Bug#1042661: marked as done (python-djvulibre: FTBFS with Sphinx 7.1, docutils 0.20: error: invalid command 'build_sphinx')

2024-01-26 Thread Debian Bug Tracking System
Your message dated Fri, 26 Jan 2024 12:20:55 +
with message-id 
and subject line Bug#1042661: fixed in python-djvulibre 0.9.0-1
has caused the Debian Bug report #1042661,
regarding python-djvulibre: FTBFS with Sphinx 7.1, docutils 0.20: error: 
invalid command 'build_sphinx'
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1042661: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1042661
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: python-djvulibre
Version: 0.8.8-3
Severity: important
Tags: ftbfs
User: python-modules-t...@lists.alioth.debian.org
Usertags: sphinx7.1

Hi,

python-djvulibre fails to build with Sphinx 7.1 and docutils 0.20, both of which
are currently available in experimental.

Relevant part (hopefully):
> x86_64-linux-gnu-gcc -shared -Wl,-O1 -Wl,-Bsymbolic-functions -g -fwrapv -O2 
> -Wl,-z,relro -Wl,-z,now -g -O2 -ffile-prefix-map=/<>=. 
> -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time 
> -D_FORTIFY_SOURCE=2 
> build/temp.linux-x86_64-3.11/build/temp.linux-x86_64-3.11/src/sexpr.o 
> -ldjvulibre -o /<>/djvu/sexpr.cpython-311-x86_64-linux-gnu.so 
> -pthread
> http_proxy='127.0.0.1:9' python3 setup.py build_sphinx
> /<>/setup.py:39: DeprecationWarning: The distutils package is 
> deprecated and slated for removal in Python 3.12. Use setuptools or check PEP 
> 632 for potential alternatives
>   import distutils.core
> usage: setup.py [global_opts] cmd1 [cmd1_opts] [cmd2 [cmd2_opts] ...]
>or: setup.py --help [cmd1 cmd2 ...]
>or: setup.py --help-commands
>or: setup.py cmd --help
> 
> error: invalid command 'build_sphinx'
> make[1]: *** [debian/rules:25: override_dh_installdocs] Error 1


The full build log is available from:
http://qa-logs.debian.net/2023/07/30/exp/python-djvulibre_0.8.8-3_unstable_sphinx-exp.log

Please see [1] for Sphinx changelog and [2] for Docutils changelog.

Also see [3] for the list of deprecated/removed APIs in Sphinx and possible
alternatives to them.

Some notable changes in Sphinx 6 and Sphinx 7:

- Sphinx no longer includes jquery.js and underscore.js by default.
  Please use python3-sphinxcontrib.jquery package if you are using a custom
  template and it still needs jquery.

- The setup.py build_sphinx command was removed. Please instead call
  sphinx-build or "python3 -m sphinx" directly.

- For packages using the extlinks extension, the caption should contain
  exactly one "%s" placeholder (if caption is not None).

In case you have questions, please Cc sph...@packages.debian.org on reply.

[1]: https://www.sphinx-doc.org/en/master/changes.html
[2]: 
https://repo.or.cz/docutils.git/blob/refs/tags/docutils-0.20.1:/RELEASE-NOTES.txt
[3]: 
https://www.sphinx-doc.org/en/master/extdev/deprecated.html#dev-deprecated-apis

All bugs filed during this archive rebuild are listed at:
https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=sphinx7.1;users=python-modules-t...@lists.alioth.debian.org
or:
https://udd.debian.org/bugs/?release=na&merged=ign&fnewerval=7&flastmodval=7&fusertag=only&fusertagtag=sphinx7.1&fusertaguser=python-modules-t...@lists.alioth.debian.org&allbugs=1&cseverity=1&ctags=1&caffected=1#results

If you reassign this bug to another package, please marking it as 'affects'-ing
this package. See https://www.debian.org/Bugs/server-control#affects
--- End Message ---
--- Begin Message ---
Source: python-djvulibre
Source-Version: 0.9.0-1
Done: Alexandre Detiste 

We believe that the bug you reported is fixed in the latest version of
python-djvulibre, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1042...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alexandre Detiste  (supplier of updated python-djvulibre 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jan 2024 12:51:58 +0100
Source: python-djvulibre
Architecture: source
Version: 0.9.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Alexandre Detiste 
Closes: 1042661 1056468 1056854
Changes:
 python-djvulibre (0.9.0-1) unstable; urgency=medium
 .
   * QA upload.
 .
   [ Alexandre Detiste ]
   * New upstream

Bug#1056468: marked as done (python-djvulibre's autopkg tests fail with Python 3.12)

2024-01-26 Thread Debian Bug Tracking System
Your message dated Fri, 26 Jan 2024 12:20:55 +
with message-id 
and subject line Bug#1056468: fixed in python-djvulibre 0.9.0-1
has caused the Debian Bug report #1056468,
regarding python-djvulibre's autopkg tests fail with Python 3.12
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1056468: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056468
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---

Package: src:python-djvulibre
Version: 0.8.8-3
Severity: important
Tags: sid trixie
User: debian-pyt...@lists.debian.org
Usertags: python3.12

python-djvulibre's autopkg tests fail with Python 3.12:

[...]
202s autopkgtest [19:00:07]: test python3-djvu: [---
203s /usr/lib/python3/dist-packages/nose/plugins/manager.py:430: 
DeprecationWarning: pkg_resources is deprecated as an API. See 
https://setuptools.pypa.io/en/latest/pkg_resources.html

203s   import pkg_resources
203s /usr/lib/python3/dist-packages/zombie_imp/__init__.py:1: 
DeprecationWarning: the imp module was removed in favour of importlib. 
Someone brought it back, but it's not a good idea to use it.

203s   from .imp_3_11 import *
203s Failure: ModuleNotFoundError (No module named 'distutils') ... ERROR
203s /usr/lib/python3.12/unittest/case.py:580: RuntimeWarning: 
TestResult has no addDuration method

203s   warnings.warn("TestResult has no addDuration method",
203s Failure: ModuleNotFoundError (No module named 'distutils') ... ERROR
203s Failure: ModuleNotFoundError (No module named 'distutils') ... ERROR
203s
203s ==
203s ERROR: Failure: ModuleNotFoundError (No module named 'distutils')
203s --
203s Traceback (most recent call last):
203s   File "/usr/lib/python3/dist-packages/nose/failure.py", line 39, 
in runTest

203s raise self.exc_val.with_traceback(self.tb)
203s   File "/usr/lib/python3/dist-packages/nose/loader.py", line 416, 
in loadTestsFromName

203s module = self.importer.importFromPath(
203s  ^
203s   File "/usr/lib/python3/dist-packages/nose/importer.py", line 47, 
in importFromPath

203s return self.importFromDir(dir_path, fqname)
203s
203s   File "/usr/lib/python3/dist-packages/nose/importer.py", line 94, 
in importFromDir

203s mod = load_module(part_fqname, fh, filename, desc)
203s   
203s   File "/usr/lib/python3/dist-packages/zombie_imp/imp_3_11.py", 
line 238, in load_module

203s return load_source(name, filename, file)
203s^
203s   File "/usr/lib/python3/dist-packages/zombie_imp/imp_3_11.py", 
line 175, in load_source

203s module = _load(spec)
203s  ^^^
203s   File "", line 960, in _load
203s   File "", line 929, in _load_unlocked
203s   File "", line 994, in 
exec_module
203s   File "", line 488, in 
_call_with_frames_removed
203s   File 
"/tmp/autopkgtest.2t28bh/autopkgtest_tmp/tests/test_const.py", line 32, 
in 

203s from tools import (
203s   File "/tmp/autopkgtest.2t28bh/autopkgtest_tmp/tests/tools.py", 
line 18, in 

203s import distutils.spawn
203s ModuleNotFoundError: No module named 'distutils'
203s
203s ==
203s ERROR: Failure: ModuleNotFoundError (No module named 'distutils')
203s --
203s Traceback (most recent call last):
203s   File "/usr/lib/python3/dist-packages/nose/failure.py", line 39, 
in runTest

203s raise self.exc_val.with_traceback(self.tb)
203s   File "/usr/lib/python3/dist-packages/nose/loader.py", line 416, 
in loadTestsFromName

203s module = self.importer.importFromPath(
203s  ^
203s   File "/usr/lib/python3/dist-packages/nose/importer.py", line 47, 
in importFromPath

203s return self.importFromDir(dir_path, fqname)
203s
203s   File "/usr/lib/python3/dist-packages/nose/importer.py", line 94, 
in importFromDir

203s mod = load_module(part_fqname, fh, filename, desc)
203s   
203s   File "/usr/lib/python3/dist-packages/zombie_imp/imp_3_11.py", 
line 238, in load_module

203s return load_source(name, filename, file)
203s^
203s   File "/usr/lib/python3/dist-pa

Bug#1056854: marked as done (python-djvulibre: ftbfs with cython 3.0.x)

2024-01-26 Thread Debian Bug Tracking System
Your message dated Fri, 26 Jan 2024 12:20:55 +
with message-id 
and subject line Bug#1056854: fixed in python-djvulibre 0.9.0-1
has caused the Debian Bug report #1056854,
regarding python-djvulibre: ftbfs with cython 3.0.x
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1056854: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056854
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: src:python-djvulibre
Version: 0.8.8-3
Severity: important
Tags: sid trixie
User: debian-pyt...@lists.debian.org
Usertags: cython3

[This bug is targeted to the upcoming trixie release]

The package fails to build in a test rebuild on at least arm64 with
cython 3.0.5, but succeeds to build with cython 0.29.36.  Please
update the package to build with cython 3.0.5 (available in experimental).

If the package cannot be built with cython 3.0.5, please change the
build dependency from cython3 to cython3-legacy (available now in
unstable).  There is no replacement for cython3-dbg.

Build logs building with cython 3.0.5 can be found at
https://people.debian.org/~stefanor/cython3/cython-3.0.5/

See also https://lists.debian.org/debian-python/2023/11/msg00034.html
--- End Message ---
--- Begin Message ---
Source: python-djvulibre
Source-Version: 0.9.0-1
Done: Alexandre Detiste 

We believe that the bug you reported is fixed in the latest version of
python-djvulibre, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1056...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alexandre Detiste  (supplier of updated python-djvulibre 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jan 2024 12:51:58 +0100
Source: python-djvulibre
Architecture: source
Version: 0.9.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Alexandre Detiste 
Closes: 1042661 1056468 1056854
Changes:
 python-djvulibre (0.9.0-1) unstable; urgency=medium
 .
   * QA upload.
 .
   [ Alexandre Detiste ]
   * New upstream version 0.9.0 (Closes: #1056854, #1042661, #1056468)
   * switch to fork found via repology.com
   * update copyright & homepage
 .
   [ Yogeswaran Umasankar ]
   * Fixed override_dh_installdocs in rules to fit new upstream.
   * Included python3-wheel in d/control build depends.
   * Patch to fix doc conf.py setup module issue.
   * Included __init__.py in tests/ for autopkgtests + disabled test_export_ps.
Checksums-Sha1:
 8bbc14fa8a16720fa8f899f0e3297940c0509b68 2379 python-djvulibre_0.9.0-1.dsc
 7cbc8c440304fd464ee6a68daeb827e866351261 86433 
python-djvulibre_0.9.0.orig.tar.gz
 9fb07b57f1a731342cb019035af427f80b731f3a 19876 
python-djvulibre_0.9.0-1.debian.tar.xz
 6073c446cccb9e804a5afb1359852e16577d1aab 11716 
python-djvulibre_0.9.0-1_source.buildinfo
Checksums-Sha256:
 5decb53fef6e2ffe6d20bb41b13b684a3f4fc725c3159f0410f5c621614d10a1 2379 
python-djvulibre_0.9.0-1.dsc
 3e9763814d7671cc3f10dfa7cce50f44a642b19753e6d86bdbf3c0fbbeaa3031 86433 
python-djvulibre_0.9.0.orig.tar.gz
 753290d108932d2e23296761a22bd4b795b51353cadc22eeffeaec58ebe2bc46 19876 
python-djvulibre_0.9.0-1.debian.tar.xz
 d2f2e80aabab85225e3a9f9db0dd3dbc9dd885778fbeb5bad0d2d9c5b91b82b8 11716 
python-djvulibre_0.9.0-1_source.buildinfo
Files:
 2e9cbc9d9c93c497150f4f3db71bf4aa 2379 python optional 
python-djvulibre_0.9.0-1.dsc
 3dad5a90363dd132228d26c94af05694 86433 python optional 
python-djvulibre_0.9.0.orig.tar.gz
 025846eae29270ca671e3800ff295413 19876 python optional 
python-djvulibre_0.9.0-1.debian.tar.xz
 5b5bbd4cd1f9f240d6c75e4c77016da6 11716 python optional 
python-djvulibre_0.9.0-1_source.buildinfo

-BEGIN PGP SIGNATURE-

iQJFBAEBCgAvFiEEj23hBDd/OxHnQXSHMfMURUShdBoFAmWzn48RHHRjaGV0QGRl
Ymlhbi5vcmcACgkQMfMURUShdBq3Sw//b35A/6m7Ex2osKSm1dW60wZ0dndZKST9
rXVz+Q05Uh96fdM3JatXPMk4ovukwyY552+bOVGDXIel36U3PfJXcBJh4Hl1m8tA
O78phfbBmAT5ucHxlcpMm0iXz0oyxlYauQyHzNHK2jZ3vc5pJ6OzK6XgMj0zdXRP
wuClmczS8BFjNOrhoIAK93du09CAJ68wr7RJ0j1LqsEwn8tah5ky4gb/jgeY/SHI
/qcEB9lttbR2IDMLAFfY9PoTrWKBVYFUEShzzImuifmfTlRur6DAkOSQC7ewz1ah
2ngvmr+s2JwLxe2MWwYRYPEYaei8AB5+H2ZIz16uXlkquYDhlbijOdRUEop2r1yc
ypNRPWPOn7yAH+bYpDXg+mKPlolAOufs4oCiDHHe4oCvv/X

Processing of python-djvulibre_0.9.0-1_source.changes

2024-01-26 Thread Debian FTP Masters
python-djvulibre_0.9.0-1_source.changes uploaded successfully to localhost
along with the files:
  python-djvulibre_0.9.0-1.dsc
  python-djvulibre_0.9.0.orig.tar.gz
  python-djvulibre_0.9.0-1.debian.tar.xz
  python-djvulibre_0.9.0-1_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)



python-djvulibre_0.9.0-1_source.changes ACCEPTED into unstable

2024-01-26 Thread Debian FTP Masters
Thank you for your contribution to Debian.



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jan 2024 12:51:58 +0100
Source: python-djvulibre
Architecture: source
Version: 0.9.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Alexandre Detiste 
Closes: 1042661 1056468 1056854
Changes:
 python-djvulibre (0.9.0-1) unstable; urgency=medium
 .
   * QA upload.
 .
   [ Alexandre Detiste ]
   * New upstream version 0.9.0 (Closes: #1056854, #1042661, #1056468)
   * switch to fork found via repology.com
   * update copyright & homepage
 .
   [ Yogeswaran Umasankar ]
   * Fixed override_dh_installdocs in rules to fit new upstream.
   * Included python3-wheel in d/control build depends.
   * Patch to fix doc conf.py setup module issue.
   * Included __init__.py in tests/ for autopkgtests + disabled test_export_ps.
Checksums-Sha1:
 8bbc14fa8a16720fa8f899f0e3297940c0509b68 2379 python-djvulibre_0.9.0-1.dsc
 7cbc8c440304fd464ee6a68daeb827e866351261 86433 
python-djvulibre_0.9.0.orig.tar.gz
 9fb07b57f1a731342cb019035af427f80b731f3a 19876 
python-djvulibre_0.9.0-1.debian.tar.xz
 6073c446cccb9e804a5afb1359852e16577d1aab 11716 
python-djvulibre_0.9.0-1_source.buildinfo
Checksums-Sha256:
 5decb53fef6e2ffe6d20bb41b13b684a3f4fc725c3159f0410f5c621614d10a1 2379 
python-djvulibre_0.9.0-1.dsc
 3e9763814d7671cc3f10dfa7cce50f44a642b19753e6d86bdbf3c0fbbeaa3031 86433 
python-djvulibre_0.9.0.orig.tar.gz
 753290d108932d2e23296761a22bd4b795b51353cadc22eeffeaec58ebe2bc46 19876 
python-djvulibre_0.9.0-1.debian.tar.xz
 d2f2e80aabab85225e3a9f9db0dd3dbc9dd885778fbeb5bad0d2d9c5b91b82b8 11716 
python-djvulibre_0.9.0-1_source.buildinfo
Files:
 2e9cbc9d9c93c497150f4f3db71bf4aa 2379 python optional 
python-djvulibre_0.9.0-1.dsc
 3dad5a90363dd132228d26c94af05694 86433 python optional 
python-djvulibre_0.9.0.orig.tar.gz
 025846eae29270ca671e3800ff295413 19876 python optional 
python-djvulibre_0.9.0-1.debian.tar.xz
 5b5bbd4cd1f9f240d6c75e4c77016da6 11716 python optional 
python-djvulibre_0.9.0-1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=w2lz
-END PGP SIGNATURE-



Bug#1061572: bullseye-pu: package unadf/0.7.11a-4+deb11u1

2024-01-26 Thread Moritz Muehlenhoff
Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: un...@packages.debian.org
Control: affects -1 + src:unadf

Addresses two no-dsa security issues, same fix already rolled out
for Bookworm. Debdiff below.

Cheers,
Moritz

diff -Nru unadf-0.7.11a/debian/changelog unadf-0.7.11a/debian/changelog
--- unadf-0.7.11a/debian/changelog  2016-09-24 17:43:06.0 +0200
+++ unadf-0.7.11a/debian/changelog  2023-11-24 16:39:48.0 +0100
@@ -1,3 +1,9 @@
+unadf (0.7.11a-4+deb11u1) bullseye; urgency=medium
+
+  * CVE-2016-1243 / CVE-2016-1244 (Closes: #838248)
+
+ -- Moritz Mühlenhoff   Fri, 24 Nov 2023 18:34:16 +0100
+
 unadf (0.7.11a-4) unstable; urgency=high
 
   * Orphan package with security issues.
diff -Nru unadf-0.7.11a/debian/patches/CVE-2016-1243_CVE-2016-1244 
unadf-0.7.11a/debian/patches/CVE-2016-1243_CVE-2016-1244
--- unadf-0.7.11a/debian/patches/CVE-2016-1243_CVE-2016-12441970-01-01 
01:00:00.0 +0100
+++ unadf-0.7.11a/debian/patches/CVE-2016-1243_CVE-2016-12442023-11-24 
16:38:37.0 +0100
@@ -0,0 +1,146 @@
+Description: Fix unsafe extraction by using mkdir() instead of shell command
+  This commit fixes following vulnerabilities:
+
+  - CVE-2016-1243: stack buffer overflow caused by blindly trusting on
+pathname lengths of archived files
+
+Stack allocated buffer sysbuf was filled with sprintf() without any
+bounds checking in extracTree() function.
+
+  - CVE-2016-1244: execution of unsanitized input
+
+Shell command used for creating directory paths was constructed by
+concatenating names of archived files to the end of the command
+string.
+
+  So, if the user was tricked to extract a specially crafted .adf file,
+  the attacker was able to execute arbitrary code with privileges of the
+  user.
+
+  This commit fixes both issues by
+
+1) replacing mkdir shell commands with mkdir() function calls
+2) removing redundant sysbuf buffer
+
+Author: Tuomas Räsänen 
+Last-Update: 2016-09-20
+--
+--- a/Demo/unadf.c
 b/Demo/unadf.c
+@@ -24,6 +24,8 @@
+ 
+ #define UNADF_VERSION "1.0"
+ 
++#include 
++#include 
+ 
+ #include
+ #include
+@@ -31,17 +33,15 @@
+ 
+ #include "adflib.h"
+ 
+-/* The portable way used to create a directory is to call the MKDIR command 
via the
+- * system() function.
+- * It is used to create the 'dir1' directory, like the 'dir1/dir11' directory
++/* The portable way used to create a directory is to call mkdir()
++ * which is defined by following standards: SVr4, BSD, POSIX.1-2001
++ * and POSIX.1-2008
+  */
+ 
+ /* the portable way to check if a directory 'dir1' already exists i'm using 
is to
+  * do fopen('dir1','rb'). NULL is returned if 'dir1' doesn't exists yet, an 
handle instead
+  */
+ 
+-#define MKDIR "mkdir"
+-
+ #ifdef WIN32
+ #define DIRSEP '\\'
+ #else
+@@ -51,6 +51,13 @@
+ #define EXTBUFL 1024*8
+ 
+ 
++static void mkdirOrLogErr(const char *const path)
++{
++  if (mkdir(path, S_IRWXU | S_IRWXG | S_IRWXO))
++  fprintf(stderr, "mkdir: cannot create directory '%s': %s\n",
++  path, strerror(errno));
++}
++
+ void help()
+ {
+ puts("unadf [-lrcsp -v n] dumpname.adf [files-with-path] [-d 
extractdir]");
+@@ -152,7 +159,6 @@ void extractTree(struct Volume *vol, str
+ {
+   struct Entry* entry;
+ char *buf;
+-char sysbuf[200];
+ 
+ while(tree) {
+ entry = (struct Entry*)tree->content;
+@@ -162,16 +168,14 @@ void extractTree(struct Volume *vol, str
+ buf=(char*)malloc(strlen(path)+1+strlen(entry->name)+1);
+ if (!buf) return;
+ sprintf(buf,"%s%c%s",path,DIRSEP,entry->name);
+-sprintf(sysbuf,"%s %s",MKDIR,buf);
+ if (!qflag) printf("x - %s%c\n",buf,DIRSEP);
++if (!pflag) mkdirOrLogErr(buf);
+ }
+ else {
+-sprintf(sysbuf,"%s %s",MKDIR,entry->name);
+ if (!qflag) printf("x - %s%c\n",entry->name,DIRSEP);
++if (!pflag) mkdirOrLogErr(entry->name);
+ }
+ 
+-if (!pflag) system(sysbuf);
+-
+   if (tree->subdir!=NULL) {
+ if (adfChangeDir(vol,entry->name)==RC_OK) {
+ if (buf!=NULL)
+@@ -301,21 +305,20 @@ void processFile(struct Volume *vol, cha
+ extractFile(vol, name, path, extbuf, pflag, qflag);
+ }
+ else {
+-/* the all-in-one string : to call system(), to find the filename, 
the convert dir sep char ... */
+-bigstr=(char*)malloc(strlen(MKDIR)+1+strlen(path)+1+strlen(name)+1);
++bigstr=(char*)malloc(strlen(path)+1+strlen(name)+1);
+ if (!bigstr) { fprintf(stderr,"processFile : malloc"); return; }
+ 
+ /* to build to extract path */
+ if (strlen(path)>0) {
+-sprintf(bigstr,"%s %s%c%s",MKDIR,path,DIRSEP,name);
+-cdstr = bigstr+strlen(MKDIR)+1+str

Processing of unadf_0.7.11a-4+deb11u1_amd64.changes

2024-01-26 Thread Debian FTP Masters
unadf_0.7.11a-4+deb11u1_amd64.changes uploaded successfully to localhost
along with the files:
  unadf_0.7.11a-4+deb11u1.dsc
  unadf_0.7.11a-4+deb11u1.debian.tar.xz
  unadf_0.7.11a-4+deb11u1_amd64.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)



unadf_0.7.11a-4+deb11u1_amd64.changes ACCEPTED into oldstable-proposed-updates->oldstable-new

2024-01-26 Thread Debian FTP Masters
Thank you for your contribution to Debian.

Mapping bullseye to oldstable.
Mapping oldstable to oldstable-proposed-updates.

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 24 Nov 2023 18:34:16 +0100
Source: unadf
Architecture: source
Version: 0.7.11a-4+deb11u1
Distribution: bullseye
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Moritz Mühlenhoff 
Closes: 838248
Changes:
 unadf (0.7.11a-4+deb11u1) bullseye; urgency=medium
 .
   * CVE-2016-1243 / CVE-2016-1244 (Closes: #838248)
Checksums-Sha1:
 2ab197d068ba990d8568348db548621291732f67 1741 unadf_0.7.11a-4+deb11u1.dsc
 ce1cbcf8903df0b03677d30a2d1c596e19d99593 19436 
unadf_0.7.11a-4+deb11u1.debian.tar.xz
 47aec55d97374d496ed735701a737b3b0b600061 6375 
unadf_0.7.11a-4+deb11u1_amd64.buildinfo
Checksums-Sha256:
 3fd7b3bcf8cfb3f006daa0376875dfee672864cca49917ca10534fa209d6ebfd 1741 
unadf_0.7.11a-4+deb11u1.dsc
 341ed426477256c473b95b94a9e785ee7563fd635d243c015cd2fe7da46ea4fd 19436 
unadf_0.7.11a-4+deb11u1.debian.tar.xz
 9d0c7f24a7b386a7dac136c4ad4145708463ed81f8626518a82c2b9d341880c7 6375 
unadf_0.7.11a-4+deb11u1_amd64.buildinfo
Files:
 3d9a84c5b4cb978fb324ded45c604a8d 1741 utils optional 
unadf_0.7.11a-4+deb11u1.dsc
 6c9c1f981e66c4a9e05eff9528a49853 19436 utils optional 
unadf_0.7.11a-4+deb11u1.debian.tar.xz
 d5f6b80448390877335b3099ff707f2e 6375 utils optional 
unadf_0.7.11a-4+deb11u1_amd64.buildinfo

-BEGIN PGP SIGNATURE-

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmWz6YQACgkQEMKTtsN8
TjZL6A/8C5xMuj/xHd4L00ULsSEjxFJxFzW1flh1HE5oI22xNiggck5AqfmaVFCF
O7Mm0FpPP1xw9RgyDiX50KggSPZXvOzYrdZxGgb9L3L295bmg0nnii9rXwijvnzt
WPrCSKCFqfLMcdQIa2Amb7dC7/ON6dnD1vhGekbc+TikHohYegsHx1xqWVgJXATu
P8C2LdG83X4+BcBIqO+DyTGEljewa5lozddNKOW8NSftNYyChcSDBAOd2eS8Wxy+
j9D1eb8hJtESzUTmMzcmT7jxNo60VNR1yREvAhfNZKGDpigfRIXCA9AvpvwTV4gg
3o7Nu7vDj9KatIFCglHLz6HVyW8JPuSItO/lKUJqms0FIQfLdFbkPxPDB1mIYbHs
49pDONFI8bqQRT0C8iftXp95MEUNw1xmMyVzeE7voNRY5ZXR/SRwzGbkh7TdaSoI
1H3ygQQ7lAhRwXiDHYsREX7HhCQLEaUjeeHjM9E+/nugQvcDBsJfWRsi/tnNO2Rk
cy1BVRLuCdhmIgLgmWu9cPPjxTr6KZpd66z2tLbFjkJV5HENXAFHJWGlVUTNONnN
PL7FTkO0X5I4Kh8ROowJ7skn3y2YoWfXb+/iHvrrJxeN3jfImqaVOExuqUzc3GM3
ClZBGuMDVMIcUN/KexLuOFGDNo0BkoXVSV7SDpf/Qf6Nz8AxY+E=
=T4ed
-END PGP SIGNATURE-



Processing of poco_1.13.0-3_source.changes

2024-01-26 Thread Debian FTP Masters
poco_1.13.0-3_source.changes uploaded successfully to localhost
along with the files:
  poco_1.13.0-3.dsc
  poco_1.13.0-3.debian.tar.xz
  poco_1.13.0-3_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)



poco_1.13.0-3_source.changes ACCEPTED into experimental

2024-01-26 Thread Debian FTP Masters
Thank you for your contribution to Debian.



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jan 2024 20:16:04 +
Source: poco
Architecture: source
Version: 1.13.0-3
Distribution: experimental
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Bastian Germann 
Changes:
 poco (1.13.0-3) experimental; urgency=medium
 .
   * QA upload
   * Patch: Link Foundation-testrunner with libatomic
Checksums-Sha1:
 7157abdbc51e3b97bedcbb5764a4fbfad573e0e2 3016 poco_1.13.0-3.dsc
 71713bcbeeae91f2016baf1adf74fbc5da527491 15904 poco_1.13.0-3.debian.tar.xz
 9ba311fbf862004fdbca3f3aebb8f386e8554275 6766 poco_1.13.0-3_source.buildinfo
Checksums-Sha256:
 387ebab0f3d3b205f2ba3e6d301406b93dc9899dcd10ecb80a4ccbe7b9562c61 3016 
poco_1.13.0-3.dsc
 8281e1b692f35d34a357acd21cae73307b33bb0aa8379969cce2e963d3113a74 15904 
poco_1.13.0-3.debian.tar.xz
 e16086d712d71f6e9544c6ec64c6a2a8d8ad4b50d382747ade4623af4f5d075f 6766 
poco_1.13.0-3_source.buildinfo
Files:
 0b5dbc75eba00fcf415cf4432d508caa 3016 libs optional poco_1.13.0-3.dsc
 a3432a9531f97b4c154c31be4090dd26 15904 libs optional 
poco_1.13.0-3.debian.tar.xz
 68c20f60b7c57be86a9e349b986f43c4 6766 libs optional 
poco_1.13.0-3_source.buildinfo

-BEGIN PGP SIGNATURE-
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=jZ8I
-END PGP SIGNATURE-



Processing of poco_1.13.0-4_source.changes

2024-01-26 Thread Debian FTP Masters
poco_1.13.0-4_source.changes uploaded successfully to localhost
along with the files:
  poco_1.13.0-4.dsc
  poco_1.13.0-4.debian.tar.xz
  poco_1.13.0-4_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)



poco_1.13.0-4_source.changes ACCEPTED into experimental

2024-01-26 Thread Debian FTP Masters
Thank you for your contribution to Debian.



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jan 2024 23:46:38 +
Source: poco
Architecture: source
Version: 1.13.0-4
Distribution: experimental
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Bastian Germann 
Changes:
 poco (1.13.0-4) experimental; urgency=medium
 .
   * QA upload
   * Make up for one other missing -latomic
   * Patch: Do not depend on users setting POCO_DATA_NO_SQL_PARSER
Checksums-Sha1:
 c6cef1148212883988010755bf7ded665fd0843b 3016 poco_1.13.0-4.dsc
 e2f834f71d4060846b1332a66d3614f40f7bb83d 16332 poco_1.13.0-4.debian.tar.xz
 29dbece04eb0c54390701c1eecb22c1a4d97de67 6766 poco_1.13.0-4_source.buildinfo
Checksums-Sha256:
 c242412cef5b1cc27c472820fed7a0b8f745c54ce4fc85f2ced691d6f77ac430 3016 
poco_1.13.0-4.dsc
 34c88b7d588ee2baf0bb7613d568fbae10ae4fa39d1284888eab973b89c98dd8 16332 
poco_1.13.0-4.debian.tar.xz
 39042b3fd25f04e10918596e3eac59062cd17cf61840de0a956b02dbaac10de7 6766 
poco_1.13.0-4_source.buildinfo
Files:
 f55b297e78393e4244bf5294b14a8ba5 3016 libs optional poco_1.13.0-4.dsc
 6bb16dc8c5120bb5fa6f5fedf1b9e131 16332 libs optional 
poco_1.13.0-4.debian.tar.xz
 35a750bdd70242a9443364c0f6d911ca 6766 libs optional 
poco_1.13.0-4_source.buildinfo

-BEGIN PGP SIGNATURE-
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=XROd
-END PGP SIGNATURE-



Processing of idesk_0.7.5-8_source.changes

2024-01-26 Thread Debian FTP Masters
idesk_0.7.5-8_source.changes uploaded successfully to localhost
along with the files:
  idesk_0.7.5-8.dsc
  idesk_0.7.5-8.debian.tar.xz
  idesk_0.7.5-8_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)



idesk_0.7.5-8_source.changes ACCEPTED into unstable

2024-01-26 Thread Debian FTP Masters
Thank you for your contribution to Debian.



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sat, 27 Jan 2024 06:37:57 +0100
Source: idesk
Architecture: source
Version: 0.7.5-8
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Pino Toscano 
Changes:
 idesk (0.7.5-8) unstable; urgency=medium
 .
   * QA upload.
   * Drop the Debian menu file:
 - the Debian menu was deprecated more than 8 years ago
 - the menu entry has no icon
 - since idesk runs as X root window, usually running it at the X session
   startup, then there is almost no reason / use case for having it in a
   menu
Checksums-Sha1:
 14cf6289d927406cb5361959a6e770920731c4c4 1759 idesk_0.7.5-8.dsc
 da2f826e5aec9950cc15cc1a0f6f1e3d800e72b6 7496 idesk_0.7.5-8.debian.tar.xz
 602e126a688dec14161606e83298ee88fd561756 8072 idesk_0.7.5-8_source.buildinfo
Checksums-Sha256:
 78e97a7892ca3ffd34e8e2d41949b74abadd8c9710fe9bb66b6b0bb789e16b92 1759 
idesk_0.7.5-8.dsc
 b5a6cf0fa29198c06f12f2647c9f8cbe3e578d56063341a6117f53e16cf99fbd 7496 
idesk_0.7.5-8.debian.tar.xz
 168f9970238bb0843da92f05943fc73ea814a25ca73ed596766e70727d8a8387 8072 
idesk_0.7.5-8_source.buildinfo
Files:
 aa7ddceecda1a643d0e016ed2680c56f 1759 x11 optional idesk_0.7.5-8.dsc
 0a218b5a9317f65bf104ceba4550c7b1 7496 x11 optional idesk_0.7.5-8.debian.tar.xz
 dac21f65ca20826b87f0ffe3ea7bf4ce 8072 x11 optional 
idesk_0.7.5-8_source.buildinfo

-BEGIN PGP SIGNATURE-
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=j/ZY
-END PGP SIGNATURE-



Processing of tty-clock_2.3-4_source.changes

2024-01-26 Thread Debian FTP Masters
tty-clock_2.3-4_source.changes uploaded successfully to localhost
along with the files:
  tty-clock_2.3-4.dsc
  tty-clock_2.3-4.debian.tar.xz
  tty-clock_2.3-4_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)



tty-clock_2.3-4_source.changes ACCEPTED into unstable

2024-01-26 Thread Debian FTP Masters
Thank you for your contribution to Debian.



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sat, 27 Jan 2024 06:46:40 +0100
Source: tty-clock
Architecture: source
Version: 2.3-4
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Pino Toscano 
Changes:
 tty-clock (2.3-4) unstable; urgency=medium
 .
   * QA upload.
   * Drop Vcs-* fields, as they point to an obsolete repository.
   * Drop Debian menu file:
 - the Debian menu was deprecated more than 8 years ago
 - this menu entry has no icon
Checksums-Sha1:
 5c3bbd2786f16ae5f033a82c006fdf46defd01c3 1733 tty-clock_2.3-4.dsc
 24a7343f969e60d7fbbf7e0fe2100dbdb7aac357 4128 tty-clock_2.3-4.debian.tar.xz
 2e8f6696f67d0e76992238d82dea4aff35593264 6737 tty-clock_2.3-4_source.buildinfo
Checksums-Sha256:
 87199481ebb499d0680df3a24d6dd07b551c5ee186dccdc5a3ed30b4cb48b895 1733 
tty-clock_2.3-4.dsc
 155b837a6b8d8cd14df4537384c39eba9aec4bb38d39198688ce138d236deaa3 4128 
tty-clock_2.3-4.debian.tar.xz
 cf3880a588718e246c2ab867235e30a52276d8baf34cf3ef6413b73785651f2c 6737 
tty-clock_2.3-4_source.buildinfo
Files:
 50449a4a07efe34ea14214406fb89222 1733 utils optional tty-clock_2.3-4.dsc
 6ac262c01fef5c5808e6b6406cbbe5d8 4128 utils optional 
tty-clock_2.3-4.debian.tar.xz
 50b41fdc2b90bceb27b7b603cbb80bdd 6737 utils optional 
tty-clock_2.3-4_source.buildinfo

-BEGIN PGP SIGNATURE-
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=zfsj
-END PGP SIGNATURE-