XPost: linux.debian.maint.x   
   From: carnil@debian.org   
      
   Hi,   
      
   On Tue, Feb 24, 2026 at 08:12:57PM +0200, Timo Aaltonen wrote:   
   > Timo Aaltonen kirjoitti 24.2.2026 klo 20.02:   
   > > Vincent Lefevre kirjoitti 24.2.2026 klo 19.53:   
   > > > On 2026-02-24 19:31:29 +0200, Timo Aaltonen wrote:   
   > > > > What do you mean by "added"? It hasn't been touched since 2008.   
   > > >   
   > > > No, it has just been added into "/usr/share/doc/libx11-6".   
   > > >   
   > > > On a machine with libx11-6 2:1.8.12-1, I have:   
   > > >   
   > > > qaa% ls -l /usr/share/doc/libx11-6   
   > > > total 284   
   > > > -rw-r--r-- 1 root root   2104 2025-03-21 07:30:50 changelog.Debian.gz   
   > > > -rw-r--r-- 1 root root 235772 2025-03-09 00:53:24 changelog.gz   
   > > > -rw-r--r-- 1 root root  47102 2025-03-21 07:30:50 copyright   
   > > >   
   > > > On a machine with libx11-6 2:1.8.13-1, I have:   
   > > >   
   > > > disset% ls -l /usr/share/doc/libx11-6   
   > > > total 292   
   > > > -rw-r--r-- 1 root root    963 2026-02-24 08:22:14 NEWS.Debian.gz   
   > > > -rw-r--r-- 1 root root   2134 2026-02-24 08:22:14 changelog.Debian.gz   
   > > > -rw-r--r-- 1 root root 238637 2026-02-07 23:26:57 changelog.gz   
   > > > -rw-r--r-- 1 root root  47102 2026-02-24 08:22:14 copyright   
   > > >   
   > > > See the difference?   
   > > >   
   > > > > If you saw it only now, then it must be due to something else.   
   > > >   
   > > > No, it is this file:   
   > > >   
   > > > disset% gunzip -c /usr/share/doc/libx11-6/NEWS.Debian.gz   
   > > > libx11 (2:1.1-1) experimental; urgency=low   
   > > > [...]   
   > > >   -- Josh Triplett   Fri, 24 Nov 2006 17:36:55   
   > > > -0800   
   > > >   
   > >   
   > > still not due to something changing in the package, which you can see by   
   > > doing a debdiff   
   >   
   > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128414   
      
   Should this bugreport be reassigned and merged into #1128414?   
      
   It was nice beeing reminded of for instance   
      
   tor (0.2.0.26-rc-1) experimental; urgency=critical   
      
     * weak cryptographic keys   
      
       It has been discovered that the random number generator in Debian's   
       openssl package is predictable.  This is caused by an incorrect   
       Debian-specific change to the openssl package (CVE-2008-0166).  As a   
       result, cryptographic key material may be guessable.   
      
       See Debian Security Advisory number 1571 (DSA-1571) for more information:   
       http://lists.debian.org/debian-security-announce/2008/msg00152.html   
      
       If you run a Tor server using this package please see   
       /var/lib/tor/keys/moved-away-by-tor-package/README.REALLY   
      
    -- Peter Palfrader   Tue, 13 May 2008 12:49:05 +0200   
      
    in the tor package ;-)   
      
    Regards,   
    Salvatore   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)