Bug#875627: reassing back to libauthen-captcha-perl

2017-09-13 Thread gregor herrmann
On Wed, 13 Sep 2017 08:52:37 +0200, Gianfranco Costamagna wrote: > Now libpng better detects a bad png files, and this is not a bug of course, > but rather a sign that the image should be fixed. > > pngfix /usr/share/perl5/Authen/Captcha/images/background5.png > IDAT OK default 15 15 7197 7035

Bug#875627: reassing back to libauthen-captcha-perl

2017-09-13 Thread Gianfranco Costamagna
Hello, >The library picks one of the images on random; if you repeat the test >on Debian, you'll see the failure as well. oh, this makes sense, and also explains why I did see the failure only once on my pc, while debomatic-amd64 (artful chroot), and Ubuntu ppa build was good... bad luck in th

Bug#875322: Pending fixes for bugs in the batik package

2017-09-13 Thread pkg-java-maintainers
tag 875322 + pending thanks Some bugs in the batik package are closed in revision b601b7bb1f3952e3f36947d594826a62e4c5044c in branch 'master' by Christopher Hoskin The full diff can be seen at https://anonscm.debian.org/cgit/pkg-java/batik.git/commit/?id=b601b7b Commit message: Fix "batik-1

Bug#841926: avahi-daemon crashes with "Out of memory, aborting ..."

2017-09-13 Thread Marc Haber
Package: avahi-daemon Version: 0.6.32-2 Followup-For: Bug #841926 I see the same issue on my local firewall. My difference is that the crash doesn't happen "immediately", but frequently at night during a time where the system is idle. My system is a 384 MB KVM VM that does not seem under memory p

Bug#874484: Debian mirror merlin.fit.vutbr.cz: invalid-tracefile, syncscript

2017-09-13 Thread Kasparek Tomas
On Wed, Sep 13, 2017 at 07:18:54AM +, Peter Palfrader wrote: > It seems you did that, thanks! yes, and rewriting the current version to be at least a bit usabel was unpleasant job :-( > I notice your mirroring schedule is not synced to the archive frequency. > The ftp.debian.org archive updat

Bug#875627: reassing back to libauthen-captcha-perl

2017-09-13 Thread gregor herrmann
On Wed, 13 Sep 2017 07:07:51 +, Gianfranco Costamagna wrote: > can you please do some upstream reporting? > I can do it if you want, but my perl foo is still close to zero :) Sure, Xavier or me will take care of it. Cheers, gregor -- .''`. https://info.comodo.priv.at/ - Debian Developer

Bug#875633: bluez: CVE-2017-1000250: information disclosure vulnerability in service_search_attr_req

2017-09-13 Thread Salvatore Bonaccorso
Hi FTR, I'm currently preparing an update for bluez packages for jessie- and stretch-security. I can do as well an unstable NMU if needed. Patch should be the same. The original attached one does not apply cleanly due to tabs/spaces missmatch. Attaching a proper one now. Regards, Salvatore Descr

Bug#875553: ITP: cdiff -- Colored, incremental diff with side by side and auto pager support

2017-09-13 Thread Michael Banck
Hi Juhani, On Tue, Sep 12, 2017 at 03:31:30PM +0300, Juhani Numminen wrote: > Michael Banck kirjoitti 12.09.2017 klo 10:35: > >This is Build-Depends for patroni, which I am also packaging. It will > >have to conflict with colordiff as both ship /usr/bin/cdiff. > > Please note that upstream is in

Bug#874403: debian mirror mirrors.asnet.am issues

2017-09-13 Thread Arthur Petrosyan
Hi Peter! 9/13/2017 11:02, Peter Palfrader пишет: On Fri, 08 Sep 2017, Arthur Petrosyan wrote: Now we have switched to 'ftp.halifax.rwth-aachen.de', which I have found the nearest for us, since we have now direct GEANT connection to Frankfrut as seen on the trace below. Sounds good, thanks!

Bug#857731: virt-manager: cannot create new machines without libvirt-daemon-system

2017-09-13 Thread Peter Gervai
Package: virt-manager Version: 1:1.4.2-1 Followup-For: Bug #857731 virt-manager recommends libvirt-daemon-system; however without it it is not possible to create a new machine. Installing libvirt-daemon-system fixes the problems, at least for QEMU (but most possibly for anything else as well). I

Bug#875421:

2017-09-13 Thread Giulia Cantini
Hi, can you tell me exactly which command did you run with piuparts? Thank you!

Bug#875440: Debian mirror debian.mur.at: out-of-date

2017-09-13 Thread Jogi Hofmüller - NOC
Am Mittwoch, den 13.09.2017, 06:33 + schrieb Peter Palfrader: > Still seems to struggle.  Can you take a peek? Just did. The last push stopped right in the middle. There were load issues. -- \\ j.hofmueller               DI-FR 10 bis 16 Uhr ||  TU-FR 10am to 4pm  \\                      

Bug#875659: courier: FTBFS due to openssl vs gnutls confusion

2017-09-13 Thread Markus Wanner
Source: courier Version: 0.78.0-1 Severity: serious Tags: confirmed pending Just a tracker issue for myself: Looks like libs/tcpd/tlspasswordcache.c of 0.78.0 tries to use some OpenSSL code, while we want it to link against GnuTLS. Kind Regards Markus Wanner signature.asc Description: OpenP

Bug#764007: (no subject)

2017-09-13 Thread Ximin Luo
iry: > Hi Ximin Luo! > > It seems that the upstream author has respond: > https://trac.torproject.org/projects/tor/ticket/12716#comment:33 > > For the convenience of the future discussion, I am citing the respond > inline: > >> meek-client-torbrowser has only gotten more tightly coupled to Tor

Bug#875661: SSH config should allow to only use secure defaults

2017-09-13 Thread Kilian Krause
Package: xen-tools Version: 4.7-1 Severity: normal Hi, In addition to https://github.com/xen-tools/xen-tools/issues/18 it should be possible to also update the sshd defaults using debconf openssh-server/permit-root-login to also allow creating non-root-login by default. Even more so, I'd love t

Bug#875662: password encryption should match login.defs (SHA512)

2017-09-13 Thread Kilian Krause
Package: xen-tools Version: 4.7-1 Severity: normal Hi, to match the current default of login.defs the default password encryption should be raised to SHA512. Using MD5 or SHA256 should only be allowed as a manual override. Thanks! Kilian

Bug#875627: Forwarded to RT

2017-09-13 Thread Xavier
forwarded 875627 https://rt.cpan.org/Ticket/Display.html?id=123029 thanks

Bug#875664: piuparts.debian.org: Syntax error in post_purge_exceptions

2017-09-13 Thread Philipp Huebner
Package: piuparts.debian.org Severity: serious Justification: 2 Hi, I don't know much about piuparts, but this does not look like a bug in my package but in piuparts itself: https://piuparts.debian.org/sid/fail/ejabberd_17.08-1.log 0m35.6s DEBUG: Command ok: ['chroot', '/srv/piuparts.debian.org

Bug#875009: [libbpp-qt] Future Qt4 removal from Buster

2017-09-13 Thread Julien Yann Dutheil
Hi, Just ported bpp-qt and bppphyview to Qt5 upstream. Dependency to Qt4 will therefore be removed in next release. Best, Julien. On Sun, Sep 10, 2017 at 8:47 AM, Julien Yann Dutheil < julien.duth...@univ-montp2.fr> wrote: > Hi Andreas, Lisandro, > > Will port libbpp-qt and bppphyview to Qt5,

Bug#875663: update installation to systemd (and disable unused ttys)

2017-09-13 Thread Kilian Krause
Package: xen-tools Version: 4.7-1 Severity: normal Hi, Looking at /usr/share/xen-tools/stretch.d/30-disable-gettys it seems the script isn't yet updated to systemd but still considers only upstart. This yields to: getty-static.service loaded active exitedgetty on

Bug#875665: fix wording for debootstrap using cdebootstrap

2017-09-13 Thread Kilian Krause
Package: xen-tools Version: 4.7-1 Severity: wishlist Hi, When using cdebootstrap the message still reads: Installation method: debootstrap Using cdebootstrap as debootstrap command This is at best confusing. IMHO the check for the toolchain should be moved up and the informational message shou

Bug#875627: Pending fixes for bugs in the libauthen-captcha-perl package

2017-09-13 Thread pkg-perl-maintainers
tag 875627 + pending thanks Some bugs in the libauthen-captcha-perl package are closed in revision 144a4dded49b36c5d979e78f78735591af956253 in branch 'master' by Xavier Guimard The full diff can be seen at https://anonscm.debian.org/cgit/pkg-perl/packages/libauthen-captcha-perl.git/commit/?id=144

Bug#875433: [packages.debian.org]: filelist link not working (package farbfeld in sid)

2017-09-13 Thread Paride Legovini
On Mon, 11 Sep 2017 13:31:15 +0200 Laura Arjona Reina wrote: > I can reproduce the problem. However I tested a different package > (dianara) and the links worked both for official and unofficial > architectures. Thanks Laura for filing this bug. What I did notice is that the filelist, even when

Bug#875664: piuparts.debian.org: Syntax error in post_purge_exceptions

2017-09-13 Thread Philipp Huebner
Hi, all of the packages I looked at on https://piuparts.debian.org/sid/unclassified_failures.html currently fail because of this. Regards, -- .''`. Philipp Huebner : :' : pgp fp: 6719 25C5 B8CD E74A 5225 3DF9 E5CA 8C49 25E4 205F `. `'` `- signature.asc Description: OpenPGP digital si

Bug#875627: reassing back to libauthen-captcha-perl

2017-09-13 Thread Xavier
Le 13/09/2017 à 09:28, gregor herrmann a écrit : > On Wed, 13 Sep 2017 07:07:51 +, Gianfranco Costamagna wrote: > >> can you please do some upstream reporting? >> I can do it if you want, but my perl foo is still close to zero :) > > Sure, Xavier or me will take care of it. > > > Cheers, >

Bug#875633: bluez: CVE-2017-1000250: information disclosure vulnerability in service_search_attr_req

2017-09-13 Thread Salvatore Bonaccorso
Hi Proposed debdiff for unstable. Regards, Salvatore diff -Nru bluez-5.45/debian/changelog bluez-5.45/debian/changelog --- bluez-5.45/debian/changelog 2017-07-02 02:07:00.0 +0200 +++ bluez-5.45/debian/changelog 2017-09-13 10:28:07.0 +0200 @@ -1,3 +1,11 @@ +bluez (5.45-1.1) unstabl

Bug#610837: xen-tools: Should support providing enabling and/or providing manually IPv6 settings

2017-09-13 Thread Kilian Krause
Hi, Fully supporting that forcing DHCPv4 or static IPv4 is no longer the optimal config. IMHO we should have options: - no address give => just use inet6 auto (maybe even default to DHCPv4 in parallel too - OPTIONALLY!) That will be using full autoconfig with privacy extensions by default and

Bug#35733: debhelper: dh_strip, dh_fixperms, dh_shlibdeps don't recognize all shared libs

2017-09-13 Thread Debian/GNU
On 09/13/2017 10:59 AM, IOhannes m zmölnig (Debian/GNU) wrote: > i've prepared a patch for dh_strip and dh_shlibdeps that is supposed to > fix this problem. > > https://anonscm.debian.org/git/users/umlaeute/debhelper.git the patch-set is in the "add-shlib" branch, in case anybody wondered...

Bug#35733: debhelper: dh_strip, dh_fixperms, dh_shlibdeps don't recognize all shared libs

2017-09-13 Thread Debian/GNU
i've prepared a patch for dh_strip and dh_shlibdeps that is supposed to fix this problem. https://anonscm.debian.org/git/users/umlaeute/debhelper.git the patch adds a "--add-shlib=" option to dh_strip and dh_shlibdeps, to specify additional globbing patterns to take into account for shared libr

Bug#875611: sagenb: ruby-compass obsolete and now broken

2017-09-13 Thread Ximin Luo
Control: tags -1 + pending On Tue, 12 Sep 2017 18:04:56 +0200 Jonas Smedegaard wrote: > [..]> > Attached is a patch to make Sagenb use sassc with separately maintained > stylesheets. It needs to wait until the stylesheets have been approved, > though: Is in NEW queue now: > https://ftp-master.d

Bug#814900: telepathy-mission-control-5: Relax apparmor confinement for KDE account files

2017-09-13 Thread Laurent Bigonville
On Tue, 16 Feb 2016 14:19:48 +0300 Alberto Mardegan wrote: > In the resolution of https://bugs.kde.org/show_bug.cgi?id=347219, the > KDE package kaccount-plugins is installing libaccounts' .provider and > .service files under /usr/share/kaccounts/ rather than under the default > (used by GNOME)

Bug#875538: jupyter-nbextension-jupyter-js-widgets: fails to configure: json.decoder.JSONDecodeError

2017-09-13 Thread Ximin Luo
Control: tags -1 + moreinfo unreproducible Control: severity -1 important Hi Norbert, Could you tell me the output of this: $ for file in /etc/jupyter/nbconfig/*.json; do if [ -f "$file" ] && [ -r "$file" ]; then echo "-- $file"; cat "$file"; echo; fi; done If any of these files are empty, ple

Bug#875664: [Piuparts-devel] Bug#875664: piuparts.debian.org: Syntax error in post_purge_exceptions

2017-09-13 Thread Holger Levsen
reopen 875605 reassign 875605 piuparts.debian.org severity 875605 serious forcemerge 875605 875664 thanks On Wed, Sep 13, 2017 at 10:57:25AM +0200, Philipp Huebner wrote: > I don't know much about piuparts, but this does not look like a bug in > my package but in piuparts itself: already (half) f

Bug#875664: [Piuparts-devel] Bug#875664: piuparts.debian.org: Syntax error in post_purge_exceptions

2017-09-13 Thread Holger Levsen
On Wed, Sep 13, 2017 at 11:08:47AM +0200, Philipp Huebner wrote: > all of the packages I looked at on > https://piuparts.debian.org/sid/unclassified_failures.html > currently fail because of this. there's also quite some delay in updating https://piuparts.debian.org/ see #875428. -- cheers,

Bug#875666: ITP: erlang-p1-eimp -- Erlang application for manipulating graphic images

2017-09-13 Thread Philipp Huebner
Package: wnpp Severity: wishlist Owner: Philipp Huebner * Package name: erlang-p1-eimp Version : 1.0.0 Upstream Author : ProcessOne * URL : https://github.com/processone/eimp * License : Apache 2.0 Programming Lang: C, Erlang Description : Erlang applic

Bug#875605: [Piuparts-devel] Bug#875605: piuparts: esac missing in post_purge_exception script (develop branch) and yields error

2017-09-13 Thread Holger Levsen
On Wed, Sep 13, 2017 at 01:19:59AM +0200, Andreas Beckmann wrote: > Holger, you missed the second half of Boud's fix, so add another ;; > 23722fb34 really fix 42acc54048 aaarggg :( /me hits himself, this happens if one does too many things at once… thanks! > 4743d4aef p-r: make verbose mess

Bug#875667: O: tclxml

2017-09-13 Thread Andrew Shadura
Package: wnpp Severity: normal -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 As the upstream is dead, and I never found time (or interest really) to take it over, I think it's time for me to orphan this package. It is in a more or less good shape, and unless something happens (security issues o

Bug#814900: telepathy-mission-control-5: Relax apparmor confinement for KDE account files

2017-09-13 Thread Alberto Mardegan
On 13/09/2017 12:44, Laurent Bigonville wrote: > Looking at debian it seems that nothing is installed a file in > /usr/share/kaccounts/. > > Is that an ubuntu thing? Or is that patch not needed anymore? It should not be ubuntu-specific, it should be a KDE policy. But I now see that the path has b

Bug#875611: sagenb: ruby-compass obsolete and now broken

2017-09-13 Thread Jonas Smedegaard
Quoting Ximin Luo (2017-09-13 11:34:00) > Control: tags -1 + pending > > On Tue, 12 Sep 2017 18:04:56 +0200 Jonas Smedegaard wrote: > > [..]> > > Attached is a patch to make Sagenb use sassc with separately maintained > > stylesheets. It needs to wait until the stylesheets have been approved, >

Bug#787080: LibreOffice Online with Debian Stretch

2017-09-13 Thread Rene Engelhard
Hi, On Thu, Sep 07, 2017 at 07:54:21AM +0200, Stefan Weil wrote: > The license issue with JSON in libpoco was fixed recently, see > https://github.com/pocoproject/poco/issues/1614#issuecomment-327629217. Only if the poco got released with that - so we'd need to wait for poco 2.0. But yeah, inter

Bug#875668: selinux-policy-default: systemd-tmpfiles can't unlink /var/lib/sudo files

2017-09-13 Thread Russell Coker
Package: selinux-policy-default Version: 2:2.20161023.1-9 Severity: normal [ 11.596038] audit: type=1400 audit(1505299976.513:5): avc: denied { unlink } for pid=451 comm="systemd-tmpfile" name="mon" dev="sdb2" ino=2261257 scontext=system_u:system_r:systemd_tmpfiles_t:s0 tcontext=system_u:o

Bug#875669: selinux-policy-default: brctl can't create sysfs files

2017-09-13 Thread Russell Coker
Package: selinux-policy-default Version: 2:2.20161023.1-9 Severity: normal type=AVC msg=audit(1505299977.725:20): avc: denied { add_name } for pid=565 comm="brctl" name="hello_time" scontext=system_u:system_r:brctl_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=0 type=AVC ms

Bug#875432: s/python3-sphinx-intl/sphinx-intl

2017-09-13 Thread Hideki Yamane
On Tue, 12 Sep 2017 17:49:25 +0100 Ghislain Vaillant wrote: > The python3- prefix is for binary packages only (alongside python- and > pypy-). > > Should you decide to use a prefix for the source package name, it should > be python-, not python3-. Since sphinx-intl is intended to be used as a

Bug#875670: nmu: evolution-rss & mail-notification

2017-09-13 Thread Jeremy Bicha
Package: release.debian.org User: release.debian@packages.debian.org Usertags: binnmu Severity: normal Please schedule binNMUs for evolution-rss and mail-notification against libevolution 3.26. (Otherwise, they will be uninstallable since they have a strict dependency against the version of li

Bug#875432: s/python3-sphinx-intl/sphinx-intl

2017-09-13 Thread Ondrej Novy
Hi, 2017-09-13 13:18 GMT+02:00 Hideki Yamane : > Then, source package as sphinx-intl and binary package python3-sphinx-intl > is fine? > if sphinx-intl is primary application (cli tool, etc.), than binary pkg sphinx-intl is better. If it's library/module, than python3-sphinx-intl is better. --

Bug#875432: s/python3-sphinx-intl/sphinx-intl

2017-09-13 Thread Ghislain Vaillant
On 13/09/17 12:21, Ondrej Novy wrote: if sphinx-intl is primary application (cli tool, etc.), than binary pkg sphinx-intl is better. If it's library/module, than python3-sphinx-intl is better. Based on the description of the project [1], it looks like it is the former. [1] https://pypi.python

Bug#875671: fix test dependencies

2017-09-13 Thread Matthias Klose
Package: src:lapack Version: 3.7.1-3 Tags: patch dpkg-dev expects gcc ... http://launchpadlibrarian.net/336816854/lapack_3.7.1-3ubuntu1_3.7.1-3ubuntu2.diff.gz

Bug#844540: saytime should support writing to pulseaudio

2017-09-13 Thread Holger Levsen
control: tags -1 + unreproducible moreinfo thanks Hi Antoine, On Wed, Nov 16, 2016 at 12:57:25PM -0500, Antoine Beaupré wrote: > I couldn't figure out how to make saytime work with my environment, > where the sound device is often take over by pulseaudio. > > This is normally not a problem beca

Bug#853873: libsane: Transitional situation

2017-09-13 Thread Jean-Philippe MENGUAL
Package: libsane Version: 1.0.25-4.1 Followup-For: Bug #853873 Hi, If you experience your scanner to be found only as root as I am experiencing in buster, just create /etc/udev/rules.d/60-libsane.rules with the following line: ATTRS{idVendor}=="04a9", ATTRS{idProduct}=="190e", ENV{libsane_matched

Bug#875672: selinux-policy-default: xauth can't write to ~/.local/share/sddm/xorg-session.log

2017-09-13 Thread Russell Coker
Package: selinux-policy-default Version: 2:2.20161023.1-9 Severity: normal type=AVC msg=audit(1505302255.167:268): avc: denied { write } for pid=7218 comm="xauth" path="/home/user/.local/share/sddm/xorg-session.log" dev="sdb2" ino=903949 scontext=unconfined_u:unconfined_r:xauth_t:s0-s0:c0.c10

Bug#875216: [uim] Future Qt4 removal from Buster

2017-09-13 Thread dai
Control: tags -1 + confirmed -- Regards, dai GPG Fingerprint = 0B29 D88E 42E6 B765 B8D8 EA50 7839 619D D439 668E signature.asc Description: PGP signature

Bug#875673: dict-gcide: typo in the definition of "differ"

2017-09-13 Thread Vincent Lefevre
Package: dict-gcide Version: 0.48.4 Severity: minor In the definition of "differ": Usage: -- To {Differ with}, {Differ from}. Both differ from and aiffer with are used in reference to opinions; as, ^^ should be "differ". -- System Information: Debian Release:

Bug#875674: khard: Please provide davcontroller as /usr/bin/davcontroller (not merely as an example script)

2017-09-13 Thread Jonas Smedegaard
Package: khard Version: 0.11.3-1 Severity: normal -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Upstream documentation recommends using davcontroller as integral part of khard use, but that script is in debian provided merely as an example script. Please install that tool as /usr/bin/davcontro

Bug#875673: dict-gcide: typo in the definition of "differ"

2017-09-13 Thread Vincent Lefevre
On 2017-09-13 13:49:00 +0200, Vincent Lefevre wrote: > In the definition of "differ": > > Usage: -- To {Differ with}, {Differ from}. Both differ from > and aiffer with are used in reference to opinions; as, > ^^ > should be "differ". and just below, there's a

Bug#875675: khard: Please suggest vdirsyncer and mention it in long description

2017-09-13 Thread Jonas Smedegaard
Package: khard Version: 0.11.3-1 Severity: minor -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Upstream documentation recommends using vdirsyncer as the way to federate vcard information - see also ). Please therefore sugges

Bug#870669: libidn: Make source package bootstrappable

2017-09-13 Thread Helmut Grohne
retitle 870669 move gcj-jdk from Build-Depends to Build-Depends-Indep tags 870669 + patch severity 870669 normal user helm...@debian.org usertags 870669 + rebootstrap thanks On Thu, Aug 03, 2017 at 03:14:48PM -0700, Daniel Schepler wrote: > It would be nice if the Build-Depends on gcj-jdk could be

Bug#875676: selinux-policy-default: update-grub can't access /var/lib/os-prober

2017-09-13 Thread Russell Coker
Package: selinux-policy-default Version: 2:2.20161023.1-9 Severity: normal Found memtest86+ image: /memtest86+.bin Found memtest86+ multiboot image: /memtest86+_multiboot.bin rm: cannot remove '/var/lib/os-prober/labels': Permission denied done If you run update-grub when os-prober is installed y

Bug#875678: emacs25-common: Lisp error when loading js2-mode

2017-09-13 Thread Jiri Palecek
Package: emacs25-common Version: 25.2+1-6 Severity: normal File: /usr/share/emacs/25.2/lisp/progmodes/js.elc Dear Maintainer, I'm getting a strange lisp error when opening a desktop session which contains a JS file. The error message is: Debugger entered--Lisp error: (void-variable sgml-name-re)

Bug#875677: devscripts: mk-build-deps creates the build-dep package in the wrong directory

2017-09-13 Thread Jiri Palecek
Package: devscripts Version: 2.17.9 Severity: normal File: /usr/bin/mk-build-deps Dear Maintainer, -- Package-specific info: --- /etc/devscripts.conf --- --- ~/.devscripts --- DEBUILD_DPKG_BUILDPACKAGE_OPTS=-sa DEBUILD_PRESERVE_ENVVARS=CC,CXX,DEB_BUILD_OPTIONS while making a build-dep package,

Bug#875679: RFS: goldendict/1.5.0~rc2+git20170908+ds-1

2017-09-13 Thread Boyuan Yang
Package: sponsorship-requests Severity: normal X-Debbugs-CC: un...@debian.org Dear mentors and Dmitry, I am looking for a sponsor for the package I co-maintain, "goldendict". This upload would update the package "goldendict" to its latest snapshot. Goldendict upstream has been pretty stable rec

Bug#860268: .desktop files can hide malware in Nautilus

2017-09-13 Thread Donncha O'Cearbhaill
Is there anything that I can do to help get this backport patch deployed? This issue can be exploited in the wild and I think it should be fixed as soon as possible. I am still waiting for a response for my CVE request.

Bug#875658: Debian mirror debian.cse.msu.edu: broken clock

2017-09-13 Thread Kelly Climer
It's fixed. Sorry for the bother. Thank you, Kelly Climer CSE System Administrator On 09/13/2017 02:48 AM, Peter Palfrader wrote: Package: mirrors User: mirr...@packages.debian.org Usertags: mirror-problem may-auto-close Hi! According to our monitoring of Debian mirrors, your system produc

Bug#875676: also needs other access

2017-09-13 Thread Russell Coker
fs_unmount_xattr_fs(bootloader_t) allow bootloader_t bootloader_tmp_t:dir mounton; files_search_mnt(bootloader_t) fs_mount_fusefs(bootloader_t) fs_mounton_fusefs(bootloader_t) fs_read_fusefs_symlinks(bootloader_t) fs_read_fusefs_files(bootloader_t) f

Bug#875680: pythonqt: BD-Uninstallable on all archs (typo?)

2017-09-13 Thread Boyuan Yang
Source: pythonqt Version: 3.2-2 Severity: grave Justification: renders package unusable Buildd log [1] shows that this package cannot be built on every architecture due to missing build-dependency "libpythont-dev". It is obviously a typo. Could you please fix this problem and do another upload?

Bug#860268: .desktop files can hide malware in Nautilus

2017-09-13 Thread Jeremy Bicha
On Thu, Sep 7, 2017 at 9:34 AM, Donncha O'Cearbhaill wrote: > The upstream developer has now indicated that they will not be > backporting the fix to 3.22.x. They have a policy of not backporting > fixes which involve UI changes in stable branches. > > Will Debian backport this issue themselves? I

Bug#875681: selinux-policy-default: dnsmasq doesn't work, can't read config dir

2017-09-13 Thread Russell Coker
Package: selinux-policy-default Version: 2:2.20161023.1-9.1 Severity: normal type=AVC msg=audit(1505307355.059:585): avc: denied { read } for pid=17991 comm="dnsmasq" name="dnsmasq.d" dev="sdb2" ino=3061167 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:dnsmasq_etc_t:s0 t

Bug#875676: yet more

2017-09-13 Thread Russell Coker
grub-mount needs to access debugfs: -- My Main Blog http://etbe.coker.com.au/ My Documents Bloghttp://doc.coker.com.au/

Bug#875651: glusterfs-sever: package instalation error

2017-09-13 Thread Mattia Rizzolo
Control: reassign -1 glusterfs-server 3.11.2-1 On Tue, Sep 12, 2017 at 11:56:03PM -0300, Matias D. Fritz wrote: > Package: glusterfs-sever typo :) reassigning. > Version: 3.11.2-1 > Severity: important > > Dear Maintainer, > > *** Reporter, please consider answering these questions, where appr

Bug#852594: buzztrax: Update udevadm path

2017-09-13 Thread Michael Biebl
Control: tags -1 fixed-upstream On Tue, 12 Sep 2017 11:49:40 +0300 Sebastian =?ISO-8859-1?Q?Dr=F6ge?= wrote: > severity 852594 minor > thanks > > Hi, > > as this only affects a source code comment and not actual code, I'm > downgrading the severity to minor. This is in no way serious. Indeed. T

Bug#875682: RM: flashcache -- ROM; unmaintained upstream

2017-09-13 Thread Michael Biebl
Package: ftp.debian.org Severity: normal After filing #852591, I received the following response from the maintainer: On Fri, 23 Jun 2017 13:17:15 +0800 Liang Guo wrote:> On Tue, Jun 20, 2017 at 8:53 PM, Michael Biebl wrote: > > With stretch being released and buster open for development, it w

Bug#875669: also mislabeled file

2017-09-13 Thread Russell Coker
[9.141268] audit: type=1400 audit(1505308305.065:5): avc: denied { execute_no_trans } for pid=407 comm="run-parts" path="/lib/bridge-utils/ ifupdown.sh" dev="sda2" ino=2495123 scontext=system_u:system_r:udev_t:s0- s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=file permissive=0 /us

Bug#860268: .desktop files can hide malware in Nautilus

2017-09-13 Thread Donncha O'Cearbhaill
Jeremy Bicha: > > It's not just a UI change but a translatable string change. The new > dialog that users will have to use to mark .desktop's as trusted will > be untranslated. > > Therefore, if you want this feature, you will need to use Nautilus >= > 3.24 which means you will need to upgrade to

Bug#875627: reassing back to libauthen-captcha-perl

2017-09-13 Thread Gianfranco Costamagna
Hello, >* reported to RT >* image fixed in Debian sources >* committed to alioth > >thanks for your help ! I confirm perl team being one of the fastest teams in bug fixing :) thanks a lot to you all! G.

Bug#875683: nvidia-graphics-drivers: libGL.so.1 missing with libglvnd libs

2017-09-13 Thread Andreas Beckmann
Package: nvidia-graphics-drivers Version: 375.82-3 Severity: serious On 2017-09-12 22:01, Luca Boccassi wrote: > I built and installed, it pulled in libglvnd0 (:i386), but then > libGL.so.1 is gone from /usr/lib/(32|64 bit subdirs) so most things > fail to run, including Gnome. > > There was no p

Bug#852594: buzztrax: Update udevadm path

2017-09-13 Thread Sebastian Dröge
On Wed, 2017-09-13 at 15:15 +0200, Michael Biebl wrote: > Control: tags -1 fixed-upstream > On Tue, 12 Sep 2017 11:49:40 +0300 Sebastian =?ISO-8859-1?Q?Dr=F6ge?= > wrote: > > severity 852594 minor > > thanks > > > > Hi, > > > > as this only affects a source code comment and not actual code, I'm

Bug#875672: maybe not a bug

2017-09-13 Thread Russell Coker
userdom_user_home_dir_filetrans(xdm_t, user_home_t, file, ".xsession-errors") HOME_DIR/\.xsession-errors -- gen_context(system_u:object_r:xauth_home_t,s0) We currently have the above 2 inconsistent lines in the policy, but it appears to mostly work anyway. Let's leave this for stretch+1. -- My

Bug#875672: actually not a bug

2017-09-13 Thread Russell Coker
severity 875672 wishlist thanks userdom_user_home_dir_filetrans(xdm_t, user_home_t, file, ".xsession-errors") HOME_DIR/\.xsession-errors -- gen_context(system_u:object_r:xauth_home_t,s0) We currently have the above 2 inconsistent lines in the policy, but it appears to mostly work anyway. Let's

Bug#870669: libidn: Make source package bootstrappable

2017-09-13 Thread Tim Rühsen
On 09/13/2017 02:19 PM, Helmut Grohne wrote: > retitle 870669 move gcj-jdk from Build-Depends to Build-Depends-Indep > tags 870669 + patch > severity 870669 normal > user helm...@debian.org > usertags 870669 + rebootstrap > thanks > > On Thu, Aug 03, 2017 at 03:14:48PM -0700, Daniel Schepler wrote

Bug#814734: openshot new upstream release

2017-09-13 Thread Arturo Borrero Gonzalez
Hi, last week openshot 2.4.0 was released upstream [0]. I'm interested in having it in Debian. Can't invest packaging time right now, but can help with other things, for example testing packages and sponsoring uploads if someone is collaborating who doesn't have upload rights. thanks you all for

Bug#874191: not fixing for stretch

2017-09-13 Thread Russell Coker
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850116 Due to the above issue I'm not going to fix this for stretch. I'm about to make a policy upload for unstable that will be the basis of a proposed update to stretch to fix a number of issues. After I get that resolved I will upload the n

Bug#814734: openshot new upstream release

2017-09-13 Thread Jonas Smedegaard
Quoting Arturo Borrero Gonzalez (2017-09-13 16:06:41) > last week openshot 2.4.0 was released upstream [0]. > I'm interested in having it in Debian. Fine to ping a bugreport like this (might very well be appreciated to know of users eager to get the newer release), but please do not cc individua

Bug#874683: mumble: please package a QT5 version of mumble

2017-09-13 Thread Daniel Kahn Gillmor
Hi Chris-- On Sat 2017-09-09 21:14:14 +, Chris Knadle wrote: > Here's where the mumble package stands: > > - mumble 1.2.x is not compilable with QT5. > - mumble 1.3.x is compilable with QT4 and QT5 > - After the painful experience when Ron Lee was the maintainer of > the mumble packa

Bug#875173: [robocut] Future Qt4 removal from Buster

2017-09-13 Thread Lisandro Damián Nicanor Pérez Meyer
On 9 September 2017 at 21:53, Markus Schulz wrote: > Hello Lisandro, > the latest version supports Qt5 now... but it looks like we need to change > the upstream URL. Here is the new upstream: > https://github.com/Ti/robocut/blob/master/Readme.md > It's like 6 to 7 years that I submitted the pa

Bug#875538: jupyter-nbextension-jupyter-js-widgets: fails to configure: json.decoder.JSONDecodeError

2017-09-13 Thread Norbert Preining
Hi Ximin, > $ for file in /etc/jupyter/nbconfig/*.json; do if [ -f "$file" ] && [ -r > "$file" ]; then echo "-- $file"; cat "$file"; echo; fi; done -- /etc/jupyter/nbconfig/common.json -- /etc/jupyter/nbconfig/edit.json -- /etc/jupyter/nbconfig/notebook.json -- /etc/jupyter/nbconfig/terminal.

Bug#860268: .desktop files can hide malware in Nautilus

2017-09-13 Thread Phil Wyett
On Wed, 2017-09-13 at 13:36 +, Donncha O'Cearbhaill wrote: > Jeremy Bicha: > > > > It's not just a UI change but a translatable string change. The new > > dialog that users will have to use to mark .desktop's as trusted will > > be untranslated. > > > > Therefore, if you want this feature, yo

Bug#814734: openshot new upstream release

2017-09-13 Thread Jonas Smedegaard
Quoting Jonas Smedegaard (2017-09-13 16:18:32) > Quoting Arturo Borrero Gonzalez (2017-09-13 16:06:41) > > last week openshot 2.4.0 was released upstream [0]. > > I'm interested in having it in Debian. > > Fine to ping a bugreport like this (might very well be appreciated to > know of users eager

Bug#875627: reassing back to libauthen-captcha-perl

2017-09-13 Thread gregor herrmann
On Wed, 13 Sep 2017 11:17:25 +0200, Xavier wrote: > Le 13/09/2017 à 09:28, gregor herrmann a écrit : > > On Wed, 13 Sep 2017 07:07:51 +, Gianfranco Costamagna wrote: > >> can you please do some upstream reporting? > >> I can do it if you want, but my perl foo is still close to zero :) > > Sure

Bug#860268: .desktop files can hide malware in Nautilus

2017-09-13 Thread Phil Wyett
On Wed, 2017-09-13 at 15:30 +0100, Phil Wyett wrote: > On Wed, 2017-09-13 at 13:36 +, Donncha O'Cearbhaill wrote: > > Jeremy Bicha: > > > > > > It's not just a UI change but a translatable string change. The new > > > dialog that users will have to use to mark .desktop's as trusted will > > >

Bug#750732: libanyevent-perl: Intermittent build failures on various architectures

2017-09-13 Thread gregor herrmann
Control: found -1 7.140-1 Control: severity -1 serious Control: tag -1 + buster sid On Sun, 17 Aug 2014 00:10:04 -0700, gregor herrmann wrote: > Control: severity -1 important > > On Fri, 06 Jun 2014 12:42:08 +0200, gregor herrmann wrote: > > > libanyevent-perl sometimes has test failures in di

Bug#875432: s/python3-sphinx-intl/sphinx-intl

2017-09-13 Thread Antonio Terceiro
On Wed, Sep 13, 2017 at 12:26:34PM +0100, Ghislain Vaillant wrote: > On 13/09/17 12:21, Ondrej Novy wrote: > > if sphinx-intl is primary application (cli tool, etc.), than binary pkg > > sphinx-intl is better. If it's library/module, than python3-sphinx-intl > > is better. > > Based on the descrip

Bug#873065: postfix: Some mails refused since libssl1.1_1.1.0f-4_amd64.deb

2017-09-13 Thread BERTRAND Joël
Hello, Same constatation with sendmail and libssl1.1_1.1.0f-5. Looking at tls1_2_default.patch from Debian's openssl, the only thing that needs to be done is to override this change: @@ -2372,7 +2372,10 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *meth) goto err;

Bug#875684: libidn FTCBFS: fails running help2man

2017-09-13 Thread Helmut Grohne
Source: libidn Version: 1.33-2 Tags: patch Control: block -1 by 870669 User: helm...@debian.org Usertags: rebootstrap The 1.33-2 upload added help2man to the mix and that makes libidn fail to cross build from source of course. The attached patch adds a second, native build pass for generating doc/

Bug#875173: [robocut] Future Qt4 removal from Buster

2017-09-13 Thread Markus Schulz
On 09/13/2017 10:28 AM, Lisandro Damián Nicanor Pérez Meyer wrote: > On 9 September 2017 at 21:53, Markus Schulz wrote: >> Hello Lisandro, >> the latest version supports Qt5 now... but it looks like we need to change >> the upstream URL. Here is the new upstream: >> https://github.com/Ti/roboc

Bug#874494: rebuilding libsambox-java generates unmet dependency on libsejda-io-java (>= 1.1.3.RELEASE)

2017-09-13 Thread Emmanuel Bourg
Le 10/09/2017 à 18:05, Markus Koschany a écrit : > If the change in maven-debian-helper is permanent than I am in favor of > removing this flag in packages because I don't want to maintain several > patches which just correct a version number. Tools like m-d-h should > take care of this for me. I

Bug#875685: ejabberd: Please enable sql database support

2017-09-13 Thread Thomas Maaß
Package: ejabberd Severity: wishlist Dear Maintainer, Please enable mysql / postgresql database support for ejabberd. -- System Information: Debian Release: 9.1 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500, 'stable') Architecture: amd64 (

Bug#873139: transition: libgit2

2017-09-13 Thread Emilio Pozuelo Monfort
Control: tags -1 confirmed On 24/08/17 21:51, Ximin Luo wrote: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: transition > > Dear release team, > > libgit2 0.26 is in experimental and ready to start the transition from 0.24 > in unsta

Bug#717736: liboggplay1: pkg-config aberrations: non-private Requires; -uninstalled.pc is installed

2017-09-13 Thread Rodrigo Siqueira Jordão
Hi Dafydd Harries, I adopted this package as a way to learn more about packaging and Debian community. As result, I intend to keep this package in a good shape. I already updated the package and I am working to update it for debhelper 10. I looked at the bug report and your patch. As far

Bug#860268: .desktop files can hide malware in Nautilus

2017-09-13 Thread Donncha O'Cearbhaill
Phil Wyett: >> >> Hi, >> >> Please note that the debdiff I provided was essentially a raw backport for >> testing and I thought it may have issues. It was never meant as a 'here it >> is, >> all done' patch ready for submission as a stable update. >> >> I am a little busy at the moment, but if I c

Bug#875686: history.cgi misses jquery.min.js

2017-09-13 Thread Jean-Michel Vourgère
Package: icinga2-classicui Version: 2.6.0-2 Severity: normal Hello In the "Host Alert History" pages, the html contains an include on /icinga2- classicui/jquery/jquery.min.js that returns a 404. May be this is why the "Select a day ..." link doesn't work. If I press the "Earlier Archive" link,

Bug#840328: evince: Evince does not received correct keystroke under Wayland

2017-09-13 Thread Bruno BEAUFILS
On Mon, Oct 10, 2016 at 06:45:36PM -0500, Jason Crain wrote: > I haven't been able to reproduce the behavior you describe. Evince I still have the trouble with some other gnome application on buster. > following the input sources the same as any other gnome app. Does not seem to be the case in

  1   2   3   >