Bug#864831: [Debian-science-sagemath] NTL update to 10.3.0

2017-08-31 Thread Julien Puydt
Hi, Le 31/08/2017 à 00:10, Ximin Luo a écrit : > Julien Puydt: >> Hi, >> >> Le 29/08/2017 à 14:25, Tobias Hansen a écrit : >>> Now is a good time for the NTL transition. Julien, could you update the >>> package to 10.3.0? Then we can test-build the reverse dependencies and >>> ask for a transition

Bug#849505: transition: nodejs

2017-08-31 Thread Jérémy Lal
2017-08-30 23:26 GMT+02:00 Emilio Pozuelo Monfort : > On 29/08/17 23:15, Sebastiaan Couwenberg wrote: > > On 06/25/2017 01:15 PM, Jonathan Wiltshire wrote: > >> Now stretch is released we can deal with this. > >> > >> On Wed, Dec 28, 2016 at 12:49:33AM +0100, Jérémy Lal wrote: > >>> Transition sho

Bug#873790: ITP: node-p-locate -- async version of Array#find

2017-08-31 Thread Pirate Praveen
Package: wnpp Severity: wishlist Owner: Pirate Praveen X-Debbugs-CC: debian-de...@lists.debian.org * Package name: node-p-locate Version : 2.0.0 Upstream Author : Sindre Sorhus (sindresorhus.com) * URL : https://github.com/sindresorhus/p-locate#readme * License

Bug#873791: [python-numpy] Undefined symbols on several architectures

2017-08-31 Thread Ole Streicher
Package: python-numpy Version: 1.12.1-3+b2 Severity: serious Affects: src:casacore On several platforms, numpy cannot be loaded successfully due to missing symbols: import numpy as NUM; File "/usr/lib/python2.7/dist-packages/numpy/__init__.py", line 166, in from . import random File

Bug#873789: init-system-helpers: autopkgtests broken in 1.49

2017-08-31 Thread Steve Langasek
Package: init-system-helpers Version: 1.49 Followup-For: Bug #873789 User: ubuntu-de...@lists.ubuntu.com Usertags: origin-ubuntu artful ubuntu-patch Attached is a patch which fixes the tests to also correctly handle the escape characters in the unit names. Cheers, -- Steve Langasek

Bug#873774: Many gui apps become slow responsive after upgrading my sid

2017-08-31 Thread liuxu
How to install a older version of scim? I tried apt-get install scim=1.4.17-1+b1, but it says version 1.4.17-1+b1 not found, neither for 1.4.17-1. On 08/31/2017 01:35 AM, Rolf Leggewie wrote: On 31.08.2017 09:36, liuxu wrote: Package: scim Version: 1.4-18 many gui apps in my mate desktop env b

Bug#873783: wcc: FTBFS on non-amd64 architectures

2017-08-31 Thread Philippe Thierry
Le 31 août 2017 05:10:10 GMT+02:00, "Aaron M. Ucko" a écrit : >Source: wcc >Version: 0.0.2+dfsg-1 >Severity: important >Tags: upstream >Justification: fails to build from source > >Builds of wcc for architectures other than (Linux) amd64 have been >failing. > >On non-x86 architectures, there are

Bug#873792: qjackctl will not start at all

2017-08-31 Thread Ed Peguillan III
Package: qjackctl Version: 0.4.5-1 Severity: grave Justification: renders package unusable Dear Maintainer, * What led up to the situation? I use jackd to facilitate realtime audio according to my limits.conf for some software called Pianoteq. In the last update, I tried to run qjackc

Bug#873793: openjdk-8-jre: NetBeans IDE becomes slower and slower after some usage

2017-08-31 Thread negora
Package: openjdk-8-jre Version: 8u141-b15-1~deb9u1 Hello: I'm using the upstream version of NetBeans IDE, the version 8.2. I know that it's not software maintained by the Debian team, but I believe that the bug that I'm going to talk about is not directly related to NetBeans, but to the OpenJDK v

Bug#873597: virt-manager: gir1.2-spice-client-gtk-3.0 package has been renamed to gir1.2-spiceclientgtk-3.0

2017-08-31 Thread Guido Günther
Hi, On Wed, Aug 30, 2017 at 09:44:46PM +0200, Christoph Anton Mitterer wrote: > On Wed, 2017-08-30 at 21:34 +0200, Guido Günther wrote: > > You have gir1.2-spiceclientgtk-3.0 installed? > Yes > > # dpkg -l gir1.2-spiceclientgtk-3.0 > [snip snap] > ii  gir1.2-spiceclientgtk-3.0 0.34

Bug#873244: pyjwt: CVE-2017-11424: Incorrect handling of PEM-encoded public keys

2017-08-31 Thread Salvatore Bonaccorso
Control: notfound -1 0.2.1-1+deb8u1 Hi On Fri, Aug 25, 2017 at 08:59:33PM +0200, Salvatore Bonaccorso wrote: > Please adjust the affected versions in the BTS as needed. I think this > should be present as well in 0.2.1-1+deb8u1. Whilst the test is missing as well in 0.2.1-1+deb8u1, pyjwt in Jess

Bug#873795: calibre: Security risk and possible backdoor when fetching news

2017-08-31 Thread Jens Schmidt
Package: calibre Version: 3.4.0+dfsg-1 Severity: normal Dear Maintainer, I'm using cron and /usr/bin/ebook-convert to fetch RSS news daily. Some generated ebooks are containing typos. The mistakes are located in a so-called "news fetching recipe" in Zip archive /usr/share/calibre/builtin_recipes.

Bug#873794: syntax error in debconf preseeding

2017-08-31 Thread Thomas Lange
Package: debian-cloud Tags: patch In fai-cloud-image, there's a synatx error in a debconf preseeding file. This may cause grub to hang during boot. Attached is the fix 0001-double-space-single-space.patch Description: Binary data -- regards Thomas

Bug#796241: lightdm-gtk-greeter: confusing placeholder text when greeter-hide-users=true

2017-08-31 Thread IOhannes m zm\xc3\xb6lnig (Debian/GNU)
Package: lightdm-gtk-greeter Version: 2.0.2-1 Followup-For: Bug #796241 Control: Severity -1 important Dear Maintainer, confirmed on a brand new buster system. while seemingly a minor issue, this can easily lead to exposing the password of a user. please fix this..

Bug#851424: Compile fixes merged to ACE master

2017-08-31 Thread Johnny Willemsen
Hi, The compile fixes for OpenSSL 1.1 support are merged to ACE master, see https://github.com/DOCGroup/ACE_TAO/pull/494 for all changes that had to be made. Best regards, Johnny Willemsen Remedy IT Postbus 81 | 6930 AB Westervoort | The Netherlands http://www.remedy.nl

Bug#873708: libsystemd-shared: symbol collisions

2017-08-31 Thread Johan Carlquist
> On 30 Aug 2017, at 15:32, Felipe Sateler wrote: > > BTW, defining generic symbol names like `parse_time` in a public > library like heimdal does is a bad idea. It would be nice to have > heimdal either properly namespace their public symbols or hide > nonpublic symbols. Johan, could you file a

Bug#831521: implement capability to run custom mk-origtargz

2017-08-31 Thread Christopher Hoskin
Package: devscripts Version: 2.17.6+deb9u1 Followup-For: Bug #831521 Just thinking aloud here: I wonder if it would make sense to create a debhelper plugin to add a get-orig-source sequence, with a sequence of commands, e.g. something like: dh_uscan dh_unpack dh_repack dh_exclude_files dh_strip

Bug#873796: evolution: FTBFS when building only Architecture: all

2017-08-31 Thread Simon McVittie
Source: evolution Version: 3.24.5-2 Severity: serious Tags: patch Justification: fails to build from source (but built successfully in the past) evolution FTBFS on the 'all' buildd: https://buildd.debian.org/status/fetch.php?pkg=evolution&arch=all&ver=3.24.5-2&stamp=1504140526&raw=0 Unlike Ubuntu,

Bug#560683: Please add package which can be installed beside other smtps

2017-08-31 Thread Stephen R. van den Berg
On Fri, 11 Dec 2009 13:49:58 +0100 Klaus Ethgen wrote: > The (I think, not so uncommon) usecase is to have a laptop with no > persistent internet connection. For local Mails I want to have a local > only mail server. So I need something to flush real mails out when I > have a internet connection.

Bug#557728: ssmtp Version 2.62

2017-08-31 Thread Stephen R. van den Berg
On Tue, 24 Nov 2009 10:49:46 +0100 Michelle Konzack wrote: > You complan about the 2048 Bytes sounds realy weird, because base64 > encoded attachment should not have (-> please read the RFC's) more then > 72 Bytes per line. > > If you modify the source code you schould know, that some MTA's can

Bug#869399: unlock keyring automatically at startup

2017-08-31 Thread 積丹尼 Dan Jacobson
OK I used seahorse to make it unencrypted as a workaround.

Bug#815122: wireshark: add OID 1.3.6.1.4.1.11129.2.4.2

2017-08-31 Thread Balint Reczey
Control: fixed -1 2.4.0-1 Hi Fulano, On Fri, 19 Feb 2016 16:19:33 +1100 Fulano Diego Perez wrote: > > Package: wireshark > Version: 2.0.1+g59ea380-3+b1 > Severity: wishlist > > > please add OID 1.3.6.1.4.1.11129.2.4.2 Wireshark 2.4.0 added support for the OID. Cheers, Balint

Bug#807270: mk-origtargz: create reproducible tarballs and --mtime option

2017-08-31 Thread Chris Lamb
user reproducible-bui...@lists.alioth.debian.org usertags 807270 toolchain thanks Hey all, > mk-origtargz: create reproducible tarballs and --mtime option Adding a Reproducible Builds usertag and pinging the ML -- I hadn't spotted this wishlist bug before. Best wishes, -- ,''`. :

Bug#872252: Debian squeak-vm bug #862576 etoys: Doesn't get beyond Squeak security key generation

2017-08-31 Thread Tobias Pape
Dear Petter and all interested, > On 30.08.2017, at 19:14, David T. Lewis wrote: > > Hi Petter, > > Thank you for your reply. If you have a chance, could you please try > compiling the VM from sources on your own Debian development system, and > try running the Etoys image to see if it works. I

Bug#838103: python2.7: pip quits with a segfault

2017-08-31 Thread Matthias Klose
Control: tags -1 + moreinfo On 17.09.2016 13:32, Iain R. Learmonth wrote: > Package: python2.7 > Version: 2.7.12-3 > Severity: important > > Hi, > > I noticed when running pip to install packages, it always ended with a > segfault. > > The packages get installed but then pip does not quit clean

Bug#872514: devscripts: Please add script to report on reproducibility status of installed packages

2017-08-31 Thread Chris Lamb
Hi, > Updated patch attached Any update? ACK to push? :) Best wishes, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Bug#760021: lintian: check for not wrap-and-sort formatted files

2017-08-31 Thread Chris Lamb
Hi Eric, > lintian: check for not wrap-and-sort formatted files Good idea. Alas, I fear that this would either require calling out to wrap-and-sort (!) and diffing the result, or essentially reimplementing it within Lintian itself? Regards, -- ,''`. : :' : Chris Lamb `. `

Bug#868262: python2.7: invalid pointer (free())

2017-08-31 Thread Matthias Klose
Control: reassign -1 duplicity reassigning, it's much more likely to be caused by an extension, e.g. the one built from duplicity itself. On 13.07.2017 23:10, Alexander Schier wrote: > Package: python2.7 > Version: 2.7.13-2 > Severity: normal > > Dear Maintainer, > python 2.7 as an invalid free(

Bug#873798: chan_pjsip does not support TLSv1.1+

2017-08-31 Thread Bernhard Schmidt
Source: asterisk Version: 1:13.14.1~dfsg-2 Severity: important Tags: upstream chan_pjsip does not support TLSv1.1 and above. See upstream bug

Bug#873797: missing fping6 breaks smokeping slaves on older systems

2017-08-31 Thread Sven Hartge
Package: fping Version: 4.0-1 Severity: important Tags: ipv6 Hi! The change to remove the fping6 binary breaks smokeping slaves on older Debian systems (and other distributions) for me. Example: I have defined a smokeping probe like this on my master: , | + FPing6 | binary = /usr/bin/fping

Bug#873781: ocaml-gen: FTBFS without ocamlopt: /usr/lib/ocaml/gen/*.a missing

2017-08-31 Thread Andy Li
The *.a files should be marked as optional install items. I've just pushed a fix to alioth. My test build log of mips using sbuild can be found at https://gist.github.com/andyli/c53ebf60246bd8078c272d530bb7e1ce Stéphane: Would you review and upload, please? Best regards, Andy

Bug#754462: Bug#862051: nodejs (6.11.2~dfsg-1) experimental; urgency=medium

2017-08-31 Thread Philip Hands
Ian Jackson writes: > Jérémy Lal writes ("Bug#862051: nodejs (6.11.2~dfsg-1) experimental; > urgency=medium"): >> Maybe i didn't express myself properly: the idea is to keep /usr/bin/nodejs >> until it's no longer needed - be it other debian packages or other user >> scripts. > > Earlier you sai

Bug#865762: useradd: empty shell by default (debdiff patch available)

2017-08-31 Thread Baptiste Jonglez
Hi, I am attaching a debdiff patch that simply imports the upstream fix for this regression. This has been successfully run-tested on stretch amd64. Thanks, Baptiste PS: it seems that the source git repo [1] is not longer up-to-date because of a recent NMU change. Thus, the attached patch is a

Bug#873702: lintian: False positive: desktop-entry-lacks-keywords-entry

2017-08-31 Thread Chris Lamb
tags 873702 + pending thanks Fixed in Git: https://anonscm.debian.org/git/lintian/lintian.git/commit/?id=802e5b42ec94f0be27956cd01e1644dc2a800f87 Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-

Bug#873791: [python-numpy] Undefined symbols on several architectures

2017-08-31 Thread Michał Klichowicz
Got that error on amd64, too. This started today, after the upgrading python2.7 packages to 2.7.14~rc1 in sid. Downgrading back to buster's 2.7.13-2 solves the problem. Michal K.

Bug#873792: qjackctl will not start at all

2017-08-31 Thread Sebastian Ramacher
Control: tags -1 + moreinfo On 2017-08-31 02:40:59, Ed Peguillan III wrote: > Package: qjackctl > Version: 0.4.5-1 > Severity: grave > Justification: renders package unusable > > Dear Maintainer, > >* What led up to the situation? >I use jackd to facilitate realtime audio according to my

Bug#873799: lightning: window too tall for typical screen when there are many attachments

2017-08-31 Thread W. Martin Borgert
Package: lightning Version: 1:52.2.1-4~deb9u1 When using a typical notebook computer - the one used by 92.5% of all DDs :~) - with 768px height, and an average sized font, important buttons of the event dialog window are not visible. The window cannot even be resized in height, only the width. S

Bug#869282: udev: Update breaks Keyboard Configuration

2017-08-31 Thread jEsuSdA 8)
El 26/08/17 a las 10:35, Michael Biebl escribió: Can you run a git bisect to identify which commit in udev changed the behaviour? How can I do that? I have no knowlegde about "how to run a git bisect". Thanks! ;)

Bug#873702: lintian: False positive: desktop-entry-lacks-keywords-entry

2017-08-31 Thread Коля Гурьев
Hi, thank you for the fix! diff --git a/checks/menu-format.pm b/checks/menu-format.pm index 3de4490..be1a1c4 100644 --- a/checks/menu-format.pm +++ b/checks/menu-format.pm @@ -641,7 +641,7 @@ sub verify_desktop_file { if (!defined $vals{Icon}) { tag 'desktop-entry-lacks-ico

Bug#873702: lintian: False positive: desktop-entry-lacks-keywords-entry

2017-08-31 Thread Chris Lamb
Коля, > But if I understand the specification properly, the Keywords field is > forbidden not only for links (type 2 in the specification) but also for > directories (type 3). Ah, of course. Fixed with regression test in: https://anonscm.debian.org/git/lintian/lintian.git/commit/?id=907507

Bug#873801: node-babel FTBFS without network access

2017-08-31 Thread Graham Inggs
Source: node-babel Version: 6.25.0+dfsg-1 Severity: serious Hi Maintainer Node-babel fails to build on a machine without external network access: ... npm install npm ERR! Linux 4.4.0-92-generic npm ERR! argv "/usr/bin/node" "/usr/bin/npm" "install" npm ERR! node v6.11.2 npm ERR! npm v3.5.2 npm

Bug#873800: node-babylon FTBFS without network access

2017-08-31 Thread Graham Inggs
Source: node-babylon Version: 6.14.1-1 Severity: serious Hi Maintainer Node-babylon has a build dependency on nodejs-legacy which is no longer in the archive. With this dependency removed, the build fails on a machine without external network access: ... HOME=/tmp npm install babel-cli roll

Bug#873486: fcitx can not be start after upgrade to Debian buster

2017-08-31 Thread 王钢林
Hello, everyone. I find that the Debian must be restart (not shut down and turn on) several times, it maybe work. The other strange things are like the fcitx. Best regards Gulfstream 在 2017年08月28日 18:32, Shengjing Zhu 写道: Control: tags -1 moreinfo Please run fcitx-diagnose and paste th

Bug#873796: evolution: FTBFS when building only Architecture: all

2017-08-31 Thread Simon McVittie
On Thu, 31 Aug 2017 at 09:37:52 +0100, Simon McVittie wrote: > The two find calls in debian/libevolution/ need to be skipped when that > directory does not exist, i.e. when not building architecture-specific > binary packages. I'm testing the attached patch, which I hope will > address this. It se

Bug#873802: Multiple vulnerabilities in rubygems (CVE-2017-0899 to CVE-2017-0902)

2017-08-31 Thread Raphael Hertzog
Source: ruby2.3 X-Debbugs-CC: t...@security.debian.org secure-testing-t...@lists.alioth.debian.org Severity: important Tags: security Hi, the following vulnerabilities were published for ruby2.3. They affect rubygems more specifically. CVE-2017-0902[0]: DNS issue CVE-2017-0901[1]: overwrite an

Bug#873791: [python-numpy] Undefined symbols on several architectures

2017-08-31 Thread Adrian Bunk
Control: reassign -1 python2.7 2.7.14~rc1-1 Control: retitle -1 python2.7: fpectl extension removal broke the ABI for C extensions Control: affects -1 python-numpy On Thu, Aug 31, 2017 at 11:34:55AM +0200, Michał Klichowicz wrote: > Got that error on amd64, too. > > This started today, after the

Bug#873797: missing fping6 breaks smokeping slaves on older systems

2017-08-31 Thread Axel Beckert
Hi Sven, Sven Hartge wrote: > The change to remove the fping6 binary breaks smokeping slaves on > older Debian systems (and other distributions) for me. Ah, I see. I only have several independent Smokeping installations and haven't found time to dig into how Smokeping slaves work. And in that se

Bug#873803: keepalived: Enable DBus support

2017-08-31 Thread Sebastian Schrader
Package: keepalived Version: 1:1.3.2-1 Severity: normal Tags: patch Dear Maintainer, with version 1.3.0 upstream introduced a DBus interface to control and query the daemon. I attached a patch to enable this interface in the Debian version of keepalived. Best regards, Sebastian --- a/debian/cont

Bug#873804: CVE-2017-11541

2017-08-31 Thread Guido Günther
Package: tcpdump X-Debbugs-CC: t...@security.debian.org secure-testing-t...@lists.alioth.debian.org Severity: important Tags: security Hi, the following vulnerability was published for tcpdump. CVE-2017-11541[0]: | tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print | function in

Bug#873805: CVE-2017-11542

2017-08-31 Thread Guido Günther
Package: tcpdump X-Debbugs-CC: t...@security.debian.org secure-testing-t...@lists.alioth.debian.org Severity: important Tags: security Hi, the following vulnerability was published for tcpdump. CVE-2017-11541[0]: | tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print | function in

Bug#873806: CVE-2017-11543

2017-08-31 Thread Guido Günther
Package: tcpdump X-Debbugs-CC: t...@security.debian.org secure-testing-t...@lists.alioth.debian.org Severity: important Tags: security Hi, the following vulnerability was published for tcpdump. CVE-2017-11541[0]: | tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print | function in

Bug#861617: RFS: ddcutil/0.8.0-6 [ITP] - control monitor settings

2017-08-31 Thread Sanford Rockowitz
An updated copy of ddcutil has been uploaded to mentors reflecting Andrey's review. Comments interspersed. On 08/20/2017 12:02 PM, Andrey Rahmatullin wrote: The package FTBFS: dh_install dh_install: Cannot find (any matches for) "/usr/bin" (tried in ., debian/tmp) dh_install: ddcutil mis

Bug#873791: [python-numpy] Undefined symbols on several architectures

2017-08-31 Thread Matthias Klose
On 31.08.2017 12:35, Adrian Bunk wrote: > Control: reassign -1 python2.7 2.7.14~rc1-1 > Control: retitle -1 python2.7: fpectl extension removal broke the ABI for C > extensions > Control: affects -1 python-numpy > > On Thu, Aug 31, 2017 at 11:34:55AM +0200, Michał Klichowicz wrote: >> Got that er

Bug#873807: ssh-askpass FTCBFS: xmkmf is unfixable

2017-08-31 Thread Helmut Grohne
Source: ssh-askpass Version: 1:1.2.4.1-9 Tags: patch upstream User: helm...@debian.org Usertags: rebootstrap Control: block 873764 by -1 ssh-askpass fails to cross build from source, because ... it uses xmkmf. I looked at xmkmf hard and there seems to be no way to make this work at all. I talked t

Bug#873805: CVE-2017-11542

2017-08-31 Thread Guido Günther
Hi, On Thu, Aug 31, 2017 at 12:39:33PM +0200, Guido Günther wrote: > Package: tcpdump > X-Debbugs-CC: t...@security.debian.org > secure-testing-t...@lists.alioth.debian.org > Severity: important > Tags: security > > Hi, > > the following vulnerability was published for tcpdump. > > CVE-2017-115

Bug#873804: CVE-2017-11541

2017-08-31 Thread Guido Günther
Hi, On Thu, Aug 31, 2017 at 12:39:17PM +0200, Guido Günther wrote: > Package: tcpdump > X-Debbugs-CC: t...@security.debian.org > secure-testing-t...@lists.alioth.debian.org > Severity: important > Tags: security > > Hi, > > the following vulnerability was published for tcpdump. > > CVE-2017-115

Bug#861617: RFS: ddcutil/0.8.0-6 [ITP] - control monitor settings

2017-08-31 Thread Andrey Rahmatullin
On Thu, Aug 31, 2017 at 06:43:45AM -0400, Sanford Rockowitz wrote: > > Please run lintian (with -EI --pedantic and against the binary .changes) > > and review its output. > After executing pdebuild on buster for distribution buster You should build your packages on sid and test them on sid. > W:

Bug#873797: missing fping6 breaks smokeping slaves on older systems

2017-08-31 Thread Sven Hartge
On 31.08.2017 12:34, Axel Beckert wrote: > I though will have to think about how to actually implement this. > Maybe as additional binary package "fping6" which only needs to be > installed if Smokeping has older slaves. Why not just provide the symlink I mentioned in the fping package? It will a

Bug#873808: clementine: Segmentation fault while starting

2017-08-31 Thread Cristiano Rodrigues
Package: clementine Version: 1.3.1+git276-g3485bbe43+dfsg-1 Severity: grave Justification: renders package unusable Cause: It is happening because clementine is not compatible with the new qt4libs that are present in experimental repository Console output: 10: 13:30.674 WARN unknown

Bug#873797: missing fping6 breaks smokeping slaves on older systems

2017-08-31 Thread Axel Beckert
Hi Sven, Sven Hartge wrote: > On 31.08.2017 12:34, Axel Beckert wrote: > > I though will have to think about how to actually implement this. > > Maybe as additional binary package "fping6" which only needs to be > > installed if Smokeping has older slaves. > > Why not just provide the symlink I m

Bug#871348: robocode FTBFS

2017-08-31 Thread Markus Koschany
I believe Robocode is just affected by the ongoing Maven 3 transition. The error message indicates some kind of problem with plexus-utils which is outdated and does not ship the MatchPatterns class. I'm not sure how this is all related to the maven-dependency-plugin but maybe an upgrade to the lat

Bug#861744: torbrowser-launcher: Should not be part of Stretch

2017-08-31 Thread Roger Shimizu
Dear Maintainer, Is it time to upload backports of 0.2.7-3 to stretch? I'm also wondering why it didn't hit testing yet. Cheers, -- Roger Shimizu, GMT +9 Tokyo PGP/GPG: 4096R/6C6ACD6417B3ACB1

Bug#873804: CVE-2017-11541

2017-08-31 Thread Romain Francoise
Hi, On Thu, Aug 31, 2017 at 12:52:12PM +0200, Guido Günther wrote: > I've sent the attached patch upstream. I'd like to incorporate this into > an upload to wheezy at one point. Shall I handle sid, stretch or jessie > as well? No, thank you. This vulnerability and the others have already been fix

Bug#754462: Bug#862051: nodejs (6.11.2~dfsg-1) experimental; urgency=medium

2017-08-31 Thread Ian Jackson
Philip Hands writes ("Bug#862051: nodejs (6.11.2~dfsg-1) experimental; urgency=medium"): > I guess that one could do something like moving the symlink into another > -legasy style package, and recomend that from the main package for one > release to keep upgrades happy. Then drop the recomendation

Bug#857010: Non-threadsafe local imports

2017-08-31 Thread Matthias Klose
Control: tags -1 + moreinfo On 07.03.2017 07:22, martin f krafft wrote: > Package: python3.6 > Version: 3.6.0-1 > Severity: normal > > Please see > https://github.com/pimutils/vdirsyncer/issues/583 for a bug that has > a hacky patch, and can only be reproduced with Debian's Python > 3.6.0. Using

Bug#873809: Packaging newer upstreams

2017-08-31 Thread Julien Puydt
Package: minetest-mod-worldedit Version: 0.6-1 Severity: wishlist Hi, version 1.0 is out since 20130822, and I asked upstream to tag new releases, so probably a new one will appear quite soon. I'm ready to help if it is needed. Thanks, Snark on #debian-games

Bug#873804: CVE-2017-11541

2017-08-31 Thread Guido Günther
Hi Romain, Thanks for the prompt reply! On Thu, Aug 31, 2017 at 01:16:35PM +0200, Romain Francoise wrote: > Hi, > > On Thu, Aug 31, 2017 at 12:52:12PM +0200, Guido Günther wrote: > > I've sent the attached patch upstream. I'd like to incorporate this into > > an upload to wheezy at one point. Sh

Bug#842375: python-3.6.pc: Dash (-) in the .pc file name

2017-08-31 Thread Matthias Klose
Control: tags -1 + wontfix this is the name used by upstream. Please use it as it is shipped.

Bug#351995: disagree: ssmtp is simple submission server

2017-08-31 Thread Stephen R. van den Berg
On Fri, 8 Jun 2007 10:05:55 +0200 Matus UHLAR - fantomas wrote: > I disagree: ssmtp is very simple mail _submission_ program, which shouldn't > take care of delivery in any way. That should be left up to the mailserver > specified in config file. The MX records are used for final delivering of

Bug#873405: Please update to llvm-toolchain 4.0 or, better, 5.0

2017-08-31 Thread Samuel Thibault
Hello, Lumin, on lun. 28 août 2017 04:48:16 +, wrote: > Clang-3.9 is now suffering from the GCC-7 headers as shown at bottom. FI, I managed to avoid the issue by making clang use libc++-dev: > ❯❯❯ nvcc -ccbin clang++-3.9 matrixMul.cu -I../../common/inc >Mo

Bug#866633: bijiben: depends on libwebkitgtk-3.0-0 which is deprecated

2017-08-31 Thread Jeremy Bicha
Hi, Any objections to me NMUing the update the 3.24 to fix this RC bug? Also, we are planning to do the tracker2 transition soon which will need a sourceful upload. Can we take care of that too? Thanks, Jeremy Bicha

Bug#873405: Please update to llvm-toolchain 4.0 or, better, 5.0

2017-08-31 Thread Samuel Thibault
Samuel Thibault, on jeu. 31 août 2017 13:28:14 +0200, wrote: > Lumin, on lun. 28 août 2017 04:48:16 +, wrote: > > Clang-3.9 is now suffering from the GCC-7 headers as shown at bottom. > > FI, I managed to avoid the issue by making clang use libc++-dev: > > > ❯❯❯ nvcc -ccbin clang++-3.9 matrix

Bug#873810: lrzsz FTCBFS: debian/rules thinks so

2017-08-31 Thread Helmut Grohne
Source: lrzsz Version: 0.12.21-8 Tags: patch User: helm...@debian.org Usertags: rebootstrap lrzsz fails to cross build from source, because debian/rules errors out immediately. On a closer look, the statement that this doesn't work is wrong. The attached patch demonstrates that lrzsz can be cross

Bug#825608: Remove libnet-jifty-perl?

2017-08-31 Thread Dominic Hargreaves
On Thu, Aug 31, 2017 at 12:40:40PM +0100, Dominic Hargreaves wrote: > I noticed that that this bug has been tagged rm-candidate, and I'd like > to support this. There has been no upstream activity on Jifty since 2011 > and Best Practical abandoned their plans to port RT to this framework > (which w

Bug#825608: Remove libnet-jifty-perl?

2017-08-31 Thread Dominic Hargreaves
I noticed that that this bug has been tagged rm-candidate, and I'd like to support this. There has been no upstream activity on Jifty since 2011 and Best Practical abandoned their plans to port RT to this framework (which was, IIRC, the original reason for its creation). There are no rdepends and

Bug#873804: CVE-2017-11541

2017-08-31 Thread Romain Francoise
On Thu, Aug 31, 2017 at 01:26:46PM +0200, Guido Günther wrote: > O.k. Any idea when upstream will do this? Last week we were promised more details within one week, and an official release date in September. But these things take time... -- Romain Francoise https://people.debian.org/~rfrancoise/

Bug#861744: torbrowser-launcher: Should not be part of Stretch

2017-08-31 Thread Georg Faerber
Hi Roger, Not the maintainer here, but: On 17-08-31 20:10:35, Roger Shimizu wrote: > Is it time to upload backports of 0.2.7-3 to stretch? No: Packages need to be first in testing, before going into -backports. > I'm also wondering why it didn't hit testing yet. Read this bug report for some r

Bug#760021: lintian: check for not wrap-and-sort formatted files

2017-08-31 Thread Mattia Rizzolo
On Thu, Aug 31, 2017 at 10:06:52AM +0100, Chris Lamb wrote: > > lintian: check for not wrap-and-sort formatted files > > Good idea. I don't think it is. wrap-and-sort (or the equivalent from cme) is not widely enough adopted as of yet. I personally try to have all my sponsee use it, and I someti

Bug#872514: devscripts: Please add script to report on reproducibility status of installed packages

2017-08-31 Thread James McCoy
On Aug 31, 2017 05:09, "Chris Lamb" wrote: Hi, > Updated patch attached Any update? ACK to push? :) Yeah, that's fine with me. Cheers, James

Bug#872354: [git-buildpackage/master] patch_series: don't let "git mailinfo" sanitize the subject

2017-08-31 Thread Guido Günther
tag 872354 pending thanks Date: Thu Aug 31 13:30:18 2017 +0200 Author: Guido Günther Commit ID: b2092c1e2c9a25d2a480c75e4cfb42235f86a0e8 Commit URL: https://git.sigxcpu.org/cgit/git-buildpackage//commit/?id=b2092c1e2c9a25d2a480c75e4cfb42235f86a0e8 Patch URL: https://git.sigxcpu.org/cgit/git-

Bug#754462: Bug#862051: nodejs (6.11.2~dfsg-1) experimental; urgency=medium

2017-08-31 Thread Jérémy Lal
2017-08-31 13:25 GMT+02:00 Ian Jackson : > Philip Hands writes ("Bug#862051: nodejs (6.11.2~dfsg-1) experimental; > urgency=medium"): > > I guess that one could do something like moving the symlink into another > > -legasy style package, and recomend that from the main package for one > > release

Bug#862051: nodejs (6.11.2~dfsg-1) experimental; urgency=medium

2017-08-31 Thread Thorsten Glaser
On Thu, 31 Aug 2017, Jérémy Lal wrote: > How about printing a "nice" warning explaining it would be a good idea to > move to /usr/bin/node ? That will break scripts that do: x=$(nodejs somescript) Or even ./somescript when that has a #!/usr/bin/env nodejs shebang. > Then in next next release d

Bug#825608: Remove libnet-jifty-perl?

2017-08-31 Thread gregor herrmann
On Thu, 31 Aug 2017 12:43:14 +0100, Dominic Hargreaves wrote: > On Thu, Aug 31, 2017 at 12:40:40PM +0100, Dominic Hargreaves wrote: > > I noticed that that this bug has been tagged rm-candidate, and I'd like > > to support this. There has been no upstream activity on Jifty since 2011 > > and Best

Bug#862051: nodejs (6.11.2~dfsg-1) experimental; urgency=medium

2017-08-31 Thread Didier 'OdyX' Raboud
Le jeudi, 31 août 2017, 12.25:50 h CEST Ian Jackson a écrit : > Philip Hands writes ("Bug#862051: nodejs (6.11.2~dfsg-1) experimental; urgency=medium"): > > I guess that one could do something like moving the symlink into another > > -legacy style package, and recomend that from the main package f

Bug#754462: Bug#862051: nodejs (6.11.2~dfsg-1) experimental; urgency=medium

2017-08-31 Thread Didier 'OdyX' Raboud
Le jeudi, 31 août 2017, 13.58:23 h CEST Thorsten Glaser a écrit : > Do not drop it before *after* the next release, so people have, > at the very least, one full release of time to switch their > scripts in a way that works with both the old and new names > *first*, gradually. They have Stretch fo

Bug#873812: e2fsprogs: Please move l10n package from Suggests to Recommends

2017-08-31 Thread Guillem Jover
Package: e2fsprogs Version: 1.43.6-1 Hi! The recently split translations ended up being added as a Suggests in e2fsprogs, which means they will not be installed by default anymore. This should probably be a Recommends, which would allow people to remove them, but would be pulled in by default. (

Bug#873811: ITP: h2o -- Optimized HTTP/1.x, HTTP/2 server

2017-08-31 Thread Apollon Oikonomopoulos
Package: wnpp Severity: wishlist Owner: Apollon Oikonomopoulos * Package name: h2o Version : 2.2.2 Upstream Author : DeNA Co., Ltd., Kazuho Oku * URL : https://h2o.examp1e.net * License : MIT Programming Lang: C Description : Optimized HTTP/1.x, HTTP/2

Bug#868473: dh-acc: Incorrect usage of doit (Dh_Lib)

2017-08-31 Thread Jeremy Bicha
This bug is still unfixed in Debian right? It makes debci less useful for packages that use dh-acc. Thanks, Jeremy Bicha

Bug#873813: e2fsprogs-l10n: Package should be arch:all

2017-08-31 Thread Guillem Jover
Package: e2fsprogs-l10n Version: 1.43.6-1 Hi! This is a package containing only arch-indep files and should thus be arch:all, which will reduce disk size on the mirrors. :) It used to be the case that the .mo files were endian-specific, but that was fixed upstream and now all use the same endiann

Bug#754462: [Pkg-javascript-devel] Bug#754462: Bug#862051: nodejs (6.11.2~dfsg-1) experimental; urgency=medium

2017-08-31 Thread Thorsten Glaser
On Thu, 31 Aug 2017, Julien Puydt wrote: > May I suggest to have /usr/bin/nodejs print a nice deprecation warning > to use /usr/bin/node, and just *never* remove it? On Thu, 31 Aug 2017, Didier 'OdyX' Raboud wrote: > Le jeudi, 31 août 2017, 13.52:00 h CEST Jérémy Lal a écrit : > > How about pri

Bug#871648: qemu-system-x86: /usr/bin/qemu-system-i386 eats slowly but surely all the Dom0 memory

2017-08-31 Thread astian
Control: found -1 1:2.8+dfsg-7 Control: tags -1 + patch fixed-upstream Hi, After staring at GDB for ungodly spans of time I managed to track down this bug, ipso facto discovering that it was already fixed upstream quite some time ago... I think you took upstream commit 04bf2526ce87f21b32c9acba1c

Bug#862051: [Pkg-javascript-devel] Bug#754462: Bug#862051: nodejs (6.11.2~dfsg-1) experimental; urgency=medium

2017-08-31 Thread Julien Puydt
Hi, Le 31/08/2017 à 13:52, Jérémy Lal a écrit : > How about printing a "nice" warning explaining it would be a good idea to > move to /usr/bin/node ? Then in next next release drop the nodejs symlink. May I suggest to have /usr/bin/nodejs print a nice deprecation warning to use /usr/bin/node, and

Bug#873814: nextcloud-server: missing php-zip and php-mbstring

2017-08-31 Thread Xavier Bestel
Package: nextcloud-server Version: 12.0.1~stretch Severity: normal Dear Maintainer, Hi, Some php packages are missing from your "Depends" list, notably php7.0-zip and php7.0-mbstring. HTH, Xav -- System Information: Debian Release: 9.1 APT prefers stable APT policy: (500, 'stable

Bug#864831: [Debian-science-sagemath] NTL update to 10.3.0

2017-08-31 Thread Ximin Luo
Ximin Luo: > Julien Puydt: >> [..] >> >> I still pushed this work-in-progress, as it should be good enought for >> some tests already. >> > > I will have a go at testing it tomorrow/soon. Thanks! > eclib, giac, linbox succeeded but flint fails: [..] make[3]: Entering directory '/<>' g++ -g -O2

Bug#873815: pyjwt: PyJWT vulneratibility for some keys

2017-08-31 Thread Leonidas S. Barbosa
Package: pyjwt Version: 1.4.2-1 Severity: important Tags: patch User: ubuntu-de...@lists.ubuntu.com Usertags: origin-ubuntu artful ubuntu-patch Dear Maintainer, Upstream already fixed that issue, here is the debdiff that was applied in order to fix this. * SECURITY UPDATE: symmetric/asymmetri

Bug#873816: texlive-base: Fonts handling broken in dvips?

2017-08-31 Thread Marc SCHAEFER
Package: texlive-base Version: 2016.20170123-5 Severity: normal Dear Maintainer, The following LaTeX file: \documentclass[12pt,a4paper]{article} \font\testing=cmssbx17 scaled 2500 \font\testingb=cmssbx17 scaled 1500 \font\testingt=cmss17 scaled 800 \begin{document} \testing{fir

Bug#873789: init-system-helpers: autopkgtests broken in 1.49

2017-08-31 Thread Felipe Sateler
On Thu, Aug 31, 2017 at 4:12 AM, Steve Langasek wrote: > Attached is a patch which fixes the tests to also correctly handle the > escape characters in the unit names. Thanks! Applied as b13d642. It will be part of the next upload. -- Saludos, Felipe Sateler

Bug#869499: [Pkg-nginx-maintainers] Bug#869499: nginx: [PATCH] Automate modules watch & upgrade process

2017-08-31 Thread Christos Trochalakis
On Sun, Jul 23, 2017 at 09:42:47PM +0300, Mpampis Kostas wrote: Package: nginx Severity: wishlist Tags: patch This patch introduces the debian/modules/uscan script and some helper files which can be used to automate the modules watch & upgrade process. The main script is executed as '$ debian/m

Bug#873791: closed by Matthias Klose (Bug#873791: fixed in python3.6 3.6.2-3)

2017-08-31 Thread Ole Streicher
Hi Mathias, sorry, I don't see why uploading an unrelated package does actually solve the problem? "Breaks" here does only prevent python3-numpy from installed on sid, but it still allows python-numpy to be installed together with the current Python 2.7? This sounds a bit mystic to me. Could you

Bug#635964: Pending fixes for bugs in the pdfsam package

2017-08-31 Thread pkg-java-maintainers
tag 635964 + pending tag 779058 + pending tag 792467 + pending tag 714394 + pending tag 796805 + pending tag 714304 + pending thanks Some bugs in the pdfsam package are closed in revision 2aef69ee6ff3c4899d7581f4a4475e359db2013c in branch 'master' by Markus Koschany The full diff can be seen at h

  1   2   3   4   >