[Pkg-libvirt-maintainers] (o)s-pu uploads to fix no-dsa security issues?

[Guilhem Moulin]

Hi,

On Thu, 25 Jul 2024 at 04:15:16 +0200, Guilhem Moulin wrote:
> I uploaded libvirt 5.0.0-4+deb10u2 to Buster LTS a little while ago and
> noticed the versions currently found in Bullseye and Bookworm and
> vulnerable to no-dsa issues [0].  If you'd like I can work on (o)s-pu
> uploads to fix these too?

os-pu upload is now ready, bug filed (#1077652).  I guess there is no
reason to hold the upload two more weeks until Bullseye becomes LTS.
Feel free to follow-up on the aforementioned bug if you have any
feedback or concern.  (The next and final point release for Bullseye is
scheduled a month from now.)

You'll find the commits and tag at the LTS team fork of your repository:
https://salsa.debian.org/lts-team/packages/libvirt .  I saw you already
filed an s-pu bug for bookworm, so hopefully I'm not stepping on your
toes.

> (bullseye-security is scheduled to be handed over to the LTS team in a
> little less than a month, but unless I hear objections I'm planing to
> work on the open issues before that.)

-- 
Guilhem.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-libvirt-maintainers/attachments/20240731/07ed405f/attachment.sig>