Bug#1008045: bullseye-pu: package node-mermaid/8.7.0+ds+~cs27.17.17-3+deb11u1

2022-06-20 Thread Salvatore Bonaccorso
Hi Yadd, On Sat, May 28, 2022 at 09:20:40PM +0100, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Mon, 2022-03-21 at 14:09 +0100, Yadd wrote: > > node-mermaid is vulnerable to XSS attack (CVE-2021-23648) > > > > Please go ahead. Could you fix as well CVE-2021-43861 in the next po

apache2 update for next buster point release?

2022-06-20 Thread Roberto C . Sánchez
Hello Release Managers, I have been working on updating apache2 for stretch. Most of the open CVEs affect both the stretch and buster versions of apache2 (in addition to the bullseye version). For the buster/bullseye the CVEs have mostly been marked " (Minor issue; can be fixed in point release)

Bug#1012362: transition: luajit

2022-06-20 Thread M. Zhou
Hi Paul, I did not file the corresponding bugs. According to our workflow, will I or the release team file those bugs? If it is me who should file those bugs, I think the default severity should be serious. When all related bugs are resolved by reverse dependencies, I plan to remove ppc64el arch

Bug#1012362: transition: luajit

2022-06-20 Thread Paul Gevers
Hi Mo, On 13-06-2022 05:20, M. Zhou wrote: So let's inform the reverse dependencies to remove ppc64el support, or switch back to lua. Just curious, have you already done so? If yes, care to share the bug report numbers? Otherwise I assume you expected me to file those bugs? Paul elbrus@coc

Bug#1011369: marked as done (transition: gromacs)

2022-06-20 Thread Debian Bug Tracking System
Your message dated Mon, 20 Jun 2022 09:39:14 -0700 with message-id <20220620163914.gd20...@ofb.net> and subject line Re: Bug#1011369: transition: gromacs has caused the Debian Bug report #1011369, regarding transition: gromacs to be marked as done. This means that you claim that the problem has be

Re: 11.4 planning

2022-06-20 Thread Laura Arjona Reina
Hi I'm not sure about Donald's preferences but I could do both dates, so count with press/webmaster in any case. Kind regards El 17 de junio de 2022 21:31:23 CEST, "Adam D. Barratt" escribió: >Hi, > >We're (again) running behind in getting the next point release for >bullseye sorted, and I kno