Bug#1091712: ITS: kdc2tiff

2024-12-29 Thread Andreas Tille
Source: kdc2tiff Version: 0.35-10.2 Severity: important X-Debbugs-Cc: 697...@bugs.debian.org, 748...@bugs.debian.org, Martin Wuertele , Debian PhotoTools Maintainers , Package Salvaging Team Hi I'm interested in salvaging your package kdc2tiff, in accordance with the Package Salvaging procedu

Bug#1091699: systemd[1]: sysinit.target: Found ordering cycle on wtmpdb-update-boot.service/start

2024-12-29 Thread Sven Joachim
Control: severity -1 serious On 2024-12-30 10:56 +0900, Ryutaroh Matsumoto wrote: > Package: wtmpdb > Version: 0.13.0-2 > Severity: important > > Dear Maintainer, > > A new bug seems being introduced in version 0.13.0-2. > Now wtmpdb-update-boot.service is refused by systemd as > > Dec 30 10:37:4

Bug#1086845: transition: gdal

2024-12-29 Thread Sebastiaan Couwenberg
On 12/29/24 6:26 PM, Sebastiaan Couwenberg wrote: On 12/29/24 10:45 AM, Emilio Pozuelo Monfort wrote: On 28/12/2024 09:57, Sebastiaan Couwenberg wrote: On 11/7/24 10:57 AM, Emilio Pozuelo Monfort wrote: This is in a very good state, but I think we want to finish openmpi before acking this.

Bug#1089105: Broken chroot after an upgrade

2024-12-29 Thread Johannes Schauer Marin Rodrigues
Hi, Quoting Johannes Schauer Marin Rodrigues (2024-12-25 08:06:13) > Quoting Julien Puydt (2024-12-05 17:17:14) > > I updated my chroot two hours ago ; then I couldn't use it anymore, so I > > tried to update it again : > > > > $ sbuild-update --chroot-mode=unshare --update --dist-upgrade -- > >

Bug#1089035: unshare doesn't use the existing tarball when guesing from UNRELEASED/experimental

2024-12-29 Thread Johannes Schauer Marin Rodrigues
Hi, Quoting Johannes Schauer Marin Rodrigues (2024-12-30 07:51:28) > > The build works, so it's not *that* bad, considering how fast mmdebstrap > > is, but it would sure be nice to skip that step entirely. > > so this is just a wishlist feature. I think it's a nice wishlist feature and I > think

Bug#1090393: RM: paraview [ppc64el] -- ROM; FTBFS

2024-12-29 Thread Sebastiaan Couwenberg
Control: tags -1 - moreinfo On Fri, 27 Dec 2024 22:33:11 -0500 "Paul R. Tagliamonte" wrote: facet-analyser will need to exclude s390x before i can continue with this removal. once that relationship is resolved, please remove the moreinfo tag and this can go forward facet-analyser is hopelessl

Bug#1091711: RM: facet-analyser -- RoQA; RC-buggy, hinders other packages

2024-12-29 Thread Bas Couwenberg
Package: ftp.debian.org Severity: normal X-Debbugs-Cc: facet-analy...@packages.debian.org Control: affects -1 + src:facet-analyser User: ftp.debian@packages.debian.org Usertags: remove facet-analyser is broken for a very long time, see: #1040334. It should be removed from unstable to not hind

Bug#1089035: unshare doesn't use the existing tarball when guesing from UNRELEASED/experimental

2024-12-29 Thread Johannes Schauer Marin Rodrigues
Hi, Quoting Antoine Beaupré (2024-12-29 16:44:41) > On 2024-12-23 07:49:57, Johannes Schauer Marin Rodrigues wrote: > > If this variable were to be re-used then somebody who intends to build for > > bookworm-backports would have a chroot for just bookworm, without backports > > extracted. That is

Bug#1091709: msttcorefonts: Update/add debconf template translation [INTL:ca]

2024-12-29 Thread Carles Pina i Estany
Subject: msttcorefonts: Update/add debconf template translation [INTL:ca] Package: msttcorefonts Version: 3.8.1 Severity: wishlist Tags: l10n patch Dear Maintainer, There is a merge request to add or update the Catalan translation for the debconf template in: https://salsa.debian.org/debian/mstt

Bug#1091710: nbd: Update/add debconf template translation [INTL:ca]

2024-12-29 Thread Carles Pina i Estany
Subject: nbd: Update/add debconf template translation [INTL:ca] Package: nbd Version: 1:3.26.1-6 Severity: wishlist Tags: l10n patch Dear Maintainer, There is a merge request to add or update the Catalan translation for the debconf template in: https://salsa.debian.org/wouter/nbd/-/merge_requests

Bug#1091707: libguestfs: Update/add debconf template translation [INTL:ca]

2024-12-29 Thread Carles Pina i Estany
Subject: libguestfs: Update/add debconf template translation [INTL:ca] Package: libguestfs Version: 1:1.52.2-7 Severity: wishlist Tags: l10n patch Dear Maintainer, There is a merge request to add or update the Catalan translation for the debconf template in: https://salsa.debian.org/libvirt-team

Bug#1091708: linux-base: Update/add debconf template translation [INTL:ca]

2024-12-29 Thread Carles Pina i Estany
Subject: linux-base: Update/add debconf template translation [INTL:ca] Package: linux-base Version: 4.10.1 Severity: wishlist Tags: l10n patch Dear Maintainer, There is a merge request to add or update the Catalan translation for the debconf template in: https://salsa.debian.org/kernel-team/linu

Bug#1091706: grub2: Update/add debconf template translation [INTL:ca]

2024-12-29 Thread Carles Pina i Estany
Subject: grub2: Update/add debconf template translation [INTL:ca] Package: grub2 Version: 2.12-5 Severity: wishlist Tags: l10n patch Dear Maintainer, There is a merge request to add or update the Catalan translation for the debconf template in: https://salsa.debian.org/grub-team/grub/-/merge_req

Bug#1091705: glibc: Update/add debconf template translation [INTL:ca]

2024-12-29 Thread Carles Pina i Estany
Subject: glibc: Update/add debconf template translation [INTL:ca] Package: glibc Version: 2.40-4 Severity: wishlist Tags: l10n patch Dear Maintainer, There is a merge request to add or update the Catalan translation for the debconf template in: https://salsa.debian.org/glibc-team/glibc/-/merge_r

Bug#1091704: dbconfig-common: Update/add debconf template translation [INTL:ca]

2024-12-29 Thread Carles Pina i Estany
Subject: dbconfig-common: Update/add debconf template translation [INTL:ca] Package: dbconfig-common Version: 2.0.24 Severity: wishlist Tags: l10n patch Dear Maintainer, There is a merge request to add or update the Catalan translation for the debconf template in: https://salsa.debian.org/debian

Bug#1091703: atftp: Update/add debconf template translation [INTL:ca]

2024-12-29 Thread Carles Pina i Estany
Subject: atftp: Update/add debconf template translation [INTL:ca] Package: atftp Version: 0.8.0-5 Severity: wishlist Tags: l10n patch Dear Maintainer, There is a merge request to add or update the Catalan translation for the debconf template in: https://salsa.debian.org/debian/atftp/-/merge_requ

Bug#1077531: ITP: prometheus-phpfpm-exporter -- Prometheus exporter for PHP-FPM.

2024-12-29 Thread Otto Kekäläinen
Package has now landed in NEW queue: https://ftp-master.debian.org/new/prometheus-phpfpm-exporter_0.6.0-1.html Yay! Thanks Nicolas for your work to help Debian!

Bug#1091671: liboprf: unconditionally sets FORTIFY_SOURCE=2 flag

2024-12-29 Thread Joost van Baal-Ilić
Hi again Gianfranco, On Sun, Dec 29, 2024 at 03:28:03PM +0100, Joost van Baal-Ilić wrote: > On Sun, Dec 29, 2024 at 03:12:34PM +0100, Gianfranco Costamagna wrote: > > > > Hello, looks like the code is setting FORTIFY_SOURCE=2 directly from > > makefile, not allowing to override it from outside.

Bug#1091169: sbuild unshare mode unhappy about symlink'd tarballs

2024-12-29 Thread Johannes Schauer Marin Rodrigues
Hi, Quoting Antoine Beaupré (2024-12-29 16:52:26) > > This also reminds me of #1089105 which comes down to zstd not accepting > > compressed data on stdin and writing the uncompressed result to stdout > > without also passing --force. Seems entirely unintuitive to me... > > Is it worth filing thi

Bug#1088109: [ftpmas...@ftp-master.debian.org: Accepted python-aiohttp 3.10.11-1 (source) into unstable]

2024-12-29 Thread Salvatore Bonaccorso
Source: python-aiohttp Source-Version: 3.10.11-1 - Forwarded message from Debian FTP Masters - -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 30 Dec 2024 00:23:32 + Source: python-aiohttp Architecture: source Version: 3.10.11-1 Distribution: unstable Urgency

Bug#1082157: I am also affected by this bug

2024-12-29 Thread Luke Farris
Hi, just like to chime in that I'm also affected by this bug. I upgraded from Bookworm to Sid about a week ago, and virtualbox stopped working after that point. I re-installed virtualbox through the package in Sid instead of through Oracle's deb repo, and it still doesn't work. the error I have is

Bug#1091702: grml-rescueboot: Does no more download the most recent ISO image

2024-12-29 Thread Axel Beckert
Package: grml-rescueboot Version: 0.6.2 Severity: important Dear Maintainer, * What led up to the situation? Calling update-grml-rescueboot downloads version 2024.02. * What exactly did you do (or not do) that was effective (or ineffective)? # update-grml-rescueboot -t small Finding out latest

Bug#1091701: debconf: bad error about unable to write templates.dat-new when there is no data to write

2024-12-29 Thread Russell Coker
Package: debconf Version: 1.5.89 Severity: normal I am writing SE Linux policy for the needrestart utility which runs the debconf frontend program. When it runs I see the following error message: debconf: DbDriver "templatedb": could not write /var/cache/debconf/templates.dat-new: Permission den

Bug#1024257: btrfs-progs: Backup fails with "multiple capabilities" at first, then "capability no data available"

2024-12-29 Thread Nicholas D Steeves
Leszek Dubiel writes: >> 1. Are you piping the send stream to another system, and receiving it >> there? > > Yes. > > This is something like this: > > > ssh other-server  'btrfs send -p /mnt/snaps/parent-subvol > subvol-to-send'  | btrfs receive /mnt/my-backups/ > Thanks. I was unable to repro

Bug#1091700: khangman: conffiles not removed: /etc/xdg/khangman.knsrc

2024-12-29 Thread Paul Wise
Package: khangman Version: 4:24.12.0-1 Severity: normal User: debian...@lists.debian.org Usertags: obsolete-conffile adequate The recent upgrade did not deal with obsolete conffiles properly. Please use the dpkg-maintscript-helper support provided by dh_installdeb to remove these obsolete conffile

Bug#1091698: imagemagick-7.q16: Hide desktop icon by default - Not really fitting on modern desktops

2024-12-29 Thread Phil Wyett
Package: imagemagick-7.q16 Severity: wishlist Dear maintainer(s), Hide (NoDisplay=true) desktop icon by default - Not really fitting on modern desktops. UI is old and low chance of general use by standard users. Regards Phil -- Donations... Buy Me A Coffee: https://buymeacoffee.com/kathenas

Bug#1050486: #1050486 loong64 patch for netw-ib-ox-ag

2024-12-29 Thread wuruilong
On Fri, 27 Dec 2024 10:59:40 +0100 John Paul Adrian Glaubitz wrote: > Hello, > > On Fri, 2024-12-27 at 11:02 +0800, xiao sheng wen(肖盛文) wrote: > > Hi, > > > > #1050486 loong64 patch for netw-ib-ox-ag [1]: > > > > --- netw-ib-ox-ag-5.39.0.orig/src/netwib-src/src/genemake > > +++ netw-ib-ox-ag-5.39.

Bug#1091699: systemd[1]: sysinit.target: Found ordering cycle on wtmpdb-update-boot.service/start

2024-12-29 Thread Ryutaroh Matsumoto
Package: wtmpdb Version: 0.13.0-2 Severity: important Dear Maintainer, A new bug seems being introduced in version 0.13.0-2. Now wtmpdb-update-boot.service is refused by systemd as Dec 30 10:37:48 raspi4b-router2 systemd[1]: sysinit.target: Found ordering cycle on wtmpdb-update-boot.service/sta

Bug#1091697: par.1: Some remarks and a patch with editorial changes for this man page

2024-12-29 Thread Bjarni Ingi Gislason
Package: par Version: 1.53.0-2 Severity: minor Tags: patch * What led up to the situation? Checking for defects with a new version test-[g|n]roff -mandoc -t -K utf8 -rF0 -rHY=0 -rCHECKSTYLE=10 -ww -z < "man page" [Use "groff -e ' $' " to find trailing spaces.] ["test-groff" is a s

Bug#1091696: linux-image-6.12.6-amd64: linux 6.12.6 (Trixie) fails to reboot (SATA SSD not seen by bios)

2024-12-29 Thread Eric Degenetais
Package: src:linux Version: 6.12.6-1 Severity: normal Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? I decided to give Trixie a try, to see how well it worked on my computer at this stage. After installing Trixi

Bug#1091695: kturtle: conffiles not removed: /etc/xdg/kturtle.knsrc

2024-12-29 Thread Paul Wise
Package: kturtle Version: 4:24.12.0-1 Severity: normal User: debian...@lists.debian.org Usertags: obsolete-conffile adequate The recent upgrade did not deal with obsolete conffiles properly. Please use the dpkg-maintscript-helper support provided by dh_installdeb to remove these obsolete conffiles

Bug#1091694: Memory leak in libsasl2-modules DIGEST-MD5 module

2024-12-29 Thread Greg Hudson
Package: libsasl2-modules Version: 2.1.28+dfsg-10 The Debian patch 0029-Load-OpenSSL3-legacy-provider-digestmd5.patch introduces a memory leak into plugins/digestmd5.c:init_rc4(). It adds a call to: cipher = EVP_CIPHER_fetch(ossl3_ctx->libctx, "RC4", ""); but does not free the result wi

Bug#1089609: qt6-svg-plugins

2024-12-29 Thread banjo . 70
On Wed, 25 Dec 2024 16:42:13 +1100 Russell Coker wrote: > Installing qt6-svg-plugins fixed it for me too. > > -- > My Main Blog http://etbe.coker.com.au/ > My Documents Blog    http://doc.coker.com.au/ > > > > > I've got this bug too. Same fix. We obviously need this package as dep

Bug#1091693: 7zip: 7z defaults to archiving files in current directory

2024-12-29 Thread unlikely . ally
Package: 7zip Version: 24.09+dfsg-2 Severity: grave Dear Maintainer, The 7z program in the "7zip" package has a dangerous default behavior. When only one file name argument is given, 7z uses that file as the archive name and starts archiving the files and directories in the current working direct

Bug#1090997: debbugsconfig depends on /usr/share/doc/debbugs/

2024-12-29 Thread Bill Allombert
On Sun, Dec 29, 2024 at 07:49:24PM +0100, Bill Allombert wrote: > Hello Don, > Do you have a preference how to fix this bug ? I join a minimal patch that fixes this. Cheers, -- Bill. Imagine a large red swirl here. diff --git a/Makefile b/Makefile index 93ed796..5cb29cf 100644 --- a/Makefil

Bug#1091675: RFS: uacme/1.7.6-1 -- Lightweight client for the RFC8555 ACMEv2 protocol

2024-12-29 Thread Phil Wyett
Control: tags -1 +moreinfo Nicola, Preamble... Thank you for taking the time to prepare this package and your contribution to the Debian project. This review is offered to help package submitters to Debian mentors inorder to improve their packages prior to possible sponsorship into Debian. Ther

Bug#1090223: closed by Debian FTP Masters (reply to Elena Grandi ) (Bug#1090223: fixed in fpdf2 2.8.2-1)

2024-12-29 Thread Colin Watson
Control: reopen -1 On Mon, Dec 23, 2024 at 01:06:02PM +, Debian Bug Tracking System wrote: > fpdf2 (2.8.2-1) unstable; urgency=medium > . >* New upstream release. (Closes: #1090223) Hi, This still fails to build on the buildds, with what looks like the same test failure: https://bu

Bug#1081553: transition: abseil

2024-12-29 Thread Benjamin Barenblat
On Saturday, December 28, 2024, at 1:27 PM +0100, Sebastian Ramacher wrote: > Were the test rebuilds for llvm-toolchain-* successful? I haven’t tried rebuilding yet. I’ll see if I can get to it this week. Benjamin

Bug#1088784: libqqwing2v5: ABI break causes gnome-sudoku to crash after setting difficulty

2024-12-29 Thread Simon McVittie
On Sun, 29 Dec 2024 at 22:38:18 +0100, Andreas Tille wrote: > Am Sun, Dec 29, 2024 at 09:17:11PM + schrieb Simon McVittie: > > I'm pretty sure the ABI break #1088784 should continue to be RC: it's a > > Policy §8.1 violation which makes the dependent package gnome-sudoku > > crash, when it is u

Bug#1091692: jpeg-xl FTBFS on hppa

2024-12-29 Thread Helge Deller
Package: jpeg-xl Version: 0.10.4-2 Tags: ftbfs patch Usertags: hppa jpeg-xl fails to build on hppa, partly because the current timeout (6 or 10 hours?) is too short for the platform. We have various fast and slow buildds on hppa. Using "time" to measure the used time for the testsuite gave: rea

Bug#1076993: qhimdtransfer: Add Appstream metainfo announcing HW support

2024-12-29 Thread Petter Reinholdtsen
Dear John Paul Adrian Glaubitz, Is there any hope to have a package included in Debian with Appstream metadata XML announcing HW support any time soon? Anything more I can do to help make it happen? -- Happy hacking Petter Reinholdtsen

Bug#1090994: kf6-breeze-icon-theme: Majority of icons are not visible

2024-12-29 Thread Gilles Mocellin
Package: kf6-breeze-icon-theme Followup-For: Bug #1090994 A post in the Debian user mailing list, from Christopher Andrews shows that the problem is not on kf6-breeze-icon-theme but lack of qt6-svg-plugins package. -- System Information: Debian Release: trixie/sid APT prefers unstable APT po

Bug#1024257: btrfs-progs: Backup fails with "multiple capabilities" at first, then "capability no data available"

2024-12-29 Thread Leszek Dubiel
1. Are you piping the send stream to another system, and receiving it there? Yes. This is something like this: ssh other-server  'btrfs send -p /mnt/snaps/parent-subvol subvol-to-send'  | btrfs receive /mnt/my-backups/ 2. What is special about ZK_83308/Documents/fk-2228.jpg ? Apparm

Bug#1088784: libqqwing2v5: ABI break causes gnome-sudoku to crash after setting difficulty

2024-12-29 Thread Andreas Tille
Hi Simon, Am Sun, Dec 29, 2024 at 09:17:11PM + schrieb Simon McVittie: > On Sun, 29 Dec 2024 at 21:42:04 +0100, Andreas Tille wrote: > > Reopened bug 1013230 > > Reopening failed because the bug was closed long ago to be archived, but > I've unarchived and reopened it now (hopefully that will

Bug#1091691: ksystemstats: KDE Sensor plasmoid does not register any data from GPU

2024-12-29 Thread vajdao
Package: ksystemstats Version: 5.27.5-2 Severity: normal X-Debbugs-Cc: moaja2...@mozmail.com Dear Maintainer, Seems I'm facing this issue with my Nvidia card, 535 proprietary drivers, where the Plasma's sensors does not successfully query/register any data coming from GPU (temps, frequency etc..)

Bug#1061480: debconf should automatically be noninteractive if input is /dev/null

2024-12-29 Thread Josh Triplett
Colin Watson wrote: > Sorry for my long delay in replying to this. No problem; thank you for the response! > On Mon, Sep 30, 2024 at 02:47:53PM -0700, Josh Triplett wrote: >> I've written a draft patch for this, at >> https://salsa.debian.org/pkg-debconf/debconf/-/merge_requests/18 . I've >> also

Bug#1091690: Acknowledgement (dclock: the -DXFT_SUPPORT compile flag missing from build)

2024-12-29 Thread Paul Fox
I just bisected the builds since patch 03 was applied. Build 2.2.2-8 was the first build which did NOT support the -fontname option. paul

Bug#1088784: libqqwing2v5: ABI break causes gnome-sudoku to crash after setting difficulty

2024-12-29 Thread Simon McVittie
On Sun, 29 Dec 2024 at 21:42:04 +0100, Andreas Tille wrote: > Reopened bug 1013230 Reopening failed because the bug was closed long ago to be archived, but I've unarchived and reopened it now (hopefully that will work). > and not closing 1088784 but setting it to severity > normal since it should

Bug#1037457: bluetooth: Bluetooth does not work, command 0x2005 tx timeout

2024-12-29 Thread Wolf-Dieter Groll
Probably the same problem for me on a Lenovo X1 Carbon (with BCM20702A). There were no problems under Debian 11, since the update to Debian 12 Bluetooth no longer works. Output from dmesg | grep -i bluet [    6.593789] Bluetooth: HCI socket layer initialized [    6.593792] Bluetooth: L2CAP socke

Bug#1088784: libqqwing2v5: ABI break causes gnome-sudoku to crash after setting difficulty

2024-12-29 Thread Andreas Tille
Control: severity 1088784 normal Control: reopen 1013230 Control: tags 1013230 - patch Thanks Am Fri, Dec 27, 2024 at 07:03:01PM + schrieb Simon McVittie: > > I think that particular patch should not have been applied as a > Debian-specific change, and especially not during a "salvaging" > pr

Bug#1091690: dclock: the -DXFT_SUPPORT compile flag missing from build

2024-12-29 Thread Paul Fox
Package: dclock Version: 2.2.2-14 Severity: normal Based on information I found at the original upstream site for dclock: http://opencircuitdesign.com/~tim/programs/dclock/index.html I was trying to use a "modern" font with dclock, by passing the -fontName option, which lets you, for instance

Bug#1024257: btrfs-progs: Backup fails with "multiple capabilities" at first, then "capability no data available"

2024-12-29 Thread Nicholas D Steeves
Control: forwarded -1 https://github.com/kdave/btrfs-progs/issues/613 Leszek Dubiel writes: >>> I have moved to Debian version 12, >>> errors still presisted. >>> >>> I have filed a bug on btrfs github. >>> >> Please share the URL and/or set the forwarded tag to it? > > https://github.com/kdave/

Bug#1091679: apt: change of behaviour re. signed repos and .../trusted.gpg.d/

2024-12-29 Thread Julian Andres Klode
On Sun, Dec 29, 2024 at 08:06:19PM +0100, Philip Hands wrote: > Package: apt > Version: 2.9.19 > Severity: minor > > Dear Maintainer, > > There has been a change of behaviour regarding how the trusted.gpg.d directory > gets dealt with since 2.9.19 when a non-standard Dir is configured. > > I hav

Bug#1090324: please upgrade to v0.15

2024-12-29 Thread Peter Michael Green
> Please upgrade or separately provide newer branch v0.15. Preliminary analysis Quite a few removals listed in the upstream changelog, not clear how widely used the removed APIs were though. In terms of the upstream state of the rdeps, 0.14 still seems significantly more prevalent than 0.15.

Bug#1091677: Regression: Crash when closing certain tabs

2024-12-29 Thread Andres Salomon
On 12/29/24 14:49, Miroslav R. wrote: Thanks for letting me know. That version hasn't made it to testing yet, but I can confirm installing it from unstable fixes the crash. However, I noticed that the solution was to provide a custom optional header with the assert commented out. I just want

Bug#1091689: tcpdf: CVE-2024-56527

2024-12-29 Thread Salvatore Bonaccorso
Source: tcpdf Version: 6.7.7+dfsg-1 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for tcpdf. CVE-2024-56527[0]: | An issue was discovered in TCPDF before 6.8.0. The Error function | lacks an htmlsp

Bug#1091686: tcpdf: CVE-2024-56520

2024-12-29 Thread Salvatore Bonaccorso
Source: tcpdf Version: 6.7.7+dfsg-1 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for tcpdf. CVE-2024-56520[0]: | An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in | TCPDF before

Bug#1091687: tcpdf: CVE-2024-56521

2024-12-29 Thread Salvatore Bonaccorso
Source: tcpdf Version: 6.7.7+dfsg-1 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for tcpdf. CVE-2024-56521[0]: | An issue was discovered in TCPDF before 6.8.0. If libcurl is used, | CURLOPT_SSL_VE

Bug#1091688: tcpdf: CVE-2024-56522

2024-12-29 Thread Salvatore Bonaccorso
Source: tcpdf Version: 6.7.7+dfsg-1 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for tcpdf. CVE-2024-56522[0]: | An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag | uses != (aka l

Bug#1091685: tcpdf: CVE-2024-56519

2024-12-29 Thread Salvatore Bonaccorso
Source: tcpdf Version: 6.7.7+dfsg-1 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for tcpdf. CVE-2024-56519[0]: | An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not | sanitize the

Bug#1091684: RM: python3-flask-silk -- ROM; No longer required, no longer maintained

2024-12-29 Thread Jonathan Carter
Package: ftp.debian.org Severity: normal X-Debbugs-Cc: flask-s...@packages.debian.org Control: affects -1 + src:flask-silk User: ftp.debian@packages.debian.org Usertags: remove Dear FTP Master team Please remove python3-flask-silk. It was originally packaged since it's a dependency for python

Bug#1091666: moreinfo needed

2024-12-29 Thread Paul Tagliamonte
tags 1091666 moreinfo thanks removal of this package breaks the following relations: # Broken Depends: kile: kile meta-kde: kde-standard kdegraphics meta-plasma-mobile: plasma-mobile-full # Broken Build-Depends: calligra: okular-dev (4:17.08 >=) kile: okular-dev (4:17.08~ >=) please

Bug#1091653: moreinfo needed

2024-12-29 Thread Paul Tagliamonte
tags 1091653 moreinfo thanks removal of this package breaks other packages on that arch: # Broken Depends: meta-kde: kde-standard kde-standard is arch:any not arch:all; you may need to adjust the depends or drop the arch there first. once that relation is sorted, please remove the moreinfo tag a

Bug#1089685: whoops

2024-12-29 Thread Paul Tagliamonte
tags 1089685 -moreinfo thanks that package is arch:all, my mistake, going to process this -- ⢀⣴⠾⠻⢶⣦⠀ Paul Tagliamonte ⣾⠁⢠⠒⠀⣿⡁ https://people.debian.org/~paultag | https://pault.ag/ ⢿⡄⠘⠷⠚⠋Debian, the universal operating system. ⠈⠳⣄⠀⠀ 4096R / FEF2 EB20 16E6 A856 B9

Bug#1091683: spamassassin: Multiple warnings "Use of uninitialized value $_"

2024-12-29 Thread Timo van Roermund
Package: spamassassin Version: 4.0.1-2 Severity: normal Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** Since recently, I see the following messages in the syslog: Use of uninitialized value $_ in pattern match (m//) at /usr/share/perl5/Mail/Spam

Bug#1091682: bookworm-pu: package debootstrap/1.0.128+nmu2+deb12u2

2024-12-29 Thread Luca Boccassi
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu Dear Release Team, We would like to remove the legacy usr-is-merged/usrmerge packages from testing/unstable, but debootstrap in bookworm still pulls usr-is-merged in manually and

Bug#1091210: moreinfo needed

2024-12-29 Thread Paul Tagliamonte
tags 1091210 moreinfo thanks removing this package breaks `cinder`. That package will have to point to the new one, then I can process this removal. # Broken Depends: cinder: python3-cinder thanks for your work, paultag -- ⢀⣴⠾⠻⢶⣦⠀ Paul Tagliamonte ⣾⠁⢠⠒⠀⣿⡁ https://people.

Bug#1091680: monopd: update d/watch file

2024-12-29 Thread Patrice Duroux
Source: monopd Version: 0.10.4-1 Severity: wishlist Tags: patch Hi, Here is a proposed patch. Regards, Patrice -- System Information: Debian Release: trixie/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')

Bug#1091681: ITP: hueplusplus -- C++ library to control Philips Hue lights

2024-12-29 Thread Ahmad Khalifa
Package: wnpp Severity: wishlist Owner: Ahmad Khalifa X-Debbugs-Cc: debian-de...@lists.debian.org * Package name: hueplusplus Version : 1.1.0 (describe: v1.1.0-9-g4d9e387) Upstream Contact: https://github.com/enwi/hueplusplus/issues * URL : https://github.com/enwi/hue

Bug#1082719: debhelper: dh-sequence-single-binary not working with compat 14

2024-12-29 Thread Andrea Pappacoda
Hi Niels for some reason I didn't receive your initial reply to my bug report. On Sun Dec 29, 2024 at 2:56 PM CET, Niels Thykier wrote: I had a look at it and I am leaning towards https://salsa.debian.org/debian/debhelper/-/merge_requests/131 as a possible solution. The idea here being that

Bug#1091679: apt: change of behaviour re. signed repos and .../trusted.gpg.d/

2024-12-29 Thread Philip Hands
Package: apt Version: 2.9.19 Severity: minor Dear Maintainer, There has been a change of behaviour regarding how the trusted.gpg.d directory gets dealt with since 2.9.19 when a non-standard Dir is configured. I have found a work-around, which is to set Dir::Etc::trustedparts to "/etc/apt/trusted

Bug#1091497: golang-1.23: will FTBFS during trixie support period

2024-12-29 Thread Shengjing Zhu
On Mon, Dec 30, 2024 at 3:02 AM Santiago Vila wrote: > > El 29/12/24 a las 19:20, Shengjing Zhu escribió: > > Instead of disabling the test, is there a way to set a fixed time like > > the reproducing build? > > Hi. Please note that my disabling was never intended to be "the" fix. > > If you tell

Bug#1091497: golang-1.23: will FTBFS during trixie support period

2024-12-29 Thread Santiago Vila
El 29/12/24 a las 19:20, Shengjing Zhu escribió: Instead of disabling the test, is there a way to set a fixed time like the reproducing build? Hi. Please note that my disabling was never intended to be "the" fix. If you tell me where exactly these issues are forwarded in github I could try to

Bug#1090997: debbugsconfig depends on /usr/share/doc/debbugs/

2024-12-29 Thread Bill Allombert
On Sun, Dec 22, 2024 at 12:43:25AM +0100, Bill Allombert wrote: > Package: debbugs > Version: 2.6.3 > Severity: normal > > Hello Don, > > debbugsconfig does > system("cp /usr/share/doc/debbugs/examples/$name $destdir/$name") == 0 > > However policy prohibit packages to depend on the content o

Bug#1091497: golang-1.23: will FTBFS during trixie support period

2024-12-29 Thread Santiago Vila
El 29/12/24 a las 19:20, Shengjing Zhu escribió: On Mon, Dec 30, 2024 at 1:46 AM Santiago Vila wrote: Hi. I went ahead and did a team upload to fix this. (See salsa for details) A more complete fix would involve re-creating the certificates, but we might better convince upstream to not ship e

Bug#1091678: Should sipxtapi be removed from unstable?

2024-12-29 Thread Helmut Grohne
Source: sipxtapi Severity: important User: helm...@debian.org Usertags: sidremove Dear maintainer, I suggest removing sipxtapi from Debian for the following reasons: * It accumulated 2 RC-bugs: + #984331: sipxtapi: ftbfs with GCC-11 Last modified: 1 year, 12 days + #1058941: sipxtapi

Bug#1078628: lxd: will FTBFS during trixie support period

2024-12-29 Thread Mathias Gibbens
Control: tags -1 + confirmed pending I've cherry-picked an updated test certificate generated by upstream that's valid through 2033-10-23. Later today I'll also spin up a VM configured with a future date to verify there aren't any other time- related build failures. Mathias signature.asc Desc

Bug#1091523: AppStream metadata not generated for the firefox-esr package

2024-12-29 Thread asciiwolf
Upstream ticket: https://bugzilla.mozilla.org/show_bug.cgi?id=1851524

Bug#1091497: golang-1.23: will FTBFS during trixie support period

2024-12-29 Thread Shengjing Zhu
On Mon, Dec 30, 2024 at 1:46 AM Santiago Vila wrote: > > Hi. I went ahead and did a team upload to fix this. > (See salsa for details) > > A more complete fix would involve re-creating the certificates, but > we might better convince upstream to not ship expiring certificates > to begin with. > I

Bug#1091196: ucf 3.0043+nmu1+deb12u1 flagged for acceptance

2024-12-29 Thread Jonathan Wiltshire
package release.debian.org tags 1091196 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: ucf Version: 3.0043+nmu1+deb

Bug#1089935: lxd: Flaky tests causing FTBFS

2024-12-29 Thread Mathias Gibbens
Control: tags -1 + pending Added a patch to skip the two flaky tests. Mathias signature.asc Description: This is a digitally signed message part

Bug#1091677: Regression: Crash when closing certain tabs

2024-12-29 Thread Miroslav R.
Package: chromium Version: 131.0.6778.139-1 Severity: important X-Debbugs-Cc: miroslavr...@gmail.com Dear Maintainer, Upgrading chromium from 131.0.6778.108-1 to 131.0.6778.139-1 introduced a crash when closing certain tabs, particularly reddit.com. Reproduction steps: 1. Open a tab with reddit.

Bug#1091497: golang-1.23: will FTBFS during trixie support period

2024-12-29 Thread Santiago Vila
Hi. I went ahead and did a team upload to fix this. (See salsa for details) A more complete fix would involve re-creating the certificates, but we might better convince upstream to not ship expiring certificates to begin with. Thanks.

Bug#1053245: fluidsynth: Fluidsynth starts at boot and blocks the sound device, no obvious way to disable it

2024-12-29 Thread Patrice Duroux
Package: fluidsynth Version: 2.4.0-1 Followup-For: Bug #1053245 More progress on this after editing its service file to replace: After=pipewire.service by: After=pipewire.socket But then there is a conflict with Debian-gdm having one fluidsynth running that blocks the user one during the opening

Bug#1086845: transition: gdal

2024-12-29 Thread Sebastiaan Couwenberg
On 12/29/24 10:45 AM, Emilio Pozuelo Monfort wrote: On 28/12/2024 09:57, Sebastiaan Couwenberg wrote: On 11/7/24 10:57 AM, Emilio Pozuelo Monfort wrote: This is in a very good state, but I think we want to finish openmpi before acking this. Can we do this now that the openmpi, hdf5, and pyth

Bug#1091167: debian-security-support 12+2024.12.22 flagged for acceptance

2024-12-29 Thread Jonathan Wiltshire
package release.debian.org tags 1091167 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: debian-security-support Vers

Bug#1091649: Cannot debootstrap sid after usrmerge removal: E: Couldn't find these debs: usr-is-merged

2024-12-29 Thread Helmut Grohne
Hi Cyril, On Sun, Dec 29, 2024 at 01:06:46PM +0100, Cyril Brulebois wrote: > That puts a requirement on users to catch up with the point release if > they want to keep being able to debootstrap trixie/sid once the removal > happens (again), which can be surprising / a little point of friction, > b

Bug#1091649: Cannot debootstrap sid after usrmerge removal: E: Couldn't find these debs: usr-is-merged

2024-12-29 Thread Helmut Grohne
Hi Cyril, On Sun, Dec 29, 2024 at 05:24:28PM +0100, Cyril Brulebois wrote: > Just out of curiosity, did your initial assessment include autopkgtest > references? Checking the excuses page (to see if I had all hints lined > up for a speedy come back into testing), I see the following packages > are

Bug#1090853: gunicorn 20.1.0-6+deb12u1 flagged for acceptance

2024-12-29 Thread Jonathan Wiltshire
package release.debian.org tags 1090853 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: gunicorn Version: 20.1.0-6+d

Bug#1091676: bubblewrap: autopkgtests: do not depend on usrmerge

2024-12-29 Thread Helmut Grohne
Source: bubblewrap Version: 0.11.0-1 Tags: patch User: helm...@debian.org Usertags: dep17 Hi Simon et al, Cyril made me aware that bubblewrap has an autopkgtest dependency on usrmerge. We tried removing the usrmerge package. That happened today, but it turned out to break debootstrap, so it is re

Bug#1068888: zookeeper 3.8.0-11+deb12u2 flagged for acceptance

2024-12-29 Thread Jonathan Wiltshire
package release.debian.org tags 106 = bookworm pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm. Thanks for your contribution! Upload details == Package: zookeeper Version: 3.8.0-11+

Bug#1091675: RFS: uacme/1.7.6-1 -- Lightweight client for the RFC8555 ACMEv2 protocol

2024-12-29 Thread Nicola Di Lieto
Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for the latest version of my package "uacme", https://packages.debian.org/sid/uacme * Package name : uacme Version : 1.7.6-1 Upstream contact : nicola.dili...@gmail.com * URL

Bug#1024257: btrfs-progs: Backup fails with "multiple capabilities" at first, then "capability no data available"

2024-12-29 Thread Leszek Dubiel
I have moved to Debian version 12, errors still presisted. I have filed a bug on btrfs github. Please share the URL and/or set the forwarded tag to it? https://github.com/kdave/btrfs-progs/issues/613

Bug#1091674: /usr/share/man/man3/MIN.3.gz conflicts with manpages-dev

2024-12-29 Thread Enrico Zini
Package: libg2c-dev Version: 2.0.0-2 Severity: serious Hello, I have libg2c-dev installed as a depedency of satpy by way of python3-grib. As a consequence, I'm unable to install manpages-dev: # apt-get install manpages-dev Reading package lists... Done Building dependency tree... Done Re

Bug#1091649: Cannot debootstrap sid after usrmerge removal: E: Couldn't find these debs: usr-is-merged

2024-12-29 Thread Cyril Brulebois
Hallo wieder, Helmut Grohne (2024-12-29): > A while ago, Marco approached me about removing the usrmerge package. > At that time I searched for dependencies on it and identified dbus, > which was relaxed. Then once that was gone, I failed to see what would > break if usrmerge were to be removed.

Bug#1091673: procps: top :Refresh-Display now seems to duplicate its action

2024-12-29 Thread Tim Connors
Package: procps Version: 2:4.0.2-3 Severity: normal The version of top in bookworm seems to have changed the processing of the keybinding for :Refresh-Display, and you can see it immediately drawing the screen *twice* while registering the current `top` process as something taking 100% of the CPU

Bug#1091169: sbuild unshare mode unhappy about symlink'd tarballs

2024-12-29 Thread Antoine Beaupré
On 2024-12-25 08:13:37, Johannes Schauer Marin Rodrigues wrote: > commits without any rationale behind them are the best Ugh, wtf. Uh. So it looks like this is a feature of zstd that it won't follow symlinks when reading compressed files!! So i guess this is not a bug in sbuild after all, but s

Bug#1089035: unshare doesn't use the existing tarball when guesing from UNRELEASED/experimental

2024-12-29 Thread Antoine Beaupré
On 2024-12-23 07:49:57, Johannes Schauer Marin Rodrigues wrote: [...] > If this variable were to be re-used then somebody who intends to build for > bookworm-backports would have a chroot for just bookworm, without backports > extracted. That is wrong. Is it really? I mean if you don't have a bo

Bug#1091672: gdm3 47.0-3 password field greyed out

2024-12-29 Thread Richard
Package: gdm3 Version: 47.0-3 Severity: normal Dear Maintainer, probably since gdm3 was upgraded to v47, when trying to log in, the password field often is just greyed out leaving only fingerprint login available. But using fingerprint login isn't desirable as that won't unlock the Gnome keyring,

Bug#1061480: debconf should automatically be noninteractive if input is /dev/null

2024-12-29 Thread Colin Watson
Sorry for my long delay in replying to this. On Mon, Sep 30, 2024 at 02:47:53PM -0700, Josh Triplett wrote: > I've written a draft patch for this, at > https://salsa.debian.org/pkg-debconf/debconf/-/merge_requests/18 . I've > also attached it here. > > I'm happy to try other approaches for this,

  1   2   >