multiple RPKI-related vulnerabilities in stable

2021-11-28 Thread SEEWEB - Marco d'Itri
https://rpki.exposed/ lists a long number of vulnerabilities affecting software in Debian stable: fort-validator, cfrpki, and rpki-client. (Not routinator, because it is an unpackagable mess of Rust.) (To make a long story short, RPKI is a way to digitally sign BGP routes and all network

Bug#1000785: bullseye-pu: package curl/7.74.0-1.3+deb11u1

2021-11-28 Thread Helmut Grohne
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: Alessandro Ghedini , Samuel Henrique , Sergio Durigan Junior libcurl4-gnutls-dev is not multiarch-coinstallable in bullseye despite being marked Multi-Arch: same.

Bug#1000299: marked as done (nmu: xmlsec1_1.2.33-1)

2021-11-28 Thread Debian Bug Tracking System
Your message dated Sun, 28 Nov 2021 18:57:06 +0100 with message-id <73e6f360-217f-af34-739f-c3077f45d...@debian.org> and subject line fixed has caused the Debian Bug report #1000299, regarding nmu: xmlsec1_1.2.33-1 to be marked as done. This means that you claim that the problem has been dealt

Bug#1000511: bullseye-pu: package debian-edu-config/2.11.56+deb11u2

2021-11-28 Thread Holger Levsen
On Wed, Nov 24, 2021 at 01:29:50PM +0100, Wolfgang Schweer wrote: > The package will be uploaded soonish by Holger Levsen. I've done this now. -- cheers, Holger ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D

Re: delayed package removal from testing

2021-11-28 Thread Jonas Smedegaard
Quoting Paul Gevers (2021-11-28 14:09:22) > On 28-11-2021 11:41, Jonas Smedegaard wrote: > > I wonder why debian-parl was removed from testing today, since (as I > > understand it) the reason for removal was solved 2 days ago. > > parl-desktop-eu in testing at the time of removal had a

Processed: lets make things clearer

2021-11-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > # patch available but needs to be uploaded in sync > unblock 976811 by 977373 Bug #976811 [release.debian.org] transition: php8.1 976811 was blocked by: 1000650 978457 977388 977378 977373 977340 977404 977337 977384 977376 977186 977401 977403

Re: delayed package removal from testing

2021-11-28 Thread Paul Gevers
Hi Jonas, On 28-11-2021 11:41, Jonas Smedegaard wrote: I wonder why debian-parl was removed from testing today, since (as I understand it) the reason for removal was solved 2 days ago. parl-desktop-eu in testing at the time of removal had a dependency on iitalian. It's iitalian that has an

delayed package removal from testing

2021-11-28 Thread Jonas Smedegaard
Hi release team, I wonder why debian-parl was removed from testing today, since (as I understand it) the reason for removal was solved 2 days ago. Not complaining - I know it should only be a matter of few days be getting re-added automatically - my concern is if something similar happens

Bug#1000736: bullseye-pu: package poco/1.10.0-6

2021-11-28 Thread Jochen Sprickerhof
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: jspri...@debian.org [ Reason ] Compared to old-stable, libpoco-dev installs the cmake modules into multi arch directories but I introduced a bug with it by