Package: sponsorship-requests Severity: important Dear mentors,
I am looking for a sponsor for my package "sos": * Package name : sos Version : 4.12.1-1~bpo13+1 Upstream contact : Jake Hunsaker <[email protected]> * URL : https://github.com/sosreport/sos * License : GPL-2 * Vcs : https://salsa.debian.org/python-team/packages/sosreport Section : admin The source builds the following binary packages: sos - Set of tools to gather troubleshooting data from a system sosreport - transitional package for sos To access further information about this package, please visit the following URL: https://mentors.debian.net/package/sos/ Alternatively, you can download the package with 'dget' using this command: dget -x https://mentors.debian.net/debian/pool/main/s/sos/sos_4.12.1-1~bpo13+1.dsc Changes since the last upload: sos (4.12.1-1~bpo13+1) trixie-backports; urgency=medium . * Rebuild for trixie-backports. . sos (4.12.1-1) unstable; urgency=medium . * New upstream release 4.12.1 . * For more details, full release note is available here: - https://github.com/sosreport/sos/releases/tag/4.12.1 . * d/copyright: - Added copyright entries for new plugins. . * Former patches now fixed upstream: - d/p/0001-cleaner-refuse-out-of-tree-tar-members-on-extract.patch - d/p/0002-cleaner-refuse-out-of-tree-tar-members-for-hardlinks.patch . * d/p/0001-man-Fix-start-of-line-with-single-quote.patch: Fix man page issue, where it started a line with a single-quote. . sos (4.12.0-2) unstable; urgency=medium . * Patches to fix cleaner refuse out of tree tar members on extract [CVE-2026-79655] (Closes: #1145981) - d/p/0001-cleaner-refuse-out-of-tree-tar-members-on-extract.patch - d/p/0002-cleaner-refuse-out-of-tree-tar-members-for-hardlinks.patch * d/t/control: Replace script with avocado tests * d/watch: Update to Version 5 * d/control: Upgrade debhelper-compat level to 14 It is worth mentioning that this package adds a new testing dependency named avocado. Avocado is currently only available in Debian unstable, so no installation candidate exists in trixie. We do not expect this to be a blocker since Avocado is not required at runtime and is not specified in Build-Depends. Additionally, I am aspiring to become a Debian Maintainer (DM) for sos and am looking for someone willing to sponsor my candidacy. I have contributed several uploads to unstable and trixie-backports over the past year and my GPG key was recently signed by a Debian Developer (DD). I'm not certain that the updated key has propagated through all the public key infrastructure, but it is available with the signature by searching 2B557C44F627366C7D8EB568DEFDD813F61CCD92 on keyserver.ubuntu.com. Thanks in advance! Regards, -- Bryan Fraschetti
