Accepted xserver-xorg-video-geode 2.11.21-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 28 Mar 2024 07:32:53 +0200 Source: xserver-xorg-video-geode Architecture: source Version: 2.11.21-3 Distribution: unstable Urgency: medium Maintainer: Martin-Éric Racine Changed-By: Martin-Éric Racine Closes: 1067861

Re: Debian openssh option review: considering splitting out GSS-API key exchange

Hey. On Tue, 2024-04-02 at 01:30 +0100, Colin Watson wrote: > All the same, I'm aware that some people now depend on having this > facility in Debian's main openssh package: I get enough occasional > bug > reports to convince me that it's still in use. Being one of those people, and having even

Bug#1068215: ITP: python-undetected-chromedriver -- test undetected chromedrive

Package: wnpp Severity: wishlist Owner: Josenilson Ferreira da Silva X-Debbugs-Cc: debian-devel@lists.debian.org, nilsonfsi...@hotmail.com * Package name: python-undetected-chromedriver Version : 3.5.5 Upstream Contact: UltrafunkAmsterdam * URL :

Accepted ukui-biometric-auth 1.2.2.2-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 02 Apr 2024 11:46:17 +0800 Source: ukui-biometric-auth Architecture: source Version: 1.2.2.2-1 Distribution: unstable Urgency: medium Maintainer: Kylin Team Changed-By: handsome_feng Closes: 1066602 Changes:

Bug#1068212: ITP: python-grpcio-status -- Status proto mapping for gRPC

Package: wnpp Severity: wishlist Owner: Yogeswaran Umasankar X-Debbugs-Cc: debian-devel@lists.debian.org, kd8...@gmail.com * Package name: python-grpcio-status Version : 1.62.1 Upstream Contact: The gRPC Authors * URL : https://github.com/OctopusAI/grpcio-status *

Accepted inn2 2.7.2~20240325-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 02 Apr 2024 01:17:02 +0200 Source: inn2 Architecture: source Version: 2.7.2~20240325-3 Distribution: unstable Urgency: medium Maintainer: Marco d'Itri Changed-By: Marco d'Itri Changes: inn2 (2.7.2~20240325-3) unstable;

Debian openssh option review: considering splitting out GSS-API key exchange

[I've CCed openssh-unix-dev for awareness, but set Mail-Followup-To to just debian-devel and debian-ssh to avoid potentially spamming them with a long discussion. If you choose to override this then that's your call, but please be mindful of upstream's time.] Following the xz-utils backdoor, I'm

Re: Debian openssh option review: considering splitting out GSS-API key exchange

Christoph Anton Mitterer writes: > Actually I think that most sites where I "need"/use GSSAPI... only > require the ticket for AFS, and do actually allow pubkey auth (but > right now, one doesn't have AFS access then). In past discussions of this patch, this has not been the case. One of the

Accepted armci-mpi 0.3.1~beta-7.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sat, 30 Mar 2024 23:17:18 +0100 Source: armci-mpi Architecture: source Version: 0.3.1~beta-7.1 Distribution: unstable Urgency: medium Maintainer: Debian Science Maintainers Changed-By: Samuel Thibault Closes: 1066227 Changes:

Accepted php-mock 2.5.0-1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 19:56:47 -0400 Source: php-mock Architecture: source Version: 2.5.0-1 Distribution: experimental Urgency: medium Maintainer: Debian PHP PEAR Maintainers Changed-By: James Valleroy Closes: 1039799 Changes:

Accepted xcffib 1.5.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 23:49:33 +0200 Source: xcffib Architecture: source Version: 1.5.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Alexandre Detiste Closes: 1052375 1054820 Changes: xcffib

Accepted sigrok-firmware-fx2lafw 0.1.7-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 22:46:52 +0100 Source: sigrok-firmware-fx2lafw Architecture: source Version: 0.1.7-3 Distribution: unstable Urgency: medium Maintainer: Debian Electronics Packaging Team Changed-By: Jonathan McDowell Changes:

Accepted abseil 20230802.1-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 17:50:22 -0400 Source: abseil Architecture: source Version: 20230802.1-4 Distribution: unstable Urgency: medium Maintainer: Benjamin Barenblat Changed-By: Benjamin Barenblat Changes: abseil (20230802.1-4)

Accepted golang-github-korandiz-v4l 1.1.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 31 Mar 2024 20:48:11 +0800 Source: golang-github-korandiz-v4l Architecture: source Version: 1.1.0-2 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team Changed-By: Maytham Alsudany Changes:

Accepted eo-spell 3.7-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 01 Apr 2024 23:38:30 +0200 Source: eo-spell Architecture: source Version: 3.7-1 Distribution: unstable Urgency: medium Maintainer: Agustin Martin Domingo Changed-By: Agustin Martin Domingo Changes: eo-spell (3.7-1)

Re: Debian openssh option review: considering splitting out GSS-API key exchange

In days of yore (Tue, 02 Apr 2024), Colin Watson thus quoth: > TCP wrappers > Not used hosts.{allow,deny} for the last 17 years (since I started my current employment) so I am biased. Honest opinion is that firewall and fail2ban have pretty much obsoleted TCP wrappers. > SELinux >

Re: Debian openssh option review: considering splitting out GSS-API key exchange

Damien Miller wrote: > Another thing we're considering in OpenSSH is changing how we integrate > with PAM. PAM's API demands loading modules into the authenticating > process' address space, but obviously we've just been reminded that this > is risky. This was a long-standing problem with

Accepted schedule 1.2.1-0.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 02 Apr 2024 00:41:57 +0200 Source: schedule Architecture: source Version: 1.2.1-0.1 Distribution: unstable Urgency: medium Maintainer: Donncha O'Cearbhaill Changed-By: Alexandre Detiste Changes: schedule (1.2.1-0.1)

Re: Debian openssh option review: considering splitting out GSS-API key exchange

On Tue, 2 Apr 2024, Colin Watson wrote: [I'm not subscribed to the debian-* lists, please Cc me in replies if you want me to see them] > [I've CCed openssh-unix-dev for awareness, but set Mail-Followup-To to > just debian-devel and debian-ssh to avoid potentially spamming them > with a long

Accepted faudio 24.04+dfsg-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 18:01:28 +0200 Source: faudio Architecture: source Version: 24.04+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Wine Team Changed-By: Stephen Kitt Changes: faudio (24.04+dfsg-1) unstable;

Accepted procmail 3.24+really3.22-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 19:35:00 +0200 Source: procmail Architecture: source Version: 3.24+really3.22-1 Distribution: unstable Urgency: medium Maintainer: Santiago Vila Changed-By: Santiago Vila Closes: 1028356 Changes: procmail

Accepted opm-simulators 2023.10+ds-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 01 Apr 2024 19:47:56 +0200 Source: opm-simulators Architecture: source Version: 2023.10+ds-3 Distribution: unstable Urgency: medium Maintainer: Debian Science Maintainers Changed-By: Markus Blatt Changes: opm-simulators

Accepted python-selenium 4.19.0+dfsg-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 19:08:18 +0200 Source: python-selenium Architecture: source Version: 4.19.0+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Sascha Girrulat Changed-By: Carsten Schoenert Changes: python-selenium

Accepted pdl 1:2.086-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 19:48:34 +0200 Source: pdl Architecture: source Version: 1:2.086-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group Changed-By: Bas Couwenberg Changes: pdl (1:2.086-1) unstable;

Accepted editorconfig-core 0.12.7-0.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 14:31:14 -0400 Source: editorconfig-core Built-For-Profiles: noudeb Architecture: source Version: 0.12.7-0.1 Distribution: unstable Urgency: medium Maintainer: Jonas Smedegaard Changed-By: Jeremy Bícha Changes:

Accepted poke 4.0+dfsg-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 16:45:29 -0400 Source: poke Architecture: source Version: 4.0+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Poke Team Changed-By: Sergio Durigan Junior Changes: poke (4.0+dfsg-1) unstable;

Re: xz backdoor

On Mar 31, 2024 2:37 PM, Pierre-Elliott Bécue Wrote: > The PGP submodule of a Yubikey can host 3 keys, one signing, one > authent, and one encrypt. ISTR accessing the signing key is always > prompting for the PIN. Same for the encryption key. (I think both can be > configured otherwise)

Re: Validating tarballs against git repositories

On Mon, Apr 01, 2024 at 02:31:47AM +0200, gregor herrmann wrote: > That's not mutually exclusive. When adding an additional git remote > and using gbp-import-orig's --upstream-vcs-tag you get the best of > both worlds. And this will error out if there are unexpected changes in the tarball? How

Accepted rust-zxcvbn 2.2.2-2 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 06:21:52 -0400 Source: rust-zxcvbn Architecture: source Version: 2.2.2-2 Distribution: experimental Urgency: medium Maintainer: Debian Rust Maintainers Changed-By: Alexander Kjäll Changes: rust-zxcvbn (2.2.2-2)

Re: Validating tarballs against git repositories

On Mon, Apr 01, 2024 at 12:03:48PM +0200, Bastian Blank wrote: > On Mon, Apr 01, 2024 at 02:31:47AM +0200, gregor herrmann wrote: > > That's not mutually exclusive. When adding an additional git remote > > and using gbp-import-orig's --upstream-vcs-tag you get the best of > > both worlds. > And

Re: Validating tarballs against git repositories

On Sat, Mar 30, 2024 at 08:44:36AM -0700, Russ Allbery wrote: > Luca Boccassi writes: > > > In the end, massaged tarballs were needed to avoid rerunning autoconfery > > on twelve thousands different proprietary and non-proprietary Unix > > variants, back in the day. In 2024, we do dh_autoreconf

Accepted meld 3.22.2-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 12:09:55 -0400 Source: meld Built-For-Profiles: noudeb Architecture: source Version: 3.22.2-1 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha Changes: meld

Re: Validating tarballs against git repositories

On Mon, Apr 01, 2024 at 06:36:30PM +0200, Vincent Bernat wrote: > > I think that if Debian was using git instead of the generated tarball, this > part of the backdoor would have just been included in the git repository as > well. If we were able to magically switch everything to git (and we won't,

Accepted licenserecon 1.10.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 16:42:00 +0100 Source: licenserecon Architecture: source Version: 1.10.1 Distribution: unstable Urgency: medium Maintainer: Peter Blackman Changed-By: Peter Blackman Changes: licenserecon (1.10.1) unstable;

Accepted mini-buildd 2.1.14 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 18:40:41 +0200 Source: mini-buildd Architecture: source Version: 2.1.14 Distribution: experimental Urgency: medium Maintainer: Stephan Sürken Changed-By: Stephan Sürken Changes: mini-buildd (2.1.14)

Accepted pykeepass 4.0.7-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 12:52:27 -0400 Source: pykeepass Built-For-Profiles: noudeb Architecture: source Version: 4.0.7-2 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Jeremy Bícha Changes: pykeepass

Accepted phosh 0.37.1-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 01 Apr 2024 16:41:33 +0200 Source: phosh Architecture: source Version: 0.37.1-1 Distribution: unstable Urgency: medium Maintainer: DebianOnMobile Maintainers Changed-By: Guido Günther Changes: phosh (0.37.1-1) unstable;

Accepted fwupd-efi 1:1.5-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 12:32:31 -0500 Source: fwupd-efi Built-For-Profiles: noudeb Architecture: source Version: 1:1.5-3 Distribution: unstable Urgency: medium Maintainer: Debian EFI Changed-By: Mario Limonciello Changes: fwupd-efi

Accepted gnome-online-accounts 3.50.0-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 13:34:08 -0400 Source: gnome-online-accounts Built-For-Profiles: noudeb Architecture: source Version: 3.50.0-4 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha

Accepted dh-python 6.20240401 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 13:23:32 -0400 Source: dh-python Architecture: source Version: 6.20240401 Distribution: unstable Urgency: medium Maintainer: Piotr Ożarowski Changed-By: Stefano Rivera Closes: 883004 1066833 1067822 Changes:

Accepted rust-proc-macro-crate-1 1.3.1-1 (source amd64) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 12 Feb 2024 17:09:07 -0500 Source: rust-proc-macro-crate-1 Binary: librust-proc-macro-crate-1-dev Architecture: source amd64 Version: 1.3.1-1 Distribution: experimental Urgency: medium Maintainer: Debian Rust Maintainers

Accepted glw 8.0.0-3 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 31 Mar 2024 13:00:14 +0200 Source: glw Binary: libglw1-mesa-dev libglw1t64-mesa libglw1t64-mesa-dbgsym Architecture: source amd64 Version: 8.0.0-3 Distribution: unstable Urgency: medium Maintainer: Debian X Strike Force

Accepted poke 4.0+dfsg-1~exp1 (source all amd64) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 31 Mar 2024 15:55:19 -0400 Source: poke Binary: elpa-poke libpoke-dev libpoke1 libpoke1-dbgsym poke poke-dbgsym vim-poke Architecture: source all amd64 Version: 4.0+dfsg-1~exp1 Distribution: experimental Urgency: medium

Accepted mxml 4.0.1-1 (source arm64) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sat, 30 Mar 2024 11:25:14 + Source: mxml Binary: libmxml-dev libmxml4 libmxml4-dbgsym Architecture: source arm64 Version: 4.0.1-1 Distribution: experimental Urgency: medium Maintainer: Alastair McKinstry Changed-By: Alastair

Accepted ocrmypdf 16.1.2+dfsg1-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 31 Mar 2024 15:25:33 +0200 Source: ocrmypdf Architecture: source Version: 16.1.2+dfsg1-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Anton Gladky Closes: 1054243 1061264 Changes:

Accepted python-pywebview 5.0.5+dfsg-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 14:51:18 -0400 Source: python-pywebview Built-For-Profiles: noudeb Architecture: source Version: 5.0.5+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Jeremy Bícha Closes:

Accepted free42-nologo 3.1.7+ds-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 21:13:17 +0200 Source: free42-nologo Architecture: source Version: 3.1.7+ds-1 Distribution: unstable Urgency: medium Maintainer: Christian Stalp Changed-By: Stephen Kitt Changes: free42-nologo (3.1.7+ds-1)

Accepted pikepdf 8.14.0+dfsg-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 31 Mar 2024 10:15:30 +0200 Source: pikepdf Architecture: source Version: 8.14.0+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Anton Gladky Changes: pikepdf (8.14.0+dfsg-1)

Bug#1068206: ITP: jolt -- A multi core friendly rigid body physics and collision detection library, written in C++, suitable for games and VR applications.

Package: wnpp Severity: wishlist Owner: Bret Curtis X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: jolt Version : 4.0.2 Upstream Contact: Jorrit Rouwe * URL : https://github.com/jrouwe/JoltPhysics * License : MIT Programming Lang: C++

Accepted pdfgrep 2.2.0-0.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 26 Mar 2024 11:57:16 -0300 Source: pdfgrep Architecture: source Version: 2.2.0-0.1 Distribution: unstable Urgency: medium Maintainer: Christoph Egger Changed-By: Raul Cheleguini Closes: 103 Changes: pdfgrep (2.2.0-0.1)

Re: Validating tarballs against git repositories

On 31/03/24 08:59, Sven Joachim wrote: The coreutils bootstrap script fetches files over the network, so it is not possible to build the Debian package from upstream git tags. At the very least it would lack any translations, and there is also the problem of the gnulib submodule. Aren't these

Re: xz backdoor

On Mon, Apr 01, 2024 at 04:47:05PM +0100, Colin Watson wrote: > On Mon, Apr 01, 2024 at 08:13:58AM -0700, Russ Allbery wrote: > > Bastian Blank writes: > > > I don't understand what you are trying to say. If we add a hard check > > > to lintian for m4/*, set it to auto-reject, then it is fully

Accepted swell-foop 1:46.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 13:28:36 -0400 Source: swell-foop Built-For-Profiles: noudeb Architecture: source Version: 1:46.0-1 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha Changes:

Accepted re2 20240401-1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 13:19:43 -0400 Source: re2 Architecture: source Version: 20240401-1 Distribution: experimental Urgency: medium Maintainer: Stefano Rivera Changed-By: Stefano Rivera Changes: re2 (20240401-1) experimental

Accepted secrets 9.3-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 13:23:03 -0400 Source: secrets Built-For-Profiles: noudeb Architecture: source Version: 9.3-1 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha Changes:

Re: Firmwares (was Re: Bits from the DPL)

On Mon, Apr 01, 2024 at 06:27:29PM +0200, Vincent Bernat wrote: > On 2024-04-01 18:05, Jonathan Carter wrote: > > The included firmware contributed to Debian 12 being a huge success, > > but it wasn't the only factor. > > Unfortunately, the shipped firmwares are now almost a year old, including >

Accepted blueprint-compiler 0.12.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 14:18:15 -0400 Source: blueprint-compiler Built-For-Profiles: noudeb Architecture: source Version: 0.12.0-1 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha

Accepted aegean 0.16.0+dfsg-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 01 Apr 2024 19:49:51 +0200 Source: aegean Architecture: source Version: 0.16.0+dfsg-4 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team Changed-By: Sascha Steinbiss Closes: 1068178 Changes:

Accepted fwupd-efi 1:1.5-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 15:27:41 -0500 Source: fwupd-efi Built-For-Profiles: noudeb Architecture: source Version: 1:1.5-4 Distribution: unstable Urgency: medium Maintainer: Debian EFI Changed-By: Mario Limonciello Changes: fwupd-efi

Re: Bits from the DPL

Hi Jonathan, just a brief correction: On 2024-04-01 18:05, Jonathan Carter wrote: > I don't want to single out DSA there, it's difficult and affects many > other teams. The Salsa CI team also spent a lot of resources (time and > money wise) to extend testing on AMD GPUs and other AMD hardware.

Accepted libjxmpp-java 1.0.1-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 15:13:17 -0400 Source: libjxmpp-java Architecture: source Version: 1.0.1-4 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers Changed-By: James Valleroy Closes: 1057520 Changes:

Accepted latexmk 1:4.84-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 21:21:17 +0200 Source: latexmk Architecture: source Version: 1:4.84-1 Distribution: unstable Urgency: medium Maintainer: Debian TeX Task Force Changed-By: Hilmar Preusse Changes: latexmk (1:4.84-1) unstable;

Accepted libei 1.2.1-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 16:55:38 -0400 Source: libei Built-For-Profiles: noudeb Architecture: source Version: 1.2.1-1 Distribution: unstable Urgency: medium Maintainer: Debian X Strike Force Changed-By: Jeremy Bícha Changes: libei

Accepted pykeepass 4.0.7-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 12:31:36 -0400 Source: pykeepass Built-For-Profiles: noudeb Architecture: source Version: 4.0.7-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team Changed-By: Jeremy Bícha Closes: 1067506

Re: Validating tarballs against git repositories

On 2024-04-01 12:44, Bastian Blank wrote: So in the end you still need to manually review all the stuff that the tarball contains extra to the git. And for that I don't see that it actually gives some helping hands and makes it easier. So I really don't see how this makes the problem in hand

Accepted breezy 3.3.6-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 17:13:39 +0100 Source: breezy Architecture: source Version: 3.3.6-1 Distribution: unstable Urgency: low Maintainer: Debian Breezy Maintainers Changed-By: Jelmer Vernooij Changes: breezy (3.3.6-1) unstable;

Accepted urlwatch 2.28-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 29 Mar 2024 21:56:51 +0100 Source: urlwatch Architecture: source Version: 2.28-3 Distribution: unstable Urgency: medium Maintainer: Maxime Werlen Changed-By: Maxime Werlen Closes: 1068014 Changes: urlwatch (2.28-3)

Accepted whois 5.5.22 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 01 Apr 2024 20:14:41 +0200 Source: whois Architecture: source Version: 5.5.22 Distribution: unstable Urgency: medium Maintainer: Marco d'Itri Changed-By: Marco d'Itri Changes: whois (5.5.22) unstable; urgency=medium . *

Accepted libzypp 17.32.1-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 14:21:30 +0100 Source: libzypp Architecture: source Version: 17.32.1-1 Distribution: unstable Urgency: medium Maintainer: RPM packaging team Changed-By: Luca Boccassi Changes: libzypp (17.32.1-1) unstable;

Accepted nvidia-modprobe 545.29.06-1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 01 Apr 2024 22:37:25 +0200 Source: nvidia-modprobe Architecture: source Version: 545.29.06-1 Distribution: experimental Urgency: medium Maintainer: Debian NVIDIA Maintainers Changed-By: Andreas Beckmann Changes:

Accepted lincity-ng 2.10.1-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 18:58:18 +0200 Source: lincity-ng Architecture: source Version: 2.10.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Games Team Changed-By: Alexandre Detiste Closes: 1042506 Changes: lincity-ng

Accepted template-glib 3.36.2-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 13:17:06 -0400 Source: template-glib Built-For-Profiles: noudeb Architecture: source Version: 3.36.2-1 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha

autoreconf --force not forcing (was Re: Validating tarballs against git repositories)

Hi! On Sat, 2024-03-30 at 14:16:21 +0100, Guillem Jover wrote: > Let's try to go in detail on how this was done on the build system > side (I'm doing this right now, as previously only had skimmed over > the process). > > The build system hook was planted in the tarball by adding a modified >

Accepted bsdgames 2.17-31 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 01 Apr 2024 18:10:52 +0200 Source: bsdgames Architecture: source Version: 2.17-31 Distribution: unstable Urgency: medium Maintainer: Debian Games Team Changed-By: Dr. Tobias Quathamer Closes: 1066266 Changes: bsdgames

Accepted bolt 0.9.7-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 14:13:27 -0400 Source: bolt Built-For-Profiles: noudeb Architecture: source Version: 0.9.7-1 Distribution: unstable Urgency: medium Maintainer: Debian freedesktop.org maintainers Changed-By: Jeremy Bícha

Accepted uwsgi 2.0.24-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 22:01:33 +0200 Source: uwsgi Architecture: source Version: 2.0.24-3 Distribution: unstable Urgency: medium Maintainer: uWSGI packaging team Changed-By: Jonas Smedegaard Closes: 772386 1053196 1065996 Changes:

Accepted atomes 1.1.14-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 20 Mar 2024 16:40:00 +0200 Source: atomes Architecture: source Version: 1.1.14-1 Distribution: unstable Urgency: medium Maintainer: Debichem Team Changed-By: Sébastien Le Roux Changes: atomes (1.1.14-1) unstable;

Accepted inn2 2.7.2~20240325-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 01 Apr 2024 19:23:25 +0200 Source: inn2 Architecture: source Version: 2.7.2~20240325-2 Distribution: unstable Urgency: medium Maintainer: Marco d'Itri Changed-By: Marco d'Itri Changes: inn2 (2.7.2~20240325-2) unstable;

Re: Validating tarballs against git repositories

On Mon, Apr 01, 2024 at 06:36:30PM +0200, Vincent Bernat wrote: > On 2024-04-01 12:44, Bastian Blank wrote: > > So in the end you still need to manually review all the stuff that the > > tarball contains extra to the git. And for that I don't see that it > > actually gives some helping hands and

Debian packaging for git-credential-libsecret

Hi. It'd be great to package Git credential helper git-credential-libsecret in Debian. There's a patch prepared, but it needs the attention of a Debian developer. Is anyone here able to help? https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878599 Kind regards -M

Accepted gauche 0.9.14-2 (source amd64 all) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 28 Mar 2024 15:42:59 +0100 Source: gauche Binary: gauche gauche-dbgsym gauche-dev gauche-dev-dbgsym gauche-doc gauche-gdbm gauche-gdbm-dbgsym gauche-zlib gauche-zlib-dbgsym libgauche-0.98-0 libgauche-0.98-0-dbgsym

Accepted hylafax 3:6.0.7-7 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 14:34:59 +0200 Source: hylafax Architecture: source Version: 3:6.0.7-7 Distribution: unstable Urgency: medium Maintainer: Giuseppe Sacco Changed-By: Giuseppe Sacco Closes: 688560 1020349 Changes: hylafax

Accepted libgav1 0.19.0-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 15:14:00 +0200 Source: libgav1 Architecture: source Version: 0.19.0-2 Distribution: unstable Urgency: medium Maintainer: Debian Multimedia Maintainers Changed-By: Sebastian Ramacher Closes: 1068180 Changes:

Re: Validating tarballs against git repositories

On Mon, Apr 01, 2024 at 05:24:45PM +0200, Simon Josefsson wrote: > Colin Watson writes: > > On Mon, Apr 01, 2024 at 11:33:06AM +0200, Simon Josefsson wrote: > >> Running ./bootstrap in a tarball may lead to different results than the > >> maintainer running ./bootstrap in pristine git. It is the

Accepted varnish 7.1.1-1.2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 01 Apr 2024 17:56:26 +0200 Source: varnish Architecture: source Version: 7.1.1-1.2 Distribution: unstable Urgency: medium Maintainer: Varnish Package Maintainers Changed-By: Marco d'Itri Closes: 1054484 Changes: varnish

Re: xz backdoor

Hi On Sun, Mar 31, 2024 at 07:48:35PM +0300, Adrian Bunk wrote: > > What we can do unilaterally is to disallow vendoring those files. > These files are supposed to be vendored in release tarballs, > the sane approach for getting rid of such vendored files would > be to discourage tarball uploads

Accepted shared-mime-info 2.4-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 07:58:12 -0400 Source: shared-mime-info Built-For-Profiles: noudeb Architecture: source Version: 2.4-4 Distribution: unstable Urgency: medium Maintainer: Debian freedesktop.org maintainers Changed-By: Jeremy

Accepted r-cran-d3network 0.5.2.1-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 13:48:26 +0200 Source: r-cran-d3network Architecture: source Version: 0.5.2.1-4 Distribution: unstable Urgency: medium Maintainer: Debian R Packages Maintainers Changed-By: Joost van Baal-Ilić Changes:

Re: Validating tarballs against git repositories

On Mon, Apr 01, 2024 at 04:10:55PM +0200, Alexandre Detiste wrote: > Le lun. 1 avr. 2024 à 15:49, Colin Watson a écrit : > > > > The practice of running "autoreconf -fi" or similar via dh-autoreconf > > has worked extremely well at scale in Debian. I'm sure there are > > complex edge cases where

Re: xz backdoor

Bastian Blank writes: > I don't understand what you are trying to say. If we add a hard check > to lintian for m4/*, set it to auto-reject, then it is fully irrelevant > if the upload is a tarball or git. Er, well, there goes every C package for which I'm upstream, all of which have M4 macros

Accepted smb4k 3.2.70-1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 11:37:31 +0200 Source: smb4k Architecture: source Version: 3.2.70-1 Distribution: experimental Urgency: medium Maintainer: Debian KDE Extras Team Changed-By: Pino Toscano Changes: smb4k (3.2.70-1) experimental;

Accepted debian-reference 2.121 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 18:24:03 +0900 Source: debian-reference Architecture: source Version: 2.121 Distribution: unstable Urgency: medium Maintainer: Osamu Aoki Changed-By: Osamu Aoki Changes: debian-reference (2.121) unstable;

Accepted gdm3 46.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 08:03:50 -0400 Source: gdm3 Built-For-Profiles: noudeb Architecture: source Version: 46.0-1 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha Changes: gdm3

Accepted gnome-control-center 1:46.0.1-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 09:30:57 -0400 Source: gnome-control-center Built-For-Profiles: noudeb Architecture: source Version: 1:46.0.1-1 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha

Accepted gnome-online-accounts 3.50.0-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 09:29:38 -0400 Source: gnome-online-accounts Built-For-Profiles: noudeb Architecture: source Version: 3.50.0-3 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha

Accepted gobject-introspection 1.80.1-1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 10:28:10 -0400 Source: gobject-introspection Built-For-Profiles: noudeb Architecture: source Version: 1.80.1-1 Distribution: experimental Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy

Accepted gnote 46.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 11:10:15 -0400 Source: gnote Built-For-Profiles: noudeb Architecture: source Version: 46.0-1 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha Changes: gnote

Accepted gnome-weather 46.0-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 11:05:09 -0400 Source: gnome-weather Built-For-Profiles: noudeb Architecture: source Version: 46.0-1 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers Changed-By: Jeremy Bícha Changes:

Accepted gap-ctbllib 1.3.9-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 01 Apr 2024 14:51:56 +0200 Source: gap-ctbllib Architecture: source Version: 1.3.9-1 Distribution: unstable Urgency: medium Maintainer: Bill Allombert Changed-By: Bill Allombert Changes: gap-ctbllib (1.3.9-1) unstable;

Re: xz backdoor

On Mon, Apr 01, 2024 at 08:13:58AM -0700, Russ Allbery wrote: > Bastian Blank writes: > > I don't understand what you are trying to say. If we add a hard check > > to lintian for m4/*, set it to auto-reject, then it is fully irrelevant > > if the upload is a tarball or git. > > Er, well, there

  1   2   >