Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.maint.x > #19300

Bug#1128905: libx11-6: 19-year-old NEWS.Debian file added

Cross-posted to 2 groups.

Show all headers | View raw

Hi,

On Tue, Feb 24, 2026 at 08:12:57PM +0200, Timo Aaltonen wrote:
> Timo Aaltonen kirjoitti 24.2.2026 klo 20.02:
> > Vincent Lefevre kirjoitti 24.2.2026 klo 19.53:
> > > On 2026-02-24 19:31:29 +0200, Timo Aaltonen wrote:
> > > > What do you mean by "added"? It hasn't been touched since 2008.
> > > 
> > > No, it has just been added into "/usr/share/doc/libx11-6".
> > > 
> > > On a machine with libx11-6 2:1.8.12-1, I have:
> > > 
> > > qaa% ls -l /usr/share/doc/libx11-6
> > > total 284
> > > -rw-r--r-- 1 root root   2104 2025-03-21 07:30:50 changelog.Debian.gz
> > > -rw-r--r-- 1 root root 235772 2025-03-09 00:53:24 changelog.gz
> > > -rw-r--r-- 1 root root  47102 2025-03-21 07:30:50 copyright
> > > 
> > > On a machine with libx11-6 2:1.8.13-1, I have:
> > > 
> > > disset% ls -l /usr/share/doc/libx11-6
> > > total 292
> > > -rw-r--r-- 1 root root    963 2026-02-24 08:22:14 NEWS.Debian.gz
> > > -rw-r--r-- 1 root root   2134 2026-02-24 08:22:14 changelog.Debian.gz
> > > -rw-r--r-- 1 root root 238637 2026-02-07 23:26:57 changelog.gz
> > > -rw-r--r-- 1 root root  47102 2026-02-24 08:22:14 copyright
> > > 
> > > See the difference?
> > > 
> > > > If you saw it only now, then it must be due to something else.
> > > 
> > > No, it is this file:
> > > 
> > > disset% gunzip -c /usr/share/doc/libx11-6/NEWS.Debian.gz
> > > libx11 (2:1.1-1) experimental; urgency=low
> > > [...]
> > >   -- Josh Triplett <josh@freedesktop.org>  Fri, 24 Nov 2006 17:36:55
> > > -0800
> > > 
> > 
> > still not due to something changing in the package, which you can see by
> > doing a debdiff
> 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128414

Should this bugreport be reassigned and merged into #1128414? 

It was nice beeing reminded of for instance

tor (0.2.0.26-rc-1) experimental; urgency=critical

  * weak cryptographic keys

    It has been discovered that the random number generator in Debian's
    openssl package is predictable.  This is caused by an incorrect
    Debian-specific change to the openssl package (CVE-2008-0166).  As a
    result, cryptographic key material may be guessable.

    See Debian Security Advisory number 1571 (DSA-1571) for more information:
    http://lists.debian.org/debian-security-announce/2008/msg00152.html

    If you run a Tor server using this package please see
    /var/lib/tor/keys/moved-away-by-tor-package/README.REALLY

 -- Peter Palfrader <weasel@debian.org>  Tue, 13 May 2008 12:49:05 +0200

 in the tor package ;-)

 Regards,
 Salvatore

Back to linux.debian.maint.x | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Bug#1128905: libx11-6: 19-year-old NEWS.Debian file added Vincent Lefevre <vincent@vinc17.net> - 2026-02-24 12:30 +0100
  Bug#1128905: libx11-6: 19-year-old NEWS.Debian file added Vincent Lefevre <vincent@vinc17.net> - 2026-02-24 19:00 +0100
    Bug#1128905: libx11-6: 19-year-old NEWS.Debian file added Timo Aaltonen <tjaalton@debian.org> - 2026-02-24 19:10 +0100
      Bug#1128905: libx11-6: 19-year-old NEWS.Debian file added Timo Aaltonen <tjaalton@debian.org> - 2026-02-24 19:20 +0100
        Bug#1128905: libx11-6: 19-year-old NEWS.Debian file added Salvatore Bonaccorso <carnil@debian.org> - 2026-02-24 20:20 +0100
          Bug#1128905: libx11-6: 19-year-old NEWS.Debian file added Vincent Lefevre <vincent@vinc17.net> - 2026-02-24 20:40 +0100
    Bug#1128905: libx11-6: 19-year-old NEWS.Debian file added Vincent Lefevre <vincent@vinc17.net> - 2026-02-24 19:20 +0100

csiph-web