Bug#879728: [debian-mysql] Bug#879728: mysqld fails to start not finding messagefile when started by systemd

2017-11-12 Thread Ondřej Surý
only specific machines / configurations. O. -- Ondřej Surý On Wed, Oct 25, 2017, at 14:23, Thomas DEBESSE wrote: > 2017-10-25 13:03 GMT+02:00 Ondřej Surý : > > Can you reproduce this on a clean system? > > I have not tested on clean systems but I have some other servers that

Bug#881492: [Pkg-dns-devel] Bug#881492: knot-resolver FTBFS on amd64: tests/config/test_config.mk:12: recipe for target 'check-config' failed

2017-11-12 Thread Ondřej Surý
Control: forwarded -1 https://gitlab.labs.nic.cz/knot/knot-resolver/issues/272 dkg, I told you :) O. -- Ondřej Surý On Sun, Nov 12, 2017, at 13:48, Adrian Bunk wrote: > Source: knot-resolver > Version: 1.5.0-1 > Severity: serious > > https://buildd.debian.org/status/fet

Bug#882415: Compilation of mariadb-10.1 >= 10.1.29 fails with internal compiler error

2017-11-22 Thread Ondřej Surý
Package: gcc-7 Version: 7.2.0-16 Severity: serious User: debian-...@lists.debian.org Usertag: arm64 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, compilation of mariadb-10.1_10.1.29-{1,2} fails with: /<>/storage/mroonga/vendor/groonga/lib/ts/ts_expr_node.c:3824:18: internal compiler erro

Bug#882329: [debian-mysql] Bug#882329: mariadb-10.1: FTBFS if jemalloc is disabled - undefined reference to symbol '__bss_start'

2017-11-22 Thread Ondřej Surý
issue should be very very low). Hopefully the pcre3 maintainer will fix it as I do believe Adrian's arguments would at least convince me :) Cheers, -- Ondřej Surý On Tue, Nov 21, 2017, at 15:57, James Cowgill wrote: > Source: mariadb-10.1 > Version: 10.1.29-1 > Severity: serio

Bug#882417: mariadb-10.1: FTBFS on arm64 (internal compiler error)

2017-11-22 Thread Ondřej Surý
Control: severity -1 important Control: reassign -1 gcc-7 Control: forcemerge 882415 -1 This has been reported as bug in gcc-7 and I am taking doko's suggestion and downgrading the -O3 to -O2 meanwhile in 1:10.1.29-3 as a temporary measure. Cheers, -- Ondřej Surý On Wed, Nov 22, 2017,

Bug#817751: php-google-api-php-client 0.6.7 in unstable prevents removal of src:php5

2016-11-28 Thread Ondřej Surý
David, could you please either upload 1.7.0 with PHP 7.0 support to unstable or have 0.6.7 removed from unstable? Having a version that depends on php5 package prevents removal of src:php5 from Debian unstable. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance

Bug#817754: google-auth-library-php in unstable prevents removal of src:php5

2016-11-28 Thread Ondřej Surý
Different package and bug, but same email. Please sort it out. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro chleba (https://vseprochleba.cz

Bug#821539: Need help with 2.2.x upload?

2016-11-28 Thread Ondřej Surý
2.2.1, but that's a minor thing.) Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro chleba (https://vseprochleba.cz) – Mouky ze mlýna a potřeby pro peč

Bug#827462: src:ming to be removed from Debian

2016-11-28 Thread Ondřej Surý
option would be for Debian Flash Team to adopt the src:ming. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro chleba (https://vseprochleba.cz) – Mouky ze

Bug#846219: Uses PHP5-only libraries

2016-11-29 Thread Ondřej Surý
Package: src:fusionforge Version: 6.0.4+20160504-1 Severity: grave Dear maintainers, fusionforge uses PHP5-only libraries that are orphaned and they are going to be removed as part of src:php5 removal from Debian: - libgraphite-php (RM #846073) - fusionforge-plugin-admssw - libarc-php (RM #84

Bug#916715: toulbar2: What will happen if testing migration takes longer than removal from testing

2019-02-19 Thread Ondřej Surý
Hi, I believe that it was the case before that if the autoremoval was due a specific RC bug, any activity on that specific bug would reset the timer for autoremoval. But it might have changed since… or my memory is failing me. Cheers, Ondrej > On 19 Feb 2019, at 08:46, Andreas Tille wrote: >

Bug#848729: It is grave

2017-02-22 Thread Ondřej Surý
Hi Nis, indeed, the attached patch fixes sending unblock emails (where there's at least always my name in the debdiffs and changelogs). Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, pr

Bug#905589: bind9 stops automatically 30 seconds after starting

2018-08-06 Thread Ondřej Surý
: systemd[1]: Starting BIND Domain Name Server... entry? Ondrej -- Ondřej Surý ond...@sury.org > On 6 Aug 2018, at 19:34, Marcel Veldhuizen wrote: > > Package: bind9 > Version: 1:9.11.4+dfsg-4 > Severity: grave > Justification: renders package unusable > > Dear main

Bug#880393: testing cyrus-sasl2 2.1.27+dfsg-1~exp1 (was: Re: nmuing cyrus-sasl2)

2019-01-22 Thread Ondřej Surý
Ryan, thank you for testing the package. I merged your two MRs and I am building the package for unstable right now, and I will be uploading it there shortly. Thank you for your work on the package, I do appreciate the work you spent on this. Ondrej -- Ondřej Surý ond...@sury.org > On

Bug#921733: prevent migration while I am out of town

2019-02-08 Thread Ondřej Surý
Package: src:cyrus-imapd Version: 3.0.8-1 Severity: serious -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 This is new upstream major release and it needs to be tested by people with real cyrus-imapd installations, so I am just preventing the migration to testing while I without Internet access

Bug#795888: botan1.10: FTBFS for non-amd64 processors: symbols not as expected

2015-08-17 Thread Ondřej Surý
s, on which some mangled >symbols have slightly different names because (e.g.) size_t is unsigned >int rather than unsigned long; however, I also see missing symbols on >other 64-bit architectures, mostly corresponding to processor-specific >variants of some code. > >Could you please take a look? > >Thanks! -- Ondřej Surý

Bug#851946: Depending on libssl1.0-dev breaks PHP builds

2017-01-20 Thread Ondřej Surý
Package: libsnmp-dev Version: 5.7.3+dfsg-1.5+b1 Severity: serious Justification: FTBFS php7.0 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear (inactive) maintainers, with #846569 fix, we are now in deadlock, as php7.0 build-depends on both packages depending on libssl-dev and libssl1.0-dev.

Bug#851946: libc-client2007e-dev also depends on libssl-dev

2017-01-20 Thread Ondřej Surý
JFTR libc-client2007e-dev also depends on libssl-dev Lovely, just lovely. -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro chleba (https://vseprochleba.cz

Bug#851946: Depending on libssl1.0-dev breaks PHP builds

2017-01-23 Thread Ondřej Surý
Niels, do you think this might get resolved in time to make the freeze deadline? I would like to enter freeze with up-to-date PHP version, so I don't have to upload to testing-security right away ;) Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server

Bug#1030824: libhashkit-dev needs Breaks + Replaces: libhashkit2 (<< 1.1.3-1~)

2023-02-07 Thread Ondřej Surý
Thanks, on it, I didn't noticed that while converting the debian/*.manpages to debian/*.install. Ondrej -- Ondřej Surý (He/Him) ond...@sury.org > On 7. 2. 2023, at 20:38, Adrian Bunk wrote: > > Package: libhashkit-dev > Version: 1.1.3-1 > Severity: serious >

Bug#1028976: SVG support

2023-01-24 Thread Ondřej Surý
Thanks for the hint. I’ve realized that there might be SVG support external (as a plug-in) and that’s exactly the case. I’ve added -extra to autopkgtest control file as it does contain the dynamically loaded plugin for SVG files. Ondrej -- Ondřej Surý (He/Him) > On 24. 1. 2023, at 10

Bug#1011437: Should bind9-libs be shipped in bookworm?

2023-01-09 Thread Ondřej Surý
ant to re-licence whole BIND 9 to GPL because of the bundled plugin. I would rather keep them separate even if it's painful. Ondrej -- Ondřej Surý (He/Him) ond...@sury.org

Bug#1011437: Should bind9-libs be shipped in bookworm?

2023-01-09 Thread Ondřej Surý
> On 9. 1. 2023, at 14:34, Bernhard Schmidt wrote: > > Am 09.01.23 um 14:30 schrieb Ondřej Surý: > > Hi Ondrej, > >>>> Looking at #942501 and #942502, the intention seems to be to not >>>> ship bind9-libs in bookworm. >>> >>>

Bug#1011437: Should bind9-libs be shipped in bookworm?

2023-01-09 Thread Ondřej Surý
i-bin/bugreport.cgi?bug=1018016 > > Unless you beat me to it, I'll give it another RM stab. Go ahead, my head is fully in the BIND 9 OpenSSL 3 refactoring review, so I could use less distractions :) Ondrej -- Ondřej Surý (He/Him) ond...@sury.org

Bug#1028477: php-odbc: regression - login failed with php 8.2, works under 8.1

2023-01-11 Thread Ondřej Surý
Control: severity -1 normalHi,have you actually read the upgrade guide?Backward Incompatible Changes - Manualphp.net--Ondřej Surý (He/Him)On 11. 1. 2023, at 18:06, Joe Nahmias wrote:Package: php8.2-odbcVersion: 8.2.1-1Severity: graveX-Debbugs-Cc: j...@nahmias.netHello,There seems to be a

Bug#1028477: php-odbc: regression - login failed with php 8.2, works under 8.1

2023-01-11 Thread Ondřej Surý
scribed in the migration guide. Ondrej > -- > Ondřej Surý (He/Him) > >> On 11. 1. 2023, at 18:06, Joe Nahmias wrote: >> >> Package: php8.2-odbc >> Version: 8.2.1-1 >> Severity: grave >> X-Debbugs-Cc: j...@nahmias.net >> >> Hello, >>

Bug#930746: bind9: CVE-2019-6471: A race condition when discarding malformed packets can cause BIND to exit with an assertion failure

2019-06-21 Thread Ondřej Surý
Hi Salvatore, thanks for the debdiff. That looks good to me and if you have time to do the upload, please do so. Ondrej -- Ondřej Surý ond...@sury.org > On 21 Jun 2019, at 11:55, Salvatore Bonaccorso wrote: > > Control: tag -1 + patch > > On Wed, Jun 19, 2019 at 0

Bug#989886: libyang: autopkgtest regression

2021-06-24 Thread Ondřej Surý
Control: severity -1 important Hi, > I've prepared an NMU for libyang (versioned as 1.0.225-1.1) and > uploaded it to DELAYED/2. Please feel free to tell me if I > should delay it longer. The NMU won't work in this case, because we need to prepare update for the testing. I am going to temporari

Bug#989886: libyang: autopkgtest regression

2021-06-24 Thread Ondřej Surý
Sebastian, > On 24. 6. 2021, at 10:43, Sebastian Ramacher wrote: > > Control: severity -1 serious > > On 2021-06-24 10:35:15, Ondřej Surý wrote: >> Control: severity -1 important >> >> Hi, >> >>> I've prepared an NMU for libyang (versi

Bug#958830: php-apcu: upgrade to php-apcu 5.1.17->18 breaks nextcloud

2020-04-25 Thread Ondřej Surý
Control: close -1 NextCloud (server) isn’t even packaged for Debian, and it should be using the default PHP version in Debian which is currently PHP7.4. The PHP7.3 has been removed from unstable and it will be shortly removed from testing. Ondrej -- Ondřej Surý > On 25 Apr 2020, at 19

Bug#958934: bind9: named fails to start after upgrade to 9.16.2

2020-04-27 Thread Ondřej Surý
Control: severity -1 normal I concur with Bernhard. And since there's not enough information, we can go only by the log messages. It seems to me that either BIND uses custom selinux/apparmor profile or something else is in place that disallows named from accessing those files. The BIND 9 provid

Bug#959591: mscgen: FTBFS: dh_auto_test: error: cd _build && make -j4 check VERBOSE=1 returned exit code 2

2020-05-03 Thread Ondřej Surý
Hi Lucas, this: https://github.com/libgd/libgd/issues/615 ? -- Ondřej Surý > On 3 May 2020, at 15:36, Niels Thykier wrote: > >  > Lucas Nussbaum: >> Source: mscgen >> Version: 0.20-13 >> Severity: serious >> Justification: FTBFS on amd64 >> T

Bug#959591: mscgen: FTBFS: dh_auto_test: error: cd _build && make -j4 check VERBOSE=1 returned exit code 2

2020-05-03 Thread Ondřej Surý
Hi Niels, I’ll fix that in libgd2, it also causes problem in PHP. Ondřej -- Ondřej Surý > On 3 May 2020, at 16:55, Niels Thykier wrote: > > Ondřej Surý: >> Hi Lucas, >> >> this: https://github.com/libgd/libgd/issues/615 ? >> >> [...] >>

Bug#946217: reopening 946217

2020-05-11 Thread Ondřej Surý
Hi Salvatore, I’ve talked to David the other night and I’ve agreed to help with libyang and frr packaging, so I’ve open the bug to make sure this gets fixed in stable as well. I’ve seen the email, that this better gets pushed via SRM, so I’ll be doing that. Ondrej -- Ondřej Surý ond

Bug#960663: softhsm2: crash/lockdown in openconnect due to atexit use

2020-05-15 Thread Ondřej Surý
Hi Luca, I'll upload fixed version in a minute. Ondrej On Fri, 15 May 2020 at 11:21, Luca Boccassi wrote: > Package: softhsm2 > Version: 2.6.1-1 > Severity: serious > Justification: causes test failure and FTBFS on reverse dependency > Forwarded: https://github.com/opendnssec/SoftHSMv2/issues/

Bug#977824: php-imagick: diff for NMU version 3.4.4-4.2

2020-12-28 Thread Ondřej Surý
David, feel free to upload directly. Ondřej -- Ondřej Surý (He/Him) > On 28. 12. 2020, at 14:48, David Prévot wrote: > > Control: tags 977824 + pending > > Dear maintainer, > > I've prepared an NMU for php-imagick (versioned as 3.4.4-4.2) and > uploaded it to D

Bug#957045: bird: ftbfs with GCC-10

2021-01-02 Thread Ondřej Surý
Benjamin, I pushed both repos, please push your changes directly. Also feel free to add yourself to co-maintainers if you use bird and care about it. Thanks for the NMU Ondrej -- Ondřej Surý (He/Him) > On 2. 1. 2021, at 18:09, Benjamin Drung wrote: > > Hi Ondřej, > >> O

Bug#980786: named: after upgrade to bind9=1:9.16.11-1 named is killed with status=11/SEGV

2021-01-26 Thread Ondřej Surý
Control: severity -1 important > resolved and I've marked the bug with RC severity Bernhard, wait what? This is not a grave bug at all, it doesn’t make package unusable to everybody, but just in this specific ACL configuration. Ondrej -- Ondřej Surý (He/Him) ond...@sury.org > On

Bug#983041: php-imagick: autopkgtest regression: cd: too many arguments

2021-02-18 Thread Ondřej Surý
Thanks for the poke. Ondrej -- Ondřej Surý (He/Him) ond...@sury.org signature.asc Description: Message signed with OpenPGP

Bug#980111: Prevent autoremoval

2021-02-07 Thread Ondřej Surý
Hey, I will take a look at the issue next week. Prevent autoremoval by touching the bug. Ondrej

Bug#980428: CVE-2020-28948 write operations with directory traversal affecting Archive_Tar through 1.4.11

2021-02-11 Thread Ondřej Surý
Ack, it's in my queue for tomorrow now. Thanks for poking. Ondrej On Sat, 6 Feb 2021 at 22:51, Salvatore Bonaccorso wrote: > Control: severity -1 serous > > Hi PHP maintainers, > > On Mon, Jan 18, 2021 at 08:03:42PM -0400, David Prévot wrote: > > Package: php-pear > > Version: 1:1.10.9+submodul

Bug#982574: php does not compile with acl support

2021-02-11 Thread Ondřej Surý
Control: severity -1 wishlist -- Ondřej Surý (He/Him) > On 12. 2. 2021, at 3:09, VenenuX GNU Linux wrote: > > Package: php7.4-fpm > Version: 7.4.15-1 > Severity: serious > > fpm fails to start due usage of "listen.acl_groups" or/and > "listen.acl_user

Bug#982807: datovka: version too old to be useful

2021-02-14 Thread Ondřej Surý
Package: datovka Version: 4.9.3-2.1 Severity: grave Justification: renders package unusable -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 The version in testing / unstable is too old to be really usable. It's better to not have it in next stable Debian. Ondrej - -- System Information: Debian

Bug#976045: bind9: flaky autopkgtest on ci.debian.net

2021-02-14 Thread Ondřej Surý
time. This should fix the autopkgtest for now. Any test that requires DNS is flaky by definition. Cheers, Ondrej On Tue, 9 Feb 2021 at 19:11, Ivo De Decker wrote: > Hi, > > On Mon, Dec 07, 2020 at 09:12:25AM +0100, Ondřej Surý wrote: > >Hi Paul, > >I am pretty sur

Bug#982886: php-memcached: Should depend on php-igbinary and php-msgpack

2021-02-15 Thread Ondřej Surý
Right, I have a new mechanism for defining the dependencies in dh-php >= 2.0, but I wasn’t able to finish it in time for bullseye, but the memcached has been already updated. I’ll fix this and other affected PECL packages today. Thanks for the report. Ondřej -- Ondřej Surý (He/Him) >

Bug#982886: php-memcached: Should depend on php-igbinary and php-msgpack

2021-02-15 Thread Ondřej Surý
Done. Fixed php-redis, php-memcached, php-solr, php-pecl-http, and php-msgpack in one go. Thanks for noticing this and sorry for the trouble, Ondrej -- Ondřej Surý (He/Him) ond...@sury.org > On 15. 2. 2021, at 20:32, Grigory Ivanov wrote: > > Package: php-memcached > Version: 3

Bug#976045: bind9: flaky autopkgtest on ci.debian.net

2020-12-07 Thread Ondřej Surý
Hi Paul, I am pretty sure the culprit is this upstream issue: https://gitlab.isc.org/isc-projects/bind9/-/issues/2305 So, the bug should resolve itself when BIND 9.16.10 is uploaded to the archive. If not, I'll modify the autopkgtest. Ondrej On Sat, 28 Nov 2020 at 21:09, Paul Gevers wrote: >

Bug#861913: mariadb-client-10.1: trying to overwrite '/usr/bin/mytop', which is also in package mytop 1.9.1-4

2017-05-08 Thread Ondřej Surý
dth. +Made 'State' length dynamic. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro chleba (https://vseprochleba.cz) – Mouky ze mlýna a potře

Bug#861913: mariadb-client-10.1: trying to overwrite '/usr/bin/mytop', which is also in package mytop 1.9.1-4

2017-05-08 Thread Ondřej Surý
Definitely, I am just building the fixed version. I did a cleanup of upstream files not being installed in the last bigger mariadb update, and I was just not aware mytop was already packaged. Sorry for the troubles. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance

Bug#861913: mariadb-client-10.1: trying to overwrite '/usr/bin/mytop', which is also in package mytop 1.9.1-4

2017-05-08 Thread Ondřej Surý
https://anonscm.debian.org/git/pkg-mysql/mariadb-10.1.git/commit/?id=2a17c70476de768f1e166b65f4a1b3865ac9757f -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro

Bug#859419: non-functional after installation (service fails to start)

2017-05-08 Thread Ondřej Surý
o not exit violently when no key store is configured, but just refuse to generate new keys and log that prominently. I have fixed the other two RC bugs, and I am lowering the severity on this one, as this is how the OpenDNSSEC have worked since the beginning. Cheers, -- Ondřej Surý Knot DNS (

Bug#862103: mariadb-server-10.1: MariaDB crash after throwing an instance of 'std::out_of_range'

2017-05-08 Thread Ondřej Surý
Hi Sam, thanks for the heads-up and for the link to the patch - it applies cleanly (after whitespace fixes) to MariaDB 10.1.23, so I am just building 10.1.23-5 with the patch applied. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver

Bug#857444: [debian-mysql] Bug#857444: Moving to src:mariadb-10.1

2017-05-24 Thread Ondřej Surý
Control: fixed -1 mysql-transitional/5.5.+default This was actually fixed with upload of mysql-transitional to testing-p-u. I'll close it when the package migrates from t-p-u to testing. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server

Bug#861913: mariadb-client-10.1: trying to overwrite '/usr/bin/mytop', which is also in package mytop 1.9.1-4

2017-05-29 Thread Ondřej Surý
what command to use based on the default "MySQL" provider in the system Definitely lot of careful work. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolve

Bug#861913: mariadb-client-10.1: trying to overwrite '/usr/bin/mytop', which is also in package mytop 1.9.1-4

2017-05-29 Thread Ondřej Surý
The old one uses "MySQL" name everywhere, the new one write "MariaDB" everywhere. So they are compatible, but it's kind of "Pope in Avignon" situation... Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Res

Bug#860072: botan1.10: diff for NMU version 1.10.15-1.1

2017-05-29 Thread Ondřej Surý
e2.end()) return true; + if(p1 == name1.end() || p2 == name2.end()) +return false; } if(!Charset::caseless_cmp(*p1, *p2)) Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.kn

Bug#859418: [Pkg-dns-devel] Bug#859418: non-functional after installation (service fails to start)

2017-05-30 Thread Ondřej Surý
Hi Julien, do you perhaps have a full apt log? I am interested in opendnssec-common package installation log. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC

Bug#863675: [debian-mysql] Bug#863675: Bug#863675: libmariadbd-dev: fails to upgrade from 'sid' - trying to overwrite /usr/bin/mysql_config

2017-05-31 Thread Ondřej Surý
Yeah, there's no harm in keeping experimental stuff in the "experimental"... On 31 May 2017 13:15:09 Robie Basak wrote: Hi Otto, On Wed, May 31, 2017 at 01:49:28PM +0300, Otto Kekäläinen wrote: MariaDB 10.3 test packages should be removed from experimental. I think it was just a temporary t

Bug#864159: [debian-mysql] fixing #864159 in mariadb-10.1

2017-06-06 Thread Ondřej Surý
Hi Andreas, done, uploaded as 10.1.24-2; Sorry I missed that, but it happens for me with the reassigned bugs, that I miss the emails about those. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure

Bug#852495: mariadb-server-10.[01]: purging old mariadb-server shuts down mariadb-server and removes init.d links

2017-03-29 Thread Ondřej Surý
works very well, but I would really appreciate if somebody else could test this as well. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro chleba (https

Bug#848632: [php-maint] Bug#848632: php5: Segmentation fault when connecting via SSH2 file wrapper

2016-12-19 Thread Ondřej Surý
Control: reassign -1 php5-ssh2 This is in fact a bug in ssh2. As a temporary workaround you can install ssh2=0.13 from PECL. I'll prepare fixed php5-ssh2 package in Debian meanwhile. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Res

Bug#848977: Unsuitable to be part of stable release without proper maintainer

2016-12-21 Thread Ondřej Surý
Package: src:courier-unicode Version: 1.4-2 Severity: serious -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 As I explained in [1] the courier-mta suite doesn't have a proper maintainer and therefore it should not be part of the stable release. Nobody has volunteered to be the main maintainer si

Bug#848976: Unsuitable to be part of stable release without proper maintainer

2016-12-21 Thread Ondřej Surý
Package: src:courier-authlib Version: 0.66.4-8 Severity: serious -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 As I explained in [1] the courier-mta suite doesn't have a proper maintainer and therefore it should not be part of the stable release. Nobody has volunteered to be the main maintainer

Bug#849038: [pkg-GD-devel] Bug#849038: libgd2: CVE-2016-9933: imagefilltoborder stackoverflow on truecolor images

2016-12-22 Thread Ondřej Surý
date ready before end of the year. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro chleba (https://vseprochleba.cz) – Mouky ze mlýna a potřeby pro pečení ch

Bug#844121: CVE-2016-9300, CVE-2016-9301, and CVE-2016-9302 are *NOT* valid bug reports

2016-12-05 Thread Ondřej Surý
Sam and others, I most deeply apologize, you are right in your assessment. I somehow missed the extra four additional sanity checks at the beginning of the getudp() function that seems to catch the error conditions on those input buffers. Cheers, -- Ondřej Surý Knot DNS (https://www.knot

Bug#847209: courier-mta: fails to install: /run/courier/esmtpd.pid.lock: No such file or directory

2016-12-06 Thread Ondřej Surý
Control: forcemerge 847174 -1 JFTR already fixed in -3 upload. I missed the Debian patch that removed GnuTLS support. On 6 December 2016 3:33:15 p.m. Andreas Beckmann wrote: Package: courier-mta Version: 0.76.3-2 Severity: serious User: debian...@lists.debian.org Usertags: piuparts Hi, d

Bug#847324: civicrm: Build-Depends on packages to be removed from Debian archive

2016-12-07 Thread Ondřej Surý
Source: civicrm Version: 4.7.8+dfsg-1 Severity: grave Justification: renders package unusable -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear maintainer, civicrm Build-Depends and Depends on package libfpdi-php that doesn't support PHP 7.0 and it is going to be removed from Debian archive.

Bug#865678: [Pkg-dns-devel] Bug#865678: knot: Improper TSIG validity period check can allow TSIG forgery

2017-07-14 Thread Ondřej Surý
Thanks for the upload. I didn't give it a very high priority as there was an easy fix using ACLs and I had a rough plan to fix it during next week. Cheers, Ondřej On 14 July 2017 22:12:11 Yves-Alexis Perez wrote: On Fri, 2017-06-23 at 19:01 +0200, Salvatore Bonaccorso wrote: Source: knot V

Bug#869199: [Pkg-dns-devel] Bug#869199: knot binary-all FTBFS: dh_missing: missing files, aborting

2017-07-24 Thread Ondřej Surý
Control: blocked -1 by 831786 Hi Adrian, this is a bug in dh-exec and I can do nothing about it from knot source package apart from dropping dh-exec usage. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz

Bug#852297: [Pkg-dns-devel] Bug#852297: dnssec-trigger: Installs config files directly in the root of the filesystem

2017-01-31 Thread Ondřej Surý
= mime_attach(body, attachments, charset, body_charset) File "/usr/lib/python3/dist-packages/reportbug/submit.py", line 177, in mime_attach email.Encoders.encode_base64(part) AttributeError: module 'email' has no attribute 'Encoders' And I am hoping on A

Bug#828252: qtcreator is marked for autoremoval from testing

2016-11-06 Thread Ondřej Surý
In the end it was very easy (hopefully) - the OpenSSL module is optional and hopefully this won't break anything :). Ccing other botan1.10 users. Please test with botan1.10 - 1.10.13-1 that just got uploaded to unstable. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a

Bug#843477: src:kamailio: stop using libval-dev for DNSSEC validation

2016-11-06 Thread Ondřej Surý
Package: src:kamailio Version: 4.4.3-2 Severity: serious -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear maintainer, please stop using libdnsval-dev for DNSSEC validation. src:dnsval is very poorly upstream maintained (SVN repository, issue tracker, mailing list are non-functional) and I a

Bug#840806: [pkg-GD-devel] Bug#840806: closed by Ondřej Surý (Bug#840806: fixed in libgd2 2.2.3-87-gd0fec80-1)

2016-11-06 Thread Ondřej Surý
Hi Salvatore, you are right. I thought this patch has been already merged into upstream git, but it looks like it hasn't. I will upload fixed version to unstable shortly. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www

Bug#811444: [Pkg-dns-devel] Bug#811444: closed by Debian FTP Masters (Bug#843479: Removed package(s) from unstable)

2016-11-08 Thread Ondřej Surý
other nameservers as backends for even easier setup: Knot DNS has automatic DNSSEC signing including ZSK rollover PowerDNS has also DNSSEC support and for much more complicated setups you can use OpenDNSSEC. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS

Bug#843532: [Pkg-dns-devel] Bug#843532: dnssec-trigger: broken by OpenSSL 1.1.0

2016-11-10 Thread Ondřej Surý
Sebastian, thanks for the patch. The 0.13~svn685-7 version in unstable includes your patch, and I would really appreciate if someone could test whether dnssec-trigger now works. Ondrej -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https

Bug#843532: [Pkg-dns-devel] Bug#843532: Bug#843532: dnssec-trigger: broken by OpenSSL 1.1.0

2016-11-12 Thread Ondřej Surý
I have forwarded both patches to the nlnetlabs-maintainers list. Thanks. -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro chleba (https://vseprochleba.cz

Bug#844160: marked as done (apache2-dev should depend on libssl1.0-dev)

2016-11-13 Thread Ondřej Surý
nf->cid->serialNumber) != -1) && +ASN1_INTEGER *serial; + OCSP_id_get0_info(NULL, NULL, NULL, &serial, cinf->cid); +if ((i2a_ASN1_INTEGER(bio, serial) != -1) && ((n = BIO_read(bio, snum, sizeof snum - 1)) >

Bug#844160: Bug#828236: Bug#844160: marked as done (apache2-dev should depend on libssl1.0-dev)

2016-11-13 Thread Ondřej Surý
On Mon, Nov 14, 2016, at 08:44, Ondřej Surý wrote: > On Mon, Nov 14, 2016, at 08:21, Adrian Bunk wrote: > > On Mon, Nov 14, 2016 at 05:03:45AM +0100, Ondřej Surý wrote: > > > > Looking at mod_ssl_openssl.h and the comment in #828330, > > > > I'd suggest t

Bug#844160: Bug#828236: Bug#844160: marked as done (apache2-dev should depend on libssl1.0-dev)

2016-11-13 Thread Ondřej Surý
On Mon, Nov 14, 2016, at 08:21, Adrian Bunk wrote: > On Mon, Nov 14, 2016 at 05:03:45AM +0100, Ondřej Surý wrote: > > > Looking at mod_ssl_openssl.h and the comment in #828330, > > > I'd suggest the change below to add a dependency on libssl1.0-dev > > > to apa

Bug#853537: mariadb-10.1: ftbfs with GCC-7

2017-08-10 Thread Ondřej Surý
Package: src:mariadb-10.1 Followup-For: Bug #853537 Hi Matthias, the full build.log you sent contains: make[4]: Leaving directory '/<>/builddir' Error running link command: Segmentation fault make[4]: Leaving directory '/<>/builddir' storage/tokudb/PerconaFT/portability/CMakeFiles/tokuportabilit

Bug#821701: [Pkg-php-pecl] Bug#821701: src:php-json: PHP 7.0 Transition

2016-10-15 Thread Ondřej Surý
Adrian, it needs to go together with src:php5 that we still keep for s-p-u. But I was just going to ask security team if that's still needed since we are doing all updates via jessie-security anyway. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS s

Bug#828252: qtcreator is marked for autoremoval from testing

2016-10-27 Thread Ondřej Surý
So is there an option to not switch to openssl 1.1.0 for stretch? Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro chleba (https://vseprochleba.cz

Bug#828252: qtcreator is marked for autoremoval from testing

2016-10-27 Thread Ondřej Surý
I can probably generate two sets of packages with versioned symbols if I have some help with that. Cheers, -- Ondřej Surý Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro

Bug#829477: courier-mta: fails to install: Invalid command 'gendh'

2016-10-31 Thread Ondřej Surý
Yes, I already had a fix in repo (use dhparam -2 instead) and I have just uploaded that. Ondřej On 31 October 2016 11:24:13 PM Andreas Beckmann wrote: On 2016-10-31 16:32, Stefan Hornburg (Racke) wrote: On 07/03/2016 07:07 PM, Andreas Beckmann wrote: Package: courier-mta Version: 0.76.1-3

Bug#877436: botan1.10: diff for NMU version 1.10.17-0.1

2017-10-09 Thread Ondřej Surý
; --- botan1.10-1.10.16/src/math/bigint/bigint.h 2017-04-05 > 01:06:45.0 + > +++ botan1.10-1.10.17/src/math/bigint/bigint.h 2017-10-02 > 06:00:00.0 + > @@ -500,6 +500,12 @@ > */ > BigInt(NumberType type, size_t n); > > + void shrink_to_fit(); > + > + static void const_time_lookup(SecureVector& output, > + const std::vector& vec, > + size_t idx); > + > private: >SecureVector reg; >Sign signedness; > diff -Nru botan1.10-1.10.16/src/math/mp/mp_asm64/info.txt > botan1.10-1.10.17/src/math/mp/mp_asm64/info.txt > --- botan1.10-1.10.16/src/math/mp/mp_asm64/info.txt 2017-04-05 > 01:06:45.0 + > +++ botan1.10-1.10.17/src/math/mp/mp_asm64/info.txt 2017-10-02 > 06:00:00.0 + > @@ -8,10 +8,12 @@ > > > > +aarch64 > alpha > ia64 > mips64 > ppc64 > +ppc64le > sparc64 > > > diff -Nru botan1.10-1.10.16/src/math/numbertheory/powm_mnt.cpp > botan1.10-1.10.17/src/math/numbertheory/powm_mnt.cpp > --- botan1.10-1.10.16/src/math/numbertheory/powm_mnt.cpp > 2017-04-05 01:06:45.0 + > +++ botan1.10-1.10.17/src/math/numbertheory/powm_mnt.cpp > 2017-10-02 06:00:00.0 + > @@ -68,6 +68,7 @@ > &workspace[0]); > >g[i].assign(&z[0], mod_words + 1); > + g[i].grow_to(mod_words); >} > } > > @@ -81,6 +82,7 @@ > BigInt x = R_mod; > SecureVector z(2 * (mod_words + 1)); > SecureVector workspace(2 * (mod_words + 1)); > + SecureVector e(mod_words); > > for(size_t i = exp_nibbles; i > 0; --i) >{ > @@ -98,12 +100,13 @@ > >const u32bit nibble = exp.get_substring(window_bits*(i-1), > window_bits); > > - const BigInt& y = g[nibble]; > - >zeroise(z); > + > + BigInt::const_time_lookup(e, g, nibble); > + >bigint_monty_mul(&z[0], z.size(), > x.data(), x.size(), x.sig_words(), > - y.data(), y.size(), y.sig_words(), > + e.data(), e.size(), e.size(), > modulus.data(), mod_words, mod_prime, > &workspace[0]); > > diff -Nru botan1.10-1.10.16/src/utils/cpuid.cpp > botan1.10-1.10.17/src/utils/cpuid.cpp > --- botan1.10-1.10.16/src/utils/cpuid.cpp 2017-04-05 > 01:06:45.0 + > +++ botan1.10-1.10.17/src/utils/cpuid.cpp 2017-10-02 > 06:00:00.0 + > @@ -157,6 +157,9 @@ > const u16bit PVR_G5_970GX = 0x0045; > const u16bit PVR_POWER6 = 0x003E; > const u16bit PVR_POWER7 = 0x003F; > + const u16bit PVR_POWER7p = 0x004A; > + const u16bit PVR_POWER8 = 0x004D; > + const u16bit PVR_POWER8E = 0x004B; > const u16bit PVR_CELL_PPU = 0x0070; > > // Motorola produced G4s with PVR 0x800[0123C] (at least) > @@ -177,6 +180,9 @@ > altivec_capable |= (pvr == PVR_G5_970GX); > altivec_capable |= (pvr == PVR_POWER6); > altivec_capable |= (pvr == PVR_POWER7); > + altivec_capable |= (pvr == PVR_POWER7p); > + altivec_capable |= (pvr == PVR_POWER8); > + altivec_capable |= (pvr == PVR_POWER8E); > altivec_capable |= (pvr == PVR_CELL_PPU); > #endif > > -- Ondřej Surý

Bug#876398: mysqltest can't read config proberly

2017-10-09 Thread Ondřej Surý
adb-test-data10.1.26-0+deb9u1 > ii zlib1g 1:1.2.8.dfsg-5 > > mariadb-test recommends no packages. > > Versions of packages mariadb-test suggests: > ii patch 2.7.5-1+b2 > > -- no debconf information > -- Ondřej Surý

Bug#878107: src:pcre3: stack frame size detection is broken

2017-10-09 Thread Ondřej Surý
Package: src:pcre3 Version: 2:8.39-5 Severity: grave Dear Maintainer, the system-wide pcre3 library stack frame size detection is broken as described in https://bugs.exim.org/show_bug.cgi?id=2173 and that breaks at least ppc64el and s390x build causing segfaults in the test suite (+ autopkgtes

Bug#878131: uses deprecated Lua luaL_reg (vs. luaL_Reg)

2017-10-10 Thread Ondřej Surý
Package: src:ettercap Version: 1:0.8.2-10 Severity: serious Tags: upstream -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear maintainers, your package uses deprecated Lua API, see: http://lua-users.org/wiki/CompatibilityWithLuaFive ### Defining a list of CFunctions (Lua 5.0) luaL_reg (Lua

Bug#878132: uses deprecated Lua luaL_reg (vs. luaL_Reg)

2017-10-10 Thread Ondřej Surý
Package: src:minetest Version: 0.4.16+repack-4 Severity: serious Tags: upstream -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear maintainer(s), your package uses deprecated Lua API, see: http://lua-users.org/wiki/CompatibilityWithLuaFive > ### Defining a list of CFunctions (Lua 5.0) > > lu

Bug#873386: LuaJIT 2.1 breaks Lua 5.1 API

2017-10-10 Thread Ondřej Surý
Package: libluajit-5.1-dev Version: 2.1.0~beta3+dfsg-2 Followup-For: Bug #873386 Hi Evgeni, > This breaks software that either not expects these 5.2 symbols Such software is broken by definition. Symbol addition must not break any software. > expects the compat stuff to be present. The LuaJit

Bug#875708: [mytop] missing libconfig-inifiles-perl

2017-10-22 Thread Ondřej Surý
75F C8D4 3ABB 35AB 30EE 09F8 9F3C 8CA1 D25D > GPG key (long) : 09F89F3C8CA1D25D > GPG Key: 8CA1D25D > CAcert Key S/N : 0E:D4:56 > > Old pgp Key: BE581B6E (revoked since 2014-12-31). > > Jörg Frings-Fürst > D-54470 Lieser > > Threema: SYR8SJXB > Wire: @joergfringsfuerst > Skype: joergpenguin > Ring: jff > > IRC: j_...@freenode.net > j_...@oftc.net > > My wish list: > - Please send me a picture from the nature at your home. > -- Ondřej Surý

Bug#879728: [debian-mysql] Bug#879728: mysqld fails to start not finding messagefile when started by systemd

2017-10-25 Thread Ondřej Surý
Can you reproduce this on a clean system? And if no, do you remember what configuration changes did you do to the mariadb? Or if you can share the configuration (offline or online) that can be used to reproduce the issue? Ondrej -- Ondřej Surý On Wed, Oct 25, 2017, at 08:33, Thomas DEBESSE

Bug#925106: php7.3-common: please add Breaks: php7.0-curl, gforge-common (<< 6)

2019-04-13 Thread Ondřej Surý
upstream release for 7.0, so I’ll just follow different numbering schemes for external (7.0.33-<1,inf)) vs stretch (7.0.33-0+deb7u<1,inf), so the conflict will be (<< 7.0.33-1~ and it should just work fine. Ondrej -- Ondřej Surý > On 13 Apr 2019, at 15:00, Ivo De Decker wrote: &g

Bug#925106: php7.3-common: please add Breaks: php7.0-curl, gforge-common (<< 6)

2019-04-13 Thread Ondřej Surý
I tried to use sbuild with --no-arch-all --no-arch-any --source-only-changes and upload the result, so we’ll see how it goes. If it doesn’t go through, I’ll do the full fledged build tomorrow. O. -- Ondřej Surý ond...@sury.org > On 13 Apr 2019, at 18:04, Ivo De Decker wrote: > >

Bug#927717: pkg/config file still with some problems

2019-04-21 Thread Ondřej Surý
Control: severity -1 minor Please don’t abuse severities. Or explain how this “makes the package in question unusable or mostly so, or causes data loss, or introduces a security hole allowing access to the accounts of users who use the package.” Ondrej -- Ondřej Surý > On 21 Apr 2019, at

Bug#927932: bind9: CVE-2018-5743: Limiting simultaneous TCP clients is ineffective

2019-04-24 Thread Ondřej Surý
I’ll have a patch for platforms without atomic support for you. -- Ondřej Surý > On 25 Apr 2019, at 08:49, Bernhard Schmidt wrote: > > Package: src:bind9 > Severity: grave > Tags: security, upstream > > CVE: CVE-2018-5743 > Document version:2.0 &

Bug#927142: Cyrus-Imapd expel from Buster?

2019-05-09 Thread Ondřej Surý
Hi Xavier, yes, the comaintainers are really sought. The emails here should reset the autoremoval status, so if you have time to fix this bug, it doesn’t need to be downgraded, just fixed... Ondrej -- Ondřej Surý ond...@sury.org > On 9 May 2019, at 15:04, Xavier wrote: > > Le 09/

Bug#927142: Cyrus-Imapd expel from Buster?

2019-05-09 Thread Ondřej Surý
Xavier, feel free to ask for membership in salsa and add yourself to Uploaders and do the upload. I haven’t used cyrus-imapd in years, so I am maintaining it just out of inertia and because nobody stepped up until now. So thank you very mich for caring. Ondrej -- Ondřej Surý > On 9 May 2

Bug#1000637: generating debian/control is *NOT* policy compliant

2022-01-23 Thread Ondřej Surý
That’s exactly how it’s done in the PHP packages. If you see a different content in the debian/control, it means the packages were not generated in the clean build environment. Ondřej -- Ondřej Surý (He/Him) > On 23. 1. 2022, at 15:09, Thomas Goirand wrote: > > Hi, > > Loo

Bug#1004271: os.c:84: fatal error: RUNTIME_CHECK((size_t)s == (size_t)64) failed

2022-01-23 Thread Ondřej Surý
Control: forwarded -1 https://gitlab.isc.org/isc-projects/bind9/-/issues/3108 Yeah, there was wrong assumption on our side that the call would either not exist or always return valid value. There’s already MR for it which needs to be reviewed as I prepared it over the weekend. Ondrej -- Ondřej

  1   2   3   4   5   6   7   8   9   >