Bug#765359: [icedtea-7-plugin] Can't access security web page, virus?????

2014-11-21 Thread Matthias Klose

Control: tags -1 + moreinfo
Control: severity -1 important

I don't see anything in the cache which looks like applet code. How is this 
related to the icedtea plugin?



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#756522: bumblebee-nvidia: cannot access secondary gpu - error: Permission denied

2014-11-21 Thread Vincent Cheng
On Wed, Nov 19, 2014 at 4:36 AM, Marek Rusinowski
marekrusinow...@gmail.com wrote:
 On Fri, 12 Sep 2014 13:13:43 +0200 Christian Lachner
 christian.lach...@gmail.com wrote:
 Hello everybody,

 jkwong888 at https://github.com/Bumblebee-Project/Bumblebee/issues/580
 came up with a fix that actually solves the problem - at least for me.

 Turns out that appending the following screen-section to
 /etc/bumblebee/xorg.conf.nvidia makes bumblebee work:

 Section Screen
 Identifier Default Screen
 Device DiscreteNvidia
 EndSection

 After a restart of bumblebeed, optirun works properly.


 Hello,

 I have debian jessie.

   kernel 3.16.0-4-amd64
   nvidia driver 340.46-3
   bumblebee 3.2.1-7
   xserver-xorg 1:7.7+7
   xserver-common 2:1.16.1.901-1

 And unfortunately after appending those lines nothing changed. I have got
 same error and I'm unable to run programs using optirun.

Please attach a copy of:
- output of dkms status and your current kernel version (e.g. uname -a)
- output of optirun -vv glxgears -info
- /var/log/Xorg.8.log and dmesg after a failed attempt at running optirun

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770429: Pre-approval for unblock: openstack-debian-images/1.0.0

2014-11-21 Thread Thomas Goirand
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

As per Neils request, here's a copy of my last mail asking for pre-approval
for uploading openstack-debian-images/1.0.0.

Dear release team,

The package openstack-debian-images, when used with newer version of
Qemu, may generate images which aren't useable on some cloud providers.
The way to fix it is to use the following option:
-o compat=0.10

Without this, some users may not understand why their image isn't
useable in some public clouds.

Unfortunately, I didn't understand why when I was using it, it was
failing. Until now: I was using big -O instead of lowercase -o. Since I
have found out, I'd like to upload a fixed version of
openstack-debian-images to Sid and have it in Jessie.

Please let me know if the attached patch is ok, and if I can upload a
new version of openstack-debian-images in Sid. Diff attached.

Cheers,

Thomas Goirand (zigo)
diff --git a/build-openstack-debian-image b/build-openstack-debian-image
index 0489bc4..f6d4fd7 100755
--- a/build-openstack-debian-image
+++ b/build-openstack-debian-image
@@ -417,11 +417,11 @@ if [ ${AUTOMATIC_RESIZE} = yes ] ; then
 	install-mbr ${AMI_NAME}
 fi
 
-#QEMU_VERSION=`qemu-img --help | head -n 1 | cut -d  -f3 | cut -d, -f1`
-#if dpkg --compare-versions ${QEMU_VERSION} gt 1.0 ; then
-#	OTHER_QEMU_IMG_OPTIONS= -O compat=0.10
-#else
+QEMU_VERSION=`qemu-img --help | head -n 1 | cut -d  -f3 | cut -d, -f1`
+if dpkg --compare-versions ${QEMU_VERSION} gt 1.0 ; then
+	OTHER_QEMU_IMG_OPTIONS= -o compat=0.10
+else
 	OTHER_QEMU_IMG_OPTIONS=
-#fi
+fi
 
 qemu-img convert -c -f raw ${AMI_NAME}${OTHER_QEMU_IMG_OPTIONS} -O qcow2 ${QCOW2_NAME}
diff --git a/debian/changelog b/debian/changelog
index 2c38f45..d024639 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+openstack-debian-images (1.1) unstable; urgency=medium
+
+  * Fixed compat option for newer qemu.
+
+ -- Thomas Goirand z...@debian.org  Fri, 21 Nov 2014 13:48:26 +0800
+
 openstack-debian-images (1.0) unstable; urgency=medium
 
   * Fixed the sudoers file to support the --login option. (Closes: #766234)


Bug#770431: CVE-2014-7821: DoS through invalid DNS configuration

2014-11-21 Thread Thomas Goirand
Package: neutron
Version: 2014.1.3-5
Severity: important
Tags: security patch

OpenStack Security Advisory: 2014-039
CVE: CVE-2014-7821
Date: November 19, 2014
Title: Neutron DoS through invalid DNS configuration
Reporter: Henry Yamauchi, Charles Neill and Michael Xin (Rackspace)
Products: Neutron
Versions: up to 2014.1.3 and 2014.2

Description:
Henry Yamauchi, Charles Neill and Michael Xin from Rackspace reported
a vulnerability in Neutron. By configuring a maliciously crafted
dns_nameservers an authenticated user may crash Neutron service
resulting in a denial of service attack. All Neutron setups are affected.

Kilo (development branch) fix:
https://review.openstack.org/135616

Juno fix:
https://review.openstack.org/135623

Icehouse fix:
https://review.openstack.org/135624

Notes:
This fix will be included in future 2014.1.4 and 2014.2.1 releases.

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7821
https://launchpad.net/bugs/1378450


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770430: menu: Fails to launch qtconfig

2014-11-21 Thread Dan DeVoto
Package: menu
Version: 2.1.47
Severity: normal

Dear Maintainer,

Using Openbox 3.5.2-8, when I attempt to launch qt4-qtconfig from the
Openbox menu (under Debian -- Applications -- System -- Administration--
QtConfig) I get the following popup error:

Failed to execute child process /usr/lib/*/qt4/bin/qtconfig (No such file
or directory).

Launching qtconfig from the command line or from launchers like Kupfer works
fine.

Regards,

Dan


-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: powerpc (ppc)

Kernel: Linux 3.16-2-powerpc
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages menu depends on:
ii  libc6   2.19-13
ii  libgcc1 1:4.9.1-19
ii  libstdc++6  4.9.1-19

menu recommends no packages.

Versions of packages menu suggests:
pn  gksu | kde-runtime | ktsuss  none
pn  menu-l10nnone

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770432: New location of jpylyzer source repo (old one now empty)

2014-11-21 Thread Mathieu Malaterre
Package: jpylyzer

On Thu, Nov 20, 2014 at 6:39 PM, Johan van der Knijff 
johan.vanderkni...@kb.nl wrote:

 Hi Mathieu,



 Quick question: earlier this week the Open Planets Foundation changed its
name to Open Preservation Foundation, and as part of the transition they
renamed their git repos, with the effect that the location of the jpylyzer
repo has now changed to:



 https://github.com/openpreserve/jpylyzer



 This’ll probably create problems for the jpylyzer packages for Ubuntu and
Debian, because they still use the old URL.



 (A repo under the old name still exists, but it is now empty and only
serves to redirect the jpylyzer homepage to its new location; details here:
http://jpylyzer.openpreservation.org/2014/11/20/New-location-of-source-repository/
)



 Would it be possible to update the link to the new location?




I've reported an issue, we'll do that on next upload. Thanks.


Bug#770434: CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload

2014-11-21 Thread Nguyen Cong

Package: tcpdump
Version: 4.6.2
tags: Security

Use following script for generate packet:

#!/usr/bin/env python
from socket import socket, AF_PACKET, SOCK_RAW
s = socket(AF_PACKET, SOCK_RAW)
s.bind((lo, 0))

olsr_frame = 
\x00\x1b\xc6\x51\x35\x97\x00\x24\x8c\x7a\xff\x6f\x08\x00\x45\x15\x00\x3d\xf3\x7f\x40\x00\x4d\x11\x30\xc6\x0a\x01\x01\x68\x0a\x02\x02\x02\x02\xba\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x20\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x20\x01\x00\x00\x00 



s.send(olsr_frame)

#sudo tcpdump -i lo -s 0 -n -v
This cause segfault on tcpdump. This bug was reported as CVE-2014-8767.
Proposed patch is in attached file. Main idea is checking the length of 
available

data before print on screen.

The credit belong to
Steffen Bauch
Twitter: @steffenbauch
http://steffenbauch.de

The originally report in BugTraq is:
http://seclists.org/bugtraq/2014/Nov/90

--
CongNT

--- tcpdump-tcpdump-4.6/print-olsr.c	2014-10-23 14:07:12.0 +0700
+++ tcpdump-4.6.2/print-olsr.c	2014-11-21 14:56:18.205542679 +0700
@@ -234,6 +234,13 @@
 ND_PRINT((ndo, \n\t  neighbor\n\t\t));
 neighbor = 1;
 
+u_int caplength;
+
+/* Checking length of available data before print */
+caplength = (ndo-ndo_snapend = msg_data) ? ndo-ndo_snapend - msg_data : 0;
+if (hello_len  caplength)
+hello_len = caplength;
+
 while (hello_len = sizeof(struct in_addr)) {
 
 /* print 4 neighbors per line */


Bug#770433: ksnapshot crashes if drag image over chromium window

2014-11-21 Thread Nikolay Shaplov (Swami Dhyan Nataraj)
Package: ksnapshot
Version: 4:4.12.2-2
Severity: normal

Dear Maintainer,

If I drag an image from ksnapshot over a chromium window (I do not even should 
drop it)
ksnapshot will crash.

If this but is not reproducible for you, I can make a backtrace. But I think it 
hould be 100% reproducible

chromium - Version: 38.0.2125.101-3


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.16.0-4-686-pae (SMP w/4 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ksnapshot depends on:
ii  kde-runtime  4:4.14.2-1
ii  libc62.19-13
ii  libkdecore5  4:4.14.2-3
ii  libkdeui54:4.14.2-3
ii  libkio5  4:4.14.2-3
ii  libkipi114:4.13.3-1
ii  libqt4-dbus  4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqtcore4   4:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libqtgui44:4.8.6+git64-g5dc8b2b+dfsg-2+b1
ii  libstdc++6   4.9.1-19
ii  libx11-6 2:1.6.2-3
ii  libxext6 2:1.3.3-1
ii  libxfixes3   1:5.0.1-2+b1

ksnapshot recommends no packages.

ksnapshot suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#769634: unblock: picosat/960-1 and undertaker/1.6-2

2014-11-21 Thread Michael Tautschnig
On Thu, Nov 20, 2014 at 23:08:23 +, Jonathan Wiltshire wrote:
 On Sat, Nov 15, 2014 at 08:23:03AM +, Michael Tautschnig wrote:
[...]
  While I am aware that new upstream releases are not desirable at this 
  point, I
  would ask to consider this update to picosat nevertheless as the upstream
  changes are bugfixes only and picosat has the science-logic meta package as 
  sole
  rdepends, thus making this a low-risk step.
 
 It's not awesome, but not terrible. Unblocked.
 

Thanks a lot for the careful work and apologies for this extra post-freeze
burden.

It's great to see such a well-managed release,
Michael



pgpp5whCTwpOf.pgp
Description: PGP signature


Bug#766771: udev rules are reloaded on any event due to incomplete debian patch

2014-11-21 Thread Martin Pitt
Sjoerd Simons [2014-11-20 22:13 +0100]:
 Martin, I suspect this bug has been fixed due:
  * Replace our Debian hwdb.bin location patch with what got committed
upstream. Run hwdb update with the new --usr option to keep current
behaviour.
 
 Could you verify that ?

Yes, very likely. Our previous Debian specific patch was missing a
part of the code when we upgraded to 215.

Martin
-- 
Martin Pitt| http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#767902: please unblock libsdl2-gfx

2014-11-21 Thread Gianfranco Costamagna
Control: tags - moreinfo

Hi Jonathan, sorry for the huge debdiff.

The reason is that I stripped the upstream-generated doxygen stuff, part of 
this bug.

They ship a minified jquery library, without the source code and the jquery 
that is actually in debian/sources/missing-sources *doesn't* reflect the 
minified js (doxygen uses a patched jquery version, without the correspondant 
source code.)

So I removed all the generated stuff and repacked the source, generating the 
documentation at build time.

I also cherry-picked some copyright fixes and wrap and sorted some build depends

diff -Nru libsdl2-gfx-1.0.1/debian/changelog 
libsdl2-gfx-1.0.1+dfsg/debian/changelog
--- libsdl2-gfx-1.0.1/debian/changelog  2014-07-26 23:08:43.0 +0200
+++ libsdl2-gfx-1.0.1+dfsg/debian/changelog 2014-10-30 15:04:12.0 
+0100
@@ -1,3 +1,14 @@
+libsdl2-gfx (1.0.1+dfsg-1) unstable; urgency=medium
+
+  * Repack without html in the source tree.
+  * Do not symlink jquery from doxygen, this will result in a
+broken documentation. cfr: 736360.
+  * Bump std-version, no changes required.
+  * Update copyright file.
+  * Create docs package with doxygen at build time.
+
+ -- Gianfranco Costamagna costamagnagianfra...@yahoo.it  Sat, 25 Oct 2014 
19:08:30 +0200
+
libsdl2-gfx (1.0.1-1) unstable; urgency=medium

[ Gianfranco Costamagna ]
diff -Nru libsdl2-gfx-1.0.1/debian/control libsdl2-gfx-1.0.1+dfsg/debian/control
--- libsdl2-gfx-1.0.1/debian/control2014-07-26 23:08:13.0 +0200
+++ libsdl2-gfx-1.0.1+dfsg/debian/control   2014-10-30 15:04:12.0 
+0100
@@ -1,19 +1,20 @@
Source: libsdl2-gfx
Maintainer: Debian SDL packages maintainers 
pkg-sdl-maintain...@lists.alioth.debian.org
Uploaders: Felix Geyer fge...@debian.org,
- Manuel A. Fernandez Montecelo m...@debian.org,
- Gianfranco Costamagna costamagnagianfra...@yahoo.it
+   Manuel A. Fernandez Montecelo m...@debian.org,
+   Gianfranco Costamagna costamagnagianfra...@yahoo.it
Section: libs
Priority: optional
-Standards-Version: 3.9.5
-Build-Depends: debhelper (= 9),
+Standards-Version: 3.9.6
+Build-Depends: autoconf,
+   automake,
+   autotools-dev,
+   debhelper (= 9),
dh-autoreconf,
libsdl2-dev,
-   autotools-dev,
-   automake,
-   autoconf,
libtool,
pkg-config
+Build-Depends-Indep: doxygen
Vcs-Browser: 
http://anonscm.debian.org/gitweb/?p=pkg-sdl/packages/libsdl2-gfx.git
Vcs-Git: git://anonscm.debian.org/pkg-sdl/packages/libsdl2-gfx.git
Homepage: http://www.ferzkopp.net/joomla/content/view/19/14/
@@ -21,8 +22,7 @@
Package: libsdl2-gfx-1.0-0
Architecture: any
Multi-Arch: same
-Depends: ${shlibs:Depends},
- ${misc:Depends}
+Depends: ${misc:Depends}, ${shlibs:Depends}
Pre-Depends: ${misc:Pre-Depends}
Description: drawing and graphical effects extension for SDL2
The SDL2_gfx library is an extension to the SDL2 library which provides
@@ -37,8 +37,7 @@
Architecture: any
Multi-Arch: same
Priority: extra
-Depends: ${misc:Depends},
- libsdl2-gfx-1.0-0 (= ${binary:Version})
+Depends: libsdl2-gfx-1.0-0 (= ${binary:Version}), ${misc:Depends}
Description: debugging symbols for SDL2_gfx
The SDL2_gfx library is an extension to the SDL2 library which provides
basic antialiased drawing routines such as lines, circles or polygons,
@@ -51,9 +50,7 @@
Architecture: any
Multi-Arch: same
Section: libdevel
-Depends: ${misc:Depends},
- libsdl2-gfx-1.0-0 (= ${binary:Version}),
- libsdl2-dev
+Depends: libsdl2-dev, libsdl2-gfx-1.0-0 (= ${binary:Version}), ${misc:Depends}
Suggests: libsdl2-gfx-doc
Description: development files for SDL2_gfx
The SDL2_gfx library is an extension to the SDL2 library which provides
@@ -68,7 +65,7 @@
Architecture: all
Section: doc
Priority: extra
-Depends: ${misc:Depends}, libjs-jquery
+Depends: ${misc:Depends}
Recommends: libsdl2-gfx-dev (= ${binary:Version})
Description: documentation files for SDL2_gfx
The SDL2_gfx library is an extension to the SDL2 library which provides
@@ -77,4 +74,3 @@
image filters.
.
This package contains the documentation to program with the SDL2_gfx library.
-
diff -Nru libsdl2-gfx-1.0.1/debian/copyright 
libsdl2-gfx-1.0.1+dfsg/debian/copyright
--- libsdl2-gfx-1.0.1/debian/copyright  2014-07-26 22:38:28.0 +0200
+++ libsdl2-gfx-1.0.1+dfsg/debian/copyright 2014-10-30 14:45:28.0 
+0100
@@ -1,9 +1,78 @@
Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: http://www.ferzkopp.net/joomla/content/view/19/14/
Upstream-Contact: Andreas Schiffler aschiffler at ferzkopp dot net
+Files-Excluded: Docs/html/jquery.js

Files: *
-Copyright: Copyright 2001-2012 Andreas Schiffler aschiffler at ferzkopp dot 
net
+Copyright: 2001-2012 Andreas Schiffler aschiffler at ferzkopp dot net
+License: zlib/libpng
+
+Files: acinclude/pkg.m4
+   test/acinclude.m4
+Copyright: 2004 Scott James Remnant sc...@netsplit.com.
+License: GPL-2+ with exception or zlib/libpng
+ This 

Bug#770105: script using perl -0 or sed -z

2014-11-21 Thread Erik Auerswald
Hi,

the new line in the sessionclean script combines a lot of errrors:

[ -x /usr/bin/lsof ]  /usr/bin/lsof -w -l +d ${1} -F0 | sed -zne s/^n//p 
| xargs -0i echo touch -c -h '{}'

* using -F0 instead of -F0n creates too much useless output
* the -n option to sed is not supported by the sed from Wheezy
* the output of lsof -F0 and the regular expression do not fit:
  lsof outputs the sequence \x00\x0a (a NUL byte, then a Newline), but the
  regex looks for a letter 'n' at the beginning of a line, e.g. directly
  following the NUL byte
* xargs does not call touch, but echo
* the quoting of the xargs replace-str results in adding single quotes to
  the file name given to touch

To fix these bugs you can use the following:

1) Using perl for Wheezy:

[ -x /usr/bin/lsof ]  /usr/bin/lsof -w -l +d ${1} -F0n | perl -0ne 
's/^\nn// and print' | xargs -0i touch -c -h {}

2) Using sed for Jessie and later:

[ -x /usr/bin/lsof ]  /usr/bin/lsof -w -l +d ${1} -F0n | sed -zne 
's/^\nn//p' | xargs -0i touch -c -h {}

In all likelihood the number of touch calls can be reduced as well by changing
the xargs call to not use -i (untested!):

xargs -0 touch -c -h

Anyway, please _test_ any of these changes before implementing them!

Thanks,
Erik


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#756522: bumblebee-nvidia: cannot access secondary gpu - error: Permission denied

2014-11-21 Thread Marek Rusinowski
On Fri, 21 Nov 2014 00:06:11 -0800 Vincent Cheng vch...@debian.org wrote:
 On Wed, Nov 19, 2014 at 4:36 AM, Marek Rusinowski
 marekrusinow...@gmail.com wrote:
  On Fri, 12 Sep 2014 13:13:43 +0200 Christian Lachner
  christian.lach...@gmail.com wrote:
  Hello everybody,
 
  jkwong888 at https://github.com/Bumblebee-Project/Bumblebee/issues/580
  came up with a fix that actually solves the problem - at least for me.
 
  Turns out that appending the following screen-section to
  /etc/bumblebee/xorg.conf.nvidia makes bumblebee work:
 
  Section Screen
  Identifier Default Screen
  Device DiscreteNvidia
  EndSection
 
  After a restart of bumblebeed, optirun works properly.
 
 
  Hello,
 
  I have debian jessie.
 
kernel 3.16.0-4-amd64
nvidia driver 340.46-3
bumblebee 3.2.1-7
xserver-xorg 1:7.7+7
xserver-common 2:1.16.1.901-1
 
  And unfortunately after appending those lines nothing changed. I have
got
  same error and I'm unable to run programs using optirun.

 Please attach a copy of:
 - output of dkms status and your current kernel version (e.g. uname
-a)
 - output of optirun -vv glxgears -info
 - /var/log/Xorg.8.log and dmesg after a failed attempt at running optirun

 Regards,
 Vincent


# dkms status
bbswitch, 0.8, 3.16.0-4-amd64, x86_64: installed
nvidia-current, 340.46, 3.16.0-4-amd64, x86_64: installed
# uname -a
Linux laptop 3.16.0-4-amd64 #1 SMP Debian 3.16.7-2 (2014-11-06) x86_64
GNU/Linux

Marek


dmesg
Description: Binary data


optirun
Description: Binary data
[61.193] 
X.Org X Server 1.16.1.901 (1.16.2 RC 1)
Release Date: 2014-11-02
[61.193] X Protocol Version 11, Revision 0
[61.194] Build Operating System: Linux 3.2.0-4-amd64 x86_64 Debian
[61.194] Current Operating System: Linux p2004a-laptop 3.16.0-4-amd64 #1 SMP Debian 3.16.7-2 (2014-11-06) x86_64
[61.194] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-3.16.0-4-amd64 root=UUID=0ce1d079-72f6-4708-b951-419554c83a8d ro quiet rcutree.rcu_idle_gp_delay=1 cgroup_enable=memory swapaccount=1
[61.194] Build Date: 03 November 2014  09:44:08PM
[61.194] xorg-server 2:1.16.1.901-1 (http://www.debian.org/support) 
[61.194] Current version of pixman: 0.32.6
[61.194] 	Before reporting problems, check http://wiki.x.org
	to make sure that you have the latest version.
[61.194] Markers: (--) probed, (**) from config file, (==) default setting,
	(++) from command line, (!!) notice, (II) informational,
	(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
[61.194] (==) Log file: /var/log/Xorg.8.log, Time: Fri Nov 21 09:34:21 2014
[61.194] (++) Using config file: /etc/bumblebee/xorg.conf.nvidia
[61.194] (++) Using config directory: /etc/bumblebee/xorg.conf.d
[61.194] (==) Using system config directory /usr/share/X11/xorg.conf.d
[61.195] (==) ServerLayout Layout0
[61.195] (**) |--Screen Default Screen (0)
[61.195] (**) |   |--Monitor default monitor
[61.195] (**) |   |--Device DiscreteNvidia
[61.195] (==) No monitor specified for screen Default Screen.
	Using a default monitor configuration.
[61.195] (**) Option AutoAddDevices false
[61.195] (**) Option AutoAddGPU false
[61.195] (**) Not automatically adding devices
[61.195] (==) Automatically enabling devices
[61.195] (**) Not automatically adding GPU devices
[61.195] (WW) The directory /usr/share/fonts/X11/cyrillic does not exist.
[61.195] 	Entry deleted from font path.
[61.195] (WW) The directory /usr/share/fonts/X11/75dpi/ does not exist.
[61.195] 	Entry deleted from font path.
[61.195] (WW) The directory /usr/share/fonts/X11/75dpi does not exist.
[61.195] 	Entry deleted from font path.
[61.195] (==) FontPath set to:
	/usr/share/fonts/X11/misc,
	/usr/share/fonts/X11/100dpi/:unscaled,
	/usr/share/fonts/X11/Type1,
	/usr/share/fonts/X11/100dpi,
	built-ins
[61.195] (++) ModulePath set to /usr/lib/nvidia,/usr/lib/xorg/modules
[61.195] (==) |--Input Device default pointer
[61.195] (==) |--Input Device default keyboard
[61.195] (==) The core pointer device wasn't specified explicitly in the layout.
	Using the default mouse configuration.
[61.195] (==) The core keyboard device wasn't specified explicitly in the layout.
	Using the default keyboard configuration.
[61.195] (II) Loader magic: 0x7f6f1b886d80
[61.195] (II) Module ABI versions:
[61.195] 	X.Org ANSI C Emulation: 0.4
[61.195] 	X.Org Video Driver: 18.0
[61.195] 	X.Org XInput driver : 21.0
[61.195] 	X.Org Server Extension : 8.0
[61.196] (II) xfree86: Adding drm device (/dev/dri/card1)
[61.196] (II) xfree86: Adding drm device (/dev/dri/card0)
[61.196] (EE) /dev/dri/card0: failed to set DRM interface version 1.4: Permission denied
[61.202] (--) PCI:*(0:1:0:0) 10de:0fd4:17aa:3977 rev 161, Mem @ 0xd200/16777216, 0xc000/268435456, 0xd000/33554432, I/O @ 0x3000/128
[61.202] (II) LoadModule: glx
[61.202] (II) Loading 

Bug#769022: Acknowledgement (systemd: /run/user/uid/pulse gets root as user instead of uid sometime)

2014-11-21 Thread Christian Hilgers
On Mon, Nov 10, 2014 at 07:15:06PM +, Debian Bug Tracking System wrote:

close 769022
thanks

After a reboot the problem was no longer visible, maybe
systemd was not restarted after an update.

Anyhow: No longer reproducible.

Christian
-- 
Christian Hilgers   ch...@familie-hilgers.com


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770435: mate-desktop: Keyboard layout incorrectly set

2014-11-21 Thread Sébastien Hinderer
Package: mate-desktop
Version: 1.8.1+dfsg1-2
Severity: normal

Hi,

In console mode, the keyboard layout is french, as expected.

When the X server starts, its logs show that it is correctly loading the
french keyboard layout.

In MATE, when going to the Preferences menu, then keyboard, the keyboard
layout is correctly set to french.

However, in applications such as mate terminal or Firefox, theactual layout
is qwerty,namely an english layout.

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages mate-desktop depends on:
ii  hicolor-icon-theme0.13-1
ii  libatk1.0-0   2.14.0-1
ii  libc6 2.19-13
ii  libcairo2 1.14.0-2.1
ii  libfontconfig12.11.0-6.1
ii  libfreetype6  2.5.2-2
ii  libgdk-pixbuf2.0-02.31.1-2+b1
ii  libglib2.0-0  2.42.0-2
ii  libgtk2.0-0   2.24.25-1
ii  libmate-desktop-2-17  1.8.1+dfsg1-2
ii  libpango-1.0-01.36.8-2
ii  libpangocairo-1.0-0   1.36.8-2
ii  libpangoft2-1.0-0 1.36.8-2
ii  libunique-1.0-0   1.1.6-5
ii  mate-desktop-common   1.8.1+dfsg1-2

mate-desktop recommends no packages.

mate-desktop suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770406: libv8-3.14.5: Add libv8 virtual package with dep on latest libv8-#.#.#.

2014-11-21 Thread Jérémy Lal
Le jeudi 20 novembre 2014 à 17:45 -0800, Joseph Coffland a écrit :
 Package: libv8-3.14.5
 Version: 3.14.5.8-8
 Severity: normal
 
 
 
 -- System Information:
 Debian Release: jessie/sid
   APT prefers testing
   APT policy: (500, 'testing')
 Architecture: amd64 (x86_64)
 Foreign Architectures: i386
 
 Kernel: Linux 3.14-2-amd64 (SMP w/8 CPU cores)
 Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
 Shell: /bin/sh linked to /bin/dash
 
 Versions of packages libv8-3.14.5 depends on:
 ii  libc6   2.19-10
 ii  libgcc1 1:4.9.1-12
 ii  libstdc++6  4.9.1-12
 
 libv8-3.14.5 recommends no packages.
 
 libv8-3.14.5 suggests no packages.
 
 -- no debconf information
 
 
 Adding a virtual package named libv8 will make it much easier to create 
 packages which depend on libv8.
 
 I'm having a problem with a binary package I've created which depends on 
 libv8.  If I specify a dependency on
 libv8-3.14.5 directly then my package wont install on some systems.  If I 
 leave out the dep then my software
 wont run with out the user manually searching for the latest version of libv8 
 and installing it.
 
 Please help.

Your package won't install on some systems anyway, since libv8 does not
build/run on all architectures.
From what you say it looks like your package dependency on libv8 is
optional ? If that's the case then use a Recommends or Suggests
relationship in debian/control.

Jérémy.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#769569: [gnome-control-center] Connect/Disconnect to dual monitor setup restarts GNOME

2014-11-21 Thread Adnan Hodzic
Hey intrigeri,

Hi Adnan,

Adnan Hodzic wrote (19 Nov 2014 16:34:57 GMT) :
However, what would be most interesting is the log for the failing
mode this bug is primarily about, that is disconnecting the external
monitor while GNOME is running, and seeing the session
being restarted. May you please attach this information?

 Sure please see:
 https://hodzic.org/img/boot-case-dual-monitor.txt

 ^ Plugged in to the docking station: Boot  Log in  Suspend

 Disconnected the notebook from docking station and we have a GNOME
restart.

 Log in  sudo journalctrl -ab

 Hopefully this will be enough for further analysis, in meantime if you
need
 anything else please let me know.

Now I'm confused. Your initial bug report was about simply
disconnecting the external monitor *while GNOME is running*, and
I understood it was the case without any suspend/resume cycle.
Did I misunderstand?

You did misunderstand. Every time I did this I would suspend the computer
then unplug it from the docking station, just as I explained in description
of my reports.

If I got it right, what would be good to have is:

  1. cold boot, plugged into the docking station with external monitor
  2. log into GNOME
  3. unplug the external monitor
  4. if it crashes, log in again, and send the Journal

While computer is plugged in to docking station. If I disconnect one
screen, GNOME will still be running it will resize itself to one screen.
However, when I disconnect the second screen. Screen on computer goes
blank, whole system becomes absolutely unresponsive and there's nothing I
can do with it anymore. Undocking computer at this point won't change
anything.

I can't restart GNOME (Alt+PrintScrn+K) or even go to virtual consoles
(Ctrl+Alt+F1/F6). Only thing that remains in this scenario is cold reset.

  1. cold boot, plugged into the docking station with external monitor
  2. log into GNOME
  3. disconnect from the docking station
  4. if it crashes, log in again, and send the Journal

As expected it crashed:
https://hodzic.org/img/5-case-dual-monitor.txt

 Undocking laptops while they're suspended has historically been
 fragile on a number of machines, so I'm not surprised that it causes
 problems on yours.

Ok good to know. Regardless if I do suspend and then undock the computer,
or undock it without suspending it first I get same results.


Let me know if you need anything else.

Thanks,

Adnan


Bug#770436: libcryptui: patch - fix logic flaw in the prompt recipients dialog

2014-11-21 Thread Vlad Orlov
Source: libcryptui
Version: 3.12.2-1
Severity: important
Tags: patch


Hi,

The prompt recipients dialog has been broken in one commit [1].

The attached patch fixes the logic there and makes seahorse-tool's
encrypt command work again. Therefore, seahorse plugins for both
Nautilus and Nemo should start working as well.

Hope to see it accepted soon. Thanks in advance.


[1] 
https://github.com/GNOME/libcryptui/commit/cd74aa6bf810a5ce0935d2ec89d6db64dbbde24d#diff-f0ea8a1eef5386b0149314d2a1743e85L202

libcryptui-debdiff
Description: Binary data


Bug#770181: xscreensaver: Fails to properly lock and shut off screen in multiple scenarios

2014-11-21 Thread Tormod Volden
On Wed, Nov 19, 2014 at 9:29 PM, Jamie Zawinski wrote:
 On Nov 19, 2014, at 5:31 AM, John Goerzen wrote:

 3) When moving the mouse or pressing a key to wake up the screen and
 unlock it, frequently the previous content of the screen will show up
 for a few seconds before it is blanked and the logic box shown.

 That's because your machine was suspended -- CPU halted -- and what you are 
 seeing on the screen when it powers back on was put there by BIOS before the 
 CPU started running again. It halted the CPU with the screen not-yet-blanked, 
 from xscreensaver's perspective. Likewise, there is no way to fix this, 
 because Linux sucks.


Where I have seen this, and bug reports thereof, the reason has been
race conditions in the suspend scripts, that allow the hardware
suspend to take place before xscreensaver has blanked the screen.
Typically because someone had the idea of adding  to all commands to
speed up the suspend sequence, and no wait. I don't see why this
cannot be fixed, Linux or not.

Tormod


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770437: mirror submission for ftp.ir.debian.org

2014-11-21 Thread factoreal
Package: mirrors
Severity: wishlist

Submission-Type: new
Site: ftp.ir.debian.org
Aliases: debian.asis.io
Aliases: ftp.asis.io
Type: leaf
Archive-architecture: ALL amd64 armel armhf hurd-i386 i386 kfreebsd-amd64 
kfreebsd-i386 mips mipsel powerpc s390x sparc 
Archive-ftp: /debian/
Archive-http: /debian/
Archive-rsync: debian/
Backports-ftp: /debian/
Backports-http: /debian/
Backports-rsync: debian/
IPv6: no
Archive-upstream: debian.carnet.hr
Backports-upstream: debian.carnet.hr
Updates: push
Maintainer: factoreal factor...@asis.io
Country: IR Iran, Islamic Republic of
Location: Tehran, Iran
Sponsor: ASIS http://asis.io
Comment: ASIS Security Group


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#756522: bumblebee-nvidia: cannot access secondary gpu - error: Permission denied

2014-11-21 Thread Vincent Cheng
Hi Marek,

On Fri, Nov 21, 2014 at 12:38 AM, Marek Rusinowski
marekrusinow...@gmail.com wrote:
 On Fri, 21 Nov 2014 00:06:11 -0800 Vincent Cheng vch...@debian.org wrote:
 On Wed, Nov 19, 2014 at 4:36 AM, Marek Rusinowski
 marekrusinow...@gmail.com wrote:
  On Fri, 12 Sep 2014 13:13:43 +0200 Christian Lachner
  christian.lach...@gmail.com wrote:
  Hello everybody,
 
  jkwong888 at https://github.com/Bumblebee-Project/Bumblebee/issues/580
  came up with a fix that actually solves the problem - at least for me.
 
  Turns out that appending the following screen-section to
  /etc/bumblebee/xorg.conf.nvidia makes bumblebee work:
 
  Section Screen
  Identifier Default Screen
  Device DiscreteNvidia
  EndSection
 
  After a restart of bumblebeed, optirun works properly.
 
 
  Hello,
 
  I have debian jessie.
 
kernel 3.16.0-4-amd64
nvidia driver 340.46-3
bumblebee 3.2.1-7
xserver-xorg 1:7.7+7
xserver-common 2:1.16.1.901-1
 
  And unfortunately after appending those lines nothing changed. I have
  got
  same error and I'm unable to run programs using optirun.

 Please attach a copy of:
 - output of dkms status and your current kernel version (e.g. uname
 -a)
 - output of optirun -vv glxgears -info
 - /var/log/Xorg.8.log and dmesg after a failed attempt at running optirun

 Regards,
 Vincent


 # dkms status
 bbswitch, 0.8, 3.16.0-4-amd64, x86_64: installed
 nvidia-current, 340.46, 3.16.0-4-amd64, x86_64: installed
 # uname -a
 Linux laptop 3.16.0-4-amd64 #1 SMP Debian 3.16.7-2 (2014-11-06) x86_64
 GNU/Linux

Your /var/log/Xorg.8.log:

[61.330] (II) LoadModule: nvidia
[61.330] (WW) Warning, couldn't open module nvidia
[61.330] (II) UnloadModule: nvidia
[61.330] (II) Unloading nvidia
[61.330] (EE) Failed to load module nvidia (module does not exist, 0)

...suggests that you may need to set KernelDriver=nvidia-current in
/etc/bumblebee/bumblebee.conf, restart bumblebeed, and rerun optirun.
Also check to make sure that xserver-xorg-video-nvidia is installed.

Regards,
Vincent


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#586135: LAST WARNING!!

2014-11-21 Thread WEBMASTER



--
Your mailbox has exceeded one or more size limits set by your 
administrator webmail, you are required to update your account with in 
72 hours or else your account will be closed. click the link below and 
fill in the details to update your account.

== http://www.keryen.kz/help/upgrade.php
Thank you,
WEBMASTER
WEB ADMINISTRATOR Copyright © 2014


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770438: unblock: phpmyadmin/4:4.2.12-1

2014-11-21 Thread Michal Čihař
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi

this is pre-approval request to allow version upgrade for phpMyAdmin.

The new upstream version was released yesterday with dozen of security
fixes and I think it's better to do full upgrade now than cherry picking
individual fixes. The another good reason is that upstream 4.2.x
releases are in bug fixing only mode.

Upstream changelog:

4.2.12.0 (2014-11-20)
- - bug #4574 Blank/white page when JavaScript disabled
- - bug #4577 Multi row actions cause full page reloads
- - bug ReferenceError: targeurl is not defined
- - bug Incorrect text/icon display in Tracking report
- - bug #4404 Recordset return from procedure display nothing
- - bug #4584 Edit dialog for routines is too long for smaller displays
- - bug #4586 Javascript error after moving a column
- - bug #4576 Issue with long comments on table columns
- - bug #4599 Input field unnecessarily selected on focus
- - bug #4602 Exporting selected rows exports all rows of the query
- - bug # No insert statement produced in SQL export for queries with alias
- - bug #4603 Field disabled when internal relations used
- - bug #4596 [security] XSS through exception stack
- - bug #4595 [security] Path traversal can lead to leakage of line count
- - bug #4578 [security] XSS vulnerability in table print view
- - bug #4579 [security] XSS vulnerability in zoom search page
- - bug #4594 [security] Path traversal in file inclusion of GIS factory
- - bug #4598 [security] XSS in multi submit
- - bug #4597 [security] XSS through pma_fontsize cookie

4.2.11.0 (2014-10-31)
- - bug ReferenceError: Table_onover is not defined
- - bug #4552 Incorrect routines display for database due to case insensitive 
checks
- - bug #4259 reCaptcha sound session expired problem
- - bug #4557 PHP fatal error, undefined function __()
- - bug #4568 Date displayed incorrectly when charting a timeline
- - bug #4571 Database Privileges link does not work
- - bug makegrid.js: where_clause is undefined
- - bug #4572 missing trailing slash (import and open_basedir)

Debdiff filtered from translations and generated changes is attached,
it's diffstat is:

 ChangeLog |   33 
 README|2 
 debian/changelog  |8 ++
 import.php|   11 --
 js/common.js  |4 -
 js/jquery/jquery.menuResizer-1.0.js   |3 
 js/makegrid.js|3 
 js/rte.js |6 +
 js/sql.js |   13 +++
 js/tbl_chart.js   |4 -
 js/tbl_structure.js   |   16 
 libraries/Config.class.php|4 -
 libraries/DatabaseInterface.class.php |3 
 libraries/DisplayResults.class.php|   19 +++-
 libraries/Header.class.php|3 
 libraries/Theme.class.php |2 
 libraries/Util.class.php  |   18 
 libraries/core.lib.php|8 +-
 libraries/display_export.lib.php  |8 +-
 libraries/error_report.lib.php|   15 +++
 libraries/gis/GIS_Factory.class.php   |4 -
 libraries/mult_submits.lib.php|7 +
 libraries/navigation/Nodes/Node_Database.class.php|   18 +++-
 libraries/navigation/Nodes/Node_Table.class.php   |   12 ++-
 libraries/operations.lib.php  |8 +-
 libraries/plugins/auth/AuthenticationCookie.class.php |   11 +-
 libraries/relation.lib.php|2 
 libraries/rte/rte_events.lib.php  |9 +-
 libraries/rte/rte_routines.lib.php|9 +-
 libraries/sql.lib.php |   69 +-
 libraries/structure.lib.php   |2 
 libraries/tbl_printview.lib.php   |2 
 libraries/tbl_tracking.lib.php|2 
 pmd_general.php   |2 
 server_privileges.php |2 
 tbl_export.php|   20 +
 tbl_zoom_select.php   |2 
 37 files changed, 280 insertions(+), 84 deletions(-)


Potentian unblock line:

unblock phpmyadmin/4:4.2.12-1

Thanks
- -- 
Michal Čihař | http://cihar.com | http://blog.cihar.com

- -- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')

Bug#770415: Bug#770434: CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload, Bug#770424: CVE-2014-8769 tcpdump unreliable output using malformed AOVD payload, Bug#7704

2014-11-21 Thread Romain Francoise
Thanks. Upstream doesn't seem to have released official patches yet, or
if they have they haven't kept me in the loop. I've asked for
clarification on the mailing list.

-- 
Romain Francoise rfranco...@debian.org
http://people.debian.org/~rfrancoise/


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#767584: Typos in manpage

2014-11-21 Thread Simon Kainz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

The attached patch fixes some typos in the man pages.

Bye,

Simon
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
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=Hrhc
-END PGP SIGNATURE-
diff -U3 -r apt-dater-1.0.1/man/apt-dater.8 new/man/apt-dater.8
--- apt-dater-1.0.1/man/apt-dater.8	2014-10-31 19:36:39.0 +
+++ new/man/apt-dater.8	2014-11-20 12:31:01.0 +
@@ -39,7 +39,7 @@
 command\.
 .PP
 \fBapt\-dater\fR
-is a program to manage package updats on a large number of remote hosts using SSH\.
+is a program to manage package updates on a large number of remote hosts using SSH\.
 .SH OPTIONS
 .PP
 \fBapt\-dater\fR
@@ -63,7 +63,7 @@
 .PP
 \fB\-n\fR
 .RS 4
-Prevent hosts to be refreshed before create XML report (useful for cronjobs which do not have access to SSH key(s))\.
+Prevent hosts to be refreshed before creating XML report (useful for cronjobs which do not have access to SSH key(s))\.
 .RE
 .SH ENVIRONMENT
 .PP
diff -U3 -r apt-dater-1.0.1/man/apt-dater.config.5 new/man/apt-dater.config.5
--- apt-dater-1.0.1/man/apt-dater.config.5	2014-10-31 19:36:39.0 +
+++ new/man/apt-dater.config.5	2014-11-21 09:13:29.102752210 +
@@ -48,7 +48,7 @@
 \fIapt\-dater\.config\fR
 is the configuration file for
 \fBapt\-dater\fR(8)\.
-\fBapt\-dater\fR(8) is a program to manage package updats on a large number of remote hosts using SSH\. This man page descripes briefly the parameters of the file
+\fBapt\-dater\fR(8) is a program to manage package updates on a large number of remote hosts using SSH\. This man page describes briefly the parameters of the file
 \fIapt\-dater\.config\fR\. The default location of this file is
 \fI$XDG_CONFIG_HOME/apt\-dater/apt\-dater\.config\fR\.
 .PP
@@ -58,7 +58,7 @@
 .PP
 HostsFile=\fI$XDG_CONFIG_HOME/apt\-dater/hosts\.config\fR;
 .RS 4
-The location of the file contains all host which will be managed with
+The location of the file containing all hosts which will be managed with
 \fBapt\-dater\fR\. (optional)
 .RE
 .PP
@@ -242,7 +242,7 @@
 .SH STRING ESCAPES
 \fBapt\-dater\fR(8) provides an string escape mechanism\. The escape character is \*(Aq%\*(Aq\.
 
-.sp
+.sp
 .it 1 an-trap
 .nr an-no-space-flag 1
 .nr an-break-flag 1


fix_typos.patch.sig
Description: PGP signature


Bug#770439: unblock: neutron/2014.1.3-6 (CVE-2014-7821 fix: DoS through invalid DNS configuration)

2014-11-21 Thread Thomas Goirand
Package: release.debian.org
Severity: important
User: release.debian@packages.debian.org
Usertags: unblock

Dear release team,

Version 2014.1.3-6 of Neutron include a fix for CVE-2014-7821: DoS through
invalid DNS configuration. The fix is really minimal, it's basically a change
in the regexp that was taking too long to validate input. Debdiff attached.

Please unblock neutron/2014.1.3-6.

Cheers,

Thomas Goirand (zigo)
diff -Nru neutron-2014.1.3/debian/changelog neutron-2014.1.3/debian/changelog
--- neutron-2014.1.3/debian/changelog	2014-10-25 08:09:28.0 +
+++ neutron-2014.1.3/debian/changelog	2014-11-21 08:26:09.0 +
@@ -1,3 +1,10 @@
+neutron (2014.1.3-6) unstable; urgency=high
+
+  * CVE-2014-7821: DoS through invalid DNS configuration. Applied upstream
+patch: Fix hostname regex pattern (Closes: #770431).
+
+ -- Thomas Goirand z...@debian.org  Fri, 21 Nov 2014 16:25:18 +0800
+
 neutron (2014.1.3-5) unstable; urgency=medium
 
   * Adds Danish debconf translations thanks to Joe Dalton joedalt...@yahoo.dk
diff -Nru neutron-2014.1.3/debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_icehouse.patch neutron-2014.1.3/debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_icehouse.patch
--- neutron-2014.1.3/debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_icehouse.patch	1970-01-01 00:00:00.0 +
+++ neutron-2014.1.3/debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_icehouse.patch	2014-11-21 08:26:09.0 +
@@ -0,0 +1,38 @@
+Description: CVE-2014-7821: Fix hostname regex pattern
+ Current hostname_pattern regex complexity grows exponentially when given a
+ string of just digits, which can be exploited to cause neutron-server to
+ freeze.
+Author: John Perkins john.perk...@rackspace.com
+Origin: upstream, https://review.openstack.org/#/c/135624/
+Date:   Mon Oct 6 16:24:57 2014 -0500
+Bug-Debian: https://bugs.debian.org/770431
+Bug-Ubuntu: https://launchpad.net/bugs/1378450
+Last-Update: 2014-11-21
+
+Index: neutron/neutron/api/v2/attributes.py
+===
+--- neutron.orig/neutron/api/v2/attributes.py	2014-10-25 16:10:17.0 +0800
 neutron/neutron/api/v2/attributes.py	2014-11-21 16:22:21.0 +0800
+@@ -537,8 +537,8 @@
+ return [data]
+ 
+ 
+-HOSTNAME_PATTERN = ((?=^.{1,254}$)(^(?:(?!\d+\.|-)[a-zA-Z0-9_\-]
+-{1,63}(?!-)\.?)+(?:[a-zA-Z]{2,})$))
++HOSTNAME_PATTERN = ((?=^.{1,254}$)(^(?:(?!\d+.|-)[a-zA-Z0-9_\-]{1,62}
++[a-zA-Z0-9]\.?)+(?:[a-zA-Z]{2,})$))
+ 
+ HEX_ELEM = '[0-9A-Fa-f]'
+ UUID_PATTERN = '-'.join([HEX_ELEM + '{8}', HEX_ELEM + '{4}',
+Index: neutron/neutron/tests/unit/test_attributes.py
+===
+--- neutron.orig/neutron/tests/unit/test_attributes.py	2014-10-25 16:10:17.0 +0800
 neutron/neutron/tests/unit/test_attributes.py	2014-11-21 16:22:21.0 +0800
+@@ -283,6 +283,7 @@
+ ['www.hostname.com', 'www.hostname.com'],
+ ['77.hostname.com'],
+ ['1000.0.0.1'],
++[''],  # noqa
+ None]
+ 
+ for ns in ns_pools:
diff -Nru neutron-2014.1.3/debian/patches/series neutron-2014.1.3/debian/patches/series
--- neutron-2014.1.3/debian/patches/series	2014-10-25 08:09:28.0 +
+++ neutron-2014.1.3/debian/patches/series	2014-11-21 08:26:09.0 +
@@ -5,3 +5,4 @@
 Properly_apply_column_default_in_migration_pool_monitor_status.patch
 #sane-defaults-for-ml2_conf.ini.patch
 #sane-defaults-for-dhcp_agent.ini.patch
+cve-2014-7821_DoS_through_invalid_DNS_configuration_icehouse.patch


Bug#767067: [deb...@jff-webhosting.net: Re: No twitter timeline update]

2014-11-21 Thread Xavier Claude
- Forwarded message from Jörg Frings-Fürst deb...@jff-webhosting.net -

Date: Thu, 20 Nov 2014 05:40:24 +0100
From: Jörg Frings-Fürst deb...@jff-webhosting.net
To: Xavier Claude cont...@xavierclaude.be
Subject: Re: No twitter timeline update
X-Mailer: Evolution 3.12.7-1

Hello Xavier,


Am Mittwoch, den 19.11.2014, 19:14 +0100 schrieb Xavier Claude:
 Le mercredi 19 novembre 2014 06:29:27 vous avez écrit :
  Hello Xavier,
  
  first sorry for my late answer.
  
  What can I do?
  Which infos you are needed?
 
 All informations that can be specific to your config. Sadly, choqok doesn't
 offer a lot of debugging message. But, what is the Latest update displayed
 (in the top left corner). If you restart the application, does it change ?
Yes. it change to the actual time

  If
 you go in the Settings → Account, then select the Twitter account and click
 on modify, do you see a green dot next to the text Authenticated ? 

No there is Not Authenticated

 If you 
 click on Authenticate with Twitter does it work ? Does the timelines are 
 updated again ?

After new authentication it seems ok. But why choqok lost them without
any error message? And at all accounts at the same time?

I think a good idea is to display the green or red Authenticated dot
after the name in the tab.


Many thanks for your help.

CU
Jörg

-- 
pgp Fingerprint: 7D13 3C60 0A10 DBE1 51F8  EBCB 422B 44B0 BE58 1B6E
pgp Key: BE581B6E
CAcert Key S/N: 0E:D4:56

Jörg Frings-Fürst
D-54526 Niederkail

Threema: SYR8SJXB

IRC: j_...@freenode.net
 j_...@oftc.net



- End forwarded message -


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#769843: dpkg-maintscript-helper: Wrong pre-dependency information in man page

2014-11-21 Thread Stefan Fritsch
Hi Guillem,

On Monday 17 November 2014 01:43:46, Guillem Jover wrote:
 I've fixed this now locally by bumping the version for both symlink
 commands to just 1.17.14, which avoids translation work, and
 targetting 1.17.22.

Thanks. It seems a build-depends is also required, see #770421. Maybe 
you should mention that in the man page, too?

Cheers,
Stefan


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770440: debian-policy: policy should mention systemd timers

2014-11-21 Thread Alexandre Detiste
Package: debian-policy
Severity: normal

Dear Maintainers,

I've seen that util-linux was the first package that started providing
a native systemd timer for fstrim, but this change got reverted.

 util-linux (2.25.2-3) unstable; urgency=medium
  * Ship fstrim timer/service units as examples only (Closes: #767194)
  - this works around #757891 and #767429 / #760168
 -- Andreas Henriksson andr...@fatal.se  Thu, 06 Nov 2014 13:54:04 +0100

The policy should mention how to handle systemd native timers
to avoid these kind of bugs in the future;
when other packages will start shipping native timers.

Here is the spirit of this change:

+To maintaint compatability with SysV Init;
+packages that ships native timers must also ship corresponding
+crontabs. (/etc/cron.daily|weekly|monthly/) would remain unaffected.
+
+These cron jobs must then also ensure that systemd is not
+currently running to avoid duplicate execution.
+
+A canonical way to both ensure that systemd is not currently running
+and that package hasn't be removed would be:
+m h d m w user test -e /run/systemd/system || test -e /usr/bin/varpkg/var 
 /usr/bin/varpkg/var

Here is a more elaborate draft:

https://github.com/ajtowns/debian-init-policy/pull/6/files

Alexandre Detiste

-- System Information:
Distributor ID: Raspbian (-- this is not at all Raspbian specific)
Description:Raspbian GNU/Linux testing (jessie)
Release:testing
Codename:   jessie
Architecture: armv6l

Kernel: Linux 3.12.28+ (PREEMPT)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770441: androidsdk-tools: Vcs-* fields do not point to a valid repository

2014-11-21 Thread James Cowgill
Source: androidsdk-tools
Version: 22.2+git20130830~92d25d6-1
Severity: minor

Hi,

Currently the Vcs fields of this package point to:
 git://anonscm.debian.org/pkg-java/androidsdk-tools.git
 http://anonscm.debian.org/gitweb/?p=pkg-java/androidsdk-tools.git;a=summary

but these pages don't exist, I just get an error when visiting them.

Thanks,
James

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770415: Bug#770434: CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload, Bug#770424: CVE-2014-8769 tcpdump unreliable output using malformed AOVD payload, Bug#7704

2014-11-21 Thread Nguyen Cong

Thanks for your information.
I already try on master branch of tcpdump on github, it seems that they 
haven't

fixed it yet. Still see segfault message on dmesg.
On 21/11/2014 16:10, Romain Francoise wrote:

Thanks. Upstream doesn't seem to have released official patches yet, or
if they have they haven't kept me in the loop. I've asked for
clarification on the mailing list.



--
CongNT


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#756522: bumblebee-nvidia: cannot access secondary gpu - error: Permission denied

2014-11-21 Thread Marek Rusinowski
On Fri, 2014-11-21 at 00:56 -0800, Vincent Cheng wrote:
 Hi Marek,
 
 On Fri, Nov 21, 2014 at 12:38 AM, Marek Rusinowski
 marekrusinow...@gmail.com wrote:
  On Fri, 21 Nov 2014 00:06:11 -0800 Vincent Cheng vch...@debian.org wrote:
  On Wed, Nov 19, 2014 at 4:36 AM, Marek Rusinowski
  marekrusinow...@gmail.com wrote:
   On Fri, 12 Sep 2014 13:13:43 +0200 Christian Lachner
   christian.lach...@gmail.com wrote:
   Hello everybody,
  
   jkwong888 at https://github.com/Bumblebee-Project/Bumblebee/issues/580
   came up with a fix that actually solves the problem - at least for me.
  
   Turns out that appending the following screen-section to
   /etc/bumblebee/xorg.conf.nvidia makes bumblebee work:
  
   Section Screen
   Identifier Default Screen
   Device DiscreteNvidia
   EndSection
  
   After a restart of bumblebeed, optirun works properly.
  
  
   Hello,
  
   I have debian jessie.
  
 kernel 3.16.0-4-amd64
 nvidia driver 340.46-3
 bumblebee 3.2.1-7
 xserver-xorg 1:7.7+7
 xserver-common 2:1.16.1.901-1
  
   And unfortunately after appending those lines nothing changed. I have
   got
   same error and I'm unable to run programs using optirun.
 
  Please attach a copy of:
  - output of dkms status and your current kernel version (e.g. uname
  -a)
  - output of optirun -vv glxgears -info
  - /var/log/Xorg.8.log and dmesg after a failed attempt at running optirun
 
  Regards,
  Vincent
 
 
  # dkms status
  bbswitch, 0.8, 3.16.0-4-amd64, x86_64: installed
  nvidia-current, 340.46, 3.16.0-4-amd64, x86_64: installed
  # uname -a
  Linux laptop 3.16.0-4-amd64 #1 SMP Debian 3.16.7-2 (2014-11-06) x86_64
  GNU/Linux
 
 Your /var/log/Xorg.8.log:
 
 [61.330] (II) LoadModule: nvidia
 [61.330] (WW) Warning, couldn't open module nvidia
 [61.330] (II) UnloadModule: nvidia
 [61.330] (II) Unloading nvidia
 [61.330] (EE) Failed to load module nvidia (module does not exist, 0)
 
 ...suggests that you may need to set KernelDriver=nvidia-current in
 /etc/bumblebee/bumblebee.conf, restart bumblebeed, and rerun optirun.
 Also check to make sure that xserver-xorg-video-nvidia is installed.
 
 Regards,
 Vincent

Hi Vincent,

The KernelDriver was set to nvidia-current but I haven't had
xserver-xorg-video-nvidia installed in my system. After installing it
optirun works correctly. There is sill an error (...) failed to set DRM
interface version (...) in the Xorg.log but it doesn't stop bumblebee
from working.

Thank you very much for your help!

Regards,
Marek


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#614423: Please provide real pkg-config (.pc) files for xmlrpc-c

2014-11-21 Thread Stéphane Aulery
Hello,

I makes you follow the request of a user of Debian [1] about the
system configuration of xmlrpc-c. A proposal had already taken place on the
mailing list without getting any more [2].

Can you consider adopting the proposed solutions [2|3] to facilitate the work
of distributions or is it totally excluded?

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614423
[2] https://github.com/ensc/xmlrpc-c/commits/rebase/advanced/
[3] 
http://pkgs.fedoraproject.org/gitweb/?p=xmlrpc-c.git;a=blob;f=xmlrpc-c-cmake.patch;hb=HEAD

Regards,

-- 
Stéphane Aulery


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#769612: unblock: bcache-tools/1.0.7-1

2014-11-21 Thread Filippo Giunchedi
hi,
thanks for taking care of the release!

On Sun, Nov 16, 2014 at 06:11:38PM +0100, intrigeri wrote:
 Control: tag -1 + moreinfo
 
 Hi Filippo, hi bcache-tools maintainers,
 
 [I'm not on the release team, just trying to give a hand.]
 
 Filippo Giunchedi wrote (15 Nov 2014 00:30:48 GMT) :
  This package didn't make it in time for the freeze, however jessie ships 
  with a
  bcache-capable kernel so I think it is important to have userspace tools
  available.
 
 I acknowledge that giving Debian Jessie users the means to use bcache
 feels somewhat important strategically, which *might* be a good enough
 reason to make an exception to the freeze policy on this one.
 
 On the other hand:
 
   * Is there any strong reason why this use case cannot be addressed
 via jessie-backports? (if it were *that* important to have in
 Jessie, I guess the maintainers would probably have had it
 uploaded way earlier)

Yeah backports would work in this case

   * This package was accepted into Debian for the first time less than
 3 weeks ago. What kind of testing has it seen?

some debian users are running bcache-tools even now,
https://qa.debian.org/popcon.php?package=bcache-tools
it has been uploaded to fedora in may 2014,
https://admin.fedoraproject.org/pkgdb/package/bcache-tools/

anyways, wheezy-backports will do

thanks,
filippo


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#769380: python-mako: please make Multi-Arch:foreign

2014-11-21 Thread Helmut Grohne
Control: retitle -1 please make python-mako multiarch aware

On Thu, Nov 13, 2014 at 08:34:05AM +0100, Johannes Schauer wrote:
 python-mako not being Multi-Arch:foreign is currently blocking 208
 source packages from not being able to satisfy their crossbuild
 dependencies: https://mister-muffin.de/p/Ztuz.html
 
 The fix is trivial and involves just adding the Multi-Arch:foreign
 header to the python-mako package stanza in debian/control.

Adding M-A:foreign is wrong. Suppose you are trying to satisfy
python-mako:i386 on a system that is natively amd64. Then python-mako
would satisfy this dependency and use python-markupsafe:amd64 in its
installation set. However when importing modules in an embedded i386
python interpreter an ImportError would be raised, because
python-markupsafe is unavailable. Thus python-mako exposes the
architecture awareness of python-markupsafe and cannot become
M-A:foreign.

It is not obvious how to solve this problem and it is not obvious
whether python-mako needs to be updated to solve it. In essence, this is
the famous multiarch interpreter problem at
https://wiki.debian.org/HelmutGrohne/MultiarchSpecChanges#Interpreter_issue.

A feasibly workaround to apply now would be to switch python-mako to
arch:any M-A:same.

Helmut


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770442: fribid: FTBFS on arm64

2014-11-21 Thread Edmund Grimley Evans
Source: fribid
Version: 1.0.4-2

It failed to build on arm64:

http://buildd.debian.org/status/package.php?p=fribidsuite=sid

The error was:

../npapi/prcpucfg.h:705:2: error: #error Unknown CPU architecture
 #error Unknown CPU architecture

It seems easy to fix. You could replace

#elif defined(__x86_64__)

in that file with

#elif defined(__x86_64__) || defined(__aarch64__)

or copy that section to make a new one.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770443: nmu: inkscape_0.91~pre2-1

2014-11-21 Thread Andreas Beckmann
Package: release.debian.org
Severity: normal
Tags: experimental
User: release.debian@packages.debian.org
Usertags: binnmu

nmu inkscape_0.91~pre2-1 . ALL . experimental . -m Rebuild against imagemagick 
6.8

No longer installable due to dependecies on libmagick*5.


Andreas


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#579531: Help to review a patch in ELisp

2014-11-21 Thread Remi Vanicat
Stéphane Aulery saul...@free.fr writes:

 Hello,

 I am looking for a person who knows enough to verify a ELisp patch. The
 patch is supposed to fix a problem of space in file names [1], upstream
 unfortunately does not have the in-house expertise [2].

 Volunteers?

The change to elisp only touch one regexp, and only to its beginning.
when one remove the first level of quoting it is:

^\([^ \t]+\)[ \t]+\([^ \t]+\)[ \t]+\([0-9]+\)[ \t]+\(.*\)\n
replaced by
^\([^\t]+\)[ \t]+\([^ \t]+\)[ \t]+\([0-9]+\)[ \t]+\(.*\)\n

So it was looking for 4 group of char, separate by one space or tab, the
first and second being made of any char not char or space, the third
being made of digit, and the last of everything until end of line.

It is now mostly the same, the only difference is that the first group
may also contain space, and in practice must be ended by one tabulation
(as the regexp is greedy, if there is a space at the end of the first
group, it will be added to the first group...)

By looking at
http://www.opensource.apple.com/source/cscope/cscope-5/cscope/contrib/xcscope/xcscope.el
it seem that this regexp is use to parse the output of some program,
each line should always match it, the first group being the file, the
second the function-name, the third the line-number and the last the
line.

This seem good, the only problem being that the old regexp make the
assumption that the file and the function-name are separated by a space
or a tab, and the new one might failed if the separator is a space and
not a tab.



-- 
Rémi Vanicat


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770444: apt-dater: typos in manpage

2014-11-21 Thread Simon Kainz
Package: apt-dater
Version: 1.0.1-1
Severity: minor
Tags: patch

Hello,

please see the attached patch fixing some typos in the manpages.



-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_AT.utf8, LC_CTYPE=de_AT.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
diff -U3 -r apt-dater-1.0.1/man/apt-dater.8 new/man/apt-dater.8
--- apt-dater-1.0.1/man/apt-dater.8	2014-10-31 19:36:39.0 +
+++ new/man/apt-dater.8	2014-11-20 12:31:01.0 +
@@ -39,7 +39,7 @@
 command\.
 .PP
 \fBapt\-dater\fR
-is a program to manage package updats on a large number of remote hosts using SSH\.
+is a program to manage package updates on a large number of remote hosts using SSH\.
 .SH OPTIONS
 .PP
 \fBapt\-dater\fR
@@ -63,7 +63,7 @@
 .PP
 \fB\-n\fR
 .RS 4
-Prevent hosts to be refreshed before create XML report (useful for cronjobs which do not have access to SSH key(s))\.
+Prevent hosts to be refreshed before creating XML report (useful for cronjobs which do not have access to SSH key(s))\.
 .RE
 .SH ENVIRONMENT
 .PP
diff -U3 -r apt-dater-1.0.1/man/apt-dater.config.5 new/man/apt-dater.config.5
--- apt-dater-1.0.1/man/apt-dater.config.5	2014-10-31 19:36:39.0 +
+++ new/man/apt-dater.config.5	2014-11-21 09:13:29.102752210 +
@@ -48,7 +48,7 @@
 \fIapt\-dater\.config\fR
 is the configuration file for
 \fBapt\-dater\fR(8)\.
-\fBapt\-dater\fR(8) is a program to manage package updats on a large number of remote hosts using SSH\. This man page descripes briefly the parameters of the file
+\fBapt\-dater\fR(8) is a program to manage package updates on a large number of remote hosts using SSH\. This man page describes briefly the parameters of the file
 \fIapt\-dater\.config\fR\. The default location of this file is
 \fI$XDG_CONFIG_HOME/apt\-dater/apt\-dater\.config\fR\.
 .PP
@@ -58,7 +58,7 @@
 .PP
 HostsFile=\fI$XDG_CONFIG_HOME/apt\-dater/hosts\.config\fR;
 .RS 4
-The location of the file contains all host which will be managed with
+The location of the file containing all hosts which will be managed with
 \fBapt\-dater\fR\. (optional)
 .RE
 .PP
@@ -242,7 +242,7 @@
 .SH STRING ESCAPES
 \fBapt\-dater\fR(8) provides an string escape mechanism\. The escape character is \*(Aq%\*(Aq\.
 
-.sp
+.sp
 .it 1 an-trap
 .nr an-no-space-flag 1
 .nr an-break-flag 1


Bug#666726: debian-policy: Clarify if empty control fields are ollowed or not

2014-11-21 Thread Bill Allombert
On Fri, Nov 21, 2014 at 10:05:05AM +0900, Charles Plessy wrote:
 Le Fri, Nov 21, 2014 at 12:23:17AM +0500, Andrey Rahmatullin a écrit :
  Control: tags -1 + patch
  
  On Sat, Aug 04, 2012 at 11:19:15AM +0900, Charles Plessy wrote:
   How about the attached patch, that adds Its value must not be empty.
   after The field ends at the end of the line or at the end of the last
   continuation line.
  Seconded.
 
 Thanks Andrey.
 
 are there objections against forbidding empty control fields ?  If not,
 would somebody eles second the patch ?

What about automatically generated control files and substvar ?
e.g.
Depends: ${misc:Depends}
where ${misc:Depends} resolve to the empty string ?

Does dpkg-gencontrol take care of that ? In that case we should not lead people
to believe that the above is incorrect.

Cheers,
-- 
Bill. ballo...@debian.org

Imagine a large red swirl here. 


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770445: ITP: cruft-ng -- program that finds any cruft built up on your system / rewrite in C

2014-11-21 Thread Alexandre Detiste
Package: wnpp
Severity: wishlist

Dear Maintainers,

*Package Name : cruft-ng
  Version : 0.1
  Upstream Author : Alexandre Detiste (this is a native package).
*URL :  https://github.com/a-detiste/cruft-ng
*License : GPL-2+ 
*Description : program that finds any cruft built up on your system
   I've been using cruft for years, and I've packaged the last
   uploads needed to refresh the rule set.

   My main itch to scratch was that tool - while usefull for
   individual house-keeping  package debugging (like piuparts) -
   was sooo slow...

   I rewrote it in C++; but that's mostly C + strings + vector.
   This is my first C program in 13 years, you may find
   it a bit lame; patches are welcome.

   It is rouglhy 15 to 30 times fasters.

   Original cruft is a shell script that calls a myriad 
   of sub-processes.

   While not yet feature complete; I find it already usefull;
   this enabled me to fix cruft ruleset iteratively,
   without waiting hours.

   This version also solves somee original cruft bugs:
   #50731 , #429602 , #492001

   This is mostly done, the only bit missing are a proper
   Makefile  and a man page.

   The first version would Depends: cruft ( 0.9.20) | cruft-common

   Then, after Jessie is released, cruft would be split in
   cruft + cruft-common .

   This way users can install both and even diff the results
   of both tools, as they are character compatible.

Alexandre Detiste


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770442: fribid: FTBFS on arm64

2014-11-21 Thread Samuel Lidén Borell
On 2014-11-21 10:41, Edmund Grimley Evans wrote:
 It failed to build on arm64:
 
 http://buildd.debian.org/status/package.php?p=fribidsuite=sid
 
 The error was:
 
 ../npapi/prcpucfg.h:705:2: error: #error Unknown CPU architecture
  #error Unknown CPU architecture
 
 It seems easy to fix. You could replace
 
 #elif defined(__x86_64__)
 
 in that file with
 
 #elif defined(__x86_64__) || defined(__aarch64__)
 
 or copy that section to make a new one.
 

Thanks! I have committed your suggested fix upstream and will make a new
Debian version in the weekend.

Regards,
Samuel


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770446: unblock: oslo.messaging/1.4.0.0+really+1.3.1-2

2014-11-21 Thread Thomas Goirand
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Dear release team,

Since the last upload of Python and OpenSSL, oslo.messaging is broken,
because we've removed PROTOCOL_SSLv3 (almost certainly, the intend is to
prevent protocol downgrade attacks).

My last upload of oslo.messaging removes the use of PROTOCOL_SSLv3, which
make the package work again. Debdiff attached, as always...

Please unblock oslo.messaging/1.4.0.0+really+1.3.1-2.

Cheers,

Thomas Goirand (zigo)
diff -Nru oslo.messaging-1.4.0.0+really+1.3.1/debian/changelog oslo.messaging-1.4.0.0+really+1.3.1/debian/changelog
--- oslo.messaging-1.4.0.0+really+1.3.1/debian/changelog	2014-09-21 16:28:27.0 +
+++ oslo.messaging-1.4.0.0+really+1.3.1/debian/changelog	2014-11-21 09:53:40.0 +
@@ -1,3 +1,9 @@
+oslo.messaging (1.4.0.0+really+1.3.1-2) unstable; urgency=medium
+
+  * Removed the use of PROTOCOL_SSLv3 which is gone from Python.
+
+ -- Thomas Goirand z...@debian.org  Fri, 21 Nov 2014 09:50:49 +
+
 oslo.messaging (1.4.0.0+really+1.3.1-1) unstable; urgency=medium
 
   * Repairing wrong upload to unstable (this was due to a wrong release of
diff -Nru oslo.messaging-1.4.0.0+really+1.3.1/debian/patches/remove-PROTOCOL_SSLv3.patch oslo.messaging-1.4.0.0+really+1.3.1/debian/patches/remove-PROTOCOL_SSLv3.patch
--- oslo.messaging-1.4.0.0+really+1.3.1/debian/patches/remove-PROTOCOL_SSLv3.patch	1970-01-01 00:00:00.0 +
+++ oslo.messaging-1.4.0.0+really+1.3.1/debian/patches/remove-PROTOCOL_SSLv3.patch	2014-11-21 09:53:40.0 +
@@ -0,0 +1,19 @@
+Description: Remove the use of ssl.PROTOCOL_SSLv3
+ The ssl.PROTOCOL_SSLv3 support has been removed from Python and OpenSSL,
+ which broke completely oslo.messaging. This patch fixes it.
+Author: Thomas Goirand z...@debian.org
+Forwarded: https://review.openstack.org/136278
+Last-Update: 2014-11-21
+
+--- oslo.messaging-1.4.0.0+really+1.3.1.orig/oslo/messaging/_drivers/impl_rabbit.py
 oslo.messaging-1.4.0.0+really+1.3.1/oslo/messaging/_drivers/impl_rabbit.py
+@@ -477,8 +477,7 @@ class Connection(object):
+ # FIXME(markmc): use oslo sslutils when it is available as a library
+ _SSL_PROTOCOLS = {
+ tlsv1: ssl.PROTOCOL_TLSv1,
+-sslv23: ssl.PROTOCOL_SSLv23,
+-sslv3: ssl.PROTOCOL_SSLv3
++sslv23: ssl.PROTOCOL_SSLv23
+ }
+ 
+ try:
diff -Nru oslo.messaging-1.4.0.0+really+1.3.1/debian/patches/series oslo.messaging-1.4.0.0+really+1.3.1/debian/patches/series
--- oslo.messaging-1.4.0.0+really+1.3.1/debian/patches/series	2014-09-21 16:28:27.0 +
+++ oslo.messaging-1.4.0.0+really+1.3.1/debian/patches/series	2014-11-21 09:53:40.0 +
@@ -1 +1,2 @@
 no-intersphinx.patch
+remove-PROTOCOL_SSLv3.patch


Bug#770342: [Pkg-sysvinit-devel] Bug#770342: dashism in /etc/init.d/bootlogs ?

2014-11-21 Thread Harald Dunkel
On Thu, 20 Nov 2014 17:57:55 +0100
Petter Reinholdtsen p...@hungry.com wrote:
 
 Could it be related to open file descriptors?  Check /proc/pid/fd of
 involved processes.  It some times causes hang during boot.
 

While its stuck I see

:
root602  1  0 10:56 console  00:00:00 /bin/sh /etc/init.d/rc 3
root607602  0 10:56 console  00:00:00  \_ /lib/startpar/startpar -p 
4 -t 20 -T 3 -M start -P N -R 3
root608607  0 10:56 ?00:00:00  \_ /bin/sh 
/etc/init.d/bootlogs start
root688608  0 10:56 ?00:00:00  \_ dmesg -s 524288
:
# ls -al /proc/688/fd
total 0
dr-x-- 2 root root  0 Nov 21 10:57 .
dr-xr-xr-x 9 root root  0 Nov 21 10:57 ..
lrwx-- 1 root root 64 Nov 21 10:57 0 - /dev/console
l-wx-- 1 root root 64 Nov 21 10:57 1 - /var/log/dmesg
lrwx-- 1 root root 64 Nov 21 10:57 2 - /dev/pts/0
lr-x-- 1 root root 64 Nov 21 10:57 3 - /dev/console
# ls -al /proc/608/fd
total 0
dr-x-- 2 root root  0 Nov 21 10:57 .
dr-xr-xr-x 9 root root  0 Nov 21 10:56 ..
lrwx-- 1 root root 64 Nov 21 10:59 0 - /dev/console
lrwx-- 1 root root 64 Nov 21 10:59 1 - /dev/pts/0
lrwx-- 1 root root 64 Nov 21 10:57 2 - /dev/pts/0
lr-x-- 1 root root 64 Nov 21 10:57 255 - /etc/init.d/bootlogs
# ls -al /proc/607/fd
total 0
dr-x-- 2 root root  0 Nov 21 10:56 .
dr-xr-xr-x 9 root root  0 Nov 21 10:56 ..
lrwx-- 1 root root 64 Nov 21 10:56 0 - /dev/console
l-wx-- 1 root root 64 Nov 21 10:56 1 - pipe:[3273214011]
lrwx-- 1 root root 64 Nov 21 10:56 2 - /dev/console
lrwx-- 1 root root 64 Nov 21 10:59 3 - /dev/ptmx
# ls -al /proc/602/fd
total 0
dr-x-- 2 root root  0 Nov 21 10:56 .
dr-xr-xr-x 9 root root  0 Nov 21 10:56 ..
lrwx-- 1 root root 64 Nov 21 10:56 0 - /dev/console
lrwx-- 1 root root 64 Nov 21 11:00 1 - /dev/console
lrwx-- 1 root root 64 Nov 21 10:57 2 - /dev/console
lr-x-- 1 root root 64 Nov 21 11:00 255 - /etc/init.d/rc
lr-x-- 1 root root 64 Nov 21 11:00 3 - pipe:[3273214011]


Is there something unusual?


Regards
Harri


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#769380: python-mako: please make Multi-Arch:foreign

2014-11-21 Thread Johannes Schauer
Hi,

On Fri, 21 Nov 2014 10:41:03 +0100 Helmut Grohne hel...@subdivi.de wrote:
 Adding M-A:foreign is wrong. Suppose you are trying to satisfy
 python-mako:i386 on a system that is natively amd64. Then python-mako would
 satisfy this dependency and use python-markupsafe:amd64 in its installation
 set. However when importing modules in an embedded i386 python interpreter an
 ImportError would be raised, because python-markupsafe is unavailable. Thus
 python-mako exposes the architecture awareness of python-markupsafe and
 cannot become M-A:foreign.
 
 It is not obvious how to solve this problem and it is not obvious
 whether python-mako needs to be updated to solve it. In essence, this is
 the famous multiarch interpreter problem at
 https://wiki.debian.org/HelmutGrohne/MultiarchSpecChanges#Interpreter_issue.
 
 A feasibly workaround to apply now would be to switch python-mako to
 arch:any M-A:same.

alternatively, python-mako could also demote its dependency on
python-markupsafe to a recommends. python-markupsafe seems to only be used in
mako/filters.py and there seems to be a fallback to pure Python in case
python-markupsafe is not available. Thus python-markupsafe is not a strict
dependency.

Since python-make would then not strictly depend on python-markupsafe anymore,
it could become m-a:foreign.

cheers, josch


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770146: RFS: gnustep-back/0.24.0-4 -- GNUstep GUI Backend [RC]

2014-11-21 Thread Paul Gevers
Control: owner -1 !
Control: tags -1 pending

On 19-11-14 07:57, Yavor Doganov wrote:
 I'm looking for a sponsor for my package gnustep-back.

Building now, etc...

Paul




signature.asc
Description: OpenPGP digital signature


Bug#770342: [Pkg-sysvinit-devel] Bug#770342: dashism in /etc/init.d/bootlogs ?

2014-11-21 Thread Petter Reinholdtsen
[Harald Dunkel]
 Is there something unusual?

Not that I can see, no. :( The 255 file descriptor was a bit unexpected
to me, but I guess that is how the shell work.

Is this different when using bash?

-- 
Happy hacking
Petter Reinholdtsen


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770224: RFS: gnustep-base/1.22.1-4+deb7u1 -- GNUstep Base library [RC SECURITY] [wheezy]

2014-11-21 Thread Paul Gevers
Control: owner -1 !
Control: tags -1 pending

On 19-11-14 22:14, Yavor Doganov wrote:
 I am looking for a sponsor for my package gnustep-base.

Building soon, etc...

Paul





signature.asc
Description: OpenPGP digital signature


Bug#770447: use of ssl.PROTOCOL_SSLv3 which we don't support anymore

2014-11-21 Thread Thomas Goirand
Package: blender
Version: 2.72.b+dfsg0-1
Severity: serious

Hi,

A rapid code search shows that blender uses:

ssl_version=ssl.PROTOCOL_SSLv3

in release/scripts/addons/netrender/master.py:1161

However, this support has been removed in Debian. Therefore, it is possible
that blender is broken.

I haven't checked myself if this breaks the build of Blender, or if it
affects it a lot, as I have no time to do that. Though I would strongly
suggest the maintainer to check, and eventually downgrade this bug to
important only.

Cheers,

Thomas Goirand (zigo)


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770448: Setting up libpam-modules-bin (1.1.8-3.1) hangs forever

2014-11-21 Thread Holger Levsen
package: libpam-modules-bin
version: 1.1.8-3.1
severity: important
x-debbugs-cc: upgrade-repo...@bugs.debian.org
User: debian...@lists.debian.org
Usertags: jenkins

https://jenkins.debian.net/view/d-i_manual/job/chroot-installation_wheezy_install_education-thin-client-server_upgrade_to_jessie/5/console
and 
https://jenkins.debian.net/view/d-i_manual/job/chroot-installation_wheezy_install_education-workstation_upgrade_to_jessie/5/console
(and several attempts before) hang forever at 

Preparing to unpack .../libpam-modules-bin_1.1.8-3.1_amd64.deb ...
Unpacking libpam-modules-bin (1.1.8-3.1) over (1.1.3-7.1) ...
Replacing files in old package libpam-modules:amd64 (1.1.3-7.1) ...
Setting up libpam-modules-bin (1.1.8-3.1) ...

I don't see any useful hint whats happening when looking at the processes:

29258 ?S  0:00  \_ /bin/sh -xe /tmp/hudson8147454957601885791.sh
29272 ?S  0:00  |   \_ /bin/bash 
/srv/jenkins/bin/chroot-installation.sh wheezy education-thin-client-server 
jessie
29308 ?S  0:00  |   \_ /usr/bin/python 
/srv/jenkins/bin/setsid.py /tmp/jenkins-script-ObHlitjD wheezy 
education-thin-client-server jessie
29325 ?Ss 0:00  |   \_ /bin/bash 
/tmp/jenkins-script-ObHlitjD wheezy education-thin-client-server jessie
39022 ?S  0:00  |   \_ sudo chroot 
/chroots/chroot-installation-wheezy.yru9xUhsR /tmp/tmp.7L3G0jVHmA
39023 ?S  0:00  |   \_ /bin/sh 
/tmp/tmp.7L3G0jVHmA
12963 ?S  0:08  |   \_ apt-get -yf 
dist-upgrade
57306 ?R124:55  |   \_ /usr/bin/dpkg 
--status-fd 17 --unpack --auto-deconfigure 
/var/cache/apt/archives/libpam-modules_1.1.8-3.1_amd64.deb

/proc is mounted inside the chroot but nothing else:

root@jenkins:~# mount|grep chroot-installation-wheezy.yru9xUhsR
/proc on /srv/workspace/chroots/chroot-installation-wheezy.yru9xUhsR/proc type 
proc (rw,relatime)
binfmt_misc on 
/srv/workspace/chroots/chroot-installation-wheezy.yru9xUhsR/proc/sys/fs/binfmt_misc
 type binfmt_misc (rw,nosuid,nodev,noexec,relatime)
root@jenkins:~# 

(I'm using plain /usr/sbin/chroot here, not /usr/bin/schroot.)

OTOH, 
https://piuparts.debian.org/wheezy2jessie/pass/libpam-modules-bin_1.1.8-3.1.log
does the upgrade just fine, so maybe this bug should only be of severity 
important,
filing as such, please upgrade the severity if you think thats appropriate.

Thanks for maintaining pam!


signature.asc
Description: This is a digitally signed message part.


Bug#770447: use of ssl.PROTOCOL_SSLv3 which we don't support anymore

2014-11-21 Thread Cyril Brulebois
Control: severity -1 important

Thomas Goirand z...@debian.org (2014-11-21):
 Package: blender
 Version: 2.72.b+dfsg0-1
 Severity: serious
 
 Hi,
 
 A rapid code search shows that blender uses:
 
 ssl_version=ssl.PROTOCOL_SSLv3
 
 in release/scripts/addons/netrender/master.py:1161
 
 However, this support has been removed in Debian. Therefore, it is possible
 that blender is broken.
 
 I haven't checked myself if this breaks the build of Blender, or if it
 affects it a lot, as I have no time to do that. Though I would strongly
 suggest the maintainer to check, and eventually downgrade this bug to
 important only.

Definitely not breaking the build.

And given it's an addon, seemingly for network rendering, I don't think
this qualifies as a serious bug. That doesn't mean fixing it for jessie
would be rejected outright.

(A quick web search seems to point out it's diabled by default, see
Instructions on: 
http://wiki.blender.org/index.php/Doc:2.6/Manual/Render/Performance/Netrender)

Mraw,
KiBi.


signature.asc
Description: Digital signature


Bug#770449: RFS: caml-crush/1.0.3-1 [ITP]

2014-11-21 Thread Thomas Calderon
Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for my package caml-crush

* Package name: caml-crush
  Version : 1.0.3-1
  Upstream Author : Ryad Benadjila, Thomas Calderon, Marion Daubignard
* URL : https://github.com/ANSSI-FR/caml-crush
* License : CeCILL-B
  Section : net

It builds those binary packages:

  caml-crush-clients - Caml Crush: an OCaml PKCS#11 filtering proxy -
clients
  caml-crush-server - Caml Crush: an OCaml PKCS#11 filtering proxy - server

To access further information about this package, please visit the
following URL:

http://mentors.debian.net/package/caml-crush


Alternatively, one can download the package with dget using this command:

  dget -x
http://mentors.debian.net/debian/pool/main/c/caml-crush/caml-crush_1.0.3-1.dsc

More information about hello can be obtained from
https://github.com/ANSSI-FR/caml-crush.



Regards,

Thomas Calderon


Bug#770439: unblock: neutron/2014.1.3-7 (CVE-2014-7821 fix: DoS through invalid DNS configuration)

2014-11-21 Thread Thomas Goirand
On 11/21/2014 05:18 PM, Thomas Goirand wrote:
 Package: release.debian.org
 Severity: important
 User: release.debian@packages.debian.org
 Usertags: unblock
 
 Dear release team,
 
 Version 2014.1.3-6 of Neutron include a fix for CVE-2014-7821: DoS through
 invalid DNS configuration. The fix is really minimal, it's basically a change
 in the regexp that was taking too long to validate input. Debdiff attached.
 
 Please unblock neutron/2014.1.3-6.
 
 Cheers,
 
 Thomas Goirand (zigo)

Hi,

I've added another patch to remove the use of PROTOCOL_SSLv3 in oslo
incubator, included in Neutron, since that support is gone from Debian
Sid. I'm not sure if Neutron uses that, but I just want to be safe here.
I've attached the new debdiff. (note that all unit tests but one Cisco
related one are passing, just like before...)

Cheers,

Thomas Goirand (zigo)

diff -Nru neutron-2014.1.3/debian/changelog neutron-2014.1.3/debian/changelog
--- neutron-2014.1.3/debian/changelog   2014-10-25 08:09:28.0 +
+++ neutron-2014.1.3/debian/changelog   2014-11-21 10:37:54.0 +
@@ -1,3 +1,16 @@
+neutron (2014.1.3-7) unstable; urgency=high
+
+  * Add a patch to not use PROTOCOL_SSLv3 which is gone from Python in Sid.
+
+ -- Thomas Goirand z...@debian.org  Fri, 21 Nov 2014 10:37:07 +
+
+neutron (2014.1.3-6) unstable; urgency=high
+
+  * CVE-2014-7821: DoS through invalid DNS configuration. Applied upstream
+patch: Fix hostname regex pattern (Closes: #770431).
+
+ -- Thomas Goirand z...@debian.org  Fri, 21 Nov 2014 16:25:18 +0800
+
 neutron (2014.1.3-5) unstable; urgency=medium
 
   * Adds Danish debconf translations thanks to Joe Dalton joedalt...@yahoo.dk
diff -Nru 
neutron-2014.1.3/debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_icehouse.patch
 
neutron-2014.1.3/debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_icehouse.patch
--- 
neutron-2014.1.3/debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_icehouse.patch
  1970-01-01 00:00:00.0 +
+++ 
neutron-2014.1.3/debian/patches/cve-2014-7821_DoS_through_invalid_DNS_configuration_icehouse.patch
  2014-11-21 10:37:54.0 +
@@ -0,0 +1,38 @@
+Description: CVE-2014-7821: Fix hostname regex pattern
+ Current hostname_pattern regex complexity grows exponentially when given a
+ string of just digits, which can be exploited to cause neutron-server to
+ freeze.
+Author: John Perkins john.perk...@rackspace.com
+Origin: upstream, https://review.openstack.org/#/c/135624/
+Date:   Mon Oct 6 16:24:57 2014 -0500
+Bug-Debian: https://bugs.debian.org/770431
+Bug-Ubuntu: https://launchpad.net/bugs/1378450
+Last-Update: 2014-11-21
+
+Index: neutron/neutron/api/v2/attributes.py
+===
+--- neutron.orig/neutron/api/v2/attributes.py  2014-10-25 16:10:17.0 
+0800
 neutron/neutron/api/v2/attributes.py   2014-11-21 16:22:21.0 
+0800
+@@ -537,8 +537,8 @@
+ return [data]
+ 
+ 
+-HOSTNAME_PATTERN = ((?=^.{1,254}$)(^(?:(?!\d+\.|-)[a-zA-Z0-9_\-]
+-{1,63}(?!-)\.?)+(?:[a-zA-Z]{2,})$))
++HOSTNAME_PATTERN = ((?=^.{1,254}$)(^(?:(?!\d+.|-)[a-zA-Z0-9_\-]{1,62}
++[a-zA-Z0-9]\.?)+(?:[a-zA-Z]{2,})$))
+ 
+ HEX_ELEM = '[0-9A-Fa-f]'
+ UUID_PATTERN = '-'.join([HEX_ELEM + '{8}', HEX_ELEM + '{4}',
+Index: neutron/neutron/tests/unit/test_attributes.py
+===
+--- neutron.orig/neutron/tests/unit/test_attributes.py 2014-10-25 
16:10:17.0 +0800
 neutron/neutron/tests/unit/test_attributes.py  2014-11-21 
16:22:21.0 +0800
+@@ -283,6 +283,7 @@
+ ['www.hostname.com', 'www.hostname.com'],
+ ['77.hostname.com'],
+ ['1000.0.0.1'],
++
[''],  # noqa
+ None]
+ 
+ for ns in ns_pools:
diff -Nru neutron-2014.1.3/debian/patches/do-not-use-PROTOCOL_SSLv3.patch 
neutron-2014.1.3/debian/patches/do-not-use-PROTOCOL_SSLv3.patch
--- neutron-2014.1.3/debian/patches/do-not-use-PROTOCOL_SSLv3.patch 
1970-01-01 00:00:00.0 +
+++ neutron-2014.1.3/debian/patches/do-not-use-PROTOCOL_SSLv3.patch 
2014-11-21 10:37:54.0 +
@@ -0,0 +1,18 @@
+Description: PROTOCOL_SSLv3 is gone from Python in Sid
+ This patch removes its use.
+Author: Thomas Goirand z...@debian.org
+Forwarded: no
+Last-Update: 2014-11-21
+
+--- neutron-2014.1.3.orig/neutron/openstack/common/sslutils.py
 neutron-2014.1.3/neutron/openstack/common/sslutils.py
+@@ -80,8 +80,7 @@ def wrap(sock):
+ 
+ _SSL_PROTOCOLS = {
+ tlsv1: ssl.PROTOCOL_TLSv1,
+-sslv23: ssl.PROTOCOL_SSLv23,
+-sslv3: ssl.PROTOCOL_SSLv3
++sslv23: ssl.PROTOCOL_SSLv23
+ }
+ 
+ try:
diff -Nru neutron-2014.1.3/debian/patches/series 
neutron-2014.1.3/debian/patches/series
--- 

Bug#770427: direwolf patch uploaded

2014-11-21 Thread Iain R. Learmonth
fixed 770427 1.0-2
kthxbye

Hi,

This has now been uploaded.

Thanks,
Iain.

-- 
e: i...@fsfe.orgw: iain.learmonth.me
x: i...@jabber.fsfe.org t: +447875886930
c: MM6MVQ  g: IO87we
p: 1F72 607C 5FF2 CCD5 3F01 600D 56FF 9EA4 E984 6C49


pgpgb2KC7DmKR.pgp
Description: PGP signature


Bug#770448: Acknowledgement (Setting up libpam-modules-bin (1.1.8-3.1) hangs forever)

2014-11-21 Thread Holger Levsen
oh, and please reassign back to qa.debian.org if you think this is a bug in 
the jenkins.d.n setup :-)




signature.asc
Description: This is a digitally signed message part.


Bug#767295: [PATCH for-4.5 v2] libxc: don't leak buffer containing the uncompressed PV kernel

2014-11-21 Thread Ian Campbell
On Thu, 2014-11-20 at 22:13 -0500, Gedalya wrote:
 On 11/20/2014 03:21 PM, Konrad Rzeszutek Wilk wrote:
  On Thu, Nov 20, 2014 at 03:48:47PM +, Ian Campbell wrote:
  The libxc xc_dom_* infrastructure uses a very simple malloc memory pool 
  which
  is freed by xc_dom_release. However the various xc_try_*_decode routines 
  (other
  than the gzip one) just use plain malloc/realloc and therefore the buffer 
  ends
  up leaked.
 
  The memory pool currently supports mmap'd buffers as well as a directly
  allocated buffers, however the try decode routines make use of realloc and 
  do
  not fit well into this model. Introduce a concept of an external memory 
  block
  to the memory pool and provide an interface to register such memory.
 
  The mmap_ptr and mmap_len fields of the memblock tracking struct lose their
  mmap_ prefix since they are now also used for external memory blocks.
 
  We are only seeing this now because the gzip decoder doesn't leak and it's 
  only
  relatively recently that kernels in the wild have switched to better
  compression.
 
  This is https://bugs.debian.org/767295
 
  Reported by: Gedalya geda...@gedalya.net
  Gedelya,
 
  Could you also test this patch to make sure it does fix the
  reported issue please?
 
 So here's what happens now.
 1. Starts up tiny
 2. reboot: leak
 3. reboot: freed (process larger, but the delta is all/mostly shared pages)
 4. reboot: leak
 5. reboot: freed
 etc..

WTF, how very strange!

 root@xen:~/xen-pkgs# xl cr /etc/xen/auto/asterisk_deb80.cfg
 Parsing config from /etc/xen/auto/asterisk_deb80.cfg
 root@xen:~/xen-pkgs# ps aux | grep asterisk_deb80
 root 22981  0.0  0.0  95968   588 ?SLsl 21:55   0:00 
 /usr/lib/xen-4.4/bin/xl cr /etc/xen/auto/asterisk_deb80.cfg
 root@xen:~/xen-pkgs# pmap -x 22981
 22981:   /usr/lib/xen-4.4/bin/xl cr /etc/xen/auto/asterisk_deb80.cfg
 Address   Kbytes RSS   Dirty Mode  Mapping
 0040 144 128   0 r-x-- xl
 00623000   4   4   4 r xl
 00624000   8   8   8 rw--- xl
 00626000   4   4   4 rw---   [ anon ]
 009a6000 288 240 240 rw---   [ anon ]
 7f14d400 132   8   8 rw---   [ anon ]
 7f14d4021000   65404   0   0 -   [ anon ]
  snip 
  --- --- ---
 total kB   959682728 596
 
 --- reboot domu ---
 
 root@xen:~/xen-pkgs# ps aux | grep asterisk_deb80
 root 22981  0.6  3.3 131652 20008 ?SLsl 21:55   0:00 
 /usr/lib/xen-4.4/bin/xl cr /etc/xen/auto/asterisk_deb80.cfg
 root@xen:~/xen-pkgs# pmap -x 22981
 22981:   /usr/lib/xen-4.4/bin/xl cr /etc/xen/auto/asterisk_deb80.cfg
 Address   Kbytes RSS   Dirty Mode  Mapping
 0040 144 144   0 r-x-- xl
 00623000   4   4   4 r xl
 00624000   8   8   8 rw--- xl
 00626000   4   4   4 rw---   [ anon ]
 009a6000 288 288 288 rw---   [ anon ]
 009ee000   35676   16772   16772 rw---   [ anon ]

This is the (temporarily) leaked mapping, right?

 Tried valgrind, it doesn't look like it was able to see what was going on

Indeed. The values for total heap usage at exist and still reachable etc
also don't seem to account for the ~3M of mapping on each iteration.

I don't know how glibc's allocator works, but I suppose it isn't
impossible that it is retaining some mappings of free regions and
collecting them to free later somehow, which just happens to only
trigger every other reboot (e.g. perhaps it is based on some threshold
of free memory).

...investigates...

So, http://man7.org/linux/man-pages/man3/malloc.3.html talks about
special behaviour using mmap for allocations above MMAP_THRESHOLD (128K
by default), which we will be hitting here I think. That explains the
anon mapping.

http://man7.org/linux/man-pages/man3/mallopt.3.html also talks about
various dynamic thresholds for growing and shrinking the heap. My guess
is that we are bouncing up and down over some threshold with every other
reboot.

Ian.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#767295: [Xen-devel] [PATCH for-4.5 v2] libxc: don't leak buffer containing the uncompressed PV kernel

2014-11-21 Thread Ian Campbell
On Fri, 2014-11-21 at 11:03 +, Ian Campbell wrote:
 http://man7.org/linux/man-pages/man3/mallopt.3.html also talks about
 various dynamic thresholds for growing and shrinking the heap. My guess
 is that we are bouncing up and down over some threshold with every other
 reboot.

IOW I'm not overly concerned with this apparent bi-modality, so long as
the amount isn't increasing in the long term...

I think the original patch should go in.

Ian.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#767227: [oss-security] Re: CVE request: lsyncd command injection

2014-11-21 Thread Michael Samuel
On 20 November 2014 17:55,  cve-ass...@mitre.org wrote:
 Use CVE-2014-8990. The scope of this CVE ID includes both:
   2. denial of service scenarios in which a user with write access
  to a local directory uses special characters to make
  synchronization fail (might have security relevance in some
  scenarios)

Note that you can still make synchronization fail, because it calls
rsync to perform the synchronization.

See https://github.com/therealmik/rsync-collision for some precomputed blocks

Regards,
  Michael


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#764630: missing JNI path in jarwrapper

2014-11-21 Thread Emmanuel Bourg
On Thu, 30 Oct 2014 10:36:02 +0100 Mathieu Malaterre ma...@debian.org
wrote:

 Currently jarwrapper is used as backend for binfmts (not sure why this
 is not jexec). Anyway the script is incomplete, now that we have
 multi-arch JNI location:

This is tricky, because if we add the multi arch path based on the
output of dpkg-architecture, we'll still get an error with a 32 bits JRE
on a 64 bits system. The java.library.path parameter would point to
/usr/lib/x86_64-linux-gnu when it should actually include
/usr/lib/i386-linux-gnu.

A solution would be to remove the java.library.path parameter from
jarwrapper. The openjdk-*-jre packages already include the right
multiarch path so it's not necessary to add this parameter in this case
(I verified dicomscope starts without it). But if an Oracle VM is used
instead it would still break.

Emmanuel Bourg


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770314: RFP: gpcslots2 -- text console casino for *nix

2014-11-21 Thread Stephen Gran
Hi,

This is code by someone who routinely trolls Debian.  I doubt we want
any more poisonous upstreams in Debian, so I at least would prefer this
never get packaged.

Cheers,
-- 
 -
|   ,''`.Stephen Gran |
|  : :' :sg...@debian.org |
|  `. `'Debian user, admin, and developer |
|`- http://www.debian.org |
 -


signature.asc
Description: Digital signature


Bug#770451: unblock: direwolf/1.0-2

2014-11-21 Thread Iain R. Learmonth
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package direwolf

The version in unstable (1.0-2) fixes RC bug #768223.

unblock direwolf/1.0-2

-- System Information:
Debian Release: 7.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686-bigmem (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
diff -Nru direwolf-1.0/debian/changelog direwolf-1.0/debian/changelog
--- direwolf-1.0/debian/changelog	2014-10-11 18:54:53.0 +0100
+++ direwolf-1.0/debian/changelog	2014-11-07 13:41:03.0 +
@@ -1,3 +1,10 @@
+direwolf (1.0-2) unstable; urgency=medium
+
+  * No longer install the ll2utm or utm2ll binaries or man pages. (Closes:
+#768223)
+
+ -- Iain R. Learmonth i...@fsfe.org  Fri, 07 Nov 2014 13:40:27 +
+
 direwolf (1.0-1) unstable; urgency=medium
 
   * Initial release. (Closes: #759639)
diff -Nru direwolf-1.0/debian/manpages/ll2utm.1 direwolf-1.0/debian/manpages/ll2utm.1
--- direwolf-1.0/debian/manpages/ll2utm.1	2014-10-11 18:07:09.0 +0100
+++ direwolf-1.0/debian/manpages/ll2utm.1	1970-01-01 01:00:00.0 +0100
@@ -1,36 +0,0 @@
-
-.TH ll2utm 1 September 2014 ll2utm(1) Ham Radio Applications
-
-.SH NAME
-\fBll2utm\fR \- Latitude / Longitude to UTM conversion
-
-.SH SYNOPSIS
-
-\fBll2utm\fR \fBlatitude\fR \fBlongitude\fR
-
-.SH OPTIONS
-
-The latitude and longitude must be in decimal degrees. Use negative for south or west.
-
-.SH AUTHORS
-
-Dire Wolf is Copyright \(co 2011-2014 John Langner WB2OSZ\.
-
-.SH COPYRIGHT
-.br
-This manual page is Copyright \(co 2014 Iain R. Learmonth\.
-.br
-.PP
-This manual page was written for the Debian system (but may be used by others)\.
-.PP
-Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or (at your option) any later version published by the Free Software Foundation\.
-.PP
-On Debian systems, the complete text of the GNU General Public License can be found in
-/usr/share/common\-licenses/GPL-2\.
-
-.SH SEE ALSO
-
-direwolf(1), utm2ll(1)
-
-.sp
-
diff -Nru direwolf-1.0/debian/manpages/utm2ll.1 direwolf-1.0/debian/manpages/utm2ll.1
--- direwolf-1.0/debian/manpages/utm2ll.1	2014-10-11 18:07:09.0 +0100
+++ direwolf-1.0/debian/manpages/utm2ll.1	1970-01-01 01:00:00.0 +0100
@@ -1,41 +0,0 @@
-
-.TH utm2ll 1 September 2014 utm2ll(1) Ham Radio Applications
-
-.SH NAME
-\fButm2ll\fR \- UTM to Latitude / Longitude conversion
-
-.SH SYNOPSIS
-
-\fButm2ll\fR \fBzone\fR \fBeasting\fR \fBnorthing\fR
-
-.SH OPTIONS
-
-.PP
-zone \- UTM zone 1 thru 60 with optional latitudinal band
-.PP
-easting \- x coordinate in meters
-.PP
-northing \- y coordinate in meters
-
-.SH AUTHORS
-
-Dire Wolf is Copyright \(co 2011-2014 John Langner WB2OSZ\.
-
-.SH COPYRIGHT
-.br
-This manual page is Copyright \(co 2014 Iain R. Learmonth\.
-.br
-.PP
-This manual page was written for the Debian system (but may be used by others)\.
-.PP
-Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or (at your option) any later version published by the Free Software Foundation\.
-.PP
-On Debian systems, the complete text of the GNU General Public License can be found in
-/usr/share/common\-licenses/GPL-2\.
-
-.SH SEE ALSO
-
-direwolf(1), ll2utm(1)
-
-.sp
-
diff -Nru direwolf-1.0/debian/patches/makefile_install.patch direwolf-1.0/debian/patches/makefile_install.patch
--- direwolf-1.0/debian/patches/makefile_install.patch	2014-10-11 18:07:09.0 +0100
+++ direwolf-1.0/debian/patches/makefile_install.patch	2014-11-07 13:32:33.0 +
@@ -35,8 +35,8 @@
 +	install decode_aprs debian/direwolf/usr/bin
 +	install text2tt debian/direwolf/usr/bin
 +	install tt2text debian/direwolf/usr/bin
-+	install ll2utm debian/direwolf/usr/bin
-+	install utm2ll debian/direwolf/usr/bin
++	#install ll2utm debian/direwolf/usr/bin
++	#install utm2ll debian/direwolf/usr/bin
 +	install aclients debian/direwolf/usr/bin
 +	install -D --mode=644 tocalls.txt debian/direwolf-docs/usr/share/direwolf/tocalls.txt
 +	install -D --mode=644 symbols-new.txt debian/direwolf-docs/usr/share/direwolf/symbols-new.txt


Bug#760426: [systemd] Logs gone after moving to systemd

2014-11-21 Thread Gergely Nagy
Control: retitle -1 syslog-ng: Remove dangling syslog.service symlink in preinst
Control: tag -1 help

The same dance will need to be done for syslog-ng-core (which ships
syslog-ng.service) that rsyslog will be doing (see #741496). It's
blocked until the proper steps to do the syslog.service transfer are
figured out.

-- 
|8]


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770450: gcc-snapshot: ICE with -O2 -fsanitize=undefined

2014-11-21 Thread Vincent Lefevre
Package: gcc-snapshot
Version: 20141118-1
Severity: important
Tags: upstream
Forwarded: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64016

$ gcc-snapshot -O2 -fsanitize=undefined -c gcc-ice.c
gcc: internal compiler error: Segmentation fault (program cc1)
Please submit a full bug report,
with preprocessed source if appropriate.
See file:///usr/share/doc/gcc-snapshot/README.Bugs for instructions.

with:

void foo (void);

void tst (void)
{
  int px, py, e;
  for (py = 3; py = 136; py++)
for (px = 32; px = 160; px += 32)
  for (e = py - 2; e = 0; e--)
foo ();
}

This was found when compiling GNU MPFR (tests/tget_f.c).

This is a regression. There is no such problem with 20141016-1.

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gcc-snapshot depends on:
ii  binutils 2.24.90.2014-2
ii  libasound2   1.0.28-1
ii  libatk1.0-0  2.14.0-1
ii  libc62.19-13
ii  libc6-dev2.19-13
ii  libc6-dev-i386   2.19-13
ii  libc6-dev-x322.19-13
ii  libc6-i386   2.19-13
ii  libc6-x322.19-13
ii  libcairo21.14.0-2.1
ii  libecj-java  3.10.1-1
ii  libfontconfig1   2.11.0-6.2
ii  libfreetype6 2.5.2-2
ii  libgdk-pixbuf2.0-0   2.31.1-2+b1
ii  libglib2.0-0 2.42.1-1
ii  libgmp10 2:6.0.0+dfsg-6
ii  libgtk2.0-0  2.24.25-1
ii  libice6  2:1.0.9-1
ii  libisl10 0.12.2-2
ii  libmpc3  1.0.2-1
ii  libmpfr4 3.1.2-1
ii  libpango-1.0-0   1.36.8-3
ii  libpangocairo-1.0-0  1.36.8-3
ii  libpangoft2-1.0-01.36.8-3
ii  libsm6   2:1.2.2-1
ii  libxrandr2   2:1.4.2-1+b1
ii  libxrender1  1:0.9.8-1+b1
ii  libxtst6 2:1.2.2-1+b1
ii  python   2.7.8-2
ii  zlib1g   1:1.2.8.dfsg-2

gcc-snapshot recommends no packages.

Versions of packages gcc-snapshot suggests:
ii  binutils [binutils-gold]  2.24.90.2014-2

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770417: calendarserver: please do not run as root

2014-11-21 Thread Ximin Luo
On 21/11/14 04:12, Ximin Luo wrote:
 The log says
 
 [-] /usr/lib/python2.7/dist-packages/twisted/python/util.py:753: 
 exceptions.UserWarning: tried to drop privileges and setuid 135 but uid is 
 already 135; should we be root? Continuing.
 
 but this is just a warning; nothing bad has happened yet.
 

Ah, this is because caldavd.plist has UserName and GroupName entries to drop 
privileges. We can get rid of these if we use `-u caldavd -g caldavd` to run 
directly as non-root, and the log warning disappears.

I recommend this approach, simply because this means you configure the db with 
a simple calendarserver_bootstrap_database without any config changes to 
postgresql. In fact, you could even put this in calendarserver's postinst, and 
uncomment the necessary part of caldavd.plist to enable peer authentication. 
Then, calendarserver would work out of the box, so users would avoid having 
to follow the instructions in README.Debian and avoiding things like #746977.

Patch for caldavd.plist supplied.

X

-- 
GPG: 4096R/1318EFAC5FBBDBCE
git://github.com/infinity0/pubkeys.git
--- caldavd.plist.dpkg-dist	2014-11-21 11:35:48.038420816 +
+++ caldavd.plist	2014-11-21 11:35:55.590420624 +
@@ -84,12 +85,10 @@
 string/var/lib/caldavd/string
 
 !-- Database connection --
-!--
 keyDBType/key
 stringpostgres/string
 keyDSN/key
 string:caldav:caldavd:::/string
- --
 
 !-- Data root --
 keyDataRoot/key
@@ -494,12 +493,6 @@
 Process management
   --
 
-keyUserName/key
-stringcaldavd/string
-
-keyGroupName/key
-stringcaldavd/string
-
 keyProcessType/key
 stringCombined/string
 


Bug#770342: [Pkg-sysvinit-devel] Bug#770342: dashism in /etc/init.d/bootlogs ?

2014-11-21 Thread Harald Dunkel
On Fri, 21 Nov 2014 11:45:15 +0100
Petter Reinholdtsen p...@hungry.com wrote:

 [Harald Dunkel]
  Is there something unusual?
 
 Not that I can see, no. :( The 255 file descriptor was a bit unexpected
 to me, but I guess that is how the shell work.
 
 Is this different when using bash?
 

This *is* bash. Using /bin/sh -- dash it doesn't get stuck, making
it almost impossible to check /proc. 

bash on Wheezy doesn't get stuck, either.


Regards
Harri


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#730666: python-netcd4 ITP

2014-11-21 Thread Alastair McKinstry

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi,

Relevant to this ITP a discussion on debian-science (see the link from
the wiki  here:
https://wiki.debian.org/DebianScience/Meteorology ).

Its important that the python/netcdf objects we use are compatible.
Is python-netcdf4 compatible with scipy netcdf ? can /should they be merged?

Can we track the details on the wiki?

regards
Alastair

- -- 
Alastair McKinstry, alast...@sceal.ie, mckins...@debian.org,
https://diaspora.sceal.ie/u/amckinstry
Software is like Poetry - most of it shouldn't have been written.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
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=iTFG
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#749722: libsss-sudo: modified /etc/nsswitch.conf after purge

2014-11-21 Thread Andreas Beckmann
On 2014-11-21 07:09, Timo Aaltonen wrote:
 So I guess it would make sense for base-files to add sudoers: files to
 the default nsswitch.conf?

Yes. Could you file a bug, please?

Andreas

PS: I didn't check in detail, but may sudo-ldap need this entry, too?


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770452: tpb: [INTL:pt_BR] Brazilian Portuguese debconf templates translation

2014-11-21 Thread Adriano Rafael Gomes
Package: tpb
Tags: l10n patch
Severity: wishlist

Hello,

Please, Could you update the Brazilian Portuguese Translation?

Attached you will find the file pt_BR.po. It is UTF-8 encoded and it is
tested with msgfmt and podebconf-display-po.

Kind regards.


pt_BR.po.gz
Description: Binary data


signature.asc
Description: Digital signature


Bug#767055: gtk3.14 systray applets have awkward mouse click behaviour (was: Re: Bug#765964: mate-panel: Some notification menus hide on mouse up in notification area)

2014-11-21 Thread Andreas Henriksson
Hello Matt!

Thanks for working on getting the package unblocked.

On Thu, Nov 20, 2014 at 10:45:29PM -0500, Matt Horan wrote:
 Thanks Andreas!
 
 I verified that the version in unstable resolves the issue. I did not
 see an unblock request for the unstable version, so I filed #770414.

I see you've run into problems with the unblock request.

Please carefully read and follow the instructions for how to request
an unblock.
Please look at other resolved unblock requests for examples.
Please read up on other information about the procedure, eg. like
release-team information posted to debian-devel-announce,
http://www.jwiltshire.org.uk/content/blog/ , etc.

It is important to get things right from the start. Please
make sure your second attempt to get an unblock is as perfect
as possible, because the release team is very busy and you
only get a limited number of tries. You should not blindly
assume a third attempt to get release-team attention even exits.

Good luck!

Regards,
Andreas Henriksson


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#727649: syslog-ng memory leak when using templated filenames and rewrite rules

2014-11-21 Thread Gergely Nagy
Control: forwarded -1 https://github.com/balabit/syslog-ng/issues/308
Control: tag -1 upstream
Control: found -1 3.5.6-2
Control: found -1 3.6.1-1

I managed to reproduce the problem on the latest upstream version too,
and forwarded it upstream. During my tests, it seemed that the
unix-stream() source file was opened many many times, which would easily
explain the leak.

Can you check what happens in your case? Also, does the problem persist
if you use unix-dgram() for /dev/log, instead of unix-stream()?

-- 
|8]


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#768332: marked as done (lightspark FTBFS on arm64. fatal error: llvm/IR/Verifier.h: No such file or directory)

2014-11-21 Thread Jonathan Wiltshire

Control: notfound -1 0.7.2-6


On Fri, 21 Nov 2014 03:21:18 + peter green plugwash-
urg...@p10link.net wrote:

Anton Gladky wrote:
 WB-team, please give back this package on arm64.
 I have just checked it on asachi.debian.org and it builds
 fine.

 gb lightspark_0.7.2-6 . arm64
  =20
Ok, closing the bug.


Closing versioned=E2=80=A6

Cheers, OdyX


That makes no sense, it can't be present and fixed in the same version.

--
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

directhex i have six years of solaris sysadmin experience, from
8-10. i am well qualified to say it is made from bonghits
layered on top of bonghits


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770414: unblock: gtk+3.0/3.14.5-1

2014-11-21 Thread Andreas Henriksson
Hello!

On Fri, Nov 21, 2014 at 05:51:36AM +, Adam D. Barratt wrote:
 Control: tags -1 + moreinfo
[...]
 That would need someone to provide the information requested in
 https://release.debian.org/jessie/freeze_policy.html#getting-unblocks

Matt is aware of this information already. Hopefully he'll follow
up with additional information as requested soon.
I'd expect that a filtered diff would be appreciated so the release-team
don't have to look at for example the changes only relevant for Windows
and OS X.

 
 Personally, I'd also like some input from the maintainers, as it's not
 at all clear to me whether they were intending to try and get that
 version in to jessie.

I can't speak for pochus intentions with the upload, but he should be
well aware of our freeze situation which probably meant he intended it
to go into Jessie. I don't see any reason not to include it in Jessie so
ACK from me.

Regards,
Andreas Henriksson


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#760414: [ola] Some sources are not included in your package

2014-11-21 Thread Scott Kitterman
On Wed, 17 Sep 2014 17:18:30 +0200 Wouter Verhelst wou...@debian.org wrote:
 severity 760414 wishlist
 tags 760414 + wontfix
 thanks
 
 Hi Bastien,
 
 On Wed, Sep 03, 2014 at 10:24:44PM +, bastien ROUCARIES wrote:
  Hi,
  
  Your package seems to include some files that lack sources
  in prefered forms of modification:
  
  tools/rdm/static/jquery-1.7.2.min.js
  tools/rdm/static/jquery-ui-1.8.21.custom.min.js
 
 These are not used. Instead, the package replaces them with symlinks to
 the same files from the jquery package, and depends on them.
 
 In my reading of the DFSG, this satisfies DFSG#2.
 
  According to Debian Free Software Guidelines [1] (DFSG) #2:
   The program must include source code, and must allow distribution 
in source code as well as compiled form..
 
 Correct.
 
 That does not say the program must not include convenience copies of
 other free software which is shipped without source. I see no problem
 here.
 
 jquery is _used by_ ola, in very much the same way that libc and
 libstdc++ are used by it as well. The source to jquery is therefore not
 part of the source to ola, and I see no need to either ship its source,
 or remove it from the package.
 
 I agree that would be necessary in case jquery were non-free software.
 That is not the case, however.
 
  This could also constitute a license violation for some copyleft
  licenses such as the GNU GPL.
 
 JQuery has the MIT license as an alternate option, according to its
 copyright file, so that's not relevant.
 
 [...]

Your analysis is rather different than that of the FTP Team.  See 
https://lists.debian.org/msgid-search/1948618.u6YZvnFvaf@scott-latitude-e6320

Please readjust the severity back to serious.  That is the correct value.

Scott K

signature.asc
Description: This is a digitally signed message part.


Bug#770414: unblock: gtk+3.0/3.14.5-1

2014-11-21 Thread Adam D. Barratt

On 2014-11-21 12:08, Andreas Henriksson wrote:

I can't speak for pochus intentions with the upload, but he should be
well aware of our freeze situation


Well indeed. :-)


which probably meant he intended it
to go into Jessie. I don't see any reason not to include it in Jessie 
so

ACK from me.


As you know, the question isn't really why shouldn't it be included, 
more the positive reverse. Anyway, let's see...


Regards,

Adam


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770453: ufw: [INTL:pt_BR] Brazilian Portuguese debconf templates translation

2014-11-21 Thread Adriano Rafael Gomes
Package: ufw
Tags: l10n patch
Severity: wishlist

Hello,

Please, Could you update the Brazilian Portuguese Translation?

Attached you will find the file pt_BR.po. It is UTF-8 encoded and it is
tested with msgfmt and podebconf-display-po.

Kind regards.


pt_BR.po.gz
Description: Binary data


signature.asc
Description: Digital signature


Bug#767978: minidlna doesn not start at boot because network not yet up

2014-11-21 Thread JPT
Hi,

minidlna does not start at boot time because the net is not yet up.

[2014/11/21 12:59:06] getifaddr.c:73: error: ioctl(s, SIOCGIFADDR, ...):
Cannot assign requested address
[2014/11/21 12:59:06] getifaddr.c:73: error: ioctl(s, SIOCGIFADDR, ...):
Cannot assign requested address
[2014/11/21 12:59:06] minidlna.c:761: No IP address automatically detected!
[2014/11/21 12:59:06] minidlna.c:786: error: Usage:
[...]

I tried to solve the issue by moving all rc#.d/S07minidlna links to
rc#.d/S20minidlna
but this did not help.

Jan


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770133: 770133

2014-11-21 Thread Sébastien Delafond
The github version (7c37de0) works fine here with python-gflags
1.5.1-2. Extra packages I had to install:

  python-gflags:all 1.5.1-2
  python-httplib2:all 0.9+dfsg-2
  python-tz:all 2012c+dfsg-0.1
  python-google-apputils:all 0.4.1-1
  python-uritemplate:all 0.6-1
  python-oauth2client:all 1.2-3
  python-googleapi:all 1.2-3

Cheers,

--Seb


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770454: uptimed: [INTL:pt_BR] Brazilian Portuguese debconf templates translation

2014-11-21 Thread Adriano Rafael Gomes
Package: uptimed
Tags: l10n patch
Severity: wishlist

Hello,

Please, Could you update the Brazilian Portuguese Translation?

Attached you will find the file pt_BR.po. It is UTF-8 encoded and it is
tested with msgfmt and podebconf-display-po.

Kind regards.


pt_BR.po.gz
Description: Binary data


signature.asc
Description: Digital signature


Bug#770455: activemq: apt-get purge doesn't remove the symlinks in /etc/activemq/instances-enabled

2014-11-21 Thread Emmanuel Bourg
Source: activemq
Version: 5.6.0+dfsg1-2
Severity: normal

Purging an activemq installation leaves the symlinks in 
/etc/activemq/instances-enabled:

ebourg@icare:~$ sudo apt-get purge activemq
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be REMOVED:
  activemq*
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 223 kB disk space will be freed.
Do you want to continue? [Y/n]
(Reading database ... 235094 files and directories currently installed.)
Removing activemq (5.6.0+dfsg1-2) ...
[ ok ] Stopping ActiveMQ instance: activemq main (stopped).
Purging configuration files for activemq (5.6.0+dfsg1-2) ...
Removing user `activemq' ...
Warning: group `activemq' has no more members.
Done.
dpkg: warning: while removing activemq, directory 
'/etc/activemq/instances-enabled' not empty so not removed

ebourg@icare:~$ ls -l /etc/activemq/
total 20
drwxr-xr-x   3 root root  4096 Nov 21 13:12 .
drwxr-xr-x 148 root root 12288 Nov 21 13:12 ..
drwxr-xr-x   2 root root  4096 Sep 29 11:22 instances-enabled

ebourg@icare:~$ ls -l /etc/activemq/instances-enabled/main
lrwxrwxrwx 1 root root 38 Sep 29 11:22 /etc/activemq/instances-enabled/main 
- /etc/activemq/instances-available/main


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#734377: RFP: carbonate -- some primitive tools to help you manage your graphite clusters

2014-11-21 Thread Filippo Giunchedi
On Mon, Jan 06, 2014 at 04:22 PM, Andreas Rütten wrote:
 
 Package: wnpp
 Severity: wishlist
 X-Debbugs-CC: pkg-graphite-ma...@lists.alioth.debian.org
 
 
 * Package name: carbonate
   Version : 0.2.0

hi,
a new upstream version has been released, I'm willing to sponsor the
upload if you are still looking for one. AFAICT the package hasn't been
uploaded yet.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770412: grub-xen: fails to install in a chroot

2014-11-21 Thread Ian Campbell
On Fri, 2014-11-21 at 04:02 +0100, Andreas Beckmann wrote:
 during a test with piuparts I noticed your package failed to install. As
 per definition of the release team this makes the package too buggy for
 a release, thus the severity.

Thanks.

It seems like https://piuparts.debian.org/sid/source/g/grub2.html
doesn't show this result yet, I suppose this was run manually and/or by
some other service? (or maybe there is some lag in the index?). Does
really matter, I just wanted to check the status of the other grub-*
packages.

Looking at https://piuparts.debian.org/jessie/source/g/grub2.html it
seems the test passed for other grub-* packages, e.g. grub-pc and
grub-efi, in the previous release. I'm a bit confused by this since at
least on first glance most of the related code seems to be the same in
grub-xen as in those others.

Is it expected that the chroot in a piuparts test won't have a /dev
mounted? What about /sys and /proc?

I take it there is no piuparts overrides in place for the other grub-*
packages?

Anyway, I'll investigate, thanks for bringing this to my attention.

Ian.

 From the attached log (scroll to the bottom...):
 
   Selecting previously unselected package grub-xen.
   (Reading database ... 8098 files and directories currently installed.)
   Preparing to unpack .../grub-xen_2.02~beta2-16_amd64.deb ...
   Unpacking grub-xen (2.02~beta2-16) ...
   Setting up grub-xen (2.02~beta2-16) ...
   
   Creating config file /etc/default/grub with new version
   Installing for x86_64-xen platform.
   grub-install: error: cannot find a device for /boot/grub (is /dev mounted?).
   dpkg: error processing package grub-xen (--configure):
subprocess installed post-installation script returned error exit status 1
   Errors were encountered while processing:
grub-xen
 
 
 cheers,
 
 Andreas
 ___
 Pkg-grub-devel mailing list
 pkg-grub-de...@lists.alioth.debian.org
 http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-grub-devel


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#769843: dpkg-maintscript-helper: Wrong pre-dependency information in man page

2014-11-21 Thread Raphael Hertzog
Hi,

On Fri, 21 Nov 2014, Stefan Fritsch wrote:
 On Monday 17 November 2014 01:43:46, Guillem Jover wrote:
  I've fixed this now locally by bumping the version for both symlink
  commands to just 1.17.14, which avoids translation work, and
  targetting 1.17.22.
 
 Thanks. It seems a build-depends is also required, see #770421. Maybe 
 you should mention that in the man page, too?

Technically, it's debhelper (dh_installdeb) that needs to be updated in
Build-Depends. You need debhelper = 9.20131213 (first version that knew
about that command).

And you want to file a bug report against debhelper so that it generates
a pre-dependency with 1.17.14 instead of 1.17.5.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770456: Please start a qemu process in domain 0.

2014-11-21 Thread Ian Campbell
Package: xen-utils-common
Version: 4.4.0-1
Severity: important
Tags: patch

Under some circumstances the xl toolstack needs to create a loopback
mount of a guest disk in dom0 (e.g. in order to run pygrub). Depending
on the nature of the guest disk (e.g. qcow2 or raw file image based)
this can require a qemu instance in dom0.

The upstream xencommons starts such a qemu on boot. The following patch
adds this to the Debian packages init script as well.

Once I have a bug number for this I will add it to debian/changelog and
push the result to feature/bug as usual.

Thanks,
Ian.

commit 26cce2a65c77f731e23a1395f1fe4a5da47287a4
Author: Ian Campbell i...@debian.org
Date:   Fri Nov 21 11:27:45 2014 +

Start a qemu process in dom0 to service the toolstacks loopback disk 
attaches.

This is used to e.g. run pygrub on a VM with a qcow2 disk image.

Also, remove correct pidfile when stopping xenconsoled.

diff --git a/debian/changelog b/debian/changelog
index 484583f..ff48d6a 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,12 @@
+xen (4.4.1-4) UNRELEASED; urgency=medium
+
+  [ Ian Campbell ]
+  * Start a qemu process in dom0 to service the toolstacks loopback disk
+attaches.
+  * Remove correct pidfile when stopping xenconsoled.
+
+ -- Ian Campbell i...@debian.org  Fri, 21 Nov 2014 11:26:40 +
+
 xen (4.4.1-3) unstable; urgency=medium
 
   [ Bastian Blank ]
diff --git a/debian/xen-utils-common.xen.init b/debian/xen-utils-common.xen.init
index b903877..e5f1702 100644
--- a/debian/xen-utils-common.xen.init
+++ b/debian/xen-utils-common.xen.init
@@ -37,6 +37,9 @@ XENCONSOLED=$ROOT/bin/xenconsoled
 XENCONSOLED_PIDFILE=/var/run/xenconsoled.pid
 XENSTORED=$ROOT/bin/xenstored
 XENSTORED_PIDFILE=/var/run/xenstore.pid
+QEMU=/usr/bin/qemu-system-i386
+QEMU_PIDFILE=/var/run/qemu-dom0.pid
+QEMU_ARGS=-xen-domid 0 -xen-attach -name dom0 -nographic -M xenpv -daemonize 
-monitor /dev/null -serial /dev/null -parallel /dev/null
 
 modules_setup()
 {
@@ -179,10 +182,65 @@ xenconsoled_stop_real()
[ $RETVAL = 2 ]  return 2
start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec 
$XENCONSOLED
[ $? = 2 ]  return 2
-   rm -f $PIDFILE
+   rm -f $XENCONSOLED_PIDFILE
return $RETVAL
 }
 
+qemu_start()
+{
+   [ -x $QEMU ] || return 0
+   log_progress_msg qemu
+   qemu_start_real
+   return $?
+}
+
+qemu_stop()
+{
+   [ -x $QEMU ] || return 0
+   log_progress_msg qemu
+   qemu_stop_real
+   return $?
+}
+
+qemu_restart()
+{
+   [ -x $QEMU ] || return 0
+   log_progress_msg qemu
+   qemu_stop_real
+   case $? in
+   0|1)
+   qemu_start_real
+   case $? in
+   0) ;;
+   *) return 2 ;;
+   esac
+   ;;
+   *) return 2 ;;
+   esac
+   return 0
+}
+
+qemu_start_real()
+{
+   start-stop-daemon --start --quiet --pidfile $QEMU_PIDFILE --exec 
$QEMU --test  /dev/null \
+   || return 1
+   start-stop-daemon --start --quiet --pidfile $QEMU_PIDFILE --exec 
$QEMU -- \
+   $QEMU_ARGS -pidfile $QEMU_PIDFILE \
+   || return 2
+}
+
+qemu_stop_real()
+{
+   start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile 
$QEMU_PIDFILE --name xenconsoled
+   RETVAL=$?
+   [ $RETVAL = 2 ]  return 2
+   start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec 
$QEMU
+   [ $? = 2 ]  return 2
+   rm -f $QEMU_PIDFILE
+   return $RETVAL
+}
+
+
 xenstored_start()
 {
log_progress_msg xenstored
@@ -227,6 +285,11 @@ case $1 in
0|1) ;;
*) log_end_msg 1; exit ;;
esac
+   qemu_start
+   case $? in
+   0|1) ;;
+   *) log_end_msg 1; exit ;;
+   esac
log_end_msg 0
;;
   stop)
@@ -237,6 +300,11 @@ case $1 in
esac
log_daemon_msg Stopping $DESC
ret=0
+   qemu_stop
+   case $? in
+   0|1) ;;
+   *) ret=1 ;;
+   esac
xend_stop
case $? in
0|1) ;;
@@ -257,6 +325,11 @@ case $1 in
esac
log_daemon_msg Restarting $DESC
ret=0
+   qemu_restart
+   case $? in
+   0|1) ;;
+   *) ret=1 ;;
+   esac
xend_restart
case $? in
0|1) ;;


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770457: eclipse-rcp: debian/rules build-arch does not install some files in eclipse-rcp

2014-11-21 Thread James Cowgill
Package: eclipse-rcp
Version: 3.8.1-5.1
Severity: serious
Justification: Policy 4.9
Control: block 769248 by -1

Hi,

When building eclipse using dpkg-buildpackage -B, some files in the
eclipse-rcp package are not installed. You can see this by comparing the
list of files installed on amd64 vs i386:
 https://packages.debian.org/jessie/amd64/eclipse-rcp/filelist
 https://packages.debian.org/jessie/i386/eclipse-rcp/filelist

Specifically the lack of /usr/share/java/org.eclipse.jface.jar on i386
causes androidsdk-tools to FTBFS.

Looking at debian/rules, the org.eclipse.jface part near the bottom
needs to be moved from the arch-independent section to the
arch-dependent section.

Thanks,
James

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


Bug#766670: Security fix without feature enhancement for 4.32.0 and 4.20.0

2014-11-21 Thread Osamu Aoki
(resent after subscribing with proper return path mail address)
Hi,

In Debian, its security update policy prohibits any new feature added
with security updates.

There are needs for updating 4.32.0 and 4.20.0 for the MITM security
issues.  
 CVE-2014-7273
 CVE-2014-7274
 CVE-2014-7275

I for one as being its maintainer in Debian see it theoretically
possible but am scared to make mistakes when dropping non-security fix
changes.
  https://bugs.debian.org/766670

Someone suggested Maybe you can ask upstream if they are willing to
point you the correct set of commits?.

Can someone tell me such answer?

I will be happy to get either Yes or No as the answer.

Regards,

Osamu


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770458: mono-xsp4: Please add native systemd unit

2014-11-21 Thread Felipe Sateler
Package: mono-xsp4
Version: 3.8-2
Severity: wishlist
Tags: patch

Hi,

A native serviec file for mono-xsp4 would be very useful. Please find
attached one that works here.

I have discarded the contents of the default file since:

a) Modifying arguments in systemd should be done on by override files
b) Some variables were not read by the current init script



-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages mono-xsp4 depends on:
ii  debconf [debconf-2.0]1.5.53
ii  libc62.19-13
ii  libmono-corlib4.5-cil3.10.0-0xamarin2
ii  libmono-security4.0-cil  3.10.0-0xamarin2
ii  libmono-system-configuration4.0-cil  3.10.0-0xamarin2
ii  libmono-system-data4.0-cil   3.10.0-0xamarin2
ii  libmono-system-web4.0-cil3.10.0-0xamarin2
ii  libmono-system4.0-cil3.10.0-0xamarin2
ii  mono-runtime 3.10.0-0xamarin2
ii  mono-xsp4-base   3.8-2
ii  procps   2:3.3.9-8

mono-xsp4 recommends no packages.

mono-xsp4 suggests no packages.

-- debconf information excluded
[Unit]
Description=XSP 4.0 WebServer
Wants=network.target
ConditionFileNotEmpty=/etc/xsp4/debian.webapp
ConditionDirectoryNotEmpty=/etc/xsp4/conf.d

[Service]
Type=simple
User=www-data
Group=www-data
ExecStart=/usr/bin/xsp4 --port 8084 --address 0.0.0.0 --appconfigdir /etc/xsp4 
--nonstop
Restart=on-failure

[Install]
WantedBy=multi-user.target


Bug#770459: openrc: FTBFS on ppc64el

2014-11-21 Thread Julián Moreno Patiño
Package: openrc
Version: 0.13.1-4
Severity: serious

Hello,

openrc 0.13.1-4 FTBFS on ppc64el:

https://buildd.debian.org/status/fetch.php?pkg=openrcarch=ppc64elver=0.13.1-4stamp=1414375745

Relevant part:

 * Checking exported symbols in libeinfo.so (data) ... [ ok ]
 * Checking exported symbols in libeinfo.so (functions) ... [ ok ]
 * Checking exported symbols in librc.so (data) ... [ ok ]
 * Checking exported symbols in librc.so (functions) ... [ ok ]

 * Missing hidden defs:$\nrc_deptree_unapm_getdependencies
   [ !! ]
 * Checking hidden functions in librc.so ... * Checking trailing whitespace in 
code ... [ ok ]
 * Checking trailing newlines in code ... [ ok ]
 * Checking for obsolete functions ... [ ok ]
 * Checking for x* func usage ... [ ok ]
 * Checking spacing style ... [ ok ]
 * Running unit tests
 *   is_older_than ... [ ok ]
make[3]: *** [test] Error 1
make[2]: *** [test] Error 2
make[1]: *** [test] Error 2
dh_auto_test: make -j1 test returned exit code 2
Makefile:8: recipe for target 'test' failed
make[3]: Leaving directory '/«PKGBUILDDIR»/src/test'
../mk/subdir.mk:27: recipe for target 'test' failed
make[2]: Leaving directory '/«PKGBUILDDIR»/src'
mk/subdir.mk:27: recipe for target 'test' failed
make[1]: Leaving directory '/«PKGBUILDDIR»'
make: *** [build-arch] Error 2
debian/rules:27: recipe for target 'build-arch' failed
dpkg-buildpackage: error: debian/rules build-arch gave error exit status 2


Right now ppc64el is a release arch, please see Architectures item:

https://lists.debian.org/debian-devel-announce/2014/11/msg5.html

Thanks in advance.

Kind regards,

-- 
Julián Moreno Patiño
Debian Developer
 .''`. Debian GNU/{Linux,KfreeBSD}
: :' : Free Operating Systems
`. `'  http://debian.org/
  `-   GPG Fingerprint:
C2C8 904E 314C D8FA 041D 9B00 D5FD FC15 6168 BF60
Registered GNU Linux User ID 488513


signature.asc
Description: Digital signature


Bug#770451: unblock: direwolf/1.0-2

2014-11-21 Thread Jonathan Wiltshire

Control: tag -1 moreinfo

On 2014-11-21 11:22, Iain R. Learmonth wrote:

The version in unstable (1.0-2) fixes RC bug #768223.


If the conflicting package is not in Jessie or Sid, why not just
break+replace it?

--
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

directhex i have six years of solaris sysadmin experience, from
8-10. i am well qualified to say it is made from bonghits
layered on top of bonghits


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770414: unblock: gtk+3.0/3.14.5-1

2014-11-21 Thread Jonathan Wiltshire

Control: tag -1 confirmed

On 2014-11-21 04:13, Matt Horan wrote:

The issue was fixed in upstream commit d9a433d [1], which applies
cleanly to the version in testing (3.14.4-2). If a patch would be
preferred over a new version, I can confirm the patch works for me.


Yes, please.

--
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

directhex i have six years of solaris sysadmin experience, from
8-10. i am well qualified to say it is made from bonghits
layered on top of bonghits


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770460: xen-utils-X.Y should recommend grub-xen-host

2014-11-21 Thread Ian Campbell
Package: xen-utils-4.4
Version: 4.4.0-1
Tags: patch

grub-xen-host implements the dom0 side of the x86 pv bootloader
protocol[0] and is now in unstable. This enables the use of pvgrub2 in
preference to the less secure pygrub.

The following patch makes the (trivial) change. Once I have a bug number
I will add the Closes: and push to a feature/bug branch.

Ian.

[0] http://xenbits.xen.org/docs/unstable/misc/x86-xenpv-bootloader.html

commit d9b0a811eea731cc8bedfdea73e8699c8fe68812
Author: Ian Campbell i...@debian.org
Date:   Fri Nov 21 13:15:15 2014 +

xen-utils recommends grub-xen-host package.

diff --git a/debian/changelog b/debian/changelog
index 484583f..6a31d15 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+xen (4.4.1-4) UNRELEASED; urgency=medium
+
+  [ Ian Campbell ]
+  * xen-utils recommends grub-xen-host package.
+
+ -- Ian Campbell i...@debian.org  Fri, 21 Nov 2014 13:06:49 +
+
 xen (4.4.1-3) unstable; urgency=medium
 
   [ Bastian Blank ]
diff --git a/debian/templates/control.utils.in 
b/debian/templates/control.utils.in
index e1acd40..71f7b35 100644
--- a/debian/templates/control.utils.in
+++ b/debian/templates/control.utils.in
@@ -1,6 +1,6 @@
 Package: xen-utils-@version@
 Depends: ${shlibs:Depends}, ${misc:Depends}, ${python:Depends}, 
xen-utils-common (= ${source:Version})
-Recommends: bridge-utils, libc6-xen [i386], xen-hypervisor-@version@, 
qemu-system-x86
+Recommends: bridge-utils, libc6-xen [i386], xen-hypervisor-@version@, 
qemu-system-x86, grub-xen-host [i386 amd64]
 Provides: xen-utils
 Built-Using: ${misc:Built-Using}
 Description: XEN administrative tools


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770429: marked as done (Pre-approval for unblock: openstack-debian-images/1.0.0)

2014-11-21 Thread Jonathan Wiltshire

Control: reopen -1

Oops.


--
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

directhex i have six years of solaris sysadmin experience, from
8-10. i am well qualified to say it is made from bonghits
layered on top of bonghits


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#746393: confirm the bug.

2014-11-21 Thread Roman
Please update 2.3.2 to 2.3.3 or apply a fix from upstream.
Is it really so hard? We like debian stable, when it and its packages are
stable

-- 
Best regards,
Roman.


Bug#770412: grub-xen: fails to install in a chroot

2014-11-21 Thread Andreas Beckmann
On 2014-11-21 13:42, Ian Campbell wrote:
 On Fri, 2014-11-21 at 04:02 +0100, Andreas Beckmann wrote:
 It seems like https://piuparts.debian.org/sid/source/g/grub2.html
 doesn't show this result yet, I suppose this was run manually and/or by
 some other service? (or maybe there is some lag in the index?). Does
 really matter, I just wanted to check the status of the other grub-*
 packages.

This was a result from my local development piuparts instance. I did not
get any errors for the other grub packages (they either passed (likely)
or could not be tested due to a failing dependency (unlikely) - didn't
check). I usually run different tests, new scripts, changed parameters
than piuparts.d.o, but this failure doesn't look like I caught something
specific to my setup.

piuparts.d.org updates the .html pages and published logfiles twice per
day, so there may be some lag ... and there also seems to be a bit
backlog of packages to be tested right now

 Is it expected that the chroot in a piuparts test won't have a /dev
 mounted? What about /sys and /proc?

There is /dev/null (and some more needed devices, but no hardware
access) and /proc is mounted, but /sys is not. So far this was
sufficient :-)

There is an ischroot command in debianutils.

 I take it there is no piuparts overrides in place for the other grub-*
 packages?

No, they work out-of-the-box now.


Andreas


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#754755: [rt.cpan.org #98683] libinline-java-perl: FTBFS on mips: test suite issues

2014-11-21 Thread Jurica Stanojkovic
Hello,

Firstly, I have applied proposed patch.

patch for Java/JNI.xs:

--- a/Java/JNI.xs
+++ b/Java/JNI.xs
@@ -48,7 +48,7 @@
if ((*(env))-ExceptionCheck(env)){
(*(env))-ExceptionDescribe(env) ;
(*(env))-ExceptionClear(env) ;
-   croak(msg) ;
+   croak(%s, msg) ;
}
 }

Secondly, I have tried to replace CDBS debian/rules in package 
libinline-java-perl file with the folowing debian/rules:

debian/rules:
---
#!/usr/bin/make -f
export PERL_MM_USE_DEFAULT := 1
%:
dh $@
override_dh_auto_configure:
DESTDIR=$$(pwd)/
perl Makefile.PL J2SDK=/usr/lib/jvm/default-java
override_dh_usrlocal:
---

With these changes package does build successfully (using sbuild) on mips, 
mipsel, and i386.

We are not sure why this issue is happening only on mips and not on mipsel, 
i386, etc.
I have noticed that package is also FTBFS on sparc with similar error.
Could somebody please test this on sparc?

Thank you!

Regards,
Jurica




Bug#770332: pu: package dhcpcd5/5.5.6-1

2014-11-21 Thread Salvatore Bonaccorso
Hi Pierre, hi Adam,

On Thu, Nov 20, 2014 at 09:51:51PM +0100, Pierre Schweitzer wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Tested fine here.
 
 Couldn't find any PoC for CVE-2014-6060 though.

I just uploaded the package prepared by Pierre. Only change to
preivous debdiff is the closer for #770043.

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770181: xscreensaver: Fails to properly lock and shut off screen in multiple scenarios

2014-11-21 Thread John Goerzen
On 11/19/2014 02:29 PM, Jamie Zawinski wrote:
 On Nov 19, 2014, at 5:31 AM, John Goerzen jgoer...@complete.org wrote:

 1) The monitor's power is often left on even when the screen is blanked.
 There is no way to fix this, because X11 sucks. 
 http://www.jwz.org/xscreensaver/faq.html#hysteresis
Hi JWZ.  Very nice to hear from you.

I am quite sure it's not just that the mouse is getting bumped, because
I have observed that the monitor will not enter power-saving mode at all
for days, and then after a reboot, it will work again. 


 2) It seems that notifications from Gajim, Psi, etc. will cause the
 screen to re-awaken.
 If by re-awaken you mean powers on, then those apps must be doing that on 
 purpose.

 But maybe you mean this: 
 http://www.jwz.org/xscreensaver/faq.html#popup-windows
Well, both; the monitor powers on and shows those boxes.  (Or, hmm,
perhaps it wasn't powered off in the first place?  I should try to get
some data on that...) 

 3) When moving the mouse or pressing a key to wake up the screen and
 unlock it, frequently the previous content of the screen will show up
 for a few seconds before it is blanked and the logic box shown.
 That's because your machine was suspended -- CPU halted -- and what you are 
 seeing on the screen when it powers back on was put there by BIOS before the 
 CPU started running again. It halted the CPU with the screen not-yet-blanked, 
 from xscreensaver's perspective. Likewise, there is no way to fix this, 
 because Linux sucks.
You know, that is possibly the case indeed.  Thanks.

Thanks for xscreensaver (and Netscape, and XEmace, while I'm at it.) 

John


 --
 Jamie Zawinski  http://www.jwz.org/  http://www.dnalounge.com/




--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770459: openrc: FTBFS on ppc64el

2014-11-21 Thread Jonathan Wiltshire

Control: severity -1 important

On 2014-11-21 13:07, Julián Moreno Patiño wrote:

openrc 0.13.1-4 FTBFS on ppc64el:


It's not a regression, so this is not RC.

Thanks,

--
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

directhex i have six years of solaris sysadmin experience, from
8-10. i am well qualified to say it is made from bonghits
layered on top of bonghits


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#770461: upowerd become crazy after plug in my laptop

2014-11-21 Thread mourad
Package: upower
Version: 0.99.1-3
Severity: important

Dear Maintainer,

   * What led up to the situation?
After standby cycle, using the laptop, and plugged it to power, upowerd become
crazy and start to consume more and more memory and 100% of a cpu !

   * What exactly did you do (or not do) that was effective (or
 ineffective)?
Nothing special but plug the power.

No log are available, if I stop and restart upowerd, all come back to normal...

Just to add some precision, my laptop's got 2 batteries.

Regards

Mourad



-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.17-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages upower depends on:
ii  dbus   1.8.8-2
ii  libc6  2.19-12
ii  libdbus-1-31.8.8-2
ii  libdbus-glib-1-2   0.102-1
ii  libglib2.0-0   2.42.0-2
ii  libgudev-1.0-0 215-5+b1
ii  libimobiledevice4  1.1.6+dfsg-3.1
ii  libplist2  1.11-3
ii  libupower-glib30.99.1-3
ii  libusb-1.0-0   2:1.0.19-1
ii  udev   215-5+b1

Versions of packages upower recommends:
ii  policykit-1  0.112-2

upower suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#767765: libsane: fails to purge

2014-11-21 Thread Jörg Frings-Fürst
Hello Andreas,

Am Dienstag, den 11.11.2014, 23:45 +0100 schrieb Andreas Beckmann:
 On Sun, 02 Nov 2014 19:45:53 +0100
 =?ISO-8859-1?Q?J=F6rg_Frings=2DF=FCrst?= deb...@jff-webhosting.net wrote:
+ the version 1.0.24-4 was uploaded at 2014-10-27
+ there are a bug with the same issue[2], which was fixed in version 
  1.0.24-4 and marked as done.
+ in debian/changelog are a tag about that bug.
 
 Do you plan to get this unblocked for jessie? It's currently blocking
 30+ packages in jessie from being tested with piuparts ...
 

It's unblocked now.

 
 Andreas
 

CU
Jörg


-- 
pgp Fingerprint: 7D13 3C60 0A10 DBE1 51F8  EBCB 422B 44B0 BE58 1B6E
pgp Key: BE581B6E
CAcert Key S/N: 0E:D4:56

Jörg Frings-Fürst
D-54526 Niederkail

Threema: SYR8SJXB

IRC: j_...@freenode.net
 j_...@oftc.net


signature.asc
Description: This is a digitally signed message part


Bug#768548: rpcbind: LSB headers should provide $portmap virtual facility

2014-11-21 Thread Patrick Matthäi

Hello systemd maintainers,

please CC me in your e-mails, I'm not subscribed to this list.

Am 20.11.2014 um 17:31 schrieb Simon McVittie:
It seems to me as though your dependency cycle is caused by 
vmware-tools.service. Please try removing the X-Start-Before from it 
and see whether that helps. If further analysis of your dependency 
cycle indicates that there is in fact some problem with 
rpcbind.service, I think it would make most sense for that to be a 
separate bug. 


Right, it is working without the X-Start-Before line.


Names=vmware-tools.service

...

Before=ntp.service postfix.service bacula-fd.service
nagios-nrpe-server.service bacula-director.service graphical.target
shutdown.target network-online.target bacula-sd.service
fail2ban.service sysstat.service multi-user.target
After=local-fs.target systemd-journald.socket basic.target
system.slice

Because of the X-Start-Before: $network, this wants to start before
network-online.target, which approximately corresponds to
/etc/init.d/networking in sysv-land; yet it is a rc2 service, so it
wants to start after basic.target.

In conjunction with basic.target (i.e. rcS) services like
rpcbind.service that apparently want to start *after*
network-online.target, this presents a problem. Consider the Before and
After ordering:

sysinit.target (must start before)
basic.target (which must start before)
vmware-tools.service (etc.)
network-online.target
rpcbind.service
sysinit.target (! back where we started)

There's no way that can work well.

The sysvinit scripts were presumably able to resolve this less
destructively by breaking the cycle in a different place, because they
didn't even think about rc2 until they had brought up rcS, by which
point it was too late for vmware-tools' X-Start-Before to take effect;
so it was simply ignored (I think). However, systemd doesn't force all
of rcS to happen before any of rc2 starts: it has a single large
dependency graph that covers both.

I think it's fairly clear that this is neither rpcbind's fault, nor the
same issue that I originally reported (which was wrong anyway).


ACK



It would seem reasonable to report a non-RC bug against systemd
(probably wishlist) for either or both of these:

- logging the whole path around the cycle(s) that it found, not just
   one of the units involved;
- a cleverer heuristic for where to break cycles, perhaps preferring
   to break them at a unit that has DefaultDependencies=no because those
   are less likely to be something important during early boot

It's entirely possible that one or both of those has been tried and
turned out not to be feasible, though.

 S

Thanks for your analyse of this problem. I think there should be a 
better solution, since this bug will be triggered on every VMware 
virtualized platform (since normaly you have to install their 
corresponding vmware-tools).


--
/*
Mit freundlichem Gruß / With kind regards,
 Patrick Matthäi
 GNU/Linux Debian Developer

  Blog: http://www.linux-dev.org/
E-Mail: pmatth...@debian.org
patr...@linux-dev.org
*/


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



  1   2   3   4   >