Path: csiph.com!weretis.net!feeder8.news.weretis.net!fu-berlin.de!bofh.it!news.nic.it!robomod From: Andreas Tille Newsgroups: linux.debian.bugs.dist,linux.debian.maint.python Subject: Bug#1064979: O: python-cryptography -- Python library exposing cryptographic recipes and primitives (documentation) Date: Thu, 29 Feb 2024 12:10:02 +0100 Message-ID: References: X-Mailbox-Line: From debian-bugs-dist-request@lists.debian.org Thu Feb 29 11:09:21 2024 Old-Return-Path: X-Spam-Flag: NO X-Spam-Score: 0.439 Reply-To: Andreas Tille , 1064979@bugs.debian.org Resent-To: debian-bugs-dist@lists.debian.org Resent-Cc: wnpp@debian.org X-Debian-Pr-Message: followup 1064979 X-Debian-Pr-Package: wnpp MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Debian-Message: from BTS X-Mailing-List: archive/latest/1824760 List-ID: List-URL: Approved: robomod@news.nic.it Lines: 31 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: =?UTF-8?Q?J=C3=A9r=C3=A9my?= Lal , Nicolas Dandrimont , Stefano Rivera X-Original-Date: Thu, 29 Feb 2024 12:06:17 +0100 X-Original-Message-ID: X-Original-References: <170914162030.1066248.8025114011595811887.reportbug@zion.matrix.int> Xref: csiph.com linux.debian.bugs.dist:1188387 linux.debian.maint.python:15525 Hi, as per bug #1064979 python-cryptography was orphaned. Actually the process of orphaninig is defined differently[1] by setting QA team as maintainer. In this case DPT remains maintainer but there is no Uploader specified any more. I personally will not add my ID as Uploader. I have added those team members who did uploads in the last year in CC. I tried to do some bug squashing anyway. Since the latest version was requested in bug #1063771 and this new version also closes #1064778 (CVE-2024-26130) (the other CVE-bug should have been closed in previous upload) I decided to inject latest upstream, adapted the patches and pushed to Git. Unfortunately the package does not build as you can verify in Salsa CI[1]. I admit I have no clue how to fix this but I hope someone can take over from here. I guess uploading to experimental first and see how it plays nicely with its lots of rdepends makes sense here. Kind regards Andreas. PS: I would have expected that to orphan a team maintained package the team mailing list would have been CCed in the bug report. [1] https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#orphaning-a-package [2] https://salsa.debian.org/python-team/packages/python-cryptography/-/jobs/5381997 -- http://fam-tille.de