Your message dated Mon, 13 Jul 2026 01:19:43 +0000
with message-id <[email protected]>
and subject line Bug#1122795: fixed in nix 2.34.8+dfsg-1
has caused the Debian Bug report #1122795,
regarding nix: Please remove/replace usage of dh_movetousr
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1122795: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1122795
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: nix
Version: 2.26.3+dfsg-1
Severity: normal
User: [email protected]
Usertags: dh_movetousr_removal
Hi,
your package nix either Build-Depends on dh-sequence-movetousr or
uses dh_movetousr conditionally to move files from aliased locations
like /sbin, /bin or /lib to the canonical location in /usr.
Eventually, we would like to get rid of this debhelper addon.
Packages should use the canonical paths without any postprocessing.
This means, files are installed directly into /usr.
Please note, that such a change must not be backported to bookworm or
older. If you intend to provide such backports, these changes must be
reverted for those releases. If this means an undue burden on your
workflow our recommendation is to postpone this cleanup.
The motivation for this bug report is, to inform maintainers, that
installing files into the canonical location explicitly, is now the
preferred approach and dh_movetousr is now a deprecated tool.
The goal is, to have dh_movetousr removed after forky is released. We
can revise this plan, if needed. Please keep this timeline in mind
and let us know if this doesn't work for you.
For more information see [1].
If you have further questions, there is an IRC channel named
#debian-usrmerge on OFTC.
Regards,
Michael
[1] https://lists.debian.org/debian-devel/2025/11/msg00245.html
--- End Message ---
--- Begin Message ---
Source: nix
Source-Version: 2.34.8+dfsg-1
Done: Jordan Justen <[email protected]>
We believe that the bug you reported is fixed in the latest version of
nix, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jordan Justen <[email protected]> (supplier of updated nix package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 12 Jul 2026 16:41:36 -0700
Source: nix
Architecture: source
Version: 2.34.8+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Jordan Justen <[email protected]>
Changed-By: Jordan Justen <[email protected]>
Closes: 1122795 1135777
Changes:
nix (2.34.8+dfsg-1) unstable; urgency=medium
.
[ Jordan Justen ]
* New upstream release (Closes: #1135777),
Fixes CVE-2026-44028 and CVE-2026-44029.
.
[ Michael Biebl ]
* d/control: Drop Build-Depends on dh-sequence-movetousr (Closes: #1122795)
Checksums-Sha1:
785a80a014348c835b3718d1759594386fc172c5 2920 nix_2.34.8+dfsg-1.dsc
4a4bd7f68915d777e1b86702452fa8fbaf84f016 1545040 nix_2.34.8+dfsg.orig.tar.xz
ce51b885cf530f9144ea6eb73a3cd7949349d2b9 14400 nix_2.34.8+dfsg-1.debian.tar.xz
85dc38079929d0ba30cafcd9fb723a9cd4652051 12125
nix_2.34.8+dfsg-1_source.buildinfo
Checksums-Sha256:
a8ed55eb104460f289befa3c79c060397bdaaf7c68661a9f9475840aaa8a814a 2920
nix_2.34.8+dfsg-1.dsc
2042e5b5e83d323b37b0e5c0b479316ba74ea507a91eed7729a239bbff1ca1eb 1545040
nix_2.34.8+dfsg.orig.tar.xz
b704d551646cfeecada5a5daaa20f0711d3715b838cab960d212e7317423210c 14400
nix_2.34.8+dfsg-1.debian.tar.xz
d884453f860fd4babd41c329f16491fe59bd6d744ff41de144a0536305cb0eea 12125
nix_2.34.8+dfsg-1_source.buildinfo
Files:
b21901129029a2fbc3cd49778ad960da 2920 devel optional nix_2.34.8+dfsg-1.dsc
eb77975e5b629ff83a70f28d1519c103 1545040 devel optional
nix_2.34.8+dfsg.orig.tar.xz
a9029ddfc1a753e6170d718f728a3372 14400 devel optional
nix_2.34.8+dfsg-1.debian.tar.xz
9c4e1c332d9aebd7c5ac0c12f43ab7d5 12125 devel optional
nix_2.34.8+dfsg-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=90+O
-----END PGP SIGNATURE-----
pgpjIZWME4Ge7.pgp
Description: PGP signature
--- End Message ---
