Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-16 Thread Patrick Franz
Hej,

Am Sonntag, 17. Dezember 2023, 00:33:58 CET schrieb Soren Stoutner:
[...]
> > No matter what angelfish does, qtwebview-opensource-src will in any
> > case also need a rebuild.
> 
> Qt WebView is deprecated upstream.  It was based on the same Apple
> WebKit source that WebViewGTK uses.  It was replaced quite a while
> ago by Qt WebEngine, which is based on Google’s Chromium.  There is
> no Qt 6 version of Qt WebView, so it will go entirely away at that
> point.

There is one: https://tracker.debian.org/pkg/qt6-webview

Are you perhaps confusing Qt WebView with Qt WebKit ?


> But this brings up an interesting question.  Why are the Qt source
> packages building private-dev binary packages?  There was probably
> some historical reason for doing so, but handling security support in
> stable would be a lot easier if we stopped shipping private headers
> that other packages can build- depends on.  Perhaps Dmitry or Patrick
> could provide some background.

Usually, we try to avoid packaging the private headers. But for some 
packages, we just need to. And that's because other packages depend on 
them incl. other Qt submodules.
We don't have a rule set in stone, but we usually package private 
headers when either another Qt submodule needs them (e.g. qtwebview 
needs the private headers of qtwebengine, hence we package them) or when 
important KDE components need them (e.g. qtwayland).


-- 
Med vänliga hälsningar

Patrick Franz




Re: Bug#1057755: Qt WebEngine Security Support In Stable

2023-12-16 Thread Adrian Bunk
On Sat, Dec 16, 2023 at 01:22:13PM -0700, Soren Stoutner wrote:
>...
> Bookworm released with qtwebengine-opensource-src 5.15.8+dfsg-1, but 
> 5.15.13+dfsg-1~deb12u1 was later uploaded.
>...

That's not true, bookworm released with 5.15.13+dfsg-1~deb12u1.

> At this point, the biggest remaining question is what is the private header 
> that angelfish is using in Qt WebEngine and why?
>...

No matter what angelfish does, qtwebview-opensource-src will in any case 
also need a rebuild.

> Thanks,
> 
> Soren

cu
Adrian



Bug#1058700: marked as done (nmu: dar_2.7.13-2)

2023-12-16 Thread Debian Bug Tracking System
Your message dated Sat, 16 Dec 2023 21:52:03 +0100
with message-id 
and subject line Re: Bug#1058700: nmu: dar_2.7.13-2
has caused the Debian Bug report #1058700,
regarding nmu: dar_2.7.13-2
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1058700: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1058700
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Control: affects -1 + src:dar
User: release.debian@packages.debian.org
Usertags: binnmu
Severity: normal

Hi,

if I see this correctly then dar 2.7.13-2 won't migrate to testing
because it was built using openssl 3.0.12-1. This version isn't in
testing and if everything goes according to then plan then openssl
3.1.4-2 will migrate to testing in ~3days. Therefore I suggest to binNMU
dar to pickup current openssl so it can migrate:

nmu dar_2.7.13-2 . ANY . unstable . -m "Update Built-Using for openssl"

Sebastian
--- End Message ---
--- Begin Message ---
On 2023-12-14 19:43:54 +0100, Sebastian Andrzej Siewior wrote:
> Package: release.debian.org
> Control: affects -1 + src:dar
> User: release.debian@packages.debian.org
> Usertags: binnmu
> Severity: normal
> 
> Hi,
> 
> if I see this correctly then dar 2.7.13-2 won't migrate to testing
> because it was built using openssl 3.0.12-1. This version isn't in
> testing and if everything goes according to then plan then openssl
> 3.1.4-2 will migrate to testing in ~3days. Therefore I suggest to binNMU
> dar to pickup current openssl so it can migrate:
> 
> nmu dar_2.7.13-2 . ANY . unstable . -m "Update Built-Using for openssl"

Scheduled.

Cheers
-- 
Sebastian Ramacher--- End Message ---


Processed: Re: Bug#1057706: transition: dpdk

2023-12-16 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 confirmed
Bug #1057706 [release.debian.org] transition: dpdk
Added tag(s) confirmed.

-- 
1057706: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057706
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1057706: transition: dpdk

2023-12-16 Thread Sebastian Ramacher
Control: tags -1 confirmed

Hi Luca

On 2023-12-07 11:41:04 +, Luca Boccassi wrote:
> We have prepared the src:dpdk 23.11 ABI transition.

Please go ahead

Cheers
-- 
Sebastian Ramacher



Processed: Re: Bug#1058781: transition: zxing-cpp

2023-12-16 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 confirmed
Bug #1058781 [release.debian.org] transition: zxing-cpp
Added tag(s) confirmed.

-- 
1058781: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1058781
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1058781: transition: zxing-cpp

2023-12-16 Thread Sebastian Ramacher
Control: tags -1 confirmed

On 2023-12-15 23:00:43 -0500, Boyuan Yang wrote:
> I am looking to upload zxing-cpp 2.x (currently 2.2.1-1~exp1) to Debian Sid. A
> library SONAME bump is needed in this transition (libzxing2 -> libzxing3).

Please go ahead.

Cheers
-- 
Sebastian Ramacher



Processed: Re: Bug#1058742: transition: libcotp

2023-12-16 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 confirmed
Bug #1058742 [release.debian.org] transition: libcotp
Added tag(s) confirmed.

-- 
1058742: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1058742
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1058742: transition: libcotp

2023-12-16 Thread Sebastian Ramacher
Control: tags -1 confirmed

Hi

On 2023-12-15 11:41:09 +, Francisco Vilmar Cardoso Ruviaro wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: transition
> 
> Dear Release Team,
> 
> I would like to update libcotp in unstable to the 3.0.0-1.

Please go ahead.

Cheers
-- 
Sebastian Ramacher



Re: g2clib transition

2023-12-16 Thread Sebastian Ramacher
Hi Alastair

On 2023-12-16 11:14:28 +, Alastair McKinstry wrote:
> Hi,
> 
> There is a minor transition I wish to proceed. g2clib upstream have added an
> SOVERSION of .0
> 
> so the package name has changed libg2c0d -> libg2c0
> 
> Three dependencies will need rebuilding: pygrib, ncl and grads.
> 
> I also maintain these 3 packages and they trivially rebuild. So this can be
> done in a day, without impacting other transitions.
> 
> May I proceed?

Please turn this into a transition bug.

Cheers
-- 
Sebastian Ramacher



Bug#1055254: marked as done (transition: dav1d)

2023-12-16 Thread Debian Bug Tracking System
Your message dated Sat, 16 Dec 2023 21:34:06 +0100
with message-id 
and subject line Re: Bug#1055254: transition: dav1d
has caused the Debian Bug report #1055254,
regarding transition: dav1d
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1055254: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055254
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Dear Release Team,

Please schedule a transition slot for dav1d.

The auto-generated ben tracker looks good:
https://release.debian.org/transitions/html/auto-dav1d.html

All reverse deps (ffmpeg, libavif, libheif, vlc and xine-lib-1.2) build fine
with the new version in experimental.

Thanks,
Dylan
--- End Message ---
--- Begin Message ---
On 2023-11-06 11:24:14 +0100, Dylan Aïssi wrote:
> Le dim. 5 nov. 2023 à 22:01, Sebastian Ramacher  a 
> écrit :
> >
> > Please go ahead.
> >
> 
> Thanks, uploaded!

The old binaries got removed from testing. Closing

Cheers
-- 
Sebastian Ramacher--- End Message ---


g2clib transition

2023-12-16 Thread Alastair McKinstry

Hi,

There is a minor transition I wish to proceed. g2clib upstream have 
added an SOVERSION of .0


so the package name has changed libg2c0d -> libg2c0

Three dependencies will need rebuilding: pygrib, ncl and grads.

I also maintain these 3 packages and they trivially rebuild. So this can 
be done in a day, without impacting other transitions.


May I proceed?


Best regards

Alastair


--
Alastair McKinstry,
GPG: 82383CE9165B347C787081A2CBE6BB4E5D9AD3A5
e: mckins...@debian.org, im: @alastair:mckinstry.ie