Bug#866045: let this be for 1.5-13+deb9u1
Hi! We've already missed 9.1 with this fix, I left some questions here last time... > Will this be ok for an upload? > > If so... when should I upload it? > > Will a normal dput work given the stretch target on the changelog, or should > I do something special? Can we try to make this into 9.2, please? Regards... -- Manty/BestiaTester -> http://manty.net
Bug#870142: stretch-pu: package dbus/1.10.22-0+deb9u1
On Sun, 30 Jul 2017 at 18:14:49 +0100, Adam D. Barratt wrote: > On Sun, 2017-07-30 at 12:08 +0100, Simon McVittie wrote: > > So far there are only minor fixes between the 1.10.18 currently in stretch > > and the 1.10.22 that I'm proposing > > Please go ahead. Uploaded dbus/1.10.22-0+deb9u1 with the same debdiff previously proposed. S
Bug#864028: stretch-pu: package flatpak 0.8.7-1~deb9u1
On Sun, 30 Jul 2017 at 22:59:15 +0100, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Thu, 2017-07-27 at 07:28 +0100, Simon McVittie wrote: > > > > Filtered diff (patched tree in security vs. what I propose) in > > https://lists.debian.org/debian-release/2017/07/msg00555.html aka > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864028#57 aka > > Message-ID: <20170715163609.nemdxrefaeird...@perpetual.pseudorandom.co.uk>. > > Notes on the differences and what I filtered are in the same mail. > > > > I would also be happy to add the equivalent of > > https://anonscm.debian.org/git/collab-maint/flatpak.git/diff/?id=debian/0.8.7-2&id2=debian/0.8.7-1 > > to make this flatpak compatible with buster's libostree, if the SRMs > > would be OK with that; that would turn it into 0.8.7-2~deb9u1. The > > relevant commits will be in upstream release 0.8.8 eventually. > > That sounds okay to me. Sorry for the delay in getting back to you. I've assumed you meant "yes, please also include the 0.8.7-2 changes" (i.e. compatibility with buster's libostree), and uploaded 0.8.7-2~deb9u1. If that was wrong, please reject it and I'll go for 0.8.7-1~deb9u1. I tested against stretch's libostree on a stretch system to make sure it works correctly with both. The attached debdiff is the difference between what you already saw in https://lists.debian.org/debian-release/2017/07/msg00555.html aka https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864028#57 aka Message-ID: <20170715163609.nemdxrefaeird...@perpetual.pseudorandom.co.uk>, and what I uploaded. Improve-and-simplify-profile-snippet.patch was just moved into a subdirectory, there are no functional changes to it. Thanks, S diffstat for flatpak-0.8.7 flatpak-0.8.7 changelog | 29 + patches/0.8.8/Manually-copy-summary-for-update-and-appdata-too.patch | 100 patches/0.8.8/common-Store-the-summary-signature-in-the-cache-too.patch | 226 ++ patches/0.8.8/install-Manually-save-summary-.sig-in-cache-repo.patch | 61 ++ patches/0.8.8/test-run-Allow-org.test.Setuid-to-install-as-long-as-it-s.patch | 66 ++ patches/0.9.1/Improve-and-simplify-profile-snippet.patch | 46 ++ patches/Improve-and-simplify-profile-snippet.patch| 46 -- patches/series|6 8 files changed, 531 insertions(+), 49 deletions(-) diff -Nru --exclude aclocal.m4 --exclude configure --exclude config.guess --exclude config.sub --exclude po --exclude html --exclude Makefile.in flatpak-0.8.7/debian/changelog flatpak-0.8.7/debian/changelog --- flatpak-0.8.7/debian/changelog 2017-06-21 12:36:34.0 +0100 +++ flatpak-0.8.7/debian/changelog 2017-07-31 08:44:53.0 +0100 @@ -1,9 +1,20 @@ -flatpak (0.8.7-1~deb9u1) stretch; urgency=medium +flatpak (0.8.7-2~deb9u1) stretch; urgency=medium * Rebuild for stretch + * Merge changelog from stretch-security * debian/gbp.conf: Switch branch to debian/stretch - -- Simon McVittie Wed, 21 Jun 2017 12:36:34 +0100 + -- Simon McVittie Mon, 31 Jul 2017 08:44:53 +0100 + +flatpak (0.8.7-2) unstable; urgency=medium + + * Move upstreamed patch to debian/patches/0.9.1/ to make it obvious +when it can be dropped + * d/p/0.8.8/: add patches backported from upstream 0.9.4, 0.9.6, +together with a new patch to the tests, to restore compatibility +with libostree 2017.7 (all applied upstream already) + + -- Simon McVittie Wed, 28 Jun 2017 11:55:18 +0100 flatpak (0.8.7-1) unstable; urgency=high @@ -20,6 +31,20 @@ -- Simon McVittie Wed, 21 Jun 2017 09:50:09 +0100 +flatpak (0.8.5-2+deb9u1) stretch-security; urgency=high + + * d/p/Ensure-we-don-t-install-world-writable-dirs-or-setuid-fil.patch: +Patch from upstream stable release 0.8.7. +Prevent deploying files with inappropriate permissions +(world-writable, setuid, etc.) (Closes: #865413) + * d/p/dir-Ensure-.local-share-flatpak-is-0700.patch: +Patch from upstream stable release 0.8.7. +Make ~/.local/share/flatpak private to user to defend against app +vendors that might have released files with inappropriate permissions +in the past + + -- Simon McVittie Wed, 21 Jun 2017 12:05:49 +0100 + flatpak (0.8.6-1) unstable; urgency=medium * New upstream release diff -Nru --exclude aclocal.m4 --exclude configure --exclude config.guess --exclude config.sub --exclude po --exclude html --exclude Makefile.in flatpak-0.8.7/debian/patches/0.8.8/common-Store-the-summary-signature-in-the-cache-too.patch flatpak-0.8.7/debian/patches/0.8.8/common-Store-the-summary-signature-in-the-cache-too.patch --- flatpak-0.8.7/debian/patches/0.8.8/common-Store-the-summary-signature-in-the-cache-too.patch 1970-01-01 01:00:00.0 +0100 +++ flatpak-0.8.7/debian/patches/0.8.8/common-Store-the-summary-signature-in-the-cache-too.patch 2017-0
Processed: Re: Bug#868284: stretch-pu: package suricata/3.2.1-1
Processing control commands: > tags -1 - moreinfo Bug #868284 [release.debian.org] stretch-pu: package suricata/3.2.1-1 Removed tag(s) moreinfo. -- 868284: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868284 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#868284: stretch-pu: package suricata/3.2.1-1
Control: tags -1 - moreinfo On Tue, 25 Jul 2017 22:54:15 +0200 Arturo Borrero Gonzalez wrote: > Currently working on it. > Hi, now unstable containst the code, package version 1:4.0.0-1
Bug#870258: GCC 7 related library transitions
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition Bumping the GCC default to GCC 7 triggers some GCC library transitions. - libgfortran3 -> libgfortran4 - libgphobos68 -> libgphobos71 - libgo7 -> libgo9 - libasan3 -> libasan4 Afaics only the first mentioned library has reverse dependencies in the archive, the other ones don't have any. I'm planning to bump the GCC default next week if possible, together with the GCC 7.2 release candidate.
Bug#870277: nmu: packages with upper dependency on binutils
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu please binNMU packages with an upper dependency on binutils (<< 2.29). afaics these are: tulip, boinc-app-eah-brp and lush.
Processed: reassign 870298 to src:linux, forcibly merging 869511 870298
Processing commands for cont...@bugs.debian.org: > reassign 870298 src:linux Bug #870298 [linux-headers-4.11.0-2-amd64] 4.11.0-2-amd64 headers cannot be installed Bug reassigned from package 'linux-headers-4.11.0-2-amd64' to 'src:linux'. No longer marked as found in versions linux/4.11.11-1. Ignoring request to alter fixed versions of bug #870298 to the same values previously set > forcemerge 869511 870298 Bug #869511 [src:linux] linux: binNMU-unsafe dependency on linux-headers-*-common Bug #869670 [src:linux] Depends: linux-headers-4.11.0-2-common ... but it is not going to be installed Bug #870298 [src:linux] 4.11.0-2-amd64 headers cannot be installed Severity set to 'grave' from 'serious' 866389 was blocked by: 865045 826473 826497 865898 865482 827640 809352 869436 867514 867984 869602 865033 865224 865380 865034 865888 869579 865893 865477 869578 869576 866934 826502 867046 867213 866317 869433 869357 869139 869418 869504 866315 867210 869670 866944 869511 826471 865020 869580 826505 869583 866978 869383 826489 866389 was not blocking any bugs. Added blocking bug(s) of 866389: 870298 865614 was blocked by: 867257 869511 869670 865614 was not blocking any bugs. Added blocking bug(s) of 865614: 870298 Marked as found in versions linux/4.11.11-1. Added tag(s) pending. Bug #869670 [src:linux] Depends: linux-headers-4.11.0-2-common ... but it is not going to be installed Merged 869511 869670 870298 > thanks Stopping processing here. Please contact me if you need assistance. -- 865614: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865614 866389: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=866389 869511: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869511 869670: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869670 870298: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870298 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#822678: marked as done (jessie-pu: package partman-ext3/86~deb8u1)
Your message dated Mon, 31 Jul 2017 20:52:05 +0200 with message-id and subject line Re: Bug#822678: jessie-pu: package partman-ext3/86~deb8u1 has caused the Debian Bug report #822678, regarding jessie-pu: package partman-ext3/86~deb8u1 to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 822678: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=822678 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Hi, partman has a nasty bug, it hangs when creating an extX filesystem over an existing file system (with bootloader installed) due to lack of the -F (force) option. See #767682, #810582 for details. The fix for this is already in stretch, and I'd like to get it into jessie since I just ran into this with the jessie 8.4 installer. The additional changes in stretch only include updated translations and Vcs-* URLs, so I decided to backport the stretch version rather than just cherry-picking that one patch. I have no experience with PU request for d-i packages ... and wouldn't mind the D-I Team taking over. Andreas diff -Nru partman-ext3-84/commit.d/format_ext3 partman-ext3-86~deb8u1/commit.d/format_ext3 --- partman-ext3-84/commit.d/format_ext3 2014-07-08 07:09:38.0 +0200 +++ partman-ext3-86~deb8u1/commit.d/format_ext3 2016-02-10 19:13:00.0 +0100 @@ -56,7 +56,7 @@ usage='' fi if log-output -t partman --pass-stdout \ - mkfs.$filesystem $device $usage >/dev/null; then + mkfs.$filesystem -F $device $usage >/dev/null; then sync status=OK else diff -Nru partman-ext3-84/debian/changelog partman-ext3-86~deb8u1/debian/changelog --- partman-ext3-84/debian/changelog 2014-11-15 08:07:34.0 +0100 +++ partman-ext3-86~deb8u1/debian/changelog 2016-04-26 15:20:04.0 +0200 @@ -1,3 +1,30 @@ +partman-ext3 (86~deb8u1) jessie; urgency=medium + + * Non-maintainer upload. + * Rebuild for jessie. + + -- Andreas Beckmann Tue, 26 Apr 2016 15:19:28 +0200 + +partman-ext3 (86) unstable; urgency=medium + + [ Colin Watson ] + * Use HTTPS for Vcs-* URLs, and link to cgit rather than gitweb. + + [ Christian Perrier ] + * Force ext3|ext4 filesystem creation with "-F" so that D-I doesn't +"hang" when re-using an existing partition in some situations. +Closes: #767682 + + -- Christian Perrier Thu, 11 Feb 2016 06:49:17 +0100 + +partman-ext3 (85) unstable; urgency=medium + + [ Updated translations ] + * Portuguese (Brazil) (pt_BR.po) by Adriano Rafael Gomes + * Turkish (tr.po) by Mert Dirik + + -- Christian Perrier Thu, 09 Jul 2015 06:57:44 +0200 + partman-ext3 (84) unstable; urgency=low [ Updated translations ] diff -Nru partman-ext3-84/debian/control partman-ext3-86~deb8u1/debian/control --- partman-ext3-84/debian/control 2013-07-13 10:59:09.0 +0200 +++ partman-ext3-86~deb8u1/debian/control 2016-01-30 05:08:06.0 +0100 @@ -4,8 +4,8 @@ Maintainer: Debian Install System Team Uploaders: Christian Perrier Build-Depends: debhelper (>= 9), dh-di, po-debconf (>= 0.5.0) -Vcs-Browser: http://anonscm.debian.org/gitweb/?p=d-i/partman-ext3.git -Vcs-Git: git://anonscm.debian.org/d-i/partman-ext3.git +Vcs-Browser: https://anonscm.debian.org/cgit/d-i/partman-ext3.git +Vcs-Git: https://anonscm.debian.org/git/d-i/partman-ext3.git Package: partman-ext3 Package-Type: udeb diff -Nru partman-ext3-84/debian/po/be.po partman-ext3-86~deb8u1/debian/po/be.po --- partman-ext3-84/debian/po/be.po 2012-11-08 22:14:33.0 +0100 +++ partman-ext3-86~deb8u1/debian/po/be.po 2015-04-27 05:02:31.0 +0200 @@ -11,11 +11,13 @@ # Nasciona Piatrouskaja , 2006. # Paul Petruk , 2007. # Pavel Piatruk , 2008, 2009, 2011. -# Viktar Siarheichyk , 2010, 2011, 2012. +# Viktar Siarheichyk , 2010, 2011, 2012, 2015. # Translations from iso-codes: # Alastair McKinstry , 2004. # Alexander Nyakhaychyk , 2009. # Ihar Hrachyshka , 2007, 2010. +# Viktar Siarheichyk , 2014. +# Viktar Siarheichyk , 2014, 2015. msgid "" msgstr "" "Project-Id-Version: be\n" @@ -23,8 +25,7 @@ "POT-Creation-Date: 2011-07-23 22:48+\n" "PO-Revision-Date: 2011-09-15 01:58+0300\n" "Last-Translator: Viktar Siarheichyk \n" -"Language-Team: Belarusian (Official spelling) \n" +"Language-Team: Belarusian \n" "Language: be\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" diff -Nru partman-ext3-84/debian/po/pt_BR.po partman-ext3-86~deb8u1/debian/po/pt_BR.po --- partman-ext3-84/debian/po/pt_BR.po 2012-04-09 03:01:46.0 +0200 +++
Processed: tagging 822678
Processing commands for cont...@bugs.debian.org: > tags 822678 - moreinfo Bug #822678 [release.debian.org] jessie-pu: package partman-ext3/86~deb8u1 Removed tag(s) moreinfo. > thanks Stopping processing here. Please contact me if you need assistance. -- 822678: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=822678 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#870315: nmu: libwx-perl_1:0.9932-1+b1
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu nmu libwx-perl_1:0.9932-1+b1 . ANY . unstable . -m "Rebuild against rebuilt libalien-wxwidgets-perl." After a new upstream upload of wxwidgets3.0, libalien-wxwidgets-perl needs a binnmu because it generates a "Provides" based on the wxwidgets3.0 version e.g.: Provides: wxperl-gtk2-3-0-3-uni-gcc-3-4 That's already been done, but now libwx-perl needs a rebuilt so this change is reflected in its "Depends", which currently doesn't match: Depends: [...], wxperl-gtk2-3-0-2-uni-gcc-3-4, [...] Cheers, Olly
