Accepted initramfs-tools 0.134 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 28 Jul 2019 01:10:56 +0100 Source: initramfs-tools Architecture: source Version: 0.134 Distribution: unstable Urgency: medium Maintainer: Debian kernel team Changed-By: Ben Hutchings Closes: 916696 923165 928689 928736

Bug#932769: [moreinfo] DoS via DHCP request

you net-boot without an initramfs. Ben. -- Ben Hutchings You can't have everything. Where would you put it? signature.asc Description: This is a digitally signed message part

Re: default firewall utility changes for Debian 11 bullseye

n't very helpful. Ben. -- Ben Hutchings If God had intended Man to program, we'd have been born with serial I/O ports. signature.asc Description: This is a digitally signed message part

Re: git & Debian packaging sprint report

. See <https://manpages.debian.org/buster/cgit/cgitrc.5.en.html#SIGNATURES> and the "git-archive-signer" script in <https://git.kernel.org/pub/scm/linux/kernel/git/mricon/korg-helpers.git/>. Ben. -- Ben Hutchings If God had intended Man to program, we'd have been born with serial I/O ports. signature.asc Description: This is a digitally signed message part

Re: systemd services that are not equivalent to LSB init scripts

privileged. But I would not go that route as I see it as destructive > one. [...] We can't force individual developers to do anything, and yet we manage to release with a large number of packages that mostly follow policy. If it's our policy that packages must support cron (where applic

Re: Packaging Games with In-App Purchases

grams/games with > IAPs? > > Cheers, Bagas > -- Ben Hutchings friends: People who know you well, but like you anyway. signature.asc Description: This is a digitally signed message part

Re: Dropping Release and Release.gpg support from APT

need a security update. Obviously I build them in a jessie chroot, but it seems like overkill to do that for the initial source download too. And back when I was doing triage for Debian LTS I wouldn't build at all - I would only look at the source to see if a bug was present in the old version. Ben. > Bu

Re: OpenCL / handling of hardware-specific packages

for further input. Linux doesn't distinguish between devices found in an initial enumeration or hot-plugged later, so I doubt that isenkram is limited in that way. Ben. -- Ben Hutchings Any sufficiently advanced bug is indistinguishable from a feature. signature.asc Description: This is

Accepted base-installer 1.189 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 30 Jun 2019 16:53:44 +0100 Source: base-installer Architecture: source Version: 1.189 Distribution: unstable Urgency: high Maintainer: Debian Install System Team Changed-By: Ben Hutchings Closes: 927493 929667 Changes: base

Accepted debian-installer-utils 1.132 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 30 Jun 2019 16:49:06 +0100 Source: debian-installer-utils Architecture: source Version: 1.132 Distribution: unstable Urgency: high Maintainer: Debian Install System Team Changed-By: Ben Hutchings Closes: 927528 931287

Accepted linux-signed-i386 4.19.37+5 (source) into unstable

linux-image-4.19.0-5-rt-686-pae Architecture: source Version: 4.19.37+5 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-5-686-di - ACPI support modules (udeb) acpi-modules-4.19.0-5-686-pae-di - ACPI support modules (udeb

Accepted linux-signed-arm64 4.19.37+5 (source) into unstable

-4.19.0-5-arm64 linux-image-4.19.0-5-rt-arm64 Architecture: source Version: 4.19.37+5 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: ata-modules-4.19.0-5-arm64-di - ATA disk modules (udeb) btrfs-modules-4.19.0-5-arm64-di - BTRFS filesystem

Accepted linux-signed-amd64 4.19.37+5 (source) into unstable

-di mtd-core-modules-4.19.0-5-amd64-di linux-image-4.19.0-5-amd64 linux-image-4.19.0-5-cloud-amd64 linux-image-4.19.0-5-rt-amd64 Architecture: source Version: 4.19.37+5 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-5

Accepted linux 4.19.37-5 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 19 Jun 2019 23:16:58 +0100 Source: linux Architecture: source Version: 4.19.37-5 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Closes: 926539 930743 Changes: linux (4.19.37

Accepted linux-signed-i386 4.19.37+4 (source) into unstable

linux-image-4.19.0-5-rt-686-pae Architecture: source Version: 4.19.37+4 Distribution: sid Urgency: high Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-5-686-di - ACPI support modules (udeb) acpi-modules-4.19.0-5-686-pae-di - ACPI support modules (udeb) ata

Accepted linux-signed-arm64 4.19.37+4 (source) into unstable

-4.19.0-5-arm64 linux-image-4.19.0-5-rt-arm64 Architecture: source Version: 4.19.37+4 Distribution: sid Urgency: high Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: ata-modules-4.19.0-5-arm64-di - ATA disk modules (udeb) btrfs-modules-4.19.0-5-arm64-di - BTRFS filesystem

Accepted linux-signed-amd64 4.19.37+4 (source) into unstable

-di mtd-core-modules-4.19.0-5-amd64-di linux-image-4.19.0-5-amd64 linux-image-4.19.0-5-cloud-amd64 linux-image-4.19.0-5-rt-amd64 Architecture: source Version: 4.19.37+4 Distribution: sid Urgency: high Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-5

Accepted linux 4.19.37-4 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 17 Jun 2019 20:00:22 +0100 Source: linux Architecture: source Version: 4.19.37-4 Distribution: unstable Urgency: high Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Closes: 929187 929366 929583 Changes: linux

Re: Realizing Good Ideas with Debian Money

ounts, regardless of whether the vendor is interested in being a sponsor. Ben. -- Ben Hutchings Unix is many things to many people, but it's never been everything to anybody. signature.asc Description: This is a digitally signed message part

Re: ZFS in Buster

> https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.38 > > The commit also affects ZFS 0.7 because SIMD is used for checksum operations. > > There might be a performance penalty in ZFS only if Debian Buster > upgrades to 4.19.38. Which we will, some time soon. Ben. --

Re: Survey: git packaging practices / repository format

usually Makefile.in). [...] Perhaps we should update policy to say that the .orig tarball may (or even "should") be generated from an upstream release tag where applicable. Ben. -- Ben Hutchings Horngren's Observation: Among economists, the real world is often a special

Re: Survey: git packaging practices / repository format

beside debian/control. I have an unmerged branch that changes various things to be compatible with dgit. It adds debian/control and debian/tests/control to git and defers generation of other things to build time. Ben. -- Ben Hutchings Horngren's Observation: Among economists, th

Re: Bits from /me: A humble draft policy on "deep learning v.s. freedom"

non-free dataset [...] > 3. A model is Non-free Model as long as any of the following > conditions is satisfied: (1) trained from unknown/non-free data [...] Is category 2 intended to be a subset of category 3, or am I missing some distinction? Ben. -- Ben Hutchings Any sufficiently advan

Accepted linux-signed-amd64 4.19.37+3 (source) into unstable

-di mtd-core-modules-4.19.0-5-amd64-di linux-image-4.19.0-5-amd64 linux-image-4.19.0-5-cloud-amd64 linux-image-4.19.0-5-rt-amd64 Architecture: source Version: 4.19.37+3 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-5

Accepted linux-signed-i386 4.19.37+3 (source) into unstable

linux-image-4.19.0-5-rt-686-pae Architecture: source Version: 4.19.37+3 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-5-686-di - ACPI support modules (udeb) acpi-modules-4.19.0-5-686-pae-di - ACPI support modules (udeb

Accepted linux-signed-arm64 4.19.37+3 (source) into unstable

-4.19.0-5-arm64 linux-image-4.19.0-5-rt-arm64 Architecture: source Version: 4.19.37+3 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: ata-modules-4.19.0-5-arm64-di - ATA disk modules (udeb) btrfs-modules-4.19.0-5-arm64-di - BTRFS filesystem

Accepted linux 4.19.37-3 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 15 May 2019 23:07:16 +0100 Source: linux Architecture: source Version: 4.19.37-3 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Changes: linux (4.19.37-3) unstable; urgency

Accepted linux-signed-i386 4.19.37+2 (source) into unstable

linux-image-4.19.0-5-rt-686-pae Architecture: source Version: 4.19.37+2 Distribution: sid Urgency: high Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-5-686-di - ACPI support modules (udeb) acpi-modules-4.19.0-5-686-pae-di - ACPI support modules (udeb) ata

Accepted linux-signed-arm64 4.19.37+2 (source) into unstable

-4.19.0-5-arm64 linux-image-4.19.0-5-rt-arm64 Architecture: source Version: 4.19.37+2 Distribution: sid Urgency: high Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: ata-modules-4.19.0-5-arm64-di - ATA disk modules (udeb) btrfs-modules-4.19.0-5-arm64-di - BTRFS filesystem

Accepted linux-signed-amd64 4.19.37+2 (source) into unstable

-di mtd-core-modules-4.19.0-5-amd64-di linux-image-4.19.0-5-amd64 linux-image-4.19.0-5-cloud-amd64 linux-image-4.19.0-5-rt-amd64 Architecture: source Version: 4.19.37+2 Distribution: sid Urgency: high Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-5

Accepted linux 4.19.37-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 14 May 2019 17:34:37 +0100 Source: linux Architecture: source Version: 4.19.37-2 Distribution: unstable Urgency: high Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Closes: 928618 Changes: linux (4.19.37-2

Re: Do we want to Require or Recommend DH

On Tue, 2019-05-14 at 12:54 +0200, Andreas Tille wrote: > On Tue, May 14, 2019 at 10:38:06AM +0100, Ben Hutchings wrote: > > On Tue, 2019-05-14 at 11:07 +0200, Andreas Tille wrote: > > > Can you give an example for a package that has a non-dh rules file > > > &qu

Re: Do we want to Require or Recommend DH

? linux is one. I did a lot of work to address lintian warnings last year, and most of that did not involve debian/rules*. Ben. -- Ben Hutchings I haven't lost my mind; it's backed up on tape somewhere. signature.asc Description: This is a digitally signed message part

Re: fixing debian-security-support upgrades from stretch (for good)

On Mon, 2019-05-13 at 19:08 +, Holger Levsen wrote: > reassign -1 base-files > retitle -1 base-files: please add a break on d-s-s < 2019.04.25 > thanks > > On Mon, May 13, 2019 at 01:00:14PM +0100, Ben Hutchings wrote: > > On Mon, 2019-05-13 at 11:52 +, Holger

Re: Do we want to Require or Recommend DH

velopers can do the NMU. Ben. -- Ben Hutchings For every complex problem there is a solution that is simple, neat, and wrong. signature.asc Description: This is a digitally signed message part

Re: fixing debian-security-support upgrades from stretch (for good)

y* stretch pointrelease) by adding a "pre-depends: > debian-security-support (>= 2019.04.25)" to base-files in buster. [...] This makes debian-security-support transitively essential, whereas it used to be optional. Is "Conflicts" not strong enough? Ben. -- Ben H

Accepted linux-signed-i386 4.19.37+1 (source) into unstable, unstable

linux-image-4.19.0-5-rt-686-pae Architecture: source Version: 4.19.37+1 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-5-686-di - ACPI support modules (udeb) acpi-modules-4.19.0-5-686-pae-di - ACPI support modules (udeb

Accepted linux-latest 105 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 07 May 2019 16:33:50 +0100 Source: linux-latest Architecture: source Version: 105 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Changes: linux-latest (105) unstable; urgency

Accepted linux-signed-amd64 4.19.37+1 (source) into unstable, unstable

-di mtd-core-modules-4.19.0-5-amd64-di linux-image-4.19.0-5-amd64 linux-image-4.19.0-5-cloud-amd64 linux-image-4.19.0-5-rt-amd64 Architecture: source Version: 4.19.37+1 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-5

Accepted firmware-nonfree 20190502-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 06 May 2019 22:02:45 +0100 Source: firmware-nonfree Architecture: source Version: 20190502-1 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Closes: 903437 919452 919632 927286

Accepted linux-signed-arm64 4.19.37+1 (source) into unstable, unstable

-4.19.0-5-arm64 linux-image-4.19.0-5-rt-arm64 Architecture: source Version: 4.19.37+1 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: ata-modules-4.19.0-5-arm64-di - ATA disk modules (udeb) btrfs-modules-4.19.0-5-arm64-di - BTRFS filesystem

Accepted linux 4.19.37-1 (all source) into unstable, unstable

Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Closes: 785065 872069 884562 919290 923723 925496 926967 927825 928457 Description: linux-doc-4.19 - Linux kernel specific documentation for version 4.19 linux-headers-4.19.0-5-common - Common header

Re: Preferred git branch structure when upstream moves from tarballs to git

merging that I raised in October. (I say "we" because I realise you are likely to need me or someone else to spend time explaining and testing the specific scenarios that didn't work.) Ben. -- Ben Hutchings It is easier to write an incorrect program than to understand a correct one

Re: Re: Removal of Wheezy and Jessie (except LTS) from mirrors

uite will not be removed until end of LTS. As for jessie-backports, the removal was announced in July 2018. Ben. > OK, I am a little late to pick up on this, but I'm sure there are > other people still running some Jessie systems who only run update > commands on them every month or so.

Re: Re: Removal of Wheezy and Jessie (except LTS) from mirrors

uite will not be removed until end of LTS. As for jessie-backports, the removal was announced in July 2018. Ben. > OK, I am a little late to pick up on this, but I'm sure there are > other people still running some Jessie systems who only run update > commands on them every month or so. -- Ben

Bug#820036: Debian does not run on systems with Secure Boot enabled

Control: summary -1 GRUB and Linux images are now signed by the production key trusted by shim-signed. Debian-installer apparently installs the signed packages, but other installation systems are not yet ready. Ben. -- Ben Hutchings Quantity is no substitute for quality, but it's the only one

Accepted linux-base 4.6 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 07 Apr 2019 17:58:17 +0100 Source: linux-base Architecture: source Version: 4.6 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Closes: 876215 925379 925415 Changes: linux

Accepted linux-signed-i386 5.0.2+1~exp1 (source) into experimental

-686-pae-di mtd-core-modules-5.0.0-trunk-686-pae-di rfkill-modules-5.0.0-trunk-686-pae-di linux-image-5.0.0-trunk-686 linux-image-5.0.0-trunk-686-pae Architecture: source Version: 5.0.2+1~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings

Accepted linux-signed-arm64 5.0.2+1~exp1 (source) into experimental

-di udf-modules-5.0.0-trunk-arm64-di fuse-modules-5.0.0-trunk-arm64-di mtd-core-modules-5.0.0-trunk-arm64-di linux-image-5.0.0-trunk-arm64 Architecture: source Version: 5.0.2+1~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description

Accepted linux-signed-amd64 5.0.2+1~exp1 (source) into experimental

-image-5.0.0-trunk-cloud-amd64 Architecture: source Version: 5.0.2+1~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-5.0.0-trunk-amd64-di - ACPI support modules (udeb) ata-modules-5.0.0-trunk-amd64-di - ATA disk

Accepted linux 5.0.2-1~exp1 (source) into experimental

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 18 Mar 2019 04:01:01 + Source: linux Architecture: source Version: 5.0.2-1~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Changes: linux (5.0.2-1~exp1

Accepted linux-signed-arm64 4.19.28+2 (source) into unstable

-4.19.0-4-arm64 linux-image-4.19.0-4-rt-arm64 Architecture: source Version: 4.19.28+2 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: ata-modules-4.19.0-4-arm64-di - ATA disk modules (udeb) btrfs-modules-4.19.0-4-arm64-di - BTRFS filesystem

Accepted linux-signed-amd64 4.19.28+2 (source) into unstable

-di fuse-modules-4.19.0-4-amd64-di mtd-core-modules-4.19.0-4-amd64-di linux-image-4.19.0-4-amd64 linux-image-4.19.0-4-cloud-amd64 linux-image-4.19.0-4-rt-amd64 Architecture: source Version: 4.19.28+2 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings

Accepted linux-signed-i386 4.19.28+2 (source) into unstable

-di linux-image-4.19.0-4-686 linux-image-4.19.0-4-686-pae linux-image-4.19.0-4-rt-686-pae Architecture: source Version: 4.19.28+2 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-4-686-di - ACPI support modules (udeb

Accepted linux 4.19.28-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 15 Mar 2019 02:16:04 + Source: linux Architecture: source Version: 4.19.28-2 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Closes: 924545 Changes: linux (4.19.28-2

Accepted linux-signed-i386 5.0.1+1~exp1 (source) into experimental, experimental

-686-pae-di mtd-core-modules-5.0.0-trunk-686-pae-di rfkill-modules-5.0.0-trunk-686-pae-di linux-image-5.0.0-trunk-686 linux-image-5.0.0-trunk-686-pae Architecture: source Version: 5.0.1+1~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings

Accepted linux-signed-amd64 5.0.1+1~exp1 (source) into experimental, experimental

-image-5.0.0-trunk-cloud-amd64 Architecture: source Version: 5.0.1+1~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-5.0.0-trunk-amd64-di - ACPI support modules (udeb) ata-modules-5.0.0-trunk-amd64-di - ATA disk

Accepted linux-signed-arm64 5.0.1+1~exp1 (source) into experimental, experimental

-di udf-modules-5.0.0-trunk-arm64-di fuse-modules-5.0.0-trunk-arm64-di mtd-core-modules-5.0.0-trunk-arm64-di linux-image-5.0.0-trunk-arm64 Architecture: source Version: 5.0.1+1~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description

Accepted linux-latest 104 (all source) into unstable, unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 12 Mar 2019 05:24:50 + Source: linux-latest Binary: linux-doc linux-perf linux-source Architecture: all source Version: 104 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings

Accepted linux-signed-i386 4.19.28+1 (source) into unstable, unstable

-di linux-image-4.19.0-4-686 linux-image-4.19.0-4-686-pae linux-image-4.19.0-4-rt-686-pae Architecture: source Version: 4.19.28+1 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-4-686-di - ACPI support modules (udeb

Accepted linux-signed-arm64 4.19.28+1 (source) into unstable, unstable

-4.19.0-4-arm64 linux-image-4.19.0-4-rt-arm64 Architecture: source Version: 4.19.28+1 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: ata-modules-4.19.0-4-arm64-di - ATA disk modules (udeb) btrfs-modules-4.19.0-4-arm64-di - BTRFS filesystem

Accepted linux 5.0.1-1~exp1 (all source) into experimental, experimental

Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Closes: 917388 920454 Description: linux-doc-5.0 - Linux kernel specific documentation for version 5.0 linux-headers-5.0.0-trunk-common - Common header files for Linux 5.0.0-trunk linux-source-5.0 - Linux kernel source

Accepted linux-signed-amd64 4.19.28+1 (source) into unstable, unstable

-di fuse-modules-4.19.0-4-amd64-di mtd-core-modules-4.19.0-4-amd64-di linux-image-4.19.0-4-amd64 linux-image-4.19.0-4-cloud-amd64 linux-image-4.19.0-4-rt-amd64 Architecture: source Version: 4.19.28+1 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings

Accepted linux 4.19.28-1 (all source) into unstable, unstable

Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Closes: 895131 913119 913138 921542 922182 922306 Description: linux-doc-4.19 - Linux kernel specific documentation for version 4.19 linux-headers-4.19.0-4-common - Common header files for Linux 4.19.0-4

Re: FYI/RFC: early-rng-init-tools

On Sun, 2019-03-03 at 22:55 +0100, Kurt Roeckx wrote: > On Sun, Mar 03, 2019 at 08:19:44PM +0000, Ben Hutchings wrote: > > On Sun, 2019-03-03 at 18:59 +0100, Kurt Roeckx wrote: > > [...] > > > Most people will actually have at least 2 hardware RNGs: One in > > > t

Re: FYI/RFC: early-rng-init-tools

ems with doing this: some of these hardware RNGs are probably quite weak, so we have to be very conservative, but then the less entropy we credit the more CPU time will be spent in the hardware RNG reader thread. Ben. -- Ben Hutchings No political challenge can be met by shopping. - George Monbiot

Re: FYI/RFC: early-rng-init-tools

;arc4random" functions really use ChaCha20 today, anyway. Ben. > I hope you have found this review helpful. -- Ben Hutchings This sentence contradicts itself - no actually it doesn't. signature.asc Description: This is a digitally signed message part

Re: FYI/RFC: early-rng-init-tools

On Thu, 2019-02-28 at 11:56 +, Ian Jackson wrote: > Ben Hutchings writes ("Re: FYI/RFC: early-rng-init-tools"): > > On Mon, 2019-02-25 at 19:37 +0200, Uoti Urpala wrote: > > > Generally you don't ever > > > need to use /dev/random instead of /dev/urandom un

Re: FYI/RFC: early-rng-init-tools

On Tue, 2019-02-26 at 22:29 +0200, Uoti Urpala wrote: > On Tue, 2019-02-26 at 19:10 +0000, Ben Hutchings wrote: > > But if the input to the seed doesn't provide enough entropy, the seed > > is not completely secret (that is, you can recover it with less work > > than

Re: FYI/RFC: early-rng-init-tools

On Mon, 2019-02-25 at 14:36 -0500, Sam Hartman wrote: > > > > > > "Ben" == Ben Hutchings writes: > > Ben> The output of the RNG may well become public, for example in > Ben> document UUIDs. So when estimating the entropy that the new >

Re: FYI/RFC: early-rng-init-tools

) without also unblocking /dev/random. If the seed files used in two different boots are somewhat correlated, and the entropy estimation doesn't account for that, the output of /dev/random may also be somewhat correlated between the boots, which is not supposed to happen. Ben. -- Ben Hutchings Th

Re: FYI/RFC: early-rng-init-tools

On Mon, 2019-02-25 at 16:48 +, Thorsten Glaser wrote: > Ben Hutchings dixit: > > >> ‣ writes between 32 and 256 bytes to /dev/urandom (but does not > >> accredit them yet, just remembers the amount written) > > > >How do you determi

Re: FYI/RFC: early-rng-init-tools

On Mon, 2019-02-25 at 18:27 +0200, Uoti Urpala wrote: > Ben Hutchings wrote: > > The major input into the new seed file contents is the old seed file > > contents. You are adding very little entropy on x86, and possibly > > almost none on other architectures. >

Re: FYI/RFC: early-rng-init-tools

old seed file contents. You are adding very little entropy on x86, and possibly almost none on other architectures. Please reconsider this, as this description sounds dangerously insecure. Ben. -- Ben Hutchings The obvious mathematical breakthrough [

Re: FYI/RFC: early-rng-init-tools

n 2011 (Ivy Bridge core) and AMD only implemented in 2015 (Excavator core). Ben. -- Ben Hutchings The obvious mathematical breakthrough [to break modern encryption] would be development of an easy way to factor large prime numbers. - Bil

Re: Recreating history of a package

And it has HSTS, which is nice, but it is missing the redirection that's needed to make that work completely. Ben. -- Ben Hutchings When in doubt, use brute force. - Ken Thompson signature.asc Description: This is a digitally signed message part

Accepted linux-signed-i386 4.19.20+1 (source) into unstable, unstable

Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-3-686-di - ACPI support modules (udeb) acpi-modules-4.19.0-3-686-pae-di - ACPI support modules (udeb) ata-modules-4.19.0-3-686-di - ATA disk modules (udeb) ata-modules-4.19.0-3-686-pae-di - ATA disk

Accepted linux-signed-amd64 4.19.20+1 (source) into unstable, unstable

: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-3-amd64-di - ACPI support modules (udeb) ata-modules-4.19.0-3-amd64-di - ATA disk modules (udeb) btrfs-modules-4.19.0-3-amd64-di - BTRFS filesystem support (udeb) cdrom-core-modules-4.19.0-3-amd64-di

Accepted linux-signed-arm64 4.19.20+1 (source) into unstable, unstable

-4.19.0-3-arm64-di linux-image-4.19.0-3-arm64 linux-image-4.19.0-3-rt-arm64 Architecture: source Version: 4.19.20+1 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: ata-modules-4.19.0-3-arm64-di - ATA disk modules (udeb) btrfs-modules

Re: Handling of entropy during boot

On Mon, 2019-01-21 at 21:46 +, Ben Hutchings wrote: > On Mon, 2019-01-21 at 20:49 +, Andy Simpkins wrote: > [...] > > Should we add to or change the possible entropy sources? > [...] > > Yes, we should (by default) enable use of available hardware RNGs to > pro

Accepted linux-latest 103 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 11 Feb 2019 15:38:29 + Source: linux-latest Architecture: source Version: 103 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Changes: linux-latest (103) unstable; urgency

Accepted linux 4.19.20-1 (all source) into unstable, unstable

Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: linux-doc-4.19 - Linux kernel specific documentation for version 4.19 linux-headers-4.19.0-3-common - Common header files for Linux 4.19.0-3 linux-headers-4.19.0-3-common-rt - Common header

Accepted initramfs-tools 0.133 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 06 Feb 2019 20:13:59 + Source: initramfs-tools Architecture: source Version: 0.133 Distribution: unstable Urgency: medium Maintainer: Debian kernel team Changed-By: Ben Hutchings Closes: 677049 766446 848906 893897

Accepted klibc 2.0.6-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 01 Feb 2019 05:00:57 + Source: klibc Architecture: source Version: 2.0.6-1 Distribution: unstable Urgency: medium Maintainer: maximilian attems Changed-By: Ben Hutchings Changes: klibc (2.0.6-1) unstable; urgency=medium

Accepted linux-signed-i386 4.19.16+1 (source) into unstable, unstable

-modules-4.19.0-2-686-pae-di mtd-core-modules-4.19.0-2-686-pae-di linux-image-4.19.0-2-686 linux-image-4.19.0-2-686-pae linux-image-4.19.0-2-rt-686-pae Architecture: source Version: 4.19.16+1 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description

Accepted linux-signed-amd64 4.19.16+1 (source) into unstable, unstable

Changed-By: Ben Hutchings Description: acpi-modules-4.19.0-2-amd64-di - ACPI support modules (udeb) ata-modules-4.19.0-2-amd64-di - ATA disk modules (udeb) btrfs-modules-4.19.0-2-amd64-di - BTRFS filesystem support (udeb) cdrom-core-modules-4.19.0-2-amd64-di - CDROM support (udeb) compress

Accepted linux-signed-arm64 4.19.16+1 (source) into unstable, unstable

-arm64 Architecture: source Version: 4.19.16+1 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: ata-modules-4.19.0-2-arm64-di - ATA disk modules (udeb) btrfs-modules-4.19.0-2-arm64-di - BTRFS filesystem support (udeb) cdrom-core-modules-4.19.0

Re: Potentially insecure Perl scripts

other kinds of security hardening changes. We made them anyway and took the temporary pain for a long-term security gain. Ben. -- Ben Hutchings The most exhausting thing in life is being insincere. - Anne Morrow Lindberg signature.asc Description: This is a digitally signed message part

Re: Handling of entropy during boot

ous software entropy gathering daemons. We should also document this so that users that distrust certain entropy sources will know how to disable them. Ben. -- Ben Hutchings Klipstein's 4th Law of Prototyping and Production: A fail-safe circuit will destroy oth

Accepted klibc 2.0.5-2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 20 Jan 2019 22:49:25 + Source: klibc Binary: libklibc-dev libklibc klibc-utils Architecture: source Version: 2.0.5-2 Distribution: unstable Urgency: medium Maintainer: maximilian attems Changed-By: Ben Hutchings

Accepted klibc 2.0.5-1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sat, 19 Jan 2019 02:53:52 + Source: klibc Binary: libklibc-dev libklibc klibc-utils Architecture: source Version: 2.0.5-1 Distribution: unstable Urgency: medium Maintainer: maximilian attems Changed-By: Ben Hutchings

Accepted linux 4.19.16-1 (all source) into unstable, unstable

-headers-4.19.0-2-sparc64-smp linux-image-4.19.0-2-sparc64-smp-dbg linux-compiler-gcc-8-arm linux-compiler-gcc-8-s390 linux-compiler-gcc-8-x86 Architecture: all source Version: 4.19.16-1 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Closes: 918103

Accepted firmware-nonfree 20190114-1 (source) into unstable

Architecture: source Version: 20190114-1 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: firmware-adi - Binary firmware for Analog Devices Inc. DSL modem chips (dummmy p firmware-amd-graphics - Binary firmware for AMD/ATI graphics

Re: Handling of entropy during boot

inks, but I couldn't find any in your e-mail messages or > earlier ones on this thread. Perhaps I missed them; in which case, my > apologies. Can you please send/resend those links? [...] I sent you a bunch of bug links in message in August. Ben. -- Ben Hutchings Ev

Accepted nat-rtsp 0.7+4.18-0.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 07 Jan 2019 20:38:10 + Source: nat-rtsp Binary: nat-rtsp-dkms Architecture: source Version: 0.7+4.18-0.1 Distribution: unstable Urgency: medium Maintainer: Julien Muchembled Changed-By: Ben Hutchings Description: nat

Accepted kpatch 0.6.0-0.2 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 07 Jan 2019 19:39:23 + Source: kpatch Binary: kpatch kpatch-dkms kpatch-build Architecture: source Version: 0.6.0-0.2 Distribution: unstable Urgency: medium Maintainer: Chris J Arges Changed-By: Ben Hutchings Description

Accepted aufs 4.19+20181217-0.1 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 07 Jan 2019 18:47:57 + Source: aufs Binary: aufs-dkms aufs-dev Architecture: source Version: 4.19+20181217-0.1 Distribution: unstable Urgency: medium Maintainer: Jan Luca Naumann Changed-By: Ben Hutchings Description

Accepted klibc 2.0.4-15 (source) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 06 Jan 2019 19:33:01 + Source: klibc Binary: libklibc-dev libklibc klibc-utils Architecture: source Version: 2.0.4-15 Distribution: unstable Urgency: medium Maintainer: maximilian attems Changed-By: Ben Hutchings

Re: Proposal: Repository for fast-paced package backports

ture of the new > repo either. In my eyes, 'fastpaced' makes the point far better. > > But as said, the main argument against calling it 'rolling' is that it > would create confusion due to the name already being used in other > (Debian-related) contexts. At the risk of bikeshedding, some alternate names that might be less confusing: - fresh-apps - evergreen - rolling-apps Ben. -- Ben Hutchings Power corrupts. Absolute power is kind of neat. - John Lehman signature.asc Description: This is a digitally signed message part

Accepted linux-signed-amd64 4.20+1~exp1 (source) into experimental, experimental

-trunk-amd64-di rfkill-modules-4.20.0-trunk-amd64-di linux-image-4.20.0-trunk-amd64 linux-image-4.20.0-trunk-cloud-amd64 Architecture: source Version: 4.20+1~exp1 Distribution: experimental Urgency: medium Maintainer: Debian Kernel Team Changed-By: Ben Hutchings Description: acpi-modules-4.20.0

<    1   2   3   4   5   6   7   8   9   10   >