Bug#1050843: Use-after-free crash when deallocating a frame object

2023-08-29 Thread Anders Kaseorg
Here’s a debdiff for 3.11.2-6 in bookworm adding the upstream patch. Anders From: Anders Kaseorg Sent: Tuesday, August 29, 2023 19:12 To: sub...@bugs.debian.org Subject: Use-after-free crash when deallocating a frame object Package: python3.11 Version

Bug#1050843: Use-after-free crash when deallocating a frame object

2023-08-29 Thread Anders Kaseorg
Package: python3.11 Version: 3.11.2-6 Tags: bookworm fixed-upstream patch upstream Python 3.11.0 through 3.11.4 have a use-after-free condition when deallocating a stack frame object, manifesting as a SIGSEGV crash under certain conditions on the current position of the stack pointer and the

Bug#989604: [Pkg-openssl-devel] Bug#989604: libssl1.1: segfault on arm64 (M1) with some ciphers e.g. curl https://dl.yarnpkg.com

2022-03-05 Thread Anders Kaseorg
On 1/26/22 11:56, Sebastian Andrzej Siewior wrote: On 2022-01-25 22:10:00 [-0500], Anders Kaseorg wrote: The fix is trivial, swapping two lines of assembly. I’ve attached it as a debdiff, and tested it in a Debian 10 container on an M1 MacBook. Can it be considered for oldstable? Yes. My

Bug#1006707: python3.10 -m venv installs pip to incorrect path VENV_ROOT/local/bin/pip

2022-03-05 Thread Anders Kaseorg
. (Closes: #1006707, LP: #1962791) + + -- Anders Kaseorg Sat, 05 Mar 2022 23:50:26 + + python3.10 (3.10.2-5) unstable; urgency=medium * Fix the marshal test after applying the fix for #1004558. diff -Nru python3.10-3.10.2/debian/patches/sysconfig-debian-schemes.diff python3.10-3.10.2

Bug#1006707: python3.10 -m venv installs pip to incorrect path VENV_ROOT/local/bin/pip

2022-03-02 Thread Anders Kaseorg
Package: python3.10 Version: 3.10.2-5 Severity: important As of python3.10 3.10.2-3, python3.10 -m venv installs pip to the wrong path: # apt update # apt install python3.10-venv # python3.10 -m venv /tmp/my-venv # . /tmp/my-venv/bin/activate # type pip bash: type: pip: not found # pip --version

Bug#1004985: media-types: Should use audio/mp4 for .m4a, not audio/mpeg

2022-02-04 Thread Anders Kaseorg
Package: media-types Version: 5.0.0 The current /etc/mime.types has audio/mpeg mpga mpega mp1 mp2 mp3 m4a audio/mp4 This association for the .m4a extension is incorrect. Please update this to audio/mpeg mpga mpega mp1 mp2 mp3 audio/mp4 m4a RFC 3003

Bug#989604: libssl1.1: segfault on arm64 (M1) with some ciphers e.g. curl https://dl.yarnpkg.com

2022-01-25 Thread Anders Kaseorg
segfault in Poly1305 on aarch64 (Closes: #989604). + + -- Anders Kaseorg Tue, 25 Jan 2022 18:53:14 -0800 + openssl (1.1.1d-0+deb10u7) buster-security; urgency=medium * CVE-2021-3711 (SM2 Decryption Buffer Overflow). diff -Nru openssl-1.1.1d/debian/patches/crypto-poly1305-asm-fix-armv8-pointer

Bug#1000978: datefudge: fails to adjust pthread_cond_timedwait()

2021-12-01 Thread Anders Kaseorg
Package: datefudge Version: 1.24 The test programs below should sleep for 2 seconds. However, under datefudge '1 second', they actually sleep for 3 seconds, and under datefudge '1 second ago', they only sleep for 1 second. This seems to be because datefudge adjusts the clock_gettime() call,

Bug#994954: virtualenv in buster fails with 404 on https://pypi.org/simple/pkg-resources/

2021-09-23 Thread Anders Kaseorg
Package: python3-virtualenv Version: 15.1.0+ds-2 Severity: grave Justification: renders package unusable virtualenv in Debian 10 buster recently (today, I think) stopped working for both versions of Python. It now fails with “EnvironmentError: 404 Client Error: Not Found for url:

Bug#911997: git: Apply diff from Ubuntu

2019-09-14 Thread Anders Kaseorg
Never mind, it looks like I wasn’t added to the Debian upload ACL, so my upload was rejected. Anders

Bug#911997: git: Apply diff from Ubuntu

2019-09-14 Thread Anders Kaseorg
I’ve gone ahead and uploaded these changes. Since I don’t have access to the repository on repo.or.cz, I’ve pushed my commits to https://salsa.debian.org/andersk-guest/git debian-sid. Jonathan, you can mirror these to repo.or.cz at your convenience, or we can take this opportunity to set up a

Bug#929417: debconf: Readline frontend should check that stdin is a tty (to fix Docker build freezes)

2019-05-22 Thread Anders Kaseorg
Package: debconf Version: 1.5.72 Tags: patch When building a Debian- or Ubuntu-based Docker container, installing perl (so that Term::Readline is available) and a package that asks a Debconf question causes the build to freeze with an interactive readline prompt that cannot be answered: $

Bug#925993: git remote rename spends quadratic renaming packed refs

2019-03-29 Thread Anders Kaseorg
Package: git Version: 1:2.20.1-2 Severity: minor git remote rename takes several minutes on a remote with thousands of packed refs, because it uses a quadratic loop that, for each ref to be renamed, reads every ref and writes out a new copy of .git/packed-refs. It should be possible to do this

Bug#887563: corosync prerm will stop pacemaker and not start it again

2018-04-19 Thread Anders Kaseorg
Control: found 887563 2.4.2-3 Control: severity 887563 important This just bit me on a Stretch cluster when upgrading corosync from 2.4.2-3 to 2.4.2-3+deb9u1. Marking as such. Please apply the suggested fixes as soon as possible. Anders

Bug#894667: beep: CVE-2018-0492

2018-04-05 Thread Anders Kaseorg
On Thu, 5 Apr 2018, Tony Hoyle wrote: > It's concerning that the holeybeep.ninja site exploited an unrelated > fault for 'fun' without apparently telling anyone. To be fair, they told you exactly what was going to happen: “Apply this [patch] as soon as possible using the following command:

Bug#887881: git-svn: Tags are not set to the correct commit when converting a subversion repository

2018-01-21 Thread Anders Kaseorg
Control: severity -1 wishlist Control: retitle -1 git-svn: May convert incorrectly created mixed-revision Subversion tags in a surprising way That’s because the tags were created incorrectly in Subversion. r26463 is tagged from a mixed-revision copy from r26460, r26461, and r26462, and

Bug#887881: git-svn: Tags are not set to the correct commit when converting a subversion repository

2018-01-21 Thread Anders Kaseorg
Note also that the script https://wiki.debian.org/de/Alioth/Git#Convert_remote_tags_and_branches_to_local_one that you ran is where the tree contents of those tags actually became incorrect. That script turns branches into tags without checking that the resulting tree is the same. Anders

Bug#886590: Please add python3-z3 package

2018-01-07 Thread Anders Kaseorg
Source: z3 Version: 4.4.1-0.3 Severity: wishlist It’d be nice to have a python3-z3 package in addition to python-z3, especially with Python 2 fast approaching end-of-life. Upstream states that the Z3 Python bindings work in Python 3 (https://github.com/Z3Prover/z3#python), and I can confirm

Bug#883304: qtbase-opensource-src Build-Depends libpcre3-dev, but uses bundled PCRE2 instead

2017-12-01 Thread Anders Kaseorg
Source: qtbase-opensource-src Version: 5.9.2+dfsg-4 Qt 5.9 swiched from the original PCRE to the newer PCRE2, but the build dependencies in qtbase-opensource-src were not adjusted. So now qtbase-opensource-src has an unused build dependency on libpcre3-dev, and builds with a bundled copy of

Bug#883253: ssh-agent.service missing dbus dependency

2017-12-01 Thread Anders Kaseorg
; urgency=medium + + * debian/systemd/ssh-agent.service: Add missing dbus dependency. + + -- Anders Kaseorg <ande...@mit.edu> Fri, 01 Dec 2017 05:52:35 -0500 + openssh (1:7.6p1-2) unstable; urgency=medium * Apply upstream patch to fix PermitOpen argument handling. diff -Nru openssh

Bug#879459: git: please build against openssl with OPENSSL_SHA1=1

2017-10-21 Thread Anders Kaseorg
Git’s builtin SHA-1 implementation has the advantage of trying to detect attempted collisions (https://github.com/cr-marcstevens/sha1collisiondetection), which seems like good thing to do by default these days. Furthermore, Debian does not ship GPL code linked with OpenSSL for license reasons

Bug#865675: yaml: breaks reverse-dependencies testsuites

2017-06-30 Thread Anders Kaseorg
Control: tags 0 + upstream Control: forwarded 0 https://github.com/yaml/libyaml/issues/60 On Thu, 29 Jun 2017, Gianfranco Costamagna wrote: > I also changed the Homepage field, but I still prefer to hear the > maintainer, before making a decision :) Maintainer here. Where did you hear that

Bug#863300: beignet-opencl-icd is missing beignet_20.bc and beignet_20.pch

2017-05-24 Thread Anders Kaseorg
) unstable; urgency=medium + + * debian/beignet-opencl-icd.install: Install beignet_20.pch and +beignet_20.bc if they are built. + + -- Anders Kaseorg <ande...@mit.edu> Thu, 25 May 2017 01:49:12 -0400 + beignet (1.3.0-3) unstable; urgency=medium * Fix "Exec...-5" error o

Bug#782294: asciidoc: make timestamps reproducible adding the flag --use-utc-timezone

2017-05-05 Thread Anders Kaseorg
On Sat, 10 Dec 2016, Anders Kaseorg wrote: > Now that we have SOURCE_DATE_EPOCH, consider this PR as a replacement. > It allows software that builds with AsciiDoc to build reproducibly > without being patched to pass additional flags: > > https://github.com/asciidoc/asciidoc/pul

Bug#857890: reproducible but weird

2017-03-16 Thread Anders Kaseorg
On Thu, 16 Mar 2017, Adam Borowski wrote: > The bug does reproduce for me on _some_ setups, all in regular sbuild: > > successful: amd64 > FTBFS: armhf > FTBFS: armhf qemu-user on amd64 > successful: armhf on arm64 > > The timezone is the same, so is schroot/sbuild configuration, all

Bug#857890: git: FTBFS: debian/rules:55: recipe for target 'override_dh_auto_test-arch' failed

2017-03-16 Thread Anders Kaseorg
The actual failures shown in your build log, copied below, are in t0006-date.sh. I can’t reproduce this using the locale and timezone settings listed at https://tests.reproducible-builds.org/debian/index_variations.html, but perhaps you’re trying something new? Could there be something

Bug#852757: apt calls malloc inside SIGWINCH handler, leading to deadlock

2017-01-26 Thread Anders Kaseorg
Package: apt Version: 1.4~beta4ubuntu1 (I also checked the code of 1.4~beta4, hence reporting here.) I just had an ‘apt install’ process freeze when I resized its terminal window. Attaching gdb revealed the backtrace below, showing that free() was interrupted by the SIGWINCH handler, which

Bug#847961: gitweb: missing dependency to libcgi-pm-perl

2016-12-14 Thread Anders Kaseorg
Control: affects -1 1:2.10.2-3 The regression was introduced by Perl, not Git. CGI.pm used to live in Perl core but was dropped in Perl 5.22. I’ve confirmed that testing is also affected (and, based on the Perl changelog, has probably been affected all year). I’ll add the missing dependency

Bug#782294: asciidoc: make timestamps reproducible adding the flag --use-utc-timezone

2016-12-10 Thread Anders Kaseorg
Now that we have SOURCE_DATE_EPOCH, consider this PR as a replacement. It allows software that builds with AsciiDoc to build reproducibly without being patched to pass additional flags: https://github.com/asciidoc/asciidoc/pull/106 Anders

Bug#829738: tar: --no-recursion option is ignored when creating archives

2016-12-10 Thread Anders Kaseorg
This seems to have been an intentional upstream change. --no-recursion now applies only to the following options, until cancelled by a following --recursion. http://lists.alioth.debian.org/pipermail/reproducible-builds/Week-of-Mon-20151012/003642.html

Bug#846895: libfile-stripnondeterminism-perl: Treat .par files as Zip archives

2016-12-03 Thread Anders Kaseorg
Package: libfile-stripnondeterminism-perl Version: 0.028-1 Tags: patch .par files are Zip archives (http://search.cpan.org/~rschupp/PAR-Repository-0.21/lib/PAR/Repository/Zip.pm). This patch should allow barnowl to build reproducibly. --- lib/File/StripNondeterminism.pm | 2 +- 1 file

Bug#845069: /etc/init.d/camo should redirect stderr as well as stdout

2016-11-19 Thread Anders Kaseorg
@@ -1,3 +1,9 @@ +camo (2.3.0+dfsg-2) unstable; urgency=medium + + * /etc/init.d/camo: Redirect stderr as well as stdout. + + -- Anders Kaseorg <ande...@mit.edu> Sat, 19 Nov 2016 22:20:45 -0500 + camo (2.3.0+dfsg-1) unstable; urgency=medium [ Luke Faraone ] diff --git a/debian/init b/debia

Bug#843393: FTBFS when building architecture-independent packages only

2016-11-06 Thread Anders Kaseorg
Control: tags -1 + pending On Sun, 6 Nov 2016, Daniel Baumann wrote: > git fails to build from source when building architecture-indepedent > packages only because the newly introduced diffing of the license files > errors (the license files do not exist yet when building arch-indep only).

Bug#843246: git: unable to install due to missing deps

2016-11-05 Thread Anders Kaseorg
Control: tags -1 moreinfo On Sat, 5 Nov 2016, vincent wrote: > The following packages have unmet dependencies: > git : Depends: git-man (< 1:2.9.3-.) but 1:2.10.2-1 is to be installed > N: Ignoring file '50unattended-upgrades.ucf-dist' in directory > '/etc/apt/apt.conf.d/' as it has an

Bug#842586: git: FTBFS on mips64el (fatal: Out of memory, getdelim failed)

2016-10-31 Thread Anders Kaseorg
Control: notfound -1 git/1:2.10.2-1 Control: close -1 On Mon, 31 Oct 2016, Sebastiaan Couwenberg wrote: > I think we can close this issue as notfound in git/1:2.10.2-1, since the > most reliable mips64el buildd was able to build it successfully. Thanks, doing so. Anders

Bug#842586: git: FTBFS on mips64el (fatal: Out of memory, getdelim failed)

2016-10-31 Thread Anders Kaseorg
On Mon, 31 Oct 2016, Sebastiaan Couwenberg wrote: > Disabling the tests on mips64el is reasonable. > > You can also do a build on the mips64el porterbox if that succeeds > without changes you can just upload that. Alright. I am still a DM in the process of applying to be a DD, but I’ve now

Bug#842586: git: FTBFS on mips64el (fatal: Out of memory, getdelim failed)

2016-10-30 Thread Anders Kaseorg
Control: tags -1 + help On Sun, 30 Oct 2016, Bas Couwenberg wrote: > The recent git upload FTBFS on mips64el due to OOM, the missing build on > mips64el is preventing the qgis rebuild as part of the ongoing gdal > transition (#842288). > > The build was performed on mipsel-manda-02 which is

Bug#842477: [PATCH] git-sh-setup: Restore sourcability from outside scripts

2016-10-30 Thread Anders Kaseorg
On Sun, 30 Oct 2016, Ævar Arnfjörð Bjarmason wrote: > This did break in v2.10.0, and it's taken a couple of months to notice > this, so clearly it's not very widely used, which says something about > the cost-benefit of maintaining this for external users. For the record, in case this affects the

Bug#842477: [PATCH] git-sh-setup: Restore sourcability from outside scripts

2016-10-30 Thread Anders Kaseorg
On Sun, 30 Oct 2016, Ævar Arnfjörð Bjarmason wrote: > This seems like a reasonable fix for this issue. However as far as I > can tell git-sh-setup was never meant to be used by outside scripts > that didn't ship as part of git itself. > > If that's the case any change in the API which AFAICT is

Bug#842477: [PATCH] git-sh-setup: Restore sourcability from outside scripts

2016-10-29 Thread Anders Kaseorg
to-replace-refs.sh and contrib/rerere-train.sh in tree. Fix this by using git --exec-path to find git-sh-i18n. While we’re here, move the sourcing of git-sh-i18n below the shell portability fixes. Signed-off-by: Anders Kaseorg <ande...@mit.edu> --- Is this a supported use of git-sh-

Bug#782294: Is #782294 a duplicate of #777177?

2016-10-25 Thread Anders Kaseorg
On Fri, 26 Aug 2016, Joseph Herlant wrote: > Should we consider this one as a duplicate of #777177 as they both try > to solve the reproducibility issues of asciidoc? I think not: #777177 is about reproducibility of asciidoc itself, while #782294 is about reproducibility of any packages using

Bug#841414: git "fatal: Out of memory? mmap failed: Cannot allocate memory"

2016-10-20 Thread Anders Kaseorg
On Thu, 20 Oct 2016, Ian Jackson wrote: > Does that seem right ? Sounds right to me. > I have an outstanding question: do I need to lock against concurrent > updates by other programs ? That is, can I run git-gc and (say) > git-receive-pack at the same time, safely ? This is safe by default,

Bug#841414: git "fatal: Out of memory? mmap failed: Cannot allocate memory"

2016-10-20 Thread Anders Kaseorg
Git really is running out of memory. When I try this locally (using file:// to force Git to go through the same git-upload-pack dance that it does over a smart transport, and using ulimit -v as a poor but probably sufficient approximation of a RAM-limited server), it fails with 920 MB of

Bug#840800: New upstream version 2.10.1

2016-10-14 Thread Anders Kaseorg
/share/doc-base/everyday-git. (Closes: #836516) * Migrate patches to 3.0 (quilt) format. (Closes: #834566) * Migrate packaging to Debhelper. (Closes: #834886) * Replace perl-modules dependency with perl. -- Anders Kaseorg <ande...@mit.edu> Mon, 03 Oct 2016 23:31:28 -0400

Bug#840189: dblatex fails in pdflatex: Use of \@xmultirow doesn't match its definition

2016-10-09 Thread Anders Kaseorg
Control: clone -1 -2 Control: reassign -2 texlive-latex-extra 2016.20161008-1 Control: retitle -2 texlive-latex-extra should Breaks: dblatex (<< 0.3.8-2~) Control: severity -2 serious Although it is not texlive-latex-extra’s fault that dblatex fails with the new version, I believe it should not

Bug#839481: openafs: FTBFS: Tests failures

2016-10-09 Thread Anders Kaseorg
Control: forwarded 839481 https://gerrit.openafs.org/12414 Control: tags 839481 + upstream pending I sent a patch for this failure upstream, but then I ran into the separate problem that dblatex no longer works at all in sid as of yesterday, and filed https://bugs.debian.org/840189 for that.

Bug#840189: dblatex fails in pdflatex: Use of \@xmultirow doesn't match its definition

2016-10-09 Thread Anders Kaseorg
Package: dblatex Version: 0.3.8-1 Severity: grave dblatex in sid fails on every document as follows: $ echo 'Hello, world!' > hello.xml $ dblatex hello.xml Build the book set list... Build the listings... XSLT stylesheets DocBook - LaTeX 2e (0.3.8-1)

Bug#821358: nss_hesiod segfaults in sock_eq

2016-09-28 Thread Anders Kaseorg
Control: severity -1 serious Bumping severity because this is a regression introduced in a stable update. Anders

Bug#818281: marked as pending

2016-09-28 Thread Anders Kaseorg
On Mon, 15 Aug 2016, Aurelien Jarno wrote: > + * debian/patches/any/submitted-resolv-ipv6-nameservers.diff: replace by > +patch cvs-resolv-ipv6-nameservers.diff taken from upstream. This fixes > +mtr on systems using only IPv6 nameservers. Closes: #818281. This is the commit that

Bug#821358: nss_hesiod segfaults in sock_eq

2016-09-28 Thread Anders Kaseorg
Control: reopen -1 Control: found -1 2.19-18+deb8u6 Control: tags -1 + jessie On Sun, 17 Apr 2016, Anders Kaseorg wrote: > glibc 2.22 broke nss_hesiod so that it segfaults on almost all uses. To > reproduce: > > # sed -i 's/^passwd:.*/& hesiod/' /etc/nsswitch.conf > # cat

Bug#818787: doxygen: Changes default HAVE_DOT to YES without having graphviz in the Depends line.

2016-09-13 Thread Anders Kaseorg
Hi, I’m one of the nobodies that looks at my build logs. I noticed five instances of sh: 1: dot: not found error: Problems running dot: exit code=127, command='dot', arguments='"…/graph_legend.dot" -Tpng -o "…/graph_legend.png"' in the openafs build log, and indeed Doxygen is generating

Bug#734284: git: mojibake in gitweb serving raw blobs

2016-09-10 Thread Anders Kaseorg
On Wed, 7 Sep 2016, Thorsten Glaser wrote: > In real life, it does help: if none is specified, various user agents > may (and do¹) guess. This occasionally helps. And occasionally leads to security vulnerabilities: http://nedbatchelder.com/blog/200704/xss_with_utf7.html Even aside from those

Bug#834087: Bug#832656: runit: breaks users of runit: ln: failed to create symbolic link '/etc/service/bcron-sched': No such file or directory

2016-09-08 Thread Anders Kaseorg
Control: tags -1 + moreinfo On Thu, 28 Jul 2016, Andreas Beckmann wrote: > during a test with piuparts I noticed your package failed to install. > […] > ln: failed to create symbolic link '/etc/service/bcron-sched': No such file > or directory > […] > Similar problems were seen in different

Bug#833930: gitk: display shot, application usability gone

2016-09-06 Thread Anders Kaseorg
Control: tags -1 + moreinfo Control: severity -1 normal I tried to reproduce this by installing a fresh jessie VM in virt-manager with debian-live-8.5.0-amd64-xfce-desktop.iso, installing gitk, then upgrading the VM to stretch in two parts (apt upgrade; apt full-upgrade), then rebooting. I

Bug#799543: dh_doxygen: fails if no docs found, even in binary-only builds

2016-09-04 Thread Anders Kaseorg
On Sun, 4 Sep 2016, Helmut Grohne wrote: > Trying to use it anyway results in "beauty" such as: > > https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=807848;filename=jansson_2.7-3.1.debdiff;msg=29 > > I believe that using the sequence addon correctly is simply too hard to > be worth it.

Bug#836699: Add dh --with-indep, for sequence addons pulled in through Build-Depends-Indep

2016-09-04 Thread Anders Kaseorg
Package: debhelper Version: 9.20160814 It would be useful to have dh $@ --with-indep ADDON, an analogue of dh $@ --with ADDON that only loads the addon when Architecture: all packages are being built. See https://bugs.debian.org/818115 for the full background, but the summary is that the

Bug#827249: bugs.debian.org: https://bugs.debian.org/807528 served as windows-1252 instead of UTF-8

2016-09-04 Thread Anders Kaseorg
On Sun, 4 Sep 2016, Don Armstrong wrote: > Right; it looks like it's an issue with Apache's cache handling not > keeping the content type headers. I'm not sure if that's a known bug, or > if it's a configuration issue specific to the BTS. Could it be

Bug#827249: bugs.debian.org: https://bugs.debian.org/807528 served as windows-1252 instead of UTF-8

2016-09-04 Thread Anders Kaseorg
This is definitely a server-side caching problem, as can be demonstrated with curl commands without a browser involved. The ‘Cache-Control: max-age=0’ header simulates a plain reload, while the ‘Cache-Control: no-cache’ header simulates a Shift+reload. $

Bug#799543: dh_doxygen: fails if no docs found, even in binary-only builds

2016-09-04 Thread Anders Kaseorg
dh_doxygen as a Debhelper sequence addon so that it can be +invoked via ‘dh $@ --with doxygen’. + + -- Anders Kaseorg <ande...@mit.edu> Sun, 04 Sep 2016 05:06:57 -0400 + doxygen (1.8.11-3) unstable; urgency=medium * Applied upstream commit 9a2c7bbfb0c53b4532db7280e6804c7ce76d70a3: dif

Bug#648329: closed by Anders Kaseorg <ande...@mit.edu> (Fixed in Git 2.3.0)

2016-08-25 Thread Anders Kaseorg
On Wed, 17 Aug 2016, Ben Hutchings wrote: > Thanks.  That works, but there's still another problem: when there's no > password in the configuration file, it appears to send an empty > password, whereas when using a tunnel it prompts for a password. That looks less trivial. I think

Bug#834886: Migrate packaging to Debhelper

2016-08-20 Thread Anders Kaseorg
Source: git Version: 1:2.9.3-1 Severity: wishlist Tags: patch I’ve been working on converting git to a modern Debhelper package. My current draft is in the debhelper branch of git://andersk.mit.edu/git.git. I’m quite pleased by the diffstat: 62 files changed, 152 insertions(+), 598

Bug#834870: debian/rules clean doesn’t

2016-08-19 Thread Anders Kaseorg
+ + * debian/rules: Fix clean target to remove GIT-VERSION-FILE and +contrib/subtree build products. + + -- Anders Kaseorg <ande...@mit.edu> Fri, 19 Aug 2016 23:00:23 -0400 + git (1:2.9.3-1) unstable; urgency=medium * New upstream release (see RelNotes/2.8.2.txt, RelNotes/2.8.3.txt

Bug#834566: Migrate patches to 3.0 (quilt) format

2016-08-19 Thread Anders Kaseorg
ian/changelog index 0c50160..8df6b35 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +git (1:2.9.3-2) UNRELEASED; urgency=medium + + * Migrate patches to 3.0 (quilt) format. + + -- Anders Kaseorg <ande...@mit.edu> Wed, 17 Aug 2016 00:35:17 -0400 + git (1:2.9.3-1) unstable

Bug#648329: closed by Anders Kaseorg <ande...@mit.edu> (Fixed in Git 2.3.0)

2016-08-17 Thread Anders Kaseorg
tags 648329 + patch thanks On Wed, 17 Aug 2016, Ben Hutchings wrote: > I don't know what upstream did or whether this was ever fixed, but it's > certainly not working now: > […] > Why is it sending an HTTP request?! You’re quite right. I did some more investigation here and found this to be a

Bug#834566: Migrate patches to 3.0 (quilt) format

2016-08-16 Thread Anders Kaseorg
ies diff --git a/debian/changelog b/debian/changelog index 0c50160..8df6b35 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +git (1:2.9.3-2) UNRELEASED; urgency=medium + + * Migrate patches to 3.0 (quilt) format. + + -- Anders Kaseorg <ande...@mit.edu> Wed, 17 Aug 2016

Bug#821358: nss_hesiod segfaults in sock_eq

2016-04-27 Thread Anders Kaseorg
notfound 821358 2.2.1-9 found 821358 2.22-0experimental0 tags 821358 + patch I sent this patch upstream. Since it only touches nss_hesiod, which is completely broken otherwise, it should be very low risk. https://sourceware.org/ml/libc-alpha/2016-04/msg00563.html 2016-04-22 Anders Kaseorg

Bug#821358: nss_hesiod segfaults in sock_eq

2016-04-17 Thread Anders Kaseorg
Package: libc6 Version: 2.22-6 Severity: important Tags: upstream Forwarded: https://sourceware.org/bugzilla/show_bug.cgi?id=19573 glibc 2.22 broke nss_hesiod so that it segfaults on almost all uses. To reproduce: # sed -i 's/^passwd:.*/& hesiod/' /etc/nsswitch.conf # cat > /etc/hesiod.conf <,

Bug#722132: closed by Sylvestre Ledru <sylves...@debian.org> (Bug#722132: fixed in iwyu 3.3-2)

2016-02-12 Thread Anders Kaseorg
On Thu, 11 Feb 2016, Paul Wise wrote: > I'm imagining it Build-Depending on a package produced by llvm-defaults > rather than a version-specific package. > > Not building with any version other than 3.7 sounds like a bug too. Alright, well, that’s just how it works upstream. The documentation

Bug#722132: closed by Sylvestre Ledru <sylves...@debian.org> (Bug#722132: fixed in iwyu 3.3-2)

2016-02-11 Thread Anders Kaseorg
On Thu, 11 Feb 2016, Paul Wise wrote: > On Wed, 2016-02-10 at 23:48 -0500, Anders Kaseorg wrote: > > I would agree if there was a risk of the bug reappearing with an iwyu  > > rebuild with no source changes against a new llvm-defaults.  But in > > fact, debian/control alr

Bug#722132: closed by Sylvestre Ledru <sylves...@debian.org> (Bug#722132: fixed in iwyu 3.3-2)

2016-02-10 Thread Anders Kaseorg
On Wed, 10 Feb 2016, Paul Wise wrote: > On Sat, 2016-01-23 at 20:29 -0500, Anders Kaseorg wrote: > > -Depends: ${shlibs:Depends}, ${misc:Depends}, clang-3.5 | clang-3.6 | > > clang-3.7 | clang-3.8, python > > +Depends: ${shlibs:Depends}, ${misc:Depends}, libclang-common

Bug#722132: closed by Sylvestre Ledru <sylves...@debian.org> (Bug#722132: fixed in iwyu 3.3-2)

2016-01-23 Thread Anders Kaseorg
On Tue, 10 Sep 2013, Paul Wise wrote: > On Sun, Sep 08, 2013 at 11:21:11AM +, Debian Bug Tracking System wrote: > > >* clang is a mandatory dependency (Closes: #722132) > > This doesn't appear to fix this issue: > […] > /usr/include/glib-2.0/glib/gmacros.h:40:10: fatal error: 'stddef.h'

Bug#802272: ImportError: No module named z3

2015-11-04 Thread Anders Kaseorg
The package tries to create /usr/lib/python2.7/dist-packages/z3/__init__.py, but fails to install it because it is not listed in debian/python-z3.install. Creating /usr/lib/python2.7/dist-packages/z3/__init__.py allows ‘import z3.z3’ to work. But that’s not really good enough. The upstream

Bug#781509: apt-transport-https: reports uninitialized size → W: Size of file [FILE] is not what the server reported

2015-03-30 Thread Anders Kaseorg
-- 8 -- From: Anders Kaseorg ande...@mit.edu Subject: [PATCH] HttpsMethod: Call URIStart in parse_header, not write_data There was no guarantee that progress_callback was called before the first write_data, so URIStart was sometimes called with Res.Size uninitialized. This is much simpler anyway

Bug#781214: Upstream patches for honoring DNS SRV records

2015-03-25 Thread Anders Kaseorg
Package: git Version: 1:1.7.6~rc1-1 Severity: wishlist Tags: upstream Debian’s git package has been carrying patches for honoring DNS SRV records since 1:1.7.6~rc1-1 [1]. Unfortunately, keeping these Debian-specific isn’t too helpful to anyone who might think about deploying such SRV records.

Bug#779692: rlwrap coqtop aborts with spurious error from stale errno

2015-03-03 Thread Anders Kaseorg
Package: rlwrap Version: 0.41-1 Tags: fixed-upstream Forwarded: https://github.com/hanslub42/rlwrap/issues/18 $ rlwrap coqtop rlwrap: error: Couldn't read completions from /usr/share/rlwrap/completions/coqtop: No such file or directory $ ls -l /usr/share/rlwrap/completions/coqtop -rw-r--r-- 1

Bug#778196: No, not fixed

2015-02-28 Thread Anders Kaseorg
Control: found 778196 1.6.9-2+deb8u1 Control: reopen Commit a6013738 (Linux: Move code to reset the root to afs/LINUX) is a prerequisite of 860764da (Linux: d_alias becomes d_u.d_alias), but the former is missing in 1.6.9-2+deb8u1. Anders -- To UNSUBSCRIBE, email to

Bug#776181: [PATCH] Fix double UTF-8 decode on Perl 5.20 with upgraded Encode.pm

2015-01-24 Thread Anders Kaseorg
with wide characters at /usr/lib64/perl5/vendor_perl/Encode.pm line 216. There doesn’t seem to be any reason not to check Encode::is_utf8 on old versions too, so just remove the version check altogether. Signed-off-by: Anders Kaseorg ande...@mit.edu --- IkiWiki/CGI.pm | 4 +--- 1 file changed, 1

Bug#771366: libyaml: CVE-2014-9130: Wrapped strings cause assert failure

2014-11-28 Thread Anders Kaseorg
On Fri, 28 Nov 2014, Salvatore Bonaccorso wrote: An assert is triggered by wrapped strings, see [1,2,3]. Proposed commit in [4] comments out the assertion and let the parser fail. CVE-2014-9130 was assigned for this reachable assertion in scanner.c. [1]

Bug#767056: Upgrading to openafs-client 1.6.10-1 on systemd fails

2014-10-27 Thread Anders Kaseorg
Package: openafs-client Version: 1.6.10-1 # apt-get upgrade openafs-client Reading package lists... Done Building dependency tree Reading state information... Done Calculating upgrade... Done The following packages will be upgraded: openafs-client 1 upgraded, 0 newly installed, 0 to

Bug#762248: OpenAFS kernel module needs patches for kernel 3.16

2014-09-19 Thread Anders Kaseorg
Package: openafs Version: 1.6.9-1 Severity: important Tags: patch fixed-upstream fixed-in-experimental OpenAFS needs two upstream patches to build on kernel 3.16. They are in the openafs-stable-1_6_x branch and included in 1.6.10pre1. ae86b07f827d6f3e2032a412f5f6cb3951a27d2d Linux 3.16:

Bug#753534: Multi_key is undefined with UIM

2014-08-29 Thread Anders Kaseorg
-init.patch: +Apply upstream patches to make Emacs work with IBus and UIM. +(Closes: #753534) (LP: #493766) + + -- Anders Kaseorg ande...@mit.edu Thu, 28 Aug 2014 06:57:06 -0400 + emacs24 (24.3+1-4) unstable; urgency=medium [ Rob Browning ] diff -Nru emacs24-24.3+1/debian/patches/0015

Bug#758739: debian-maintainers: Please add Anders Kaseorg as a Debian Maintainer

2014-08-20 Thread Anders Kaseorg
Package: debian-maintainers Severity: normal tags: patch AndersRecommended-By: Scott Kitterman sc...@kitterman.com Agreement: https://lists.debian.org/debian-newmaint/2014/08/msg00015.html Advocates: https://lists.debian.org/debian-newmaint/2014/08/msg00016.html Comment: Add Anders Kaseorg ande

Bug#754921: [PATCH] grub-mkconfig: Disable recordfail on non-writable LVM or RAID partitions

2014-07-15 Thread Anders Kaseorg
Package: grub-common Version: 2.02~beta2-10 Severity: important Tags: patch Currently recordfail is disabled on filesystems that GRUB can’t write to. However, a filesystem that GRUB could write to might still be located on an _abstraction_ that GRUB can’t write to, including LLVM and/or RAID.

Bug#753534: Multi_key is undefined with UIM

2014-07-02 Thread Anders Kaseorg
Package: emacs24 Version: 24.3+1-4 Tags: fixed-upstream, patch With my input method set to UIM, I cannot use the Compose key in Emacs. Pressing it just triggers a message “Multi_key is undefined”. This was reported upstream (apparently it also affects IBus):

Bug#752594: ghc-mod fails to install with emacs23: Error: Symbol's function definition is void: defvar-local

2014-06-24 Thread Anders Kaseorg
Package: ghc-mod Version: 4.1.2-1 I had emacs23 installed (for no particularly good reason anymore, but). This caused ghc-mod 4.1.2-1 installation to fail with elisp errors: Preparing to unpack .../ghc-mod_4.1.2-1_amd64.deb ... Unpacking ghc-mod (4.1.2-1) ... Setting up ghc-mod (4.1.2-1) ...

Bug#703864: RFP: git-mercurial -- hg remote helper from git/contrib/remote-helpers

2014-05-21 Thread Anders Kaseorg
As of v2.0.0-rc4, upstream has removed git-remote-hg and git-remote-bzr from contrib. They are now maintained in independent repositories. https://git.kernel.org/cgit/git/git.git/commit/?id=b2c851a8e67da752d8a5dbde5a9dae6e3428a4c9

Bug#745591: [PATCH] Documentation/technical/api-hashmap: Remove source highlighting

2014-05-20 Thread Anders Kaseorg
On Sat, 17 May 2014, Anders Kaseorg wrote: --- a/Documentation/technical/api-hashmap.txt +++ b/Documentation/technical/api-hashmap.txt @@ -166,7 +166,6 @@ Usage example - Here's a simple usage example that maps long keys to double values. -[source,c] struct

Bug#745591: [PATCH] Documentation/technical/api-hashmap: Remove source highlighting

2014-05-17 Thread Anders Kaseorg
The highlighting was pretty, but unfortunately, the failure mode when source-highlight is not installed was that the entire code block disappears. See https://bugs.debian.org/745591, https://bugs.launchpad.net/bugs/1316810. Signed-off-by: Anders Kaseorg ande...@mit.edu --- Documentation

Bug#747924: haskell-lens: build from source runs test suite twice

2014-05-12 Thread Anders Kaseorg
Source: haskell-lens Version: 4.1.2-1 Priority: minor (This is probably a haskell-devscripts bug, but I’ll file it here first to be safe.) When building haskell-lens from source, the test suite is run twice, once during debian/rules build-arch, and once during debian/rules binary-arch. See

Bug#747400: bash: Vcs-Bzr is out of date

2014-05-08 Thread Anders Kaseorg
Source: bash Version: 4.3-7 Severity: minor bash’s debian/control lists Vcs-Bzr: http://bazaar.launchpad.net/~doko/+junk/pkg-bash-debian However, this Bazaar repository doesn’t have any versions newer than 4.2+dfsg-1. Anders -- To UNSUBSCRIBE, email to

Bug#745591: git-doc: example source snippet is empty in technical/api-hashmap.html

2014-04-23 Thread Anders Kaseorg
Package: git-doc Version: 1:2.0.0~rc0-1 Severity: minor I noticed this warning while building git-doc: ASCIIDOC technical/api-hashmap.html /bin/sh: 1: source-highlight: not found asciidoc: WARNING: api-hashmap.txt: line 218: filter non-zero exit code: source-highlight -f xhtml -s c:

Bug#745565: dch.1: document that default urgency is now medium

2014-04-22 Thread Anders Kaseorg
Package: devscripts Version: 2.14.1 Severity: minor Tags: patch On Sun, 24 Nov 2013, Julien Cristau wrote: -$urgency ||= 'low'; +$urgency ||= 'medium'; The manpage should be updated too. diff --git a/scripts/debchange.1 b/scripts/debchange.1 index 3adbe9c..bc18527 100644 ---

Bug#663114: Patch to implement parallelism in dkms

2014-04-03 Thread Anders Kaseorg
On Thu, 26 Dec 2013, Andras Korn wrote: It will pass -jnumber of CPUs to make(1) by default, but this can be overridden via the command line. If you want, the get_num_cpus function could be replaced with nproc(1) from coreutils (= 8.1-1). Anders -- To UNSUBSCRIBE, email to

Bug#737240: [debsums] Apt conf file

2014-01-31 Thread Anders Kaseorg
Package: debsums Version: 2.0.52 Control: retitle -1 Remove mention of /etc/apt/apt.conf.d/90debsums from debsums(1) On Fri, 31 Jan 2014, Arturo Borrero wrote: In the man page of debsums I understand that installing the package will lead to have the '/etc/apt/apt.conf.d/90debsums' file

Bug#737076: libyaml: CVE-2013-6393: heap-based buffer overflow when parsing YAML tags

2014-01-29 Thread Anders Kaseorg
Thanks. Here’s the new release (currently awaiting upload sponsorship): http://web.mit.edu/andersk/Public/debian/libyaml_0.1.4-3.dsc http://web.mit.edu/andersk/Public/debian/libyaml_0.1.4-2_3.debdiff Anders -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject

Bug#737076: libyaml: CVE-2013-6393: heap-based buffer overflow when parsing YAML tags

2014-01-29 Thread Anders Kaseorg
On Thu, 30 Jan 2014, Salvatore Bonaccorso wrote: On Wed, Jan 29, 2014 at 08:52:01PM -0500, Anders Kaseorg wrote: Thanks. Here’s the new release (currently awaiting upload sponsorship): http://web.mit.edu/andersk/Public/debian/libyaml_0.1.4-3.dsc http://web.mit.edu/andersk/Public/debian

Bug#731567: bash-completion: wtf completion looks for acronym databases at wrong path

2013-12-06 Thread Anders Kaseorg
Package: bash-completion Version: 2.0-1 $ wtf [TAB] cut: /usr/share/misc/acronyms*: No such file or directory -f These databases were moved from /usr/share/misc/acronyms* to /usr/share/games/bsdgames/acronyms* in 2002 for FHS compliance (#144804), but bash-completion still looks at the old

Bug#731090: barnowl: debian/watch fails to find 1.9rc2

2013-12-01 Thread Anders Kaseorg
Package: barnowl Version: 1.6.2-1.1 Severity: minor Tags: patch barnowl’s debian/watch file finds 1.9rc1 but not 1.9rc2, because uscan doesn’t support \1-style backrefs, only $1 (#639813). diff --git a/debian/watch b/debian/watch index 8372a9d..18bccb8 100644 --- a/debian/watch +++

Bug#729763: [PATCH] FTBFS because debian/rules calls $(MAKE) -Ccontrib/mw-to-git without $(OPTS)

2013-11-16 Thread Anders Kaseorg
Package: git Version: 1:1.8.5~rc2-1 Severity: serious Tags: patch (Yeah, this version is still in the NEW queue, but I peeked anyway.) Since debian/rules calls $(MAKE) -Ccontrib/mw-to-git all without $(OPTS), the root Makefile detects that the prefix has changed from /usr to $HOME, and winds

Bug#729764: libravatar.cgi replaces transparent avatar background with black

2013-11-16 Thread Anders Kaseorg
Package: bugs.debian.org Severity: minor My libravatar has a transparent background, and libravatar.org correctly preserves it on resize, but bugs.debian.org replaces it with black. http://cdn.libravatar.org/avatar/15c74c0974c6cc25c194a2737e2d6747

  1   2   3   4   >