This month I accepted 342 and rejected 57 packages. The overall number of packages that got accepted was 366.
Lately I was asked: Is it ftpmaster’s opinion and policy that there is no difference in NEW queue review process between bin and src?
This is a yes/no-question and in this generality the answer is clearly: Every package in NEW needs a full review.
Of course there are circumstances with exceptions. For example after an upload of -1, which would get a full review, the upload of -2 afterwards, introducing a new binary package, would get a much faster review. In this case it would make sense to ping on IRC and draw attention to this. Nevertheless the evaluation of a “light review” might differ between the maintainer and the person doing the review.
This was my ninety-first month that I did some work for the Debian LTS initiative, started by Raphael Hertzog at Freexian.
This month my all in all workload has been 40h. During that time I did LTS and normal security uploads of:
- [DLA 2882-1] sphinxsearch security update for one CVE
- [DLA 2890-1] libspf2 security update for two CVEs
- [DLA 2897-1] apr security update for one CVE
- [DLA 2900-1] lrzsz security update for one CVE
- [DLA 2901-1] libxfont security update for one CVE
- [DLA 2902-1] graphicsmagick security update for one CVE
- [#1004049] buster-pu: package zziplib/0.13.62-3.2+deb10u1
- [#1004050] bullseye-pu: package zziplib/0.13.62-3.3+deb11u1
- [#1004055] buster-pu: package raptor2/2.0.14-1.1~deb10u2
I also started to work on security support for golang packages. Though this sounds like an easy task, the devel is in the details.
As CVEs need to be fixed in unstable first, at the moment it looks like this is the most time consuming task. I will report later on my journey to fix open CVEs in golang-github-russellhaering-goxmldsig
Further I worked on packages in NEW on security-master and injected missing sources.
Last but not least I did some days of frontdesk duties and attended an LTS meeting on IRC.
This month was the forty-third ELTS month.
During my allocated time I uploaded:
- ELA-544-1 for libspf2
- ELA-549-1 for apr
- ELA-552-1 for lrzsz
- ELA-553-1 for libxfont
Further I worked on an update for apache2
Last but not least I did some days of frontdesk duties.
I was finally able to upload a new version of hplip and Ubuntu is now able to build new snaps for their next release.
Altogether I uploaded new upstream versions or improved packaging of:
Now the dashboard looks rather good and my next task for February is an update of cups.
As there was a release of version 1.9.4 of INDI and indi-3rdparty, I also uploaded the new version of all INDI drivers and releated libs from indi-3rdparty.
This month I uploaded lots of new upstream releases of golang packages.