hi, On Fri, Apr 03, 2026 at 11:09:26AM +0200, Christian Marillat wrote: > On 03 avril 2026 09:27, Sylvain Beucler <[email protected]> wrote: > > > Hi, > > > > On 03/04/2026 09:18, Christian Marillat wrote: > >> On 03 avril 2026 08:55, Sylvain Beucler <[email protected]> wrote: > >> The urgency unimportant come from the security tracker : > >> https://security-tracker.debian.org/tracker/CVE-2025-63261 > > > > ... which itself is influenced by exchanges with the maintainer, such > > as this BTS entry, linked in the page above :) > > OK, I'll upload packages to bookworm-security, trixie-security and sid
We did mark this earlier no-dsa (and then demoted it some days ago to unimportant). Can you please fix it via the upcoming point releases? if you strongly disagree on the route and the no-dsa assessment was wrong in your opinion, then please contact [email protected] . Cf as well https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#bug-security for security uploads. Regards, Salvatore

