Re: Bug#975016: #975016 - OpenJDK 17 support state for Bullseye

2022-02-11 Thread Matthias Klose
On 2/10/22 11:26, Moritz Mühlenhoff wrote: > Am Thu, Feb 03, 2022 at 03:59:00PM +0100 schrieb Thorsten Glaser: >> Hi Holger, >> >>> and filed against src:debian-security-support, as openjdk-17 seems to be >>> supported and src:debian-security-support's purpose is to documented what's >> >> no, 11

Bug#1005355: bullseye-pu: package ldap2zone/0.2-11+deb11u1

2022-02-11 Thread Mike Gabriel
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: debian-edu-pkg-t...@alioth-lists.debian.net, debian-...@lists.debian.org [ Reason ] In Debian Edu, the ldap2zone package is used and called via CRON hourly. When

Bug#1005353: buster-pu: package apache-log4j2/2.11.1-2

2022-02-11 Thread Markus Koschany
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: a...@debian.org Hi, I would like to fix CVE-2021-44832 in Buster. Apache Log4j2 has been affected by some serious remote code execution vulnerabilities in the past

Bug#1005351: bullseye-pu: package apache-log4j2/2.16.0-1~deb11u1

2022-02-11 Thread Markus Koschany
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: a...@debian.org Hi, I would like to fix CVE-2021-44832 in Bullseye. Apache Log4j2 has been affected by some serious remote code execution vulnerabilities in the

Bug#1005343: nmu: asterisk-flite_3.0-4

2022-02-11 Thread Jonas Smedegaard
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 nmu asterisk-flite_3.0-4 . ANY . unstable . -m "rebuild against asterisk-1:18.10.0~dfsg+~cs6.10.40431411-1" -BEGIN PGP SIGNATURE-

Bug#1005328: RM: uglifyjs/2.8.29-8

2022-02-11 Thread Jonas Smedegaard
[ adding Yadd as cc ] Quoting Sebastian Ramacher (2022-02-11 15:25:19) > On 2022-02-11 14:48:00 +0100, Jonas Smedegaard wrote: > > Quoting Sebastian Ramacher (2022-02-11 13:24:16) > > > Control: tags -1 moreinfo > > > > > > On 2022-02-11 12:08:52 +0100, Jonas Smedegaard wrote: > > > > Package:

Re: chromium: Update to version 94.0.4606.61 (security-fixes)

2022-02-11 Thread Andres Salomon
On 2/11/22 06:18, Roger Shimizu wrote: Dear Andres, Thanks for your work for chromium! On Mon, Jan 3, 2022 at 7:33 PM Andres Salomon wrote: I saw https://salsa.debian.org/dilinger/chromium/-/commit/5c05f430e192961527ec9a64bbaa64401dc14d95 , but buster now also includes LLVM/clang 11 (it was

Bug#1005340: bullseye-pu: package golang-1.15/1.15.15-1~deb11u3

2022-02-11 Thread Shengjing Zhu
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: z...@debian.org, t...@security.debian.org [ Reason ] Backport patches for CVE-2022-23806 CVE-2022-23772 CVE-2022-23773 [ Impact ] + CVE-2022-23806:

Bug#1003548: transition: libwebp

2022-02-11 Thread Sebastian Ramacher
On 2022-02-11 07:27:42 -0800, Jeff Breidenbach wrote: > # remove the moreinfo tag > tags 1003548 - moreinfo > thanks > > Sebastian, may we move forward with ibwebp? The perl 5.34 transition is currently ongoing. As libwebp and perl 5.34 collide, libwebp will need to wait until perl is done.

Processed: Re: transition: libwebp

2022-02-11 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > # remove the moreinfo tag > tags 1003548 - moreinfo Bug #1003548 [release.debian.org] transition: libwebp Removed tag(s) moreinfo. > thanks Stopping processing here. Please contact me if you need assistance. -- 1003548:

Bug#1003548: transition: libwebp

2022-02-11 Thread Jeff Breidenbach
# remove the moreinfo tag tags 1003548 - moreinfo thanks Sebastian, may we move forward with ibwebp?

Bug#1005328: RM: uglifyjs/2.8.29-8

2022-02-11 Thread Sebastian Ramacher
On 2022-02-11 14:48:00 +0100, Jonas Smedegaard wrote: > Quoting Sebastian Ramacher (2022-02-11 13:24:16) > > Control: tags -1 moreinfo > > > > On 2022-02-11 12:08:52 +0100, Jonas Smedegaard wrote: > > > Package: release.debian.org > > > Severity: normal > > > User:

Bug#1005328: RM: uglifyjs/2.8.29-8

2022-02-11 Thread Jonas Smedegaard
Quoting Sebastian Ramacher (2022-02-11 13:24:16) > Control: tags -1 moreinfo > > On 2022-02-11 12:08:52 +0100, Jonas Smedegaard wrote: > > Package: release.debian.org > > Severity: normal > > User: release.debian@packages.debian.org > > Usertags: rm > > X-Debbugs-Cc: Debian Javascript

Bug#1005328: RM: uglifyjs/2.8.29-8

2022-02-11 Thread Sebastian Ramacher
Control: tags -1 moreinfo On 2022-02-11 12:08:52 +0100, Jonas Smedegaard wrote: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: rm > X-Debbugs-Cc: Debian Javascript Maintainers > > > uglifyjs v2 was last updated upstream in 2017, and

Processed: Re: Bug#1005328: RM: uglifyjs/2.8.29-8

2022-02-11 Thread Debian Bug Tracking System
Processing control commands: > tags -1 moreinfo Bug #1005328 [release.debian.org] RM: uglifyjs/2.8.29-8 Added tag(s) moreinfo. -- 1005328: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1005328 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#1005328: RM: uglifyjs/2.8.29-8

2022-02-11 Thread Paul Gevers
Hi Jonas, On 11-02-2022 12:08, Jonas Smedegaard wrote: (I tried to get the package auto-kicked from testing by filing release-critical bug#958117 but evidently that didn't work.) That would work if uglifyjs was not a key-package. We can only remove it if that's no longer the case, and then

Re: chromium: Update to version 94.0.4606.61 (security-fixes)

2022-02-11 Thread Roger Shimizu
Dear Andres, Thanks for your work for chromium! On Mon, Jan 3, 2022 at 7:33 PM Andres Salomon wrote: > > > I saw > > > https://salsa.debian.org/dilinger/chromium/-/commit/5c05f430e192961527ec9a64bbaa64401dc14d95 > > > , but buster now also includes LLVM/clang 11 (it was introduced to > > >

Bug#1005328: RM: uglifyjs/2.8.29-8

2022-02-11 Thread Jonas Smedegaard
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: rm X-Debbugs-Cc: Debian Javascript Maintainers -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 uglifyjs v2 was last updated upstream in 2017, and has no real maintainer in Debian since December