Re: Editor extensions to help editing debian/* files?

2024-01-25 Thread Otto Kekäläinen
Hi! > Thats beginning to look like the history of check-all-the-things. Yeah, I remember looking into cats some years back as a place to learn what commands exist. Similarly I also occasionally browse https://pre-commit.com/hooks.html. The challenge with having all possible checkers is that they

Bug#1061541: ITP: ruby-redis-client -- redis-client is a simple, low-level, client for Redis 6+.

2024-01-25 Thread Vivek K J
Package: wnpp Severity: wishlist Owner: Vivek K J X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: ruby-redis-client Version : 0.19.1 Upstream Contact: jean.bouss...@gmail.com * URL : https://github.com/redis-rb/redis-client * License : Expat Progr

Processed: closing 1061518

2024-01-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > close 1061518 Bug #1061518 {Done: Salvatore Bonaccorso } [general] (no subject) Bug 1061518 is already marked as done; not doing anything. > thanks Stopping processing here. Please contact me if you need assistance. -- 1061518: https://bugs.deb

Re: icc-profiles_2.2_source.changes REJECTED

2024-01-25 Thread Jonas Smedegaard
Quoting Jeremy Bícha (2024-01-25 22:05:27) > On Wed, Jan 24, 2024 at 9:48 PM Jonas Smedegaard wrote: > > For the record I have not heard from ftpmasters on this issues, and I > > know only what is in this public mailinglist thread. > > > > Obviously I would be happy to be able to maintain the pack

Re: Proposal for how to deal with Go/Rust/etc security bugs

2024-01-25 Thread Philipp Kern
On 2024-01-25 17:10, Russ Allbery wrote: Rebuilding a bunch of software after a security fix is not a completely intractable problem that we have no idea how to even approach. It's just CPU cycles and good metadata plus ensuring that our software can be rebuilt, something that we already promi

Re: icc-profiles_2.2_source.changes REJECTED

2024-01-25 Thread Jeremy Bícha
On Wed, Jan 24, 2024 at 9:48 PM Jonas Smedegaard wrote: > For the record I have not heard from ftpmasters on this issues, and I > know only what is in this public mailinglist thread. > > Obviously I would be happy to be able to maintain the package that I am > listed as maintainer of. And if that

Re: Proposal for how to deal with Go/Rust/etc security bugs (was: Re: Limited security support for Go/Rust? Re ssh3)

2024-01-25 Thread Fabian Grünbichler
On Wed, Jan 24, 2024 at 09:37:27AM +0100, Simon Josefsson wrote: > Simon Josefsson writes: > > >> > My naive approach on how to fix a security problem in package X > >> > which is > >> > statically embedded into other packages A, B, C, ... would be to > >> > rebuild > >> > the transitive closure

Re: Understanding what's missing for Rust dynamic linking (was: Proposal for how to deal with Go/Rust/etc security bugs)

2024-01-25 Thread Fabian Grünbichler
On Thu, Jan 25, 2024 at 07:03:05PM +, Luca Boccassi wrote: > On Thu, 25 Jan 2024 at 18:22, Gard Spreemann wrote: > > > > Hello. > > > > Paul Wise writes: > > > > > On Thu, 2024-01-25 at 00:24 +, Wookey wrote: > > > > > >> People keep telling us (@ARM) how marvellous Rust is, and we keep >

Re: Processed: closing 1061512

2024-01-25 Thread Jérémy Lal
I always wondered if there was a reason to allow unverified BTS access ? Le jeu. 25 janv. 2024 à 21:27, Debian Bug Tracking System < ow...@bugs.debian.org> a écrit : > Processing commands for cont...@bugs.debian.org: > > > close 1061512 > Bug #1061512 [general] 4 > Marked Bug as done > > thanks >

Processed: closing 1061512

2024-01-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > close 1061512 Bug #1061512 [general] 4 Marked Bug as done > thanks Stopping processing here. Please contact me if you need assistance. -- 1061512: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061512 Debian Bug Tracking System Contact ow...

Processed: closing 1061518

2024-01-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > close 1061518 Bug #1061518 [general] (no subject) Marked Bug as done > thanks Stopping processing here. Please contact me if you need assistance. -- 1061518: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061518 Debian Bug Tracking System Co

Bug#1061518: (no subject)

2024-01-25 Thread other
Package: general Severity: serious X-Debbugs-Cc: a...@a.com, h...@test.com

Bug#1061513: RFP: xwayland-run -- xwayland-run contains a set of small utilities revolving around running Xwayland

2024-01-25 Thread Matthias Geiger
Package: wnpp Severity: wishlist X-Debbugs-Cc: werdah...@riseup.net, debian-devel@lists.debian.org -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 * Package name: xwayland-run Version : 0.0.2 Upstream Contact: Oliver Fourdan * URL : https://gitlab.freedesktop.org/ofour

Bug#1061512: 4

2024-01-25 Thread other
Package: general Severity: important X-Debbugs-Cc: h...@test.com

Re: Understanding what's missing for Rust dynamic linking (was: Proposal for how to deal with Go/Rust/etc security bugs)

2024-01-25 Thread Luca Boccassi
On Thu, 25 Jan 2024 at 18:22, Gard Spreemann wrote: > > Hello. > > Paul Wise writes: > > > On Thu, 2024-01-25 at 00:24 +, Wookey wrote: > > > >> People keep telling us (@ARM) how marvellous Rust is, and we keep > >> telling them that it's useless in the real world until it sorts out > >> the

Re: Proposal for how to deal with Go/Rust/etc security bugs

2024-01-25 Thread Luca Boccassi
On Thu, 25 Jan 2024 at 16:11, Russ Allbery wrote: > > Simon Josefsson writes: > > > I want to explore if there is a possibility to change status quo, and > > what would be required to do so. > > > Given how often gnulib is vendored for C code in Debian, and other > > similar examples, I don't thi

Re: Proposal for how to deal with Go/Rust/etc security bugs

2024-01-25 Thread Russ Allbery
Simon Josefsson writes: > I want to explore if there is a possibility to change status quo, and > what would be required to do so. > Given how often gnulib is vendored for C code in Debian, and other > similar examples, I don't think of this problem as purely a Go/Rust > problem. The parallel a

Understanding what's missing for Rust dynamic linking (was: Proposal for how to deal with Go/Rust/etc security bugs)

2024-01-25 Thread Gard Spreemann
Hello. Paul Wise writes: > On Thu, 2024-01-25 at 00:24 +, Wookey wrote: > >> People keep telling us (@ARM) how marvellous Rust is, and we keep >> telling them that it's useless in the real world until it sorts out >> the stable ABI/dynamic linking problem. > > IIRC that has been worked on fo

Re: Proposal for how to deal with Go/Rust/etc security bugs

2024-01-25 Thread Marco d'Itri
On Jan 25, Wookey wrote: > Luca is quite right here. Ultimately this can only be fixed by these > ecosystems understanding that software in these languages cannot be > sensibly used in distributions until they support modularity and > stability. The rust people make the excuse that they are 'too

Re: Proposal for how to deal with Go/Rust/etc security bugs

2024-01-25 Thread Paul Wise
On Thu, 2024-01-25 at 00:24 +, Wookey wrote: > People keep telling us (@ARM) how marvellous Rust is, and we keep > telling them that it's useless in the real world until it sorts out > the stable ABI/dynamic linking problem. IIRC that has been worked on for some years now, and IIRC the static