Bug#859393: unblock: grass/7.2.0-2

2017-04-02 Thread Bas Couwenberg
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package grass It fixes 859372 by enabling PIE. unblock grass/7.2.0-2 Kind Regards, Bas diff -Nru grass-7.2.0/debian/changelog grass-7.2.0/debian/changelog --- grass-7.2.0/

Bug#859392: unblock: gdal/2.1.2+dfsg-4

2017-04-02 Thread Bas Couwenberg
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package gdal It fixes #859368 by enabling PIE. unblock gdal/2.1.2+dfsg-4 Kind Regards, Bas diff -Nru gdal-2.1.2+dfsg/debian/changelog gdal-2.1.2+dfsg/debian/changelog ---

Bug#859394: unblock: libgdal-grass/2.1.2-5

2017-04-02 Thread Bas Couwenberg
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package libgdal-grass It enables PIE to as done for gdal (#859368) & grass (#859372) to keep the family in sync. unblock libgdal-grass/2.1.2-5 Kind Regards, Bas diff -Nru

Bug#859382: unblock: sleekxmpp/1.3.1-6

2017-04-02 Thread W. Martin Borgert
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package sleekxmpp Two bug fixes from upstream 1.3.2 have been taken to patch 1.3.1 against bugs #854739 (CVE-2017-5591, grave) and #851900 (Fails to connect to servers that o

Bug#859378: unblock: screen/4.5.0-5 (pre-approval)

2017-04-02 Thread Axel Beckert
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Dear Release Team, https://bugs.debian.org/856824 (which I already fixed in experimental a while ago) seems to be more severe than I initially thought. If unfixed, it can lead to a race con

Bug#855345: jessie-pu: package systemd/215-17+deb8u7

2017-04-02 Thread Michael Biebl
Am 02.04.2017 um 23:00 schrieb Cyril Brulebois: > Adam D. Barratt (2017-04-02): >> Apologies for the delay in getting back to you. >> >> The proposed diff looks okay to me but, whilst afaics the udeb >> shouldn't be affected, I'd still appreciate a d-i ack; CCing and >> tagging appropriately. Tha

Bug#855345: jessie-pu: package systemd/215-17+deb8u7

2017-04-02 Thread Cyril Brulebois
Adam D. Barratt (2017-04-02): > Apologies for the delay in getting back to you. > > The proposed diff looks okay to me but, whilst afaics the udeb > shouldn't be affected, I'd still appreciate a d-i ack; CCing and > tagging appropriately. No objections (note the “via via” in the diff though), th

NEW changes in stable-new

2017-04-02 Thread Debian FTP Masters
Processing changes file: jhead_2.97-1+deb8u1_allonly.changes ACCEPT Processing changes file: jhead_2.97-1+deb8u1_amd64.changes ACCEPT Processing changes file: jhead_2.97-1+deb8u1_arm64.changes ACCEPT Processing changes file: jhead_2.97-1+deb8u1_armel.changes ACCEPT Processing changes file:

Processed: tagging 855345, tagging 858310

2017-04-02 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 855345 - moreinfo Bug #855345 [release.debian.org] jessie-pu: package systemd/215-17+deb8u7 Removed tag(s) moreinfo. > tags 858310 - moreinfo Bug #858310 [release.debian.org] jessie-pu: package gtk+2.0/2.24.25-3+deb8u2 Removed tag(s) moreinfo

Bug#858310: jessie-pu: package gtk+2.0/2.24.25-3+deb8u2

2017-04-02 Thread Cyril Brulebois
Adam D. Barratt (2017-04-02): > On Tue, 2017-03-21 at 00:49 +0100, Samuel Thibault wrote: > > In bug #847438 it was reported that in gtk2 applications, there is a > > not-so-rare situation with menus, in which the focus gets in a state > > that prevents any keyboard shortcut from working at all.

Bug#852998: jessie-pu: package dropbear/2014.65-1

2017-04-02 Thread Simon McVittie
On Sun, 02 Apr 2017 at 19:46:16 +0100, Adam D. Barratt wrote: > btw: > > ++for (i = 0; s[i] != '\0'; i++) { > > is there a reason that isn't using strlen(s)? A naive implementation with strlen() would be O(n**2), because the strlen() would be recalculated on each loop iteration. It could be

Processed: Re: Bug#856171: jessie-pu: package nvidia-graphics-drivers/340.102-1

2017-04-02 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #856171 [release.debian.org] jessie-pu: package nvidia-graphics-drivers/340.102-1 Added tag(s) confirmed. -- 856171: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856171 Debian Bug Tracking System Contact ow...@bugs.debian.org with probl

Processed: Re: Bug#856174: jessie-pu: package nvidia-graphics-drivers-legacy-304xx/304.135-1

2017-04-02 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #856174 [release.debian.org] jessie-pu: package nvidia-graphics-drivers-legacy-304xx/304.135-1 Added tag(s) confirmed. -- 856174: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856174 Debian Bug Tracking System Contact ow...@bugs.debian.o

Bug#856174: jessie-pu: package nvidia-graphics-drivers-legacy-304xx/304.135-1

2017-04-02 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sat, 2017-02-25 at 23:38 +0100, Andreas Beckmann wrote: > a new upstream release is needed to fix the latest CVE series in the > legacy driver too. > > Intentionally no +deb8u1 suffix to reduce the version number inflation > when backporting this to wheezy(-backpor

Bug#856171: jessie-pu: package nvidia-graphics-drivers/340.102-1

2017-04-02 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sat, 2017-02-25 at 22:55 +0100, Andreas Beckmann wrote: > to fix the next round of CVEs in nvidia-graphics-drivers, we need a new > upstream release in stable, again. > Intentionally no +deb8u1 suffix, since I want to prevent version > inflation in the followup pu r

Processed: Re: Bug#858547: jessie-pu: package plv8/1.4.2.ds-2+deb8u1

2017-04-02 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #858547 [release.debian.org] jessie-pu: package plv8/1.4.2.ds-2+deb8u1 Added tag(s) confirmed. -- 858547: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858547 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#858547: jessie-pu: package plv8/1.4.2.ds-2+deb8u1

2017-04-02 Thread Adam D. Barratt
Control: tags -1 + confirmed On Thu, 2017-03-23 at 11:42 +0100, Christoph Berg wrote: > I would like to upload plv8 to jessie. Is that acceptable? [...] > +plv8 (1.4.2.ds-2+deb8u1) jessie; urgency=high > + > + * Security bugfix picked from 1.4.9: Check for permission to call > functions. Please

Bug#858642: jessie-pu: package libdatetime-timezone-perl/1:1.75-2+2017b

2017-04-02 Thread gregor herrmann
On Sun, 02 Apr 2017 21:24:33 +0100, Adam D. Barratt wrote: > On Fri, 2017-03-24 at 20:21 +0100, gregor herrmann wrote: > > I've prepared an update for libdatetime-timezone-perl in jessie, > > adding the changes from tzdata 2017b as a quilt patch. > > Please go ahead. Thank you; uploaded. Cheer

Processed: Re: Bug#850003: jessie-pu: package python-cryptography/0.6.1-1+deb8u1

2017-04-02 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #850003 [release.debian.org] jessie-pu: package python-cryptography/0.6.1-1+deb8u1 Added tag(s) confirmed. -- 850003: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850003 Debian Bug Tracking System Contact ow...@bugs.debian.org with prob

Bug#850003: jessie-pu: package python-cryptography/0.6.1-1+deb8u1

2017-04-02 Thread Adam D. Barratt
Control: tags -1 + confirmed On Tue, 2017-01-03 at 06:09 +0200, Tristan Seligmann wrote: > Backport the fix for CVE-2016-9243 which was deemed not severe enough for a > DSA. I've attached a full debdiff, the patch is quite small and > self-contained, > although I needed another patch to fix build

Bug#858310: jessie-pu: package gtk+2.0/2.24.25-3+deb8u2

2017-04-02 Thread Adam D. Barratt
Control: tags -1 + confirmed moreinfo On Tue, 2017-03-21 at 00:49 +0100, Samuel Thibault wrote: > In bug #847438 it was reported that in gtk2 applications, there is a > not-so-rare situation with menus, in which the focus gets in a state > that prevents any keyboard shortcut from working at all.

Processed: Re: Bug#858310: jessie-pu: package gtk+2.0/2.24.25-3+deb8u2

2017-04-02 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed moreinfo Bug #858310 [release.debian.org] jessie-pu: package gtk+2.0/2.24.25-3+deb8u2 Added tag(s) confirmed and moreinfo. -- 858310: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858310 Debian Bug Tracking System Contact ow...@bugs.debian.or

Bug#858642: jessie-pu: package libdatetime-timezone-perl/1:1.75-2+2017b

2017-04-02 Thread Adam D. Barratt
Control: tags -1 + confirmed On Fri, 2017-03-24 at 20:21 +0100, gregor herrmann wrote: > I've prepared an update for libdatetime-timezone-perl in jessie, > adding the changes from tzdata 2017b as a quilt patch. > > The contemporary change is that Haiti now observes DST again, > starting already b

Processed: Re: Bug#858642: jessie-pu: package libdatetime-timezone-perl/1:1.75-2+2017b

2017-04-02 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #858642 [release.debian.org] jessie-pu: package libdatetime-timezone-perl/1:1.75-2+2017b Added tag(s) confirmed. -- 858642: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858642 Debian Bug Tracking System Contact ow...@bugs.debian.org wit

Bug#852998: jessie-pu: package dropbear/2014.65-1

2017-04-02 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sat, 2017-01-28 at 20:38 +0100, Guilhem Moulin wrote: > Moritz Mühlenhoff from the Security Team suggested to fix dropbear's > known vulnerabilities (CVE-2016-3116 and CVE-2016-740[6-8]) via a point > release, since they don't warrant a DSA. [...] > Could you consid

Processed: Re: Bug#852998: jessie-pu: package dropbear/2014.65-1

2017-04-02 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #852998 [release.debian.org] jessie-pu: package dropbear/2014.65-1 Added tag(s) confirmed. -- 852998: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852998 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Processed: Re: Bug#855345: jessie-pu: package systemd/215-17+deb8u7

2017-04-02 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed moreinfo Bug #855345 [release.debian.org] jessie-pu: package systemd/215-17+deb8u7 Added tag(s) confirmed and moreinfo. -- 855345: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855345 Debian Bug Tracking System Contact ow...@bugs.debian.org w

Bug#855345: jessie-pu: package systemd/215-17+deb8u7

2017-04-02 Thread Adam D. Barratt
Control: tags -1 + confirmed moreinfo On Fri, 2017-03-10 at 06:46 +0100, Michael Biebl wrote: > Am 17.02.2017 um 00:29 schrieb Michael Biebl: > > I'd like to make a stable upload for systemd, fixing two bugs. > > Since I filed the pu request, two more issues came up which I'd like to > fix as wel

NEW changes in stable-new

2017-04-02 Thread Debian FTP Masters
Processing changes file: firebird2.5_2.5.3.26778.ds4-5+deb8u1_amd64.changes ACCEPT Processing changes file: firebird2.5_2.5.3.26778.ds4-5+deb8u1_arm64.changes ACCEPT Processing changes file: firebird2.5_2.5.3.26778.ds4-5+deb8u1_armel.changes ACCEPT Processing changes file: firebird2.5_2.5.3.2

Bug#859332: unblock: forked-daapd/24.2-2

2017-04-02 Thread Balint Reczey
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Dear Release Team, Please unblock latest forked-daapd in unstable. Changes: forked-daapd (24.2-2) unstable; urgency=medium . * Update my Uploader email address to my Ubuntu one * I

Bug#859328: unblock: notmuch/0.23.7-3

2017-04-02 Thread David Bremner
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Please unblock package notmuch I recently discovered a bug in the output of "notmuch dump", specifically that in listing the types of metada

Bug#858371: unblock: wine/1.8.7-2

2017-04-02 Thread Jens Reyer
Control: tags -1 - moreinfo On 04/01/2017 03:03 PM, Niels Thykier wrote: > Please go ahead and remove the moreinfo tag once it has been built on > all relevant release architectures. I uploaded wine/1.8.7-2 to unstable yesterday. It is now built on all relevant architectures. Thanks again! jre

Processed: Re: Bug#858371: unblock: wine/1.8.7-2

2017-04-02 Thread Debian Bug Tracking System
Processing control commands: > tags -1 - moreinfo Bug #858371 [release.debian.org] unblock: wine/1.8.7-2 Removed tag(s) moreinfo. -- 858371: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858371 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Processed: Re: Bug#858915: unblock: logtool/1.2.8-9

2017-04-02 Thread Debian Bug Tracking System
Processing control commands: > tags -1 - moreinfo Bug #858915 [release.debian.org] unblock: logtool/1.2.8-9 Removed tag(s) moreinfo. > retitle -1 unblock: logtool/1.2.8-10 Bug #858915 [release.debian.org] unblock: logtool/1.2.8-9 Changed Bug title to 'unblock: logtool/1.2.8-10' from 'unblock: log

Bug#858915: unblock: logtool/1.2.8-9

2017-04-02 Thread Wouter Verhelst
Control: tags -1 - moreinfo Control: retitle -1 unblock: logtool/1.2.8-10 thanks On Thu, Mar 30, 2017 at 08:15:00PM +, Niels Thykier wrote: > 1) Please undo the compat bump; it causes actions at a distance that > hard to reason about from a diff and as such we have it as a defacto > p

Bug#859326: unblock: kconfigwidgets/5.28.0-2

2017-04-02 Thread Maximiliano Curia
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear release team, I've backported a fix in kconfigwidgets for stretch that I consider is important because it fixes notable UX inconsisten

Bug#859325: unblock: kconfig/5.28.0-2

2017-04-02 Thread Maximiliano Curia
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear release team, Checking some of the KDE frameworks bugs and pending upstream fixes I've backported a small fix in kconfig for stretch:

Bug#859319: marked as done (unblock: samba/2:4.5.8+dfsg-1)

2017-04-02 Thread Debian Bug Tracking System
Your message dated Sun, 02 Apr 2017 07:44:00 + with message-id <0c4e401c-b2ad-33df-cd0a-7247e764f...@thykier.net> and subject line Re: Bug#859319: unblock: samba/2:4.5.8+dfsg-1 has caused the Debian Bug report #859319, regarding unblock: samba/2:4.5.8+dfsg-1 to be marked as done. This means th

Bug#859316: marked as done (unblock: pandas/0.19.2-5.1)

2017-04-02 Thread Debian Bug Tracking System
Your message dated Sun, 02 Apr 2017 07:43:00 + with message-id <7a8e70b8-27af-127b-7ef1-a6e11a490...@thykier.net> and subject line Re: Bug#859316: unblock: pandas/0.19.2-5.1 has caused the Debian Bug report #859316, regarding unblock: pandas/0.19.2-5.1 to be marked as done. This means that you

Bug#859319: unblock: samba/2:4.5.8+dfsg-1

2017-04-02 Thread Mathieu Parent
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package samba. It is a security release (CVE-2017-2619) followed by a regression fix (#858564) See attached debdiff (as usual, it is polluted by diff in dates). Regards u

Bug#859304: marked as done (unblock: sra-sdk/2.8.1-2+dfsg-2)

2017-04-02 Thread Debian Bug Tracking System
Your message dated Sun, 02 Apr 2017 06:46:00 + with message-id <7b9e8c7a-c338-1a2c-09e9-01ff3627d...@thykier.net> and subject line Re: Bug#859304: unblock: sra-sdk/2.8.1-2+dfsg-2 has caused the Debian Bug report #859304, regarding unblock: sra-sdk/2.8.1-2+dfsg-2 to be marked as done. This mean