Bug#875885: netkit-tftp: does not trap ./configure errors

2018-07-03 Thread Raphael Hertzog
Hello Alberto, it's been 8 years that you haven't touched netkit-tftp and the package has been removed from Debian testing due to the bug I'm replying to. Can you take care of fixing the bug and/or properly orphaning the package if you are no longer interested in it? Regards, On Fri, 15 Sep 201

Bug#853310: android-platform-system-core: ftbfs with GCC-7

2018-09-11 Thread Raphael Hertzog
Hello, On Tue, 11 Sep 2018, 殷啟聰 | Kai-Chung Yan wrote: > Sorry for being dormant on the matter. We had been in the process of > updating the whole SDK suite to Oreo but it is blocked by an upload of > this package. The latest update produces several new packages so I don't > have the permission to

Bug#853310: android-platform-system-core: ftbfs with GCC-7

2018-09-14 Thread Raphael Hertzog
Hi, On Thu, 13 Sep 2018, 殷啟聰 | Kai-Chung Yan wrote: > > It would have helped if you had given me the URL of the repository. > > Anyway, I'm willing to sponsor the update (even though I don't know much > > about Android Tools) but I have a few comments: > > Thank you for the sponsor, it will help

Bug#849308: Please let wireguard migrate to testing

2018-09-18 Thread Raphael Hertzog
Hello Daniel, we want wireguard in Kali and Kali is based on Debian testing. For now we imported it manually from Debian Unstable but it's counter-productive, we have rolling distributions (kali and testing) and an upstream following a rolling model and yet we don't have its packages automaticall

Bug#880902: RC bug on zfs-linux that has to be fixed

2017-11-16 Thread Raphael Hertzog
Hello, This bug should be quickly fixed because ZFS is broken in Debian Testing right now, spl-linux migrated already and zfs-linux did not migrate due to this bug. Someone reported this problematic mismatch in Kali (which is based on Debian testing): https://bugs.kali.org/view.php?id=4351 Addin

Bug#882372: Wheezy update of ohcount?

2017-11-23 Thread Raphael Hertzog
Hello Sylvestre, The Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of ohcount: https://security-tracker.debian.org/tracker/CVE-2017-16926 Would you like to take care of this yourself? I tried to file an upstream bug as a first step (since th

Bug#882463: Wheezy update of xrdp?

2017-11-23 Thread Raphael Hertzog
Hello Dominik, The Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of xrdp: https://security-tracker.debian.org/tracker/CVE-2017-16927 Would you like to take care of this yourself? If yes, please follow the workflow we have defined here: https

Bug#882769: Cannot upgrade from Stretch: cp: target '/lib/live/mount/medium/live/vmlinuz.new' is not a directory

2017-11-28 Thread Raphael Hertzog
Hi Thomas, On Sun, 26 Nov 2017, Thomas Goirand wrote: > After booting a Stretch live image, I tried to upgrade it to Sid, and > it fails with this error: > > update-initramfs: deferring update (trigger activated) > cp: target '/lib/live/mount/medium/live/vmlinuz.new' is not a directory This is u

Bug#882769: Cannot upgrade from Stretch: cp: target '/lib/live/mount/medium/live/vmlinuz.new' is not a directory

2017-11-28 Thread Raphael Hertzog
On Tue, 28 Nov 2017, Goirand Thomas (aka zigo) wrote: > I did try to purge and it didn't help. The issue is indeed about 2 > kernels installed, though as I wrote, upgrading linux-image-amd64 first > works arround the problem. So I'm not sure what's going on, really. Any > hint/clue ? Run "update-i

Bug#844139: python-django: FTBFS: Tests failures

2016-11-16 Thread Raphael Hertzog
Hi, On Sat, 12 Nov 2016, Scott Kitterman wrote: > > This failure happens on a CPU with TSX extensions available, but is not > > reproducible on a machine without them. I can't reproduce this either on my machine. But I have other failures (see below). Lucas, can you see if you reproduce your pr

Bug#843073: Debian Installer Stretch Alpha 8 release

2016-11-21 Thread Raphael Hertzog
Hello Guillem, On Mon, 14 Nov 2016, Michael Biebl wrote: > Just for the record: I can confirm it fixes the problem in dpkg-shlibdeps. [...] > Guillem, it would be great if you can upload a fixed dpkg soon. A full week went by already. What's your plan? I can offer to upload dpkg 1.18.15.1 to sid

Bug#843073: Debian Installer Stretch Alpha 8 release

2016-11-21 Thread Raphael Hertzog
On Mon, 21 Nov 2016, Guillem Jover wrote: > Oh, and forgot to mention, this issue has been known for over 8 > months, and now there's this need to be pushy and rush things, etc. > I certainly do not appreciate that. I have not been involved in this project so I don't know its history but #843073 i

Bug#828557: sslsniff: FTBFS with openssl 1.1.0

2016-11-22 Thread Raphael Hertzog
Control: severity -1 important Control: unblock 827061 by -1 Control: tag -1 + help On Sun, 26 Jun 2016, Kurt Roeckx wrote: > OpenSSL this package fail to build. A log of that build can be found at: > https://breakpoint.cc/openssl-1.1-rebuild-2016-05-29/Attempted/sslsniff_0.8-4.2_amd64-20160529-1

Bug#829452: NMU uploaded

2016-11-22 Thread Raphael Hertzog
Hello Eriberto, I made a NMU to fix this bug. Since the package is in collab-maint, I directly commited my change there. Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexian.com/services/debian-lts.html Learn to master Debian: http://debian-handbook.info/get/

Bug#801990: gdm3: Keymap is forced to set US

2017-03-14 Thread Raphael Hertzog
Control: severity -1 important On Tue, 14 Mar 2017, Raphael Hertzog wrote: > I also see this for any fresh stretch install where I select the French > keyboard layout. On first start, the greeting screen (handled by > gnome-shell AFAIK) uses a default US/qwerty layout and the layout sele

Bug#902812: wcc FTBFS

2018-07-18 Thread Raphael Hertzog
Control: severity -1 important Control: tag -1 + unreproducible Philippe, if you don't put Sylvestre and Axel in copy, they won't get your mail sent only to 902...@bugs.debian.org. On Wed, 18 Jul 2018, Philippe Thierry wrote: > I take a look at the bug you reported and I didn't managed to reprodu

Bug#902812: wcc FTBFS

2018-07-19 Thread Raphael Hertzog
Hi, On Wed, 18 Jul 2018, Axel Beckert wrote: > > Axel mentioned failed bin-nmu but it looks like the bin-nmu worked: > > https://buildd.debian.org/status/fetch.php?pkg=wcc&arch=amd64&ver=0.0.2%2Bdfsg-3%2Bb2&stamp=1531313043&raw=0 > > Sorry, I deduced that from "uninstallable + FTBFS". > > > I do

Bug#906139: debian-policy: versioned depends on libjs-sphinxdoc unsatisfiable on stretch

2018-08-27 Thread Raphael Hertzog
Hi, On Sat, 25 Aug 2018, Sean Whitton wrote: > Urgh. > > I am reluctantly (yet gratefully!) working on implementing Ian's > substvar hack. Or you could have read dh_linktree's manual page and see that you can use "replace" instead of "deduplicate" to get a weak dependency. $ git diff diff -

Bug#906139: debian-policy: versioned depends on libjs-sphinxdoc unsatisfiable on stretch

2018-08-27 Thread Raphael Hertzog
Hi, On Mon, 27 Aug 2018, Sean Whitton wrote: > On Mon 27 Aug 2018 at 12:58PM +0200, Raphael Hertzog wrote: > > Or you could have read dh_linktree's manual page and see that you can > > use "replace" instead of "deduplicate" to get a weak dependency. >

Bug#901572: acccheck: CVE-2018-12268: Patch proposal

2018-09-03 Thread Raphael Hertzog
Control: affects 904200 acccheck On Mon, 03 Sep 2018, p...@reseau-libre.net wrote: > I've updated the acccheck.pl behavior to correct (i hope) the > CVE-2018-12268. User and password input files are sanitized before any use > in the generated commandline string. The patch is given attached to this

Bug#853310: android-platform-system-core: ftbfs with GCC-7

2018-09-04 Thread Raphael Hertzog
Hello, this bug on android-platform-system-core is the reason why apktool got dropped from Debian Testing. I would like it to go back to Debian Testing. I saw that the package has many updates in the git repository. I guess the FTBFS issue is fixed in the new upstream version that you packaged in

Bug#917199: pivy, unbuildable on mips* due to testsuite failures in patchelf.

2019-01-13 Thread Raphael Hertzog
Hi, On Sat, 12 Jan 2019, Adrian Bunk wrote: > pyside2 is now built without patchelf on mips64el. > > Doing the same for mips and mipsel should fix the problem for pivy. Yeah, but this is not going in the right direction. This means that pyside will be built with the embedded patchelf. The embedd

Bug#917199: pivy, unbuildable on mips* due to testsuite failures in patchelf.

2019-01-14 Thread Raphael Hertzog
Hi, On Sun, 13 Jan 2019, Adrian Bunk wrote: > Test cases that passed in patchelf 0.8 fail since 0.9, > and segmentation fault on things like setting rpath > might be close enough to "entirely broken". In that case, it would certainly help upstream if someone (maintainer/porter) could try to "git

Bug#822586: Upstream status update

2019-01-15 Thread Raphael Hertzog
Hello, just FYI since upstream was unable to port the code to the GObject Introspection bindings, he started to rewrite the application in C++ using GTKmm. This is happening in the "future" directory of the upstream git repository (master branch) and the author shares some progress information her

Bug#919578: rozofs: FTBFS with undefined references to major, minor

2019-01-17 Thread Raphael Hertzog
Hi, On Thu, 17 Jan 2019, Andreas Beckmann wrote: > rozofs recently started to FTBFS in an up-to-date sid+experimental > pbuilder environment: FWIW, I filed earlier today an RM bug: https://bugs.debian.org/919568 So I don't plan to handle this bug. Cheers, -- Raphaël Hertzog ◈ Debian Developer

Bug#920366: developers-reference: ftbfs in sid, builds fine in stable

2019-01-26 Thread Raphael Hertzog
Hi, On Sat, 26 Jan 2019, Norbert Preining wrote: > FIrst of all, I cannot reproduce this error on sid, so with all packages > properly upgraded. > > That means, I assume you have a mixed upgrade of packages where it > fails, is this correct? Yes, debci triggers autopkgtest of reverse dependencie

Bug#891670: pymssql FTBFS with freetds-dev 1.00.82-2

2019-01-28 Thread Raphael Hertzog
Hi, On Sun, 24 Jun 2018, Geoffrey Thomas wrote: > Upstream is being slow to put out a new release, there's some blocker > involving the new freetds. I asked if that was resolved yet: > > https://github.com/pymssql/pymssql/issues/528 > > At some point (probably in a month or two, honestly...) I'l

Bug#920377: dpkg > 1.19.3 breaks reprepro

2019-01-31 Thread Raphael Hertzog
Hi, On Thu, 24 Jan 2019, Alf Gaida wrote: > Commit > https://salsa.debian.org/dpkg-team/dpkg/commit/4a4619831de8b8972f86b489660dc98f187cfa34.patch > breaks reprepro. For reference, that commit says this: | dpkg-genchanges: Only reference binary packages being uploaded | | The .changes file des

Bug#796031: publican: FTBFS: validity:513 in Test_DB5_Book.xml on line 11: ID We_Need_Feedback already defined

2015-08-19 Thread Raphael Hertzog
Control: reassign -1 libxml2 Control: forcemerge 766884 -1 Control: affects -1 publican Hi, On Tue, 18 Aug 2015, Chris Lamb wrote: > Dear Maintainer, > > publican fails to build from source on unstable/amd64: I am already aware of this and it annoys me a lot but it's a regression in libxml2 and

Bug#766884: libxml2 broken in sid for months already

2015-08-20 Thread Raphael Hertzog
Hello libxml2 maintainers, I'm somewhat annoyed at the fact that libxml2 has been broken for months with the bug 766884. It does not look like upstream will fix it soon. In the mean time we have unbuildable packages in sid (I'm affected with publican) so I would like you to consider uploading a 2.

Bug#766884: libxml2 broken in sid for months already

2015-08-25 Thread Raphael Hertzog
Hi, On Thu, 20 Aug 2015, Vincent Lefevre wrote: > I completely agree that libxml2 should be reverted to 2.9.1 (I have > never used 2.9.2 due to this bug). I just did this. > And IMHO, the new package should probably break libxml-libxml-perl > 2.0116+dfsg-4 due to an annoying and useless test of

Bug#797046: CVE-2015-5685: remote execution vulnerability in lazy_bdecode()

2015-08-27 Thread Raphael Hertzog
Source: libtorrent-rasterbar Severity: grave Tags: security patch Version: 0.14.10-2 Control: fixed -1 1.0.6-1 Hi, the following vulnerability was published for libtorrent-rasterbar. CVE-2015-5685[0]: | The lazy_bdecode function in BitTorrent DHT bootstrap server | (bootstrap-dht ) allows remote

Bug#797165: CVE-2015-0852: integer overflow in PluginPCX.cpp

2015-08-28 Thread Raphael Hertzog
Source: freeimage Version: 3.10.0-4 Severity: serious Tags: security upstream fixed-upstream Hi, the following vulnerability was published for freeimage. CVE-2015-0852[0]: Integer overflow in PluginPCX.cpp If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabili

Bug#814030: Security flaw fixed in version 6.2.0

2017-01-05 Thread Raphael Hertzog
Hi, CCing upstream author for confirmation. Nicola we are trying to understand what security fix went into tcpdf 6.2.0. The bug is private on sourceforge, could you make it public now? For more details see: https://bugs.debian.org/814030 On Wed, 04 Jan 2017, David Prévot wrote: > >> Can you cont

Bug#850236: python-django: FTBFS (AssertionError)

2017-01-05 Thread Raphael Hertzog
On Thu, 05 Jan 2017, Santiago Vila wrote: > It depends. My goal is to build 25000 source packages in a row and have > 0.5 failures on average in total (i.e. closer to 0 than to 1). > > If we have 50 packages which FTBFS randomly, they should fail less > than 1% on average. > > One week every 4 ye

Bug#814030: Security flaw fixed in version 6.2.0

2017-01-09 Thread Raphael Hertzog
Hi everybody, On Thu, 05 Jan 2017, Raphael Hertzog wrote: > CCing upstream author for confirmation. Nicola we are trying to understand > what security fix went into tcpdf 6.2.0. The bug is private on > sourceforge, could you make it public now? The upstream bug is now publ

Bug#1034875: kitty: Should not handle application/x-sh mime type by executing the script

2023-04-26 Thread Raphael Hertzog
Package: kitty Version: 0.26.5-4 Severity: serious Tags: security X-Debbugs-Cc: Debian Security Team Hello, I was reading https://lists.debian.org/20230425190728.ga1471...@subdivi.de in mutt and that mail contains 3 shell scripts as attachments (application/x-sh). I wanted to have a look at the

Bug#929469: systemd-networkd: systemd-networkd: fails with "could not set address: Permission denied"

2019-06-11 Thread Raphael Hertzog
Hi, On Wed, 05 Jun 2019, Michael Biebl wrote: > systemd-networkd.service in v241 is locked down more tightly then v232. > It might be worth a try to comment out the hardening features one by one > to see if one of them causes your problem. Thanks for the idea! I tried that but it did not help. I

Bug#930929: libvirt: is no longer able to use kvm

2019-06-22 Thread Raphael Hertzog
Control: found -1 5.0.0-3 Control: found -1 5.2.0-2 On Sat, 22 Jun 2019, Raphaël Hertzog wrote: > For a few days/weeks (I'm not sure when it started exactly), I can no > longer run my VM with virt-manager. I tried downgrading to the version in testing, but the problem stayed the same. I also trie

Bug#930929: libvirt: is no longer able to use kvm

2019-06-22 Thread Raphael Hertzog
On Sat, 22 Jun 2019, Raphael Hertzog wrote: > And despite this I still have the error and yet the libvirt-qemu user > is part of the kvm group: > $ id libvirt-qemu > uid=124(libvirt-qemu) gid=130(kvm) groupes=130(kvm),132(libvirt-qemu) Still I confirm that the libvirt-qemu user is

Bug#930929: [Pkg-libvirt-maintainers] Bug#930929: marked as done (libvirt: is no longer able to use kvm)

2019-06-23 Thread Raphael Hertzog
Hi, On Sun, 23 Jun 2019, Guido Günther wrote: > > But after a reboot with the good systemd, it began again to work... sorry > > for the noise! > > Thanks for reporting all the details! Should we expect issues with newer > systemd then or do you deem the problems related to the patches you > teste

Bug#936206: binplist: Python2 removal in sid/bullseye

2020-05-11 Thread Raphael Hertzog
Hi, On Fri, 08 May 2020, Moritz Mühlenhoff wrote: > > Your package either build-depends, depends on Python2, or uses Python2 > > in the autopkg tests. Please stop using Python2, and fix this issue > > by one of the following actions. > > https://github.com/google/binplist/issues/6 is without any

Bug#938438: scap-security-guide: Python2 removal in sid/bullseye

2020-05-11 Thread Raphael Hertzog
Hi, On Fri, 08 May 2020, Jeremy Bicha wrote: > Maintainers, please indicate whether you are working on a fix or else > this package will be removed from Debian Unstable soon. (You can > always reintroduce the package if you remove the Python2 > dependencies.) I just looked at the upstream source

Bug#970809: python3-venv is gone

2021-01-08 Thread Raphael Hertzog
Hi, the package has been dropped from testing a while ago due to this bug but it's not clear to me that there's a real bug here. On Wed, 23 Sep 2020, Matthias Klose wrote: > Package: pipx > Version: 0.12.3.1-3 > Severity: serious > Tags: sid bullseye > > This package depends or build-depends on

Bug#972500: hamster-time-tracker does not launch on Buster using the backported package

2020-10-19 Thread Raphael Hertzog
Hi, Philipp, you uploaded the backport. Can you have a look at this report? Ulrike, did you restart your computer after the upgrade just to make sure that the dbus service was properly using the new code ? Thank you in advance. On Mon, 19 Oct 2020, Ulrike Uhlig wrote: > Package: hamster-time-tr

Bug#972858: zim FTBFS: FileNotFoundError: [Errno 2] No such file or directory: '/run/user/2952'

2020-10-25 Thread Raphael Hertzog
FWIW, this is really a bug in the build daemon that should not set XDG_RUNTIME_DIR to some incorrect value: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842565 But I'll work around it in the mean time. Cheers, -- ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog ⣾⠁⢠⠒⠀⣿⡁ ⢿⡄⠘⠷⠚⠋The Debian Handbook: https:

Bug#930908: Letting mailcap and mime-support migrate

2020-11-18 Thread Raphael Hertzog
Control: severity -1 important I'm reducing the severity of this bug because this forbids mailcap and mime-support to migrate to testing and they have to migrate because the current mime-support is uninstallable in a freshly installed testing system because media-types (installed by default due to

Bug#975519: scapy fails autopkg test, blocking python3-defaults

2020-11-23 Thread Raphael Hertzog
Hi, On Mon, 23 Nov 2020, Matthias Klose wrote: > https://ci.debian.net/data/autopkgtest/testing/amd64/s/scapy/8359116/log.gz > > [...] > File "", line 25 > > ^ > SyntaxError: expression cannot contain assignment, perhaps you meant "=="? I see the following commit upstream: https://github.

Bug#976633: gnome-shell-extension-hamster: crash: TypeError: this.panelWidget is null

2020-12-06 Thread Raphael Hertzog
Hi, On Sun, 06 Dec 2020, Paul Wise wrote: > When I try to load the Hamster extension, GNOME shell from unstable > prints the following traceback into the systemd user journal, I guess > it isn't compatible with GNOME shell 3.38 at this point in time. Duh, I am using it with GNOME Shell 3.38 but I

Bug#976633: gnome-shell-extension-hamster: crash: TypeError: this.panelWidget is null

2020-12-06 Thread Raphael Hertzog
Control: severity -1 important Control: tag -1 + unreproducible On Sun, 06 Dec 2020, Paul Wise wrote: > On Sun, 2020-12-06 at 10:49 +0100, Raphael Hertzog wrote: > > > Duh, I am using it with GNOME Shell 3.38 but I have 3.38.1-2+b1 right > > now and it's what I used t

Bug#977354: libmagics++-dev: Invalid dependency on "i" package

2020-12-14 Thread Raphael Hertzog
Package: libmagics++-dev Version: 4.5.2-1 Severity: grave Justification: renders package unusable I was alerted by a strange log in the package tracker: /usr/lib/python3/dist-packages/debian/deb822.py:1403: UserWarning: cannot parse package relationship "i", returning it raw I looked up what pac

Bug#863267: [Python-modules-team] Bug#863267: Miscalculates MigrationHistory dependencies between multiple django apps - regression from 1.8

2017-05-29 Thread Raphael Hertzog
On Mon, 29 May 2017, Brian May wrote: > Otherwise, I think we have three options. I recommend reading the Django > ticket in full before deciding. […] > 1. Apply work around from > https://code.djangoproject.com/ticket/28250#comment:1 by manually […] > 2. Remove migration from postinst, and give i

Bug#863267: [Python-modules-team] Bug#863267: Miscalculates MigrationHistory dependencies between multiple django apps - regression from 1.8

2017-05-29 Thread Raphael Hertzog
On Mon, 29 May 2017, Raphael Hertzog wrote: > Option 4. Fix Django 1.10 with the attached patches. Updated patches attached, I missed to update some tests to account for the move of the detect_soft_applied() method. Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: ht

Bug#863267: [Python-modules-team] Bug#863267: Miscalculates MigrationHistory dependencies between multiple django apps - regression from 1.8

2017-05-29 Thread Raphael Hertzog
On Mon, 29 May 2017, Raphael Hertzog wrote: > Updated patches attached, I missed to update some tests to account > for the move of the detect_soft_applied() method. Third set of patches, this time the package builds fine at least. Which means you can just test this package and let me know

Bug#863267: [Python-modules-team] Bug#863267: Miscalculates MigrationHistory dependencies between multiple django apps - regression from 1.8

2017-05-30 Thread Raphael Hertzog
On Tue, 30 May 2017, Senthil Kumaran S wrote: > I tested the patch with lava-server, which ended up with a traceback as > seen here - http://paste.debian.net/952276/ Thanks, can you try again with another test version ? $ dget https://people.debian.org/~hertzog/packages/python-django_1.10.7-2~tes

Bug#863267: [Python-modules-team] Bug#863267: Miscalculates MigrationHistory dependencies between multiple django apps - regression from 1.8

2017-05-30 Thread Raphael Hertzog
Hi, On Tue, 30 May 2017, Senthil Kumaran S wrote: > I tested the new version ie., test2 and got a traceback as shown here - > File "/usr/lib/python2.7/dist-packages/django/db/migrations/state.py", > line 249, in __init__ > raise ValueError("\n".join(error.msg for error in errors)) > ValueErr

Bug#781155: openbsd-inetd: openbsd-inetd.service should be the main service file

2017-04-11 Thread Raphael Hertzog
On Tue, 11 Apr 2017, Marco d'Itri wrote: > On Apr 11, Niels Thykier wrote: > > > Are there any updates on this bug? If not, then we will be inclined to > I do not think that there is anything I can or should do in > openbsd-inetd: the bug should either be closed or downgraded. Why aren't you p

Bug#781155: openbsd-inetd: openbsd-inetd.service should be the main service file

2017-04-13 Thread Raphael Hertzog
On Thu, 13 Apr 2017, Marco d'Itri wrote: > On Apr 11, Raphael Hertzog wrote: > > > Why aren't you providing openbsd-inetd.service as the real file and > > inetd.service as a symlink ? > Because naming the init script "openbsd-inetd" was an historical >

Bug#814030: CVE-2017-6100: Security flaw fixed in version 6.2.0

2017-04-18 Thread Raphael Hertzog
Hello everybody, On Sat, 14 Jan 2017, Moritz Mühlenhoff wrote: > > The upstream bug is now public: > > https://sourceforge.net/p/tcpdf/bugs/1005/ > > Since K_TCPDF_CALLS_IN_HTML defaults to true in jessie, we should fix > this in jessie. > > Could someone of the maintainers prepare an update? L

Bug#814030: CVE-2017-6100: Security flaw fixed in version 6.2.0

2017-04-19 Thread Raphael Hertzog
On Tue, 18 Apr 2017, Moritz Mühlenhoff wrote: > > Moritz/Salvatore, do you want this in jessie-proposed-updates or in > > jessie-security? > > Please fix these via the upcoming jessie point update. Ok. Laurent, can you file a bug against "release.debian.org" to ask for permission to upload a sta

Bug#850491: slurm-llnl: CVE-2016-10030

2017-04-20 Thread Raphael Hertzog
On Sat, 07 Jan 2017, Salvatore Bonaccorso wrote: > If you fix the vulnerability please also make sure to include the > CVE (Common Vulnerabilities & Exposures) id in your changelog entry. If you want to fix this for jessie, you should start with the patch from the 15.08 branch and it should be eas

Bug#831965: Status of asciidoc upload?

2016-12-19 Thread Raphael Hertzog
Hi Joseph, On Mon, 19 Dec 2016, Joseph Herlant wrote: > @Alexander, @Fredrik, if you don't have time, do you mind if I ask to > Vincent or Raphael if they can have a look and maybe review the > package changed that happened since last upload in 2014? I can sponsor the package but given that Alexa

Bug#831965: Status of asciidoc upload?

2016-12-20 Thread Raphael Hertzog
Hi, On Mon, 19 Dec 2016, Joseph Herlant wrote: > I migrated the package from dpatch to quilt and cut the tag. > I don't know if you prefer to work directly from the repo or from > mentors, so I uploaded it to mentors too: > https://mentors.debian.net/package/asciidoc > Any feedback appreciated. I

Bug#831965: Status of asciidoc upload?

2016-12-22 Thread Raphael Hertzog
Hi, On Tue, 20 Dec 2016, Joseph Herlant wrote: > > Here when I review 7a7b6fa57981a1ff081c5ec0579ce65191162c82 I don't want > > to see so many changes on debian/asciidoc.install. I want only the vim > > line dropped and see it added in the new package. > > Sorry about that. I'm not able to split

Bug#831965: Status of asciidoc upload?

2016-12-23 Thread Raphael Hertzog
On Fri, 23 Dec 2016, Joseph Herlant wrote: > Hi Raphael, > > Thanks a lot for the upload. Unfortunately there were misses in the > copyright file. > I fixed that, retagged and pushed to the git repo and to mentors. > Let me know if you find anything else that need to be fixed. Yes, I think you we

Bug#831965: Status of asciidoc upload?

2016-12-24 Thread Raphael Hertzog
On Fri, 23 Dec 2016, Joseph Herlant wrote: > I removed the GPL v1 license additions and put all the license owners > for GPL and GPL-2 under the same paragraph. > I pushed it to git and mentors and re-tagged. Uploaded. -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: http://www.freexia

Bug#781155: openbsd-inetd: openbsd-inetd.service should be the main service file

2017-01-03 Thread Raphael Hertzog
Hi Marco, On Mon, 26 Dec 2016, Marco d'Itri wrote: > On Apr 10, Michael Biebl wrote: > > > Ideally, the .service file name and sysv init script do match. > > If that is not the case, because upstream chose a different name, my > > recommendation is to create a symlink and ship that statically in

Bug#841447: Downgrading to normal

2017-01-03 Thread Raphael Hertzog
Control: severity -1 normal This problem is not reproducible on all systems and the bug reporter did not respond to initial queries in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841447#12 so there's no reason to keep this bug at a release critical severity. Cheers, -- Raphaël Hertzog ◈ De

Bug#846232: [pkg-gnupg-maint] Bug#846232: libgpgme-dev: Provides: libgpgme11-dev must be versioned

2016-12-02 Thread Raphael Hertzog
On Thu, 01 Dec 2016, Daniel Kahn Gillmor wrote: > > With one rdep your patch is as good at fixing this problem as my > > suggestion (but I am not involved in maintaining either package). > > I plan on NMUing this change to openvas unless i hear otherwise from the > openvas maintainers (cc'ed here

Bug#847207: [pkg-uWSGI-devel] Bug#847207: uwsgi: FTBFS on multiple architectures with undefined references to uwsgi_* symbols

2016-12-06 Thread Raphael Hertzog
On Tue, 06 Dec 2016, Jonas Smedegaard wrote: > Excerpts from Raphaël Hertzog's message of December 6, 2016 3:25 pm: > > I have the feeling that this is all related to the "-Wl,-z,now" flag but I > > don't know what > > is injecting this flag here... > > Seems to come from LDFLAGS setting of /usr/

Bug#868208: CVE-2017-11103: MitM attack, impersonation of the Kerberos client, know as Orpheus Lyre

2017-07-12 Thread Raphael Hertzog
Source: heimdal Severity: grave Tags: security patch Version: 1.6~git20120403+dfsg1-2 Hi, the following vulnerability was published for heimdal. CVE-2017-11103[0]: MitM attack, impersonation of the Kerberos client, know as Orpheus Lyre A dedicated website is here: https://orpheus-lyre.info/ T

Bug#868209: CVE-2017-11103: MitM attack, impersonation of the Kerberos client, known as Orpheus Lyre

2017-07-12 Thread Raphael Hertzog
Source: samba Severity: grave Tags: security patch Version: 2:4.1.11+dfsg-1 Hi, the following vulnerability was published for samba (due to its embedded copy of heimdal). I checked the build logs for unstable and apparently it does use this copy (I don't know the status for older releases). CVE-

Bug#849652: [Python-modules-team] Bug#849652: faker: FTBFS on 32-bit: ValueError: timestamp out of range for platform time_t

2017-01-30 Thread Raphael Hertzog
On Mon, 30 Jan 2017, Brian May wrote: > Help in fixing this RC bug would be appreciated. I have forwarded this > upstream, however need a quick fix for the Debian package (not sure but > suspect it might be too late for stretch). > > Unfortunately, not sure where to start. I don't understand this

Bug#850692: pyrit: failed with 'BitEnumField' object has no attribute 'names'

2017-02-14 Thread Raphael Hertzog
On Mon, 09 Jan 2017, Sophie Brun wrote: > AttributeError: 'BitEnumField' object has no attribute 'names' [...] > Consider joining the pkg-security team, we could co-maintain pyrit there: > https://wiki.debian.org/Teams/pkg-security Hello Christian, you haven't replied to this bug in more than a m

Bug#833055: Packaging of mongoclient replacement library: mongocxx

2016-11-03 Thread Raphael Hertzog
Hello Apollon, mongodb dropped the C++ client driver that it used to provide in mongodb-dev in favor of https://github.com/mongodb/mongo-cxx-driver Do you plan (or know someone who plans) to package this one? Is there ane alternate client library that you recommend? Cheers, -- Raphaël Hertzog

Bug#833055: [pkg-uWSGI-devel] Any news on uwsgi bug fixes?

2016-11-03 Thread Raphael Hertzog
Hi, On Wed, 28 Sep 2016, Jonas Smedegaard wrote: > > > https://bugs.debian.org/833055 - B-D mongodb-dev is no longer built by > > > mongodb > > > > The mongodb bug is believed fixed locally on my machine (not pushed to > > the public git yet). > > Unfortunately that build didn't succeed :-( W

Bug#843137: [buildd-tools-devel] Bug#843137: sbuild: fails to deal with sid chroots (missing gpg)

2016-11-04 Thread Raphael Hertzog
Hi Cyril, On Fri, 04 Nov 2016, Cyril Brulebois wrote: > a brand new unstable chroot isn't usable for a build with default (as > far as I can remember) sbuild configuration. Full log follows: It's not a "default" sbuild configuration, it's one where you created a signing key. Get rid of /var/lib/s

Bug#843137: [buildd-tools-devel] Bug#843137: Bug#843137: sbuild: fails to deal with sid chroots (missing gpg)

2016-11-04 Thread Raphael Hertzog
On Fri, 04 Nov 2016, Johannes Schauer wrote: > 2. the amount of effort required to cope with the changed situation in > stretch > (especially with respect to gpg) is huge. The existing patches are several > hundred lines long. Help would indeed be appreciated to backport these > patch

Bug#843073: Debian Installer Stretch Alpha 8 release

2016-11-14 Thread Raphael Hertzog
On Mon, 14 Nov 2016, Raphael Hertzog wrote: > Please find two patches attached. Given Felipe's comment about not breaking API for find_library() I opted to create a new function, but a quick codesearch seems to indicate that no other package is relying on this function

Bug#842043: CVE-2015-7554 CVE-2016-5318: stack buffer overflow in _TIFFVGetField function

2016-10-25 Thread Raphael Hertzog
Package: tiff Version: 4.0.2-6 Severity: serious Tags: security Control: forwarded -1 http://bugzilla.maptools.org/show_bug.cgi?id=2564 Hi, the following vulnerabilities were published for tiff. CVE-2015-7554[0]: | The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows | attackers to c

Bug#879001: CVE-2017-12197: libpam4j: Account check bypass

2017-10-18 Thread Raphael Hertzog
Source: libpam4j Version: 1.4-2 Severity: grave Tags: security Hi, the following vulnerability was published for libpam4j. CVE-2017-12197[0]: libpam4j: Account check bypass PAM.authentication() does not call pam_acct_mgmt(). As a consequence, the PAM account is not properly verified. Any user w

Bug#879002: Should the package be removed?

2017-10-18 Thread Raphael Hertzog
Source: libpam4j Severity: serious Hello, I just came across libpam4j while handlinge CVE-2017-12197 and I noticed that: - the package has not seen an update since 2012 - the package has no reverse dependency in Debian - upstream seems to have disappeared (the current Homepage URL is dead and I

Bug#875423: [Pkg-openssl-devel] Bug#875423: openssl: Please re-enable TLS 1.0 and TLS 1.1 (at least in testing)

2017-10-26 Thread Raphael Hertzog
Hello Kurt, On Fri, 22 Sep 2017, Kurt Roeckx wrote: > I have to admit that I didn't consider derivatives that take a > snapshot of testing, and we also seem to have a large amount of > people that do use testing. My intention was to target the more > advanced users, and having it in testing might

Bug#880409: python-django: add Breaks: openstack-dashboard (<< 3:12)

2017-11-01 Thread Raphael Hertzog
Hi, On Tue, 31 Oct 2017, Chris Lamb wrote: > > Oh, #867254 was only filed for the "trivial" case in sid. But the > > problem also occurs on upgrades from stretch (openstack-dashboard gets > > triggered after python-django was upgraded and blows up), which is the > > case we need the Breaks for. >

Bug#929469: systemd-networkd: systemd-networkd: fails with "could not set address: Permission denied"

2019-06-05 Thread Raphael Hertzog
Hi, On Wed, 05 Jun 2019, Michael Biebl wrote: > What's the status of this bug? No progress. > Can you reproduce it with v242 from experimental? Yes. > I guess upstream is waiting for your feedback: > https://github.com/systemd/systemd/issues/12656#issuecomment-496293294 I will provide my resu

Bug#997522: logidee-tools: FTBFS: make[2]: kpsepath: No such file or directory

2021-10-26 Thread Raphael Hertzog
Control: tag -1 + wontfix On Sat, 23 Oct 2021, Lucas Nussbaum wrote: > Source: logidee-tools > Version: 1.2.19 > > During a rebuild of all packages in sid, your package failed to build > on amd64. Note that I requested removal of this package so I will not handle this bug. See https://bugs.debia

Bug#939260: websploit: Python2 removal in sid/bullseye

2019-12-16 Thread Raphael Hertzog
Hello, On Tue, 10 Dec 2019, 0X0Ptim0Us wrote: > Got it, thank you. I will work on it Great. Looking forward to it. Do you have any idea how much time you need to complete this Python 3 port of websploit? Regards, -- ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog ⣾⠁⢠⠒⠀⣿⡁ ⢿⡄⠘⠷⠚⠋The Debian Handbook: https:/

Bug#947387: [Python-modules-team] Bug#947387: python3-pcapy: missing Breaks+Replaces: python-pcapy

2019-12-26 Thread Raphael Hertzog
On Wed, 25 Dec 2019, Emmanuel Arias wrote: > Raphaël, please could you review my patch? Reviewed and uploaded. Cheers, -- ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog ⣾⠁⢠⠒⠀⣿⡁ ⢿⡄⠘⠷⠚⠋The Debian Handbook: https://debian-handbook.info/get/ ⠈⠳⣄ Debian Long Term Support: https://deb.li/LTS

Bug#945723: Upstream progress on python 3 port

2019-12-26 Thread Raphael Hertzog
Hello, upstream seems to be close to release a Python 3 version, current WIP is in https://github.com/epinna/weevely3/tree/Debian-master according to https://github.com/epinna/weevely3/pull/119#issuecomment-568770367 Sending this mail to reset the auto-rm clock, hoping that Samuel will upload a f

Bug#939260: websploit: Python2 removal in sid/bullseye

2019-12-26 Thread Raphael Hertzog
On Mon, 16 Dec 2019 14:28:33 +0100 Raphael Hertzog wrote: > Great. Looking forward to it. Do you have any idea how much time you need > to complete this Python 3 port of websploit? On the 21th, I got a private reply saying that he might need 20 days to complete the Python 3 port.

Bug#875190: [shiboken] Future Qt4 removal from Buster

2019-10-01 Thread Raphael Hertzog
On Tue, 01 Oct 2019, Didier 'OdyX' Raboud wrote: > > There are no reverse dependencies of src:shiboken in unstable and it has > > been replaced by src:pyside2, let's remove from the archive? > > As maintainer: agreed! Can you file the RM request then? Thank you. -- Raphaël Hertzog ◈ Debian Deve

Bug#939626: Upstream

2019-10-04 Thread Raphael Hertzog
Control: tag -1 fixed-upstream On Wed, 11 Sep 2019 14:00:54 +0200 =?utf-8?Q?S=C3=A9bastien?= Delafond wrote: > Upstream indicates that: > > We are working actively on that subject. So the next release of > centreon-broker won't need qt4 nor qt5. Qt will be completely removed > from it. We

Bug#942487: rust-web-sys: Provides header is more than 256K long and it breaks reprepro...

2019-10-17 Thread Raphael Hertzog
On Thu, 17 Oct 2019, Raphaël Hertzog wrote: > For this reason, I'm going to NMU the package and disable/reduce the Provides > field until you find a reasonable solution. Uploaded rust-web-sys_0.3.28-1.1_source.changes. It's still 150K but should make reprepro happy. I believe it's unreasonable to

Bug#942487: [Pkg-rust-maintainers] Bug#942487: rust-web-sys: Provides header is more than 256K long and it breaks reprepro...

2019-10-17 Thread Raphael Hertzog
On Thu, 17 Oct 2019, Ximin Luo wrote: > Control: tags -1 + wontfix This is clearly not acceptable. You can't ignore problems like this one. I saw you already broke debian-installer once with the former packages that overflowed the 16K limit of cdebootstrap. Now it's the turn of reprepro and this o

Bug#942487: [Pkg-rust-maintainers] Bug#942487: rust-web-sys: Provides header is more than 256K long and it breaks reprepro...

2019-10-17 Thread Raphael Hertzog
Hi, On Thu, 17 Oct 2019, Sylvestre Ledru wrote: > I will see how to add a lintian check to block that from happening again. FWIW, I already filed #942493 against lintian this morning. Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: https://www.freexian.com/services/debian-lts

Bug#942487: [Pkg-rust-maintainers] Bug#942487: Bug#942487: rust-web-sys: Provides header is more than 256K long and it breaks reprepro...

2019-10-17 Thread Raphael Hertzog
On Thu, 17 Oct 2019, Ximin Luo wrote: > Can you please explain why 256 KB provides field is "abuse"? Because that's the amount of metadata required for 250 common packages. > Do you have some concrete suggestions on how to improve the tool to reduce > this "abuse"? Yes, I gave you one. > BTW,

Bug#942487: [Pkg-rust-maintainers] Bug#942487: Bug#942487: rust-web-sys: Provides header is more than 256K long and it breaks reprepro...

2019-10-17 Thread Raphael Hertzog
Hello Ximin, On Thu, 17 Oct 2019, Ximin Luo wrote: > >> Do you have some concrete suggestions on how to improve the tool to reduce > >> this "abuse"? > > > > Yes, I gave you one. > > It doesn't work. Look, I'm not a cargo/rust expert, I won't design the tool for you but I implemented dpkg-gens

Bug#942487: [Pkg-rust-maintainers] Bug#942487: Bug#942487: Bug#942487: rust-web-sys: Provides header is more than 256K long and it breaks reprepro...

2019-10-18 Thread Raphael Hertzog
On Thu, 17 Oct 2019, Ximin Luo wrote: > Who is using reprepro to archive Debian Rust packages? That's the first Anybody who is mirroring Debian unstable with reprepro right now. I have no special interest in rust, but I do maintain a debian derivative that we build with reprepro merging debian tes

Bug#927135: src:rekall: Please update to python3 version

2019-10-18 Thread Raphael Hertzog
Hi, On Fri, 18 Oct 2019, Moritz Mühlenhoff wrote: > > I started having a look at packaging the new upstream release of > > rekall, to support python 3 (mostly because rekall is a r-dep of some > > of the packages i maintain). For now it looks like the most immediate > > need is to get aff4 ported

Bug#948257: Bug#948350: depmod: ERROR: ../libkmod/libkmod.c:515 lookup_builtin_file() could not open builtin file '[...]/lib/modules/[kernelversion]/modules.builtin.bin'

2020-01-16 Thread Raphael Hertzog
Hello, On Tue, 07 Jan 2020, Marco d'Itri wrote: > #948257 In https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=948257#105, Ben is wondering whether the fix should not be done in kmod since the ERROR displayed is due to a Debian-specific patch that you applied (debian/patches/verbose_missing_bin):

  1   2   3   4   5   6   7   8   >