Bug#1088802: neutron: CVE-2024-53916

2024-12-01 Thread Thomas Goirand
On 12/1/24 17:31, Moritz Mühlenhoff wrote: Source: neutron X-Debbugs-CC: t...@security.debian.org Severity: important Tags: security Hi, The following vulnerability was published for neutron. CVE-2024-53916[0]: | In OpenStack Neutron through 25.0.0, neutron/extensions/tagging.py | can use an i

Bug#1088862: postfix vs postmulti setup in debian

2024-12-01 Thread Michael Tokarev
Package: postfix Version: 3.9.0-4 Severity: important There's a rather big question about the way how postfix starts in debian and how it's integrated with systemd. Filing this as a bug report, so the discussion wont get lost. There's a number of issuse with multi-instance postfix startup as don

Bug#1088861: ITP: pymeteireann -- Library for communication with Met Éireann Weather APIs

2024-12-01 Thread Edward Betts
Package: wnpp Severity: wishlist Owner: Edward Betts * Package name: pymeteireann Version : 2021.8.0 Upstream Author : Dylan Gore * URL : https://github.com/DylanGore/PyMetEireann * License : MIT Programming Lang: Python Description : Library for commu

Bug#1077947: gmemusage uploaded to delayed=10

2024-12-01 Thread Andreas Tille
Control: tags -1 pending Thanks Hi, as per ITS I have uploaded the package to delayed=10. Kind regards Andreas. -- https://fam-tille.de

Bug#1088860: audioread fails to build with Python 3.13

2024-12-01 Thread Pushkar Kulkarni
Package: audioread Version: 3.0.1-1 Severity: normal This came up as a part of the Python 3.13 transition work in Ubuntu. The audioread 3.0.1-1 autopkgtests fail with Python 3.13 because the package depends on stdlib modules aifc, audioop and sunau which have been deprecated in 3.11 and removed i

Bug#881467: git-buildpackage: gbp dch should filter out commits behind upstream-vcs-tag

2024-12-01 Thread Guido Günther
Hi, On Sun, Dec 01, 2024 at 03:01:38PM -0800, Otto Kekäläinen wrote: > > > The changelog is easy to update to only include Debian changes with: > > > > > > gbp dch -- debian > > > > That's not needed as gbp-dch looks at the packaging branch so commits > > from upstream vcs aren't included. > >

Bug#1088839: eye has an undeclared file conflict on /usr/bin/eye

2024-12-01 Thread Helmut Grohne
Hi Jonas, On Sun, Dec 01, 2024 at 11:57:52PM +0100, Jonas Smedegaard wrote: > Quoting Helmut Grohne (2024-12-01 22:02:27) > > Package: eye > > Version: 1:10.30.11~ds-1 > > Severity: serious > > User: debian...@lists.debian.org > > Usertags: fileconflict > > Control: affects -1 + ruby-eye > > > >

Bug#1088859: deluge-web typo in dependency on python-legacy-cgi

2024-12-01 Thread Daniel Baumann
On 12/2/24 07:49, Peter Van Eynde wrote: > The fix for #1087842 was not complete I fear. deluge-web still has a > dependency on `python-legacy-cgi` instead of `python3-legacy-cgi` thanks, indeed :( I've just uploaded it with that correction. Regards, Daniel

Bug#631665: postfix: Postfix has stopped sending mail

2024-12-01 Thread Michael Tokarev
Control: retitle -1 [chroot] postfix: Postfix has stopped sending mail This is an old bug, and many things changed since. What has not changed is the root cause of this issue: it is running postfix chrooted by default, which has been strongly advised against by the upstream countless number of t

Bug#606007: GSSAPI: Modifications to chroot.

2024-12-01 Thread Michael Tokarev
Control: retitle -1 [chroot] GSSAPI: Modifications to chroot. On Wed, 12 Feb 2014 20:21:22 -0500 Craig wrote: I filed a bug against the Ubuntu version of this package here https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/1279116 They suggested raising the issue in the Debian package syst

Bug#1088706: ITP: ruff -- An extremely fast Python linter.

2024-12-01 Thread Thomas Goirand
On 11/29/24 19:25, Ranjith Raj wrote: Package:wnpp Severity: wishlist X-Debbugs-Cc: debian-de...@lists.debian.org, :debian-pyt...@lists.debian.org Owner: Ranjith Raj Package:ruff Version:0.8.0 Severity: wishlist * Package name :python3-ruff Version :0.8.0 Upstream Author :Charlie Marsh *URL :

Bug#1088859: deluge-web typo in dependency on python-legacy-cgi

2024-12-01 Thread Peter Van Eynde
Package: deluge-web Version: 2.1.2~dev0+20240910-1 Severity: grave Dear Maintainer, The fix for #1087842 was not complete I fear. deluge-web still has a dependency on `python-legacy-cgi` instead of `python3-legacy-cgi`, see https://git.progress-linux.org/users/daniel.baumann/debian/packages/delu

Bug#714770: saslauthd bind mount fails during boot

2024-12-01 Thread Michael Tokarev
Control: retitle -1 [chroot] saslauthd bind mount fails during boot Another bug due to chroot-by-default in debian postfix which has been advised against by upstream countless number of times over the years. /mjt

Bug#1088443: debian-policy: Recommend Debian package version format when upstream has no releases

2024-12-01 Thread Otto Kekäläinen
> On Sun, Dec 01, 2024 at 09:44:17PM -0800, Otto Kekäläinen wrote: > > My intent here was to suggest specifically that the version of form > > 0.0~git20130606.b00ec39-1 would be elevated as the Policy recommended > > form, as it makes sense and is already most popular. > > For the record, I assume

Bug#1088858: O: todotxt-cli -- simple and extensible shell script for managing todo.txt file

2024-12-01 Thread Ondřej Nový
Package: wnpp Severity: normal X-Debbugs-Cc: todotxt-...@packages.debian.org Control: affects -1 + src:todotxt-cli I intend to orphan the todotxt-cli package. The package description is: If you have a file called todo.txt on your computer right now, you're in the right place. . So many power

Bug#1088857: O: vifm -- flexible vi-like file manager using ncurses

2024-12-01 Thread Ondřej Nový
Package: wnpp Severity: normal X-Debbugs-Cc: v...@packages.debian.org Control: affects -1 + src:vifm I intend to orphan the vifm package. The package description is: Vifm is a file manager providing a vi-like usage experience. It has similar keybindings and modes (e.g. normal, command line, vis

Bug#1086128: src:sbcl: fails to migrate to testing for too long

2024-12-01 Thread Paul Gevers
Hi ppc64el porters, Sean, @porters, can you please have a look at the ppc64el autopkgtest regressions caused by sbcl [1]? On 12/2/24 03:36, Sean Whitton wrote: I don't think I can do anything about this bug. Upstream aren't able to reproduce it. I don't think it makes sense to block sbcl's

Bug#1088443: debian-policy: Recommend Debian package version format when upstream has no releases

2024-12-01 Thread Andrey Rakhmatullin
On Sun, Dec 01, 2024 at 09:44:17PM -0800, Otto Kekäläinen wrote: > My intent here was to suggest specifically that the version of form > 0.0~git20130606.b00ec39-1 would be elevated as the Policy recommended > form, as it makes sense and is already most popular. For the record, I assume it's most p

Bug#988036: Three different reported bugs

2024-12-01 Thread Jing Luo
Control: fixed -1 3.3.7-1

Bug#1088783: RFS: postfixadmin/3.3.14+ds1-1 [ITA] -- Virtual mail hosting interface for Postfix

2024-12-01 Thread Jing Luo
Control: tags -1 -moreinfo Hello Phil I made a new upload (yet again), which should fix all lintian "info" and "pedantic". But why are "info" and "pedantic" an instant fail on this mailing list (debian-mentors)? It seems that only errors and warnings are displayed on the package tracker. Lu

Bug#734401: postfix: debconf settings don't reflect main.cf if altered manually (e.g. relay_host)

2024-12-01 Thread Michael Tokarev
On Thu, 16 Jan 2014 04:20:47 -0700 LaMont Jones wrote: On Mon, Jan 06, 2014 at 04:37:15PM -0500, Daniel Dickinson wrote: > Setting relay_host in /etc/postfix/main.cf manual and the doing dpkg-reconfigured results in debconf setting (unless you set it back) the relay_host previously configured

Bug#1088856: RM: geekcode -- ROM; unmaintained, fallen out of use

2024-12-01 Thread Eric Dorland
Package: ftp.debian.org Severity: normal X-Debbugs-Cc: geekc...@packages.debian.org Control: affects -1 + src:geekcode User: ftp.debian@packages.debian.org Usertags: remove No longer maintained upstream, fallen out of use, low popcon score trending downward.

Bug#620543: upgrade from lenny to squeeze: mailbox_command changed

2024-12-01 Thread Michael Tokarev
See also https://bugs.debian.org/734401. /mjt

Bug#988036: Three different reported bugs

2024-12-01 Thread Jing
Control: reopen -1 Control: tags -1 +fixed let this bug be auto-closed, otherwise mentor.d.n complains

Bug#1088854: Correct d/watch file to properly locate upstream versions

2024-12-01 Thread Petter Reinholdtsen
Control: tags -1 + patch Forgot to flag that there is a patch. -- Happy hacking Petter Reinholdtsen

Bug#1088855: lua-discount: Correct Vcs-* links in d/control

2024-12-01 Thread Petter Reinholdtsen
Control: tags -1 + patch Forgot to flag that there is a patch. -- Happy hacking Petter Reinholdtsen

Bug#1088855: lua-discount: Correct Vcs-* links in d/control

2024-12-01 Thread Petter Reinholdtsen
Package: lua-discount (main) Version: 2.1.8-4 The Vcs-* entries in debian/control point to the obsolete anonscm.debian.org site. There is a redirect in place to https://salsa.debian.org/lua-team/lua-discount >, but it is better to include the correct URL in the package. As the package is curre

Bug#1088443: debian-policy: Recommend Debian package version format when upstream has no releases

2024-12-01 Thread Otto Kekäläinen
Hi, > This would not constitute any sort of rejection for which maintainers of > packages would need to be concerned. It does not mean anyone's > practices should change. > > It does not mean that there is no policy (lowercase 'p') for these > version strings in Debian. What I am trying to expre

Bug#1088854: Correct d/watch file to properly locate upstream versions

2024-12-01 Thread Petter Reinholdtsen
Package: lua-discount (main) Version: 2.1.8-4 The current debian/watch file do not properly recognize upstream versions. I suggest replacing it with using the following patch: diff --git a/debian/watch b/debian/watch index ce064da..59c7dd3 100644 --- a/debian/watch +++ b/debian/watch @@ -1,2

Bug#1087384: [Pkg-nagios-devel] Bug#1087384: Bug#1087384: CVE-2024-49369: Security: fix TLS certificate validation bypass.

2024-12-01 Thread Sebastiaan Couwenberg
On 12/1/24 10:10 PM, Lorenz wrote: Sorry to be annoying here, but I just discovered that the stable version ist still vulnerable. You can get the fixed version from bookworm-proposed-updates. https://www.debian.org/releases/proposed-updates https://wiki.debian.org/StableProposedUpdates Kin

Bug#660684: O: cvsweb -- CGI interface to your CVS repository

2024-12-01 Thread Jing
Control: owner -1 ! Control: retitle -1 ITA: cvsweb -- CGI interface to your CVS repository Hello! I intend to adopt this package, and I will need a sponsor. I will make an upload soon. -- Jing Luo About me: https://jing.rocks/about/ GPG Fingerprint: 4E09 8D19 00AA 3F72 1899 2614 09B3 316E 13

Bug#738019: postfixadmin: check_domain function doesn't support more than 6 characters for TLD

2024-12-01 Thread Jing
Control: close -1 3.3.1-1

Bug#1088783: RFS: postfixadmin/3.3.14+ds1-1 [ITA] -- Virtual mail hosting interface for Postfix

2024-12-01 Thread Phil Wyett
Control: tags -1 +moreinfo Jing, Preamble... Thank you for taking the time to prepare this package and your contribution to the Debian project. The review below is for assistance. This review is offered to help package submitters to Debian mentors inorder to improve their packages prior to po

Bug#858005: postfixadmin: upgrade.php fails at various places because of too long indexes

2024-12-01 Thread Jing
Control: close -1 3.2-1

Bug#786890: minor SQL statement error in edit-mailbox.php

2024-12-01 Thread Jing
Control: close -1 2.93-1

Bug#988036: Three different reported bugs

2024-12-01 Thread Jing
Control: close -1

Bug#965075: postfixadmin: wrong alias in postfixadmin conf-available for apache2

2024-12-01 Thread Jing
Control: close -1

Bug#877599: postfixadmin: vacation.pl Can't locate Mail/Sender.pm

2024-12-01 Thread Jing
Control: close -1 3.2.1-1

Bug#763927: postfixadmin: footer template uses postfixadmin.com, which points to a spam website

2024-12-01 Thread Jing
Control: close -1 2.3.7-1

Bug#684081: postfixadmin: Package for squirrelmail-plugin

2024-12-01 Thread Jing
Control: tags -1 +wontfix Control: close -1 On Mon, 06 Aug 2012 21:31:36 +0200 Benedikt Trefzer wrote: Package: postfixadmin Severity: wishlist In the postfixadmin source is a squirrelmail-plugin (see ADDITIONS directory). There are already debian rules included to create a package. Please

Bug#1088443: debian-policy: Recommend Debian package version format when upstream has no releases

2024-12-01 Thread Sean Whitton
Hello, On Sun 01 Dec 2024 at 06:53pm -08, Otto Kekäläinen wrote: > Please no. Rather close it and state that you do not accept this in > the policy so that there is an audit trail that this was rejected from > policy and who made the decision. > > Updates/changes elsewhere can then refer this bug

Bug#1088853: autosp.1: Some remarks and editorial changes for this man page

2024-12-01 Thread Bjarni Ingi Gislason
Package: texlive-binaries Version: 2024.20240313.70630+ds-5 Severity: minor Tags: patch * What led up to the situation? Checking for defects with test-[g|n]roff -mandoc -t -K utf8 -rF0 -rHY=0 -ww -b -z < "man page" [Use "groff -e ' $' " to find trailing spaces.] ["test-groff" is a

Bug#1088443: debian-policy: Recommend Debian package version format when upstream has no releases

2024-12-01 Thread Otto Kekäläinen
> > On Wed, Nov 27, 2024 at 01:11:14PM -0800, Otto Kekäläinen wrote: > >> Package: debian-policy > >> Found: 4.7.0.1 > >> > >> I would like to suggest the Debian Policy to recommend a specific > >> Debian package version string scheme in cases where upstream has no > >> releases, but they do have g

Bug#1088852: ifupdown: Cannot bring interface up when inet6 set to dhcp and using isc-dhcp-client

2024-12-01 Thread Mark Kamichoff
Package: ifupdown Version: 0.8.44 Severity: normal Hi - When /etc/network/interfaces is configured with the inet6 address family of type "dhcp" and isc-dhcp-client is used as the DHCP client, DHCPv6 doesn't appear to work properly: (janeway:20:36:EST)% sudo ifup eth0 Internet Systems Consortium

Bug#1085035: libqt6widgets6: QFileDialog crashes on wayland under sway

2024-12-01 Thread Arnaud Rebillout
On Sun, 13 Oct 2024 17:00:16 +0200 Chris Hofstaedtler wrote: > Someone else pointed out that apps using QFileDialog started crashing a > while ago. To repro, I took an otherwise "normal" sid arm64 VM, > installed sway and qsynth. I picked qsynth as a random application, but for the > sake of c

Bug#1086032: calibre: SEGV when trying to "add books" on a PinePhonePro arm64 architecture

2024-12-01 Thread Arnaud Rebillout
FWIW, in Kali Linux we did rebuild the package, and it fixed the problem. I think the Debian Qt/KDE team should do a binNMU. Best, -- Arnaud Rebillout / OffSec / Kali Linux Developer

Bug#1086128: src:sbcl: fails to migrate to testing for too long

2024-12-01 Thread Sean Whitton
Hello Release Team, I don't think I can do anything about this bug. Upstream aren't able to reproduce it. I don't think it makes sense to block sbcl's migration on this. I think that either we should ignore the cl-ironclad test failure on ppc64el or remove sbcl on that architecture, if you thin

Bug#1088443: debian-policy: Recommend Debian package version format when upstream has no releases

2024-12-01 Thread Sean Whitton
Hello, On Sun 01 Dec 2024 at 04:18pm +01, Tobias Frost wrote: > On Wed, Nov 27, 2024 at 01:11:14PM -0800, Otto Kekäläinen wrote: >> Package: debian-policy >> Found: 4.7.0.1 >> >> I would like to suggest the Debian Policy to recommend a specific >> Debian package version string scheme in cases whe

Bug#1079855: digikam: Malformed redirect_uri while using Google Photo importer plugin

2024-12-01 Thread Steven Robbins
On Sunday, December 1, 2024 5:23:09 P.M. CST Steven Robbins wrote: > On Wed, 28 Aug 2024 09:26:49 +0200 Patrick Zanon wrote: > > Package: digikam > > Version: 4:8.4.0-3 > > Severity: normal > > X-Debbugs-Cc: ne...@libero.it > > Unfortunately, I didn't see your report in time. Now Debian has 8.5.

Bug#1088764: pocketsphinx-python: autopkgtest failure with Python 3.13

2024-12-01 Thread Samuel Thibault
Hello, Graham Inggs, le sam. 30 nov. 2024 17:41:54 +, a ecrit: > The autopkgtests of this package fail with Python 3.13 [1]. It looks like python 3.13 now requires the iterator (not just the interable) to provide an __iter__ method. I don't see how to do that with the pocketsphinx interface:

Bug#1088764: pocketsphinx-python: autopkgtest failure with Python 3.13

2024-12-01 Thread Samuel Thibault
Just FTR, the patch I had tried to add to the sphinxbase package to try to get pocketsphinx-python expose a proper __iter__ method. It does return a new object, but doesn't duplicate ptr, thus deemed to get duplicate frees and whatnot. Samuel Samuel Thibault, le lun. 02 déc. 2024 02:58:51 +0100,

Bug#1088851: at.1: Some remarks and editorial changes for this man page

2024-12-01 Thread Bjarni Ingi Gislason
Package: at Version: 3.2.5-2.1 Severity: minor Tags: patch * What led up to the situation? Checking for defects with test-[g|n]roff -mandoc -t -K utf8 -rF0 -rHY=0 -ww -b -z < "man page" [Use "groff -e ' $' " to find trailing spaces.] ["test-groff" is a script in the repository for

Bug#1088850: ITP: releng-tool -- Tool to tailor the building of packages

2024-12-01 Thread git
Package: wnpp Severity: wishlist Owner: g...@jdknight.me X-Debbugs-Cc: debian-de...@lists.debian.org * Package name: releng-tool Version : 1.4.0 Upstream Contact: James Knight * URL : https://releng.io/ * License : BSD-2-Clause Programming Lang: Python Desc

Bug#1088849: ITP: golang-github-minio-cli -- Small package for building command line apps in Go

2024-12-01 Thread Mathias Gibbens
Package: wnpp Severity: wishlist Owner: Mathias Gibbens X-Debbugs-CC: debian-de...@lists.debian.org, debian...@lists.debian.org * Package name: golang-github-minio-cli Version : 1.24.2-1 Upstream Author : MinIO * URL : https://github.com/minio/cli * License : E

Bug#1078693: e2fsprogs: introduced a bootstrap dependency cycle with libarchive

2024-12-01 Thread Theodore Ts'o
On Thu, Sep 05, 2024 at 05:47:14AM +0200, Johannes Schauer Marin Rodrigues wrote: > it does not. Helmut discovered that my last patch breaks --without-libarchive. > If e2fsprogs builds fine even without archive.h present, then its existence > can > no longer be used to also carry the meaning of w

Bug#1088302: segfault during login if screensaver was on

2024-12-01 Thread James Landrito
I am encountering this behavior as well. Started around late October/early November. kernel: gnome-shell[4065]: segfault at 56196c45814f ip 7fab3a872170 sp 7fff38c59dc0 error 4 in libgio-2.0.so.0.8200.2[67170,7fab3a848000+11d000] likely on CPU 8 (core 2, socket 0) Processor: AMD Ryzen 5 5

Bug#709307: feature request, downgrading bug severity

2024-12-01 Thread Steven Robbins
On Mon, 1 Jul 2013 13:41:21 -0500 "Steve M. Robbins" wrote: > severity 709307 wishlist > thanks > > Hi, > > First, thanks for alerting me to the existance of xrdp! > > I confirmed the issue. You make a good point about showing a popup > instead of emitting a diagnostic on the command line. >

Bug#1088848: aspell-import.1: Some remarks and editorial changes for this man page

2024-12-01 Thread Bjarni Ingi Gislason
Package: aspell Version: 0.60.8.1-1+b2 Severity: minor Tags: patch * What led up to the situation? Checking for defects with test-[g|n]roff -mandoc -t -K utf8 -rF0 -rHY=0 -ww -b -z < "man page" [Use "groff -e ' $' " to find trailing spaces.] ["test-groff" is a script in the reposit

Bug#1079855: digikam: Malformed redirect_uri while using Google Photo importer plugin

2024-12-01 Thread Steven Robbins
On Wed, 28 Aug 2024 09:26:49 +0200 Patrick Zanon wrote: > Package: digikam > Version: 4:8.4.0-3 > Severity: normal > X-Debbugs-Cc: ne...@libero.it Unfortunately, I didn't see your report in time. Now Debian has 8.5.0 in the archive. I tried the Google Photo importer plugin and indeed it failed

Bug#972992: j4-dmenu-desktop: dmenu and i3-sensible-terminal missing

2024-12-01 Thread Otto Kekäläinen
A new version 3.2 has been uploaded to unstable. Could you please assist the maintainer by checking if this bug can still be reproduced with latest version?

Bug#1088847: php-dompdf: autopkgtest failure: missing extensions

2024-12-01 Thread Steve M. Robbins
Source: php-dompdf Version: 3.0.0+dfsg-2 Severity: important Sometime between November 14 and November 27, the autopkgtest began failing. The error message is: 44s autopkgtest [21:13:58]: test phpunit: [--- 45s phpab %development% - Copyright (C) 2009 - 2024 by Arne Blankerts

Bug#881467: git-buildpackage: gbp dch should filter out commits behind upstream-vcs-tag

2024-12-01 Thread Otto Kekäläinen
> > The changelog is easy to update to only include Debian changes with: > > > > gbp dch -- debian > > That's not needed as gbp-dch looks at the packaging branch so commits > from upstream vcs aren't included. Yes it is needed when gbp import-orig --uscan runs with gbp.conf:upstream-vcs-tag co

Bug#1088839: eye has an undeclared file conflict on /usr/bin/eye

2024-12-01 Thread Jonas Smedegaard
Quoting Helmut Grohne (2024-12-01 22:02:27) > Package: eye > Version: 1:10.30.11~ds-1 > Severity: serious > User: debian...@lists.debian.org > Usertags: fileconflict > Control: affects -1 + ruby-eye > > eye has an undeclared file conflict. This may result in an unpack error > from dpkg. Is it not

Bug#881467: git-buildpackage: gbp dch should filter out commits behind upstream-vcs-tag

2024-12-01 Thread Guido Günther
Hi, On Sun, Dec 01, 2024 at 01:49:12PM -0800, Otto Kekäläinen wrote: > The changelog is easy to update to only include Debian changes with: > > gbp dch -- debian That's not needed as gbp-dch looks at the packaging branch so commits from upstream vcs aren't included. Cheers, -- Guido > > M

Bug#1088846: aspell.1: Some remarks and editorial changes for this man page

2024-12-01 Thread Bjarni Ingi Gislason
Package: aspell Version: 0.60.8.1-1+b2 Severity: minor Tags: patch * What led up to the situation? Checking for defects with test-[g|n]roff -mandoc -t -K utf8 -rF0 -rHY=0 -ww -b -z < "man page" [Use "groff -e ' $' " to find trailing spaces.] ["test-groff" is a script in the reposit

Bug#1074180: transition: php8.4

2024-12-01 Thread Emilio Pozuelo Monfort
Control: tags -1 confirmed On 27/11/2024 14:14, Emilio Pozuelo Monfort wrote: No need to, and thanks for looking at them. Let's go ahead after imagemagick migrates (which is very close), or if that doesn't happen, I'll see if we can do this in parallel. imagemagick migrated. Let's go ahead wi

Bug#1055212: Still an open issue in Dec 2024

2024-12-01 Thread Linas Vepstas
This is still an open issue in Dec 2024, affecting multiple projects (and multiple distros: I'm going through the redhat, arch bug reports now, looking for a fix/patch or work-around.) For the "ceph dashboard" its a blocker: can't install the dashboard, full stop. Work-arounds include applying thi

Bug#839866: gbp import-orig and import-ref to verify git tags

2024-12-01 Thread Otto Kekäläinen
Hi, > > Additionally, there should be a new config option > > `upstream-git-signatures`, which if set would make the warnings errors > > and refuse to import if tag was not signed, or the key didn't match. > > +1 > > I think upstream tag signature verification failures should be an error, > not a

Bug#1088845: trustedqsl: new upstream release 2.7.5

2024-12-01 Thread tony mancill
Source: trustedqsl Version: 2.7.4-1 Severity: wishlist New upstream release 2.7.5 available. Creating a wishlist bug for coordination and to prevent duplication of effort.

Bug#980927: gbp import-orig and import-ref to verify git tags

2024-12-01 Thread Simon Josefsson
Otto Kekäläinen writes: > I wish that gbp import-ref and gbp import-orig *if* > gbp.conf:upstrem-vcs-tag would automatically attempt to run `git > verify-tag` and emit a warning if the upstream signature does not have > a signature, encouraging Debian maintainers to ask upstream to start > using

Bug#1088844: broadcom-sta-dkms 6.30.223.271-24 fails to compile with kernel 6.12.1

2024-12-01 Thread Juan Mendez
Package: broadcom-sta-dkms Version: 6.30.223.271-241 The package fails to compile with the new kernel 6.12.1 The fix is applying this patch: https://gist.github.com/vejeta/a44e792f37811f7f6e47445b03760d87 by copying it to: /usr/src/broadcom-sta-6.30.223.271/patches and adding the file name "broa

Bug#1084224: isenkram-cli: isenkram installs raspi-firmware on non-raspi i686 hardware leading to an error

2024-12-01 Thread Petter Reinholdtsen
[Christian Meyer] > Sorry, I don't know, how to apply your patch correctly and there has > been errors: Ah, sorry about that. It was related to my git repo, probably not identical to the version you had. > Anyway: > I applied your changes by hand and I can confirm both problems are > gone: Good

Bug#1088842: fails to initialize under lua-lpeg v1.1 - due to lpeg.version change

2024-12-01 Thread Asbjørn Sloth Tønnesen
Package: lua-json Version: 1.3.4-2 Severity: important X-Debbugs-Cc: pkg-lua-de...@lists.alioth.debian.org lua-lpeg was recently upgraded to v1.1, which broke lua-json in sid, since lpeg.version is now a string, not a function. Filing against lua-json, as this is already fixed upstream. https://

Bug#1088843: bookworm-pu: package proftpd-dfsg/1.3.8+dfsg-4+deb12u4

2024-12-01 Thread Hilmar Preusse
Package: release.debian.org Severity: important Tags: bookworm User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: proftpd-d...@packages.debian.org Control: affects -1 + src:proftpd-dfsg [ Reason ] The version currently in Debian stable suffers from a security issues rated quit

Bug#1088609: blueman: Recommend both audio back-ends

2024-12-01 Thread Christopher Schramm
I use Pulse-audio and installing the `libspa` package was the final step in getting Blue Tooth to work as-intended on my fresh setup. Installing that package had no other dependencies other than itself that weren't already installed I cannot see how that works. All that libspa-0.2-bluetooth do

Bug#1087632: (No Subject)

2024-12-01 Thread P9jgW4773EY
Could be duplicate of: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1088617 @Ole Langbehn could you check out the content of ~/.local/share/mime/? Removing everything besides ~/.local/share/mime/packages fixed it for me, see the bug report linked above.

Bug#1078858: w1retap: Correct Appstream metainfo, drop desktop type

2024-12-01 Thread Thomas Stewart
On 01 Dec 2024, at 21:11, Petter Reinholdtsen wrote: > Please let me know if there anything I can do to help get this fix into > Debian. Apologies I've let this slip, I'll have a look next week. Kind Regards Tom

Bug#881467: git-buildpackage: gbp dch should filter out commits behind upstream-vcs-tag

2024-12-01 Thread Otto Kekäläinen
The changelog is easy to update to only include Debian changes with: gbp dch -- debian Maybe gbp dch could have this automatically if debian/source/format `3.0 (quilt)`? For context, I have this workflow for all my packages: git fetch --verbose upstreamvcs # Note latest tag, e.g. r3

Bug#844397: Please add option to gbp-dch to create a signed tag for the --commit result

2024-12-01 Thread Otto Kekäläinen
Isn't this feature already implemented? I have in gbp.conf the line `sign-tags = True` and after each upload I just run these commands that does the tagging and signing automatically: gbp tag --verbose gbp push --verbose

Bug#980927: gbp import-orig and import-ref to verify git tags

2024-12-01 Thread Otto Kekäläinen
CC: to Simon who has special interest in supply-chain security This is a comment to both Bug#839866 import-orig: please make --upstream-vcs-tag=... verify tag signatures Bug#980927 import-ref: Check tag signatures The function to verify git tags is already in https://salsa.debian.org/agx/git-buil

Bug#1088840: RFP: efifs -- EFI File System Drivers

2024-12-01 Thread Roman Lebedev
Package: wnpp Severity: wishlist X-Debbugs-Cc: systemd Maintainers , Tianon Gravi , Pete Batard -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 * Package name: efifs Version : 1.11 Upstream Contact: Pete Batard * URL : https://github.com/pbatard/EfiFs * License

Bug#1088841: RM: bismuth -- ROM; Abandoned upstream

2024-12-01 Thread Aurélien COUDERC
Package: ftp.debian.org Severity: normal X-Debbugs-Cc: bism...@packages.debian.org, Debian Qt/KDE Maintainers Control: affects -1 + src:bismuth User: ftp.debian@packages.debian.org Usertags: remove Dear FTP Masters Team, bismuth depends on Plasma 5’s kwin and has neither been ported to Plas

Bug#1088617: (No Subject)

2024-12-01 Thread P9jgW4773EY
I tried to reproduce the bug on a fresh Debian 12.8 install and failed. There were some 21 files/folders on my system in ~/.local/share/mime/ compared to a Debian 12.8 fresh install. They mostly resembled those in /usr/share/mime/. I don't know which script/program placed them wrongly in ~/.loc

Bug#1079941: bookworm-pu: package dnsmasq/2.90-4~deb12u1

2024-12-01 Thread Lee Garrett
Hi, these three CVEs are now fixed in buster and bullseye. This means users who upgrade to bookworm will be vulnerable to those issues again. Can we get a decision from the release team on this bug? Is there any information missing to make a decision? Kind regards, Lee On Wed, 28 Aug 2024

Bug#1087384: [Pkg-nagios-devel] Bug#1087384: CVE-2024-49369: Security: fix TLS certificate validation bypass.

2024-12-01 Thread Lorenz
Hi, Sorry to be annoying here, but I just discovered that the stable version ist still vulnerable. On Fri, 15 Nov 2024 05:12:08 +0100 Sebastiaan Couwenberg wrote: On 11/14/24 9:05 PM, Louis-Philippe Véronneau wrote: > I think this bug should be reopen and a security upload should be made ASA

Bug#1088839: eye has an undeclared file conflict on /usr/bin/eye

2024-12-01 Thread Helmut Grohne
Package: eye Version: 1:10.30.11~ds-1 Severity: serious User: debian...@lists.debian.org Usertags: fileconflict Control: affects -1 + ruby-eye eye has an undeclared file conflict. This may result in an unpack error from dpkg. The file /usr/bin/eye is contained in the packages * eye/1:10.30.11~ds

Bug#1040417: Any news

2024-12-01 Thread martin f krafft
Any news on this? More and more compose files are not usable with Debian's d-c version. Thanks, -- .''`. martin f. krafft : :' : proud Debian developer `. `'` http://people.debian.org/~madduck `- Debian - when you have better things to do than fixing systems

Bug#1088838: fuse2fs: ineffective Replaces due to /usr-move (DEP17 P1)

2024-12-01 Thread Helmut Grohne
Package: fuse2fs Version: 1.47.2~rc1-1 Severity: serious Tags: patch Control: affects -1 + fuseext2 Control: tags 1078693 + patch Hi Ted, I see that you are restructuring e2fsprogs and are taking over fuseext2 from uml. That's a good thing, but it unfortunately comes with /usr-move implications a

Bug#1078858: w1retap: Correct Appstream metainfo, drop desktop type

2024-12-01 Thread Petter Reinholdtsen
Please let me know if there anything I can do to help get this fix into Debian. -- Happy hacking Petter Reinholdtsen

Bug#1088837: starpu-contrib: rebuild against libopenmpi40

2024-12-01 Thread Emilio Pozuelo Monfort
Source: starpu-contrib Version: 1.4.5+dfsg-2 Severity: serious Hi, Please rebuild starpu-contrib for the ongoing openmpi transition. Cheers, Emilio

Bug#1088836: sbuild copies copies ELF executables into the chroot and expects them to work

2024-12-01 Thread Johannes Schauer Marin Rodrigues
Package: sbuild Version: 0.87.1 Severity: important Quoting Helmut Grohne (2024-12-01 21:03:00) > > However, I am unable to use sbuild: > > > > gbp buildpackage --git-builder=sbuild --arch-any --no-arch-all > > --no-clean-source --dist=bookworm --host=arm64 > > > > Ultimately, this runs: > > >

Bug#989208: atril: Segfault

2024-12-01 Thread Fabien Millioz
Package: atril Followup-For: Bug #989208 Dear Maintainer, Atril doesn't segfault anymore. I noticed that I have now a dconf-service process run as user: [user] 1590148 0.0 0.0 156452 5396 ?Ssl 09:56 0:00 /usr/libexec/dconf-service I am not sure when and why it appeared, but w

Bug#1088044: xawtv: FTBFS: error: passing argument 2 of ‘XawListChange’ from incompatible pointer type [-Wincompatible-pointer-types]

2024-12-01 Thread Jeremy Sowden
On 2024-12-01, at 22:36:07 +0800, Bo YU wrote: > Control: tags -1 patch > > Hi, > > On Fri, Nov 22, 2024 at 02:05:53PM +0100, Santiago Vila wrote: > ... > > x11/propwatch.c: In function ‘RebuildList’: > > x11/propwatch.c:319:43: error: passing argument 2 of ‘XawListChange’ from > > incompatible

Bug#1082547: Fixes in 24.08.1

2024-12-01 Thread Aurélien COUDERC
control: fixed -1 4:24.08.1-1

Bug#1079532: haproxy FTCBFS: multiple reasons

2024-12-01 Thread Vincent Bernat
On 2024-12-01 21:03, Helmut Grohne wrote: The following packages have unmet dependencies: builddeps:/build/haproxy_3.0.5-2.dsc:arm64 : Depends: python3-sphinx:amd64 Depends: python3:arm64 but it is not going to be installed

Bug#1088835: gammu-smsd: Add "kalkun" to Suggests for gammu-smsd

2024-12-01 Thread Fab Stz
Package: gammu-smsd Version: 1.42.0-8 Severity: normal Dear Maintainer, Now that kalkun is in Debian, would you please consider adding "kalkun" to "Suggests" for gammu-smsd in d/control? kalkun is a web based sms manager that makes use of the database that is set- up for gammu-smsd https://trac

Bug#1067251: rust-isahc: isahc FTBFS with polling 3 in experimental

2024-12-01 Thread Ananthu C V
Package: rust-isahc Version: 1.7.2+ds-29 Followup-For: Bug #1067251 Control: reopen = Control: tags -1 ftbfs Control: tags -1 + experimental Control: tags -1 + patch Dear Maintainer, This bug was closed as rust-isahc was removed from the archive, but now that rust-isahc is in experimental again,

Bug#1084025: reverse dependency

2024-12-01 Thread Daniel Swarbrick
Hi Thorsten, Would it be sufficient if I add a "Provides: golang-procfs-dev" to the current golang-github-prometheus-procfs-dev package? The transitional package did not contain anything fancy like symlinks, since the Go import path did not change. As such, a virtual package should allow the

Bug#1078034: python3-urllib3: please mark it with m-a: foreign

2024-12-01 Thread Michael Tokarev
01.12.2024 22:32, Helmut Grohne wrote: Hi Alexandre, Sorry for having missed this earlier and thanks to Stefano for poking me. On Wed, Aug 14, 2024 at 01:59:54PM +0200, Alexandre Detiste wrote: Can you confirm ? I do confirm that it is sensible and useful to mark python3-urllib3 M-A:foreign.

Bug#1079532: haproxy FTCBFS: multiple reasons

2024-12-01 Thread Helmut Grohne
Hi Vincent, On Sun, Dec 01, 2024 at 07:12:26PM +0100, Vincent Bernat wrote: > On 2024-09-22 20:18, Helmut Grohne wrote: > > > > The following packages have unmet dependencies: > > > builddeps:/build/haproxy_3.0.5-2.dsc:arm64 : Depends: > > > python3-sphinx:amd64 > > >

  1   2   3   >