From noreply at release.debian.org  Wed Jul  1 05:39:04 2026
From: noreply at release.debian.org (Debian testing autoremoval watch)
Date: Wed, 01 Jul 2026 04:39:04 +0000
Subject: coturn is marked for autoremoval from testing
Message-ID: <E1wemj2-003TWU-39@respighi.debian.org>

coturn 4.12.0-1 is marked for autoremoval from testing on 2026-07-21

It is affected by these RC bugs:
1140563: coturn: CVE-2026-43994
 https://bugs.debian.org/1140563



For more information on the autoremoval process, including hints to prevent
autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval

This mail is generated by:
https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl

Autoremoval data is generated by:
https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl


From noreply at release.debian.org  Thu Jul  2 05:40:14 2026
From: noreply at release.debian.org (Debian testing autoremoval watch)
Date: Thu, 02 Jul 2026 04:40:14 +0000
Subject: libccrtp is marked for autoremoval from testing
Message-ID: <E1wf9Di-004gKM-0j@respighi.debian.org>

libccrtp 2.0.9-5 is marked for autoremoval from testing on 2026-08-06

It is affected by these RC bugs:
1140639: libccrtp: fails to migrate to testing for too long
 https://bugs.debian.org/1140639



For more information on the autoremoval process, including hints to prevent
autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval

This mail is generated by:
https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl

Autoremoval data is generated by:
https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl


From noreply at release.debian.org  Thu Jul  2 05:40:14 2026
From: noreply at release.debian.org (Debian testing autoremoval watch)
Date: Thu, 02 Jul 2026 04:40:14 +0000
Subject: twinkle is marked for autoremoval from testing
Message-ID: <E1wf9Di-004gKR-1E@respighi.debian.org>

twinkle 1:1.10.3+dfsg-2 is marked for autoremoval from testing on 2026-08-06

It (build-)depends on packages with these RC bugs:
1140639: libccrtp: fails to migrate to testing for too long
 https://bugs.debian.org/1140639



For more information on the autoremoval process, including hints to prevent
autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval

This mail is generated by:
https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl

Autoremoval data is generated by:
https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl


From manachconseil at marketing-premium.com  Thu Jul  2 13:54:34 2026
From: manachconseil at marketing-premium.com (Manach Conseil Immobilier)
Date: Thu, 02 Jul 2026 12:54:34 +0000
Subject: Votre futur appartement dans le centre-ville de Vannes
Message-ID: <202602071254.5pvsrdy97n5jj@email.marketing-premium.com>

VANNES CENTRE - R?SIDENCE INTIMISTE DE STANDING
-----------------------------------------------

FRAIS DE NOTAIRES OFFERTS
-------------------------
Jusqu'au 31 Juillet 2026
------------------------


LE CLOS ARISTIDE
================

Une adresse rare au c?ur de Vannes
==================================

Derni?res opportunit?s avant d?marrage des travaux dans une r?sidence intimiste, ?l?gante et durable.?


Une r?sidence de standing
=========================

? proximit? imm?diate du centre historique, des remparts et de la gare,?
Le Clos Aristide propose une collection limit?e d?appartements et de maisons?
de ville, avec des surfaces g?n?reuses, des espaces ext?rieurs?
et des garages en sous-sol.


[ **D?couvrir la r?sidence**](http://r.email.marketing-premium.com/mk/cl/f/sh/SMK1E8tHeFuBnDUVeigYH90yGxU1/xDy3NmoWIh32 "D?couvrir la r?sidence")


Confort & s?r?nit? au quotidien
-------------------------------


Une r?sidence conforme ? la r?glementation RE 2020,**?**

**avec chauffage ?lectrique individuel**, pens?e pour offrir calme, confort et ma?trise des usages au quotidien.


Une adresse connect?e aux essentiels
====================================

**Rencontrons-nous ? l'agence**
===============================


19 rue Hoche - Vannes
=====================

**[06 16 68 35 20](tel:0616683520 "Manach Conseil")**
===========================================================================

**?**
=====

**-**
=====

**?**
=====

**06 89 33 82 35**
==================

*Informations compl?mentaires dans la notice descriptive. Document et illustrations non contractuels. Perspectives 3D : Kreaction.?

?


[Se d?sinscrire](http://r.email.marketing-premium.com/mk/un/v2/sh/SMJz09a0vkbXrIOoMwkEISHqtdwX/9kt9Gca-9w1g)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260702/aed70e6a/attachment-0001.htm>

From ftpmaster at ftp-master.debian.org  Thu Jul  2 20:20:40 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 02 Jul 2026 19:20:40 +0000
Subject: Processing of libsrtp2_2.8.0+ds-1_source.changes
Message-ID: <E1wfMxk-005X1c-2X@usper.debian.org>

libsrtp2_2.8.0+ds-1_source.changes uploaded successfully to localhost
along with the files:
  libsrtp2_2.8.0+ds-1.dsc
  libsrtp2_2.8.0+ds.orig.tar.xz
  libsrtp2_2.8.0+ds-1.debian.tar.xz
  libsrtp2_2.8.0+ds-1_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Thu Jul  2 20:35:09 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 02 Jul 2026 19:35:09 +0000
Subject: libsrtp2_2.8.0+ds-1_source.changes ACCEPTED into unstable
Message-ID: <E1wfNBl-00000001OYP-1yg7@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 02 Jul 2026 21:09:52 +0200
Source: libsrtp2
Architecture: source
Version: 2.8.0+ds-1
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Jonas Smedegaard <dr at jones.dk>
Changes:
 libsrtp2 (2.8.0+ds-1) unstable; urgency=medium
 .
   [ upstream ]
   * new release
 .
   [ Jonas Smedegaard ]
   * update copyright info:
     + avoid any .git* files when repackaging upstream source
     + license patches same as main upstream license
     + update coverage
   * update git-buildpackage config:
     + filter out eventual debian subdir
     + stop superfluously filter out .git* files
     + improve usage comment
   * update watch file:
     + use file format 5
     + use Github template
     + auto-mangle upstream version
     + stop mangle filename
     + use repack suffix +ds
   * stop superfluously set fields Rules-Requires-Root Priority
   * build-depend on pkgconf (not pkg-config)
   * use debhelper compatibility level 14 (not 13)
   * relax build-dependency on d-shlibs
   * declare compliance with Debian Policy 4.7.4
   * update and unfuzz patches
   * enable dh_autoreconf
   * update symbols: 1 symbol added
Checksums-Sha1:
 3d463e6fa7454e0dbdb66ed194564a8c5e4bc40e 2237 libsrtp2_2.8.0+ds-1.dsc
 4ac174fc01ef7f71eb709693ec38111d334524bd 408404 libsrtp2_2.8.0+ds.orig.tar.xz
 f71bb5b098ea0f53c3bb154eab5b69cacb4d5eab 16760 libsrtp2_2.8.0+ds-1.debian.tar.xz
 60c4b662ecb8704f029799cd7ce77b2f7640458f 7960 libsrtp2_2.8.0+ds-1_amd64.buildinfo
Checksums-Sha256:
 f11e65c09f4eafd7bef49cd950b7a972ddca4a9e258509602e9d30ea82f3f14d 2237 libsrtp2_2.8.0+ds-1.dsc
 24f536cd886dead37d425e638cc96a8700fe986328f240d218520316f6e04372 408404 libsrtp2_2.8.0+ds.orig.tar.xz
 f6d1134f0e1a74663d1bd38068934d462ee943fdb9d6ed4395e8ac0e1b15fa3f 16760 libsrtp2_2.8.0+ds-1.debian.tar.xz
 824b9bd9b90f4ecc40fdb425f9cdf5cb82b8079b16da74095ab335ee924ac6be 7960 libsrtp2_2.8.0+ds-1_amd64.buildinfo
Files:
 8c2e5f8560f3e7606b431adefe758f57 2237 libs optional libsrtp2_2.8.0+ds-1.dsc
 24a3a1bf68a5c5dbde389e33109853ea 408404 libs optional libsrtp2_2.8.0+ds.orig.tar.xz
 f56c1dc1506b02ca3ea7acb153932805 16760 libs optional libsrtp2_2.8.0+ds-1.debian.tar.xz
 1c528d331f310bac7f9fb0f4ec5b327a 7960 libs optional libsrtp2_2.8.0+ds-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----


SExf
=L9Cs
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260702/c68b2e55/attachment.sig>

From bunk at debian.org  Thu Jul  2 22:34:21 2026
From: bunk at debian.org (Adrian Bunk)
Date: Fri, 3 Jul 2026 00:34:21 +0300
Subject: Bug#1140563: coturn: CVE-2026-43994
In-Reply-To: <178215498692.582074.2182485990118332182.reportbug@eldamar.lan>
References: <178215498692.582074.2182485990118332182.reportbug@eldamar.lan>
 <178215498692.582074.2182485990118332182.reportbug@eldamar.lan>
Message-ID: <akbZXan6DfxrusB1@localhost>

On Mon, Jun 22, 2026 at 09:03:06PM +0200, Salvatore Bonaccorso wrote:
> Source: coturn
> Version: 4.12.0-1
> Severity: grave
> Tags: security upstream
> Justification: user security hole
> X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>
> 
> Hi,
> 
> The following vulnerability was published for coturn.
> 
> CVE-2026-43994[0]:
> | Coturn is a free open source implementation of TURN and STUN Server.
> | Versions prior to 4.10.0 contain a stack buffer overflow in
> | decode_oauth_token_gcm(). A uint16_t nonce_len field read from an
> | attacker-supplied OAuth access token (0-65535) is passed directly to
> | memcpy() as the copy length into a 256-byte stack buffer
> | (oauth_encrypted_block.nonce[256]) without bounds checking. The
> | overflow occurs before AES-GCM authentication is verified, the
> | attacker does not need to know the OAuth key or produce a valid AES-
> | GCM token. Up to 735 bytes of attacker-controlled data are written
> | past the buffer, may corrupt adjacent stack data, including control-
> | flow data depending on compiler, ABI, and mitigations. Requires
> | --oauth mode (non-default). This may provide a plausible RCE
> | primitive depending on exploit mitigations; because coturn is widely
> | deployed for WebRTC TURN/STUN and --oauth is commonly recommended,
> | impact can be broad. This issue has been fixed in version 4.10.0.
> 
> 
> If you fix the vulnerability please also make sure to include the
> CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
> 
> For further information see:
> 
> [0] https://security-tracker.debian.org/tracker/CVE-2026-43994
>     https://www.cve.org/CVERecord?id=CVE-2026-43994
> [1] https://github.com/coturn/coturn/security/advisories/GHSA-74pg-rfh2-5qw5
> [2] https://github.com/coturn/coturn/commit/5ca467e70915c033f371cd7a9742759c68f56363

The commit looks wrong, my reading of the CVE is that it got fixed by
  https://github.com/coturn/coturn/commit/46368b3e1ecda2175f8db8b05ece8bbdbf844cea
which is already included in the version in unstable.

> Please adjust the affected versions in the BTS as needed.
> 
> Regards,
> Salvatore

cu
Adrian


From ftpmaster at ftp-master.debian.org  Fri Jul  3 09:38:29 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 03 Jul 2026 08:38:29 +0000
Subject: Processing of janus_1.4.1+ds-1_source.changes
Message-ID: <E1wfZPp-0063Y6-2c@usper.debian.org>

janus_1.4.1+ds-1_source.changes uploaded successfully to localhost
along with the files:
  janus_1.4.1+ds-1.dsc
  janus_1.4.1+ds.orig.tar.xz
  janus_1.4.1+ds-1.debian.tar.xz
  janus_1.4.1+ds-1_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Fri Jul  3 09:49:13 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 03 Jul 2026 08:49:13 +0000
Subject: janus_1.4.1+ds-1_source.changes ACCEPTED into unstable
Message-ID: <E1wfZaD-00000004DAB-3lfX@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Jul 2026 09:50:03 +0200
Source: janus
Architecture: source
Version: 1.4.1+ds-1
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Jonas Smedegaard <dr at jones.dk>
Changes:
 janus (1.4.1+ds-1) unstable; urgency=medium
 .
   [ upstream ]
   * new release(s)
 .
   [ Jonas Smedegaard ]
   * drop patches 1002 2009 due to upstream changes;
     adapt build rules for renamed rollup config file;
     build-depend on dh-nodejs
   * update and unfuzz patches
   * update source helper tool copyright-check
   * update copyright info:
     + avoid any .git* files when repackaging upstream source
     + license patches same as main upstream license
     + update coverage
   * update git-buildpackage config:
     + stop superfluously filter out .git* files
     + improve usage comment
   * update watch file:
     + use file format 5
     + use Github template
     + auto-mangle upstream and Debian versions
     + stop mangle filename
     + use repack suffix +ds
   * update TODOs
   * stop superfluously set fields Rules-Requires-Root Priority
   * declare compliance with Debian Policy 4.7.4
   * use debhelper compatibility level 14 (not 13)
   * update install paths
   * separate arch/indep install rules
   * tell dh_missing about omitted html files
Checksums-Sha1:
 64b6d011c1eaecdbb1f29cce699cd36e9908afd7 2966 janus_1.4.1+ds-1.dsc
 6ca4fadc06fbb7d25601d8d2ad0d3389e02b6b85 5357456 janus_1.4.1+ds.orig.tar.xz
 4a2cc96ba1f0c4ffa4c8419d15d5d185e92cb1f3 25016 janus_1.4.1+ds-1.debian.tar.xz
 4205fd13602651acb8867e098af5fa3d3c8bad72 21002 janus_1.4.1+ds-1_amd64.buildinfo
Checksums-Sha256:
 a83d8a38b77ee7e8b0fb55056df08c01481f80fcafa9852c99bfcb658def4bef 2966 janus_1.4.1+ds-1.dsc
 fdfdd9b18419245cc9058912c22c8283c29c230cb07451bc9ece8a39cbdfd2b2 5357456 janus_1.4.1+ds.orig.tar.xz
 27b1713c69f144f3088140adf8baa19f54483e55c643ec3edd7f21703ce966b0 25016 janus_1.4.1+ds-1.debian.tar.xz
 27260c417366a3cb1f7c4477f4b088c70af9f6d57cbe6cce951485b806164fb0 21002 janus_1.4.1+ds-1_amd64.buildinfo
Files:
 dfa9bd594c24b2349cb6d4083d609d37 2966 comm optional janus_1.4.1+ds-1.dsc
 f08026af2833a5f46e49254e7760ddf9 5357456 comm optional janus_1.4.1+ds.orig.tar.xz
 85e4a3f3f4690804163ff235bdc6c2da 25016 comm optional janus_1.4.1+ds-1.debian.tar.xz
 c33e374595f47dcf00ee546f1d60d5f8 21002 comm optional janus_1.4.1+ds-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----


pPCF
=kqXP
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260703/08ffac6a/attachment.sig>

From ftpmaster at ftp-master.debian.org  Fri Jul  3 09:58:34 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 03 Jul 2026 08:58:34 +0000
Subject: Processing of janus_1.4.1+ds-2_source.changes
Message-ID: <E1wfZjH-0064Hm-2P@usper.debian.org>

janus_1.4.1+ds-2_source.changes uploaded successfully to localhost
along with the files:
  janus_1.4.1+ds-2.dsc
  janus_1.4.1+ds-2.debian.tar.xz
  janus_1.4.1+ds-2_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Fri Jul  3 10:04:21 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 03 Jul 2026 09:04:21 +0000
Subject: janus_1.4.1+ds-2_source.changes ACCEPTED into unstable
Message-ID: <E1wfZor-00000004FVh-0xDS@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Jul 2026 10:43:54 +0200
Source: janus
Architecture: source
Version: 1.4.1+ds-2
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Jonas Smedegaard <dr at jones.dk>
Changes:
 janus (1.4.1+ds-2) unstable; urgency=medium
 .
   * fix install paths
Checksums-Sha1:
 124350f4670b3002b8edffe7b45674b6e6c1fdba 2966 janus_1.4.1+ds-2.dsc
 15da9cbcba1cc5d66504da36b9b32793e9840cd5 25060 janus_1.4.1+ds-2.debian.tar.xz
 ddb4cfcbc5939a5da2ae2fa8378fd7f4df01e860 21002 janus_1.4.1+ds-2_amd64.buildinfo
Checksums-Sha256:
 a234b1c8d6cef66bb5ca2c21e52f965c2d289f232fff5254ebf5fed9fe7fbcbf 2966 janus_1.4.1+ds-2.dsc
 2463eea2bd050ea02aa5fd672b0872a25992f55ce5701f9c971290df0f2f69c9 25060 janus_1.4.1+ds-2.debian.tar.xz
 5cb5f9a7cc882aa5684253fa56e2ad0ce9c38bb04fbaedc33dacf797afd27178 21002 janus_1.4.1+ds-2_amd64.buildinfo
Files:
 03bfcb95c9aee82314b8fd006ca590af 2966 comm optional janus_1.4.1+ds-2.dsc
 4ce01bcd222243585ff0653ef69a2bd6 25060 comm optional janus_1.4.1+ds-2.debian.tar.xz
 a9f1a497fdd59ed953494d5085e659c5 21002 comm optional janus_1.4.1+ds-2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----


jcDV
=A/19
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260703/5c271260/attachment.sig>

From ftpmaster at ftp-master.debian.org  Fri Jul  3 18:57:19 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 03 Jul 2026 17:57:19 +0000
Subject: Processing of biboumi_9.0+20260113-1_source.changes
Message-ID: <E1wfi8e-006RHt-03@usper.debian.org>

biboumi_9.0+20260113-1_source.changes uploaded successfully to localhost
along with the files:
  biboumi_9.0+20260113-1.dsc
  biboumi_9.0+20260113.orig.tar.xz
  biboumi_9.0+20260113-1.debian.tar.xz
  biboumi_9.0+20260113-1_source.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Fri Jul  3 19:08:04 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 03 Jul 2026 18:08:04 +0000
Subject: biboumi_9.0+20260113-1_source.changes ACCEPTED into unstable
Message-ID: <E1wfiJ2-00000005lhe-0BkI@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 12 Jun 2026 00:58:02 -0300
Source: biboumi
Architecture: source
Version: 9.0+20260113-1
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Rafael Passos <rafael at rcpassos.me>
Changes:
 biboumi (9.0+20260113-1) unstable; urgency=medium
 .
   * New upstream version 9.0+20260113
   * d/p/*: replace test patch by service install path patch
   * d/rules: add test_suite to make target with override
   * d/watch: update watch to v5
   * d/control:
     - replace catch by catch2 testing lib
     - remove redundant priority section
     - declare compliance with policy 4.7.4
     - update package description
     - update uploader identity
   * d/copyright: update files under public-domain
Checksums-Sha1:
 771333019a021898b9181774426a68a293f84c5a 1956 biboumi_9.0+20260113-1.dsc
 0dd47c2f9673fc7ae6c62d690f6c3d571321cbfd 167704 biboumi_9.0+20260113.orig.tar.xz
 c34ac57d47baed96122ebebaf66303765ac2d86c 10080 biboumi_9.0+20260113-1.debian.tar.xz
 85e39167632bb24a8d180bb3cbe6c1fc62839d1b 7725 biboumi_9.0+20260113-1_source.buildinfo
Checksums-Sha256:
 eed38432686ee509c962e1c49a963589a3641b58a16253069cf560b8eb26c113 1956 biboumi_9.0+20260113-1.dsc
 2a8f2219b905c2ffd0650cea808f80ab538c86dbdc76867c9fe49fac86b9b9f6 167704 biboumi_9.0+20260113.orig.tar.xz
 050a640e8b59c6e0337afd9ff1701105d8765b48d4ac5441363cc08328d234db 10080 biboumi_9.0+20260113-1.debian.tar.xz
 11d55455440c62f9066327f558faa4e040b5ad22eeff9f34673e767fb3f72429 7725 biboumi_9.0+20260113-1_source.buildinfo
Files:
 5e8d36cda2239addb56f945a89021d7d 1956 net optional biboumi_9.0+20260113-1.dsc
 8a36ae21594d6ef09b2773b401fc2d25 167704 net optional biboumi_9.0+20260113.orig.tar.xz
 e2c6f2b213c6d7f6e8e75fa3550735f2 10080 net optional biboumi_9.0+20260113-1.debian.tar.xz
 50f0b807ee878c7ec3d258de8b0a5cdf 7725 net optional biboumi_9.0+20260113-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----


JJip4uZCJeSIFcOltU78Ngx4dZNWoRE=
=0vhr
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260703/8e84a8e2/attachment.sig>

From carnil at debian.org  Sat Jul  4 09:00:38 2026
From: carnil at debian.org (Salvatore Bonaccorso)
Date: Sat, 4 Jul 2026 10:00:38 +0200
Subject: Bug#1140563: coturn: CVE-2026-43994
In-Reply-To: <akbZXan6DfxrusB1@localhost>
References: <178215498692.582074.2182485990118332182.reportbug@eldamar.lan>
 <akbZXan6DfxrusB1@localhost>
 <178215498692.582074.2182485990118332182.reportbug@eldamar.lan>
Message-ID: <aki9pk_tBZmpV9ml@eldamar.lan>

Hi Adrian,

On Fri, Jul 03, 2026 at 12:34:21AM +0300, Adrian Bunk wrote:
> On Mon, Jun 22, 2026 at 09:03:06PM +0200, Salvatore Bonaccorso wrote:
> > Source: coturn
> > Version: 4.12.0-1
> > Severity: grave
> > Tags: security upstream
> > Justification: user security hole
> > X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>
> > 
> > Hi,
> > 
> > The following vulnerability was published for coturn.
> > 
> > CVE-2026-43994[0]:
> > | Coturn is a free open source implementation of TURN and STUN Server.
> > | Versions prior to 4.10.0 contain a stack buffer overflow in
> > | decode_oauth_token_gcm(). A uint16_t nonce_len field read from an
> > | attacker-supplied OAuth access token (0-65535) is passed directly to
> > | memcpy() as the copy length into a 256-byte stack buffer
> > | (oauth_encrypted_block.nonce[256]) without bounds checking. The
> > | overflow occurs before AES-GCM authentication is verified, the
> > | attacker does not need to know the OAuth key or produce a valid AES-
> > | GCM token. Up to 735 bytes of attacker-controlled data are written
> > | past the buffer, may corrupt adjacent stack data, including control-
> > | flow data depending on compiler, ABI, and mitigations. Requires
> > | --oauth mode (non-default). This may provide a plausible RCE
> > | primitive depending on exploit mitigations; because coturn is widely
> > | deployed for WebRTC TURN/STUN and --oauth is commonly recommended,
> > | impact can be broad. This issue has been fixed in version 4.10.0.
> > 
> > 
> > If you fix the vulnerability please also make sure to include the
> > CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
> > 
> > For further information see:
> > 
> > [0] https://security-tracker.debian.org/tracker/CVE-2026-43994
> >     https://www.cve.org/CVERecord?id=CVE-2026-43994
> > [1] https://github.com/coturn/coturn/security/advisories/GHSA-74pg-rfh2-5qw5
> > [2] https://github.com/coturn/coturn/commit/5ca467e70915c033f371cd7a9742759c68f56363
> 
> The commit looks wrong, my reading of the CVE is that it got fixed by
>   https://github.com/coturn/coturn/commit/46368b3e1ecda2175f8db8b05ece8bbdbf844cea
> which is already included in the version in unstable.

This looks right. In fact we initially marked it as such but without
identifying the fixing commit, later on the CVE entry was revisited
and we referenced the above hardening commit. But in fact the earlier
commit matches the proposed change from the advisory.

I have updated the tracking again accordingly.

Regards,
Salvatore


From owner at bugs.debian.org  Sat Jul  4 09:07:03 2026
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sat, 04 Jul 2026 08:07:03 +0000
Subject: Processed: notfound 1140563 in 4.12.0-1, found 1140563 in
 4.6.1-2, closing 1140563
References: <1783152254-768641115@bts.debian.org>
Message-ID: <handler.s.C.1783152264994013.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> notfound 1140563 4.12.0-1
Bug #1140563 [src:coturn] coturn: CVE-2026-43994
No longer marked as found in versions coturn/4.12.0-1.
> found 1140563 4.6.1-2
Bug #1140563 [src:coturn] coturn: CVE-2026-43994
Marked as found in versions coturn/4.6.1-2.
> close 1140563 4.12.0-1
Bug #1140563 [src:coturn] coturn: CVE-2026-43994
Marked as fixed in versions coturn/4.12.0-1.
Bug #1140563 [src:coturn] coturn: CVE-2026-43994
Marked Bug as done
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1140563: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140563
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From owner at bugs.debian.org  Sat Jul  4 09:09:01 2026
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sat, 04 Jul 2026 08:09:01 +0000
Subject: Processed: notfound 1140563 in 4.12.0-1, closing 1140563
References: <1783152402-1844-bts-bunk@debian.org>
Message-ID: <handler.s.C.1783152405995131.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> notfound 1140563 4.12.0-1
Bug #1140563 {Done: Salvatore Bonaccorso <carnil at debian.org>} [src:coturn] coturn: CVE-2026-43994
Ignoring request to alter found versions of bug #1140563 to the same values previously set
> close 1140563 4.12.0-1
Bug #1140563 {Done: Salvatore Bonaccorso <carnil at debian.org>} [src:coturn] coturn: CVE-2026-43994
Ignoring request to alter fixed versions of bug #1140563 to the same values previously set
Bug #1140563 {Done: Salvatore Bonaccorso <carnil at debian.org>} [src:coturn] coturn: CVE-2026-43994
Bug 1140563 is already marked as done; not doing anything.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1140563: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140563
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From noreply at release.debian.org  Mon Jul  6 05:39:04 2026
From: noreply at release.debian.org (Debian testing autoremoval watch)
Date: Mon, 06 Jul 2026 04:39:04 +0000
Subject: rtpengine is marked for autoremoval from testing
Message-ID: <E1wgb6m-001kpg-0A@respighi.debian.org>

rtpengine 13.5.1.13-1 is marked for autoremoval from testing on 2026-07-26

It is affected by these RC bugs:
1140852: rtpengine: fails to migrate to testing for too long
 https://bugs.debian.org/1140852



For more information on the autoremoval process, including hints to prevent
autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval

This mail is generated by:
https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl

Autoremoval data is generated by:
https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl


From ftpmaster at ftp-master.debian.org  Mon Jul  6 10:47:17 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Mon, 06 Jul 2026 09:47:17 +0000
Subject: Processing of rtpengine_26.0.1.15-1_source.changes
Message-ID: <E1wgfv3-001bDH-2E@usper.debian.org>

rtpengine_26.0.1.15-1_source.changes uploaded successfully to localhost
along with the files:
  rtpengine_26.0.1.15-1.dsc
  rtpengine_26.0.1.15.orig.tar.gz
  rtpengine_26.0.1.15-1.debian.tar.xz
  rtpengine_26.0.1.15-1_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Mon Jul  6 10:48:57 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Mon, 06 Jul 2026 09:48:57 +0000
Subject: rtpengine_26.0.1.15-1_source.changes ACCEPTED into unstable
Message-ID: <E1wgfwf-00000000e5B-3ukx@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 30 Jun 2026 10:09:36 +0200
Source: rtpengine
Architecture: source
Version: 26.0.1.15-1
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Victor Seva <vseva at debian.org>
Changes:
 rtpengine (26.0.1.15-1) unstable; urgency=medium
 .
   * d/control: improve no-transcoding build profile
   * New upstream version 26.0.1.15
Checksums-Sha1:
 d8f289bb95841673b772e43342f538996b2cdaa8 3451 rtpengine_26.0.1.15-1.dsc
 262986cba5f18e05bbb2e6847b73acef843e51e3 6989685 rtpengine_26.0.1.15.orig.tar.gz
 fc3aed66af1a26db2c1501679fcba69013605f1e 15128 rtpengine_26.0.1.15-1.debian.tar.xz
 81057e75507a2fc53f35cd82b0ce1b16082dc493 19256 rtpengine_26.0.1.15-1_amd64.buildinfo
Checksums-Sha256:
 54b5a661f6d09ce812013974dbedea47071213c247c6a95070568e7e1e76424c 3451 rtpengine_26.0.1.15-1.dsc
 3ee53cc342c64db21cc67c18f69235d8645563470f2d42ae011d98efa1e1720a 6989685 rtpengine_26.0.1.15.orig.tar.gz
 99d0191985b4c0de20dc16a5f0348327eb92cb88d2f5a33292dfa4c2ce237b7c 15128 rtpengine_26.0.1.15-1.debian.tar.xz
 204768c6a6a97d7c0815e729b7471de92a09cbd57d3ba0da15d64acbc74b2d68 19256 rtpengine_26.0.1.15-1_amd64.buildinfo
Files:
 903debc7f12ae7868862832396ffa304 3451 net optional rtpengine_26.0.1.15-1.dsc
 7f170d66f7d6e55301aa3965dbf4816f 6989685 net optional rtpengine_26.0.1.15.orig.tar.gz
 df051b0fdf05daae54ec17aa8ac9a6ff 15128 net optional rtpengine_26.0.1.15-1.debian.tar.xz
 1f66148431f381c74d74faeeb82dab8b 19256 net optional rtpengine_26.0.1.15-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iIcEARYKAC8WIQQq6AO8RS0zF4SC1vh9e2XEKg7IsgUCakt3XxEcdnNldmFAZGVi
aWFuLm9yZwAKCRB9e2XEKg7Isv6BAQDpdHlv/XzXrkgN3mA3wfGkew8sFrUEMgCZ
Y+mjJJR4/gEAts9XEyw0Uvtbt9FvM0gaGD9VTeAeHj1c6bZmaIS21gg=
=M2mB
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260706/97c7356f/attachment.sig>

From dr at jones.dk  Mon Jul  6 12:54:09 2026
From: dr at jones.dk (Jonas Smedegaard)
Date: Mon, 06 Jul 2026 13:54:09 +0200
Subject: asterisk is blocked from migrating to testing
Message-ID: <178333884984.2845312.13207717847075927569@cairon.jones.dk>

Can some other Asterisk maintainer than me please investigate why
asterisk is not migrating to testing?

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260706/8bd527e6/attachment.sig>

From joerg at dorchain.net  Mon Jul  6 13:41:06 2026
From: joerg at dorchain.net (Joerg Dorchain)
Date: Mon, 6 Jul 2026 14:41:06 +0200
Subject: asterisk is blocked from migrating to testing
In-Reply-To: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
References: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
Message-ID: <akufbkji8sLbvDxf@Redstar.dorchain.net>

Hello,

I looks to me as an reproduceable build failure.
https://reproduce.debian.net/amd64/api/v1/builds/267907/artifacts/703344/diffoscope
looks like actually harmless differences in the automatically
generated documentation.
Different order of sections, but no idea where this comes from.

Maybe the tool chain in unstable (or where the uploaded package
was build) is different from the one in testing for the
documentation output?

Best regards,

Joerg

On Mon, Jul 06, 2026 at 01:54:09PM +0200, Jonas Smedegaard wrote:
> 
> Can some other Asterisk maintainer than me please investigate why
> asterisk is not migrating to testing?
> 
>  - Jonas
> 
> -- 
>  * Jonas Smedegaard - idealist & Internet-arkitekt
>  * Tlf.: +45 40843136  Website: http://dr.jones.dk/
>  * Sponsorship: https://ko-fi.com/drjones
> 
>  [x] quote me freely  [ ] ask before reusing  [ ] keep private


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 898 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260706/7e5dc418/attachment.sig>

From dr at jones.dk  Mon Jul  6 14:17:36 2026
From: dr at jones.dk (Jonas Smedegaard)
Date: Mon, 06 Jul 2026 15:17:36 +0200
Subject: asterisk is blocked from migrating to testing
In-Reply-To: <akufbkji8sLbvDxf@Redstar.dorchain.net>
References: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
 <akufbkji8sLbvDxf@Redstar.dorchain.net>
Message-ID: <178334385648.2468731.2432978785407110823@cairon.jones.dk>

Quoting Joerg Dorchain (2026-07-06 14:41:06)
> Hello,
> 
> I looks to me as an reproduceable build failure.
> https://reproduce.debian.net/amd64/api/v1/builds/267907/artifacts/703344/diffoscope
> looks like actually harmless differences in the automatically
> generated documentation.
> Different order of sections, but no idea where this comes from.
> 
> Maybe the tool chain in unstable (or where the uploaded package
> was build) is different from the one in testing for the
> documentation output?

Thanks.

What would be helpful is to get in touch with those who understand the
issue and figure out how to unblock the asterisk package.

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


From matthias at urlichs.de  Mon Jul  6 13:55:56 2026
From: matthias at urlichs.de (Matthias Urlichs)
Date: Mon, 6 Jul 2026 14:55:56 +0200
Subject: asterisk is blocked from migrating to testing
In-Reply-To: <akufbkji8sLbvDxf@Redstar.dorchain.net>
References: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
 <akufbkji8sLbvDxf@Redstar.dorchain.net>
Message-ID: <43fb02d6-efaf-4a09-b6a5-5f47c47a94b8@urlichs.de>

On 06.07.26 14:41, Joerg Dorchain wrote:
> Different order of sections, but no idea where this comes from.

Probably hashing, in whichever tool generates the documentation. Some 
scripting languages don't return mappings / dictionary entries / 
take-your-name in the order they were added; the hashes used to map 
entries to map slots usually use add a random seed internally, to 
prevent some classes of DoS attacks.

I recommend sorting.

-- 
-- mit freundlichen Gr??en
-- 
-- Matthias Urlichs

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260706/03a5eb36/attachment.sig>

From jonas at jones.dk  Mon Jul  6 16:40:49 2026
From: jonas at jones.dk (Jonas Smedegaard)
Date: Mon, 06 Jul 2026 17:40:49 +0200
Subject: asterisk is blocked from migrating to testing
In-Reply-To: <43fb02d6-efaf-4a09-b6a5-5f47c47a94b8@urlichs.de>
References: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
 <akufbkji8sLbvDxf@Redstar.dorchain.net>
 <43fb02d6-efaf-4a09-b6a5-5f47c47a94b8@urlichs.de>
Message-ID: <178335244980.2468731.9613373567753162967@cairon.jones.dk>

Quoting Matthias Urlichs via Pkg-voip-maintainers (2026-07-06 14:55:56)
> On 06.07.26 14:41, Joerg Dorchain wrote:
> > Different order of sections, but no idea where this comes from.
> 
> Probably hashing, in whichever tool generates the documentation. Some 
> scripting languages don't return mappings / dictionary entries / 
> take-your-name in the order they were added; the hashes used to map 
> entries to map slots usually use add a random seed internally, to 
> prevent some classes of DoS attacks.
> 
> I recommend sorting.

Thanks for the speculative input, to both of you.

Do anyone feel like *acting* on this?

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


From debian-bts-link at lists.debian.org  Mon Jul  6 18:34:02 2026
From: debian-bts-link at lists.debian.org (debian-bts-link at lists.debian.org)
Date: Mon, 06 Jul 2026 17:34:02 +0000
Subject: [bts-link] source package jami
Message-ID: <178335924204.2646395.8354264970425405315.btslink@sonntag.debian.org>

#
# bts-link upstream status pull for source package jami
# see http://lists.debian.org/debian-devel-announce/2006/05/msg00001.html
#     https://bts-link-team.pages.debian.net/bts-link/
#

user debian-bts-link at lists.debian.org

# remote status report for #931285 (http://bugs.debian.org/931285)
# Bug title: jami: Black, empty screen shared from wayland desktop session
#  * https://git.jami.net/savoirfairelinux/ring-daemon/issues/13
#  * remote status changed: (?) -> closed
#  * closed upstream
tags 931285 + fixed-upstream
usertags 931285 + status-closed

# remote status report for #978027 (http://bugs.debian.org/978027)
# Bug title: jami: Continues music playback when accepting incoming calls
#  * https://git.jami.net/savoirfairelinux/ring-client-gnome/issues/1230
#  * remote status changed: (?) -> closed
#  * closed upstream
tags 978027 + fixed-upstream
usertags 978027 + status-closed

thanks


From owner at bugs.debian.org  Mon Jul  6 18:37:24 2026
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Mon, 06 Jul 2026 17:37:24 +0000
Subject: Processed: [bts-link] source package jami
References: <178335924204.2646395.8354264970425405315.btslink@sonntag.debian.org>
Message-ID: <handler.s.C.17833592451706550.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> #
> # bts-link upstream status pull for source package jami
> # see http://lists.debian.org/debian-devel-announce/2006/05/msg00001.html
> #     https://bts-link-team.pages.debian.net/bts-link/
> #
> user debian-bts-link at lists.debian.org
Setting user to debian-bts-link at lists.debian.org (was debian-bts-link at lists.debian.org).
> # remote status report for #931285 (http://bugs.debian.org/931285)
> # Bug title: jami: Black, empty screen shared from wayland desktop session
> #  * https://git.jami.net/savoirfairelinux/ring-daemon/issues/13
> #  * remote status changed: (?) -> closed
> #  * closed upstream
> tags 931285 + fixed-upstream
Bug #931285 [jami] jami: Black, empty screen shared from wayland desktop session
Added tag(s) fixed-upstream.
> usertags 931285 + status-closed
There were no usertags set.
Usertags are now: status-closed.
> # remote status report for #978027 (http://bugs.debian.org/978027)
> # Bug title: jami: Continues music playback when accepting incoming calls
> #  * https://git.jami.net/savoirfairelinux/ring-client-gnome/issues/1230
> #  * remote status changed: (?) -> closed
> #  * closed upstream
> tags 978027 + fixed-upstream
Bug #978027 [jami] jami: Continues music playback when accepting incoming calls
Added tag(s) fixed-upstream.
> usertags 978027 + status-closed
There were no usertags set.
Usertags are now: status-closed.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
931285: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931285
978027: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=978027
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From joerg at dorchain.net  Mon Jul  6 19:55:31 2026
From: joerg at dorchain.net (Joerg Dorchain)
Date: Mon, 6 Jul 2026 20:55:31 +0200
Subject: asterisk is blocked from migrating to testing
In-Reply-To: <178335244980.2468731.9613373567753162967@cairon.jones.dk>
References: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
 <akufbkji8sLbvDxf@Redstar.dorchain.net>
 <43fb02d6-efaf-4a09-b6a5-5f47c47a94b8@urlichs.de>
 <178335244980.2468731.9613373567753162967@cairon.jones.dk>
Message-ID: <akv5BKniEW5dnnKp@Redstar.dorchain.net>

On Mon, Jul 06, 2026 at 05:40:49PM +0200, Jonas Smedegaard wrote:
> Quoting Matthias Urlichs via Pkg-voip-maintainers (2026-07-06 14:55:56)
> > On 06.07.26 14:41, Joerg Dorchain wrote:
> > > Different order of sections, but no idea where this comes from.
> > 
> > Probably hashing, in whichever tool generates the documentation. Some 
> > scripting languages don't return mappings / dictionary entries / 
> > take-your-name in the order they were added; the hashes used to map 
> > entries to map slots usually use add a random seed internally, to 
> > prevent some classes of DoS attacks.
> > 
> > I recommend sorting.
> 
> Thanks for the speculative input, to both of you.
> 
> Do anyone feel like *acting* on this?

I would need some time to setup a build environment to test out
reproducible package builds.

On the other hand, I would feel more like asking for some
qualified input what to change or correct but I do not know whom.
Never seen such a reason preventing migration.

Would debian-qa be a good contact?

Best regards,

Joerg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 898 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260706/14009b79/attachment.sig>

From jonas at jones.dk  Mon Jul  6 20:41:59 2026
From: jonas at jones.dk (Jonas Smedegaard)
Date: Mon, 06 Jul 2026 21:41:59 +0200
Subject: asterisk is blocked from migrating to testing
In-Reply-To: <akv5BKniEW5dnnKp@Redstar.dorchain.net>
References: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
 <akufbkji8sLbvDxf@Redstar.dorchain.net>
 <43fb02d6-efaf-4a09-b6a5-5f47c47a94b8@urlichs.de>
 <178335244980.2468731.9613373567753162967@cairon.jones.dk>
 <akv5BKniEW5dnnKp@Redstar.dorchain.net>
Message-ID: <178336691935.2468731.17561906970692589382@cairon.jones.dk>

Quoting Joerg Dorchain (2026-07-06 20:55:31)
> On Mon, Jul 06, 2026 at 05:40:49PM +0200, Jonas Smedegaard wrote:
> > Quoting Matthias Urlichs via Pkg-voip-maintainers (2026-07-06 14:55:56)
> > > On 06.07.26 14:41, Joerg Dorchain wrote:
> > > > Different order of sections, but no idea where this comes from.
> > > 
> > > Probably hashing, in whichever tool generates the documentation. Some 
> > > scripting languages don't return mappings / dictionary entries / 
> > > take-your-name in the order they were added; the hashes used to map 
> > > entries to map slots usually use add a random seed internally, to 
> > > prevent some classes of DoS attacks.
> > > 
> > > I recommend sorting.
> > 
> > Thanks for the speculative input, to both of you.
> > 
> > Do anyone feel like *acting* on this?
> 
> I would need some time to setup a build environment to test out
> reproducible package builds.
> 
> On the other hand, I would feel more like asking for some
> qualified input what to change or correct but I do not know whom.
> Never seen such a reason preventing migration.
> 
> Would debian-qa be a good contact?

If I had the answers, I would not pose the question.

I can figure out the answers, but I would prefer that others engage in
maintenance of the asterisk package.

I can recommend to start from https://tracker.debian.org/pkg/asterisk
and consider contacting the various contact points that seem relevant.

I can recommend to file a bugreport and cc that bugreport when engaging
in conversations.

Just suggestions...

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


From martin.rampersad at emkal.ca  Mon Jul  6 22:04:48 2026
From: martin.rampersad at emkal.ca (Martin Rampersad)
Date: Mon, 6 Jul 2026 21:04:48 +0000
Subject: asterisk is blocked from migrating to testing
In-Reply-To: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
References: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
Message-ID: <IA0PR19MB8075751DD63D25AC7004705EF4F12@IA0PR19MB8075.namprd19.prod.outlook.com>

My investigation so far:

Since 2017 a patch called 1009_build_reproducibly (previously build_reproducibly) was created to enable reproducible builds.
This worked until the latest version.
The patch updates make_build_h and make_xml_documentation.
The diffoscope complains about the output of make_xml_documentation
In make_xml_documentation, a find was patched to sort dir entries (remove dependency on sort order of underlying filesystem)
Asterisk used to only pull xml documentation embedded in *.c and *.cc files
I believe in the latest version dedicated xml files are now supported.
There is now a second find command in make_xml_documentation that iterates over *.xml
I believe patching this new find command in the same way may resolve the issue.

This is as far as I can go today.

Martin


From rubencaldas at gesloures.pt  Tue Jul  7 11:05:54 2026
From: rubencaldas at gesloures.pt (rubencaldas at gesloures.pt)
Date: Tue, 07 Jul 2026 11:05:54 +0100
Subject: Ich habe mich entschieden, Ihnen 4.800.000,00 =?utf-8?b?4oKs?=
 zukommen zu lassen.
Message-ID: <20260707110554.Horde.gx5Fp_cLLUHW8gsVBWDSdVY@mail.sooma.com>

Hallo,

ich bin Maria Elisabeth, eine deutsche Gesch?ftsfrau und Investorin.  
Nachdem ich meinen Mann im Krankenhaus verloren habe, bat er mich,  
4.800.000,00 ? an eine wohlt?tige Person wie Sie zu spenden. Ich habe  
bereits 35 Prozent meines Verm?gens f?r wohlt?tige Zwecke gespendet  
und mir au?erdem vorgenommen, die restlichen 35 Prozent im Jahr 2026  
an Einzelpersonen zu spenden. Ich habe mich entschieden, Ihnen  
4.800.000,00 ? zukommen zu lassen. Wenn Sie an meiner Spende  
interessiert sind, kontaktieren Sie mich bitte f?r weitere  
Informationen.

Mehr ?ber mich erfahren Sie unter dem folgenden Link:

Sie k?nnen hier nachsehen:  
https://en.wikipedia.org/wiki/Maria-Elisabeth_Schaeffler

============================================
Mit freundlichen Gr??en,
Vorsitzender einer Supermarktkette.
Frau Maria Elisabeth.
E-Mail: mariaelisabethschaeffer at outlook.com



From rubencaldas at gesloures.pt  Tue Jul  7 11:15:44 2026
From: rubencaldas at gesloures.pt (rubencaldas at gesloures.pt)
Date: Tue, 07 Jul 2026 11:15:44 +0100
Subject: Ich habe mich entschieden, Ihnen 4.800.000,00 =?utf-8?b?4oKs?=
 zukommen zu lassen.
Message-ID: <20260707111544.Horde.XsIT1FfG_DidSPRm1_x3tgy@mail.sooma.com>

Hallo,

ich bin Maria Elisabeth, eine deutsche Gesch?ftsfrau und Investorin.  
Nachdem ich meinen Mann im Krankenhaus verloren habe, bat er mich,  
4.800.000,00 ? an eine wohlt?tige Person wie Sie zu spenden. Ich habe  
bereits 35 Prozent meines Verm?gens f?r wohlt?tige Zwecke gespendet  
und mir au?erdem vorgenommen, die restlichen 35 Prozent im Jahr 2026  
an Einzelpersonen zu spenden. Ich habe mich entschieden, Ihnen  
4.800.000,00 ? zukommen zu lassen. Wenn Sie an meiner Spende  
interessiert sind, kontaktieren Sie mich bitte f?r weitere  
Informationen.

Mehr ?ber mich erfahren Sie unter dem folgenden Link:

Sie k?nnen hier nachsehen:  
https://en.wikipedia.org/wiki/Maria-Elisabeth_Schaeffler

============================================
Mit freundlichen Gr??en,
Vorsitzender einer Supermarktkette.
Frau Maria Elisabeth.
E-Mail: mariaelisabethschaeffer at outlook.com



From eamanu at debian.org  Tue Jul  7 16:00:08 2026
From: eamanu at debian.org (Emmanuel Arias)
Date: Tue, 07 Jul 2026 15:00:08 +0000
Subject: pjproject_2.17+dfsg-1_amd64.changes REJECTED
Message-ID: <E1wh7HM-00000006AgS-1ZUN@fasolo.debian.org>


Hi! Thanks for your contributions to Debian!

Big package with a very detailed d/copyright, thanks for that!

Please review these points:

- Julien Pommier should be mentioned (third_party/webrtc_aec3/src/third_party/pffft/src/pffft.*)
- Octasis Inc. should be mentioned for third_party/webrtc_aec3/src/third_party/rnnoise/*

Further information may be found at:
   https://dfsg-new-queue.debian.org/reviews/pjproject

Regards, Emmanuel Arias
Member of the DFSG, Licensing & New Packages Team



===

Please feel free to respond to this email if you don't understand why
your files were rejected, or if you upload new files which address our
concerns.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260707/7b33483f/attachment.sig>

From ftpmaster at ftp-master.debian.org  Tue Jul  7 17:26:56 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Tue, 07 Jul 2026 16:26:56 +0000
Subject: Processing of pjproject_2.17+dfsg-2_amd64.changes
Message-ID: <E1wh8dM-002qXP-0S@usper.debian.org>

pjproject_2.17+dfsg-2_amd64.changes uploaded successfully to localhost
along with the files:
  pjproject_2.17+dfsg-2.dsc
  pjproject_2.17+dfsg.orig.tar.xz
  pjproject_2.17+dfsg-2.debian.tar.xz
  libpj2_2.17+dfsg-2_amd64.deb
  libpjlib-util2_2.17+dfsg-2_amd64.deb
  libpjmedia-audiodev2_2.17+dfsg-2_amd64.deb
  libpjmedia-codec2_2.17+dfsg-2_amd64.deb
  libpjmedia-videodev2_2.17+dfsg-2_amd64.deb
  libpjmedia2_2.17+dfsg-2_amd64.deb
  libpjnath2_2.17+dfsg-2_amd64.deb
  libpjproject-dev_2.17+dfsg-2_amd64.deb
  libpjsip-simple2_2.17+dfsg-2_amd64.deb
  libpjsip-ua2_2.17+dfsg-2_amd64.deb
  libpjsip2_2.17+dfsg-2_amd64.deb
  libpjsua2-2v5_2.17+dfsg-2_amd64.deb
  libpjsua2_2.17+dfsg-2_amd64.deb
  pjproject_2.17+dfsg-2_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Tue Jul  7 17:35:59 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Tue, 07 Jul 2026 16:35:59 +0000
Subject: pjproject_2.17+dfsg-2_amd64.changes is NEW
Message-ID: <E1wh8m7-00000006Psd-3p3x@fasolo.debian.org>

binary:libpj2 is NEW.
binary:libpjlib-util2 is NEW.
binary:libpjmedia-audiodev2 is NEW.
binary:libpjmedia-codec2 is NEW.
binary:libpjmedia-videodev2 is NEW.
binary:libpjmedia2 is NEW.
binary:libpjnath2 is NEW.
binary:libpjproject-dev is NEW.
binary:libpjsip-simple2 is NEW.
binary:libpjsip-ua2 is NEW.
binary:libpjsip2 is NEW.
binary:libpjsua2 is NEW.
binary:libpjsua2-2v5 is NEW.
binary:libpj2 is NEW.
binary:libpjlib-util2 is NEW.
binary:libpjmedia-audiodev2 is NEW.
binary:libpjmedia-codec2 is NEW.
binary:libpjmedia-videodev2 is NEW.
binary:libpjmedia2 is NEW.
binary:libpjnath2 is NEW.
binary:libpjproject-dev is NEW.
binary:libpjsip-simple2 is NEW.
binary:libpjsip-ua2 is NEW.
binary:libpjsip2 is NEW.
binary:libpjsua2-2v5 is NEW.
binary:libpjsua2 is NEW.
source:pjproject is NEW.

Your package has been put into the NEW queue, which requires manual action
from the ftpteam to process. The upload was otherwise valid (it had a good
OpenPGP signature and file hashes are valid), so please be patient.

Packages are routinely processed through to the archive, and do feel
free to browse the NEW queue[1].

If there is an issue with the upload, you will receive an email from a
member of the ftpteam.

If you have any questions, you may reply to this email.

[1]: https://ftp-master.debian.org/new.html
     or https://ftp-master.debian.org/backports-new.html for *-backports
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260707/d38c9fa0/attachment.sig>

From martin.rampersad at emkal.ca  Tue Jul  7 22:55:04 2026
From: martin.rampersad at emkal.ca (Martin Rampersad)
Date: Tue, 7 Jul 2026 21:55:04 +0000
Subject: asterisk is blocked from migrating to testing
In-Reply-To: <IA0PR19MB8075751DD63D25AC7004705EF4F12@IA0PR19MB8075.namprd19.prod.outlook.com>
References: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
 <IA0PR19MB8075751DD63D25AC7004705EF4F12@IA0PR19MB8075.namprd19.prod.outlook.com>
Message-ID: <IA0PR19MB80757C7AE6AB129C3636FCCFF4F02@IA0PR19MB8075.namprd19.prod.outlook.com>

Hello,

I have contributed a patch that I think will work. I'm not sure what the next step is, but I think it is to add a signed tag to my commit. It will probably look something like:

debian/1%22.10.0+dfsg+_cs6.17.60671434-3

Commit is here:
https://salsa.debian.org/pkg-voip-team/asterisk/-/commit/5de71c66526e982954607138d727b71ad05a32d6

Martin

From jonas at jones.dk  Tue Jul  7 23:58:32 2026
From: jonas at jones.dk (Jonas Smedegaard)
Date: Wed, 08 Jul 2026 00:58:32 +0200
Subject: asterisk is blocked from migrating to testing
In-Reply-To: <IA0PR19MB80757C7AE6AB129C3636FCCFF4F02@IA0PR19MB8075.namprd19.prod.outlook.com>
References: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
 <IA0PR19MB8075751DD63D25AC7004705EF4F12@IA0PR19MB8075.namprd19.prod.outlook.com>
 <IA0PR19MB80757C7AE6AB129C3636FCCFF4F02@IA0PR19MB8075.namprd19.prod.outlook.com>
Message-ID: <178346511219.2845312.1328394203218109359@cairon.jones.dk>

Quoting Martin Rampersad via Pkg-voip-maintainers (2026-07-07 23:55:04)
> Hello,
> 
> I have contributed a patch that I think will work. I'm not sure what the next step is, but I think it is to add a signed tag to my commit. It will probably look something like:
> 
> debian/1%22.10.0+dfsg+_cs6.17.60671434-3
> 
> Commit is here:
> https://salsa.debian.org/pkg-voip-team/asterisk/-/commit/5de71c66526e982954607138d727b71ad05a32d6

Thanks!

That patch looks plausible to me - what I have done is simply
`git pull` and then `gbp dch -a debian && dch -r`, and am now building
and intend on releasing that. Let's see how that fares.

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260708/020221d9/attachment-0002.sig>

From jonas at jones.dk  Tue Jul  7 23:58:32 2026
From: jonas at jones.dk (Jonas Smedegaard)
Date: Wed, 08 Jul 2026 00:58:32 +0200
Subject: asterisk is blocked from migrating to testing
In-Reply-To: <IA0PR19MB80757C7AE6AB129C3636FCCFF4F02@IA0PR19MB8075.namprd19.prod.outlook.com>
References: <178333884984.2845312.13207717847075927569@cairon.jones.dk>
 <IA0PR19MB8075751DD63D25AC7004705EF4F12@IA0PR19MB8075.namprd19.prod.outlook.com>
 <IA0PR19MB80757C7AE6AB129C3636FCCFF4F02@IA0PR19MB8075.namprd19.prod.outlook.com>
Message-ID: <178346511219.2845312.1328394203218109359@cairon.jones.dk>

Quoting Martin Rampersad via Pkg-voip-maintainers (2026-07-07 23:55:04)
> Hello,
> 
> I have contributed a patch that I think will work. I'm not sure what the next step is, but I think it is to add a signed tag to my commit. It will probably look something like:
> 
> debian/1%22.10.0+dfsg+_cs6.17.60671434-3
> 
> Commit is here:
> https://salsa.debian.org/pkg-voip-team/asterisk/-/commit/5de71c66526e982954607138d727b71ad05a32d6

Thanks!

That patch looks plausible to me - what I have done is simply
`git pull` and then `gbp dch -a debian && dch -r`, and am now building
and intend on releasing that. Let's see how that fares.

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260708/020221d9/attachment-0003.sig>

From ftpmaster at ftp-master.debian.org  Wed Jul  8 00:08:32 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Tue, 07 Jul 2026 23:08:32 +0000
Subject: Processing of asterisk_22.10.0+dfsg+~cs6.17.60671434-3_source.changes
Message-ID: <E1whEu0-0038FI-2C@usper.debian.org>

asterisk_22.10.0+dfsg+~cs6.17.60671434-3_source.changes uploaded successfully to localhost
along with the files:
  asterisk_22.10.0+dfsg+~cs6.17.60671434-3.dsc
  asterisk_22.10.0+dfsg+~cs6.17.60671434-3.debian.tar.xz
  asterisk_22.10.0+dfsg+~cs6.17.60671434-3_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Wed Jul  8 00:39:45 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Tue, 07 Jul 2026 23:39:45 +0000
Subject: asterisk_22.10.0+dfsg+~cs6.17.60671434-3_source.changes ACCEPTED into
 unstable
Message-ID: <E1whFOD-00000007lYq-11EE@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 08 Jul 2026 00:50:10 +0200
Source: asterisk
Architecture: source
Version: 1:22.10.0+dfsg+~cs6.17.60671434-3
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Jonas Smedegaard <dr at jones.dk>
Changes:
 asterisk (1:22.10.0+dfsg+~cs6.17.60671434-3) unstable; urgency=medium
 .
   [ Martin Rampersad ]
   * update reproducible build patch to include xml
Checksums-Sha1:
 2c1054e286c00f5c2e18c72bd59857583593ddd5 5389 asterisk_22.10.0+dfsg+~cs6.17.60671434-3.dsc
 369f2f8af3f86638b5a09ac9fce04032dd4ceaa2 126256 asterisk_22.10.0+dfsg+~cs6.17.60671434-3.debian.tar.xz
 97f8337ce118410474e6acd63cee2ec6c7c98eca 25540 asterisk_22.10.0+dfsg+~cs6.17.60671434-3_amd64.buildinfo
Checksums-Sha256:
 baaede14eb7211f916bf400e4ef786971dc3514b7b8391f58543cff477c358be 5389 asterisk_22.10.0+dfsg+~cs6.17.60671434-3.dsc
 a92bb1ab98faaacad233914aecbdcd529c9ad54cf5bc15404cd0f64d250123b0 126256 asterisk_22.10.0+dfsg+~cs6.17.60671434-3.debian.tar.xz
 570338fbceb91ee288a35847d7798979bfa4df21fabdf4bb80244f72e972e79c 25540 asterisk_22.10.0+dfsg+~cs6.17.60671434-3_amd64.buildinfo
Files:
 6d1a8cc005fd62d2490d1cc613a2956a 5389 comm optional asterisk_22.10.0+dfsg+~cs6.17.60671434-3.dsc
 ca2c8c14992b847bb403febb95256bf6 126256 comm optional asterisk_22.10.0+dfsg+~cs6.17.60671434-3.debian.tar.xz
 3719a39030a3fb701bd2db4b52093d40 25540 comm optional asterisk_22.10.0+dfsg+~cs6.17.60671434-3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----


yTvd
=P+PO
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260707/d2616a9f/attachment.sig>

From noreply at release.debian.org  Wed Jul  8 05:39:12 2026
From: noreply at release.debian.org (Debian testing watch)
Date: Wed, 08 Jul 2026 04:39:12 +0000
Subject: libsrtp2 2.8.0+ds-1 MIGRATED to testing
Message-ID: <E1whK40-004AKt-14@respighi.debian.org>

FYI: The status of the libsrtp2 source package
in Debian's testing distribution has changed.

  Previous version: 2.7.0-3
  Current version:  2.8.0+ds-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From a111968 at esagarrett.com.pt  Wed Jul  8 05:59:10 2026
From: a111968 at esagarrett.com.pt (@RAPPEL-B.N.C#)
Date: Wed, 8 Jul 2026 04:59:10 +0000
Subject: Vous_avez_1_notification
In-Reply-To: <AS8PR01MB7479308E99BB2DEBF4DFDF09ECFF2@AS8PR01MB7479.eurprd01.prod.exchangelabs.com>
References: <AS8PR01MB7479308E99BB2DEBF4DFDF09ECFF2@AS8PR01MB7479.eurprd01.prod.exchangelabs.com>
Message-ID: <AS8PR01MB7479DF82DA5C121D8CD18585ECFF2@AS8PR01MB7479.eurprd01.prod.exchangelabs.com>

[cid:7449d76b-1aa7-4248-9be7-6b5bd2855053]
???????,<https://openai.com/privacy>

?? ???????? ????????? ??? ??? ??? ? ??????????? ???? ????? ?????? ?????????.
???? ???? ???????? ? ??? ????????? :

[?] ??????? ? ??? ?????????<http://myspacesapp.xyz/>

???? ???? ?????????? ?? ????? ?????????.

????????????,
????? ?????????? ???
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260708/6f7be589/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 7830 bytes
Desc: image.png
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260708/6f7be589/attachment-0001.png>

From ftpmaster at ftp-master.debian.org  Wed Jul  8 07:53:57 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Wed, 08 Jul 2026 06:53:57 +0000
Subject: Processing of janus_1.4.1+ds-3_source.changes
Message-ID: <E1whMAP-003QfC-1t@usper.debian.org>

janus_1.4.1+ds-3_source.changes uploaded successfully to localhost
along with the files:
  janus_1.4.1+ds-3.dsc
  janus_1.4.1+ds-3.debian.tar.xz
  janus_1.4.1+ds-3_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Wed Jul  8 08:05:00 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Wed, 08 Jul 2026 07:05:00 +0000
Subject: janus_1.4.1+ds-3_source.changes ACCEPTED into unstable
Message-ID: <E1whML6-000000097a5-1l16@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 08 Jul 2026 08:41:38 +0200
Source: janus
Architecture: source
Version: 1.4.1+ds-3
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Jonas Smedegaard <dr at jones.dk>
Changes:
 janus (1.4.1+ds-3) unstable; urgency=medium
 .
   * update source helper script copyright-check
   * adapt build rules
     to not require nodejs package for arch-dependent build
Checksums-Sha1:
 2cf014cafd4e27f0d072879b0f3335259956aec6 2966 janus_1.4.1+ds-3.dsc
 90bf2270adac41e44883ba471bff23789be308ab 25108 janus_1.4.1+ds-3.debian.tar.xz
 2a7ee25769f5cf4e152735786e4715690a4b6626 20985 janus_1.4.1+ds-3_amd64.buildinfo
Checksums-Sha256:
 fd928b7798ffaa3b5746e11d3acf068b61aab6dcb93f8b25751e9f2f37ad227e 2966 janus_1.4.1+ds-3.dsc
 a9cb168ec1c851b3225a1be6ef9ffb04e60eb68e3f8914f3ef4297485d11d1ec 25108 janus_1.4.1+ds-3.debian.tar.xz
 759211ebc7cb000d55e757f99813495b8ce5d3b03a7ff0d765ed28dc210d0420 20985 janus_1.4.1+ds-3_amd64.buildinfo
Files:
 1ff83ae0097b3681b704c47b01d6d462 2966 comm optional janus_1.4.1+ds-3.dsc
 f7ae4a92c5e9ca5bf48e9b93b129b61a 25108 comm optional janus_1.4.1+ds-3.debian.tar.xz
 098bb446f126150d81c7d07220940620 20985 comm optional janus_1.4.1+ds-3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----


LcSi
=G5wU
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260708/9a5b2afc/attachment.sig>

From vip at vip.windpowerplant.ltd  Wed Jul  8 14:22:44 2026
From: vip at vip.windpowerplant.ltd (Linda Huang)
Date: Wed, 08 Jul 2026 21:22:44 +0800
Subject: =?UTF-8?B?Q3VzdG9tZXIgSW5zdGFsbGF0aW9uIEZlZWRiYWNrIG9mIE91ciBXaW5kIFR1cmJpbmU=?=
Message-ID: <3f0e2906-8f24-4b2f-846c-6c9f12cffcd7@alibaba.com>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260708/d3d29f45/attachment.htm>

From noreply at release.debian.org  Thu Jul  9 05:39:07 2026
From: noreply at release.debian.org (Debian testing watch)
Date: Thu, 09 Jul 2026 04:39:07 +0000
Subject: biboumi 9.0+20260113-1 MIGRATED to testing
Message-ID: <E1whgXT-005NNx-2y@respighi.debian.org>

FYI: The status of the biboumi source package
in Debian's testing distribution has changed.

  Previous version: 9.0+20250730-2
  Current version:  9.0+20260113-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From ftpmaster at ftp-master.debian.org  Thu Jul  9 17:03:38 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 09 Jul 2026 16:03:38 +0000
Subject: Processing of janus_1.4.1+ds-4_source.changes
Message-ID: <E1whrDu-004mYd-3C@usper.debian.org>

janus_1.4.1+ds-4_source.changes uploaded successfully to localhost
along with the files:
  janus_1.4.1+ds-4.dsc
  janus_1.4.1+ds-4.debian.tar.xz
  janus_1.4.1+ds-4_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Thu Jul  9 17:05:30 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 09 Jul 2026 16:05:30 +0000
Subject: janus_1.4.1+ds-4_source.changes ACCEPTED into unstable
Message-ID: <E1whrFi-0000000FaYU-38bb@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 09 Jul 2026 17:50:37 +0200
Source: janus
Architecture: source
Version: 1.4.1+ds-4
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Jonas Smedegaard <dr at jones.dk>
Changes:
 janus (1.4.1+ds-4) unstable; urgency=medium
 .
   * add patch 2013 to use system-installed python in test
   * update DEP-3 patch headers
Checksums-Sha1:
 36dd31a077c4e4c3e0ef2a5f9b0238a6a00cd3ec 2966 janus_1.4.1+ds-4.dsc
 81b9b51b911a165bd2a58f65dcec2deeb5fcfc5e 25296 janus_1.4.1+ds-4.debian.tar.xz
 671a07fa31cd5a9514cb8de2c98ea7312c3bbfd6 20982 janus_1.4.1+ds-4_amd64.buildinfo
Checksums-Sha256:
 cfe28abdc371a593c5c4df15b279781ccff4ea045808c7741c811c3f35db4fc4 2966 janus_1.4.1+ds-4.dsc
 1552ae4a689133d1d944c6c6ce0e6af5f481421e1492b0437dfa0a9100a6e7d9 25296 janus_1.4.1+ds-4.debian.tar.xz
 d9be7523c53f8ef84eee52f26cc6ccf3c8ba7817a33b165001508f4c4e7e6645 20982 janus_1.4.1+ds-4_amd64.buildinfo
Files:
 af5045614d80f0ef86e7576463806baf 2966 comm optional janus_1.4.1+ds-4.dsc
 0b0e10aa4693d15c1939625a0659ec53 25296 comm optional janus_1.4.1+ds-4.debian.tar.xz
 8c153da9a13a4d18b5565dbbc1f3977d 20982 comm optional janus_1.4.1+ds-4_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----


UHY=
=df6+
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260709/c4478977/attachment.sig>

From ujjwal.sarswat at canonical.com  Fri Jul 10 06:16:50 2026
From: ujjwal.sarswat at canonical.com (Ujjwal Sarswat)
Date: Fri, 10 Jul 2026 10:46:50 +0530
Subject: Bug#1138340: 
References: <20260530155644.A2m1oul_@breakpoint.cc>
Message-ID: <CAKv0x7X543BB_hP4=A44Di8xK91HO8v0q18Ecibxx1fMo-98aw@mail.gmail.com>

Package hasn't been updated since 2024. Version 4.8.0 brought OSSL 4
related changes[1].
Updating to the latest version 4.9.0 should fix this.

[1] https://github.com/baresip/re/releases/tag/v4.8.0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260710/ca1b559b/attachment.htm>

From thegamerscenedaily at substack.com  Sat Jul 11 03:52:47 2026
From: thegamerscenedaily at substack.com (TheGamerScene Daily News)
Date: Sat, 11 Jul 2026 02:52:47 +0000
Subject: Xbox Layoffs Devastate id Software and Bethesda (What's Left of the
 Doom Studio)
In-Reply-To: <post-206530316@substack.com>
References: <post-206530316@substack.com>
Message-ID: <20260711025247.3.014c501abe191b9e@mg2.substack.com>

View this post on the web at https://thegamerscenedaily.substack.com/p/xbox-layoffs-devastate-id-software

Hey gamers,
Devastating industry news. This week?s Xbox layoffs are still reverberating through gaming?id Software lost half its staff, Bethesda got hit hard, and the future of iconic franchises is now in question. Plus Wuthering Waves launches on Game Pass TODAY, and we?ve got your weekend gaming lineup. Let?s dive in.
Thanks for reading TheGamerScene Daily News! Subscribe for free to receive new posts and support my work.
Xbox Layoffs Wiped Out Half of id Software?s Staff (Doom Studio in Crisis)
The gaming industry is still processing this week?s Xbox restructuring, which eliminated 3,200 jobs (1,600 immediately, 1,600 more coming over 12 months). The hardest-hit studios weren?t small teams?they were legendary developers.
The confirmed casualties
id Software (Doom, Quake):
136 workers laid off (confirmed via Texas WARN notice)
~50% of the studio gone ? including most (if not all) coders per insider Scott Miller
QA department decimated
id Tech engine reportedly killed (rumored move to Unreal Engine 5)
Doom: The Dark Ages Revelations expansion still deploying, but future uncertain
Bethesda Game Studios (Fallout, Elder Scrolls):
158 people cut at ZeniMax (Texas offices)
22 layoffs at Bethesda Austin
?Many? employees at Bethesda Game Studios cut, per the Bethesda Game Workers Union
Elder Scrolls 6 team reportedly reduced
Bethesda now shifting to focus on ?strongest franchises?: Fallout, Elder Scrolls, Wolfenstein, Doom, Quake
ZeniMax Online Studios (Elder Scrolls Online):
Significant cuts confirmed
Studio not closing but ?cut deeply?
Former ESO dev claims the MMO ?basically funded other failing projects?
Obsidian Entertainment (Avowed, Pentiment):
Impacted by cuts
Reportedly starting a new Fallout game with New Vegas director Josh Sawyer at the helm
The four studios spun off entirely
Microsoft divested from these Xbox-owned studios completely:
Compulsion Games (We Happy Few)
Double Fine Productions (Psychonauts)
Ninja Theory (Hellblade)
Undead Labs (State of Decay)
The union response
The Bethesda Game Workers Union posted a scathing statement: ?In what is becoming a stressful annual routine, Microsoft has decided to lay off thousands, including MANY of us at Bethesda Games Studios. With over 10k developers already cut from previous rounds, those at the top have deemed that insufficient in fixing their mistakes.?
?Save Our Devs? rally planned for July 15 by Xbox union workers.
Why this happened
Microsoft is shifting $2.5 billion into AI implementation, and Xbox Game Pass currently sits at 30 million subscribers?less than half of Microsoft?s original 77 million by mid-2026 target.
Xbox CEO Asha Sharma said no first-party ?publicly announced? games will be cancelled, but with entire teams gutted, developers question how remaining projects will ship on schedule.
What this means for gamers
Uncertain futures for:
Doom franchise (id Tech engine possibly ending)
Elder Scrolls 6 (still no release date)
Elder Scrolls Online (financial questions)
Multiple Bethesda projects
Confirmed continuing:
Doom: The Dark Ages Revelations expansion (July 2026)
Fallout new game (Obsidian, TBA)
Elder Scrolls 6 (still in development, no date)
Read our complete Xbox layoffs breakdown at thegamerscene.news ? [ https://link.sbstck.com/redirect/3bb853bc-0842-4df9-8a0a-e05eb0ff58f3?j=eyJ1IjoiN3A2MWozIn0.YRN2YwNG0HqFxemR3daCLb-UZMXA4tOgW1oRDnkbq00 ]
Wuthering Waves Launches on Game Pass TODAY (Free-to-Play RPG Hits Xbox)
Wuthering Waves, the popular story-rich open-world action RPG, is available on Xbox Game Pass RIGHT NOW for Ultimate, Premium, Essential, and PC Game Pass subscribers.
What it is
An open-world action RPG with a high degree of freedom, developed by Kuro Games. Explore vast environments, master combat with multiple characters, and uncover mysteries in a world reshaped by cataclysm.
Game Pass exclusive rewards
Log in after each version update to unlock special in-game rewards:
x2 Morphable Echo
x10 Premium Tuner
x30,000 Shell Credit
One-time bonus: Exclusive Xbox Sigil ?Paths and Possibilities?
Where to play
Now available:
Xbox Series X/S (Game Pass)
PC (Game Pass)
Also available (not on Game Pass):
PlayStation 5
iOS, Android
Download Wuthering Waves on Game Pass ? [ https://link.sbstck.com/redirect/adb00723-bedb-477c-a53a-03849d790eb1?j=eyJ1IjoiN3A2MWozIn0.YRN2YwNG0HqFxemR3daCLb-UZMXA4tOgW1oRDnkbq00 ]
This Weekend?s Best Releases
Here?s what to play this weekend across all platforms:
Today (July 10):
Kowloon Generic Romance ? First-person indie horror on PS5 and Xbox Series X/S. Set in the walled city, players search for affordable housing and encounter unsettling reality. Short, single-sitting experience.
Wuthering Waves ? Game Pass day-one (covered above)
Coming July 13-17:
Ascend to Zero (July 13) ? Action roguelike, Game Pass day-one
PBA Pro Bowling 2026 (July 14) ? Realistic bowling sim, Game Pass day-one
Quarantine Zone: The Last Check (July 15) ? Now on Game Pass Premium
FixForce (July 17) ? Co-op extraction platformer, Game Pass day-one
Fogpiercer (July 17) ? Sci-fi roguelike deckbuilder on rails
Still available:
Halo: Campaign Evolved (launched July 28 in leaks, verified this week) ? Game Pass day-one, first Halo on PS5 ever
Assassin?s Creed Black Flag: Resynced ? Ubisoft?s full remake with reworked missions
Quick Hits
? Palworld hits 40 million copies sold since Early Access debut (Pocketpair confirms)
? Xbox Game Pass at 30 million subscribers ? Well below Microsoft?s 77 million target
???? GTA 6 pre-orders continue strong ? Rockstar hasn?t revealed numbers but Trailer 3 dropped last week
? Bethesda focusing on Fallout, Elder Scrolls, Wolfenstein, Doom, Quake ? Other franchises deprioritized
?? Xbox CEO Asha Sharma joins Federal Reserve advisory ? Will advise on AI economic impact
Read all Quick Hits at thegamerscene.news ? [ https://link.sbstck.com/redirect/3bb853bc-0842-4df9-8a0a-e05eb0ff58f3?j=eyJ1IjoiN3A2MWozIn0.YRN2YwNG0HqFxemR3daCLb-UZMXA4tOgW1oRDnkbq00 ]
What to Play This Weekend
Now: Wuthering Waves (Game Pass) ? Free-to-play open-world RPG
Now: Kowloon Generic Romance ? Indie horror, single-session experience
Now: Halo: Campaign Evolved ? Original Halo fully remade
Now: Assassin?s Creed Black Flag: Resynced ? Ubisoft remake with new features
More on The Gamer Scene
Complete Xbox Layoffs Timeline: What Was Lost ? [ https://link.sbstck.com/redirect/3bb853bc-0842-4df9-8a0a-e05eb0ff58f3?j=eyJ1IjoiN3A2MWozIn0.YRN2YwNG0HqFxemR3daCLb-UZMXA4tOgW1oRDnkbq00 ]
Every studio affected, every project at risk
id Software Crisis: Doom?s Uncertain Future ? [ https://link.sbstck.com/redirect/3bb853bc-0842-4df9-8a0a-e05eb0ff58f3?j=eyJ1IjoiN3A2MWozIn0.YRN2YwNG0HqFxemR3daCLb-UZMXA4tOgW1oRDnkbq00 ]
What happens to id Tech and future Doom games
Wuthering Waves Complete Beginner?s Guide ? [ https://link.sbstck.com/redirect/3bb853bc-0842-4df9-8a0a-e05eb0ff58f3?j=eyJ1IjoiN3A2MWozIn0.YRN2YwNG0HqFxemR3daCLb-UZMXA4tOgW1oRDnkbq00 ]
Best characters, builds, and progression tips
Bethesda?s New ?Strong Franchises? Focus ? [ https://link.sbstck.com/redirect/3bb853bc-0842-4df9-8a0a-e05eb0ff58f3?j=eyJ1IjoiN3A2MWozIn0.YRN2YwNG0HqFxemR3daCLb-UZMXA4tOgW1oRDnkbq00 ]
Which games are safe, which are cut
Visit thegamerscene.news for more gaming news ? [ https://link.sbstck.com/redirect/3bb853bc-0842-4df9-8a0a-e05eb0ff58f3?j=eyJ1IjoiN3A2MWozIn0.YRN2YwNG0HqFxemR3daCLb-UZMXA4tOgW1oRDnkbq00 ]
How are you feeling about this week?s layoffs? Hit reply and share your thoughts?this one hits different for id Software fans.
Thanks for reading The Gamer Scene! Have a good weekend. Support your favorite indie devs where you can. See you Monday.
? Romello
thegamerscene.news [ https://link.sbstck.com/redirect/3bb853bc-0842-4df9-8a0a-e05eb0ff58f3?j=eyJ1IjoiN3A2MWozIn0.YRN2YwNG0HqFxemR3daCLb-UZMXA4tOgW1oRDnkbq00 ]
Thanks for reading TheGamerScene Daily News! Subscribe for free to receive new posts and support my work.

Unsubscribe https://substack. .rUftgjPelwTIJFcB9cAZ6WINcEApM8mz9daPKk42bFU?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260711/0d29eb95/attachment-0001.htm>

From owner at bugs.debian.org  Sat Jul 11 08:37:02 2026
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sat, 11 Jul 2026 07:37:02 +0000
Subject: Processed: affects 1024353
References: <1783755338-3365-bts-adam@adam-barratt.org.uk>
Message-ID: <handler.s.C.1783755341977356.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> affects 1024353 - release.debian.org
Bug #1024353 [asterisk] asterisk: segfault with the latest security update
Removed indication that 1024353 affects release.debian.org
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1024353: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1024353
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From noreply at release.debian.org  Sun Jul 12 05:39:08 2026
From: noreply at release.debian.org (Debian testing watch)
Date: Sun, 12 Jul 2026 04:39:08 +0000
Subject: janus 1.4.1+ds-4 MIGRATED to testing
Message-ID: <E1wily8-000hbt-01@respighi.debian.org>

FYI: The status of the janus source package
in Debian's testing distribution has changed.

  Previous version: 1.1.2-4
  Current version:  1.4.1+ds-4

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From noreply at release.debian.org  Mon Jul 13 05:39:06 2026
From: noreply at release.debian.org (Debian testing watch)
Date: Mon, 13 Jul 2026 04:39:06 +0000
Subject: asterisk-flite 3.0-4 MIGRATED to testing
Message-ID: <E1wj8Re-001sgX-2e@respighi.debian.org>

FYI: The status of the asterisk-flite source package
in Debian's testing distribution has changed.

  Previous version: (not in testing)
  Current version:  3.0-4

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From noreply at release.debian.org  Mon Jul 13 05:39:06 2026
From: noreply at release.debian.org (Debian testing watch)
Date: Mon, 13 Jul 2026 04:39:06 +0000
Subject: asterisk 1:22.10.0+dfsg+~cs6.17.60671434-3 MIGRATED to testing
Message-ID: <E1wj8Re-001sgU-2V@respighi.debian.org>

FYI: The status of the asterisk source package
in Debian's testing distribution has changed.

  Previous version: (not in testing)
  Current version:  1:22.10.0+dfsg+~cs6.17.60671434-3

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


From noreply at release.debian.org  Mon Jul 13 05:39:12 2026
From: noreply at release.debian.org (Debian testing autoremoval watch)
Date: Mon, 13 Jul 2026 04:39:12 +0000
Subject: kamailio is marked for autoremoval from testing
Message-ID: <E1wj8Rk-001sr6-2R@respighi.debian.org>

kamailio 6.1.3-2 is marked for autoremoval from testing on 2026-08-17

It (build-)depends on packages with these RC bugs:
1141414: erlang: CVE-2026-53422 CVE-2026-54886 CVE-2026-54887 CVE-2026-54891 CVE-2026-55950 CVE-2026-55952
 https://bugs.debian.org/1141414



For more information on the autoremoval process, including hints to prevent
autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval

This mail is generated by:
https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl

Autoremoval data is generated by:
https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl


From ftpmaster at ftp-master.debian.org  Wed Jul 15 18:48:42 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Wed, 15 Jul 2026 17:48:42 +0000
Subject: Processing of bcg729_1.1.2-1_amd64.changes
Message-ID: <E1wk3is-004E92-0Q@usper.debian.org>

bcg729_1.1.2-1_amd64.changes uploaded successfully to localhost
along with the files:
  bcg729_1.1.2-1.dsc
  bcg729_1.1.2.orig.tar.gz
  bcg729_1.1.2-1.debian.tar.xz
  bcg729_1.1.2-1_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Wed Jul 15 19:05:32 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Wed, 15 Jul 2026 18:05:32 +0000
Subject: bcg729_1.1.2-1_amd64.changes ACCEPTED into unstable
Message-ID: <E1wk3zA-000000099gQ-1Bbw@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 15 Jul 2026 18:20:15 +0200
Source: bcg729
Architecture: source
Version: 1.1.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Guillem Jover <gjover at sipwise.com>
Changes:
 bcg729 (1.1.2-1) unstable; urgency=medium
 .
   * New upstream release.
     - Fix SIGFPE due to a division by zero in bcg729Encoder().
   * Remove patches taken from upstream.
   * Bump Standards-Version to 4.7.4.
   * Update copyright information for new upstream release.
   * Add myself to Uploaders.
   * Remove package prefix from lintian overrides.
   * Wrap and sort control fields.
   * Move license location on Debian systems into a Comment field.
   * Remove unused DEB_HOST_MULTIARCH definition from debian/rules.
   * Remove ?Priority: optional?, which is now the default.
   * Switch to debian/watch format version 5.
Checksums-Sha1:
 88b7cd832fdc9085dc8a9bd22f0da90349a06845 2124 bcg729_1.1.2-1.dsc
 fde2c6e998a8ca978659cc3c3fd0371dd78552bf 120213 bcg729_1.1.2.orig.tar.gz
 09085dfcd27f7ebd9b90f348702ff74dede917ec 4004 bcg729_1.1.2-1.debian.tar.xz
 5960c93333ea9c6994412ad2a3f0556e8cc2cbeb 7119 bcg729_1.1.2-1_amd64.buildinfo
Checksums-Sha256:
 c0669ce32640d98c3d1210b32c7ca6f6fcbd307a495787b2c570e65582110da2 2124 bcg729_1.1.2-1.dsc
 9c22d98c2debc1e37163b8a703f05278ad5d9c03f1c6b373629d8a072092184a 120213 bcg729_1.1.2.orig.tar.gz
 66c730b4cef65c400a9fed1f2932e9c362080bbad534230e542f5eaa17479e9d 4004 bcg729_1.1.2-1.debian.tar.xz
 a5cdbfcf4572120342bcdce03a86c83c8496b2cbcf8eb26f762e20cfb2b3bc53 7119 bcg729_1.1.2-1_amd64.buildinfo
Files:
 b8a9275fac3fb0b319098ad2457ab92a 2124 libs optional bcg729_1.1.2-1.dsc
 ed2fac92ddda78fc299e6498eaf4ee57 120213 libs optional bcg729_1.1.2.orig.tar.gz
 027d8ca2b563563f561d76c45b8b406d 4004 libs optional bcg729_1.1.2-1.debian.tar.xz
 7c7dc1bfbf693b1fd7cf017534198e32 7119 libs optional bcg729_1.1.2-1_amd64.buildinfo


-----BEGIN PGP SIGNATURE-----


RWIHh7te2PNzuCvbfzs=
=W5wC
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260715/951f6550/attachment.sig>

From thegamerscenedaily at substack.com  Thu Jul 16 16:05:53 2026
From: thegamerscenedaily at substack.com (TheGamerScene Daily News)
Date: Thu, 16 Jul 2026 15:05:53 +0000
Subject: TheGamerScene is moving
In-Reply-To: <post-207299693@substack.com>
References: <post-207299693@substack.com>
Message-ID: <20260716150553.3.d354eb0b97a4d064@mg-d1.substack.com>

View this post on the web at https://thegamerscenedaily.substack.com/p/thegamerscene-is-moving

TheGamerScene has a new home ?
Hey,
Quick update: TheGamerScene is officially coming back, but we?re rebuilding it a little differently this time.
Going forward, beehiiv will be the main home for TheGamerScene newsletter. I?ll still keep this Substack around and may post here occasionally, but most new issues will be published through our new newsletter.
The new format is called The Weekly Drop?a fast, conversational gaming briefing built to catch you up without making you live on your timeline.
Each issue will include:
The biggest gaming stories and why they matter
New releases, updates, and events worth watching
Deals, free games, and things worth playing
Gaming culture, community conversations, and quick takes
One focused email each week instead of constant inbox noise
Keep getting TheGamerScene
To continue receiving the main newsletter, join us on beehiiv below:
JOIN THEGAMERSCENE ON BEEHIIV ? [ https://link.sbstck.com/redirect/7f28077b-4387-4fb8-a7f4-de0839a6408f?j=eyJ1IjoiN3A2MWozIn0.YRN2YwNG0HqFxemR3daCLb-UZMXA4tOgW1oRDnkbq00 ]
You will not be moved automatically. Only subscribe through the link above when you?re ready to come over to the new home.
Thank you for following TheGamerScene here and supporting it through every version. I?m excited to bring it back cleaner, sharper, and better than before.
See you in the next drop,
Romello Morris
Founder, TheGamerScene
P.S. Substack is not disappearing completely?it just will not be where every new issue gets published. The full Weekly Drop experience will live on beehiiv.

Unsubscribe https://substack. .pfvJZdG08Y9L3tGpZkyoQuPqlCyXTreOG2nbM-njE4k?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260716/c1595069/attachment-0001.htm>

From thegamerscenedaily at substack.com  Thu Jul 16 16:38:19 2026
From: thegamerscenedaily at substack.com (TheGamerScene Daily News)
Date: Thu, 16 Jul 2026 15:38:19 +0000
Subject: =?UTF-8?q?You=E2=80=99re_unsubscribed.?=
Message-ID: <20260716153819.3.2848a512eba6a3b9.1vs6cdl2@mg-d0.substack.com>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260716/fc33ad57/attachment-0001.htm>

From carnil at debian.org  Fri Jul 17 06:04:08 2026
From: carnil at debian.org (Salvatore Bonaccorso)
Date: Fri, 17 Jul 2026 07:04:08 +0200
Subject: Bug#1142275: coturn: CVE-2026-53449 CVE-2026-53450
Message-ID: <178426464872.478323.15862901537052889174.reportbug@eldamar.lan>

Source: coturn
Version: 4.12.0-1
Severity: grave
Tags: security upstream
Justification: user security hole
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>

Hi,

The following vulnerabilities were published for coturn.

CVE-2026-53449[0]:
| Coturn is a free open source implementation of TURN and STUN Server.
| Prior to 4.13.0, the psd print sessions dump CLI command in coturn
| takes a filename argument and directly passes it to fopen with no
| path validation. An authenticated admin with CLI access can
| overwrite arbitrary files writable by the coturn process because the
| command string is used as-is after stripping the psd prefix and
| leading spaces, allowing truncation and overwrite with session dump
| data. This issue is fixed in version 4.13.0.


CVE-2026-53450[1]:
| Coturn is a free open source implementation of TURN and STUN Server.
| Prior to 4.13.0, coturn rejects loopback peers by default unless
| allow-loopback-peers is enabled, but the default loopback guard can
| be bypassed by using the IPv4-mapped IPv6 peer address
| ::ffff:127.0.0.1 in a TURN XOR-PEER-ADDRESS attribute.
| ioa_addr_is_loopback checks for the literal IPv6 loopback shape
| before IPv4-mapped IPv6 handling, so good_peer_addr does not apply
| the default loopback rejection and an authenticated TURN client can
| expose services bound only to localhost on the coturn host through
| TURN relay traffic. This issue is fixed in version 4.13.0.


If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-53449
    https://www.cve.org/CVERecord?id=CVE-2026-53449
[1] https://security-tracker.debian.org/tracker/CVE-2026-53450
    https://www.cve.org/CVERecord?id=CVE-2026-53450

Regards,
Salvatore


From vip at vip.windturbinefactory.ltd  Fri Jul 17 13:29:21 2026
From: vip at vip.windturbinefactory.ltd (Grace)
Date: Fri, 17 Jul 2026 20:29:21 +0800
Subject: =?UTF-8?B?UmU6IEZvdG9zIGRlbCBwcm9jZXNvIGRlIHByb2R1Y2Npw7NuIGRlbCBhZXJvZ2VuZXJhZG9y?=
 =?UTF-8?B?IGRlIDUga1cgcGFyYSBzdSByZWZlcmVuY2lhLg==?=
Message-ID: <9e546143-d95d-483c-9efa-feb3518d09a5@alibaba.com>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260717/e61a7d69/attachment.htm>

From ftpmaster at ftp-master.debian.org  Fri Jul 17 18:52:05 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 17 Jul 2026 17:52:05 +0000
Subject: Processing of libccrtp_2.0.9-7_source.changes
Message-ID: <E1wkmjF-006C5E-0t@usper.debian.org>

libccrtp_2.0.9-7_source.changes uploaded successfully to localhost
along with the files:
  libccrtp_2.0.9-7.dsc
  libccrtp_2.0.9-7.debian.tar.xz
  libccrtp_2.0.9-7_source.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Fri Jul 17 19:10:17 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Fri, 17 Jul 2026 18:10:17 +0000
Subject: libccrtp_2.0.9-7_source.changes ACCEPTED into unstable
Message-ID: <E1wkn0r-00000000zyN-1Qls@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 17 Jul 2026 19:33:07 +0200
Source: libccrtp
Architecture: source
Version: 2.0.9-7
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Bastian Germann <bage at debian.org>
Closes: 1136974
Changes:
 libccrtp (2.0.9-7) unstable; urgency=medium
 .
   * Team upload
   * Add Conflicts/Replaces for libccrtp-doc (Closes: #1136974)
Checksums-Sha1:
 77a0118d63b1a3af92185acd520aa314e5502698 2100 libccrtp_2.0.9-7.dsc
 7e6b7f30d922a4a6c7694e205efb285bb4bd76ef 13104 libccrtp_2.0.9-7.debian.tar.xz
 e58f60d591d86131cdef285b92bc055e2ef6a76a 5723 libccrtp_2.0.9-7_source.buildinfo
Checksums-Sha256:
 4bbac2ce6a9e161cf32653d6f5f591a1582d4b7fa50995b6a9c73a86a9949b7a 2100 libccrtp_2.0.9-7.dsc
 0a76a1cbf8a0426db1e08dc63d1e6f5a1d653e392121b377a6906c7379d4ed10 13104 libccrtp_2.0.9-7.debian.tar.xz
 9d1440bfdeaa2a1bd6512b5113546bf238f61a455cae80a59fcacda73a2c37f8 5723 libccrtp_2.0.9-7_source.buildinfo
Files:
 cf781d7cca04e2b3ccca4468afce904b 2100 devel optional libccrtp_2.0.9-7.dsc
 6a5b204a33cbd3f43093a8ab4530cd2e 13104 devel optional libccrtp_2.0.9-7.debian.tar.xz
 0cb994cea513c29a3476e5aba6179fb0 5723 devel optional libccrtp_2.0.9-7_source.buildinfo

-----BEGIN PGP SIGNATURE-----


9lxNNU6pbigt4RlKo9yZCgI5RLRfHmQ=
=KgLq
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260717/28a64a20/attachment.sig>

From owner at bugs.debian.org  Fri Jul 17 19:11:02 2026
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Fri, 17 Jul 2026 18:11:02 +0000
Subject: Bug#1136974: marked as done (libccrtp-doc has an undeclared file
 conflict)
References: <E1wkn0r-00000000zyW-1koY@fasolo.debian.org>
 <20260517201916.GA1116768@subdivi.de>
Message-ID: <handler.1136974.D1136974.178431181889412.ackdone@bugs.debian.org>

Your message dated Fri, 17 Jul 2026 18:10:17 +0000
with message-id <E1wkn0r-00000000zyW-1koY at fasolo.debian.org>
and subject line Bug#1136974: fixed in libccrtp 2.0.9-7
has caused the Debian Bug report #1136974,
regarding libccrtp-doc has an undeclared file conflict
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
1136974: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1136974
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Helmut Grohne <helmut at subdivi.de>
Subject: libccrtp-doc has an undeclared file conflict
Date: Sun, 17 May 2026 22:19:16 +0200
Size: 2992
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260717/15a8c016/attachment.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Debian FTP Masters <ftpmaster at ftp-master.debian.org>
Subject: Bug#1136974: fixed in libccrtp 2.0.9-7
Date: Fri, 17 Jul 2026 18:10:17 +0000
Size: 6394
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260717/15a8c016/attachment-0001.eml>

From ftpmaster at ftp-master.debian.org  Mon Jul 20 13:23:02 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Mon, 20 Jul 2026 12:23:02 +0000
Subject: Processing of coturn_4.14.0-1_source.changes
Message-ID: <E1wln1S-001mX9-1S@usper.debian.org>

coturn_4.14.0-1_source.changes uploaded successfully to localhost
along with the files:
  coturn_4.14.0-1.dsc
  coturn_4.14.0.orig.tar.xz
  coturn_4.14.0-1.debian.tar.xz
  coturn_4.14.0-1_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Mon Jul 20 13:52:31 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Mon, 20 Jul 2026 12:52:31 +0000
Subject: coturn_4.14.0-1_source.changes ACCEPTED into unstable
Message-ID: <E1wlnTz-0000000DZkz-0tAp@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 20 Jul 2026 14:19:22 +0200
Source: coturn
Architecture: source
Version: 4.14.0-1
Distribution: unstable
Urgency: high
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Christoph Martin <chrism at debian.org>
Closes: 1142275
Changes:
 coturn (4.14.0-1) unstable; urgency=high
 .
   * [67f67a7] update gbp.conf
   * [288b71c] New upstream version 4.14.0
   * fixes CVE-2026-53449 CVE-2026-53450 (closes: #1142275)
Checksums-Sha1:
 f44552851be68ad645079161a5e6290dd90d5aff 2256 coturn_4.14.0-1.dsc
 dea2dbdd3c7f6c2c55da5b135f7c6e2beb9f5be0 497372 coturn_4.14.0.orig.tar.xz
 3eb90b205670ec32a317a633ea1a7341d4c90ffd 14640 coturn_4.14.0-1.debian.tar.xz
 ec8ab0a8847615d223b8004bb9a102be5c52e316 7495 coturn_4.14.0-1_amd64.buildinfo
Checksums-Sha256:
 2c3d13151263e2fdcece508856081f88d0583595201158f11f4a77accec01c24 2256 coturn_4.14.0-1.dsc
 1093aa0ef442fffba968bc1c4759610e8887d725c64256fbe374e117da21ca4f 497372 coturn_4.14.0.orig.tar.xz
 f421c04cc7cea7087c46247a003d188fdaa4f2e405f4fcf3f9f663d1463d68be 14640 coturn_4.14.0-1.debian.tar.xz
 912f54d364973e0c0ea81e4b0f717a0693163221e1aaccb6a18fc6e71f00716d 7495 coturn_4.14.0-1_amd64.buildinfo
Files:
 abcabc47251f6a4cfdee110dc750ebdc 2256 net optional coturn_4.14.0-1.dsc
 130fbbe4f09d41b1d83ddd260feced58 497372 net optional coturn_4.14.0.orig.tar.xz
 b9c6300fa2a0b1c39ff81a7ca1773ba9 14640 net optional coturn_4.14.0-1.debian.tar.xz
 72ec9f0e38c112d2e0c81b23eb8e3f9b 7495 net optional coturn_4.14.0-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----


LGFpTsVogU+k7/Wjs+2df2ePyoQ9m3UAES1K2q7295w364A1wyc=
=BO+t
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260720/a176de7e/attachment.sig>

From owner at bugs.debian.org  Mon Jul 20 13:55:03 2026
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Mon, 20 Jul 2026 12:55:03 +0000
Subject: Bug#1142275: marked as done (coturn: CVE-2026-53449 CVE-2026-53450)
References: <E1wlnTz-0000000DZl8-1DCT@fasolo.debian.org>
 <178426464872.478323.15862901537052889174.reportbug@eldamar.lan>
Message-ID: <handler.1142275.D1142275.17845519541148190.ackdone@bugs.debian.org>

Your message dated Mon, 20 Jul 2026 12:52:31 +0000
with message-id <E1wlnTz-0000000DZl8-1DCT at fasolo.debian.org>
and subject line Bug#1142275: fixed in coturn 4.14.0-1
has caused the Debian Bug report #1142275,
regarding coturn: CVE-2026-53449 CVE-2026-53450
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
1142275: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1142275
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Salvatore Bonaccorso <carnil at debian.org>
Subject: coturn: CVE-2026-53449 CVE-2026-53450
Date: Fri, 17 Jul 2026 07:04:08 +0200
Size: 3186
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260720/7ee1dff4/attachment.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Debian FTP Masters <ftpmaster at ftp-master.debian.org>
Subject: Bug#1142275: fixed in coturn 4.14.0-1
Date: Mon, 20 Jul 2026 12:52:31 +0000
Size: 6875
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260720/7ee1dff4/attachment-0001.eml>

From martin.rampersad at emkal.ca  Mon Jul 20 15:29:21 2026
From: martin.rampersad at emkal.ca (Martin Rampersad)
Date: Mon, 20 Jul 2026 14:29:21 +0000
Subject: asterisk 22.10.1 update
Message-ID: <28555f581971e9b9678dd232898a47eb0ed225ec.camel@emkal.ca>

Hello,

I followed Jonas' direction (from 2025-01-12) for updating asterisk and
also tried to fix a lintian error. Could a maintainer review my work
and let me know if I made any errors with these commits? Maybe if it
looks good, upload the new version to unstable?

Thanks for your time,

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 870 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260720/3f5d911b/attachment-0001.sig>

From samuel.p at mail.yoogo.com  Mon Jul 20 20:02:47 2026
From: samuel.p at mail.yoogo.com (Samuel Price | Yoogo)
Date: Mon, 20 Jul 2026 19:02:47 +0000
Subject: A Clearer Professional Discovery Experience
Message-ID: <0101019f80e8cb4b-edb139c6-7fec-4dea-9f1e-1b867d253007-000000@us-west-2.amazonses.com>

Hi Pkg,

Finding the right professionals, businesses, services, and opportunities online can be difficult.

There are many profiles and platforms competing for attention, but not always a clear path to the right connection.

That is why we are inviting you to Yoogo, a new business social marketplace designed to make professional discovery clearer.

By creating a profile on Yoogo, you can show your work, services, products, projects, links, topics, and opportunities in a way that helps others understand how to engage with you.

www.yoogo.com

Join early and help shape a business social marketplace built for discovery and real professional relationships.

Best,
Samuel

Yoogo, Inc.
2514 Whitney Ave. #185892
Hamden, CT 06518, USA

Privacy notice: Yoogo is operated by Yoogo, Inc. We contacted you using limited publicly available business or professional information, such as your name, business email address, role, company, website, industry, or similar business-related information, to introduce Yoogo and related business profile opportunities. Our lawful basis is legitimate interests.

You may unsubscribe, object, or request deletion at any time here: https://yoogo.com/u?token=MXw3MHwyMjYyNjUwM3xNdFdKXzUtMnI5My1EclFTaWMtX3NrUURqSlVNWnZGYS0ya3NxS3JSMWRnfDE4MTU3Njg4NTE.dkyEZnosolYWQC52MVCEZRzUHmm_LUAEEvsUVkVcEtY. You can read our full privacy notice here: https://yoogo.com/privacy.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260720/0047b0e1/attachment.htm>

From jonas at jones.dk  Mon Jul 20 22:52:11 2026
From: jonas at jones.dk (Jonas Smedegaard)
Date: Mon, 20 Jul 2026 23:52:11 +0200
Subject: asterisk 22.10.1 update
In-Reply-To: <28555f581971e9b9678dd232898a47eb0ed225ec.camel@emkal.ca>
References: <28555f581971e9b9678dd232898a47eb0ed225ec.camel@emkal.ca>
Message-ID: <178458433187.489251.12706653980546979303@cairon.jones.dk>

Hi Martin (and others),

Quoting Martin Rampersad via Pkg-voip-maintainers (2026-07-20 16:29:21)
> I followed Jonas' direction (from 2025-01-12) for updating asterisk and
> also tried to fix a lintian error. Could a maintainer review my work
> and let me know if I made any errors with these commits? Maybe if it
> looks good, upload the new version to unstable?

Looks good. I have uploaded to Debian.

Please, in future, leave the changelog file targeted UNRELEASED and do
not git-tag the release - that is done as the very last step by the
person that uploads to Debian.

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


From ftpmaster at ftp-master.debian.org  Mon Jul 20 22:57:22 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Mon, 20 Jul 2026 21:57:22 +0000
Subject: Processing of asterisk_22.10.1+dfsg+~cs6.17.60671434-1_source.changes
Message-ID: <E1wlvzG-002CEm-2i@usper.debian.org>

asterisk_22.10.1+dfsg+~cs6.17.60671434-1_source.changes uploaded successfully to localhost
along with the files:
  asterisk_22.10.1+dfsg+~cs6.17.60671434-1.dsc
  asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xamr.tar.xz
  asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xmp3.tar.xz
  asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xopus.tar.xz
  asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xpjproject.tar.xz
  asterisk_22.10.1+dfsg+~cs6.17.60671434.orig.tar.xz
  asterisk_22.10.1+dfsg+~cs6.17.60671434-1.debian.tar.xz
  asterisk_22.10.1+dfsg+~cs6.17.60671434-1_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Mon Jul 20 23:04:33 2026
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Mon, 20 Jul 2026 22:04:33 +0000
Subject: asterisk_22.10.1+dfsg+~cs6.17.60671434-1_source.changes ACCEPTED into
 unstable
Message-ID: <E1wlw6D-0000000FSS5-1cor@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 20 Jul 2026 23:35:32 +0200
Source: asterisk
Architecture: source
Version: 1:22.10.1+dfsg+~cs6.17.60671434-1
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers at lists.alioth.debian.org>
Changed-By: Jonas Smedegaard <dr at jones.dk>
Changes:
 asterisk (1:22.10.1+dfsg+~cs6.17.60671434-1) unstable; urgency=medium
 .
   [ upstream ]
   * new release
     GHSA-3g56-cgrh-95p5 GHSA-3rhj-hhw7-m6fw GHSA-4pgv-j3mr-3rcp
     GHSA-589g-qgf8-m6mx GHSA-746q-794h-cc7f GHSA-8jhw-m2hg-vp3h
     GHSA-8jw3-ccr9-xrmf GHSA-g8q2-p36q-94f6 GHSA-h5hv-jmgj-92q2
     GHSA-j2mm-57pq-jh94 GHSA-mxgm-8c6f-5p8f GHSA-ph27-3m5q-mj5m
     GHSA-q9fr-m7g8-6ph5 GHSA-qf8j-jp7h-c5hx GHSA-r6c2-hwc2-j4mp
     GHSA-vfhr-r9x9-c687 GHSA-vrfp-mg3q-3959 GHSA-wcvv-g26m-wx5c
     GHSA-x348-j6c9-77f3 GHSA-xgj6-2gc5-5x9c
 .
   [ Martin Rampersad ]
   * update lintian overrides
Checksums-Sha1:
 b07b7323003b282ffb2d4fff7eabf6a0087cf226 5389 asterisk_22.10.1+dfsg+~cs6.17.60671434-1.dsc
 fab723ada342f11d062f1d17e0cbbe05ce67b3b8 11276 asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xamr.tar.xz
 3d0a0b6cd89a39935fd096e2ef6e79ba8302c8eb 22024 asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xmp3.tar.xz
 793b7a53dfb62a56e0ac144016830a9b52e9fe75 22556 asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xopus.tar.xz
 9cbc54943839c75a8d626e84d3562074bc766222 6775552 asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xpjproject.tar.xz
 f49f38d42625c3e663e4cd1f3663fcff447e80a5 6218652 asterisk_22.10.1+dfsg+~cs6.17.60671434.orig.tar.xz
 a74577987a86777ef9dad7f7a642ba0ba03c775f 126480 asterisk_22.10.1+dfsg+~cs6.17.60671434-1.debian.tar.xz
 97c2ee951c3020f0d6ae5239051a781405986b62 25523 asterisk_22.10.1+dfsg+~cs6.17.60671434-1_amd64.buildinfo
Checksums-Sha256:
 8799652c4e2fc4bb4d6610b0f7144a9945bcff847d0185fb10fca20de0533eb2 5389 asterisk_22.10.1+dfsg+~cs6.17.60671434-1.dsc
 33cdfabac457e18580c63bb4707e16a991ea3d772229d0dd37e134f494d8d70f 11276 asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xamr.tar.xz
 a5316a4cf442be734e050d6fcd28ee23d7057d0cc546413aa75872b84e979f21 22024 asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xmp3.tar.xz
 6bc226a2fd01f10fb6155e23be637ed212fea11be0bab2b6c16f8e47dcbc3e9b 22556 asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xopus.tar.xz
 6860c2f7604b4eee75f38151a9ef69774eb3f0c5286fc1d14bc1db2dc5a9e8aa 6775552 asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xpjproject.tar.xz
 03e7a8adeb44c82ed7a3673df6eb1b97f5c0dacb05aeab200250655870d3f06b 6218652 asterisk_22.10.1+dfsg+~cs6.17.60671434.orig.tar.xz
 3ebba3fd590fe059b73836b811f237eadb2e54ceeed07d56b0bbf4db659c5ddd 126480 asterisk_22.10.1+dfsg+~cs6.17.60671434-1.debian.tar.xz
 bf7ccdda8b61f9da1b47334ec574a7b2ef68a8d1714a6745565c619985af853a 25523 asterisk_22.10.1+dfsg+~cs6.17.60671434-1_amd64.buildinfo
Files:
 2b66f45836700aadc0c16abfaf8e515e 5389 comm optional asterisk_22.10.1+dfsg+~cs6.17.60671434-1.dsc
 fdccb2ab4cc1291b171ab4bff308252b 11276 comm optional asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xamr.tar.xz
 5bdeadbbd8e5b6cc2f65a846e6859b7e 22024 comm optional asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xmp3.tar.xz
 9d9968f788e7837d3f4a23f4a3ceb830 22556 comm optional asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xopus.tar.xz
 139b4b3c4c2e55d8071f8b010392803e 6775552 comm optional asterisk_22.10.1+dfsg+~cs6.17.60671434.orig-Xpjproject.tar.xz
 71a3d802b03da7766241256887f5b5e1 6218652 comm optional asterisk_22.10.1+dfsg+~cs6.17.60671434.orig.tar.xz
 5d712abaf541dec0156b933429dac8f1 126480 comm optional asterisk_22.10.1+dfsg+~cs6.17.60671434-1.debian.tar.xz
 275462227568ac8dc67cd4244def7a2c 25523 comm optional asterisk_22.10.1+dfsg+~cs6.17.60671434-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----


8a61
=xGJt
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-voip-maintainers/attachments/20260720/f9f3ba35/attachment.sig>

From noreply at release.debian.org  Tue Jul 21 05:39:08 2026
From: noreply at release.debian.org (Debian testing watch)
Date: Tue, 21 Jul 2026 04:39:08 +0000
Subject: bcg729 1.1.2-1 MIGRATED to testing
Message-ID: <E1wm2G4-00000000Uye-0GuG@respighi.debian.org>

FYI: The status of the bcg729 source package
in Debian's testing distribution has changed.

  Previous version: 1.1.1-4
  Current version:  1.1.2-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.


