maintainer built binary package in stable release, still (Re: Bug#1054401: bookworm-pu: package nagios-plugins-contrib/42.20230308+deb12u1)

[Holger Levsen]

On Thu, Dec 07, 2023 at 12:40:35PM +0100, Paul Gevers wrote:
> On 07-12-2023 12:20, Adrian Bunk wrote:
> > On Thu, Dec 07, 2023 at 11:18:42AM +0100, Paul Gevers wrote:
> > > I hope that in several hours,
> > > https://release.debian.org/britney/excuses_s-p-u.html will have the answer.

awesome, thank you very much!

> > it should find packages like jtreg6 that are scheduled for the next
> > point release, but it won't find packages like gmp that went into
> > bullseye 2 years ago.
> Ack. Indeed it spots:
> cacti, fastdds, freetype, grub-efi-amd64-signed, grub-efi-arm64-signed,
> grub-efi-ia32-signed, jtreg6, llvm-toolchain-16, node-babel7,
> node-browserify-sign and slurm-wlm. A bunch of them have arch:all binaries.

eeks.
 
> > Stopping further regression on this is good, but for the ~ February
> > point releases we have to discuss whether binNMUs+NMUs for packages that
> > slipped through in the past should be done for bookworm (and bullseye).
> I would agree with this, but I'm not an SRM. A bunch of these are security
> uploads. We need to discuss this with the security team too (in CC now).

I also agree with this, though I'm also neither an SRM nor a security team
member. :)


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

Because things are the way they are, things will not stay the way they are.
(Bertolt Brecht)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-builds/attachments/20231207/afc572cf/attachment.sig>