Noah Meyerhans <no...@debian.org> writes: > On Thu, May 01, 2025 at 05:04:33PM -0400, Noah Meyerhans wrote: >> For dovecot in trixie, I'm considering reverting channel binding support >> altogether. That'll force us to drop SCRAM-SHA-1-PLUS and >> SCRAM-SHA-256-PLUS support, but I'd rather do that than ship dovecot 2.3 >> again, which is the most likely alternative. (This assumes that I don't >> find a proper fix for the regression.) > > For the record, dovecot upstream was able to come up with a fix. See > > https://dovecot.org/mailman3/archives/list/dove...@dovecot.org/message/O54EAGLIXXHMOH7BQCCKHHB3Z32HDWVR/ > > I've incorporated their fix into the package and uploaded it with > version 1:2.4.1+dfsg1-3 > > I've confirmed that this resolves the autopkgtest failures in gsasl and > will go ahead with an NMU to update it for dovecot 2.4's configuration > syntax.
The testing migration seems a bit unclear to me, can you take a look if this will actually migrate? It is scheduled for autoremoval right now. https://tracker.debian.org/pkg/gsasl https://tracker.debian.org/pkg/libgssglue I think you need a dependence on 'dovecot (>= 2.4~)' in gsasl/libgssglue, and a 'Breaks: gsasl (<< 2.2.2-1.1~), libgsasl (<< 0.9-1.1~)' in dovecot. Feel free to merge your merge requests and push release tags into the git repository, I gave them thumbs up: https://salsa.debian.org/xmpp-team/gsasl/-/merge_requests/2 https://salsa.debian.org/debian/libgssglue/-/merge_requests/3 /Simon
signature.asc
Description: PGP signature
