Bug#1036314: mujs 1.1.0-1+deb11u3 flagged for acceptance

package release.debian.org tags 1036314 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: mujs Version:

Bug#1036046: debian-parl 1.9.27+deb11u1 flagged for acceptance

package release.debian.org tags 1036046 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: debian-parl Version:

Bug#1036044: debian-design 3.0.22+deb11u1 flagged for acceptance

package release.debian.org tags 1036044 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: debian-design Version:

Bug#1039933: bookworm-pu: package bepasty/1.0.0-1+deb12u1

ompatibility with Pygments-2.12.0 that I didn't spot during the > testing cycle (my fault) bepasty in bookworm is no longer able to > display the rendered version of text uploads. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.or

Bug#1039862: bookworm-pu: cpdb-libs/1.2.0-2+deb12u1

side effects. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x1964

Bug#1036300: curl 7.74.0-1.3+deb11u8 flagged for acceptance

package release.debian.org tags 1036300 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: curl Version:

Bug#1039609: sudo 1.9.13p3-1+deb12u1 flagged for acceptance

package release.debian.org tags 1039609 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: sudo Version:

Bug#1037078: dh-python 5.20230130+deb12u1 flagged for acceptance

package release.debian.org tags 1037078 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: dh-python Version:

Bug#1039026: cups 2.4.2-3+deb12u1 flagged for acceptance

package release.debian.org tags 1039026 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: cups Version:

Bug#1038041: unixodbc 2.3.11-2+deb12u1 flagged for acceptance

package release.debian.org tags 1038041 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: unixodbc Version:

Upcoming stable point release (12.1)

Hi, The first point release for "bookworm" (12.1) is scheduled for Saturday, July 22nd. Processing of new uploads into bookworm-proposed-updates will be frozen during the preceding weekend. -- Jonathan Wiltshire j...@debian.org Debian

Bug#1037444: kanboard 1.2.26+ds-2+deb12u1 flagged for acceptance

package release.debian.org tags 1037444 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: kanboard Version:

11.8/12.2 planning

On Wed, Jun 28, 2023 at 08:21:54AM +0100, Jonathan Wiltshire wrote: > Subject: 12.1 planning That should, of course, be 11.8/12.2. Sorry. -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 40

12.1 planning

Hi, The proper cadence for 11.8 and 12.2 is the weekend of 30th September 2023. Please indicate your availability for: 23 Sep 30 Sep (preferred) 7 Oct Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http

Re: 11.8 planning

After some discusion we'll leave 11.8 until its proper cadence in September and combine it with 12.2. -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC

Re: 12.1 planning

On Mon, Jun 19, 2023 at 10:04:06PM +0100, Jonathan Wiltshire wrote: > The promised 4-6 weeks following release for 12.1 looks like: > > 8th July (4) > 15th July (5) > 22nd July (6) We'll go for 12.1 only on 22nd July, announcements to follow. -- Jon

Bug#1039622: bookworm-pu: package nvidia-cuda-toolkit/11.8.0-5~deb12u1

CVEs in stable/non-free Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/

Bug#1035475: dkimpy 1.0.6-0+deb11u1 flagged for acceptance

package release.debian.org tags 1035475 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: dkimpy Version:

Bug#1035046: lacme 0.8.0-2+deb11u1 flagged for acceptance

package release.debian.org tags 1035046 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: lacme Version:

Bug#1037990: nvidia-support 20220217+3~deb12u1 flagged for acceptance

package release.debian.org tags 1037990 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: nvidia-support Version:

Bug#1036314: bullseye-pu: package mujs/1.1.0-1+deb11u3

ither way. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1

Bug#1036043: boxer-data 10.8.28+deb11u1 flagged for acceptance

package release.debian.org tags 1036043 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: boxer-data Version:

Bug#1038879: bookworm-pu: package proftpd-dfsg/1.3.8+dfsg-4+deb12u1

you upgrade from 1.3.8+dfsg-4 (i.e. th 12.0 edition of bookworm) note Tiny typo at "the". Otherwise it looks fine, please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw

Bug#1039609: bookworm-pu: package sudo/1.9.13p3-1+deb12u1

format of "ENV=..." event logging, Bug > #1039557. This is an upstream regression since bullseye. The patch > being applied is from Upstream, is already in unstable (since today), > and will also be part of the next upstream release. Please go ahead

Bug#1035046: bullseye-pu: package lacme/0.8.0-2+deb11u1

to handle the transition > via ‘processing’ state. > https://www.rfc-editor.org/rfc/rfc8555#section-7.1.6 Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55

Bug#1039040: bullseye-pu: cups/2.3.3op2-3+deb11u3

to Unstable and nobody complained > yet. > Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D

Bug#1037188: bullseye-pu: package git/2.30.2-1+deb11u3

ropped from sid shortly after the bullseye release, > let's to the same in bullseye. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 12

Bug#1035475: bullseye-pu: package dkimpy/1.0.5-1

Control: tag -1 confirmed On Wed, May 03, 2023 at 01:44:43PM -0400, Scott Kitterman wrote: > This is a new upstream release that we targetted to address bugs that > would generally be suitable for Debian post-release updates. Please go ahead. Thanks, -- Jonathan Wil

Bug#1020303: Ping

go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1

Bug#1035310: bullseye-pu: package xz-utils/5.2.11-0~deb11u1

> > > are also Danish and Ukrainian ones in my backports. > > > > > > Please not that I will not perform uploads to bullseye once bookworm > > > has been released. > > > > Only DE and FR made it into the 5.2 series. > > So we need to deal with

Bug#1038344: request-tracker5 5.0.3+dfsg-3~deb12u1 flagged for acceptance

package release.debian.org tags 1038344 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: request-tracker5 Version:

Bug#1038727: nftables 1.0.6-2+deb12u1 flagged for acceptance

package release.debian.org tags 1038727 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: nftables Version:

Bug#1038000: bookworm-pu: package texlive-bin/2022.20220321.62855-5.1+deb12u1

y default > (Closes: #1036470). Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x1964

Bug#1037444: bookworm-pu: package kanboard/1.2.26+ds-4

Control: tag -1 confirmed On Thu, Jun 15, 2023 at 11:32:06PM -0400, Joe Nahmias wrote: > Attached is a revised debdiff between -2 and -2+deb12u1. > --Joe Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Dev

Bug#1039047: cvs 1.12.13+real-28+deb12u1 flagged for acceptance

package release.debian.org tags 1039047 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: cvs Version:

Bug#1037990: bookworm-pu: package nvidia-support/20220217+3~deb12u1

n them) gets removed during > the upgrade to bookworm. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4

Bug#1036849: gnome-software 43.5-1~deb12u1 flagged for acceptance

package release.debian.org tags 1036849 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: gnome-software Version:

Bug#1038344: bookworm-pu: package request-tracker5/5.0.3+dfsg-2+deb12u1

On Mon, Jun 26, 2023 at 04:42:27PM +1200, Andrew Ruthven wrote: > On Sun, 2023-06-25 at 17:43 +0100, Jonathan Wiltshire wrote: > > Control: tag -1 confirmed > > > > I just happened to look at this; otherwise as it was still tagged > > "moreinfo" it would pro

Bug#1036046: bullseye-pu: package debian-parl/1.9.27+deb11u1

bullseye. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418A

Bug#1036300: Fwd: bullseye-pu: package curl/7.74.0-1.3+deb11u8

: FTP too eager connection reuse > - CVE-2023-27536: GSS delegation too eager connection re-use > - CVE-2023-27538: SSH connection too eager reuse still > * d/p/add_Curl_timestrcmp.patch: New patch to backport Curl_timestrcmp(), > required for CVE-2023-27535. Please go ahead. Thank

Bug#1036044: bullseye-pu: package debian-design/3.0.22+deb11u1

bullseye. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418A

Bug#1036043: bullseye-pu: package boxer-data/10.8.28+deb11u1

available > dependencies and make their binary packages installable again in > bullseye. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5

Bug#1037107: Acknowledgement (pre-unblock: bookworm-pu: mariadb/1:10.11.3-2/+deb12u1)

is to experimental tomorrow and eventually into > bookworm-pu if the release team approves. > > - Otto That MR looks sane; please prepare a backport of 1:10.11.4-1 and send a confirmation source debdiff, and it can most likely be waved through. Thanks, -- Jonathan Wiltshire

Bug#1038344: bookworm-pu: package request-tracker5/5.0.3+dfsg-2+deb12u1

worm" or something, version 5.0.3+dfsg-3~deb12u1, target bookworm. Don't remove the changelog for 5.0.3+dfsg-3. Example: https://release.debian.org/proposed-updates/bookworm_diffs/onionshare_2.6-5~deb12u1.debdiff Other than that, please go ahead. Thanks, -- Jonathan Wiltshire

Bug#1039039: multipath-tools 0.9.4-3+deb12u1 flagged for acceptance

package release.debian.org tags 1039039 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: multipath-tools Version:

Bug#1036849: bookworm-pu: package gnome-software/43.5-1~deb12u1

gt; apps, install a Flatpak app, install a .deb) and seems fine, and the > upstream changes are really minimal, so I uploaded the proposed package. It doesn't seem to be in the queue so something has gone wrong with the upload. Please check and go ahead. Thanks, -- Jonathan Wiltshire

Bug#1038879: bookworm-pu: package proftpd-dfsg/1.3.8+dfsg-4+deb12u1

On Sun, Jun 25, 2023 at 11:06:14AM +0200, Francesco P. Lovergine wrote: > On Sat, Jun 24, 2023 at 05:45:33PM +0100, Jonathan Wiltshire wrote: > > > diff -Nru proftpd-dfsg-1.3.8+dfsg/debian/proftpd-core.prerm > > > proftpd-dfsg-1.3.8+dfsg/debian/proftpd-core.prerm > > &g

Bug#1038140: onionshare 2.6-5~deb12u1 flagged for acceptance

package release.debian.org tags 1038140 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: onionshare Version:

Bug#1038899: nfdump 1.7.1-2+deb12u1 flagged for acceptance

package release.debian.org tags 1038899 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: nfdump Version:

Bug#1038824: openvpn 2.6.3-1+deb12u1 flagged for acceptance

package release.debian.org tags 1038824 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: openvpn Version:

Bug#1038387: groonga 13.0.0+dfsg-3~deb12u1 flagged for acceptance

package release.debian.org tags 1038387 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: groonga Version:

Bug#1039047: bookworm-pu: package cvs/2:1.12.13+real-28+deb12u1

e. This used to be not a > problem because ssh was aliased to rsh but in bookworm it no > longer is. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B

Bug#1039039: bookworm-pu: package multipath-tools/0.9.4-3+deb12u1

Control: tag -1 confirmed On Sat, Jun 24, 2023 at 11:46:44PM +0200, Chris Hofstaedtler wrote: > Packaging bugs #1037292 and #1037539 have been discovered after the release, > this update will fix them in stable. Please go ahead. Thanks, -- Jonathan Wil

Bug#1038616: bookworm-pu: package network-manager-strongswan/1.6.0-1+deb12u1

ction-editor, but using > Gnome Network Settings there was just a message "Error: unable to > load VPN connection editor" instead of the expected config menu. > > The bug was introduced on the integration of the new upstream version > on July 16th 2022. Please go ahe

Bug#1039026: bookworm-pu: cups/2.4.2-3+deb12u1

to Unstable and nobody complained > yet. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D3

Bug#1038879: bookworm-pu: package proftpd-dfsg/1.3.8+dfsg-4+deb12u1

E > '^[[:space:]]*ServerType[[:space:]]+standalone$' $CONFIG_FILE Maybe I missed something important, but this seems a very odd way of doing things. Do you really set up a dummy service unit which is expected to fail in standalone mode, and therefore starts the socket instead? Why not use an Exe

Bug#1038041: bookworm-pu: package unixodbc/2.3.11-2+deb12u1

has > an obsolete conffile. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4

Bug#1038727: bookworm-pu: package nftables/1.0.6-2+deb12u1

listing action. It would be good to mention *what* the patch does and why in the changelog, but in general please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A

Bug#1038899: bookworm-pu: package nfdump/1.7.1-2+deb12u1

lt fix is straight forward and just an error in the option > parsing. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C

Bug#1038906: bookworm-pu: package mailman3/3.3.8-1

a stable-pu. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x1964

Bug#1038824: bookworm-pu: package openvpn/2.6.3-1+deb12u1

n 2.6.3-2 for about a month now, > migrated to testing flawlessly and are part of the recent upstream stable > release. > > There is nothing else in 2.6.3-2 that is not suitable for bookworm, I have > just > changed the version and set the correct branch in gbp.conf Please go ahe

Bug#1038387: bookworm-pu: package groonga/13.0.0+dfsg-2~deb12u1

to bookworm" or similar. With that change, please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C5

Bug#1038154: spip 4.1.9+dfsg-1+deb12u1 flagged for acceptance

package release.debian.org tags 1038154 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: spip Version:

Bug#1037945: aide 0.18.3-1+deb12u1 flagged for acceptance

package release.debian.org tags 1037945 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: aide Version:

Bug#1037542: xerial-sqlite-jdbc 3.40.1.0+dfsg-1+deb12u1 flagged for acceptance

package release.debian.org tags 1037542 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: xerial-sqlite-jdbc Version:

Bug#1038140: bookworm-pu: package onionshare/2.6-5

dition, please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418AAEB

Bug#1037078: closed by Paul Gevers (closing still open unblock requests)

doesn't make sense to carry the patch into trixie. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D

Bug#1036978: bookworm-pu: package node-undici/5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1

/append Please update the changelog to mention the CVE identifiers; other than that, go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394

Re: 11.8 planning

stable candece. I was going to suggest, though, that 11.8 gets pushed back to cadence with 12.2 and we just do 12.1 on its own first. How does that sound? -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 40

12.1 planning

Hi, The promised 4-6 weeks following release for 12.1 looks like: 8th July (4) 15th July (5) 22nd July (6) The first of them would combine with a very stretched 11.8; SRM might prefer to get 11.8 done earlier and leave more time for 12.1 to mature. Thanks, -- Jonathan Wiltshire

11.8 planning

July at a push 1: a shame that joke hasn't worked for some years now Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51

Re: Fwd: Re: Debian 8.3 Jessie KEYEXPIRED 11645052400

debian-keyring package without verification (also breaks the trust path) This is not a user support channel, for further help with these options please see https://www.debian.org/support -- Jonathan Wiltshire j...@debian.org Debian Develo

Re: Debian 8.3 Jessie KEYEXPIRED 11645052400

in/d/debian-archive-keyring/debian-archive-keyring_2017.5+deb9u1_all.deb # dpkg -i debian-archive-keyring_2017.5+deb9u1_all.deb # apt-get update -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw

Bug#1035087: unblock: debian-archive-keyring/2023.3

ive-keyring (2023.3) unstable; urgency=medium + + * Reinstate cleanup of the APT keyrings for buster (Closes: #1033153) + + -- Jonathan Wiltshire Tue, 28 Mar 2023 21:31:07 +0100 + debian-archive-keyring (2023.2) unstable; urgency=medium * Reinstate buster keys for apt as fragments (Clo

Bug#1031279: flask-security 4.0.0-1+deb11u1 flagged for acceptance

package release.debian.org tags 1031279 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: flask-security Version:

Bug#1032999: unblock: mesa/22.3.6-1

d-updates > such that it gets build against the version of llvm-toolchain-15 in testing. > Please, changelog only (with a correct version). That sounds like a plan. J -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.

Bug#1033157: bullseye-pu: package debian-archive-keyring/2021.1.1+deb11u1

Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: debian-archive-keyr...@packages.debian.org, j...@debian.org Control: affects -1 + src:debian-archive-keyring [ Reason ] The bookworm archive keys need adding to

Bug#1033067: unblock: glide/2002.04.10ds1-21

s to make the package > finally reproducible, as the generated shared libraries would change > the optimized objects being linked to depending on the build system > (for host=i386 build=amd64). This feels like something for the first point release, it's not release critical. --

Re: 11.7 planning

On Wed, Mar 15, 2023 at 08:33:47PM +, Jonathan Wiltshire wrote: > We're overdue for 11.7 and need it done with a keyring update included > before bookworm can be released. The wheels are turning on the keyring so > how do dates in April look for everybody? Saturdays are 1st (pro

Bug#1033082: xapian-core 1.4.18-3+deb11u1 flagged for acceptance

package release.debian.org tags 1033082 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: xapian-core Version:

Bug#1026078: bullseye-pu: package ceph/14.2.21-1 CVE-2022-3650

n't match the debdiff on this bug (see https://release.debian.org/proposed-updates/bullseye_diffs/ceph_14.2.21-1+deb11u1.debdiff). Is that intentional or did something go wrong? -- Jonathan Wiltshire j...@debian.org Debian Developer

Bug#1031652: c-ares 1.17.1-1+deb11u2 flagged for acceptance

package release.debian.org tags 1031652 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: c-ares Version:

Bug#1031652: bullseye-pu: package c-ares/1.17.1-1+deb11u1 CVE-2022-4904

seye-seurity but the patch should go into -proposed instead. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 47

Bug#1031279: bullseye-pu: package flask-security/4.0.0-1+deb11u1

ers of Flask based application which using > get_post_logout_redirect and get_post_login_redirect functions might get > an bypassed URL validation and redirect a user to an arbitrary URL. Please go ahead. > +Subject: A (hopeful) fix for possible open-redirect. Nothing like confidence

Bug#1025789: bullseye-pu: wolfssl/4.6.0+p1-0+deb11u1_4.6.0+p1-0+deb11u2.debdiff

ob Barthelmeh > +Origin: backport Origin would typically be a URL, and a description of what the patch fixes (not just a bare CVE number) would be nice. -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debia

Bug#1026078: bullseye-pu: package ceph/14.2.21-1 CVE-2022-3650

go ahead with the distribution label fixed. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418A

Bug#1026945: bullseye-pu: package guix/1.2.0-4

: Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418A

Bug#1025708: bullseye-pu: package debootstrap/1.0.123+deb11u2

eally be justified? Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1

Bug#1032985: unblock: gourmand/1.1.0+really1.1.0~rc3-3

the debdiff please? Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x1964

11.7 planning

Hi, We're overdue for 11.7 and need it done with a keyring update included before bookworm can be released. The wheels are turning on the keyring so how do dates in April look for everybody? Saturdays are 1st (probably too soon), 8th, 15th, 22nd and 29th. Thanks, -- Jonathan Wiltshire

Re: bookworm release date?

way to phase-in a new method before phasing-out the old? It's going to be a straight swap. There's no advantage to over-complicating it, given we don't support skipping suites. -- Jonathan Wiltshire j...@debian.org Debian Developer http://

Bug#1032872: unblock: puppet-module-puppetlabs-mysql/8.1.0-7

On Mon, Mar 13, 2023 at 09:47:43AM +0100, Thomas Goirand wrote: > Please unblock package puppet-module-puppetlabs-mysql It's not blocked, because it has passing tests. If it gets caught up in the hard freeze please reopen. -- Jonathan Wiltshire

Bug#1032976: unblock: node-sqlite3/5.1.5+ds1-1

ript or to achieve a denial-of-service. if a binding > parameter is a crafted object. > (CVE-2022-43441) It's a bit noisy with the other stuff from the upstream release, but I can see the argument for sticking with it rather than cherry-picking. Unblocked. Thanks,

Bug#1032847: unblock: intel-microcode/3.20230214.1

ready to review. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1

Re: EC SRM key for bookworm?

gv1 installed does fall back onto it automatically, so it's true that if a user set that situation up they wouldn't know until the signature failed to validate. The two packages can happily co-exist. I think a release note to that effect ("make sure you have gpgv

Re: EC SRM key for bookworm?

s > anyone affected by this change, I don't think it would be a big issue. There's an exit then, and since we don't support release skipping it's not an issue on upgrades either - only if you were bootstrapping bookworm from jessie, which feels increasingly unlikely these days.

Re: Bug#993590: distro-info-data: Store a mapping from distro to gpg keyring

gt; > by debian-archive-keyring? > > Can someone from the release team answer how this works? Keys move to the removed keyring when they are no longer needed for bootstrapping supported or LTS releases (currently, stretch onwards). That's why there are typ

Bug#1013744: ifenslave 2.13~deb11u1 flagged for acceptance

package release.debian.org tags 1013744 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: ifenslave Version:

Bug#1013744: bullseye-pu: package ifenslave/2.13~deb11u1

bullseye as well: Please go ahead. I'd also be happy with a straight rebuild of testing, given the minimal changes. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 /

Re: Impossible to verify GPG signature on Debian Release file

to the owner. Primary key fingerprint: A428 5295 FC7B 1A81 6000 62A9 605C 66F0 0D6C 9793 Substitute other keyrings for different suites. -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51

<    1   2   3   4   5   6   7   8   9   10   >