Re: Transparency into private keys of Debian

2024-02-04 Thread Simon Josefsson
Hans-Christoph Steiner writes: > Thanks for digging in here, its very important work! I'd be happy to > contribute where I can. I'm a DD and a core contributor to F-Droid, > where we wrestle with basically the same issues. So we've thought a > lot about these kinds of things, but definitely do

Re: Transparency into private keys of Debian

2024-02-04 Thread Simon Josefsson
Bill Allombert writes: > Le Thu, Feb 01, 2024 at 10:38:03AM +0100, Simon Josefsson a écrit : >> Hi >> >> I'm exploring how to defend against an attacker who can create valid >> signatures for cryptographic private keys (e.g., PGP) that users need to >> trust when using an operating system such a

Re: 64-bit time_t transition in progress

2024-02-04 Thread Steve Langasek
On Mon, Feb 05, 2024 at 08:57:50AM +0200, Andrius Merkys wrote: > On 2024-02-02 19:46, Steve Langasek wrote: > > If there is no new version in experimental, or there is a new version BUT > > the patch against unstable applies cleanly to the version in experimental > > (no fuzz), we upload to experi

Re: 64-bit time_t transition in progress

2024-02-04 Thread Andrius Merkys
Hello, On 2024-02-02 19:46, Steve Langasek wrote: If there is no new version in experimental, or there is a new version BUT the patch against unstable applies cleanly to the version in experimental (no fuzz), we upload to experimental. Otherwise, patches are sent to the BTS but we skip uploadin

Re: postgresql-16; wrong NMU versions (Re: 64-bit time_t transition in progress)

2024-02-04 Thread Otto Kekäläinen
> Re: Steve Langasek > > Christoph Berg > >postgresql-16 (U) > > Please do not upload postgresql-16 before I ack the diff. > > I'll also note that *ALL* nmu diffs I've seen so far are using the > wrong version number in debian/changelog, missing the "~exp1" upload > from the actual upload. I'v

postgresql-16; wrong NMU versions (Re: 64-bit time_t transition in progress)

2024-02-04 Thread Christoph Berg
Re: Steve Langasek > Christoph Berg >postgresql-16 (U) Please do not upload postgresql-16 before I ack the diff. I'll also note that *ALL* nmu diffs I've seen so far are using the wrong version number in debian/changelog, missing the "~exp1" upload from the actual upload. I've imported some

Bug#1063036: ITP: golang-github-casbin-govaluate -- Arbitrary expression evaluation for golang

2024-02-04 Thread Mathias Gibbens
Package: wnpp Severity: wishlist Owner: Mathias Gibbens X-Debbugs-CC: debian-devel@lists.debian.org, debian...@lists.debian.org * Package name: golang-github-casbin-govaluate Version : 1.1.1-1 Upstream Author : Casbin * URL : https://github.com/casbin/govaluate * Licen

Bug#1062977: ITP: ukui-search -- User-wide desktop search of ukui

2024-02-04 Thread xibowen
Package: wnpp Severity: wishlist Owner: xibowen X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: ukui-search Version : 4.0.6.1-1 Upstream Contact: zhangpengfei * URL : https://gitee.com/openkylin/ukui-search * License : GPL Programming Lang: C++