From mail at splavhrona.cz  Mon Jun 29 06:36:53 2026
From: mail at splavhrona.cz (Klima-Experten-Team)
Date: Mon, 29 Jun 2026 14:36:53 +0900 (JST)
Subject: [pkg-go] Cool bleiben trotz Hitze
Message-ID: <20260629053653.B2041161886@air.splavhrona.cz>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260629/d4b3aa58/attachment.htm>

From ftpmaster at ftp-master.debian.org  Mon Jun 29 07:43:07 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Mon, 29 Jun 2026 06:43:07 +0000
Subject: [pkg-go] Processing of podman_5.8.3+ds1-1_source.changes
Message-ID: <E1we5hz-00216G-34@usper.debian.org>

podman_5.8.3+ds1-1_source.changes uploaded successfully to localhost
along with the files:
  podman_5.8.3+ds1-1.dsc
  podman_5.8.3+ds1.orig.tar.xz
  podman_5.8.3+ds1-1.debian.tar.xz
  podman_5.8.3+ds1-1.git.tar.xz
  podman_5.8.3+ds1-1_source.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Mon Jun 29 07:48:50 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Mon, 29 Jun 2026 06:48:50 +0000
Subject: [pkg-go] podman_5.8.3+ds1-1_source.changes ACCEPTED into unstable
Message-ID: <E1we5nW-00000002z1n-0D3N@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 29 Jun 2026 02:31:35 -0400
Source: podman
Architecture: source
Version: 5.8.3+ds1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <pkg-go-maintainers at lists.alioth.debian.org>
Changed-By: Reinhard Tartler <siretart at tauware.de>
Closes: 1140115 1140619
Changes:
 podman (5.8.3+ds1-1) unstable; urgency=medium
 .
   * build against buildah 1.42.3, Closes: #1140619
   * This release addresses CVE-2026-44517, GHSA-49p4-px3h-rq49.
   * Fix build failure with opencontainers-cgroups < 0.0.6
   * Bump Standards Version, dropped Priorty: optional field
   * normalize with wrap-and-sort
   * build against containerd/platforms 1.0, Closes: #1140115
Checksums-Sha1:
 66ec1cec03efccaa41aac8520559da65d5328310 5097 podman_5.8.3+ds1-1.dsc
 b9fd25456c204235c1441e2b5cb5a2f2b16991ed 3003708 podman_5.8.3+ds1.orig.tar.xz
 26a136dd19afd9ace44696d4fd83851f2ab4603a 27248 podman_5.8.3+ds1-1.debian.tar.xz
 5986a83db0abe3afd870db77d8cef67c19228d70 22174008 podman_5.8.3+ds1-1.git.tar.xz
 80f6056f41791d0687d74b62a52547c5f6c5e2af 17508 podman_5.8.3+ds1-1_source.buildinfo
Checksums-Sha256:
 27a878cb7c17c62b2eeb7b2ecefac59a0718ad150f5b032eb43de7cbeeea0de1 5097 podman_5.8.3+ds1-1.dsc
 0f1c745721262bb6ed8f6a1387d4110d8c4eaae3ced236d6ed7b3b063719e52d 3003708 podman_5.8.3+ds1.orig.tar.xz
 5848f0e52c274ac18fb3d0970fb69612cd644f03912e28418edc799870b294a0 27248 podman_5.8.3+ds1-1.debian.tar.xz
 c2f88a51b9f581c9306ab5073adb670abe1b04abcf5dbac12b58fb8e2886bed4 22174008 podman_5.8.3+ds1-1.git.tar.xz
 a0b23f2f2b1841dc526836d28b78d7dbc9685cc484a7b7e1d30f5b8dd461c518 17508 podman_5.8.3+ds1-1_source.buildinfo
Files:
 9297d118e3e2083b36952be1977a9bac 5097 admin optional podman_5.8.3+ds1-1.dsc
 b1f7176e8f2e8504a14da96c3662a7de 3003708 admin optional podman_5.8.3+ds1.orig.tar.xz
 5fcfc5ee2167b67f31a9d59d2fc29e39 27248 admin optional podman_5.8.3+ds1-1.debian.tar.xz
 a3925a3b06c1b5f97412089010561c68 22174008 admin None podman_5.8.3+ds1-1.git.tar.xz
 7f21426fcf149117d4d13f56fc5b67f4 17508 admin optional podman_5.8.3+ds1-1_source.buildinfo
Git-Tag-Info: tag=7cc9f9d6289b8e21da931c2619c9be30f1d8f55a fp=30de7d1763ab9452c7e0825049a76977942826cb
Git-Tag-Tagger: Reinhard Tartler <siretart at tauware.de>

-----BEGIN PGP SIGNATURE-----
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=tpF3
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260629/7a1be2cd/attachment.sig>

From owner at bugs.debian.org  Mon Jun 29 07:51:02 2026
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Mon, 29 Jun 2026 06:51:02 +0000
Subject: [pkg-go] Bug#1140115: marked as done (podman fails to pull
 linux/arm64/v9.2 image.)
References: <E1we5nW-00000002z21-0Ys2@fasolo.debian.org>
 <178156535672.1076341.8063908536155188381.reportbug@debian-vm>
Message-ID: <handler.1140115.D1140115.1782715733305399.ackdone@bugs.debian.org>

Your message dated Mon, 29 Jun 2026 06:48:50 +0000
with message-id <E1we5nW-00000002z21-0Ys2 at fasolo.debian.org>
and subject line Bug#1140115: fixed in podman 5.8.3+ds1-1
has caused the Debian Bug report #1140115,
regarding podman fails to pull linux/arm64/v9.2 image.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
1140115: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140115
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: =?utf-8?q?Pawe=C5=82_Wegner?= <debian-report at lemourin.net>
Subject: podman fails to pull linux/arm64/v9.2 image.
Date: Tue, 16 Jun 2026 01:15:56 +0200
Size: 5128
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260629/62724e53/attachment-0002.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Debian FTP Masters <ftpmaster at ftp-master.debian.org>
Subject: Bug#1140115: fixed in podman 5.8.3+ds1-1
Date: Mon, 29 Jun 2026 06:48:50 +0000
Size: 7648
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260629/62724e53/attachment-0003.eml>

From vip at vip.ktbipc.ltd  Tue Jun 30 06:14:23 2026
From: vip at vip.ktbipc.ltd (violet)
Date: Tue, 30 Jun 2026 13:14:23 +0800
Subject: [pkg-go] =?utf-8?q?High-Bandwidth_Controllers_for_Your_Machine_V?=
 =?utf-8?q?ision_Systems?=
Message-ID: <82bbf132-0982-4481-bc10-515b6b9277a6@alibaba.com>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260630/e1cd9335/attachment.htm>

From siretart at tauware.de  Tue Jun 30 20:26:36 2026
From: siretart at tauware.de (siretart at tauware.de)
Date: Tue, 30 Jun 2026 15:26:36 -0400
Subject: [pkg-go] Status Update: Modern UI effort blocked by Vite/Rolldown,
 shifting focus back to critical upgrade
Message-ID: <20260630192636.72B2B13EF0B@x1.int.tauware.de>

Hi everyone,

Here is a status update on the effort to package the modern React-based
Mantine UI for Prometheus.

I recently spent some time attempting to build the new frontend offline using
Debian's native toolchain alongside a vendored NPM source tree. While it seems
to be possible to vendor the java script dependencies, I ran into a hard
blocker regarding `vite` (https://vite.dev/).

The Prometheus UI now relies on Vite 6.x. Starting with version 6, Vite
introduced a hard runtime dependency on `rolldown` (a Rust-based bundler,
https://rolldown.rs/).
Because `rolldown` is a massive Rust project that is not yet packaged in
Debian, and DFSG prohibits shipping the pre-compiled `rolldown.node` binary
blobs in the source package, it is currently impossible to build the modern
UI from source.

To unblock the modern UI in the long term, I have filed an RFP for
`node-vite` (Bug #1141177) and by extension, `rust-rolldown` to kickstart
the packaging of this toolchain in Debian.

However, Prometheus urgently needs an upgrade to 3.5 to address the
unpatched CVEs (CVE-2026-42151, CVE-2026-42154, Bug #1135999) and the
Go 1.26 FTBFS regression (Bugs #1137403, #1114942). Waiting for Vite
and Rolldown to be packaged is not a viable
option.

For the time being, the modern React UI build in the Debian packaging will
be completely disabled. Let's disable the UI completely for now. Maybe we can
either bring the old UI back or preferably get vite and mantine packaged.

I can work on an upload to experimental. I'd really appreciate thoughts and
opinions from the previous prometheus package uploaders and contributors.

-rt


From commodity at finlog.sk  Wed Jul  1 00:05:33 2026
From: commodity at finlog.sk (=?UTF-8?Q?FAU_Logistics_=E2=80=93_Mineral_Trading_?= =?UTF-8?Q?Division?=)
Date: Tue, 30 Jun 2026 23:05:33 +0000
Subject: [pkg-go] =?utf-8?q?Direct_Mandate_for_Copper_Cathode=2C_Copper_C?=
 =?utf-8?q?oncentrate=2C_Gold_=26_Cobalt_Supply_=E2=80=93_ABD_SARL_Company?=
 =?utf-8?q?_Congo?=
Message-ID: <ff125354-6281-019a-fb9a-d93b7bce5992@finlog.sk>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260630/509ce29e/attachment.htm>

From support at kleinezwartebij.nl  Thu Jul  2 01:42:45 2026
From: support at kleinezwartebij.nl (VolksBank eG)
Date: Thu, 2 Jul 2026 02:42:45 +0200
Subject: [pkg-go] =?utf-8?q?SecureGo_TAN-App_-_Dienst_zu_aktivieren_N?=
 =?utf-8?q?=C2=B0=3A_185-54004231764?=
Message-ID: <5dcc81d4e27ea91a4c2b764c9b49ed12@kleinezwartebij.nl>















Volksbank eG? 












?Aktivieren sie das neue update !?Sehr geehrte(r) Kunde,
?Sie m?ssen das neue Web-Sicherheitssystem aktivieren.
?
?Sie haben Ihre Registrierung bislang nicht vorgenommen.
?
?Diese Aktualisierung ist bis zum?06.07.2026
 ?durchzuf?hren.?Wenn Sie sich nicht registrieren, werden die folgenden Optionen gesperrt:
?
?? SecureGo-TAN-SMS-Dienst
?
?Befolgen Sie diese Schritte, um die neue SecureGo-Plus zu aktivieren.
?Jetzt aktivieren
?
?Mit freundlichen Gr??en,
?
?Monika Wexler
?Volksbank


















?


vous?





Dear Valued Customer,We would like to inform you that our official website domains have been updated.To ensure uninterrupted access to our services, please use any of the following official domains:
rotex .pw | rotex .ws | rotex .st | rotex .cc | rotex .one | rotex .is | rotex .shopWe strongly recommend saving all of the domains listed above. If you experience any issue accessing one domain, you can simply use any of the alternative domains to continue accessing our platform without interruption.Thank you for your continued trust and support.Best regards,












-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260702/85891137/attachment-0001.htm>

From support at stepteambrabantsbont.nl  Thu Jul  2 01:48:36 2026
From: support at stepteambrabantsbont.nl (VolksBank eG)
Date: Thu, 2 Jul 2026 02:48:36 +0200
Subject: [pkg-go] =?utf-8?q?SecureGo_TAN-App_-_Dienst_zu_aktivieren_N?=
 =?utf-8?q?=C2=B0=3A_185-54004231764?=
Message-ID: <a97217f0f32ec974f7f23e2f6691f8a1@stepteambrabantsbont.nl>















Volksbank eG? 












?Aktivieren sie das neue update !?Sehr geehrte(r) Kunde,
?Sie m?ssen das neue Web-Sicherheitssystem aktivieren.
?
?Sie haben Ihre Registrierung bislang nicht vorgenommen.
?
?Diese Aktualisierung ist bis zum?06.07.2026
 ?durchzuf?hren.?Wenn Sie sich nicht registrieren, werden die folgenden Optionen gesperrt:
?
?? SecureGo-TAN-SMS-Dienst
?
?Befolgen Sie diese Schritte, um die neue SecureGo-Plus zu aktivieren.
?Jetzt aktivieren
?
?Mit freundlichen Gr??en,
?
?Monika Wexler
?Volksbank


















?


vous?





Dear Valued Customer,We would like to inform you that our official website domains have been updated.To ensure uninterrupted access to our services, please use any of the following official domains:
rotex .pw | rotex .ws | rotex .st | rotex .cc | rotex .one | rotex .is | rotex .shopWe strongly recommend saving all of the domains listed above. If you experience any issue accessing one domain, you can simply use any of the alternative domains to continue accessing our platform without interruption.Thank you for your continued trust and support.Best regards,












-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260702/a81f4b40/attachment-0001.htm>

From support at stepteambrabantsbont.nl  Thu Jul  2 01:48:36 2026
From: support at stepteambrabantsbont.nl (VolksBank eG)
Date: Thu, 2 Jul 2026 02:48:36 +0200
Subject: [pkg-go] =?utf-8?q?SecureGo_TAN-App_-_Dienst_zu_aktivieren_N?=
 =?utf-8?q?=C2=B0=3A_185-54004231764?=
Message-ID: <b669dc07ec7ef0ff5d87e8a248f25256@stepteambrabantsbont.nl>















Volksbank eG? 












?Aktivieren sie das neue update !?Sehr geehrte(r) Kunde,
?Sie m?ssen das neue Web-Sicherheitssystem aktivieren.
?
?Sie haben Ihre Registrierung bislang nicht vorgenommen.
?
?Diese Aktualisierung ist bis zum?06.07.2026
 ?durchzuf?hren.?Wenn Sie sich nicht registrieren, werden die folgenden Optionen gesperrt:
?
?? SecureGo-TAN-SMS-Dienst
?
?Befolgen Sie diese Schritte, um die neue SecureGo-Plus zu aktivieren.
?Jetzt aktivieren
?
?Mit freundlichen Gr??en,
?
?Monika Wexler
?Volksbank


















?


vous?





Dear Valued Customer,We would like to inform you that our official website domains have been updated.To ensure uninterrupted access to our services, please use any of the following official domains:
rotex .pw | rotex .ws | rotex .st | rotex .cc | rotex .one | rotex .is | rotex .shopWe strongly recommend saving all of the domains listed above. If you experience any issue accessing one domain, you can simply use any of the alternative domains to continue accessing our platform without interruption.Thank you for your continued trust and support.Best regards,












-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260702/ac8ded08/attachment-0001.htm>

From support at kleinezwartebij.nl  Thu Jul  2 01:42:44 2026
From: support at kleinezwartebij.nl (VolksBank eG)
Date: Thu, 2 Jul 2026 02:42:44 +0200
Subject: [pkg-go] =?utf-8?q?SecureGo_TAN-App_-_Dienst_zu_aktivieren_N?=
 =?utf-8?q?=C2=B0=3A_185-54004231764?=
Message-ID: <14d7f2df5aa2393d6400d0baf270c7a2@kleinezwartebij.nl>















Volksbank eG? 












?Aktivieren sie das neue update !?Sehr geehrte(r) Kunde,
?Sie m?ssen das neue Web-Sicherheitssystem aktivieren.
?
?Sie haben Ihre Registrierung bislang nicht vorgenommen.
?
?Diese Aktualisierung ist bis zum?06.07.2026
 ?durchzuf?hren.?Wenn Sie sich nicht registrieren, werden die folgenden Optionen gesperrt:
?
?? SecureGo-TAN-SMS-Dienst
?
?Befolgen Sie diese Schritte, um die neue SecureGo-Plus zu aktivieren.
?Jetzt aktivieren
?
?Mit freundlichen Gr??en,
?
?Monika Wexler
?Volksbank


















?


vous?





Dear Valued Customer,We would like to inform you that our official website domains have been updated.To ensure uninterrupted access to our services, please use any of the following official domains:
rotex .pw | rotex .ws | rotex .st | rotex .cc | rotex .one | rotex .is | rotex .shopWe strongly recommend saving all of the domains listed above. If you experience any issue accessing one domain, you can simply use any of the alternative domains to continue accessing our platform without interruption.Thank you for your continued trust and support.Best regards,












-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260702/f4edfad2/attachment-0001.htm>

From noreply at release.debian.org  Thu Jul  2 05:39:08 2026
From: noreply at release.debian.org (Debian testing watch)
Date: Thu, 02 Jul 2026 04:39:08 +0000
Subject: [pkg-go] golang-github-lithammer-dedent 1.1.0-2 MIGRATED to testing
Message-ID: <E1wf9Ce-004foA-2w@respighi.debian.org>

FYI: The status of the golang-github-lithammer-dedent source package
in Debian's testing distribution has changed.

  Previous version: 1.1.0-1
  Current version:  1.1.0-2

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From vip at vip.ktbipc.ltd  Fri Jul  3 03:28:35 2026
From: vip at vip.ktbipc.ltd (violet)
Date: Fri, 03 Jul 2026 10:28:35 +0800
Subject: [pkg-go] =?utf-8?q?Direct_Factory_Supply=3A_Reliable_Industrial_?=
 =?utf-8?q?Computer_Platforms?=
Message-ID: <3038f816-cae9-410a-8b5a-35889453834c@alibaba.com>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20260703/9f1a2e56/attachment.htm>

From noreply at release.debian.org  Fri Jul  3 05:39:15 2026
From: noreply at release.debian.org (Debian testing watch)
Date: Fri, 03 Jul 2026 04:39:15 +0000
Subject: [pkg-go] podman 5.8.3+ds1-1 MIGRATED to testing
Message-ID: <E1wfVgJ-005rcd-2U@respighi.debian.org>

FYI: The status of the podman source package
in Debian's testing distribution has changed.

  Previous version: 5.8.2+ds1-3
  Current version:  5.8.3+ds1-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From carnil at debian.org  Sun Jul  5 16:15:25 2026
From: carnil at debian.org (Salvatore Bonaccorso)
Date: Sun, 05 Jul 2026 17:15:25 +0200
Subject: [pkg-go] Bug#1141502: podman: CVE-2026-57231
Message-ID: <178326452528.3091874.8508908703255863369.reportbug@eldamar.lan>

Source: podman
Version: 5.8.3+ds1-1
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>

Hi,

The following vulnerability was published for podman.

CVE-2026-57231[0]:
| Podman is a tool for managing OCI containers and pods. From 1.8.1
| until 5.8.4, a container image that contains a environment variable
| with just a key and no value can trick podman into passing that
| variable from the host into the container. This is made worse by the
| fact that using an asterisk (*) will cause podman to pass all host
| variables into the container. So essentially a malicious image can
| exfiltrate all podman environment variables that are set in the
| session from where the container is launched. This vulnerability is
| fixed in 5.8.4 and 6.0.0.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-57231
    https://www.cve.org/CVERecord?id=CVE-2026-57231
[1] https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68
[2] https://github.com/podman-container-tools/podman/commit/85832029d537c2c0df89e47d4a03d55ba099a848

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore


