On 30/04/25 11:41 PM, Bernhard Schmidt wrote: > [ Reason ] > In agreement with the security team I'd like to fix three CVEs in Bookworm > through a normal stable update. The diff is a bit larger than I hoped for, > because the key material included for the build-time _tests_ expired in the > meantime. Aquila Macedo at Ubuntu was kind enough to provide a backport that > has been imported into the package (that's > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1086653) > > The only other change is that the Salsa CI pipeline for the bookworm > branch is now using the bookworm environment. After that change there > has been a build error in the Salsa CI about changes to various MSVC > files that I cannot reproduce in an unstable environment on Salsa nor > locally. I fixed that by adding the files to d/source/options. I'm fine > dropping that bookworm-only change if you want me to, but that means the Salsa > CI would not be useful anymore (and I'm not exactly sure whether the > autobuilders will behave like Salsa or like my local sbuild)
I'm likely away for the weekend, in order to stand a chance to make it into the upcoming point release I have uploaded the package. Feel free to reject it if you require any changes, I will try to have a look on Sunday afternoon again. Bernhard
