On 26/09/2025 23:38, Adrian Bunk wrote:
mydumper: No action after receiving instructions from SRM in May (#1106790).
FWIW, I have fixed CVE-2025-30224 in the bookworm and the sid branch in May, and also pushed the changes to the packaging repo. I have uploaded +deb12u2 back then and it's been waiting in bookworm-new since. Because the package in sid has bitrot and FTBFS, it can't be fixed without also bumping the upstream release and doing major packaging work.
Since the maintainer of mydumper is also inactive on all the other packages they own, I have notified the MIA team in May and the ball is in their hands. mydumper is not in trixie or forky due to RC bugs. I've now filed a RoQA to remove it in unstable, and also pinged the bug so the upload gets sent to b-p-u. As such there's nothing left to do on our side.
Greetings, Lee