Re: Signature strength of .dsc

2023-11-30 Thread Stephan Verbücheln
Hello Dimitri On Fri, 2023-12-01 at 00:20 +, Dimitri John Ledkov wrote: > This makes me wonder if signatures on uploaded or published .dsc have > any value at all. Cryptographically speaking, 160-bit hash algorithms are vulnerable to collision attacks but not to preimage attacks. Even today,

Bug#1057177: ITP: jaq -- A jq clone focussed on correctness, speed, and simplicity

2023-11-30 Thread 陳昌倬
Package: wnpp Severity: wishlist Owner: ChangZhuo Chen (陳昌倬) X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: jaq Version : v1.2.0 Upstream Contact: Michael Färber * URL : https://github.com/01mf02/jaq * License : Expat Programming Lang: Rust Des

Re: Signature strength of .dsc

2023-11-30 Thread Guillem Jover
Hi! On Fri, 2023-12-01 at 00:20:16 +, Dimitri John Ledkov wrote: > Currently dak requires signatures on .changes & .dsc uploads. .changes with > signatures are publicly announced and then .dsc are published in the > archive with signatures. .changes references .dsc. > > All .dsc have Checksums

Signature strength of .dsc

2023-11-30 Thread Dimitri John Ledkov
Hi, Currently dak requires signatures on .changes & .dsc uploads. .changes with signatures are publicly announced and then .dsc are published in the archive with signatures. .changes references .dsc. All .dsc have Checksums-Sha256 for the files they reference, .dsc itself can be verified through

Re: Clarification for broken packages in IPv6-only environments

2023-11-30 Thread Bastian Blank
On Thu, Nov 30, 2023 at 08:24:18PM +0100, Thomas Braun wrote: > Now I would like to know if being able to run in an IPv6-only environment is > a must have feature for any debian package? As Debian uses package builders in this configuration, packages needs to build in such an environment. Bastian

Re: Clarification for broken packages in IPv6-only environments

2023-11-30 Thread Dale Richards
On Thu, 2023-11-30 at 15:38 -0500, Paul Tagliamonte wrote: > On Thu, Nov 30, 2023 at 08:24:18PM +0100, Thomas Braun wrote: > > Now I would like to know if being able to run in an IPv6-only > > environment is > > a must have feature for any debian package? > > I have no idea what the project's stan

Re: Clarification for broken packages in IPv6-only environments

2023-11-30 Thread Paul Tagliamonte
On Thu, Nov 30, 2023 at 08:24:18PM +0100, Thomas Braun wrote: > Now I would like to know if being able to run in an IPv6-only environment is > a must have feature for any debian package? I run an IPv6 only LAN on my home network, where I use `jool`, and `dns64-prefix`+`unbound` to interoperate wit

Clarification for broken packages in IPv6-only environments

2023-11-30 Thread Thomas Braun
(please CC me, as I'm not subscribed) Hi, I'm one of the upstream authors of cppTango [1] and that is a direct dependency of pytango [2]. Some time ago a bug report titled "pytango FTBFS on IPv6-only buildds" [3] was filed (tagged: serious) and the package maintainer "hacked" around the pro

Re: Updating the Debian Publicity Team delegation

2023-11-30 Thread aidenlt
unsubscribe please, thank you for the news On Wed, Nov 29, 2023 at 4:10 AM Jonathan Carter wrote: > Dear Debian Developers > > I hereby appoint the following developers as members of the Debian > Publicity Team: > > - Anupa Ann Joseph (anupa) > - Donald Norwood (donald) > - Jean-Pierre (jipeg