XPost: linux.debian.devel.release

On 30/04/25 11:41 PM, Bernhard Schmidt wrote:

[ Reason ]
In agreement with the security team I'd like to fix three CVEs in Bookworm through a normal stable update. The diff is a bit larger than I hoped for, because the key material included for the build-time _tests_ expired in the meantime. Aquila Macedo at Ubuntu was kind enough to provide a backport that has been imported into the package (that's https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1086653)

The only other change is that the Salsa CI pipeline for the bookworm
branch is now using the bookworm environment. After that change there
has been a build error in the Salsa CI about changes to various MSVC
files that I cannot reproduce in an unstable environment on Salsa nor locally. I fixed that by adding the files to d/source/options. I'm fine dropping that bookworm-only change if you want me to, but that means the Salsa
CI would not be useful anymore (and I'm not exactly sure whether the autobuilders will behave like Salsa or like my local sbuild)

I'm likely away for the weekend, in order to stand a chance to make it
into the upcoming point release I have uploaded the package. Feel free
to reject it if you require any changes, I will try to have a look on
Sunday afternoon again.

Bernhard

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)