Control: tags -1 + confirmed On Thu, 2020-07-09 at 11:30 +0100, Steve McIntyre wrote: > On Thu, Jul 09, 2020 at 11:03:22AM +0100, Adam Barratt wrote: > > Hi Steve, > > > > On Thu, 2020-07-09 at 10:20 +0100, Steve McIntyre wrote: > > > We'd like to push an update into the last stretch point release > > > for > > > fwupd. The last version in stretch (0.7.4-2) is now considered so > > > old > > > that it's (a) not really functional any more, and (b) no longer > > > supported by upstream. There are also security worries > > > (CVE-2020-10759) with this version. We've discussed this with the > > > security team (in CC) and they're keen to see this addressed, but > > > maybe via the PU process before it hits LTS. > > > > > > To fix all this, we'd like to switch to a supported stable > > > release > > > branch as supported by upstream (0.8.x); Mario, the primary > > > maintainer in Debian, is also part of the upstream development > > > team > > > and has been working to maintain that. Apparently Ubuntu and > > > other > > > distros have switched to this already. > > > > ACK. > > > > > This *does* mean that the debdiff is *way* too large to fit in > > > mail, > > > sorry. :-( I've put a copy up at > > > > > > > > > https://www.einval.com/~steve/debian/fwupd_0.8.3-1_amd64.debdiff.gz > > > > > > for reference. > > > > Could we have a binary debdiff, please? That's potentially more > > interesting to look at right now, particularly with the packaging > > changes. > > Sure, no worries. That's much smaller, so attached here.
Thanks. It also confirms that the libebitdo1 dependency gets dropped, which was one of the things I wanted to check after looking at dak rm. Please go ahead. Regards, Adam
