Bug#1052363: bullseye-pu: cups/2.3.3op2-3+deb11u4

2023-09-29 Thread Thorsten Alteholz
On Fri, 29 Sep 2023, Adam D. Barratt wrote: I should have spotted this before (particularly as we recently had the same issue with another package) but debian/NEWS.Debian should simply be debian/NEWS. dh_installchangelogs then renames it to NEWS.Debian in the binary package. ok, uploaded, I

Bug#1052363: bullseye-pu: cups/2.3.3op2-3+deb11u4

2023-09-29 Thread Adam D. Barratt
On Thu, 2023-09-28 at 19:51 +0200, Thorsten Alteholz wrote: > > On 27.09.23 20:33, Adam D. Barratt wrote: > > Thanks; please go ahead. > > great, thanks, ... > > ... and uploaded. > I should have spotted this before (particularly as we recently had the same issue with another package) but debi

Bug#1052363: bullseye-pu: cups/2.3.3op2-3+deb11u4

2023-09-28 Thread Thorsten Alteholz
On 27.09.23 20:33, Adam D. Barratt wrote: Thanks; please go ahead. great, thanks, ... ... and uploaded.   Thorsten

Processed: Re: Bug#1052363: bullseye-pu: cups/2.3.3op2-3+deb11u4

2023-09-27 Thread Debian Bug Tracking System
Processing control commands: > tags 1052363 - moreinfo Bug #1052363 [release.debian.org] bullseye-pu: cups/2.3.3op2-3+deb11u4 Removed tag(s) moreinfo. -- 1052363: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052363 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#1052363: bullseye-pu: cups/2.3.3op2-3+deb11u4

2023-09-27 Thread Thorsten Alteholz
Control: tags 1052363 - moreinfo On Sat, 23 Sep 2023, Adam D. Barratt wrote: The same query as for bookworm applies here - do we expect users to know how to find the patch? ... and the same new text for Bullseye. Thorstendiff -Nru cups-2.3.3op2/debian/changelog cups-2.3.3op2/debian/changel

Processed: Re: Bug#1052363: bullseye-pu: cups/2.3.3op2-3+deb11u4

2023-09-27 Thread Debian Bug Tracking System
Processing control commands: > tags -1 confirmed Bug #1052363 [release.debian.org] bullseye-pu: cups/2.3.3op2-3+deb11u4 Added tag(s) confirmed. -- 1052363: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052363 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#1052363: bullseye-pu: cups/2.3.3op2-3+deb11u4

2023-09-27 Thread Adam D. Barratt
Control: tags -1 confirmed On Wed, 2023-09-27 at 17:44 +, Thorsten Alteholz wrote: > Control: tags 1052363 - moreinfo > > > On Sat, 23 Sep 2023, Adam D. Barratt wrote: > > The same query as for bookworm applies here - do we expect users to > > know how to find the patch? > > ... and the sam

Processed: Re: Bug#1052363: bullseye-pu: cups/2.3.3op2-3+deb11u4

2023-09-23 Thread Debian Bug Tracking System
Processing control commands: > tags -1 moreinfo Bug #1052363 [release.debian.org] bullseye-pu: cups/2.3.3op2-3+deb11u4 Added tag(s) moreinfo. -- 1052363: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052363 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#1052363: bullseye-pu: cups/2.3.3op2-3+deb11u4

2023-09-23 Thread Adam D. Barratt
Control: tags -1 moreinfo On Wed, 2023-09-20 at 21:40 +, Thorsten Alteholz wrote: > The attached debdiff for cups fixes CVE-2023-4504 and CVE-2023-32360 > in > Bullseye. These CVEs have been marked as no-dsa by the security team, > but > at least CVE-2023-32360 got anRC bug (#1051953). > +

Bug#1052363: bullseye-pu: cups/2.3.3op2-3+deb11u4

2023-09-20 Thread Thorsten Alteholz
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu The attached debdiff for cups fixes CVE-2023-4504 and CVE-2023-32360 in Bullseye. These CVEs have been marked as no-dsa by the security team, but at least CVE-2023-32360 got an