NEW changes in stable-new

2024-04-06 Thread Debian FTP Masters
Processing changes file: mksh_59c-28+deb12u1_arm64-buildd.changes ACCEPT Processing changes file: mksh_59c-28+deb12u1_mips64el-buildd.changes ACCEPT Processing changes file: mksh_59c-28+deb12u1_mipsel-buildd.changes ACCEPT

NEW changes in stable-new

2024-04-06 Thread Debian FTP Masters
Processing changes file: mksh_59c-28+deb12u1_amd64-buildd.changes ACCEPT Processing changes file: mksh_59c-28+deb12u1_armel-buildd.changes ACCEPT Processing changes file: mksh_59c-28+deb12u1_armhf-buildd.changes ACCEPT Processing changes file: mksh_59c-28+deb12u1_i386-buildd.changes ACCEPT

Processed: Re: Bug#1056936: bookworm-pu: package glewlwyd/2.7.5-3

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 confirmed Bug #1056936 [release.debian.org] bookworm-pu: package glewlwyd/2.7.5-3 Added tag(s) confirmed. -- 1056936: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056936 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#1056936: bookworm-pu: package glewlwyd/2.7.5-3

2024-04-06 Thread Jonathan Wiltshire
Control: tag -1 confirmed Hi, On Wed, Feb 14, 2024 at 05:42:24PM -0500, Nicolas Mora wrote: > Hello, > > I've updated the debdiff to add a fix for CVE-2024-25715 Sorry for the delay; please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian De

NEW changes in stable-new

2024-04-06 Thread Debian FTP Masters
Processing changes file: mksh_59c-28+deb12u1_source.changes ACCEPT

Bug#1055802: bookworm-pu: package qtbase-opensource-src/5.15.8+dfsg-11+deb12u1

2024-04-06 Thread Jonathan Wiltshire
Control: tag -1 confirmed On Sat, Nov 11, 2023 at 09:36:48PM +0300, Dmitry Shachnev wrote: > [ Reason ] > The main goal of the proposed update is to fix bug #1055280: broken Unicode > support in libqt5sql5-odbc because of patch for CVE-2023-24607. > > Additionally, I backported fixes for three mo

Processed: Re: Bug#1055802: bookworm-pu: package qtbase-opensource-src/5.15.8+dfsg-11+deb12u1

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 confirmed Bug #1055802 [release.debian.org] bookworm-pu: package qtbase-opensource-src/5.15.8+dfsg-11+deb12u1 Added tag(s) confirmed. -- 1055802: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055802 Debian Bug Tracking System Contact ow...@bugs.debian.

Processed: mksh 59c-28+deb12u1 flagged for acceptance

2024-04-06 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > package release.debian.org Limiting to bugs with field 'package' containing at least one of 'release.debian.org' Limit currently set to 'package':'release.debian.org' > tags 1068326 = bookworm pending Bug #1068326 [release.debian.org] bookworm-p

Bug#1068326: mksh 59c-28+deb12u1 flagged for acceptance

2024-04-06 Thread Jonathan Wiltshire
package release.debian.org tags 1068326 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: mksh Version: 59c-28+deb12u1

Processed: tagging 1066842

2024-04-06 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 1066842 + moreinfo Bug #1066842 [release.debian.org] Updating extrepo-offline-data in Debian Stable Added tag(s) moreinfo. > thanks Stopping processing here. Please contact me if you need assistance. -- 1066842: https://bugs.debian.org/cgi-

Processed: Re: Bug#1051232: bookworm-pu: package 7zip/23.01+dfsg-3~deb12u1

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 moreinfo Bug #1051232 [release.debian.org] bookworm-pu: package 7zip/22.01+dfsg-8+deb12u1 Added tag(s) moreinfo. -- 1051232: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051232 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#1051232: bookworm-pu: package 7zip/23.01+dfsg-3~deb12u1

2024-04-06 Thread Jonathan Wiltshire
Control: tag -1 moreinfo On Sun, Oct 15, 2023 at 12:55:48PM +0900, yokota wrote: > Trivial autopkgtest was passed, but I don't know that this debdiff > really fixes CVE-2023-31102 and CVE-2023-40481. > > Please examine attached debdiff. I am not in a position to assess that for you. You're the m

Bug#1050588: bookworm-pu: package nsis/3.08-3+deb12u1

2024-04-06 Thread Jonathan Wiltshire
Control: tag -1 moreinfo Hi, On Mon, Feb 05, 2024 at 11:26:12AM +0100, Didier 'OdyX' Raboud wrote: > Le samedi, 3 février 2024, 10.46:29 h CET Adam D. Barratt a écrit : > > On Sat, 2024-02-03 at 10:33 +0100, Thomas Gaugler wrote: > > > I am the maintainer of Nullsoft Scriptable Install System (NS

Processed: Re: Bug#1050588: bookworm-pu: package nsis/3.08-3+deb12u1

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 moreinfo Bug #1050588 [release.debian.org] bookworm-pu: package nsis/nsis 3.08-3 Added tag(s) moreinfo. -- 1050588: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1050588 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#1051024: bookworm-pu: package igtf-policy-bundle/1.22-1~deb12u1

2024-04-06 Thread Jonathan Wiltshire
Control: tag -1 confirmed On Sat, Sep 23, 2023 at 10:54:50PM +0200, Dennis van Dok wrote: > On 23-09-2023 22:36, Adam D. Barratt wrote: > > > [ Checklist ] > > > [*] *all* changes are documented in the d/changelog > > > [*] I reviewed all changes and I approve them > > > [*] attach

Processed: Re: Bug#1051024: bookworm-pu: package igtf-policy-bundle/1.22-1~deb12u1

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 confirmed Bug #1051024 [release.debian.org] bookworm-pu: package igtf-policy-bundle/1.122-1~deb12u1 Added tag(s) confirmed. -- 1051024: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051024 Debian Bug Tracking System Contact ow...@bugs.debian.org with p

Processed: Re: Bug#1053832: bookworm-pu: package ceph/16.2.11+ds-2 (CVE-2023-43040)

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 confirmed Bug #1053832 [release.debian.org] bookworm-pu: package ceph/16.2.11+ds-2 (CVE-2023-43040) Added tag(s) confirmed. -- 1053832: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053832 Debian Bug Tracking System Contact ow...@bugs.debian.org with p

Bug#1053832: bookworm-pu: package ceph/16.2.11+ds-2 (CVE-2023-43040)

2024-04-06 Thread Jonathan Wiltshire
Control: tag -1 confirmed On Thu, Oct 12, 2023 at 11:34:58AM +0200, Thomas Goirand wrote: > [ Reason ] > CVE-2023-43040 > > [ Impact ] > security issue with RGW with improperly verified POST keys. Sorry for the delay; please go ahead. Thanks, -- Jonathan Wiltshire

Processed: Re: Bug#1068242: bookworm-pu: package libtool/2.4.7-7~deb12u1

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 confirmed Bug #1068242 [release.debian.org] bookworm-pu: package libtool/2.4.7-7~deb12u1 Added tag(s) confirmed. -- 1068242: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068242 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#1068242: bookworm-pu: package libtool/2.4.7-7~deb12u1

2024-04-06 Thread Jonathan Wiltshire
Control: tag -1 confirmed On Tue, Apr 02, 2024 at 04:48:50PM +0200, Andreas Beckmann wrote: > [ Reason ] > I'd like to rebuild libtool from sid in order to fix two RC bugs: > * missing Conflicts against an obsolete (now virtual) package name > causing file conflicts on some upgrade paths of syst

Bug#1068411: bookworm-pu: package schleuder/4.0.3-7+deb12u1

2024-04-06 Thread Jonathan Wiltshire
Control: tag -1 confirmed On Thu, Apr 04, 2024 at 06:45:44PM +, Georg Faerber wrote: > Schleuder, as currently present in bookworm, 4.0.3-7, is affected by > multiple bugs, which I would like to address via this proposed-update, > 4.0.3-7+deb12u1. Please go ahead. Thanks, -- Jonathan Wilts

Processed: Re: Bug#1068411: bookworm-pu: package schleuder/4.0.3-7+deb12u1

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 confirmed Bug #1068411 [release.debian.org] bookworm-pu: package schleuder/4.0.3-7+deb12u1 Added tag(s) confirmed. -- 1068411: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068411 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Processed: Re: Bug#1068106: bookworm-pu: package libarchive/3.6.2-1+deb12u1

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 confirmed Bug #1068106 [release.debian.org] bookworm-pu: package libarchive/3.6.2-1+deb12u1 Added tag(s) confirmed. -- 1068106: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068106 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#1068106: bookworm-pu: package libarchive/3.6.2-1+deb12u1

2024-04-06 Thread Jonathan Wiltshire
Control: tag -1 confirmed Hi, On Sat, Mar 30, 2024 at 08:51:10PM +0200, Peter Pentchev wrote: > [ Reason ] > Revert a change made by the same person that smuggled > the backdoor into xz. See #1068047 for more details. Please go ahead. However I wonder if you also want to wait for a patch for htt

Bug#1068514: bullseye-pu: package imlib2/1.7.1-2

2024-04-06 Thread Markus Koschany
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: iml...@packages.debian.org, a...@debian.org Control: affects -1 + src:imlib2 [ Reason ] Fixing CVE-2024-25447, CVE-2024-25448 and CVE-2024-25450 in bullseye. [ Impa

Processed: bullseye-pu: package imlib2/1.7.1-2

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > affects -1 + src:imlib2 Bug #1068514 [release.debian.org] bullseye-pu: package imlib2/1.7.1-2 Added indication that 1068514 affects src:imlib2 -- 1068514: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068514 Debian Bug Tracking System Contact ow...@bugs.debian

NEW changes in stable-new

2024-04-06 Thread Debian FTP Masters
Processing changes file: libtommath_1.2.0-6+deb12u1_all-buildd.changes ACCEPT Processing changes file: libtommath_1.2.0-6+deb12u1_amd64-buildd.changes ACCEPT Processing changes file: libtommath_1.2.0-6+deb12u1_arm64-buildd.changes ACCEPT Processing changes file: libtommath_1.2.0-6+deb12u1_arm

Bug#1068326: bookworm-pu: package mksh/59c-28+deb12u1

2024-04-06 Thread Thorsten Glaser
Jonathan Wiltshire dixit: >Please go ahead. Thanks. Do you need a blurb for the point release notes or something? bye, //mirabilos -- 15:41⎜ Somebody write a testsuite for helloworld :-)

Processed: libtommath 1.2.0-6+deb12u1 flagged for acceptance

2024-04-06 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > package release.debian.org Limiting to bugs with field 'package' containing at least one of 'release.debian.org' Limit currently set to 'package':'release.debian.org' > tags 1068451 = bookworm pending Bug #1068451 [release.debian.org] bookworm-p

Bug#1068451: libtommath 1.2.0-6+deb12u1 flagged for acceptance

2024-04-06 Thread Jonathan Wiltshire
package release.debian.org tags 1068451 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: libtommath Version: 1.2.0-6+

NEW changes in stable-new

2024-04-06 Thread Debian FTP Masters
Processing changes file: libtommath_1.2.0-6+deb12u1_amd64.changes ACCEPT Processing changes file: python-xapian-haystack_2.1.1-1+deb12u1_all-buildd.changes ACCEPT

Processed: Re: Bug#1068326: bookworm-pu: package mksh/59c-28+deb12u1

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 confirmed Bug #1068326 [release.debian.org] bookworm-pu: package mksh/59c-28+deb12u1 Added tag(s) confirmed. -- 1068326: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068326 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#1068326: bookworm-pu: package mksh/59c-28+deb12u1

2024-04-06 Thread Jonathan Wiltshire
Control: tag -1 confirmed On Wed, Apr 03, 2024 at 02:59:08PM +0200, Thorsten Glaser wrote: > I would like to ask for pre-approval to uploading a > proposed stable update for mksh. Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Develop

Processed: Re: Bug#1068344: bookworm-pu: package curl/7.88.1-10+deb12u6

2024-04-06 Thread Debian Bug Tracking System
Processing control commands: > tag -1 confirmed Bug #1068344 [release.debian.org] bookworm-pu: package curl/7.88.1-10+deb12u6 Added tag(s) confirmed. -- 1068344: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068344 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#1068344: bookworm-pu: package curl/7.88.1-10+deb12u6

2024-04-06 Thread Jonathan Wiltshire
Control: tag -1 confirmed On Wed, Apr 03, 2024 at 04:05:17PM -0300, Guilherme Puida Moreira wrote: > [ Reason ] > 1. Fix CVE-2004 > 2. Fix CVE-2398 Please detail what these actually are in the changelog; other than that, go ahead. Thanks, -- Jonathan Wiltshire

NEW changes in stable-new

2024-04-06 Thread Debian FTP Masters
Processing changes file: python-xapian-haystack_2.1.1-1+deb12u0.1_source.changes REJECT Processing changes file: chromium_123.0.6312.86-1~deb12u1_source.changes ACCEPT Processing changes file: chromium_123.0.6312.86-1~deb12u1_all-buildd.changes ACCEPT Processing changes file: chromium_123.0.6

Re: grub 2.12-2 and 2.12-2~deb13u1 unstable/testing security updates [CVE-2024-2312]

2024-04-06 Thread Paul Gevers
Hi, On 05-04-2024 9:36 p.m., Julian Andres Klode wrote: Dear ftp and release teams, please ensure that the testing-proposed-updates upload lands and that the signed uploads are processed accordingly. I don't know how to handle the signing with the proposed-updates, but I'm sure you can coordinat