Bug#1061476: transition: elpi

2024-01-24 Thread julien . puydt
Package: release.debian.org Usertags: transition X-Debbugs-Cc: jpu...@debian.org Severity: normal there is a new upstream for elpi in the OCaml packages, which has an impact on a few Coq packages. I checked locally (using sbuild in a chroot) everything could move fine. Several packages n

Bug#1061473: bookworm-pu: package tinyxml/2.6.2-6+deb12u1

2024-01-24 Thread Guilhem Moulin
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: tiny...@packages.debian.org Control: affects -1 + src:tinyxml [ Reason ] Fix CVE-2023-34194: Reachable assertion (and application exit) via a crafted XML document wi

Processed: bookworm-pu: package tinyxml/2.6.2-6+deb12u1

2024-01-24 Thread Debian Bug Tracking System
Processing control commands: > affects -1 + src:tinyxml Bug #1061473 [release.debian.org] bookworm-pu: package tinyxml/2.6.2-6+deb12u1 Added indication that 1061473 affects src:tinyxml -- 1061473: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061473 Debian Bug Tracking System Contact ow...@

Bug#1061472: bullseye-pu: package tinyxml/2.6.2-4+deb11u2

2024-01-24 Thread Guilhem Moulin
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: tiny...@packages.debian.org Control: affects -1 + src:tinyxml [ Reason ] Fix CVE-2023-34194: Reachable assertion (and application exit) via a crafted XML document wi

Processed: bullseye-pu: package tinyxml/2.6.2-4+deb11u2

2024-01-24 Thread Debian Bug Tracking System
Processing control commands: > affects -1 + src:tinyxml Bug #1061472 [release.debian.org] bullseye-pu: package tinyxml/2.6.2-4+deb11u2 Added indication that 1061472 affects src:tinyxml -- 1061472: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061472 Debian Bug Tracking System Contact ow...@

Bug#1061471: bullseye-pu: package xerces-c/3.2.3+debian-3+deb11u1

2024-01-24 Thread Guilhem Moulin
On Thu, 25 Jan 2024 at 03:54:46 +0100, Guilhem Moulin wrote: > [x] attach debdiff against the package in oldstable Oops, doing that now :-) -- Guilhem. diffstat for xerces-c-3.2.3+debian xerces-c-3.2.3+debian changelog | 12 pat

Bug#1061471: bullseye-pu: package xerces-c/3.2.3+debian-3+deb11u1

2024-01-24 Thread Guilhem Moulin
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: xerce...@packages.debian.org Control: affects -1 + src:xerces-c [ Reason ] xerces-c 3.2.3+debian-3 is vulnerable to CVE-2023-37536 (Integer overflows in DFAContentMo

Processed: bullseye-pu: package xerces-c/3.2.3+debian-3+deb11u1

2024-01-24 Thread Debian Bug Tracking System
Processing control commands: > affects -1 + src:xerces-c Bug #1061471 [release.debian.org] bullseye-pu: package xerces-c/3.2.3+debian-3+deb11u1 Added indication that 1061471 affects src:xerces-c -- 1061471: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061471 Debian Bug Tracking System Con

Re: Upcoming stable point release (12.5)

2024-01-24 Thread Meso Security
Hi,The next point release for "bookworm" (12.5) is scheduled for Saturday,February 10th. Processing of new uploads into bookworm-proposed-updateswill be frozen during the preceding weekend.Regards,Adam publicKey - MesoSecurity@protonmail.ch - 0xA98C9ECA.asc Description: application/pgp-key

Bug#1061465: bookworm-pu: package usbutils/014-1+deb12u1

2024-01-24 Thread Aurelien Jarno
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: usbut...@packages.debian.org Control: affects -1 + src:usbutils [ Reason ] The usbutils package contains a simple shell script called usb-devices to list all USB devi

Processed: bookworm-pu: package usbutils/014-1+deb12u1

2024-01-24 Thread Debian Bug Tracking System
Processing control commands: > affects -1 + src:usbutils Bug #1061465 [release.debian.org] bookworm-pu: package usbutils/014-1+deb12u1 Added indication that 1061465 affects src:usbutils -- 1061465: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061465 Debian Bug Tracking System Contact ow...

Re: Planning for 12.5/11.9

2024-01-24 Thread Adam D. Barratt
On Mon, 2024-01-22 at 15:04 +, Holger Levsen wrote: > On Wed, Jan 17, 2024 at 07:40:56AM +, Jonathan Wiltshire wrote: > > > > It's time to set a date for 12.5 (taking account of the > > > > emergency .4) > > > > and 11.9. I expect this to be the penultimate update for > > > > bullseye > > >

Upcoming oldstable point release (11.9)

2024-01-24 Thread Adam D. Barratt
Hi, The next point release for "bullseye" (11.9) is scheduled for Saturday, February 10th. Processing of new uploads into bullseye-proposed-updates will be frozen during the preceding weekend. Regards, Adam

Upcoming stable point release (12.5)

2024-01-24 Thread Adam D. Barratt
Hi, The next point release for "bookworm" (12.5) is scheduled for Saturday, February 10th. Processing of new uploads into bookworm-proposed-updates will be frozen during the preceding weekend. Regards, Adam