Re: Security releases for ecosystems that use static linking

2024-03-18 Thread Thorsten Alteholz
On Mon, 18 Mar 2024, Emilio Pozuelo Monfort wrote: One solution which has been discussed in the past is to import a full copy of stable towards stable-security at the beginning of each release cycle, but that is currently not possible since security-master is a Ganeti VM and the disk requireme

NEW changes in oldstable-new

2024-03-18 Thread Debian FTP Masters
Processing changes file: libuv1_1.40.0-2+deb11u1_source.changes ACCEPT Processing changes file: libuv1_1.40.0-2+deb11u1_amd64-buildd.changes ACCEPT Processing changes file: libuv1_1.40.0-2+deb11u1_arm64-buildd.changes ACCEPT Processing changes file: libuv1_1.40.0-2+deb11u1_armel-buildd.change

Processed: block 1064095 by 1067118

2024-03-18 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > block 1065331 by 1067118 Bug #1065331 [libhdf5-103-1t64] libhdf5-103-1t64: depends on libcurl4 instead of libcurl4t64 1065331 was not blocked by any bugs. 1065331 was not blocking any bugs. Added blocking bug(s) of 1065331: 1067118 > unblock 1064

Processed: block 1064095 by 1067118

2024-03-18 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > block 1064095 by 1067118 Bug #1064095 {Done: Steve Langasek } [src:hdf5] hdf5: NMU diff for 64-bit time_t transition 1064095 was not blocked by any bugs. 1064095 was not blocking any bugs. Added blocking bug(s) of 1064095: 1067118 > thanks Stoppi

Re: Security releases for ecosystems that use static linking

2024-03-18 Thread Ola Lundqvist
Hi Emilio Yes, looks like it solves the problem as well. // Ola On Mon, 18 Mar 2024 at 13:14, Emilio Pozuelo Monfort wrote: > [ Adding debian-dak@ to Cc ] > > On 22/12/2023 09:54, Moritz Muehlenhoff wrote: > > On Thu, Dec 21, 2023 at 07:30:51PM -0300, Santiago Ruano Rincón wrote: > >> So let m

Bug#1067120: nmu: apache2_2.4.58-1

2024-03-18 Thread Stefan Fritsch
Package: release.debian.org Severity: normal X-Debbugs-Cc: apac...@packages.debian.org Control: affects -1 + src:apache2 User: release.debian@packages.debian.org Usertags: binnmu libaprutil1t64 1.6.3-1.1 contains a wrong symbol file, causing a wrong dependency on libaprutil164 (missing a "t")

Processed: nmu: apache2_2.4.58-1

2024-03-18 Thread Debian Bug Tracking System
Processing control commands: > affects -1 + src:apache2 Bug #1067120 [release.debian.org] nmu: apache2_2.4.58-1 Added indication that 1067120 affects src:apache2 -- 1067120: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067120 Debian Bug Tracking System Contact ow...@bugs.debian.org with pr

Re: Security releases for ecosystems that use static linking

2024-03-18 Thread Moritz Muehlenhoff
On Mon, Mar 18, 2024 at 01:13:15PM +0100, Emilio Pozuelo Monfort wrote: > [ Adding debian-dak@ to Cc ] > > One solution which has been discussed in the past is to import a full copy > > of stable towards stable-security at the beginning of each release cycle, > > but that is currently not possible

Bug#1067118: nmu: hdf5_1.10.10+repack-3.1

2024-03-18 Thread Gilles Filippini
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, During the ongoing 64 bit time_t transition it seems HDF5 should have been triggered *after* curl. See #1065331. As I understand it this

Bug#1036884: transition: time64_t

2024-03-18 Thread Emanuele Rocca
On 2024-03-13 02:08, Emanuele Rocca wrote: > When it comes to actually satisfying build-depends properly it seems > that as of right now the missing ones are libcurl4-gnutls-dev and > libgit2-dev. Cargo is now done. With libcurl4-gnutls-dev and libgit2-dev available I could bootstrap it on armhf/a

Bug#1067106: bullseye-pu: package nvidia-settings/470.239.06-1

2024-03-18 Thread Andreas Beckmann
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu [ Reason ] As a followup for enabling src:nvidia-graphics-drivers on ppc64el (to be in sync with sid), we need to enable building the nvidia-settings binary package for ppc64el, to

Re: Security releases for ecosystems that use static linking

2024-03-18 Thread Emilio Pozuelo Monfort
[ Adding debian-dak@ to Cc ] On 22/12/2023 09:54, Moritz Muehlenhoff wrote: On Thu, Dec 21, 2023 at 07:30:51PM -0300, Santiago Ruano Rincón wrote: So let me ask you: are you interested in addressing the infrastructure limitations to handle those kind of packages? and having some help for that?