Bug#858500: diff NMU for sanlock_3.3.0-2.1

2017-03-28 Thread Milan Zamazal
Anton Gladky writes: > If you are agree with this upload, I can reschedule it to day/0 and > let it be built right now. Yes, I agree. Thanks, Milan

Bug#848669: devhelp: Unusably slow

2017-03-28 Thread Yasushi SHOJI
Hi, I seem to me that the slowness I've seen isn't devhelp, but webkit2 / webkit2gtk. WEBKIT_DISABLE_COMPOSITING_MODE=1 helped a lot. ref. https://lists.webkit.org/pipermail/webkit-gtk/2016-September/002803.html -- yashi

Bug#858880: cinnamon: Sometimes 100% CPU after starting

2017-03-28 Thread Paul van der Vlis
Package: cinnamon Version: 3.0.4-2~bpo8+1 Severity: normal Dear Maintainer, I had to make a laptop for many users with autologin, and wanted to use Cinnamon. I have used Debian 9 RC2 and the latest updates available on 2017-3-27. I have seen many times that Cinnamon used 100% CPU after the displ

Bug#792416: po4a: Remove support for broken timezone names

2017-03-28 Thread Martin Quinson
Hello, as you can see, I fixed this bug without integrating your patch. This is because po4a is only a parser, not a generator of such files. There is nothing we can do to fix the debian changelog files. Instead, we must deal with all variants of such files. Your change would have make po4a applic

Bug#858881: CI test fails (pandas.tools.tests.test_util.TestLocaleUtils)

2017-03-28 Thread Ole Streicher
Package: src:pandas Version: 0.19.2-5 Severity: important Hi, since quite a while, the CI test for Pandas fails: == FAIL: test_set_locale (pandas.tools.tests.test_util.TestLocaleUtils) ---

Bug#845751: patch backported to gcc-6 available

2017-03-28 Thread Frederic Bonnard
I see upstream has a patch for gcc-6 . Would it be possible to import it ? Thanks, F. pgpqSD_OZqxpy.pgp Description: PGP signature

Bug#858260: pandas: FTBFS (pandas.tests.test_multilevel.TestMultiLevel fails)

2017-03-28 Thread Ole Streicher
Looking into ci.debian.net, the new failure appears for the first time on 2017-03-14: https://ci.debian.net/data/packages/unstable/amd64/p/pandas/20170314_082050.autopkgtest.log.gz The debci log also shows an update of tzdata for this time: https://ci.debian.net/data/packages/unstable/amd64/p/pa

Bug#832566: systemd-machined breaks automounting nfs shares

2017-03-28 Thread John Pearson
Hello Michael, The KVM domain is "auto-started" by libvirtd, and that appears to result in systemd-machined starting up. Stopping systemd-machined, then stopping and re-starting the virtual machine using virsh causes systemd-machined to restart along with it. I've tried both disabling and m

Bug#857343: #857343: logback deserialization vulnerability

2017-03-28 Thread Markus Koschany
Hello security team, apparently logback < 1.2.0 is vulnerable to a deserialization issue. They announced it on February 8th 2017 but it appears no CVE has been assigned yet. [1] Fixing commit is at [2] The bug reporter claims it is the same issue as CVE-2015-6420 but I cannot verify that at the mo

Bug#858655: Please move Java dependencies to libreoffice-java-common

2017-03-28 Thread Rene Engelhard
On Tue, Mar 28, 2017 at 03:28:31AM -0400, Daniel Richard G. wrote: > On Tue, 2017 Mar 28 08:36+0200, Rene Engelhard wrote: > > > > > > > That installation would fail with a non clear message if the Java > > > > support is not there. -> Bad. > > > > > > > > We had that "fun" in the past... > > > > >

Bug#858655: Please move Java dependencies to libreoffice-java-common

2017-03-28 Thread Daniel Richard G.
On Tue, 2017 Mar 28 08:36+0200, Rene Engelhard wrote: > > > > > That installation would fail with a non clear message if the Java > > > support is not there. -> Bad. > > > > > > We had that "fun" in the past... > > > > So, there are Java-based LibreOffice extension packages that do not > > properly

Bug#830876: lua love 0.10.2 is out

2017-03-28 Thread Francisco Gómez García
Package: love Version: 0.9.1-4 Followup-For: Bug #830876 Dear Maintainers, It's been about two years since LÖVE 0.9.1 was released, and it's already on version 0.10.2, which is not fully compatible with 0.9.x. It is, thus, important to get the new version properly packaged. Why is it? If new main

Bug#858525: libjack-jackd2-dev: Depend on jackd2

2017-03-28 Thread Mattia Rizzolo
On Mon, Mar 27, 2017 at 11:22:41PM -0400, Reinhard Tartler wrote: > I think the approach of adding a 'depends' to jackd2 is the simplest. > Moving the shared library to the -dev packages doesn't work, because > /usr/bin/jackd2 and netserver.so link against it. Why not moving the file to libjack-ja

Bug#858882: r-cran-rcppgsl: Missing dependency libgsl-dev

2017-03-28 Thread Andreas Tille
Package: r-cran-rcppgsl Version: 0.3.2-1 Severity: grave Tags: patch Justification: renders package unusable [ Release team see below how to deal with newer upstream version in unstable than in testing ] Dear Maintainer, *** Reporter, please consider answering these questions, where appropriat

Bug#852149: firefox-esr: Success and duplication

2017-03-28 Thread Mike Hommey
On Tue, Mar 28, 2017 at 08:24:58AM +0200, Jean-Philippe MENGUAL wrote: > Package: firefox-esr > Followup-For: Bug #852149 > > Dear Maintainer, > > The crash seems to be fixed in the release up@to-dated. Do we have a chance > to have this fix in Stretch? Can you be more explicit what you mean by

Bug#830876: lua love 0.10.2 is out

2017-03-28 Thread Markus Koschany
Am 28.03.2017 um 09:59 schrieb Francisco Gómez García: > Package: love > Version: 0.9.1-4 > Followup-For: Bug #830876 > > Dear Maintainers, > > It's been about two years since LÖVE 0.9.1 was released, and it's already on > version 0.10.2, which is not fully compatible with 0.9.x. It is, thus, > i

Bug#858835: python-lockfile: TypeError when python-daemon uses LinkFileLock

2017-03-28 Thread Ben Finney
Control: reassign -1 python-daemon Control: retitle -1 python-daemon: Incompatible with ‘python-lockfile’ >= 0.9 Control: found -1 python-daemon/1.5.5-1 Control: fixed -1 python-daemon/2.0.5-1 On 28-Mar-2017, Ben Finney wrote: > There's the problem. ‘python-daemon’ version 1.5.5 is not compatible

Bug#858883: nslcd : missing symbols : _nss_ldap_version and _nss_ldap_enablelookups

2017-03-28 Thread Laurent Bonnaud
Package: nslcd Version: 0.9.7-2 Dear maintainer, here is the problem: # journalctl | grep nslcd Mar 28 09:55:57 file-info2 nslcd[509]: Starting LDAP connection daemon: nslcdnslcd: Warning: NSS_LDAP version missing: /lib/x86_64-linux-gnu/libnss_ldap.so.2: undefined symbol: _nss_ldap_version Mar

Bug#830876: lua love 0.10.2 is out

2017-03-28 Thread Alexandre Detiste
Hi, I've been working on this (as a depedency of MrRescue); but couldn't finish it before the freeze. New maintainers are always needed :-) Feel free to take over existing work-in-progress. >From the top of my mind I do remember that the debian/copyright file was still needing work. https://an

Bug#852149: firefox-esr: Success and duplication

2017-03-28 Thread Carsten Schoenert
On Tue, Mar 28, 2017 at 08:24:58AM +0200, Jean-Philippe MENGUAL wrote: ... > The crash seems to be fixed in the release up@to-dated. Do we have a chance > to have this fix in Stretch? > > Mooreover, the problem appears as well in Thouddrbird which has just been > uploaded to stretch. What should

Bug#858700: libatk-wrapper-jni crashes Netbeans

2017-03-28 Thread Tobias Wich
> If you have some time to spare could you tell us how you > trigger the crash and retry with debugging symbols installed? I haven't > found a reliable way to do it yet. I don't know how to reproduce it. Basically I just use netbeans. That means I have a few projects as well as a bunch of files o

Bug#858884: nfs-common : mounting is done before network time adjustment

2017-03-28 Thread Laurent Bonnaud
Package: nfs-common Version: 1:1.3.4-2.1 Dear maintainer, here is what I see in journalctl (/users is a Kerberos NFS mount point): Mar 28 09:55:57 file-info2 systemd[1]: Mounted /users. Mar 28 09:55:57 file-info2 systemd[1]: Started /etc/rc.local Compatibility. Mar 28 09:55:57 file-info2 system

Bug#858875: dict-gcide: 0.48.3 misbuild: missing all words that begin with [ao]

2017-03-28 Thread Ritesh Raj Sarraf
Control: tag -1 +confirmed Thank you fore reporting this bug. I am not sure which version has caused this problem. Perhaps the first step would be to pick older versions from snapshot.debian.org and try. On Tue, 2017-03-28 at 16:20 +1100, pmoulder wrote: > Package: dict-gcide > Version: 0.48.3

Bug#858885: tests fail with libcmocka-dev 0.4.1-2

2017-03-28 Thread Robert Bihlmeyer
Source: socket-wrapper Version: 1.1.7-1 Severity: serious Tags: patch Justification: fails to build from source (but built successfully in the past) Preparing a backport of libsocket-wrapper to stable, I noticed that it won't build with the stated build-dependency of libcmocka-dev 0.4.1. The last

Bug#832128: freespace2: Bad symlinks /usr/games/fs2_open{,_DEBUG}

2017-03-28 Thread Simon McVittie
On Fri, 22 Jul 2016 at 16:33:02 +0100, Edward Allcutt wrote: > The current package contains symlinks such as >/usr/games/fs2_open -> fs2_open_3.7.2+repack-1+b1 > where the target doesn't exist. This was tagged pending last July, but I don't see any work-in-progress in pkg-games git, so I'm tes

Bug#858768: apparmor: CVE-2017-6507

2017-03-28 Thread intrigeri
Antoine Beaupre: > Here's some more information about that security issue that I could > gleam from testing and other sources. Thanks! I intend to work on this today, but certainly wouldn't mind if one of my team-mates took the lead on it (after coordinating with me so we avoid duplicating work :

Bug#858867: diffoscope: please support pcap files

2017-03-28 Thread Chris Lamb
tags 858867 + pending thanks Implemented in Git: https://anonscm.debian.org/git/reproducible/diffoscope.git/commit/?id=c5d01341055d0aa0552d08725a6b8e44255b0374 Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Bug#355607: svlogd: please support hierarchical configuration

2017-03-28 Thread Andras Korn
On Fri, Jan 06, 2017 at 11:38:19AM +0300, Dmitry Bogatov wrote: > > part text/plain1518 > > Package: runit > > Version: 1.3.3-1 > > Severity: wishlist > > > > Hi, > > > > I'm using socklog and svlogd to manage logs coming in from several boxes via > > UDP. > > > > Configurati

Bug#857343: #857343: logback deserialization vulnerability

2017-03-28 Thread Sébastien Delafond
On Mar/28, Markus Koschany wrote: > apparently logback < 1.2.0 is vulnerable to a deserialization issue. > They announced it on February 8th 2017 but it appears no CVE has been > assigned yet. [1] Fixing commit is at [2] The bug reporter claims it is > the same issue as CVE-2015-6420 but I cannot v

Bug#857343: #857343: logback deserialization vulnerability

2017-03-28 Thread Salvatore Bonaccorso
Control: retitle -1 logback: CVE-2017-5929: serialization vulnerability affecting the SocketServer and ServerSocketReceiver components Hi Markus, On Tue, Mar 28, 2017 at 09:41:30AM +0200, Markus Koschany wrote: > Hello security team, > > apparently logback < 1.2.0 is vulnerable to a deserializa

Bug#430951: Please support linux-vserver

2017-03-28 Thread Andras Korn
On Fri, Jan 06, 2017 at 11:38:24AM +0300, Dmitry Bogatov wrote: > > Package: runit > > Version: 1.7.2-1 > > Severity: wishlist > > > > Hi, > > > > it would be great to be able to use runit to supervise processes running in > > vserver guests. > > > > Using a kludge, this is already sort of possibl

Bug#852149: firefox-esr: Success and duplication

2017-03-28 Thread Jean-Philippe MENGUAL
Many thanks. I stay careful, at next uploads of both Firefox and Thunderbird, I'll see the fixes. Best regards, Le 28/03/2017 à 10:21, Carsten Schoenert a écrit : > On Tue, Mar 28, 2017 at 08:24:58AM +0200, Jean-Philippe MENGUAL wrote: > ... >> The crash seems to be fixed in the release up@to-d

Bug#857910: gsequencer: GObject::dispose() is not implemented

2017-03-28 Thread Debian/GNU
severity -1 serious thanks. Message-ID: <149069136526.17474.11614453442888250327.reportbug@xenakis.iemnet> X-Mailer: reportbug 7.1.5 Date: Tue, 28 Mar 2017 10:56:05 +0200 Package: src:gsequencer Followup-For: Bug #857910 justification: gsequencer appears to be not-yet releasable. after a major p

Bug#858886: freeipmi-tools: Exit code 1 and "ipmi_sensor_read: success" message on stdout

2017-03-28 Thread stefanb
Package: freeipmi-tools Version: 1.4.5-3 Severity: important When running ipmi-sensors as root on a Dell DSS7500 server, it outputs good info on stdout but exit code 1 is returned from the binary. This is obviously a problem for example when using it with nagios that uses the exit code in order to

Bug#858887: hyperscan: please backport hyperscan 4.4.0-1 to jessie-backports

2017-03-28 Thread Arturo Borrero Gonzalez
Source: hyperscan Version: 4.4.0-1 Severity: wishlist Dear maintainers, thanks for your work with the hyperscan package in debian, it's really appreciated. I would like to backport suricata 3.2.1-1 to jessie-backports but it depends on hyperscan >= 4.4.0. Therefore I would ask you to update the

Bug#858888: flashplugin-nonfree: wget tries to download old version

2017-03-28 Thread Ivan Zharenkov
Package: flashplugin-nonfree Version: 1:3.6.1+deb8u1 Severity: important Dear Maintainer, update-flashplugin-nonfree found a new version of plugin: # update-flashplugin-nonfree --status Flash Player version installed on this system : Flash Player version available on upstream site: 25.0.0.127

Bug#857770: src:postgresql-debversion: please provide a unversioned binary package

2017-03-28 Thread Christoph Berg
Re: Antonio Terceiro 2017-03-27 <20170327152137.23l7vyrunt5pm...@debian.org> > We do exactly that in Ruby, and it is manageable. When the set of > supported versions change, we update the list in a central place > (ruby-defaults), and binNMU/fix existing modules. We also make the > dependencies in

Bug#858889: nbd-server ignores listenaddr in configuration file

2017-03-28 Thread George Shuklin
Package: nbd-server Version: 1:3.15.2-2 Severity: important nbd-server silently ignores listenaddr in configuration file and listen on '*'. Steps to reproduce: 1. Set up configuration with listenaddr = 127.0.0.1 (see example below) 2. Run nbd-server Expected result: `netstat -lnp|grep nbd` shou

Bug#852251: libregex-clojure: Version upgrade request to 1.1.0

2017-03-28 Thread Emmanuel Bourg
Hi Elana, Le 28/03/2017 à 05:34, Elana Hashman a écrit : > I've taken a look at the packaging of the current version and it appears > to use maven. I'd like to help upgrade it, but I've never made a maven > package before. Thank you fo offering your help. I got a look at the package and it seems

Bug#857910: gsequencer: GObject::dispose() is not implemented

2017-03-28 Thread Debian/GNU
Package: src:gsequencer Followup-For: Bug #857910 Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? * What exactly did you do (or not do) that was effective (or ineffective)? * What was the outcome of thi

Bug#858856: [Pkg-javascript-devel] Bug#858856: node-handlebars: Does not load

2017-03-28 Thread Pirate Praveen
Control: severity -1 important On Tuesday 28 March 2017 12:58 AM, Andreas Tille wrote: > I've set Severity grave since the module can not be used > at all if it does not load. The current use of this package is to provide source code for ruby-handlebars-assets. Since babel is not packaged yet, we

Bug#858890: gnat-6: missing dependency on the gcc package ?

2017-03-28 Thread Adrien Panay
Package: gnat-6 Version: 6.3.0-10 Severity: normal Dear Maintainer, I encountered this issue on a newly installed system while performing basic ada programming, a simple hello world triggers the following situation. What led up to the situation? Installing gnat and trying to compile a simple h

Bug#857522: libbind-export-dev: broken symlinks: /usr/lib/x86_64-linux-gnu/liblwres-export.so -> /lib/x86_64-linux-gnu/liblwres-export.so.141, /usr/lib/x86_64-linux-gnu/libbind9.so -> libbind9.so.140.

2017-03-28 Thread Andreas Beckmann
On 2017-03-27 23:53, Adrian Bunk wrote: >> On Sun, Mar 12, 2017 at 1:26 AM, Andreas Beckmann wrote: >>> /usr/lib/x86_64-linux-gnu/liblwres-export.so -> >>> /lib/x86_64-linux-gnu/liblwres-export.so.141 >>> /usr/lib/x86_64-linux-gnu/libbind9.so -> libbind9.so.140.0.10 >> >> These are mistakenly

Bug#858260: Help needed for pandas bug: Could anybody verify the suspicion that tzdata might have some influence?

2017-03-28 Thread Andreas Tille
tags 858260 help thanks Hi, I admit that when reading the bug report I have no idea how to fix it. I can confirm that I can reproduce the issue in a recent unstable chroot. I have added maintainers of tzdata, Debian Science and Debian mentors in CC - just hoping for any helpful hint. Kind regar

Bug#832128: freespace2: Bad symlinks /usr/games/fs2_open{,_DEBUG}

2017-03-28 Thread Simon McVittie
Control: tags 832128 + patch On Tue, 28 Mar 2017 at 09:35:27 +0100, Simon McVittie wrote: > On Fri, 22 Jul 2016 at 16:33:02 +0100, Edward Allcutt wrote: > > The current package contains symlinks such as > >/usr/games/fs2_open -> fs2_open_3.7.2+repack-1+b1 > > where the target doesn't exist. >

Bug#858835: python-lockfile: TypeError when python-daemon uses LinkFileLock

2017-03-28 Thread Andreas Tille
Hi Neil, On Tue, Mar 28, 2017 at 09:29:08AM +0100, Neil Williams wrote: > affects 858835 python-daemon > thanks > > On Tue, 28 Mar 2017 09:21:27 +1100 > Ben Finney wrote: > > > On 27-Mar-2017, Neil Williams wrote: > > > > > root@sylvester:/# apt-get -t jessie-backports install > > > lava-coord

Bug#647628: pstotext: internal error 202

2017-03-28 Thread Laurent Bonnaud
> I can't reproduce this anymore on up-to-date unstable. Is this still > happening for you? Not any more. Thank you for the fix! -- Laurent.

Bug#857295: [pkg-lxc-devel] Bug#857295: Bug#857295: Info received ([oss-security] LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership)

2017-03-28 Thread Stiepan
Hi Evgeni, First of all, thank you for posting the detailed steps you used to reproduce a working config, which is by far the best explanation on how to set up LXC for running Debian 8 on top of Debian 8 I have seen yet. To answer your questions, yes I've been using Jessie's libvirt package "as

Bug#858856: [Pkg-javascript-devel] Bug#858856: node-handlebars: Does not load

2017-03-28 Thread Andreas Tille
On Tue, Mar 28, 2017 at 02:54:55PM +0530, Pirate Praveen wrote: > Control: severity -1 important Fine. > On Tuesday 28 March 2017 12:58 AM, Andreas Tille wrote: > > I've set Severity grave since the module can not be used > > at all if it does not load. > > The current use of this package is to

Bug#858891: unblock: non-free otrs2/5.0.17-1

2017-03-28 Thread Patrick Matthäi
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package otrs2 diff -Naur '--exclude=.svn' 5.0.16-1/debian/changelog 5.0.17-1/debian/changelog --- 5.0.16-1/debian/changelog 2017-01-24 12:35:19.080487907 +0100 +++ 5.0.17-1

Bug#858887: hyperscan: please backport hyperscan 4.4.0-1 to jessie-backports

2017-03-28 Thread Sascha Steinbiss
Hi Arturo, I'll reply to this as I have prepared hyperscan backports before. > I would like to backport suricata 3.2.1-1 to jessie-backports but it depends > on hyperscan >= 4.4.0. Therefore I would ask you to update the hyperscan > version 4.3.1-1~bpo8+1 currently living in jessie-backports to m

Bug#858138: kdenlive: Segmentation fault with Affine and Composition transitions

2017-03-28 Thread Patrick Matthäi
tag #858138 + upstream forwarded #858138 https://bugs.kde.org/show_bug.cgi?id=376433 thanks Am 16.03.2017 um 10:48 schrieb JAMES SUNDERLAND: > > Package: kdenlive > > Version: 16.12.2-1 > > Severity: normal Dear Maintainer, > > Kdenlive crashes with combination of "composite" and "affine" effects

Bug#858893: Fwd: shellcheck results for needrestart-session

2017-03-28 Thread Patrick Matthäi
Package: needrestart-session Version: 0.3-4.1 Severity: minor Weitergeleitete Nachricht Betreff:shellcheck results for needrestart-session Datum: Tue, 14 Mar 2017 08:16:20 +0800 Von:Paul Wise Organisation: Debian An: needrestart-sess...@packages.debian.org

Bug#858892: unblock: haproxy/1.7.4-1

2017-03-28 Thread Vincent Bernat
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hey! We would like to upload HAProxy 1.7.4 to unstable. This is mostly a bugfix only release (1.7 is the current stable branch). Upstream s

Bug#858584: #858584: konsole: please backport font rendering fix for noto-sans

2017-03-28 Thread Boyuan Yang
I can confirm version 4:16.12.0-2 has this bug (#868584) fixed. Thanks. One more question: since konsole 16.12.3 is already available as a bugfix release, why not upgrade to 16.12.3 instead of backporting bunches of upstream patches? Such upgrade should be suitable for stable release. -- Thanks

Bug#858894: sqlite3: requesting backport of recent version for Jessie

2017-03-28 Thread Sascha Steinbiss
Package: sqlite3 Version: 3.16.2-3 Severity: wishlist Dear Maintainer, I would like to kindly request a backport for Jessie of the version of sqlite3 currently in testing. A recent version (> 3.8.10) is required as a dependency for another backport I am looking to update (hyperscan). Please see #

Bug#858887: hyperscan: please backport hyperscan 4.4.0-1 to jessie-backports

2017-03-28 Thread Sascha Steinbiss
Hi again, [...] > I will request a backport of a more recent version from the sqlite > maintainer to enable the Hyperscan backport to build properly. Done, see #858894 [1]. Cheers Sascha [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858894 signature.asc Description: OpenPGP digital si

Bug#858205: Update ZNC package to 1.6.5

2017-03-28 Thread Patrick Matthäi
Am 19.03.2017 um 19:41 schrieb Thomas Ward: > Source: znc > Severity: wishlist > > Hello. > > ZNC 1.6.5 [1], which fixes several segfault risks in 1.6.4 modules and > other behavior bugfixes, has been released. Can we update the ZNC > package to 1.6.5? > > > Thank you. > > > [1]: http://wiki.znc.

Bug#858876: libjna-jni: causes NoClassDefFoundError

2017-03-28 Thread Emmanuel Bourg
Le 28/03/2017 à 07:41, YOSHINO Yoshihito a écrit : > Workaround: Creating a symlink libjnidispatch.so -> libjnidispatch.system.so > fixes this error. Hi, Thank you for the report. The symlink was in the same directory? What JRE did you use? Emmanuel Bourg

Bug#858564: Confirmed on sid

2017-03-28 Thread Mathieu Parent
On Tue, 28 Mar 2017 01:33:44 +0300 Adrian Bunk wrote: > Control: severity -1 grave > I've upgraded the severity again. > > Quoting the original bug report: >* What led up to the situation? > I upgraded to 8u4 through unattended upgrades. > > > Regressions in a DSA that are actually am

Bug#858882: r-cran-rcppgsl: Missing dependency libgsl-dev

2017-03-28 Thread Dirk Eddelbuettel
On 28 March 2017 at 10:09, Andreas Tille wrote: | Package: r-cran-rcppgsl | Version: 0.3.2-1 | Severity: grave | Tags: patch | Justification: renders package unusable | | [ Release team see below how to deal with newer upstream version in unstable | than in testing ] | | Dear Maintainer, | |

Bug#858895: stk: fails to find soundfile

2017-03-28 Thread Peter P.
Package: stk Version: 4.5.2+dfsg-4 Severity: serious Justification: grave Dear Maintainer, Launching stk-demo TubeBell -or throws an error FileRead::open: could not open or find file (../../rawwaves/sinewave.raw)! while the file searched for is in place in /usr/share/stk

Bug#858584: #858584: konsole: please backport font rendering fix for noto-sans

2017-03-28 Thread Maximiliano Curia
¡Hola Boyuan! El 2017-03-28 a las 18:12 +0800, Boyuan Yang escribió: I can confirm version 4:16.12.0-2 has this bug (#868584) fixed. Thanks. Thanks for testing it! One more question: since konsole 16.12.3 is already available as a bugfix release, why not upgrade to 16.12.3 instead of backpor

Bug#858882: r-cran-rcppgsl: Missing dependency libgsl-dev

2017-03-28 Thread Dirk Eddelbuettel
The other possible fix is upstream -- I could just not assume I always have gsl-config and make its use conditional. That's probably the best idea going forward to support pure 'run-time, not dev' packages better. Dirk -- http://dirk.eddelbuettel.com | @eddelbuettel | e...@debian.org

Bug#858896: segfault: ReleaseObjects

2017-03-28 Thread Wojciech Nizinski
Package: thunderbird Version: 1:45.8.0-2 Severity: normal GNU DDD 3.3.12 (x86_64-pc-linux-gnu), by Dorothea LReading symbols from /usr/lib/thunderbird/thunderbird...Reading symbols from /usr/lib/debug/.build- id/5a/debfbab6e69d0c924c0f5258439e1f764784aa.debug...done. done. (gdb) run Starting progr

Bug#857295: [oss-security] LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership

2017-03-28 Thread Stiepan
Thanks to the 2.0.7-2 update by Evgeni Golov and his crystal-clear instructions on how to use lxcbr0 with this version, I could confirm that the issue with the host's routing table being affected by changes in the containers' routing tables is not there anymore when using that version (lxc 2.0.7

Bug#858887: hyperscan: please backport hyperscan 4.4.0-1 to jessie-backports

2017-03-28 Thread Gianfranco Costamagna
Hello Arturo, >Version: 4.4.0-1 I did a quick look to the 4.4.1 changes, and seems they are feasible for an unblock bug (there are two tests added and one single bugfix) https://anonscm.debian.org/git/collab-maint/hyperscan.git https://anonscm.debian.org/git/collab-maint/hyperscan.git/commit/?i

Bug#858887: hyperscan: please backport hyperscan 4.4.0-1 to jessie-backports

2017-03-28 Thread Arturo Borrero Gonzalez
On 28 March 2017 at 12:45, Gianfranco Costamagna wrote: > Hello Arturo, > >>Version: 4.4.0-1 > > > I did a quick look to the 4.4.1 changes, and seems they are feasible for an > unblock > bug (there are two tests added and one single bugfix) > https://anonscm.debian.org/git/collab-maint/hyperscan.

Bug#850780: linux-image-4.8.0-2-amd64: can't boot on Acer Aspire V5, stuck on initrd

2017-03-28 Thread Ove Kåven
Package: src:linux Followup-For: Bug #850780 I've tried booting the current kernels, and the current linux-image-4.9.0-2-amd64 (version 4.9.13-1) is able to boot on this system. Thank you. -- System Information: Debian Release: 9.0 APT prefers testing APT policy: (900, 'testing'), (600, 'sta

Bug#858260: Help needed for pandas bug: Could anybody verify the suspicion that tzdata might have some influence?

2017-03-28 Thread James Cowgill
Hi, On 28/03/17 10:37, Andreas Tille wrote: > tags 858260 help > thanks > > Hi, > > I admit that when reading the bug report I have no idea how to fix it. > I can confirm that I can reproduce the issue in a recent unstable > chroot. I have added maintainers of tzdata, Debian Science and Debian

Bug#858897: linux-image-4.10.0-trunk-amd64-unsigned: NETFILTER_XT_MATCH_SOCKET and NF_SOCKET_IPV4 are disabled: IP_TRANSPARENT does not work

2017-03-28 Thread Alexandra N. Kossovsky
Package: src:linux Version: 4.10-1~exp1 Severity: normal NETFILTER_XT_MATCH_SOCKET and NF_SOCKET_IPV4 are disabled in the kernel config. As a result, IP_TRENSPARENT server can not be set up: $ sudo iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT > iptables: No chain/target/match by

Bug#858882: r-cran-rcppgsl: Missing dependency libgsl-dev

2017-03-28 Thread Adrian Bunk
On Tue, Mar 28, 2017 at 10:09:28AM +0200, Andreas Tille wrote: > ... If you want to fix the issue inside > r-cran-rcppgsl package you need to either convince the release team to > accept this new upstream version or revert the new version by using an > epoch. I have CCed the release team where you

Bug#858898: supermin: FTBFS on mips*

2017-03-28 Thread Ivo De Decker
package: supermin severity: serious version: 5.1.17-7 Hi, During a rebuild to update the outdated built-using, supermain failed on mips, mipsel and mips64el. https://buildd.debian.org/status/package.php?p=supermin https://buildd.debian.org/status/fetch.php?pkg=supermin&arch=mips&ver=5.1.17-7%2Bb

Bug#858891: unblock: non-free otrs2/5.0.17-1

2017-03-28 Thread Adam D. Barratt
Control: tags -1 + moreinfo On 2017-03-28 10:50, Patrick Matthäi wrote: Please unblock package otrs2 diff -Naur '--exclude=.svn' 5.0.16-1/debian/changelog 5.0.17-1/debian/changelog --- 5.0.16-1/debian/changelog 2017-01-24 12:35:19.080487907 +0100 +++ 5.0.17-1/debian/changelog 2017-03-09 1

Bug#858567: mssh: local files installed to /usr/@DATADIRNAME@/locale

2017-03-28 Thread Adrian Bunk
On Fri, Mar 24, 2017 at 02:46:32AM +0100, Axel Beckert wrote: >... > --- a/configure.ac > +++ b/configure.ac > @@ -26,6 +26,9 @@ >AC_MSG_ERROR([gconftool-2 executable not found in your path - should be > installed with GConf]) > fi > > +test -n "$DATADIRNAME" || DATADIRNAME=share > +AC_SUBS

Bug#858882: r-cran-rcppgsl: Missing dependency libgsl-dev

2017-03-28 Thread Andreas Tille
Hi Dirk, On Tue, Mar 28, 2017 at 05:24:02AM -0500, Dirk Eddelbuettel wrote: > | Alternatively this could be fixed by moving the script gsl-config from > | package libgsl-dev to libgsl2. Since you are the maintainer of both > > I am wondering if it was in lbgsl0 before the move to 'gsl2'. I shoul

Bug#858205: Update ZNC package to 1.6.5

2017-03-28 Thread Alexey Sokolov
Hi Patrick, Are you looking at the right versions? https://github.com/znc/znc/compare/znc-1.6.4...znc-1.6.5 is much smaller than what you've shown. 2017-03-28 11:19 GMT+01:00 Patrick Matthäi : > Am 19.03.2017 um 19:41 schrieb Thomas Ward: >> Source: znc >> Severity: wishlist >> >> Hello. >> >> ZNC

Bug#849760: ferm cache system broken

2017-03-28 Thread Moritz Muehlenhoff
On Fri, Dec 30, 2016 at 11:22:24AM -0500, Stephen Frost wrote: > Package: ferm > Version: 2.2-3 > > Greetings, > > The ferm system allows the inclusion of other files, including those > which might be outside of the /etc/ferm directory. When those files > change and the user issues a 'reload', t

Bug#858891: unblock: non-free otrs2/5.0.17-1

2017-03-28 Thread Patrick Matthäi
Am 28.03.2017 um 13:22 schrieb Adam D. Barratt: > Control: tags -1 + moreinfo > > On 2017-03-28 10:50, Patrick Matthäi wrote: >> Please unblock package otrs2 >> >> diff -Naur '--exclude=.svn' 5.0.16-1/debian/changelog >> 5.0.17-1/debian/changelog >> --- 5.0.16-1/debian/changelog 2017-01-24 12:35:

Bug#760415: cups: Need to "reset" the printer between 2 jobs (very similar to STR #3964)"

2017-03-28 Thread Brian Potkin
On Mon 27 Mar 2017 at 18:45:05 +0200, Dimitri Chausson wrote: > Hi Brian, Hello Dimitri. > Thanks for asking. I still have this issue, and I am surprised that > nobody reported similar things. This is on testing/unstable? Similar issues have been reported and have been dealt with successfull

Bug#858538: RFS: fadecut/0.2.0-1

2017-03-28 Thread Marco Balmer
Dear Sean, Thanks for reply. On Mon, Mar 27, 2017 at 07:12:33PM -0700, Sean Whitton wrote: > On Thu, Mar 23, 2017 at 09:47:44AM +0100, Marco Balmer wrote: > > Changes since the last upload: > > fadecut (0.2.0-1) unstable; urgency=low > > [...] > These changes are not appropriate during the curren

Bug#858899: sbuild: add null resolver

2017-03-28 Thread Johannes Schauer
Source: sbuild Severity: wishlist Add a resolver that does nothing. Lets call it null resolver. It is used like so: --build-dep-resolver=null The utility would be for situations in which sbuild is used as a package builder but the user wants complete control over how dependencies are install

Bug#858900: unblock: apparmor/2.11.0-3

2017-03-28 Thread intrigeri
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Hi! please unblock package apparmor, that fixes CVE-2017-6507 aka. Debian bug #858768. unblock apparmor/2.11.0-3 diff -Nru apparmor-2.11.0/debian/apparmor.init apparmor-2.11.0/debian/appa

Bug#858901: xul-ext-ublock-origin package does not actually work OOTB

2017-03-28 Thread Rohan Garg
Package: xul-ext-ublock-origin Version: 1.10.4+dfsg-1 Severity: normal Dear Maintainer, * What led up to the situation? 1) Installed firefox and xul-ext-ublock-origin on a fresh install 2) Launch firefox 3) Navigate to http://ads-blocker.com/testing/ 4) Ads still shown

Bug#626185: me too with 408

2017-03-28 Thread Daniel Pocock
I've seen the same problem on jessie with awstats 7.2+dfsg-1 There have been various discussions about it: https://sourceforge.net/p/awstats/bugs/914/ https://sourceforge.net/p/awstats/bugs/187/ I would agree this is a potential DoS attack as any remote attacker can stop awstats reporting. At

Bug#858902: opendkim-tools: opendkim-testkey should support using a recursive DNS server

2017-03-28 Thread Russell Coker
Package: opendkim-tools Version: 2.11.0~alpha-9 Severity: important opendkim-testkey talks to DNS servers in the real world when verifying a key. The advantage of this is that you can get a full test and see what systems outside your control will see. The disadvantage of this is that you can't te

Bug#858903: Mongodb server fails to install if there is 'mongodb' user already in system.

2017-03-28 Thread Marcin Juszkiewicz
Package: mongodb-server Version: 1:3.2.11-2 Severity: normal I am using Kolla to build container images with OpenStack components. One of images contains mongodb. And it fails to build. Part of build is creation of users with fixed UID/GID values. Which works fine for most situations as packages

Bug#858882: r-cran-rcppgsl: Missing dependency libgsl-dev

2017-03-28 Thread Dirk Eddelbuettel
On 28 March 2017 at 13:32, Andreas Tille wrote: | Hi Dirk, | | On Tue, Mar 28, 2017 at 05:24:02AM -0500, Dirk Eddelbuettel wrote: | > | Alternatively this could be fixed by moving the script gsl-config from | > | package libgsl-dev to libgsl2. Since you are the maintainer of both | > | > I am w

Bug#858882: r-cran-rcppgsl: Missing dependency libgsl-dev

2017-03-28 Thread Dirk Eddelbuettel
On 28 March 2017 at 14:16, Adrian Bunk wrote: | On Tue, Mar 28, 2017 at 10:09:28AM +0200, Andreas Tille wrote: | > ... If you want to fix the issue inside | > r-cran-rcppgsl package you need to either convince the release team to | > accept this new upstream version or revert the new version by us

Bug#858768: apparmor: CVE-2017-6507

2017-03-28 Thread intrigeri
Hi, Antoine Beaupre: > Jessie, on the other hand, does not seem to be vulnerable: >From my reading of the code, it seems that Wheezy, Jessie and Stretch are all vulnerable, but only when using sysvinit. I've just fixed this issue in sid, and filed an unblock request for Stretch. But systems runn

Bug#832941: RFS: 4pane

2017-03-28 Thread David Hart
Dear Sean, >I can't review your latest work because the PGP signature for the >tarball fails to verify: >iris ~/rfs/4pane % origtargz -u >W: Unable to locate package 4pane >Trying uscan --download-current-version ... >uscan: Newest version of 4pane on remote site is 4.0, specified

Bug#858768: apparmor: CVE-2017-6507

2017-03-28 Thread Salvatore Bonaccorso
Hi! On Tue, Mar 28, 2017 at 02:27:35PM +0200, intrigeri wrote: > Hi, > > Antoine Beaupre: > > Jessie, on the other hand, does not seem to be vulnerable: > > From my reading of the code, it seems that Wheezy, Jessie and Stretch > are all vulnerable, but only when using sysvinit. I've just fixed t

Bug#858835: [ftpmas...@ftp-master.debian.org: python-daemon_2.1.2-1~bpo8+1_amd64.changes is NEW]

2017-03-28 Thread Andreas Tille
tags 858835 pending thanks Hi, as promised I have just uploaded python-daemon to jessie-backports awaiting approval from backport maintainers. The bad news is that the issue does not seem to be fixed yet: $ LANG=C sudo apt-get install lava-coordinator Reading package lists... Done Building depe

Bug#858867: diffoscope: please support pcap files

2017-03-28 Thread Daniel Kahn Gillmor
On Tue 2017-03-28 03:39:18 -0500, Chris Lamb wrote: > tags 858867 + pending > thanks > > Implemented in Git: > > > https://anonscm.debian.org/git/reproducible/diffoscope.git/commit/?id=c5d01341055d0aa0552d08725a6b8e44255b0374 woo, thanks! in my testing before i saw this, i ended up using diff

Bug#858260: Help needed for pandas bug: Could anybody verify the suspicion that tzdata might have some influence?

2017-03-28 Thread Andreas Tille
Hi James, I'm just forwarding the issue to python-tz maintainers - may be they will be able to clarify it. Thanks for the hint Andreas. On Tue, Mar 28, 2017 at 12:05:22PM +0100, James Cowgill wrote: > > I admit that when reading the bug report I have no idea how to fix it. > > I can confir

Bug#858904: openscad: opengl / x11 strange "hanging" error (also found in other packages)

2017-03-28 Thread lkcl
Package: openscad Severity: important Tags: upstream as can be seen in #848895 and is being reported in an increasingly large number of other packages that use x11 and opengl, there is an obscure race-condition which is causing intermittent "hanging" of all and any packagees that make significant

Bug#858905: kde-telepathy-text-ui: Fails to show text entry widget

2017-03-28 Thread Stuart Prescott
Package: kde-telepathy-text-ui Version: 15.08.3-1+b2 Severity: serious Justification: breaks entire package Dear Maintainer, The text-ui package is supposed to present a textbox in which the user can type to be able to chat on IM. At present, the text box is not displayed (instead and empty windo

Bug#837907: more on NFS client hangs

2017-03-28 Thread Sergio Gelato
I have some more information about [what I believe to be] this problem. We've had similar incidents from several clients, running kernels 3.16.{36,39} and 4.9 (jessie-backports). I think this rules out a client hardware issue. The trigger (from the client's perspective) seems to be loss of contac

Bug#858906: python-debian missing python dependency on chardet

2017-03-28 Thread Walter Scheper
Package: python-debian Version: 0.1.27 Severity: normal Tags: upstream Dear Maintainer, Consuming the python-debian package directly from pypi fails to install the chardet package, which is required by python-debian. -- System Information: Debian Release: 8.7 APT prefers stable-updates APT p

Bug#858882: r-cran-rcppgsl: Missing dependency libgsl-dev

2017-03-28 Thread Andreas Tille
Hi Dirk, On Tue, Mar 28, 2017 at 07:25:34AM -0500, Dirk Eddelbuettel wrote: > | On Tue, Mar 28, 2017 at 10:09:28AM +0200, Andreas Tille wrote: > | > ... If you want to fix the issue inside > | > r-cran-rcppgsl package you need to either convince the release team to > | > accept this new upstream v

  1   2   3   >