Package: apt-listchanges
Version: 4.4
Severity: normal
Hi Jonathan,
I just found that the changelog entries for cryptsetup are in the wrong
order:
$ mmdebstrap --include=cryptsetup-bin,apt-listchanges \
--chrooted-customize-hook="sed -i 's/testing/experimental/' \
/etc/apt/sources.list; apt update; apt install apt-listchanges/experimental; \
sed -i 's/news/both/' /etc/apt/listchanges.conf; \
sed -i 's/experimental/unstable/' /etc/apt/sources.list; apt update; \
apt upgrade --yes" testing /dev/null
[..]
apt-listchanges: Changelogs
---------------------------
expat (2.6.0-1) unstable; urgency=high
* New upstream release:
- fixes CVE-2023-52425: fix quadratic runtime issues with big tokens that
can cause denial of service (closes: #1063238),
- fixes CVE-2023-52426: fix billion laughs attacks for users compiling
without XML_DTD defined (which is not common) (closes: #1063240).
-- Laszlo Boszormenyi (GCS) <g...@debian.org> Tue, 06 Feb 2024 22:00:26 +0100
lvm2 (2.03.22-1) unstable; urgency=medium
* New upstream release.
-- Bastian Blank <wa...@debian.org> Sat, 24 Feb 2024 16:41:00 +0100
cryptsetup (2:2.7.0-1+exp) experimental; urgency=medium
* New upstream release.
[ Guilhem Moulin ]
* d/control: cryptsetup Depends: Bump minimum cryptsetup-bin version to 2.7~.
* d/control: Build-Depends: Replace pkg-config with pkgconf.
* d/cryptsetup-suspend.lintian-overrides: Remove alien tag.
* d/cryptsetup.lintian-overrides: Remove unused overrides.
* d/cryptsetup.lintian-overrides: Add override ‘conflicts-with-version
cryptsetup-nuke-password’.
* d/t/cryptroot-*: Fix DEP-8 tests with QEMU 8.2.
[ Helmut Grohne ]
* /lib/cryptsetup/askpass: coordinated move to /usr for DEP17.
(Closes: #1060270)
-- Guilhem Moulin <guil...@debian.org> Mon, 26 Feb 2024 11:57:19 +0100
cryptsetup (2:2.7.0-1) unstable; urgency=medium
* Upload to unstable.
* Revert "d/gbp.conf: Set ‘debian-branch = debian/experimental’."
* Revert "Use OpenSSL's own argon2 implementation" (since sid doesn't have
OpenSSL 3.2 yet).
* Revert "d/control: cryptsetup Depends: Bump minimum cryptsetup-bin version
to 2.7~."
* Revert "d/cryptsetup.lintian-overrides: Ignore ‘conflicts-with-version
cryptsetup-nuke-password’."
* Revert "d/cryptsetup.lintian-overrides: Remove unused overrides."
* Revert "/lib/cryptsetup/askpass: coordinated move to /usr for DEP17"
-- Guilhem Moulin <guil...@debian.org> Mon, 26 Feb 2024 12:50:46 +0100
cryptsetup (2:2.7.0~rc1-1) experimental; urgency=medium
* New upstream release candidate.
* d/gbp.conf: Set ‘debian-branch = debian/experimental’.
* Add new DEP-8 test to check crypto backend flags. (And whether system
libargon2 is used.)
* Use OpenSSL's own argon2 implementation rather than libargon2. This drops
libargon2 from (Build-)Depends and bumps the minimum required OpenSSL
version to 3.2.
-- Guilhem Moulin <guil...@debian.org> Wed, 20 Dec 2023 18:28:36 +0100
cryptsetup (2:2.7.0~rc0-2) experimental; urgency=medium
Rebuild for experimental.
-- Guilhem Moulin <guil...@debian.org> Tue, 05 Dec 2023 21:11:42 +0100
I.e. 2:2.7.0-1+exp is listed before 2:2.7.0-1 whereas
/usr/share/doc/cryptsetup-bin/changelog.Debian.gz lists them the other
way round (and 2:2.7.0-1 is actually installed).
Cheers Jochen
-- Package-specific info:
==> /etc/apt/listchanges.conf <==
[apt]
frontend=pager
which=news
email_address=root
email_format=text
confirm=false
headers=false
reverse=false
save_seen=/var/lib/apt/listchanges
capture_snapshots=auto
snapshot_dir=/var/lib/apt/listchanges-snapshots
==> /etc/apt/listchanges.conf.d/jo-tools.conf <==
[apt]
which=both
email_address=none
headers=true
reverse=true
no_network=false
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.6.15-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages apt-listchanges depends on:
ii apt 2.7.12
ii debconf [debconf-2.0] 1.5.86
ii python3 3.11.6-1
ii python3-apt 2.7.6
ii python3-debconf 1.5.86
ii sensible-utils 0.0.22
ii ucf 3.0043+nmu1
apt-listchanges recommends no packages.
Versions of packages apt-listchanges suggests:
ii chromium [www-browser] 122.0.6261.57-1
pn default-mta | mail-transport-agent <none>
ii firefox [www-browser] 123.0-1
ii lynx [www-browser] 2.9.0rel.0-2
ii python3-gi 3.47.0-3
ii w3m [www-browser] 0.5.3+git20230121-2+b2
pn x-terminal-emulator <none>
-- debconf information:
* apt-listchanges/no-network: false
* apt-listchanges/confirm: false
* apt-listchanges/email-format: text
* apt-listchanges/which: news
* apt-listchanges/frontend: pager
* apt-listchanges/reverse: false
* apt-listchanges/save-seen: true
* apt-listchanges/email-address: root
* apt-listchanges/headers: false
