Hi Release Managers, I filed #1150479 a few weeks ago in hopes of quickly getting a fix out for #1150302. However, there has been no response. Within a few days I will be ready to upload again, version 1.30.4-1+deb13u5, targeting the planned point release on 14 November.
I would like to request some guidance from you on two questions: - Is it OK if I leave the separate changelog entry for 1.30.4-1+deb13u4 and create a new changelog entry for 1.30.4-1+deb13u5 with the additional fixes, or do I need to consolidate the new fixes/patches I intend for the point release into an updated 1.30.4-1+deb13u4 changelog entry? - Do I file a new bug against release.debian.org for the new upload, or do I attach the new debdiff to this same bug (#1150479)? (Also, if the answer is to file a new bug, should I also then close this bug?) Regards, -Roberto On Fri, Oct 09, 2026 at 09:50:19PM -0400, Roberto C. Sanchez wrote: > Package: release.debian.org > Severity: normal > Tags: trixie > X-Debbugs-Cc: [email protected] > User: [email protected] > Usertags: pu > > [ Reason ] > The patch that I backported for CVE-2026-81524 had a defect, as reported > in #1150302. This upload is a targeted fix of only that defect. Based on > the feedback from Emilio, I have gone ahead and uploaded with a target > distribution of 'trixie' and I would like to see this update published > as a SUA rather than waiting for the next point release. Please see the > discussion in #1150302 for details. > -- Roberto C. Sánchez
