Accepted r-bioc-savr 1.37.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2024 08:22:59 +0100 Source: r-bioc-savr Architecture: source Version: 1.37.0-2 Distribution: unstable Urgency: medium Maintainer: Debian R Packages Maintainers Changed-By: Andreas Tille Closes: 1060929 1061114

Accepted miller 6.11.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2024 08:08:39 +0100 Source: miller Architecture: source Version: 6.11.0-1 Distribution: unstable Urgency: medium Maintainer: Stephen Kitt Changed-By: Stephen Kitt Changes: miller (6.11.0-1) unstable; urgency=medium

Accepted rust-ntp-os-clock 1.1.1-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 25 Jan 2024 07:55:23 +0100 Source: rust-ntp-os-clock Architecture: source Version: 1.1.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers Changed-By: Sylvestre Ledru Changes: rust-ntp-os-clock

Accepted ruby-sanitize 6.0.2-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2024 12:00:39 +0530 Source: ruby-sanitize Architecture: source Version: 6.0.2-2 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Team Changed-By: Abhijith PA Changes: ruby-sanitize (6.0.2-2) unstable;

Accepted php-zeta-unit-test 1.2.5-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 18:05:36 +0100 Source: php-zeta-unit-test Architecture: source Version: 1.2.5-1 Distribution: unstable Urgency: medium Maintainer: Debian PHP PEAR Maintainers Changed-By: David Prévot Closes: 1039852 Changes:

Re: Limited security support for Go/Rust? Re ssh3

On Wed, Jan 24, 2024 at 11:40:20PM +, Wookey wrote: > If it only done for security issues, rather than routinely, then that > shouldn't be that much extra load (does anyone have any idea how much > extra building we are talking about? Is it trivial, or huge?) If we do those rebuilds in stable

Accepted lfortran 0.30.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 19:48:26 + Source: lfortran Architecture: source Version: 0.30.0-2 Distribution: unstable Urgency: medium Maintainer: Alastair McKinstry Changed-By: Alastair McKinstry Changes: lfortran (0.30.0-2) unstable;

Accepted ruby-redis-namespace 1.9.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 18 Jan 2024 15:32:21 +0530 Source: ruby-redis-namespace Architecture: source Version: 1.9.0-2 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Team Changed-By: Vivek K J Closes: 1047604 Changes:

Accepted dh-coq 0.7 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2024 06:45:38 +0100 Source: dh-coq Architecture: source Version: 0.7 Distribution: unstable Urgency: medium Maintainer: Debian OCaml Maintainers Changed-By: Julien Puydt Changes: dh-coq (0.7) unstable; urgency=medium

Accepted jmagick 6.6.9~20130201-svn99-5 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2024 14:50:47 +1300 Source: jmagick Architecture: source Version: 6.6.9~20130201-svn99-5 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers Changed-By: Vladimir Petko Closes: 1057510 Changes:

Accepted revolt 0.0+git20211216.7f6f762-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 22:34:57 -0500 Source: revolt Architecture: source Version: 0.0+git20211216.7f6f762-2 Distribution: unstable Urgency: medium Maintainer: Matrix Packaging Team Changed-By: Hubert Chathi Closes: 1061462 Changes:

Accepted acl 2.3.2-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2024 04:43:56 +0100 Source: acl Architecture: source Version: 2.3.2-1 Distribution: unstable Urgency: medium Maintainer: Guillem Jover Changed-By: Guillem Jover Changes: acl (2.3.2-1) unstable; urgency=medium . *

Accepted attr 1:2.5.2-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2024 04:28:26 +0100 Source: attr Architecture: source Version: 1:2.5.2-1 Distribution: unstable Urgency: medium Maintainer: Guillem Jover Changed-By: Guillem Jover Changes: attr (1:2.5.2-1) unstable; urgency=medium

Accepted golang-github-containers-image 5.29.1-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 21:26:41 -0500 Source: golang-github-containers-image Built-For-Profiles: noudeb Architecture: source Version: 5.29.1-2 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team Changed-By:

Accepted golang-github-containers-common 0.57.2+ds1-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 21:31:09 -0500 Source: golang-github-containers-common Built-For-Profiles: noudeb Architecture: source Version: 0.57.2+ds1-2 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team Changed-By:

Re: icc-profiles_2.2_source.changes REJECTED

Quoting Jeremy Bícha (2024-01-25 02:50:07) > On Fri, Mar 3, 2023 at 5:58 PM Bastien Roucariès wrote: > > Le vendredi 3 mars 2023, 22:35:24 UTC Jonas Smedegaard a écrit : > > > Quoting Bastien Roucariès (2023-03-03 22:21:49) > > > > Le lundi 27 février 2023, 12:11:27 UTC Jonas Smedegaard a écrit :

Accepted libpod 4.9.0+ds1-1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jan 2024 18:14:02 -0500 Source: libpod Built-For-Profiles: noudeb Architecture: source Version: 4.9.0+ds1-1 Distribution: experimental Urgency: medium Maintainer: Debian Go Packaging Team Changed-By: Reinhard Tartler

Accepted dropbear 2022.83-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2024 02:08:38 +0100 Source: dropbear Architecture: source Version: 2022.83-4 Distribution: unstable Urgency: medium Maintainer: Guilhem Moulin Changed-By: Guilhem Moulin Closes: 1059001 Changes: dropbear (2022.83-4)

Re: icc-profiles_2.2_source.changes REJECTED

On Fri, Mar 3, 2023 at 5:58 PM Bastien Roucariès wrote: > Le vendredi 3 mars 2023, 22:35:24 UTC Jonas Smedegaard a écrit : > > Quoting Bastien Roucariès (2023-03-03 22:21:49) > > > Le lundi 27 février 2023, 12:11:27 UTC Jonas Smedegaard a écrit : > > > Hi jonas, > > > > > > I have just checked

Accepted gui-ufw 24.04.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 19:37:03 -0500 Source: gui-ufw Built-For-Profiles: noudeb Architecture: source Version: 24.04.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Jeremy Bícha Changes: gui-ufw

Re: Proposal for how to deal with Go/Rust/etc security bugs

On 2024-01-24 13:29 +0100, Simon Josefsson wrote: > Luca Boccassi writes: > > > There's always option B: recognize that the Rust/Go ecosystems are not > > designed to be compatible with the Linux distributions model Luca is quite right here. Ultimately this can only be fixed by these ecosystems

Accepted rust-libp2p-identity 0.2.8+ds-3 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2024 00:44:03 +0100 Source: rust-libp2p-identity Architecture: source Version: 0.2.8+ds-3 Distribution: experimental Urgency: medium Maintainer: Jonas Smedegaard Changed-By: Jonas Smedegaard Changes:

Accepted rust-breezyshim 0.1.77-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 23:50:02 + Source: rust-breezyshim Architecture: source Version: 0.1.77-1 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers Changed-By: Jelmer Vernooij Changes: rust-breezyshim

Accepted python-panwid 0.3.5-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jan 2024 00:45:18 +0100 Source: python-panwid Architecture: source Version: 0.3.5-3 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Alexandre Detiste Changes: python-panwid (0.3.5-3)

Accepted icmake 11.01.01-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 11:26:20 +0100 Source: icmake Architecture: source Version: 11.01.01-1 Distribution: unstable Urgency: medium Maintainer: Francesco Paolo Lovergine Changed-By: Frank B. Brokken Changes: icmake (11.01.01-1)

Re: Limited security support for Go/Rust? Re ssh3

On 2024-01-16 10:59 +0100, Simon Josefsson wrote: > My naive approach on how to fix a security problem in package X which is > statically embedded into other packages A, B, C, ... would be to rebuild > the transitive closure of all packages that Build-Depends on X and > publish a security update

Accepted python-pywebview 4.4.1+dfsg-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 17:36:15 -0500 Source: python-pywebview Built-For-Profiles: noudeb Architecture: source Version: 4.4.1+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Jeremy Bícha

Accepted circuslinux 1.0.3-35 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 23:11:28 +0100 Source: circuslinux Architecture: source Version: 1.0.3-35 Distribution: unstable Urgency: medium Maintainer: Christian T. Steigies Changed-By: Christian T. Steigies Changes: circuslinux

Accepted python-webdavclient 3.14.6-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 22:31:29 +0100 Source: python-webdavclient Architecture: source Version: 3.14.6-2 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Alexandre Detiste Changes: python-webdavclient

Accepted inn2 2.7.2~20240120-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 23:04:01 +0100 Source: inn2 Architecture: source Version: 2.7.2~20240120-1 Distribution: unstable Urgency: medium Maintainer: Marco d'Itri Changed-By: Marco d'Itri Changes: inn2 (2.7.2~20240120-1) unstable;

Accepted bpftrace 0.20.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 22:50:01 +0100 Source: bpftrace Architecture: source Version: 0.20.0-1 Distribution: unstable Urgency: medium Maintainer: Vincent Bernat Changed-By: Vincent Bernat Changes: bpftrace (0.20.0-1) unstable;

Accepted box64 0.2.6+dfsg-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 22:25:30 +0100 Source: box64 Architecture: source Version: 0.2.6+dfsg-3 Distribution: unstable Urgency: medium Maintainer: Johannes Schauer Marin Rodrigues Changed-By: Johannes Schauer Marin Rodrigues Closes:

Accepted unattended-upgrades 2.9.1+nmu4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 22 Jan 2024 16:11:59 -0400 Source: unattended-upgrades Architecture: source Version: 2.9.1+nmu4 Distribution: unstable Urgency: medium Maintainer: Michael Vogt Changed-By: Stefano Rivera Closes: 1058172 Changes:

Accepted systemd 255.3-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 20:03:15 + Source: systemd Architecture: source Version: 255.3-1 Distribution: sid Urgency: medium Maintainer: Debian systemd Maintainers Changed-By: Luca Boccassi Changes: systemd (255.3-1) sid;

Accepted qt6-tools 6.6.1-3 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 22:09:32 +0100 Source: qt6-tools Architecture: source Version: 6.6.1-3 Distribution: experimental Urgency: medium Maintainer: Debian Qt/KDE Maintainers Changed-By: Patrick Franz Changes: qt6-tools (6.6.1-3)

Accepted onionshare 2.6-6 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 22:33:15 +0100 Source: onionshare Architecture: source Version: 2.6-6 Distribution: experimental Urgency: medium Maintainer: Debian Privacy Tools Maintainers Changed-By: Sandro Knauß Closes: 1061360 Changes:

Accepted glib2.0 2.79.1-1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 20:11:26 + Source: glib2.0 Architecture: source Version: 2.79.1-1 Distribution: experimental Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Simon McVittie Changes: glib2.0 (2.79.1-1)

Re: Proposal for how to deal with Go/Rust/etc security bugs (was: Re: Limited security support for Go/Rust? Re ssh3)

On Jan 24, Peter Pentchev wrote: > This might be a minority, optimistic, rose-tinted-glasses kind of > opinion, but I believe that the state of the Rust ecosystem today > (I have no experience with the Go one) is quite similar to what Perl and > Python modules were 25, 20, bah, even 15 years

Accepted giara 1.1.0-0.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 16:00:02 -0500 Source: giara Built-For-Profiles: noudeb Architecture: source Version: 1.1.0-0.1 Distribution: unstable Urgency: medium Maintainer: Federico Ceratto Changed-By: Jeremy Bícha Closes: 1036626 1051091

Accepted firehol 3.1.7+ds-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 21:34:39 + Source: firehol Architecture: source Version: 3.1.7+ds-3 Distribution: unstable Urgency: medium Maintainer: Jerome Benoit Changed-By: Jerome Benoit Closes: 309198 536362 976014 993322 1050664

Re: build profile proposal: nogir (second try)

On Wed, Jan 24, 2024 at 06:30:02PM +, Alberto Garcia wrote: > - Are packages that ship gobject-introspection files supposed to have >in the relevant build dependencies (gir1.2-*-dev, > gobject-introspection ?), or is the build profile handling this > automatically? This is not

Accepted usb.ids 2024.01.20-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 21:30:29 +0100 Source: usb.ids Architecture: source Version: 2024.01.20-1 Distribution: unstable Urgency: medium Maintainer: Aurelien Jarno Changed-By: Aurelien Jarno Changes: usb.ids (2024.01.20-1) unstable;

Accepted python-x2go 0.6.1.3-3.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 21:28:31 +0100 Source: python-x2go Architecture: source Version: 0.6.1.3-3.1 Distribution: unstable Urgency: medium Maintainer: Debian Remote Maintainers Changed-By: Alexandre Detiste Changes: python-x2go

Accepted pyside2 5.15.12-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 23:46:56 +0300 Source: pyside2 Architecture: source Version: 5.15.12-2 Distribution: unstable Urgency: medium Maintainer: Debian Qt/KDE Maintainers Changed-By: Dmitry Shachnev Changes: pyside2 (5.15.12-2)

Accepted libselinux 3.5-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 21:23:37 +0100 Source: libselinux Architecture: source Version: 3.5-2 Distribution: unstable Urgency: medium Maintainer: Debian SELinux maintainers Changed-By: Laurent Bigonville Closes: 914247 1029095 Changes:

Accepted gtk+2.0 2.24.33-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 16:02:45 -0500 Source: gtk+2.0 Built-For-Profiles: noudeb Architecture: source Version: 2.24.33-3 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha Changes:

static linking, modularity, and community (was: Proposal for how to deal with Go/Rust/etc security bugs)

[follow-ups should probably go to -project, but I'm not setting my headers to try to force that] At 2024-01-24T16:57:06+0100, Simon Josefsson wrote: > One could equally well make the argument that distributors should care > about the Go/Rust ecosystems, and make whatever changes needed in > order

Accepted xpdf 3.04+git20240124-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 21:19:03 +0100 Source: xpdf Architecture: source Version: 3.04+git20240124-1 Distribution: unstable Urgency: medium Maintainer: Florian Schlichting Changed-By: Florian Schlichting Closes: 1061423 Changes: xpdf

Accepted sip6 6.8.2+dfsg-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 22:46:52 +0300 Source: sip6 Architecture: source Version: 6.8.2+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Dmitry Shachnev Changes: sip6 (6.8.2+dfsg-1) unstable;

Accepted rust-ntp-proto 1.1.1-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 20:39:04 +0100 Source: rust-ntp-proto Architecture: source Version: 1.1.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers Changed-By: Sylvestre Ledru Changes: rust-ntp-proto

Accepted phosh-tour 0.35.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 19:52:25 +0100 Source: phosh-tour Architecture: source Version: 0.35.0-2 Distribution: unstable Urgency: medium Maintainer: Guido Günther Changed-By: Guido Günther Changes: phosh-tour (0.35.0-2) unstable;

Re: Proposal for how to deal with Go/Rust/etc security bugs (was: Re: Limited security support for Go/Rust? Re ssh3)

On Wed, Jan 24, 2024 at 01:01:34PM +, Luca Boccassi wrote: > On Wed, 24 Jan 2024 at 12:26, Johannes Schauer Marin Rodrigues > wrote: > > > > Hi, > > > > Quoting Luca Boccassi (2024-01-24 12:59:38) > > > There's always option B: recognize that the Rust/Go ecosystems are not > > > designed to

Accepted markdown-callouts 0.4.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 20:20:57 +0100 Source: markdown-callouts Architecture: source Version: 0.4.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Carsten Schoenert Changes: markdown-callouts

Accepted gmsh 4.12.1+ds1-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 19:58:13 +0100 Source: gmsh Architecture: source Version: 4.12.1+ds1-1 Distribution: unstable Urgency: medium Maintainer: Debian Science Maintainers Changed-By: Anton Gladky Changes: gmsh (4.12.1+ds1-1)

Accepted fwupd 1.9.12-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 12:32:54 -0600 Source: fwupd Built-For-Profiles: noudeb Architecture: source Version: 1.9.12-3 Distribution: unstable Urgency: medium Maintainer: Debian EFI Changed-By: Mario Limonciello Changes: fwupd

Accepted flask-limiter 3.5.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 20:47:38 +0100 Source: flask-limiter Architecture: source Version: 3.5.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Carsten Schoenert Closes: 1019747 Changes:

Re: build profile proposal: nogir (second try)

As Johannes mentioned earlier in this thread, the first piece of practical advice on nogir should be: if you don't know that you need to use it, then perhaps you shouldn't. It's primarily aimed at breaking cycles, and enabling buildability in lower-level packages during bootstrapping. (Having

Accepted urwid 2.4.6-0.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 19:22:01 +0100 Source: urwid Architecture: source Version: 2.4.6-0.1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Matthias Klose Changes: urwid (2.4.6-0.1) unstable;

Accepted python-scooby 0.9.2-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sat, 13 Jan 2024 15:28:19 + Source: python-scooby Binary: python3-scooby Architecture: source all Version: 0.9.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Francesco Ballarin

Accepted theme-d-intr 0.14.0-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 03 Nov 2023 08:12:23 +0200 Source: theme-d-intr Binary: theme-d-intr theme-d-intr-dev theme-d-intr-gtk3-examples theme-d-intr-gtk4-examples Architecture: source all Version: 0.14.0-1 Distribution: unstable Urgency: medium

Accepted rust-reqsign 0.14.6-1 (amd64 source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 14 Jan 2024 21:46:30 CET Source: rust-reqsign Binary: librust-reqsign-dev Architecture: amd64 source Version: 0.14.6-1 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers Changed-By: Sylvestre Ledru

Accepted rust-hickory-resolver 0.24.0-1 (amd64 source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 19 Jan 2024 15:46:55 CET Source: rust-hickory-resolver Binary: librust-hickory-resolver-dev Architecture: amd64 source Version: 0.24.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers Changed-By:

Accepted rust-associative-cache 2.0.0-1 (amd64 source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 22 Jan 2024 11:54:45 CET Source: rust-associative-cache Binary: librust-associative-cache-dev Architecture: amd64 source Version: 2.0.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers Changed-By:

Accepted rust-hickory-client 0.24.0-1 (amd64 source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 19 Jan 2024 14:45:36 CET Source: rust-hickory-client Binary: librust-hickory-client-dev Architecture: amd64 source Version: 0.24.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers Changed-By:

Accepted python-czt 0.0.7-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 19 Jan 2024 12:30:00 + Source: python-czt Binary: python3-czt Architecture: source all Version: 0.0.7-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Yogeswaran Umasankar Description:

Accepted r-cran-nanoarrow 0.3.0.1-1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 08 Jan 2024 18:54:43 +0100 Source: r-cran-nanoarrow Binary: r-cran-nanoarrow r-cran-nanoarrow-dbgsym Architecture: source amd64 Version: 0.3.0.1-1 Distribution: unstable Urgency: medium Maintainer: Debian R Packages

Accepted python-goodvibes 3.2+dfsg-1 (source all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jan 2024 12:00:00 + Source: python-goodvibes Binary: python3-goodvibes Architecture: source all Version: 3.2+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Yogeswaran Umasankar

Accepted gcc-13 13.2.0-11 (source all amd64) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jan 2024 22:00:03 +0100 Source: gcc-13 Binary: cpp-13 cpp-13-for-build cpp-13-for-host cpp-13-x86-64-linux-gnu cpp-13-x86-64-linux-gnu-dbgsym g++-13 g++-13-for-build g++-13-for-host g++-13-multilib g++-13-x86-64-linux-gnu

Accepted glib2.0 2.79.0+git20240119~62ee8bf6-1 (all amd64 source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sat, 20 Jan 2024 17:20:24 + Binary: gir1.2-girepository-3.0 gir1.2-girepository-3.0-dev gir1.2-glib-2.0 gir1.2-glib-2.0-dev libgirepository-2.0-0 libgirepository-2.0-0-dbgsym libgirepository-2.0-dev libglib2.0-0

Accepted poco 1.13.0-1 (source amd64) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jan 2024 18:53:33 + Source: poco Binary: libpoco-dev libpocoactiverecord100 libpocoactiverecord100-dbgsym libpococrypto100 libpococrypto100-dbgsym libpocodata100 libpocodata100-dbgsym libpocodatamysql100

Accepted golang-github-spiffe-go-spiffe 2.1.7-1 (source all) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 19 Jan 2024 00:13:44 +0100 Source: golang-github-spiffe-go-spiffe Binary: golang-github-spiffe-go-spiffe-dev Architecture: source all Version: 2.1.7-1 Distribution: experimental Urgency: medium Maintainer: Debian Go Packaging

Accepted golang-github-google-s2a-go 0.1.7-1 (source all) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 23 Jan 2024 17:42:40 +0100 Source: golang-github-google-s2a-go Binary: golang-github-google-s2a-go-dev Architecture: source all Version: 0.1.7-1 Distribution: experimental Urgency: medium Maintainer: Debian Go Packaging Team

Accepted lfortran 0.30.0-1 (source arm64) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 23 Jan 2024 16:10:25 + Source: lfortran Binary: lfortran lfortran-dbgsym liblfortran-dev liblfortran-runtime0 liblfortran-runtime0-dbgsym Architecture: source arm64 Version: 0.30.0-1 Distribution: experimental Urgency:

Accepted ace 7.1.3+dfsg-1 (source amd64 all) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 22 Jan 2024 11:28:32 + Source: ace Binary: ace-gperf ace-gperf-dbgsym ace-netsvcs ace-netsvcs-dbgsym libace-7.1.3 libace-7.1.3-dbgsym libace-dev libace-doc libace-flreactor-7.1.3 libace-flreactor-7.1.3-dbgsym

Re: build profile proposal: nogir (second try)

On Wed, Jan 17, 2024 at 10:00:35PM +, Simon McVittie wrote: > Here is the draft text that I added to the GObject-Introspection > mini-policy in 1.78.1-11: Hi, thanks for the explanation. A couple of questions about this: - Are packages that ship gobject-introspection files supposed to have

Accepted django-maintenancemode 0.11.7+git221001-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 13:24:05 -0500 Source: django-maintenancemode Architecture: source Version: 0.11.7+git221001-3 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Scott Kitterman Closes: 1044286

Accepted thermald 2.5.6-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 18:14:22 + Source: thermald Architecture: source Version: 2.5.6-1 Distribution: unstable Urgency: medium Maintainer: Colin Ian King Changed-By: Colin Ian King Changes: thermald (2.5.6-1) unstable;

Accepted dblatex 0.3.12py3-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 18:51:13 +0100 Source: dblatex Architecture: source Version: 0.3.12py3-3 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Matthias Klose Closes: 1033547 1061320 Changes: dblatex

Accepted audit 1:3.1.2-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 16:05:18 +0100 Source: audit Architecture: source Version: 1:3.1.2-2 Distribution: unstable Urgency: medium Maintainer: Laurent Bigonville Changed-By: Laurent Bigonville Closes: 1060167 Changes: audit

Accepted fwupd 1.9.12-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 11:25:54 -0600 Source: fwupd Built-For-Profiles: noudeb Architecture: source Version: 1.9.12-2 Distribution: unstable Urgency: medium Maintainer: Debian EFI Changed-By: Mario Limonciello Changes: fwupd

Bug#1061446: ITP: cosign -- Code signing and transparency for containers and binaries

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: cosign Version : 2.2.2-1 Upstream Author : The Sigstore Authors * URL : https://github.com/sigstore/cosign * License : Apache-2.0 Programming Lang: Go Description : Code signing

Accepted serd 0.32.2-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 17:38:42 +0100 Source: serd Architecture: source Version: 0.32.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Multimedia Maintainers Changed-By: Dennis Braun Changes: serd (0.32.2-1) unstable;

Accepted golang-github-secure-systems-lab-go-securesystemslib 0.8.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 16:19:37 +0100 Source: golang-github-secure-systems-lab-go-securesystemslib Architecture: source Version: 0.8.0-2 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team Changed-By: Simon

Accepted fastml 3.11-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 17:23:21 +0100 Source: fastml Architecture: source Version: 3.11-4 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team Changed-By: Andreas Tille Closes: 1044832 Changes: fastml (3.11-4)

Accepted debconf 1.5.84 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 16:20:13 + Source: debconf Architecture: source Version: 1.5.84 Distribution: unstable Urgency: medium Maintainer: Debconf Developers Changed-By: Colin Watson Closes: 304572 682508 754123 797071 1039068

Accepted golang-github-sigstore-sigstore 1.8.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 16:25:37 +0100 Source: golang-github-sigstore-sigstore Architecture: source Version: 1.8.0-2 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team Changed-By: Simon Josefsson Changes:

Re: Proposal for how to deal with Go/Rust/etc security bugs

Luca Boccassi writes: > On Wed, 24 Jan 2024 at 13:34, Simon Josefsson wrote: >> >> Luca Boccassi writes: >> >> >> Having reflected a bit, and learned through my own experience and >> >> others' insights [1] that Go Build-Depends are not transitive, I'd like >> >> to update my proposal on how

Accepted fwupd 1.9.12-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 06:56:42 -0600 Source: fwupd Built-For-Profiles: noudeb Architecture: source Version: 1.9.12-1 Distribution: unstable Urgency: medium Maintainer: Debian EFI Changed-By: Mario Limonciello Closes: 1059606 1060577

Re: Proposal for how to deal with Go/Rust/etc security bugs

On Wed, 24 Jan 2024 at 13:34, Simon Josefsson wrote: > > Luca Boccassi writes: > > >> Having reflected a bit, and learned through my own experience and > >> others' insights [1] that Go Build-Depends are not transitive, I'd like > >> to update my proposal on how to handle a security bug in any

Accepted foliate 4.~really3.1.0-0.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 10:18:35 -0500 Source: foliate Built-For-Profiles: noudeb Architecture: source Version: 4.~really3.1.0-0.1 Distribution: unstable Urgency: medium Maintainer: Jonathan Carter Changed-By: Jeremy Bícha Closes:

Accepted alire 1.2.1-1.1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 09:09:55 +0100 Source: alire Architecture: source Version: 1.2.1-1.1 Distribution: experimental Urgency: medium Maintainer: Stephane Carrez Changed-By: Nicolas Boulenguez Changes: alire (1.2.1-1.1) experimental;

Accepted itcl4 4.2.4-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 17:50:06 +0300 Source: itcl4 Architecture: source Version: 4.2.4-1 Distribution: unstable Urgency: medium Maintainer: Debian Tcl/Tk Packagers Changed-By: Sergei Golovan Changes: itcl4 (4.2.4-1) unstable;

Accepted camlidl 1.12-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 15:25:08 +0100 Source: camlidl Architecture: source Version: 1.12-1 Distribution: unstable Urgency: medium Maintainer: Debian OCaml Maintainers Changed-By: Stéphane Glondu Changes: camlidl (1.12-1) unstable;

Accepted ocaml-obuild 0.1.11-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 15:48:21 +0100 Source: ocaml-obuild Architecture: source Version: 0.1.11-1 Distribution: unstable Urgency: medium Maintainer: Debian OCaml Maintainers Changed-By: Stéphane Glondu Changes: ocaml-obuild (0.1.11-1)

Accepted sdl2-compat 2.28.50~git20240124~35695bd+ds-1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 13:51:16 + Source: sdl2-compat Architecture: source Version: 2.28.50~git20240124~35695bd+ds-1 Distribution: experimental Urgency: medium Maintainer: Debian SDL packages maintainers Changed-By: Simon McVittie

Accepted python-httpretty 1.1.4-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 14:24:18 +0100 Source: python-httpretty Architecture: source Version: 1.1.4-4 Distribution: unstable Urgency: medium Maintainer: Debian OpenStack Changed-By: Thomas Goirand Closes: 1060686 Changes:

Accepted photoqt 4.2+ds-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 24 Jan 2024 14:58:36 +0100 Source: photoqt Architecture: source Version: 4.2+ds-2 Distribution: unstable Urgency: medium Maintainer: Debian PhotoTools Maintainers Changed-By: Gürkan Myczko Changes: photoqt (4.2+ds-2)

Accepted mozjs115 115.7.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jan 2024 08:51:19 -0500 Source: mozjs115 Built-For-Profiles: noudeb Architecture: source Version: 115.7.0-2 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha Changes:

Re: Proposal for how to deal with Go/Rust/etc security bugs (was: Re: Limited security support for Go/Rust? Re ssh3)

On 2024-01-24 13:26:49 +0100 (+0100), Johannes Schauer Marin Rodrigues wrote: [...] > how does that work for those applications that require rust, go > and friends? Are you proposing that everything that needs them > should be be distributed by a flatpak or similar mechanism > instead? > > Just a

Accepted mistral 17.0.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 18 Dec 2023 09:13:50 +0100 Source: mistral Architecture: source Version: 17.0.0-2 Distribution: unstable Urgency: medium Maintainer: Debian OpenStack Changed-By: Thomas Goirand Closes: 1058182 Changes: mistral (17.0.0-2)

  1   2   >