Bug#1006417: buster-pu: package php-illuminate-database/5.7.27-1+deb10u1

2022-02-24 Thread Thorsten Glaser
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: t...@mirbsd.de [ Reason ] These are two security-related backports by the new maintainer of these binary packages for bullseye and up. I’ve been asked to do this via

Bug#1006402: bullseye-pu: package debian-ports-archive-keyring/2022.02.15~deb11u1

2022-02-24 Thread Aurelien Jarno
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu [ Reason ] The debian-ports-archive-keyring in bullseye does not include the 2023 key that has been created recently. Although it will start being used in ~10 months, it's a good

Bug#1003484: bullseye-pu: package openssl/1.1.1m-0+deb11u1

2022-02-24 Thread Sebastian Andrzej Siewior
On 2022-02-19 17:57:25 [+], Adam D. Barratt wrote: > > Feel free to upload; we'll wait for the d-i ack before accepting the > package into p-u. Okay. The Bullseye package has been uploaded. > Regards, > > Adam Sebastian

Bug#1006377: buster-pu: package lemonldap-ng/2.0.2+ds-7+deb10u7

2022-02-24 Thread Yadd
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu [ Reason ] lemonldap-ng is vulnerable to password bypass (impact critical) in a very unlikely setup (probability very low). CVE-2021-40874 [ Impact ] In such configuration, a

Bug#1006371: bullseye-pu: package lemonldap-ng/2.0.11+ds-4+deb11u1

2022-02-24 Thread Yadd
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu [ Reason ] lemonldap-ng is vulnerable to password bypass (impact critical) in a very unlikely setup (probability very low). CVE-2021-40874 [ Impact ] In such configuration, a

Bug#1006361: transition: vala

2022-02-24 Thread Jeremy Bicha
Package: release.debian.org User: release.debian@packages.debian.org Usertags: transition X-Debbugs-Cc: v...@packages.debain.org Severity: normal I request permission to do the vala transition. Small transition; binNMUs are enough. Completed in Ubuntu earlier this month.

Processed: ruby3.0

2022-02-24 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > block 1004915 by 1006352 Bug #1004915 [release.debian.org] transition: ruby2.7-rm 1004915 was blocked by: 1001217 1005426 1005947 1005448 1006286 1006119 1004915 was not blocking any bugs. Added blocking bug(s) of 1004915: 1006352 > thanks

Bug#1004915: transition: ruby2.7-rm

2022-02-24 Thread Paul Gevers
Hi Antonio, Thanks for taking care. On 24-02-2022 02:43, Antonio Terceiro wrote: diaspora-installer can just be removed, it's already on the autoremoval list. also fails without the new ruby-defaults. I'm not seeing that. The 2022-02-24 01:38:19 UTC reference run on amd64 passed. I