Re: should the Release Notes be updated concerning trixie security

--h5DHTNogSLOmawQ1
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Jul 13, 2025 at 01:17:36AM +0200, Santiago Ruano Rinc=C3=B3n wrote:
> (CCing the actual security team address - [email protected])

being lazy I'm replying to this mail though this is actual an reply to
=20
> El 12/07/25 a las 22:04, Paul Gevers escribi=C3=B3:
> > The text about golang and rustc and chromium is still from the bookworm
> > notes. I'm not aware that anything changed (although I recall Santiago
> > started a conversation about it).

there's at least one change: sqv is security supported (because apt uses it)
and thanks to Santiago there's a change in debian-security-support.git=20
making this clear. (=3Dit wont complain it sqv is installed despite matching
the rust pattern.)

This change will land in sid ASAP, i'm just giving Santiago some time to
also add an autopkgtest to d-s-s.


--=20
cheers,
	Holger

 =E2=A2=80=E2=A3=B4=E2=A0=BE=E2=A0=BB=E2=A2=B6=E2=A3=A6=E2=A0=80
 =E2=A3=BE=E2=A0=81=E2=A2=A0=E2=A0=92=E2=A0=80=E2=A3=BF=E2=A1=81  holger@(d=
ebian|reproducible-builds|layer-acht).org
 =E2=A2=BF=E2=A1=84=E2=A0=98=E2=A0=B7=E2=A0=9A=E2=A0=8B=E2=A0=80  OpenPGP: =
B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 =E2=A0=88=E2=A0=B3=E2=A3=84

Here in Germany, dozens have died in floods, hundreds are missing, thousands
have lost their homes. It's devastating. This is the climate crisis unravel=
ling
in one of the richest parts of the world =E2=80=94 which for a long time th=
ought it
would be =E2=80=9Csafe=E2=80=9D. No place is =E2=80=9Csafe=E2=80=9D any mor=
e. (@luisamneubauer, 20210716)

--h5DHTNogSLOmawQ1
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmhzbC8ACgkQCRq4Vgaa
qhxuxg//ftZ9HVziKznf/WhDKPBFF08you1DW/8WYYEvhuaVp0mNrBEjfkW5z6Di
S3z26Oe266DUP3ON1oWrF7xI8nnJCRDWZ5hJtKVanKEeHyY/xT0etKMGrWCWumzZ
CGDRfV+GGrYvTLpQx0GByDsElkohkNYVEFuuSs8liAfgSUJaGKZjFGIrpgZP3pej
x/JwTo4F9l2EBIvXtCfU275lQc84wmVgAxPpXvgPRqHlmMd6A+g7BNbqRVYrS4C6
9H2nOgvYaKFjzin72DYNs/9Q0Isq7aClDMVPOoKc5JHeYDofknHvpwGhoCH2r9o9
9esoNVq0h7SS5C2MRBbguVZwPGlu7sXsBah0oSqgYdly0HurGhx0iVrwPfCda0+K
tWda8ReKWM2zxfrmc3k/edzia58+zTHO8vqOz0LM60e5Ok3lOm9rytLOFFzR+ntR
HZBLOz2g1py6HL8oYUE4LUolPDSqJ2m32X6+iAQUKbK/hqPMydZ/2C/5tssbga8d
oXm8BIW73cdBl5DL2NhPunnQZeQvjZQ+T7I9gcKfj9f9bRLnv1WurFKRiClTgOZc
I/PvyDB1ZyeKLlWUZ2m5Xt/QZVn4bUgQyotN211fwKjL2eBfh8hla8SzM365/9se
dQxRTDLsSuzrGVjJHKXisTDVH5VvJt76YWa9LRMgRFZx9PkWGdo=
=AAKk
-----END PGP SIGNATURE-----

--h5DHTNogSLOmawQ1--