.4.0-1 (source amd64 all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 17:37:13 +0200 Source: libksysguard Binary: libkf5sysguard-dev libkf5sysguard-bin libkf5sysguard5 libksgrd7 libksignalplotter7 liblsofui7 libprocesscore7 libprocessui7 libkf5sysguard-data libkf5sysguard5-data

Accepted libtest-prereq-perl 1.039-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 02 Sep 2015 23:23:35 -0300 Source: libtest-prereq-perl Binary: libtest-prereq-perl Architecture: source Version: 1.039-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group

Accepted x86info 1.31~pre0.8052aabdd159bc9050e7dc264f33782c5acce05f-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Thu, 03 Sep 2015 18:28:04 +0100 Source: x86info Binary: x86info Architecture: source amd64 Version: 1.31~pre0.8052aabdd159bc9050e7dc264f33782c5acce05f-1 Distribution: unstable Urgency: low Maintainer: Mark Brown

Re: Security concerns with minified javascript code

* Neil Williams [150902 14:33]: > Minified isn't source for modification... [large snip] I don't believe I have disagreed with anything you said in the snipped text. I certainly did not mean to. I said that minified JS can only go in main if both the source and the tools

Accepted pymtp 0.0.6-1.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sat, 29 Aug 2015 20:20:24 +0500 Source: pymtp Binary: python-pymtp Architecture: source Version: 0.0.6-1.1 Distribution: unstable Urgency: medium Maintainer: Thomas Perl Changed-By: Andrey Rahmatullin

Accepted postbooks 4.9.1-2 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 15:33:04 +0200 Source: postbooks Binary: libxtuplecommon1 libxtuplecommon-dev postbooks Architecture: source amd64 Version: 4.9.1-2 Distribution: unstable Urgency: medium Maintainer: Debian xTuple Maintainers

Accepted milou 4:5.4.0-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 17:37:38 +0200 Source: milou Binary: milou milou-dbg Architecture: source amd64 Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Re: Security concerns with minified javascript code

Paul Wise writes: > On Wed, Sep 2, 2015 at 11:47 PM, Russ Allbery wrote: >> If *no one* has access to anything better than a binary file, then >> possession of that binary file puts you on an equal footing with >> everyone else in the world, which I think is all that we can

Accepted node-hashish 0.0.4+git34dfe43-1 (source all) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 02 Sep 2015 22:58:37 +0200 Source: node-hashish Binary: node-hashish Architecture: source all Version: 0.0.4+git34dfe43-1 Distribution: unstable Urgency: low Maintainer: Debian Javascript Maintainers

Accepted cl-quri 20150804-1 (source all) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 02 Sep 2015 16:12:21 +0300 Source: cl-quri Binary: cl-quri Architecture: source all Version: 20150804-1 Distribution: unstable Urgency: medium Maintainer: Dimitri Fontaine Changed-By: Dimitri Fontaine

Accepted cppo 1.1.2-2 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2015 17:35:12 +0200 Source: cppo Binary: cppo Architecture: source amd64 Version: 1.1.2-2 Distribution: unstable Urgency: medium Maintainer: Debian OCaml Maintainers Changed-By:

Accepted postbooks-updater 2.3.0-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 18:26:21 +0200 Source: postbooks-updater Binary: postbooks-updater Architecture: source amd64 Version: 2.3.0-1 Distribution: unstable Urgency: medium Maintainer: Debian xTuple Maintainers

Accepted muon 4:5.4.0-1 (source amd64 all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 18:24:40 +0200 Source: muon Binary: muon muon-common muon-discover muon-updater muon-notifier libmuon muon-dbg Architecture: source amd64 all Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer:

Accepted libtext-levenshtein-perl 0.13-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 02 Sep 2015 23:15:18 -0300 Source: libtext-levenshtein-perl Binary: libtext-levenshtein-perl Architecture: source Version: 0.13-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group

Accepted libmath-prime-util-gmp-perl 0.32-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 02 Sep 2015 22:46:53 -0300 Source: libmath-prime-util-gmp-perl Binary: libmath-prime-util-gmp-perl Architecture: source Version: 0.32-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group

Accepted sphinx 1.3.1-6 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 16:54:07 +0300 Source: sphinx Binary: python-sphinx python3-sphinx sphinx-common sphinx-doc libjs-sphinxdoc Architecture: source Version: 1.3.1-6 Distribution: unstable Urgency: medium Maintainer: Debian Python

Accepted libsvm 3.12-1.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sat, 29 Aug 2015 20:00:43 +0500 Source: libsvm Binary: libsvm3 libsvm-tools libsvm-dev python-libsvm libsvm3-java libsvm-java Architecture: source Version: 3.12-1.1 Distribution: unstable Urgency: medium Maintainer: Chen-Tse Tsai

Re: Security concerns with minified javascript code

Vincent Bernat dijo [Wed, Sep 02, 2015 at 09:47:23AM +0200]: > If you talk about uglifyjs or the like, it is already packaged and > doesn't solve all the problems we have (see my message to Odyx, > ). > > If you talk about Grunt, Grunt comes with a lot of plugins (and

Accepted oolite 1.82-1 (all source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 01:35:02 +0200 Source: oolite Binary: oolite oolite-doc oolite-data oolite-data-sounds Architecture: all source Version: 1.82-1 Distribution: unstable Urgency: medium Maintainer: Nicolas Boulenguez

Accepted plasma-nm 4:5.4.0-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 18:39:14 +0200 Source: plasma-nm Binary: plasma-nm plasma-nm-dbg Architecture: source amd64 Version: 4:5.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Accepted nodeenv 0.13.4-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 31 Aug 2015 12:18:09 -0700 Source: nodeenv Binary: nodeenv Architecture: source all Version: 0.13.4-1 Distribution: unstable Urgency: medium Maintainer: Chris Kuehl Changed-By: Chris Kuehl

Re: Security concerns with minified javascript code

On Sep 03 2015, Vincent Bernat wrote: > ❦ 3 septembre 2015 17:22 GMT, Bas Wijnen  : > >> Because you know you have the right and the ability to be a part of the free >> software community that created the software. That is why you are running >> Debian and

Re: Improving your archive and package system for small package

Jonas Smedegaard wrote: > Seems Osamu Aoki is working on at least part of the puzzle: > https://bugs.debian.org/797045 Merging multiple sources *really* shouldn't be necessary. And the metadata for those sources will vary, so that likely won't save that much space. Perhaps we should add a few

Re: Security concerns with minified javascript code

❦ 3 septembre 2015 13:19 -0700, Nikolaus Rath  : >>> Because you know you have the right and the ability to be a part of the free >>> software community that created the software. That is why you are running >>> Debian and don't have contrib or non-free in your sources.list.

Re: Improving your archive and package system for small package

Quoting Josh Triplett (2015-09-03 22:26:12) > Jonas Smedegaard wrote: >> Seems Osamu Aoki is working on at least part of the puzzle: >> https://bugs.debian.org/797045 > > Merging multiple sources *really* shouldn't be necessary. And the > metadata for those sources will vary, so that likely

Accepted kwordquiz 4:15.08.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 16:47:56 -0400 Source: kwordquiz Binary: kwordquiz Architecture: source Version: 4:15.08.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Accepted khangman 4:15.08.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 15:33:28 -0400 Source: khangman Binary: khangman Architecture: source Version: 4:15.08.0-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers

Accepted kde-workspace 4:4.11.22-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2015 22:40:48 +0200 Source: kde-workspace Binary: kde-workspace kdebase-workspace plasma-netbook kde-workspace-bin kdebase-workspace-bin kde-workspace-data kde-workspace-dev kdebase-workspace-dev

Accepted qwtplot3d 0.2.7+svn191-8 (source all amd64) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 02 Sep 2015 07:04:48 +0100 Source: qwtplot3d Binary: libqwtplot3d-qt4-dev libqwtplot3d-qt4-0v5 libqwtplot3d-doc Architecture: source all amd64 Version: 0.2.7+svn191-8 Distribution: unstable Urgency: medium Maintainer: Debian

Accepted gausssum 3.0.1-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2015 22:52:28 +0200 Source: gausssum Binary: gausssum Architecture: source all Version: 3.0.1-1 Distribution: unstable Urgency: medium Maintainer: Debichem Team Changed-By:

Accepted qsampler 0.3.1-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Thu, 03 Sep 2015 05:49:13 +0200 Source: qsampler Binary: qsampler Architecture: source amd64 Version: 0.3.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Multimedia Maintainers

Accepted caja 1.10.3-2 (source all amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 07:47:13 +0200 Source: caja Binary: caja caja-common libcaja-extension1 libcaja-extension-dev gir1.2-caja caja-dbg libcaja-extension1-dbg Architecture: source all amd64 Version: 1.10.3-2 Distribution: unstable

Accepted mate-user-share 1.10.0-1 (source all amd64) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 02 Sep 2015 05:58:18 +0200 Source: mate-user-share Binary: mate-user-share mate-user-share-common mate-user-share-dbg Architecture: source all amd64 Version: 1.10.0-1 Distribution: unstable Urgency: medium Maintainer: MATE

Accepted limba 0.5.1-1 (source amd64) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Wed, 02 Sep 2015 22:52:48 +0200 Source: limba Binary: limba liblimba0 liblimba-dev gir1.2-limba-1.0 limba-devtools limba-licompile Architecture: source amd64 Version: 0.5.1-1 Distribution: unstable Urgency: medium Maintainer:

Accepted geiser 0.7-1 (source all) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 01 Sep 2015 19:47:08 -0300 Source: geiser Binary: elpa-geiser Architecture: source all Version: 0.7-1 Distribution: unstable Urgency: medium Maintainer: David Bremner Changed-By: David Bremner

Accepted appdirs 1.4.0-2 (source all) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 02 Sep 2015 15:49:47 +0200 Source: appdirs Binary: python-appdirs python3-appdirs pypy-appdirs Architecture: source all Version: 1.4.0-2 Distribution: unstable Urgency: medium Maintainer: Benjamin Drung

Accepted openimageio 1.5.18~dfsg0-1 (source amd64) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 01 Sep 2015 13:45:16 +0200 Source: openimageio Binary: libopenimageio1.5v5 libopenimageio-dev openimageio-tools Architecture: source amd64 Version: 1.5.18~dfsg0-1 Distribution: unstable Urgency: medium Maintainer: Debian

Accepted ganv 1.4.2~dfsg0-1.1 (amd64 source) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 31 Aug 2015 11:35:35 +0100 Source: ganv Binary: libganv-1-1v5 libganv-dev gir1.2-ganv-1.0 Architecture: amd64 source Version: 1.4.2~dfsg0-1.1 Distribution: unstable Urgency: medium Maintainer: Alessio Treglia

Accepted pytrainer 1.10.1-5 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 08:06:21 +0200 Source: pytrainer Binary: pytrainer Architecture: source all Version: 1.10.1-5 Distribution: unstable Urgency: medium Maintainer: Debian running development group

Accepted kdelibs4support 5.13.0-3 (source all amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 03 Sep 2015 08:01:07 +0200 Source: kdelibs4support Binary: libkf5kdelibs4support-dev libkf5kdelibs4support5 libkf5kdelibs4support-data libkf5kdelibs4support5-bin libkf5kdelibs4support5-dbg Architecture: source all amd64

Re: the status of gstreamer1.0-plugins-bad

Hi Vincent, > which is unacceptable from a security and stability point of view. do you conclude this from the package description? > One problem is that if this package is installed, then Iceweasel > automatically uses these plugins (even when not needed, currently > making it crash[*]), with

Re: Security concerns with minified javascript code

On Wed, Sep 2, 2015 at 11:47 PM, Russ Allbery wrote: > I think reading "preferred form of modification" from the perspective of > upstream is a useful standard because it handles some edge cases like > that, and because it feels ethically consistent with free software > principles. The goal is

Re: Security concerns with minified javascript code

❦ 3 septembre 2015 12:23 +1000, Dmitry Smirnov  : >> Amazon did a study that showed every ~100ms of page load >> delay lost them 1% in sales. > > It could be that small percentage of Amazon users are impulsive trigger-happy > buyers. :) > However that conclusion is probably

Bug#797875: ITP: libjs-bootswatch -- themes for Twitter Bootstrap

Package: wnpp Severity: wishlist Owner: Thomas Goirand * Package name: libjs-bootswatch Version : 3.3.5+2+dfsg1 Upstream Author : Thomas Park * URL : https://github.com/thomaspark/bootswatch * License : Expat

Accepted cbmc 5.2-1 (source i386) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 02 Sep 2015 14:37:38 +0100 Source: cbmc Binary: cbmc Architecture: source i386 Version: 5.2-1 Distribution: unstable Urgency: low Maintainer: Michael Tautschnig Changed-By: Michael Tautschnig

Accepted libinput 1.0.1-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Thu, 03 Sep 2015 11:52:08 +0300 Source: libinput Binary: libinput10 libinput10-udeb libinput10-dbg libinput-dev Architecture: source amd64 Version: 1.0.1-1 Distribution: unstable Urgency: medium Maintainer: Emilio Pozuelo Monfort

Accepted knot 2.0.1-1 (source amd64 all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 03 Sep 2015 10:56:16 +0200 Source: knot Binary: knot knot-libs knot-dbg knot-dnsutils knot-host knot-doc Architecture: source amd64 all Version: 2.0.1-1 Distribution: unstable Urgency: medium Maintainer: Ondřej Surý

  1   2   >