Bug#867461: jessie-pu: package ca-certificates/20141019+deb8u3

2017-07-06 Thread Antoine Beaupre
Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu The ca-certificates package in jessie is still vulnerable to #858539, that is it still ships the WoSign and StartCom certificates which have been marked as blacklisted after october

Bug#867461: should ca-certificates certdata.txt synchronize across all suites?

2017-07-06 Thread Antoine Beaupré
Hi everyone, In looking at fixing #858539 (blocking WoSign and StartCom, in CC) for wheezy, I noticed the issue was also pending in jessie. Furthermore, the idea originally raised by pabs[1] was to also update the packages for the latest changes in certdata.txt in wheezy, including the ISRG Root f

Bug#867479: stretch-pu: package adwaita-icon-theme/3.22.0-1

2017-07-06 Thread Laurent Bigonville
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Hi, It seems that the version 3.22.0-1 of adwaita-icon-theme is shipping a malformed .svg icon. The attached patch if fixing that. It will be fixed in unstable/testing in the nex

Bug#867335: stretch-pu: package systemd/232-25

2017-07-06 Thread Cyril Brulebois
Hi, Michael Biebl (2017-07-05): > I'd like to make a stable upload for systemd. > > All changes are already in unstable. > An annotated changelog follows: Just had a quick glance at git, and it feels like there's a booboo… > systemd (232-25+deb9u1) stretch; urgency=medium > > [ Dimitri John

Bug#865225: stretch-pu: package request-tracker4/4.4.1-3+deb9u2

2017-07-06 Thread Dominic Hargreaves
On Sun, Jul 02, 2017 at 11:18:43PM +0200, Cyril Brulebois wrote: > Hi, > > Dominic Hargreaves (2017-06-27): > > Sorry, this is not yet uploaded. I somehow got this and the anope > > bug mixed up. > > Alright, no worries; for the avoidance of doubt, I can't spot any > uploads of the request-track

Bug#864745: Update on base.pm jessie point release

2017-07-06 Thread Dominic Hargreaves
+ debian-perl as it possible affects how we deal with FTBFS module packages. On Wed, Jul 05, 2017 at 07:46:39AM +0200, Cyril Brulebois wrote: > Hi Dominic, > > Dominic Hargreaves (2017-07-04): > > 1) this commit is identical to those now in upstream release candidates. > > 2) This has now been f

Bug#867335: stretch-pu: package systemd/232-25

2017-07-06 Thread Michael Biebl
Am 06.07.2017 um 20:10 schrieb Cyril Brulebois: > Hi, > > Michael Biebl (2017-07-05): >> I'd like to make a stable upload for systemd. >> >> All changes are already in unstable. >> An annotated changelog follows: > > Just had a quick glance at git, and it feels like there's a booboo… > >> syste

Bug#864745: Update on base.pm jessie point release

2017-07-06 Thread Cyril Brulebois
Dominic Hargreaves (2017-07-06): > + debian-perl as it possible affects how we deal with FTBFS module > packages. > > On Wed, Jul 05, 2017 at 07:46:39AM +0200, Cyril Brulebois wrote: > > Hi Dominic, > > > > Dominic Hargreaves (2017-07-04): > > > 1) this commit is identical to those now in upstr

Bug#867490: stretch-pu: package perl/5.24.1-3+deb9u1

2017-07-06 Thread Dominic Hargreaves
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu We would like to apply the following fixes to perl in stretch for the next point release: * Backport various Getopt-Long fixes from upstream 2.49..2.51. (Closes: #855532, #86

Bug#864745: Update on base.pm jessie point release

2017-07-06 Thread Dominic Hargreaves
On Thu, Jul 06, 2017 at 09:01:21PM +0200, Cyril Brulebois wrote: > Dominic Hargreaves (2017-07-06): > > + debian-perl as it possible affects how we deal with FTBFS module > > packages. > > > > On Wed, Jul 05, 2017 at 07:46:39AM +0200, Cyril Brulebois wrote: > > > Hi Dominic, > > > > > > Dominic

Bug#867461: should ca-certificates certdata.txt synchronize across all suites?

2017-07-06 Thread Paul Wise
On Fri, Jul 7, 2017 at 2:01 AM, Antoine Beaupré wrote: > For what it's worth, my opinion is that we should attempt to synchronize > certdata.txt (and blacklist.txt, for that matter) across all suites (but > not other changes to the packaging). This would remove another decision > point in our infr