Uploading linux (5.8.14-1)

2020-10-10 Thread Salvatore Bonaccorso
Hi

I would like to upload a new linux version 5.8.14-1 to unstable today
(or tomorrow) to catch up with the v5.8.y stable series.

An ABI bump is included. The pending changes in the packaging are
furthermore:

   * [armhf] Enable MFD_AXP20X_RSB as a built-in (Closes: #914813).
   * [x86] Enable INTEL_PMC_CORE as module (Closes: #971017)

Regards,
Salvatore


signature.asc
Description: PGP signature


Re: Bug#971807: buster-pu: package webext-tbsync

2020-10-10 Thread Mechtilde Stehmann
Hello


Am 10.10.20 um 11:41 schrieb Adam D. Barratt:
> On Sat, 2020-10-10 at 11:16 +0200, Mechtilde Stehmann wrote:
>> Hello Adam,
> 
> Hi,
> 
> I've replied to the bug, as that's where you raised the questions, but
> as this is trending towards general discussion we should possibly move
> it to the debian-release list instead.

For me it is ok

 Since RT updated Thunderbird in buster from version 68.x to 78.x
 this causes the incompatibility from webext-tbsync with the
 recent Thunderbird version in Buster.
>>>
>>> For the record, the Release Team have done no such thing. The
>>> Security Team have released 78.x, which is not yet even in stable-
>>> new, yet alone buster (although it likely will be in buster after
>>> the next point release).

>> Ok, I want to understand it and to document it properly.
>>
>> The secutity-team does the the update of thunderbird from 68.x to
>> 78.x in buster.

> The package _has been_ released, and will be available to any user of
> stable who has the security archive in their APT sources (which
> *should* be all of them). That is not in dispute. It is just not yet
> part of the stable distribution in the main archive, "only" in the
> security archive. This is a detail of the process that I expect and
> appreciate that most users will never care about or possibly even be
> particularly aware of.

I want to clarify one further situation.

Thunderbird 78.3 was uploaded by security team to update from version 68.x

Webext-tbsync version 2.11 works fine with thunderbird 68.x. but it
doesn't work with thunderbird 78.x.

For thunderbird 78.x you need version 2.16 mandatorily.

In the meantime there is thunderbird 78.x in buster (security) and
webext-tbsync version 2.11 in buster. This combination is incompatible
(broken).

How can we handle such things in a better way in the future?

Kind regards
-- 
Mechtilde Stehmann
## Debian Developer
## PGP encryption welcome
## F0E3 7F3D C87A 4998 2899  39E7 F287 7BBA 141A AD7F



signature.asc
Description: OpenPGP digital signature


Processed: libdata-alias-perl: FTBFS with Perl 5.32: t/03_copy.t failure

2020-10-10 Thread Debian Bug Tracking System
Processing control commands:

> block 968912 with -1
Bug #968912 [release.debian.org] transition: perl 5.32
968912 was blocked by: 961208 968913 961155 960863 961157 961152 961154 964902
968912 was not blocking any bugs.
Added blocking bug(s) of 968912: 971969

-- 
968912: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968912
971969: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971969
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#968852: marked as done (transition: cfitsio)

2020-10-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Oct 2020 18:03:39 +0200
with message-id <20201010160339.gc4003...@ramacher.at>
and subject line Re: Bug#968852: transition: cfitsio
has caused the Debian Bug report #968852,
regarding transition: cfitsio
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
968852: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968852
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Dear release team,

I would like to request a transition slot for cfitsio, changing the
library name from libcfitsio8 to libcfitsio9. The version 3.480
introducing the ABI change has been in experimental for a few months. I
have just uploaded version 3.490 which is a mostly a bug fixes release
without new features.

I have locally rebuilt all the reversed dependencies on amd64, and found
only 3 FTBFS for packages that are only in sid:
- freeture (#922579)
- munipack (#957572)
- theli (#968638)

There is already a tracker available here:

https://release.debian.org/transitions/html/auto-cfitsio.html

Thanks for considering

Regards
Aurelien

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
--- End Message ---
--- Begin Message ---
On 2020-08-22 14:02:07 +0200, Aurelien Jarno wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: transition
> 
> Dear release team,
> 
> I would like to request a transition slot for cfitsio, changing the
> library name from libcfitsio8 to libcfitsio9. The version 3.480
> introducing the ABI change has been in experimental for a few months. I
> have just uploaded version 3.490 which is a mostly a bug fixes release
> without new features.

After vips finally migrated, the old libs got removed from testing.
Closing.

Cheers

> 
> I have locally rebuilt all the reversed dependencies on amd64, and found
> only 3 FTBFS for packages that are only in sid:
> - freeture (#922579)
> - munipack (#957572)
> - theli (#968638)
> 
> There is already a tracker available here:
> 
> https://release.debian.org/transitions/html/auto-cfitsio.html
> 
> Thanks for considering
> 
> Regards
> Aurelien
> 
> -- System Information:
> Debian Release: bullseye/sid
>   APT prefers testing
>   APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
> Architecture: amd64 (x86_64)
> 

-- 
Sebastian Ramacher


signature.asc
Description: PGP signature
--- End Message ---


Bug#968580: marked as done (transition: ilmbase/openexr)

2020-10-10 Thread Debian Bug Tracking System
Your message dated Sat, 10 Oct 2020 18:02:59 +0200
with message-id <20201010160259.gb4003...@ramacher.at>
and subject line Re: Bug#968580: transition: ilmbase/openexr
has caused the Debian Bug report #968580,
regarding transition: ilmbase/openexr
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
968580: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968580
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition
X-Debbugs-CC: pkg-phototools-de...@lists.alioth.debian.org, ma...@debian.org

Dear Release Team,

I'm filing this bug for a new transition of ilmbase/openexr packages.

On August 15th, 2020 good-shaped testing-purpose packages (2.5.3-1) for
both ilmbase and openexr have been uploaded to experimental.

So, following a checklist obtained via 'reverse-depends', here is the
list of source packages depending on ilmbase and openexr and the results
of the test builds (honoring the dependency levels as reported in the
checklist, as relevant for the correct order):

### Dependency level 2 ###
 * aqsis_1.8.2-12 => OK
 * calligra_1:3.2.1+dfsg-2 => OK
 * darktable_3.2.1-2 => OK
 * exactimage_1.0.2-7 => FTBFS (possibly OpenEXR-related)
 * field3d_1.7.2-1 => OK
 * freeimage_3.18.0+ds2-5 => OK
 * gegl_0.4.24-1 => OK
 * imagemagick_8:6.9.11.24+dfsg-1 => OK
 * kimageformats_5.70.0-1 => OK
 * kio-extras_4:19.12.3-1 => OK
 * krita_1:4.3.0+dfsg-1 => OK
 * libvigraimpex_1.11.1+dfsg-7 => OK
 * luminance-hdr_2.6.0+dfsg-2 => OK
 * mia_2.4.7-1 => OK
 * nvidia-texture-tools_2.0.8-1+dfsg-8.2 => OK
 * opencv_4.2.0+dfsg-6 => OK
 * openexr-viewers_2.3.0-1 => OK
 * openvdb_7.0.0-3 => FTBFS (not OpenEXR-related)
 * pink-pony_1.4.1-2.1 => OK
 * povray_1:3.7.0.8-4 => OK
 * slic3r-prusa_2.2.0+dfsg1-2 => OK

### Dependency level 3 ###
 * gimp_2.10.18-1 => OK
 * gst-plugins-bad1.0_1.16.2-2.3 => OK
 * hugin_2019.2.0+dfsg-2 => OK
 * k3d_0.8.0.6-8 => FTBFS (missing B-D)
 * openimageio_2.1.18.1~dfsg0-1 => OK
 * pfstools_2.1.0-5 => FTBFS (not OpenEXR-related)
 * synfig_1.2.2+dfsg-3 => OK

### Dependency level 4 ###
 * blender_2.83.4+dfsg-1 => OK
 * gmic_2.4.5-1.1 => OK
 * olive-editor_20200528-1 => OK

I'll follow-up this bug report with any progress in fixing the packages
that are FTBFS.

Thanks for your time and patience.

mfv


Ben file:

title = "ilmbase";
is_affected = .depends ~ "libilmbase24" | .depends ~ "libilmbase25";
is_good = .depends ~ "libilmbase25";
is_bad = .depends ~ "libilmbase24";

title = "openexr";
is_affected = .depends ~ "libopenexr24" | .depends ~ "libopenexr25";
is_good = .depends ~ "libopenexr25";
is_bad = .depends ~ "libopenexr24";


-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'buildd-unstable'), (500, 
'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.7.0-2-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-- 
Matteo F. Vescovi || Debian Developer
GnuPG KeyID: 4096R/0x8062398983B2CF7A


signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
On 2020-08-17 23:47:33 +0200, Matteo F. Vescovi wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: transition
> X-Debbugs-CC: pkg-phototools-de...@lists.alioth.debian.org, ma...@debian.org
> 
> Dear Release Team,
> 
> I'm filing this bug for a new transition of ilmbase/openexr packages.

After vips finally migrated, the old libs got removed from testing.
Closing.

Cheers

> 
> On August 15th, 2020 good-shaped testing-purpose packages (2.5.3-1) for
> both ilmbase and openexr have been uploaded to experimental.
> 
> So, following a checklist obtained via 'reverse-depends', here is the
> list of source packages depending on ilmbase and openexr and the results
> of the test builds (honoring the dependency levels as reported in the
> checklist, as relevant for the correct order):
> 
> ### Dependency level 2 ###
>  * aqsis_1.8.2-12 => OK
>  * calligra_1:3.2.1+dfsg-2 => OK
>  * darktable_3.2.1-2 => OK
>  * exactimage_1.0.2-7 => FTBFS (possibly OpenEXR-related)
>  * field3d_1.7.2-1 => OK
>  * freeimage_3.18.0+ds2-5 => OK
>  * gegl_0.4.24-1 => OK
>  * imagemagick_8:6.9.11.24+dfsg-1 => OK
>  * kimageformats_5.70.0-1 => OK
>  * kio-extras_4:19

Bug#971415: transition: ocaml

2020-10-10 Thread Sebastian Ramacher
Hi Stéphane

On 2020-09-30 09:12:20 +0200, Stéphane Glondu wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: transition
> X-Debbugs-Cc: debian-ocaml-ma...@lists.debian.org
> 
> Dear Release Team,
> 
> I've updated ocaml to 4.11.1 and uploaded to experimental. It builds on
> all release architectures, and most of ports as well (fixes for
> hurd-i386 are pending, and it's still not built on kfreebsd-*).
> 
> The main change as far as Debian is concerned is the split of the
> graphics library, which I packaged (as ocaml-graphics) and has been
> accepted.
> 
> I tried to install all corresponding opam packages in a 4.11.1 switch,
> and the breakage is minimal.

Have bugs been filed for the these issues or are you taking care of
that?

Best

> 
> Therefore, I think we can proceed to updating OCaml in unstable.
> 
> 
> Cheers,
> 
> -- 
> Stéphane
> 
> Ben file:
> 
> title = "ocaml";
> is_affected = .depends ~ "ocaml.*4\.08\.1" | .depends ~ "ocaml.*4\.11\.1";
> is_good = .depends ~ "ocaml.*4\.11\.1";
> is_bad = .depends ~ "ocaml.*4\.08\.1";
> 
> 
> -- System Information:
> Debian Release: bullseye/sid
>   APT prefers testing
>   APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
> 
> Kernel: Linux 5.8.0-2-amd64 (SMP w/4 CPU threads)
> Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not 
> set
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled

-- 
Sebastian Ramacher


signature.asc
Description: PGP signature


Processed: Re: Bug#971958: transition: libpgm

2020-10-10 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #971958 [release.debian.org] transition: libpgm
Added tag(s) confirmed.
> forwarded -1 https://release.debian.org/transitions/html/auto-libpgm.html
Bug #971958 [release.debian.org] transition: libpgm
Set Bug forwarded-to-address to 
'https://release.debian.org/transitions/html/auto-libpgm.html'.
> block -1 by 971957
Bug #971958 [release.debian.org] transition: libpgm
971958 was not blocked by any bugs.
971958 was not blocking any bugs.
Added blocking bug(s) of 971958: 971957

-- 
971958: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971958
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#971958: transition: libpgm

2020-10-10 Thread Sebastian Ramacher
Control: tags -1 + confirmed
Control: forwarded -1 
https://release.debian.org/transitions/html/auto-libpgm.html
Control: block -1 by 971957

On 2020-10-10 17:37:57 +0200, László Böszörményi wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: transition
> 
> Hi RMs,
> 
> I'm asking for a small transition of libpgm. Two packages are
> affected, libxs and zeromq3. The latter builds fine with libpgm 5.3 in
> experimental.

Please go ahead.

> The question is libxs because while I submitted a patch [1] that fixes
> its FTBFS with libpgm 5.3, it seems to be a dead weight. The upstream
> of it [2] disappeared. Popcon shows nine users and its maintainer
> didn't update it for four and half years (ie Standards-Version is
> still 3.9.7, debhelper level is 9).

There are also no reverse dependencies. libxs looks like a removal
candidate to me.

Cheers
-- 
Sebastian Ramacher


signature.asc
Description: PGP signature


Processed: Re: Bug#971942: transition: ufo-core

2020-10-10 Thread Debian Bug Tracking System
Processing control commands:

> forwarded -1 https://release.debian.org/transitions/html/auto-ufo-core.html
Bug #971942 [release.debian.org] transition: ufo-core
Set Bug forwarded-to-address to 
'https://release.debian.org/transitions/html/auto-ufo-core.html'.
> tags -1 + moreinfo
Bug #971942 [release.debian.org] transition: ufo-core
Added tag(s) moreinfo.

-- 
971942: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971942
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#971942: transition: ufo-core

2020-10-10 Thread Sebastian Ramacher
Control: forwarded -1 
https://release.debian.org/transitions/html/auto-ufo-core.html
Control: tags -1 + moreinfo

On 2020-10-10 11:40:13 +0200, Picca Frédéric-Emmanuel wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: transition
> X-Debbugs-Cc: pi...@debian.org
> 
> (please explain about the transition: impacted packages, reason, ...
>  for more info see: https://wiki.debian.org/Teams/ReleaseTeam/Transitions)
> 
> 
> Hello,
> 
> I request a slot for the ufo-core transition.
> the auto-ufo-core ben file seems ok to me
> 
> I checked that all packages are ok in experimental.

There's only ufo-filters which is also staged in experimental, so I
don't expect any actions required from the release team. Please feel
free to go ahead with the upload to unstable.

Cheers
-- 
Sebastian Ramacher


signature.asc
Description: PGP signature


Bug#971958: transition: libpgm

2020-10-10 Thread GCS
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Hi RMs,

I'm asking for a small transition of libpgm. Two packages are
affected, libxs and zeromq3. The latter builds fine with libpgm 5.3 in
experimental.
The question is libxs because while I submitted a patch [1] that fixes
its FTBFS with libpgm 5.3, it seems to be a dead weight. The upstream
of it [2] disappeared. Popcon shows nine users and its maintainer
didn't update it for four and half years (ie Standards-Version is
still 3.9.7, debhelper level is 9).

Thanks,
Laszlo/GCS
[1] https://bugs.debian.org/971957
[2] https://github.com/crossroads-io/libxs



Bug#971954: buster-pu: package libdatetime-timezone-perl/1:2.23-1+2020b

2020-10-10 Thread gregor herrmann
Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: debian-p...@lists.debian.org

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

I've uploaded libdatetime-timezone-perl/1:2.23-1+2020b to buster.
It contains the changes of the tzdata 2020b release as a quilt patch
against the Perl data files.

The changes of the Olson db 2020b release are (taken from their
upstream announcement):

  Revised predictions for Morocco's changes starting in 2023.
  Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  Macquarie Island has stayed in sync with Tasmania since 2011.
  Casey, Antarctica is at +08 in winter and +11 in summer.

I'm attaching a (manually stripped down) debdiff.


Cheers,
gregor

-BEGIN PGP SIGNATURE-
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=c3TQ
-END PGP SIGNATURE-
diff -Nru libdatetime-timezone-perl-2.23/debian/changelog 
libdatetime-timezone-perl-2.23/debian/changelog
--- libdatetime-timezone-perl-2.23/debian/changelog 2020-04-24 
18:30:12.0 +0200
+++ libdatetime-timezone-perl-2.23/debian/changelog 2020-10-10 
16:35:48.0 +0200
@@ -1,3 +1,12 @@
+libdatetime-timezone-perl (1:2.23-1+2020b) buster; urgency=medium
+
+  * Update to Olson database version 2020b.
+This update includes contemporary changes for Morocco, Casey Station, and
+the Yukon. This release also removes the very long-deprecated
+"US/Pacific-New" zone name.
+
+ -- gregor herrmann   Sat, 10 Oct 2020 16:35:48 +0200
+
 libdatetime-timezone-perl (1:2.23-1+2020a) buster; urgency=medium
 
   * Update to Olson database version 2020a.
diff -Nru libdatetime-timezone-perl-2.23/debian/patches/olson-2020b 
libdatetime-timezone-perl-2.23/debian/patches/olson-2020b
--- libdatetime-timezone-perl-2.23/debian/patches/olson-2020b   1970-01-01 
01:00:00.0 +0100
+++ libdatetime-timezone-perl-2.23/debian/patches/olson-2020b   2020-10-10 
16:35:48.0 +0200
@@ -0,0 +1,11184 @@
+Description: Update to Olson DB 2020b
+Origin: vendor
+Author: gregor herrmann 
+Last-Update: 2020-10-10
+
+--- a/lib/DateTime/TimeZone/Africa/Abidjan.pm
 b/lib/DateTime/TimeZone/Africa/Abidjan.pm
+@@ -3,7 +3,7 @@
+ # DateTime::TimeZone module distribution in the tools/ directory
+ 
+ #
+-# Generated from debian/tzdata/africa.  Olson data version 2020a
++# Generated from debian/tzdata/africa.  Olson data version 2020b
+ #
+ # Do not edit this file directly.
+ #
+@@ -43,7 +43,7 @@
+ ],
+ ];
+ 
+-sub olson_version {'2020a'}
++sub olson_version {'2020b'}
+ 
+ sub has_dst_changes {0}
+ 
+--- a/lib/DateTime/TimeZone/Africa/Casablanca.pm
 b/lib/DateTime/TimeZone/Africa/Casablanca.pm
+@@ -3,7 +3,7 @@
+ # DateTime::TimeZone module distribution in the tools/ directory
+ 
+ #
+-# Generated from debian/tzdata/africa.  Olson data version 2020a
++# Generated from debian/tzdata/africa.  Olson data version 2020b
+ #
+ # Do not edit this file directly.
+ #
+@@ -601,17 +601,17 @@
+ ],
+ [
+ 63814874400, #utc_start 2023-03-19 02:00:00 (Sun)
+-63817898400, #  utc_end 2023-04-23 02:00:00 (Sun)
++63818503200, #  utc_end 2023-04-30 02:00:00 (Sun)
+ 63814874400, #  local_start 2023-03-19 02:00:00 (Sun)
+-63817898400, #local_end 2023-04-23 02:00:00 (Sun)
++63818503200, #local_end 2023-04-30 02:00:00 (Sun)
+ 0,
+ 1,
+ '+00',
+ ],
+ [
+-63817898400, #utc_start 2023-04-23 02:00:00 (Sun)
++63818503200, #utc_start 2023-04-30 02:00:00 (Sun)
+ 63845719200, #  utc_end 2024-03-10 02:00:00 (Sun)
+-63817902000, #  local_start 2023-04-23 03:00:00 (Sun)
++63818506800, #  local_start 2023-04-30 03:00:00 (Sun)
+ 63845722800, #local_end 2024-03-10 03:00:00 (Sun)
+ 3600,
+ 0,
+@@ -745,17 +745,17 @@
+ ],
+ [
+ 64059818400, #utc_start 2030-12-22 02:00:00 (Sun)
+-64062842400, #  utc_end 2031-01-26 02:00:00 (Sun)
++64063447200, #  utc_end 2031-02-02 02:00:00 (Sun)
+ 64059818400, #  local_start 2030-12-22 02:00:00 (Sun)
+-64062842400, #local_end 2031-01-26 02:00:00 (Sun)
++64063447200, #local_end 2031-02-02 02:00:00 (Sun)
+ 0,
+ 1,
+ '+00',
+ ]

Bug#971866: buster-pu: package okular/4:17.12.2-2.2+deb10u1

2020-10-10 Thread Moritz Mühlenhoff
On Sat, Oct 10, 2020 at 09:40:05AM +0100, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Thu, 2020-10-08 at 21:15 +0200, Moritz Muehlenhoff wrote:
> > Low severity fix for Okular, which doesn't warrant a DSA.
> > I've tested with the reproducerand a number of other PDF
> > files that everything works as expected.
> > 
> 
> Please go ahead.

Uploaded.

Cheers,
Moritz



Bug#971915: buster-pu: package transmission/2.94-2+deb10u2

2020-10-10 Thread Moritz Mühlenhoff
On Sat, Oct 10, 2020 at 09:44:31AM +0100, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Fri, 2020-10-09 at 19:40 +0200, Moritz Muehlenhoff wrote:
> > Fixes a memory leak when running Transmission in daemon mode.
> > 
> > [ Tests ]
> > Have been using the package since a few weeks and the user
> > who reported the leak (running an affected setup) confirmed
> > that it fixes the leak.
> 
> Please go ahead.

Uploaded.

Cheers,
Moritz



Bug#971869: buster-pu: package freecol/0.11.6+dfsg2-2+deb10u1

2020-10-10 Thread Moritz Mühlenhoff
On Sat, Oct 10, 2020 at 09:41:38AM +0100, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Thu, 2020-10-08 at 21:20 +0200, Moritz Muehlenhoff wrote:
> > Low severity bugfix for freecol, which doesn't warrant a DSA.
> > 
> > The (identical) patch has been in unstable for half a year, also
> > doublechecked by playing for half an hour :-)
> 
> Please go ahead.

Uploaded.

Cheers,
Moritz



Bug#971944: buster-pu: package espeak/1.48.04+dfsg-7+deb10u1

2020-10-10 Thread Samuel Thibault
Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu

Hello,

[ Reason ]
Espeak cannot drive the mbrola-fr4 speech synthesis voice if the
mbrola-fr1 package is not installed. This is because some of the mb-fr4
espeak rules refer to the fr1 voice while they should be referring to
the fr4 voice. This was fixed some time ago in the newer espeak-ng
package, but the fix was not backported yet to espeak.

[ Impact ]
This was not a regression over oldstable, but it's hard for users to
guess that espeak+mbrola-fr4 cannot work without the mbrola-fr1 package,
I actually got hit by the issue a week ago and it took me some time to
realize the problem, even though I'm maintaining the packages.

[ Tests ]
After installing speech-dispatcher, espeak, and mbrola-fr4, but not
mbrola-fr1,

spd-say -O espeak-mbrola-generic Bonjour

should be speaking "Bonjour"

[ Risks ]
The change is trivial, as attached. It is already tested as working in
unstable.

[ Checklist ]
  [X] *all* changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in (old)stable
  [X] the issue is verified as fixed in unstable

[ Changes ]
They simply fix the fr1 reference into fr4.

Yes, the remaining reference to fr1_phtrans is on purpose, it is part of
the confusion between mbrola-fr1 and mbrola-fr4: fr1_phtrans is provided
by espeak-data for both mbrola-fr1 and mbrola-fr4, it was actually
renamed to fr_phtrans in espeak-ng-data.

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 
'testing-debug'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), (500, 
'proposed-updates'), (500, 'oldoldstable'), (500, 'buildd-unstable'), (500, 
'unstable'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental-debug'), 
(1, 'buildd-experimental'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.8.0 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
diff -Nru espeak-1.48.04+dfsg/debian/changelog 
espeak-1.48.04+dfsg/debian/changelog
--- espeak-1.48.04+dfsg/debian/changelog2018-10-23 18:26:10.0 
+0200
+++ espeak-1.48.04+dfsg/debian/changelog2020-10-10 11:26:41.0 
+0200
@@ -1,3 +1,10 @@
+espeak (1.48.04+dfsg-7+deb10u1) buster; urgency=medium
+
+  * patches/mbrola-fr4: Fix using espeak with mbrola-fr4 when mbrola-fr1 is
+not installed.
+
+ -- Samuel Thibault   Sat, 10 Oct 2020 11:26:41 +0200
+
 espeak (1.48.04+dfsg-7) unstable; urgency=medium
 
   * control: Bump Standards-Version to 4.2.0 (no changes).
diff -Nru espeak-1.48.04+dfsg/debian/patches/mbrola-fr4 
espeak-1.48.04+dfsg/debian/patches/mbrola-fr4
--- espeak-1.48.04+dfsg/debian/patches/mbrola-fr4   1970-01-01 
01:00:00.0 +0100
+++ espeak-1.48.04+dfsg/debian/patches/mbrola-fr4   2020-10-07 
22:53:16.0 +0200
@@ -0,0 +1,22 @@
+diff --git a/espeak-data/voices/mb/mb-fr4 b/espeak-data/voices/mb/mb-fr4
+index 8e3c392..6e459cc 100755
+--- a/espeak-data/voices/mb/mb-fr4
 b/espeak-data/voices/mb/mb-fr4
+@@ -5,5 +5,5 @@ gender female
+ dictrules 1
+ pitch 140 220
+ voicing 90
+-mbrola fr1 fr1_phtrans
++mbrola fr4 fr1_phtrans
+ 
+diff --git a/espeak-data/voices/mb/mb-fr4-en b/espeak-data/voices/mb/mb-fr4-en
+index 8126770..33817e5 100755
+--- a/espeak-data/voices/mb/mb-fr4-en
 b/espeak-data/voices/mb/mb-fr4-en
+@@ -5,5 +5,5 @@ gender female
+ dictrules 1
+ pitch 140 220
+ voicing 90
+-mbrola fr1 fr1_phtrans
++mbrola fr4 fr1_phtrans
+ 
diff -Nru espeak-1.48.04+dfsg/debian/patches/series 
espeak-1.48.04+dfsg/debian/patches/series
--- espeak-1.48.04+dfsg/debian/patches/series   2016-09-11 02:42:30.0 
+0200
+++ espeak-1.48.04+dfsg/debian/patches/series   2020-10-07 22:53:16.0 
+0200
@@ -3,3 +3,4 @@
 fpic
 char_cast
 path
+mbrola-fr4


Bug#971807: buster-pu: package webext-tbsync

2020-10-10 Thread Adam D. Barratt
On Sat, 2020-10-10 at 11:16 +0200, Mechtilde Stehmann wrote:
> Hello Adam,

Hi,

I've replied to the bug, as that's where you raised the questions, but
as this is trending towards general discussion we should possibly move
it to the debian-release list instead.

> Am 07.10.20 um 21:45 schrieb Adam D. Barratt:
> > On Wed, 2020-10-07 at 21:24 +0200, Mechtilde Stehmann wrote:
> > > Hello Adam,
> > > 
> > > On Wed, 07 Oct 2020 19:54:41 +0100 "Adam D. Barratt"
> > >  wrote:> severity 971807 normal
> 
> ...
> 
> > > Since RT updated Thunderbird in buster from version 68.x to 78.x
> > > this causes the incompatibility from webext-tbsync with the
> > > recent Thunderbird version in Buster.
> > 
> > For the record, the Release Team have done no such thing. The
> > Security Team have released 78.x, which is not yet even in stable-
> > new, yet alone buster (although it likely will be in buster after
> > the next point release).
> > 
> > I realise this might seem picky, but if you're going to say we
> > caused it... :-)
> 
> Ok, I want to understand it and to document it properly.
> 
> The secutity-team does the the update of thunderbird from 68.x to
> 78.x in buster.
> 
> As I did an apt update && apt list --upgradable it already shows
> thunderbird 1:78.x in buster. So for me thunderbird 78.x is already
> released.

Where / how does it show that the package is "in buster"? Your
sources.list contains an entry for the security archive, which will be
"(security|deb).debian.org/debian-security buster/updates main" or
similar. As such the package is "in buster/updates" or "in buster-
security", but not "in buster".

The package _has been_ released, and will be available to any user of
stable who has the security archive in their APT sources (which
*should* be all of them). That is not in dispute. It is just not yet
part of the stable distribution in the main archive, "only" in the
security archive. This is a detail of the process that I expect and
appreciate that most users will never care about or possibly even be
particularly aware of.

Note that this does not in general mean that an update required to
stable by another update in the security archive cannot be made. I
would not have mentioned it at all, if you had not yourself said that
the Release Team had made the update to thunderbird. I was not honestly
expecting that comment to generate this much process discussion. :-)

> How can I follow up which package is in stable-new and not already in
> stable?

As a starting point, if the DSA was released since the most recent
point release, then the package cannot be in stable yet, as stable only
changes with point releases, which happen roughly every couple of
months.

APT will also show the difference:

$ apt-cache policy thunderbird
thunderbird:
  Installed: (none)
  Candidate: 1:78.3.1-2~deb10u2
  Version table:
 1:78.3.1-2~deb10u2 500
500 http://security.debian.org/debian-security buster/updates/main 
amd64 Packages
 1:68.12.0-1~deb10u1 500
500 http://deb.debian.org/debian buster/main amd64 Packages

and for a package that has already been included in a point release:

$ apt-cache policy ark
ark:
  Installed: (none)
  Candidate: 4:18.08.3-1+deb10u2
  Version table:
 4:18.08.3-1+deb10u2 500
500 http://deb.debian.org/debian buster/main amd64 Packages
500 http://security.debian.org/debian-security buster/updates/main 
amd64 Packages

The current status of packages being potentially included in the next
point release (either via p-u, or imported from the security archive)
can be seen at https://release.debian.org/proposed-updates/stable.html
, with the top table corresponding to stable-new.

As stable-new is "just" another suite (well, it's a policy queue, but
for users that's again mostly an archive implementation detail), you
can also see the status of the package using rmadison, or dak on a
couple of DD-accessible hosts:

$ rmadison thunderbird -s stable,stable-new
thunderbird | 1:60.9.0-1~deb10u1  | stable | source, armel, armhf
thunderbird | 1:68.12.0-1~deb10u1 | stable | source, amd64, arm64, i386, 
mips64el, ppc64el, s390x
thunderbird | 1:78.3.1-2~deb10u1  | stable-new | source, amd64, arm64, 
mips64el, ppc64el
thunderbird | 1:78.3.1-2~deb10u2  | stable-new | source, amd64, arm64, i386, 
mips64el, ppc64el

I hope that helps resolve any queries you had regarding the process and
my earlier comment.

Regards,

Adam



Bug#971942: transition: ufo-core

2020-10-10 Thread Picca Frédéric-Emmanuel
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition
X-Debbugs-Cc: pi...@debian.org

(please explain about the transition: impacted packages, reason, ...
 for more info see: https://wiki.debian.org/Teams/ReleaseTeam/Transitions)


Hello,

I request a slot for the ufo-core transition.
the auto-ufo-core ben file seems ok to me

I checked that all packages are ok in experimental.

thanks for considering

Frederic

-- System Information:
Debian Release: bullseye/sid
  APT prefers stable-debug
  APT policy: (500, 'stable-debug'), (500, 'proposed-updates-debug'), (500, 
'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.8.0-2-amd64 (SMP w/4 CPU threads)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled



Bug#971807: buster-pu: package webext-tbsync

2020-10-10 Thread Mechtilde Stehmann
Hello Adam,


Am 07.10.20 um 21:45 schrieb Adam D. Barratt:
> On Wed, 2020-10-07 at 21:24 +0200, Mechtilde Stehmann wrote:
>> Hello Adam,
>>
>> On Wed, 07 Oct 2020 19:54:41 +0100 "Adam D. Barratt"
>>  wrote:> severity 971807 normal

...

>> Since RT updated Thunderbird in buster from version 68.x to 78.x this
>> causes the incompatibility from webext-tbsync with the recent
>> Thunderbird version in Buster.
> 
> For the record, the Release Team have done no such thing. The Security
> Team have released 78.x, which is not yet even in stable-new, yet alone
> buster (although it likely will be in buster after the next point
> release).
> 
> I realise this might seem picky, but if you're going to say we caused
> it... :-)

Ok, I want to understand it and to document it properly.

The secutity-team does the the update of thunderbird from 68.x to 78.x
in buster.

As I did an apt update && apt list --upgradable it already shows
thunderbird 1:78.x in buster. So for me thunderbird 78.x is already
released.

How can I follow up which package is in stable-new and not already in
stable?

Kind regards
-- 
Mechtilde Stehmann
## Debian Developer
## PGP encryption welcome
## F0E3 7F3D C87A 4998 2899  39E7 F287 7BBA 141A AD7F



signature.asc
Description: OpenPGP digital signature


Bug#970816: buster-pu: package libimobiledevice/1.2.1~git20181030.92c5462-2+deb10u1

2020-10-10 Thread Yves-Alexis Perez
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Sat, 2020-10-10 at 09:21 +0100, Adam D. Barratt wrote:
> > 
> > I backported some of the changes to stable (the snapshot and backup
> > protocols versions, unfortunately the debug part would require
> > backporting others commits).
> 
> Please go ahead.

Thanks, uploaded!
- -- 
Yves-Alexis
-BEGIN PGP SIGNATURE-

iQEzBAEBCAAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAl+Bde4ACgkQ3rYcyPpX
RFu18QgAroGkfKkkbHZ9xPSNxEoTaRobnt9wnoof4m5D9K011CGLwyTa6+hKR6KU
6/pUw1080Iv+gb4/Agv4yUnJcY04G4yZMk3W3f8bnFjePNKCTJxIB7omwEMwxbkW
Sx6QF+QMorfhgnqa7/uYsgy7lLCD0KAKP9o82QIkcjqTF8boFISsuTyQPqgOOqLD
GhTSjkUmioHp+mdIn53c0l2arX4xztM4CCS+ISaKa4yvG/hFryZuKSP8uTIKoDNk
wJwafaU1CsvkjOmepiCHY5oc2B1P7y2a79rdx3UhIMCAVcWec8xPPSJjSCnTIk8h
5tc6AoUXT7XaOgcPW2zKcfnsDtLECw==
=iieH
-END PGP SIGNATURE-



Processed: Re: Bug#971915: buster-pu: package transmission/2.94-2+deb10u2

2020-10-10 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #971915 [release.debian.org] buster-pu: package transmission/2.94-2+deb10u2
Added tag(s) confirmed.

-- 
971915: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971915
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#971915: buster-pu: package transmission/2.94-2+deb10u2

2020-10-10 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Fri, 2020-10-09 at 19:40 +0200, Moritz Muehlenhoff wrote:
> Fixes a memory leak when running Transmission in daemon mode.
> 
> [ Tests ]
> Have been using the package since a few weeks and the user
> who reported the leak (running an affected setup) confirmed
> that it fixes the leak.

Please go ahead.

Regards,

Adam



Bug#971869: buster-pu: package freecol/0.11.6+dfsg2-2+deb10u1

2020-10-10 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Thu, 2020-10-08 at 21:20 +0200, Moritz Muehlenhoff wrote:
> Low severity bugfix for freecol, which doesn't warrant a DSA.
> 
> The (identical) patch has been in unstable for half a year, also
> doublechecked by playing for half an hour :-)

Please go ahead.

Regards,

Adam



Processed: Re: Bug#971866: buster-pu: package okular/4:17.12.2-2.2+deb10u1

2020-10-10 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #971866 [release.debian.org] buster-pu: package okular/4:17.12.2-2.2+deb10u1
Added tag(s) confirmed.

-- 
971866: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971866
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#971869: buster-pu: package freecol/0.11.6+dfsg2-2+deb10u1

2020-10-10 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #971869 [release.debian.org] buster-pu: package 
freecol/0.11.6+dfsg2-2+deb10u1
Added tag(s) confirmed.

-- 
971869: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971869
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#971866: buster-pu: package okular/4:17.12.2-2.2+deb10u1

2020-10-10 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Thu, 2020-10-08 at 21:15 +0200, Moritz Muehlenhoff wrote:
> Low severity fix for Okular, which doesn't warrant a DSA.
> I've tested with the reproducerand a number of other PDF
> files that everything works as expected.
> 

Please go ahead.

Regards,

Adam



Bug#971685: buster-pu: package fish/3.0.2-2+deb10u1

2020-10-10 Thread Adam D. Barratt
Control: tags -1 + moreinfo

On Sun, 2020-10-04 at 19:53 -0400, Boyuan Yang wrote:
> I am working on solving https://bugs.debian.org/970777 , a bug that
> made package fish in Debian 10 unusable with sudo in terminal. The
> patch comes from upstream trunk.

The metadata for that bug indicates that it is affects the package in
unstable and is not yet fixed there - is that correct? If so, then the
fix needs to be in unstable before we can consider it for a stable
update. If not, please update the metadata to indicate which package
version the fix was first included in.

Regards,

Adam



Processed: Re: Bug#971685: buster-pu: package fish/3.0.2-2+deb10u1

2020-10-10 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + moreinfo
Bug #971685 [release.debian.org] buster-pu: package fish/3.0.2-2+deb10u1
Added tag(s) moreinfo.

-- 
971685: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971685
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#971062: buster-pu: package plinth/19.1

2020-10-10 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Sat, 2020-09-26 at 22:38 -0400, James Valleroy wrote:
> This update proposes to fix security tracker issue CVE-2020-25073,
> where a remote attackers could obtain sensitive information from the
> /server-status page of the Apache HTTP Server, because a connection
> from the Tor onion service (or from PageKite) is considered a local
> connection.

Please go ahead.

> This issue also exists in stretch.

stretch is handled by the LTS team now, so you'll need to contact them
if you'd like to update the package there.

Regards,

Adam



Processed: Re: Bug#971062: buster-pu: package plinth/19.1

2020-10-10 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #971062 [release.debian.org] buster-pu: package plinth/19.1
Added tag(s) confirmed.

-- 
971062: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971062
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#970745: buster-pu: package pdns_4.1.6-3+deb10u1

2020-10-10 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #970745 [release.debian.org] buster-pu: package pdns_4.1.6-3+deb10u1
Added tag(s) confirmed.

-- 
970745: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=970745
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#970745: buster-pu: package pdns_4.1.6-3+deb10u1

2020-10-10 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Tue, 2020-09-22 at 22:22 +0200, Chris Hofstaedtler wrote:
> Fixes for low-severity issues CVE-2019-10203 and CVE-2020-17482.
> Both using upstream patches for the 4.1 branch.

Please go ahead.

> Maybe it should be pointed out in the stable update notes that
> manual action is needed to remedy CVE-2019-10203 for existing
> installations using postgres. "Manual schema update required for
> PostgreSQL"?

We could, but I'm not sure how many people actually read the fine print
of the announcement mails, particularly in sections that they expect to
be boilerplate.

I was wondering if it was worth a d/NEWS entry, although that would
obviously be potentially annoying if it ends up being shown to users
who don't have the relevant binary package installd.

Regards,

Adam



Bug#970655: buster-pu: package sleuthkit/4.6.5-1+deb10u1

2020-10-10 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Sun, 2020-09-20 at 20:01 +, Francisco Vilmar Cardoso Ruviaro
wrote:
> I would like to update the sleuthkit on the buster to prevent a stack
> buffer overflow in yaffsfs_istat, because during a review of the
> Debian Security Tracker, I found CVE-2020-10232.

Please go ahead.

Regards,

Adam



Processed: Re: Bug#970655: buster-pu: package sleuthkit/4.6.5-1+deb10u1

2020-10-10 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #970655 [release.debian.org] buster-pu: package sleuthkit/4.6.5-1+deb10u1
Added tag(s) confirmed.

-- 
970655: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=970655
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#970816: buster-pu: package libimobiledevice/1.2.1~git20181030.92c5462-2+deb10u1

2020-10-10 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #970816 [release.debian.org] buster-pu: package 
libimobiledevice/1.2.1~git20181030.92c5462-2+deb10u1
Added tag(s) confirmed.

-- 
970816: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=970816
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#970816: buster-pu: package libimobiledevice/1.2.1~git20181030.92c5462-2+deb10u1

2020-10-10 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Wed, 2020-09-23 at 20:59 +0200, Yves-Alexis Perez wrote:
> would it be possible to allow a new libimobiledevice version in
> Buster?
> 
> [ Reason ]
> 
> the recently released iOS (and ipadOS) 14 updates some protocols
> version used for communication between a host and a device,
> especially debug, backup and snapshot services. Upstream has updated
> the library, I've already uploaded a fixed version in stable (and it
> has migrated to testing).
> 
> I backported some of the changes to stable (the snapshot and backup
> protocols versions, unfortunately the debug part would require
> backporting others commits).

Please go ahead.

Regards,

Adam



Bug#966373: general: Higher version for uploads to stable and oldstable distributions

2020-10-10 Thread Adam D. Barratt
On Wed, 2020-10-07 at 20:05 +0200, Javier Serrano Polo wrote:
> El dl 21 de 09 de 2020 a les 16:50 +0200, Javier Serrano Polo va
> escriure:
> > I will elaborate on the problem with 1-1+b1foo1 and 1-1+b1foo1+b1
> > if you are willing to help.
> 
> First, a binNMU in Debian may be unnecessary in the derivative.
> Following Debian binNMUs means unnecessary builds in architectures
> supported by the derivative and a burden for users in unsupported
> architectures.

This has nothing specifically to do with updates to stable, and
changing the versioning used for source updates to stable will not
change it. If stable released with version 1.0-1 of package foo, then
it is entirely feasible that a binNMU will be required at some point,
and that will be versioned as 1.0-1+b1.

If the derivative has previously made a change to foo, then they can
version it as 1.0-1+deriv1, and it will not be superseded by the
binNMU. If they have not, then operating as an overlay means they must
pull in the binNMU. There are absolutely no changes to package
versioning that can change these facts, and you must be fully aware of
this.

> Moreover, the derivative would need to track all binary
> changes instead of source changes only.

As above, this is a decision that the derivative has made for
themselves by choosing to overlay the base Debian archive rather than
import changes into their own full distribution.

It also conflicts with your original claims that you were trying to
avoid having a stable update - which would be a source change -
automatically pulled in to the derivative and thus overriding earlier
changes made in the derivative.

There are two choices for the derivative when making source changes.
They either use 1.0-1+deriv1, at which point a future stable update to
Debian will not supersede their upload, or they use 1.0-1deriv1 and
accept that future updates to Debian will overwrite their changes.

Yes, this means work for the derivative. That's an unfortunate fact of
life in the space. Either updates to the base distribution
automatically get pulled in, and may thus override changes in the
derivative, or they do not and the derivative thus has to inspect each
upload to the base distribution and decide whether to import it. 

I believe that your focus on binNMUs here clearly indicates that you
are not trying to solve an actual issue with the versioning of *source*
uploads to Debian's stable distributions, as there can be no changes to
the version scheme used for stable updates that will change anything
related to binNMUs. Furthermore, I do not believe that you were unaware
of any of these facts before sending your mail.

Regards,

Adam