• Accepted musescore2 2.3.2+dfsg4-16 (source) into unstable

    From Debian FTP Masters@21:1/5 to All on Tue Apr 22 22:40:01 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA384

    Format: 1.8
    Date: Tue, 22 Apr 2025 02:52:14 +0000
    Source: musescore2
    Architecture: source
    Version: 2.3.2+dfsg4-16
    Distribution: unstable
    Urgency: high
    Maintainer: Thorsten Glaser <tg@mirbsd.de>
    Changed-By: Thorsten Glaser <tg@mirbsd.de>
    Closes: 1070860
    Changes:
    musescore2 (2.3.2+dfsg4-16) unstable; urgency=high
    .
    * Update description:
    - the musescore.org software has been renamed upstream to
    Mu͒seScore Studio and the musescore.com website to
    Mu͒seScore Catalogue and the mobile äpps to
    Mu͒seScore Sheet Music for Android and iOS
    ⇒ follow that
    - cease naming commercial competitors it’s supposedly better than
    - update situation description for major version 2 vs. 3
    - document no v4 package is planned due to the freeness reduction
    - plan to package “Mu͒seScore 3 Evolution” (community-maintained
    3.7 fork) as musescore-snapshot (as it has no releases anyway)
    - document Muse Group company takeover, remove mentions of old one
    - reduce delta between v2/v3 descriptions
    * Backport fixes:
    - Help→MusicXML: link correct licence (from mu͒ Evolution)
    - Fix for CVE-2024-44866 (from mu͒4); (Closes: #1070860)
    * Add README.Debian to explicitly express that this should not be
    exposed to untrusted input files without confinement (cf. #1070860)
    * Work around unexpected colourised messages from cmake’s tester
    * Try to blindly fix CVE-2023-44428: (addresses #1070860 as well)
    - improve Capella import robustness
    - arm Q_ASSERT{,_X} macros to exercise the tests and log failures and,
    if MSCORE_ASSERT_ABORT is set, make assertion failure abort()
    * Improve stderr log formatting and omit debug level, except -d is used
    * Bump Policy, transition to libfreetype-dev
    * Update lintian overrides for sid
    Checksums-Sha1:
    5f78501b53a85bcbe9a39d14c6ccf6a03b61810c 2702 musescore2_2.3.2+dfsg4-16.dsc
    8c4d84c6c519cd12e3932507dc4c61987616d3da 139676 musescore2_2.3.2+dfsg4-16.debian.tar.xz
    Checksums-Sha256:
    34bb5f15e719b13702a188bb2378c902d62476c2cdf82bd8832e818a41af2224 2702 musescore2_2.3.2+dfsg4-16.dsc
    101fd910eeb909dd1c9577a7b256e9939cafc5cbe07e6541f470d831cdfca64b 139676 musescore2_2.3.2+dfsg4-16.debian.tar.xz
    Files:
    f55ff62eb7a0f99a5c71216088924d25 2702 sound optional musescore2_2.3.2+dfsg4-16.dsc
    88672cd927fbbb6f746c6ea55f937a65 139676 sound optional musescore2_2.3.2+dfsg4-16.debian.tar.xz

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.14 (MirBSD)

    iQIcBAEBCQAGBQJoB/TAAAoJEHa1NLLpkAfgkzwQALMpRI1v7PgAaT3PLjZcclKf 2zPi4cbfVbRrpRxdAv7Cj32dNUaktR8CughyLPUIEvC65cPX+Y7hdMNaF/bL7TYC sE9nEVIk8+WT+F989/lrmXCVq0AlsPRqIJ/PtTb1N6JtXJ010EBlZgIOydkS7Jh7 dRU+dDIYzt691MjIvoDXixJ4Nr9JBHF0M8Va3U6COzHpLlJAqF+Ab05O3TjRJHwk aipfpbKrGHggAevfP4uVOIVFuhjFyf3Z0XjwzJAlFC9uypDct+EQT95yf/R+e+CY R5yggwok/ak6Nat6XRk3xqezxAY4VXkekq84mmo/GhNsWVOaw1hfhPEn8tUsFYWo 2H7dyiX0x9C2hLQFL+bAhdcUlo0kIteeKZyC/nyYDDOF8s/7SNH3SDlg12iMY0rH RXAMZSErpx0dYEiFaAbXw1yS0ttID/iuC8QEg4Hf1nizpRojBpPsKeUyf7TCbUoU rKarxZRHWE6nhvLhHu3fPTajzQaUB6rnz7Dk/2XGL25XMhVN8hDqXg4Ht7/pzB1U 1uDAX0qgeaB6OYiQWTE/LlzwzHdMxE09xLMaRcTL1HZIcvtkALyZOx4nYirzMVQc OuqY9GFJ7UJ3ynIuYO9bS6bbEqUzHuf4HaOHI3dtxG83zedfWUKlYPAGggLrnv8Z ljGmb1p0ckr+o06di1xE
    =4m99
    -----END PGP SIGNATURE-----


    --==============02893877432737836=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaAf9YwAKCRCb9qggYcy5 IZ4MAQCXFSVdA2zUW6wKY8mleJJwdrv9dW8dBr86fKmehe1GlAD8D82wSW+PcL7J FB47amUVXCqVS25uocCHx+AVkfb6NAU=WcXd
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)