Bug#809066: tiff: CVE-2015-7554

2017-05-18 Thread Salvatore Bonaccorso
Hi, On Thu, May 18, 2017 at 08:12:50PM +0200, László Böszörményi (GCS) wrote: > Hi Moritz, > > On Thu, May 18, 2017 at 7:36 PM, Moritz Muehlenhoff wrote: > > On Sat, Dec 26, 2015 at 10:21:52PM +0100, Salvatore Bonaccorso wrote: > >> Source: tiff > >> Version: 4.0.5-1 > >> Severity: important > >

Bug#861282: changes merged upstream

2017-05-18 Thread Matthew Hooker
Hi All, The original patch should not be used in any distributed version of packer. A complete fix has been merged into packer master. Please double check the complete patch here https://github.com/hashicorp/packer/pull/4900 Thanks, --Matt Hooker

Bug#862923: po4a: [INTL:nl] Dutch po file for the po4a package

2017-05-18 Thread Martin Quinson
package: po4a tag 862923 fixed-upstream pending thanks Hello, I just commited your work in the tree, many thanks. It will be part of the next release, which should occure soon after the Debian release. Thanks again, Mt. On Thu, May 18, 2017 at 08:19:40PM +0200, Frans Spiesschaert wrote: > >

Bug#862914: nmu: veusz_1.21.1-1

2017-05-18 Thread Adrian Bunk
On Thu, May 18, 2017 at 07:00:00PM +, Niels Thykier wrote: > Control: block -1 by 831860 > > Adrian Bunk: > > Package: release.debian.org > > Severity: normal > > User: release.debian@packages.debian.org > > Usertags: binnmu > > > > nmu veusz_1.21.1-1 . ANY . unstable . -m "rebuild with s

Bug#858031: Please make volume id for netinst different from DVD

2017-05-18 Thread Guido Günther
On Thu, May 18, 2017 at 08:31:18AM +0200, Thomas Schmitt wrote: > Hi, > > Guido Günther wrote: > > > Volume id: Debian stretch-DI-rc2 amd64 1 > > > [...] > > > >If the netinst variant would contain netinst or similar > > Steve McIntyre wrote: > > I understand, yes. The problem we have is that the

Bug#862398: [pkg-gnupg-maint] Bug#862398: build wks client and server tools

2017-05-18 Thread Daniel Kahn Gillmor
Hi Stefan-- On Thu 2017-05-18 18:37:04 +0200, Stefan Bühler wrote: > There are a lot of manpages in debian/* - so it looks to me like > upstream isn't really interested in maintaining them. If upstream isn't > maintaining them, it might be easier to keep them in debian. these are specific to the

Bug#861686: unblock: openssl/1.1.0e-2

2017-05-18 Thread Sebastian Andrzej Siewior
On 2017-05-07 16:39:00 [+], Niels Thykier wrote: > Sebastian Andrzej Siewior: > > uploaded and built on all releases architectures. > > Ack/RT unblock, CC'ing KiBi for a d-i ack. I don't want to rush or anything but in case it got forgotten, we are still waiting for the d-i ack. > Thanks, >

Bug#862925: python2.7: Python not compiled with -fexceptions in ppc64le

2017-05-18 Thread Bruno Rosa
Package: python2.7 Version: 2.7.13-2 Severity: normal Tags: upstream Dear Maintainer, Pytorch (https://github.com/pytorch/pytorch) is an application that is written in python, C and C++. There's high interoperalibity between code written in these languages therex. The issue is that there are cas

Bug#862051: nodejs-legacy: possibly drop this package, now that ax25-node has been removed?

2017-05-18 Thread Jérémy Lal
Package: nodejs-legacy Version: 6.10.2~dfsg-1 Followup-For: Bug #862051 I would love to do that, but the reason behind the rename came from https://bugs.debian.org/614907. Feel free to ask TC to find a new solution. Jérémy

Bug#831360: /usr/bin/lush must not link libbfd-*-system.so dynamically

2017-05-18 Thread 阿正
On Fri, 15 Jul 2016 00:06:18 +0200 Helmut Grohne wrote: > Package: lush > Version: 1.2.1-9+cvs20110227+nmu1+b4 > Severity: grave > > /usr/bin/lush currently links libbfd dynamically. Since binutils 2.26.1, > that library went away but lush's dependency is still satisfied > resulting in a broken bi

Bug#862926: RFS: fonts-firacode/1.204-2~bpo8+1

2017-05-18 Thread Pierre Rudloff
Package: sponsorship-requests Severity: normal [important for RC bugs, wishlist for new packages] Dear mentors, I am looking for a sponsor for my package "fonts-firacode" * Package name: fonts-firacode Version : 1.204-2~bpo8+1 Upstream Author : Nikita Prokopov * URL

Bug#831360:

2017-05-18 Thread 阿正

Bug#862927: gnat (GCC 7) fails to build on m68k

2017-05-18 Thread Matthias Klose
Package: src:gcc-7-cross-ports Version: 1 Trying to build a gnat m68k cross compiler fails with: /home/packages/cross/7/p/gcc-7-cross-ports-1/gcc/build/./gcc/xgcc -B/home/packages/cross/7/p/gcc-7-cross-ports-1/ gcc/build/./gcc/ -B/usr/m68k-linux-gnu/bin/ -B/usr/m68k-linux-gnu/lib/ -isystem /usr/m

Bug#797931: 7779

2017-05-18 Thread 阿正

Bug#809066: tiff: CVE-2015-7554

2017-05-18 Thread Moritz Muehlenhoff
On Thu, May 18, 2017 at 09:09:11PM +0200, Salvatore Bonaccorso wrote: > Hi, > > On Thu, May 18, 2017 at 08:12:50PM +0200, László Böszörményi (GCS) wrote: > > Hi Moritz, > > > > On Thu, May 18, 2017 at 7:36 PM, Moritz Muehlenhoff wrote: > > > On Sat, Dec 26, 2015 at 10:21:52PM +0100, Salvatore Bo

Bug#862928: openvpn: systemd redirect impacts restart and init script functionality and should be disabled of fixed

2017-05-18 Thread Teco Boot
Package: openvpn Version: 2.3.4-5+deb8u1 Severity: important Tags: patch Dear Maintainer, * What led up to the situation? Restart of openvpn daemon failed, caused by "Address already in use" See OpenVPN ticket #891 * What exactly did you do (or not do) that was effective (or ineffect

Bug#862929: CVE-2016-10371

2017-05-18 Thread Moritz Muehlenhoff
Source: tiff Severity: important Tags: security Hi, please see http://bugzilla.maptools.org/show_bug.cgi?id=2535 http://bugzilla.maptools.org/show_bug.cgi?id=2612 Patch is here: https://github.com/vadz/libtiff/commit/0abd094b6e5079c4d8be733829240491cb230f3d Cheers, Moritz

Bug#862930: RFS: node-big-integer/1.6.22-1 [ITP]

2017-05-18 Thread Pierre Rudloff
Package: sponsorship-requests Severity: wishlist Dear mentors, I am looking for a sponsor for my package "node-big-integer" * Package name: node-big-integer Version : 1.6.22-1 Upstream Author : Peter Olson * URL : https://github.com/peterolson/BigInteger.js * L

Bug#862931: RM: openjdk-6/experimental -- RoQA; obsolete

2017-05-18 Thread Moritz Muehlenhoff
Package: ftp.debian.org Severity: normal Hi, please remove openjdk-6. It was already removed from unstable, but still in experimental to stage uploads for Debian LTS and Ubuntu precise. Support for precise has now ended and Wheezy LTS moved to openjdk-7, so it can be removed now. (This ws discusse

Bug#862932: ferret-vis: ppl and font directories not recognised

2017-05-18 Thread Marco van Hulten
Package: ferret-vis Version: 7.0-2 Severity: normal Dear maintainer, I have installed `ferret-vis` on stretch, set several `FER_*` paths and ran the program. The program runs and I can load a dataset. However, when I try to plot something from the dataset, the program crashes: ``` marco@gravit

Bug#857573: Processed: Re: systemd: Raise network interfaces fails to stop cleanly on shutdown/reboot

2017-05-18 Thread Michael Biebl
Am 18.05.2017 um 10:32 schrieb Christoph Biedl: > Michael Biebl wrote... > >> To mark as mountpoint as network mount, there is the _netdev mount >> option. > > While I can confirm this provides a sane and safe shutdown for a mounted > AoE-device, this works only if the device was initially mounte

Bug#862580: Winbind crashes on ssh login of a domain user.

2017-05-18 Thread Christian Meyer
Okay, since it's a winbind bug, some more winbind related information: This is a reproducible bug and a regression from jessie to stretch. Please fix it before the release of stretch. As a "workaround": After login as a local user you can successfull login as a domain user for some time. When you

Bug#859867: [buildd-tools-devel] Bug#859867: Please add a package which automatically configures sbuild for Debian packaging

2017-05-18 Thread Michael Stapelberg
Sorry for the late reply. On Tue, Apr 11, 2017 at 10:39 AM, Johannes Schauer wrote: > Hi, > > Quoting Michael Stapelberg (2017-04-08 11:28:12) > > One area where sbuild sorely lacks is configuration, though: pbuilder is > very > > easy to set up, whereas sbuild requires reading through > > https

Bug#862917: Warzone 2100 3.2 campaign is buggy and unplayable. Debian should package version 3.1 until this is resolved

2017-05-18 Thread Markus Koschany
Am 18.05.2017 um 19:35 schrieb Evgeny Kapun: > Package: warzone2100 > Version: 3.2.1-2 > Severity: important > > Starting from version 3.2, campaign scripts in Warzone 2100 are being > rewritten in JavaScript [1]. As a result, they now have lots of bugs > (some examples: [2], [3], [4]), making the

Bug#862933: ITP: gmailfeed -- A plasmoid for notification and listing unread emails from your Gmail inbox

2017-05-18 Thread Nicholas D Steeves
Package: wnpp Severity: wishlist Owner: Nicholas D Steeves * Package name: gmailfeed Version : 1.1 Upstream Author : Anthony Vital * URL : https://github.com/anthon38/gmailfeed * License : GPL-3 Programming Lang: C++ Description : A plasmoid for the no

Bug#862934: ITP: slick-greeter -- slick-looking LightDM greeter

2017-05-18 Thread foss.freedom
Package: wnpp Severity: wishlist Owner: David Mohammed Package name: slick-greeter Version: 1.0.3 Upstream Author : Clement Lefebvre URL: https://github.com/linuxmint/slick-greeter/ License: GPL 3+ Programming Lang: Vala Description: Slick-looking LightDM greeter

Bug#862922: aptitude: [INTL:nl] Dutch po file for the aptitude package

2017-05-18 Thread Manuel A. Fernandez Montecelo
Control: tags -1 + pending 2017-05-18 20:18 Frans Spiesschaert: Package: aptitude Severity: wishlist Tags: l10n patch Dear Maintainer, == Please find attached the updated Dutch po file for the aptitude package. It has

Bug#862935: installation-reports: vmlinuz missing from armhf netboot SD image

2017-05-18 Thread Ben Harris
Package: installation-reports Severity: important -- Package-specific info: Boot method: netboot SD-card image Image version: http://ftp.nl.debian.org/debian/dists/testing/main/installer-armhf/current/images/netboot/SD-card-images/partition.img.gz [20170407] Date: 2017-05-18T22:00+01:00 Machi

Bug#862936: ITA: fonts-sil-annapurna -- smart font for languages using Devanagari script

2017-05-18 Thread Bobby de Vos
Package: wnpp Version: N/A; reported 2017-05-18 Severity: normal The current maintainer, Daniel Glassey, has requested that I take over the packaging of the fonts that SIL International produces, such as this font. Bobby -- Bobby de Vos /bobby_de...@sil.org/

Bug#862937: unblock: firejail/0.9.44.8-2

2017-05-18 Thread Reiner Herrmann
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package firejail Version 0.9.44.8-2 includes a cherry-picked patch that fixes a memory corruption which leads to a crash when firejail is called with certain options (#862083

Bug#858031: Please make volume id for netinst different from DVD

2017-05-18 Thread Steve McIntyre
Control: tag -1 +pending On Thu, May 18, 2017 at 09:38:43PM +0200, Guido Günther wrote: >On Thu, May 18, 2017 at 08:31:18AM +0200, Thomas Schmitt wrote: >> Hi, >> >> Guido Günther wrote: >> > > Volume id: Debian stretch-DI-rc2 amd64 1 >> > > [...] >> > > >If the netinst variant would contain neti

Bug#862727: ITP: libjasper -- JasPer JPEG-2000 runtime library

2017-05-18 Thread Adam Cécile
Control:retitle -1 ITP: libjasper -- JasPer JPEG-2000 runtime library

Bug#862727: ITP: libjasper -- JasPer JPEG-2000 runtime library

2017-05-18 Thread Adam Cécile
Control:retitle -1 ITP: jasper -- JasPer JPEG-2000 runtime library

Bug#861018: Permissions on folders and access problems

2017-05-18 Thread Simon Deziel
On Thu, 27 Apr 2017 12:01:47 +0100 Jim Cobley wrote: > audit: type=1400 audit(1493287998.510:88): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/mnt/Z/temp/Bluebell/TyreSize.jpg" pid=4537 comm="thunderbird" > requested_mask="r" denied_mask="r" fsuid=1900 ouid=1900 Right, /

Bug#861686: unblock: openssl/1.1.0e-2

2017-05-18 Thread Cyril Brulebois
Sebastian Andrzej Siewior (2017-05-18): > On 2017-05-07 16:39:00 [+], Niels Thykier wrote: > > Sebastian Andrzej Siewior: > > > uploaded and built on all releases architectures. > > > > Ack/RT unblock, CC'ing KiBi for a d-i ack. > > I don't want to rush or anything but in case it got forgott

Bug#862938: RFP : gostack-stack -- utilities to capture, manipulate, and format call stacks

2017-05-18 Thread Jeffrey Cliff
Package: wnpp Severity: wishlist Upstream Author : Chris Hines URL : https://github.com/go-stack/stack License : MIT Language : Go Description : Package stack implements utilities to capture, manipulate, and format call stacks. It provides a simpler API than package runtime. The implementation ta

Bug#861754: libpll: FTBFS on non-x86: x86intrin.h: No such file or directory

2017-05-18 Thread Christian Seiler
Hi, a small comment on the patch: On 05/16/2017 01:28 PM, James Cowgill wrote: > override_dh_auto_configure: > - ./autogen.sh > -ifeq ($(DEB_BUILD_ARCH),i386) > - ./autogen.sh --disable-avx --disable-sse > - dh_auto_configure -- --disable-avx --disable-sse > +ifneq ($(filter $(DEB_HO

Bug#862939: RFP : golang-github-fatih-color-dev -- Color package for Go

2017-05-18 Thread Jeffrey Cliff
Package: wnpp Severity: wishlist Upstream Author : Fatih Arslan URL : https://github.com/fatih/color/ License : MIT Language : Go Description : Color lets you use colorized outputs in terms of ANSI Escape Codes in Go (Golang). The API can be used in several ways, pick one that suits you.

Bug#862940: RFS: slick-greeter/1.0.3-1 ITP

2017-05-18 Thread foss.freedom
Package: sponsorship-requests Severity: wishlist Dear mentors, I am looking for a sponsor for my package "slick-greeter" * Package name: slick-greeter Version : 1.0.3-1 Upstream Author : Clement Lefebvre * URL : https://github.com/linuxmint/slick-greeter/ *

Bug#758004: uswsusp: package does not play well with systemd

2017-05-18 Thread Ximin Luo
Package: uswsusp Version: 1.0+20120915-6.1+b1 Followup-For: Bug #758004 Dear Maintainer, An effective workaround is to use systemd overrides as mentioned earlier, from the Arch Linux wiki. Adapted for Debian, this becomes: $ cat /etc/systemd/system/systemd-{suspend,hybrid-sleep,hibernate}.servi

Bug#861612: pixbros: level designs appear to be non-free

2017-05-18 Thread Steve Cotton
On Fri, May 12, 2017 at 11:03:24PM +0200, Markus Koschany wrote: > What we need to check is: Does the game comply with the DFSG and does it > infringe the copyright of another programmer/artist. In my opinion that > is not the case here because the license is DFSG-compatible and the game > looks an

Bug#862941: binNMUs needed for multiple arm64 packages (#850814)

2017-05-18 Thread Steve McIntyre
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu Hey folks, As first discussed a while back, we've had a bug in gold which caused some broken builds of some arm64 packages. These were mostly in backports, with a few example in the early li

Bug#862942: firefox-esr: Attempting to launch Firefox locks up my Stretch RC3 system

2017-05-18 Thread Len Huppe
Package: firefox-esr Version: 45.9.0esr-1 Severity: normal Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? * What exactly did you do (or not do) that was effective (or ineffective)? * What was the outco

Bug#857766: wget failed to download

2017-05-18 Thread Ctzn
This package is outdated; points to a wrong and unavailable download of the flashplugin. Currently pointing to 24.0.0.186; Needs to be updated to 25.0.0.171 Maybe convert Ubuntu's tool to Debian? Sent from [ProtonMail](https://protonmail.com), Swiss-based encrypted email. Sent with [ProtonMail](h

Bug#862824: xserver-xorg-core: tigervncserver crash in WriteToClient shortly after VNC client connecs

2017-05-18 Thread Michel Dänzer
On 18/05/17 09:32 PM, Rafal wrote: > > One notice not related to this error. I'm looking at FlushClient > function in io.c and I see one weird thing. It contains the following "if": > > if (trans_conn && (len = _XSERVTransWritev(trans_conn, iov, i)) >>= 0) {... > > Later there are "else

Bug#862529: uncommons-watchmaker-doc: Rename the documentation package to lib*-java-doc

2017-05-18 Thread Emmanuel Bourg
On 05/18/2017 06:48 PM, 殷啟聰 wrote: > The reason behind this package name is that it provides the Javadoc > for both of the 2 library packages > (libuncommons-watchmaker-framework-java & > libuncommons-watchmaker-swing-java). If I split their Javadocs, there > will be dead hyperlinks (or in fact the

Bug#814755: texlive-binaries: LuaTeX "checksum mismatch" warnings in some OVF fonts on 64bit

2017-05-18 Thread Igor Liferenko
This has been fixed: http://tracker.luatex.org/view.php?id=965 The bug report may be closed.

Bug#862943: texlive-binaries: online display does not work in MetaFont

2017-05-18 Thread Igor Liferenko
Package: texlive-binaries Version: 2016.20160513.41080.dfsg-2 Severity: important Dear Maintainer, Consider this example "test.mf": drawdot (35,70); showit; If we run "mf test" the graphics window comes up but nothing is displayed. -- System Information: Debian Release: 9.0 APT prefers t

Bug#862051: Refer #862051 to ctte (WAS: nodejs-legacy: possibly drop this package, now that ax25-node has been removed?)

2017-05-18 Thread James Lu
Control: reassign -1 tech-ctte Control: retitle -1 Rename nodejs back to node for buster, now that ax25-node has been removed? Dear tech-ctte, In 2012, the decision was made to rename Node.js' "node" name to nodejs-legacy, and transition the existing "node" package to ax25-node. However, ax25-nod

Bug#861754: libpll: FTBFS on non-x86: x86intrin.h: No such file or directory

2017-05-18 Thread Aaron M. Ucko
Christian Seiler writes: > On 05/16/2017 01:28 PM, James Cowgill wrote: >> +ifneq ($(filter $(DEB_HOST_ARCH_CPU), amd64 i386),) > > Also, you should add x32 to the list of archs next to amd64 and > i386 where SSE3 and higher should be disabled. AFAICT, amd64 should cover it: $ dpkg-architecture

Bug#862944: django-floppyforms: spelling error in description

2017-05-18 Thread James Valleroy
Package: django-floppyforms Severity: minor Tags: patch Please see the attached patch to fix a spelling error in the package description (foppy -> floppy). From 6aecbca2730d9d72d3bf66a0578e4310adba107b Mon Sep 17 00:00:00 2001 From: James Valleroy Date: Thu, 18 May 2017 22:14:39 -0400 Subject: [P

Bug#860981: CVE-2016-4484 still Exists

2017-05-18 Thread ??. ?
Well, since Red Hat is not going to take any action, I think you are right https://access.redhat.com/security/cve/cve-2016-4484 Best Regards, XU Guang-zhao

Bug#826026: Upstream 2.0 resolves #329192

2017-05-18 Thread Donald Gordon
Hi I'm hitting bug #329192 (permanent SMTP failures are retried endlessly) a lot. Where did you get with posting an upgraded nullmailer package? Regards Donald

Bug#861018: Permissions on folders and access problems

2017-05-18 Thread Carsten Schoenert
Control: retitle -1 Thunderbird apparmor profile: access problem on /mnt Hello Simon, On Thu, May 18, 2017 at 06:51:14PM -0400, Simon Deziel wrote: > On Thu, 27 Apr 2017 12:01:47 +0100 Jim Cobley > wrote: > > audit: type=1400 audit(1493287998.510:88): apparmor="DENIED" > > operation="open" prof

Bug#861018: Permissions on folders and access problems

2017-05-18 Thread Carsten Schoenert
@all Due a misspelled email address of Ulrike I'm just resend all again. Sorry Am 19.05.2017 um 07:11 schrieb Carsten Schoenert: > Control: retitle -1 Thunderbird apparmor profile: access problem on /mnt > > Hello Simon, > > On Thu, May 18, 2017 at 06:51:14PM -0400, Simon Deziel wrote: >> On T

Bug#862945: unblock: jbig2dec/0.13-4.1

2017-05-18 Thread Salvatore Bonaccorso
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Hi Please unblock package jbig2dec It fixes three CVEs (which as well were addressed in a DSA): https://www.debian.org/security/2017/dsa-3855 +jbig2dec (0.13-4.1) unstable; urgency=high

Bug#862945: unblock: jbig2dec/0.13-4.1

2017-05-18 Thread Salvatore Bonaccorso
On Fri, May 19, 2017 at 07:22:12AM +0200, Salvatore Bonaccorso wrote: > The full debdiff is attached t othis mail as debdiff against the current > version in testing. Or not... Salvatore diff -Nru jbig2dec-0.13/debian/changelog jbig2dec-0.13/debian/changelog --- jbig2dec-0.13/debian/changelog

Bug#818020: take over maintenance for libdbusmenu

2017-05-18 Thread Mike Gabriel
Control: retitle -1 ITA: libdbusmenu -- library for passing menus over DBus Control: owner -1 mike.gabr...@das-netzwerkteam.de I have been looking into Ayatana Indicators recently and this package is a key component for libappindicator / libayatana-appindicator. Upload to experimental with a

Bug#862946: unblock: libxstream-java/1.4.9-2

2017-05-18 Thread Salvatore Bonaccorso
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Hi Please unblock package libxstream-java It fixes CVE-2017-7957, #861521, which could lead to a denial of service during unmarshalling. +libxstream-java (1.4.9-2) unstable; urgency=med

<    1   2