Bug#1011629: minidlna: can't access localhost:8200 - DNS rebinding attack suspected

2022-07-13 Thread Marcos Raúl Carot
Thanks for that. Just tried and it works with only IP:8200 I was using localhost:8200 Cheers, Marcos On Wed, 13 Jul 2022 at 10:54, Oliver Freyermuth wrote: > On Fri, 8 Jul 2022 21:50:32 +0800 =?UTF-8?Q?Marcos_Ra=C3=BAl_Carot?= < > marcos.ca...@gmail.com> wrote: > > Oh, so there is no way now

Bug#1014844: python-lsp-server: breaks spyder 5.3.1 and needs to be held until spyder 5.3.2 is released

2022-07-13 Thread Julian Gilbey
Source: python-lsp-server Version: 1.5.0-1 Severity: serious This package is incompatible with the currently released version of spyder (5.3.1). As explained by upstream in https://github.com/spyder-ide/spyder/issues/17550#issuecomment-1079828357 the releases of PyLSP and Spyder are performed by

Bug#1014846: rush: FTBFS on s390x

2022-07-13 Thread Bastian Germann
Source: rush Severity: serious Version: 2.2-1 rush does not build on s390x due to a test error: 45: remopt FAILED (remopt.at:53) See https://buildd.debian.org/status/fetch.php?pkg=rush=s390x=2.2-1=1657661702=0 This keeps the package from migrating to

Bug#1014847: mirror submission for fastmirror.pp.ua

2022-07-13 Thread Ivan Barabash
Package: mirrors Severity: wishlist User: mirr...@packages.debian.org Usertags: mirror-submission Submission-Type: new Site: fastmirror.pp.ua Type: leaf Archive-architecture: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x Archive-http: /debian/ Archive-rsync: debian/ Maintainer:

Bug#1014848: git: CVE-2022-29187

2022-07-13 Thread Salvatore Bonaccorso
Source: git Version: 1:2.36.1-1 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for git. CVE-2022-29187[0]: | Git is a distributed revision control system. Git prior to versions | 2.37.1, 2.36.2,

Bug#1014849: Newer jimtcl (>= 0.81) requires fix to scripts

2022-07-13 Thread NIIBE Yutaka
Package: openocd Version: 0.11.0-1+b1 Severity: serious Hello, After I upgraded to libjim0.81, OpenOCD started to emit errors like: == Error executing event examine-end on target stm32f0x.cpu: /usr/bin/../share/openocd/scripts/mem_helper.tcl:37: Error: wrong # args: should be

Bug#1014847: mirror submission for fastmirror.pp.ua

2022-07-13 Thread Marco d'Itri
On Jul 13, Ivan Barabash wrote: > Site: fastmirror.pp.ua I do not think that it is appropriate to list a mirror which has IPv6 connectivity from a tunnel broker. -- ciao, Marco signature.asc Description: PGP signature

Bug#1014851: Missing SLS mitigation (-mharden-sls) for x86

2022-07-13 Thread Ben Hutchings
Package: gcc-10 Version: 10.2.1-6 Severity: normal Tags: patch bullseye X-Debbugs-Cc: debian-ker...@lists.debian.org In an upcoming kernel update I would like to add mitigation of Straight Line Speculation (SLS) for amd64. This depends partly on compiler support, enabled with the -mharden-sls

Bug#1014845: node-moment: CVE-2022-31129

2022-07-13 Thread Salvatore Bonaccorso
Source: node-moment Version: 2.29.3+ds-1 Severity: grave Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for node-moment. CVE-2022-31129[0]: | moment is a JavaScript date library for parsing, validating, |

Bug#993798: packaging issue

2022-07-13 Thread MyMisc
This is an packaging issue. Remove classpath in manifest from tagsoup.jar fix error. See https://github.com/AdoptOpenJDK/IcedTea-Web/issues/382 for explanation.

Bug#991011: please try new version grub-customizer 5.2.1-1

2022-07-13 Thread 肖盛文
control: tags -1 moreinfo Hi,   Please try new version grub-customizer 5.2.1-1, Can the appearance change now? Your feedback is welcome! https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991011 -- 肖盛文 xiao sheng wen https://www.atzlinux.com 《铜豌豆 Linux》基于 Debian 的 Linux 中文 桌面 操作系统 Debian QA

Bug#1014850: O: python-imaplib2 -- Threaded Python IMAP4 client (Python 3)

2022-07-13 Thread Ilias Tsitsimpis
Package: wnpp Severity: normal X-Debbugs-Cc: Sudip Mukherjee , Ulises Vitulli Control: affects -1 src:python-imaplib2 I intend to orphan the python-imaplib2 package. Since this package is used by OfflineIMAP, I have reached out to Sudip Mukherjee (CC-ed) who is willing to adopt this package

Bug#948712: [Pkg-raspi-maintainers] Bug#948712: Pinebook Pro also uses this chip

2022-07-13 Thread Ben Hutchings
On Tue, 2022-07-12 at 20:18 +0200, Adam Borowski wrote: > On Tue, Jul 12, 2022 at 12:45:11PM +0200, Diederik de Haas wrote: > > On dinsdag 12 juli 2022 01:47:21 CEST Adam Borowski wrote: > > > Pinebook Pro also wants this firmware, and it's definitely not a raspi, > > > and it doesn't have

Bug#1004511: please remove luajit(2) on ppc64el now

2022-07-13 Thread Paul Gevers
reassign 1013808 ftp.debian.org retitle 1013808 RM: aegisub [ppc64el] -- RoQA; luajit2 segfaults reassign 1013814 ftp.debian.org retitle 1013814 RM: luakit [ppc64el] -- RoQA; luajit2 segfaults reassign 1013813 ftp.debian.org retitle 1013813 RM: uwsgi-plugin-luajit [ppc64el] -- RoQA; luajit2

Bug#1012814: Duplicate

2022-07-13 Thread Christian Ehrhardt
Hi, thanks for your report - this is actually already covered by [1] which I just now realized had a bad title saying 12.0.0 instead of 12.0.5 - I fixed that by now. Therefore I'm merging this bug here with [1]. Current state is that it is already fixed in experimental and was just uploaded to

Bug#1011633: Clear open-vm-tools duplicates - this is actually asking for 12.0.5

2022-07-13 Thread Christian Ehrhardt
retitle 1011633 Open-vm-tools 12.0.5 has been released

Bug#1014862: vdr-plugin-markad: FTBFS: Cannot find (any matches for) "command/markad"

2022-07-13 Thread Andreas Beckmann
Source: vdr-plugin-markad Version: 0.1.4+git20180120-3 Severity: serious Tags: ftbfs Justification: fails to build from source Hi, vdr-plugin-markad recently started to FTBFS: [...] debian/rules override_dh_auto_install make[1]: Entering directory '/build/vdr-plugin-markad-0.1.4+git20180120'

Bug#1014860: buster-pu: package llvm-toolchain-13/1:13.0.1-6~deb10u1

2022-07-13 Thread Emilio Pozuelo Monfort
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: pkg-llvm-t...@lists.alioth.debian.org This backports LLVM 13 to buster, for Firefox/Thunderbird ESR 102. The changes from the bullseye backport are minimal, debdiff

Bug#1013236: atop should not listen on 0.0.0.0 by default

2022-07-13 Thread Marc Haber
On Sun, Jun 19, 2022 at 05:18:58PM +, Witold Baryluk wrote: > $ sudo ss -lnp | awk '$5 ~ /\[::\]|0\.0\.0\.0:|\*:/ { print $0; }' | grep atop > ??? UNCONN 0 0 0.0.0.0:255 >0.0.0.0:*users:(("atop",pid=2185,fd=3)) > $

Bug#851875: atop not installable if process accounting is stopped

2022-07-13 Thread Marc Haber
On Tue, Jan 26, 2021 at 08:25:24AM +0100, Marc Haber wrote: > can you verify that this issue still applies to the current version of > atop, 2.6.0? I would appreciate that. No answer in 18 months. I intend to close this by the End of August 2022. Greetings Marc

Bug#1014859: lintian: coloured background can be horrible depending on the colour scheme

2022-07-13 Thread Mattia Rizzolo
Package: lintian Version: 2.115.2 Severity: minor Starting with… 2.115 I believe, lintian emits tag names with a white font and coloured background. The resulting rendering is very dependent on the terminal and colour palette the user is using, and for me the yellow and green background renders

Bug#1014675: thunderbird: Upgrade breaks NNTP

2022-07-13 Thread Milan Broz
Today's unstable update to 102.0.2-1 breaks NNTP completely for me. Reading the upstream bug link, I tried to disable master password, then it was somehow able to connect to one server, but never to others (I have 3 NNTP accounts in my profile). So this is a quite major regression... Milan

Bug#1014793: linux-image-5.10.0-16-amd64: Kernel crashes while serving NFS

2022-07-13 Thread Salvatore Bonaccorso
Control: tags -1 + moreinfo Hello Arne, On Tue, Jul 12, 2022 at 08:14:22AM +0200, Arne Nordmark wrote: > > Package: src:linux > Version: 5.10.127-1 > Severity: normal > > Dear Maintainer, > > The new kernel in Debian 11.4 seems unstable and crashes when serving NFS. > On two different

Bug#1014864: distinguish between root and postmaster aliases

2022-07-13 Thread Harald Dunkel
Package: opensmtpd Version: 6.8.0p2-3 I have to distinguish between root and postmaster EMails on my servers, so the common option Root and postmaster mail recipient: in the installation menu for opensmtpd (and others) is not help- ful. I have to manually fix this again and again.

Bug#1014852: gluegen2: ftbfs on riscv64("Requires '${compiler.cfg.id}'")

2022-07-13 Thread Bo YU
Source: gluegen2 Version: 2.3.2-8 Severity: normal Tags: ftbfs, patch User: debian-ri...@lists.debian.org Usertags: riscv64 X-Debbugs-Cc: debian-ri...@lists.debian.org Dear gluegen2 Maintainer, The package has a ftbfs on riscv64 due to: ``` ... BUILD FAILED /<>/make/build.xml:462: The following

Bug#1012814: force merge duplicates

2022-07-13 Thread Christian Ehrhardt
forcemerge 1011633 1012814

Bug#1014854: dogtag-pki: CVE-2020-1696

2022-07-13 Thread Moritz Mühlenhoff
Source: dogtag-pki X-Debbugs-CC: t...@security.debian.org Severity: important Tags: security Hi, The following vulnerability was published for dogtag-pki. CVE-2020-1696[0]: | A flaw was found in the all pki-core 10.x.x versions, where Token | Processing Service (TPS) where it did not properly

Bug#1014855: dogtag-pki: CVE-2019-10180

2022-07-13 Thread Moritz Mühlenhoff
Source: dogtag-pki X-Debbugs-CC: t...@security.debian.org Severity: important Tags: security Hi, The following vulnerability was published for dogtag-pki. CVE-2019-10180[0]: | A vulnerability was found in all pki-core 10.x.x version, where the | Token Processing Service (TPS) did not properly

Bug#1014857: ansible: CVE-2021-3533

2022-07-13 Thread Moritz Mühlenhoff
Source: ansible X-Debbugs-CC: t...@security.debian.org Severity: important Tags: security Hi, The following vulnerability was published for ansible. CVE-2021-3533[0]: | A flaw was found in Ansible if an ansible user sets ANSIBLE_ASYNC_DIR | to a subdirectory of a world writable directory. When

Bug#1014856: dogtag-pki: CVE-2019-10178

2022-07-13 Thread Moritz Mühlenhoff
Source: dogtag-pki X-Debbugs-CC: t...@security.debian.org Severity: important Tags: security Hi, The following vulnerability was published for dogtag-pki. CVE-2019-10178[0]: | It was found that the Token Processing Service (TPS) did not properly | sanitize the Token IDs from the "Activity"

Bug#1014858: libpodofo: CVE-2020-18971

2022-07-13 Thread Moritz Mühlenhoff
Source: libpodofo X-Debbugs-CC: t...@security.debian.org Severity: normal Tags: security Hi, The following vulnerability was published for libpodofo. CVE-2020-18971[0]: | Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause | a denial of service via the component

Bug#1014863: ITP: python-aiormq -- pure Python AMQP client library (Python 3)

2022-07-13 Thread Guilherme de Paula Xavier Segundo
Package: wnpp Severity: wishlist Owner: Guilherme de Paula Xavier Segundo X-Debbugs-Cc: debian-de...@lists.debian.org, guilherme@gmail.com * Package name: python-aiormq Version : 6.3.4 Upstream Author : Dmitry Orlov * URL : https://github.com/mosquito/aiormq *

Bug#1014846: rush: FTBFS on s390x

2022-07-13 Thread Bo YU
On Wed, Jul 13, 2022 at 08:47:41AM +0200, Bastian Germann wrote: Source: rush Severity: serious Version: 2.2-1 rush does not build on s390x due to a test error: 45: remopt FAILED (remopt.at:53) See

Bug#1014860: buster-pu: package llvm-toolchain-13/1:13.0.1-6~deb10u1

2022-07-13 Thread Emilio Pozuelo Monfort
On 13/07/2022 12:55, Emilio Pozuelo Monfort wrote: debdiff attached. Now for real (thanks Paul). Cheers, Emiliodiff -Nru llvm-toolchain-13-13.0.1/debian/changelog llvm-toolchain-13-13.0.1/debian/changelog --- llvm-toolchain-13-13.0.1/debian/changelog 2022-06-16 12:00:08.0 +0200

Bug#398802: Preseeding adduser/homedir-permission doesn't appear to work

2022-07-13 Thread Marc Haber
Control: tags -1 wontfix thanks Hi, On Wed, Nov 15, 2006 at 05:21:38PM +0100, Olaf van der Spek wrote: > I've put "adduser adduser/homedir-permission boolean false" in > preseed.cfg, but /etc/adduser.conf contains "DIR_MODE=0755". > The preseed entry appears to be ignored. the adduser

Bug#1014878: gtk4: FTBFS with nocheck profile; python3-gi missing from build-deps

2022-07-13 Thread Evangelos Ribeiro Tzaras
Control: patch -1 On Wed, 13 Jul 2022 18:17:27 +0200 Evangelos Ribeiro Tzaras wrote: > Source: gtk4 > Version: 4.6.5+ds-1pureos2 > Severity: normal > > Dear Maintainer, > > while building gtk4 in PureOS (hence the -) we ran into a FTBFS when using nocheck: > python3-gi is missing when building

Bug#290623: adduser should never use "nogroup" as a user's group

2022-07-13 Thread Marc Haber
Control: Severity -1 wishlist On Sun, Sep 02, 2007 at 05:27:29PM +0200, Joerg Hoh wrote: > On Sun, Jun 24, 2007 at 11:56:31AM +0200, Joerg Hoh wrote: > > > > In my opinion any package who wants to use an unprivileged user ("nouser") > > or > > group ("nogroup") should create a separate user

Bug#1014837: distro-info-data: update ELTS data

2022-07-13 Thread Raphael Hertzog
Hi, On Tue, 12 Jul 2022, Thorsten Glaser wrote: > 10 Busterbuster2017-06-17 2019-07-06 2022-08-14 > 2024-06-30 2026-06-30 > 11 Bullseye bullseye 2019-07-06 2021-08-14 2024-08-14 > > However, ELTS support got prolonged: see >

Bug#440801: adduser: Option --firstuid no longer applied to GID's of new users' user

2022-07-13 Thread Marc Haber
On Tue, Mar 08, 2022 at 05:10:38PM +0100, Marc Haber wrote: > I do not particularly like the idea of overloading the first_U_id > option. Would it help you to have firstgid and lastgid options? --firstgid and --lastgid will be implemented soon. until nobody objects, I'll consider this change

Bug#640651: please set default FIRST_SYSTEM_UID=1 and FIRST_SYSTEM_GID=1

2022-07-13 Thread Marc Haber
Control: tags -1 - help + wontfix Control: outlook -1 wontfix thanks On Tue, Mar 08, 2022 at 09:07:53AM +0100, Marc Haber wrote: > There have been only two people requesting this functionality in over a > decade. Making these settings preseedable would mean that adduser.conf > could no longer be

Bug#989462: Info received (About bumping Vagrant box disk image to 1TB)

2022-07-13 Thread Hans-Christoph Steiner
Thanks for mapping it out. Do you have any contact to upstream? If so, could you request the new release? I can update the package. Emmanuel Kasper: Hi I took some time to revisit this bug in regards to vagrant libvirt developments. I see vagrant-libvirt upstream has merged in virtio-scsi

Bug#1014872: Failure to load kernel modules at boot time

2022-07-13 Thread Eduardo Casais
Package: systemd Version: 247.3-7 Dear Maintainers, At boot time, linux produces a series of error messages stating that a kernel module cannot be loaded. Inspecting the output of journalctl, I find the following lines: Jun 29 16:53:25 AREPPIM001 systemd-modules-load[218]: Failed to insert

Bug#1014872: Failure to load kernel modules at boot time

2022-07-13 Thread Michael Biebl
Control: tags -1 + moreinfo On Wed, 13 Jul 2022 16:59:50 +0200 Eduardo Casais wrote: Package: systemd Version: 247.3-7 Dear Maintainers, At boot time, linux produces a series of error messages stating that a kernel module cannot be loaded. Inspecting the output of journalctl, I find the

Bug#1014879: Please do not depend on gnome-remote-desktop

2022-07-13 Thread Josh Triplett
Package: gnome-control-center Version: 1:42.3-1 Severity: normal X-Debbugs-Cc: j...@joshtriplett.org gnome-control-center 1:42.3-1 adds a dependency on gnome-remote-desktop, a daemon for remote desktop sharing. I'd like to avoid installing that on my system, for the same reason I avoid installing

Bug#1003225: on resume, tries to openat() mountpoint of remote nfs mounts that are not yet available, thus delaying network configuration

2022-07-13 Thread Andras Korn
On Mon, Jul 11, 2022 at 10:47:26AM +0300, Martin-Éric Racine wrote: > On Thu, 6 Jan 2022 18:38:47 +0100 Michael Biebl wrote: > > On 06.01.22 17:26, Andras Korn wrote: > > > Package: systemd-timesyncd > > > Version: 249.7-1 > > > Severity: normal > > > Tags: upstream > > > > > > Hi, > > > > > > I

Bug#1014881: ITP: libsyntax-keyword-multisub-perl -- multiple subroutine dispatch syntax extension

2022-07-13 Thread gregor herrmann
Package: wnpp Owner: gregor herrmann Severity: wishlist X-Debbugs-CC: debian-de...@lists.debian.org, debian-p...@lists.debian.org * Package name: libsyntax-keyword-multisub-perl Version : 0.02 Upstream Author : Paul Evans * URL :

Bug#1014319: depmod: WARNING: could not open modules.builtin.modinfo at /var/tmp/mkinitramfs_vBlw4a/lib/modules/5.18.0-2-amd64: No such file or directory

2022-07-13 Thread Michael Biebl
Am 12.07.22 um 20:54 schrieb Salvatore Bonaccorso: personally i would prefer if we can do it a regular kernel-team upload, there were some other changes pending. Will ping Ben on IRC to ask. Otherwise I guess the NMU is fine. I've seen the upload. Thank you both! OpenPGP_signature

Bug#1014880: sftp_readdir_async: Assertion `offset == 0' failed on OPENDIR when mounted through nfs

2022-07-13 Thread Frank de Lange
Package: sshfs Version: 3.7.1+repack-2 Severity: grave Justification: renders package unusable Given the following setup: - remote directory mounted to /mnt/incoming on server using the following options: sshfs -d --debug librarian@archive:/mnt/incoming /mnt/incoming -o

Bug#1014431: popularity-contest: automatically create hostid if not specified in popularity-contest.conf

2022-07-13 Thread Bill Allombert
On Wed, Jul 06, 2022 at 12:05:49AM +0200, Ansgar wrote: > Package: popularity-contest > Version: 1.73 > Severity: wishlist > > It would be nice if it was not required to have host-specific data in > the configuration file (MY_HOSTID). > If no MY_HOSTID is specified, popularity-contest could for

Bug#1014882: RM: faulthandler -- RoQA; Dangling Cruft in Experimental

2022-07-13 Thread Boyuan Yang
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Dear Debian FTP Masters, Please remove faulthandler/3.1-1 ( https://tracker.debian.org/pkg/faulthandler ) from Debian Experimental. It is a python2-only package and nowadays completely useless.

Bug#1014867: wolfssl: Update to latest upstream version

2022-07-13 Thread Bastian Germann
Source: wolfssl Version: 5.2.0-2 Severity: important Hi, Please update to the latest wolfssl upstream release which is 5.4.0 currently. 5.3.0 was not released to the Debian archive at all. Thanks for maintaining wolfssl, Bastian

Bug#1014868: python3-pyaudio: needs patch for python 3.10

2022-07-13 Thread Oswald Buddenhagen
Package: python3-pyaudio Version: 0.2.11-1.4 Severity: normal pyaudio started throwing this message: SystemError: PY_SSIZE_T_CLEAN macro must be defined for '#' formats https://stackoverflow.com/questions/70344884/pyaudio-write-systemerror-py-ssize-t-clean-macro-must-be-defined-for-format

Bug#1014869: reportbug: support calling sendmail without envelope address

2022-07-13 Thread Oswald Buddenhagen
Package: reportbug Version: 11.5.0 Severity: wishlist sendmail just rejected to send my report, because the current user didn't have permission to set a return address. this is actually quite expected, and using the sendmail -f option is rather unusual. i suggest not doing that by default, or

Bug#1014878: gtk4: FTBFS with nocheck profile; python3-gi missing from build-deps

2022-07-13 Thread Evangelos Ribeiro Tzaras
Source: gtk4 Version: 4.6.5+ds-1pureos2 Severity: normal Dear Maintainer, while building gtk4 in PureOS (hence the -) we ran into a FTBFS when using nocheck: python3-gi is missing when building with nocheck, see: ../../../testsuite/introspection/meson.build:1:0: ERROR: python3 is missing

Bug#1014865: [Pkg-raspi-maintainers] Bug#1014865: raspi-firmware dependencies

2022-07-13 Thread Diederik de Haas
On woensdag 13 juli 2022 15:41:25 CEST Jiri Kastner wrote: > raspi-firmware should depend on following packages: > - firmware-brcm80211 > - firmware-misc-nonfree > - bluez-firmware I'd object to the use (and implementation) of the word 'depend'. A recommends or suggests seems more appropriate.

Bug#1013801: gopsutil and slinkwatch/ifplugo

2022-07-13 Thread Sascha Steinbiss
fixed 1013801 golang-github-satta-ifplugo/0.0~git20200508.ca679be-6 reassign 1013818 golang-github-satta-ifplugo fixed 1013818 golang-github-satta-ifplugo/0.0~git20200508.ca679be-6 thanks Setting these bugs to fixed. * golang-github-satta-ifplugo is ready for gopsutil v3. * slinkwatch does

Bug#1014865: raspi-firmware dependencies

2022-07-13 Thread Jiri Kastner
Package: raspi-firmware Version: 1.20220331+ds-2 Severity: normal Tags: d-i raspi-firmware should depend on following packages: - firmware-brcm80211 - firmware-misc-nonfree - bluez-firmware all packages above provide /lib/firmware/brcm files bluez-firmware is needed to use bluetooth (tested

Bug#57280: Reassign this bug

2022-07-13 Thread Marc Haber
Control: tags -1 wontfix thanks On Sat, Oct 08, 2005 at 12:39:29PM +0200, Marc Haber wrote: > On Fri, Oct 07, 2005 at 02:31:40PM +0200, Christian Perrier wrote: > > The analysis of this bug report shows that the user reporting it wants > > to have the choice, possibly during an initial install,

Bug#1014870: perlrdf: Source-only upload is needed

2022-07-13 Thread Boyuan Yang
Source: perlrdf Version: 0.004-3 Severity: important X-Debbugs-CC: d...@jones.dk Dear Debian perlrdf package maintainer, According to https://tracker.debian.org/pkg/perlrdf , your package needs another source-only upload to be able to migrate to Debian Testing. Please consider making another

Bug#1014871: reportbug: is being confusing with the -r option

2022-07-13 Thread Oswald Buddenhagen
Package: reportbug Version: 11.5.0 Severity: normal after submitting a bug failed, i changed my mta config, and subsequently ran "reportbug -r /tmp/reportbug-..." as instructed. as the mail was already in its final state, i immediately exited the editor, which lead to this weird interaction:

Bug#1014814: [Pkg-privacy-maintainers] Bug#1014814: ITP: onionprobe -- test/monitor tool for Tor Onion Services sites

2022-07-13 Thread Georg Faerber
Control: tags -1 + pending Packaging lives at [1], initial upload done, now in NEW. Cheers, Georg [1] https://salsa.debian.org/pkg-privacy-team/onionprobe

Bug#520037: adduser: could --force-badname permit non-ASCII usernames?

2022-07-13 Thread Marc Haber
Adduser 3.122 will include a major rework of the check name infrastructure including a new --allow-all-names option that allows all user and group names that useradd will allow. This bug will close with the 3.122 upload. Please feel free to reopen this bug with an explanation why the changes do

Bug#1014876: Please make it possible to override /etc/tmpreaper.conf from a user configfile

2022-07-13 Thread Andras Korn
Package: tmpreaper Version: 1.6.17 Severity: wishlist Hi, I think you should add something like [ -r /etc/default/tmpreaper ] && . /etc/default/tmpreaper at the bottom of /etc/tmpreaper.conf. Currently, every upgrade that adds some new setting to tmpreaper.conf requires the user to re-edit

Bug#774046: [adduser] weak username check provided by --force-badname does not match useradd capability

2022-07-13 Thread Marc Haber
Adduser 3.122 will include a major rework of the check name infrastructure including a new --allow-all-names option that allows all user and group names that useradd will allow. This bug will close with the 3.122 upload. Please feel free to reopen this bug with an explanation why the changes do

Bug#1014875: freecad: FTBFS on armel and armhf: error: ‘GL_PROJECTION’ was not declared in this scope;

2022-07-13 Thread Tobias Frost
Package: freecad Version: 0.20+dfsg1-2 Severity: serious Tags: ftbfs Justification: FTBFS Freecad FTBFS on the buildds, see https://buildd.debian.org/status/package.php?p=freecad build logs indicate this error: cd /<>/debian/build-py3/src/Mod/Fem/App && /usr/bin/c++ -DBOOST_ALL_NO_LIB

Bug#1014866: freecad: FTBFS with opencascade 7.6

2022-07-13 Thread Tobias Frost
This could be actually a packaging problem in opencascade -- I'm currently investigating and will update ASAP. -- tobi

Bug#948712: [Pkg-raspi-maintainers] Bug#948712: Bug#948712: Pinebook Pro also uses this chip

2022-07-13 Thread Diederik de Haas
On woensdag 13 juli 2022 09:58:29 CEST Ben Hutchings wrote: > > > Is this about the /lib/firmware/brcm/brcmfmac434* files? > > So long as those files are in linux-firmware.git, it should be fine to > ship them in firmware-brcm80211. If they aren't, they should be added > there first.

Bug#1014883: RFP: Rambox -- all-in-one workspace organizer (Electron Based)

2022-07-13 Thread Andrés Segarra
Package: wnpp Severity: wishlist * Package name : Rambox (or Rambox App) Version : 2.0.6 * URL : https://github.com/ramboxapp/download (it has the source code in this repository, and also a .deb package that works with debian perfectly) * License : GPL Description : Electron based workspace

Bug#1014308: llvm-toolchain-13 13.0.1-6~deb11u1 flagged for acceptance

2022-07-13 Thread Adam D Barratt
package release.debian.org tags 1014308 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: llvm-toolchain-13 Version:

Bug#1014324: rustc-mozilla 1.59.0+dfsg1-1~deb11u1 flagged for acceptance

2022-07-13 Thread Adam D Barratt
package release.debian.org tags 1014324 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: rustc-mozilla Version:

Bug#1014327: cargo-mozilla 0.57.0-7~deb11u1 flagged for acceptance

2022-07-13 Thread Adam D Barratt
package release.debian.org tags 1014327 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: cargo-mozilla Version:

Bug#1014326: rust-cbindgen 0.23.0-1~deb11u1 flagged for acceptance

2022-07-13 Thread Adam D Barratt
package release.debian.org tags 1014326 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: rust-cbindgen Version:

Bug#1014889: Xorg radeon driver [Xpress 200M]: cannot run GNOME system apps, "r300 FP: Compiler Error: ../src/gallium/drivers/r300/compiler/r300_fragprog_emit.c::emit_alu(): Too many ALU instructions

2022-07-13 Thread Dennis Mayr
Package: xserver-xorg-video-radeon Version: 1:19.1.0-3 Severity: important X-Debbugs-Cc: dmayr@gmail.com Dear Maintainer, while using the Xorg `radeon` driver [ATi Xpress 200M onboard chip, `r300`], it's not possible to run GNOME system apps (e.g. gnome-control-center, gnome- software, other

Bug#1014874: kicad: FTBFS with opencascade 7.6

2022-07-13 Thread Carsten Schoenert
Hello Seth, Am Wed, Jul 13, 2022 at 05:10:27PM +0200 schrieb Tobias Frost: > Source: kicad > Version: 6.0.6+dfsg-1 > Severity: important > > Dear maintainers, > > I'm currently preparing the opencascade library transition and > KiCAD is FTBFS with opencascade 7.6 > > Once the transition

Bug#1014832: libdecaf: Source-only upload is needed

2022-07-13 Thread Dennis Filder
X-Debbugs-CC: Boyuan Yang On Tue, Jul 12, 2022 at 04:43:07PM -0400, Boyuan Yang wrote: > According to https://tracker.debian.org/pkg/libdecaf , you package needs > another source-only upload to be able to migrate to Debian Testing. Please > consider making another upload. Will that actually

Bug#1014618: tpot: FTBFS in unstable

2022-07-13 Thread Sergio Durigan Junior
Control: tags -1 + patch On Friday, July 08 2022, Steve Langasek wrote: > Hi Christian, > > While trying to get the tpot package built in Ubuntu, I've found that it > fails to build in both Debian and Ubuntu: > > [...] > == >

Bug#1014845: [Pkg-javascript-devel] Bug#1014845: node-moment: CVE-2022-31129

2022-07-13 Thread Yadd
On 13/07/2022 08:38, Salvatore Bonaccorso wrote: Source: node-moment Version: 2.29.3+ds-1 Severity: grave Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for node-moment. CVE-2022-31129[0]: | moment is a JavaScript

Bug#1014879: Please do not depend on gnome-remote-desktop

2022-07-13 Thread Jeremy Bicha
On Wed, Jul 13, 2022 at 6:27 PM Josh Triplett wrote: > gnome-control-center 1:42.3-1 adds a dependency on gnome-remote-desktop, Please see https://launchpad.net/bugs/1980606 (which was mentioned in the debian/changelog). Without that dependency, the app crashes. Perhaps the gsettings schemas

Bug#1014450: usernames have a 32 character limit

2022-07-13 Thread Matt Barry
On Wed, 2022-07-13 at 22:44 +0200, Marc Haber wrote: > Hi, > > On Wed, Jul 06, 2022 at 12:32:16PM +0200, Marc Haber wrote: > > the useradd documentation says that a user name has a 32 character > > limit. We should enforce this as well. > > Matt, would you want to take a quick plunge at this as

Bug#1008082: Beginning work

2022-07-13 Thread Marc Haber
On Wed, Jul 13, 2022 at 04:46:53PM -0400, Jason Franklin wrote: > On Wed, Jul 13, 2022 at 10:18:55PM +0200, Marc Haber wrote: > > If adduser --lock sets the shell to nologin, how would we restore the > > account? Setting shell to /bin/bash, allowing --unlock a --shell option? > > Or should we

Bug#1014886: RFP: tvision -- modern port of Turbo Vision, a framework for text-based user interfaces

2022-07-13 Thread Adam Borowski
Package: wnpp Severity: wishlist * Package name: tvision Upstream Author : Borland → magiblot * URL : https://github.com/magiblot/tvision * License : Public Domain → MT Programming Lang: C++ Description : modern port of Turbo Vision, a framework for text-based

Bug#1014829: kerberos-configs: consider setting rdns=false by default

2022-07-13 Thread Sam Hartman
Andreas> According to [1], the upstream implicit default of "rdns = Andreas> true" is there for historical reasons only, and upstream Andreas> suggests to consider setting it to "false": Andreas> """ Consider setting rdns to false in order to reduce your Andreas> dependence on

Bug#1013896: qtbase-opensource-src: Use KDE Qt as upstream instead of qt.io

2022-07-13 Thread Dmitry Shachnev
On Mon, Jul 11, 2022 at 04:22:01PM -0400, Shmerl wrote: > I know Wayland Qt patches are critical for stable Plasma experience, > but I'm not an expert on all of these. Wayland patches are applied, as I said. > May be some communication between upstream KDE developers and Debian > team would be

Bug#1014874: kicad: FTBFS with opencascade 7.6

2022-07-13 Thread Tobias Frost
Hi Carsten, sorry for the buzz, it seems that I messed up on the opencascade packaging side,at least for that missing include file. I'll keep you updated once I have more information… -- tobi

Bug#1014874: kicad: FTBFS with opencascade 7.6

2022-07-13 Thread Tobias Frost
Hi Carsten, sorry for the buzz, it seems that I messed up on the opencascade packaging side,at least for that missing include file. I'll keep you updated once I have more information… -- tobi

Bug#1014888: ITP: libutil-h2o-perl -- module to turn hashrefs into objects with accessors for keys

2022-07-13 Thread gregor herrmann
Package: wnpp Owner: gregor herrmann Severity: wishlist X-Debbugs-CC: debian-de...@lists.debian.org, debian-p...@lists.debian.org * Package name: libutil-h2o-perl Version : 0.18 Upstream Author : Hauke D * URL : https://metacpan.org/release/Util-H2O * License

Bug#1014890: RFP: python3-looseversion -- Version numbering for anarchists and software realists

2022-07-13 Thread Yaroslav Halchenko
Package: wnpp Severity: wishlist X-Debbugs-Cc: debian-pyt...@lists.debian.org * Package name: python3-looseversion Version : 1.0.1 Upstream Author : Chris Markiewicz * URL : https://github.com/effigies/looseversion * License : Python Programming Lang: Python

Bug#1014884: statsmodels: FTBFS on mipsel (pythran shifted tolerances)

2022-07-13 Thread Drew Parsons
Source: statsmodels Version: 0.13.2+dfsg-2 Severity: serious Justification: FTBFS Control: forwarded -1 https://github.com/statsmodels/statsmodels/issues/8341 mipsel is failing to build statsmodels 0.13.2+dfsg-2. Problem seems to be another shift in tolerance requirements triggered by scipy

Bug#1014885: Conflict: unknown-field Go-Import-Path x missing-xs-go-import-path-for-golang-package

2022-07-13 Thread Joao Eriberto Mota Filho
Package: lintian Version: 2.115.2 Severity: important X-Debbugs-Cc: eribe...@debian.org Dear Maintainer, When doing a QA revision over the package "gox", I received the warning: W: gox source: unknown-field Go-Import-Path However, the right field name is XS-Go-Import-Path, not

Bug#1014376: openvpn: Using unreleased version with backwards incompatible changes is not a good idea

2022-07-13 Thread Lucas Kanashiro
Hi, On Fri, 8 Jul 2022 11:36:51 +0200 Raphael Hertzog wrote: > On Wed, 06 Jul 2022, Bernhard Schmidt wrote: > > > As such I really believe that this git snapshot should have stayed in > > > experimental. Why was it uploaded to unstable before its upstream > > > release? > > > > I respectfully

Bug#1008082: Beginning work

2022-07-13 Thread Marc Haber
On Thu, May 26, 2022 at 09:34:30AM -0400, Jason Franklin wrote: > I plan to start work on this issue in the next few days. > > Let me know if this conflicts with anyone's plans! Hi Jason, are you progressing here? If not, I'd like to tackle this with some low priority. If adduser --lock sets

Bug#1013896: qtbase-opensource-src: Use KDE Qt as upstream instead of qt.io

2022-07-13 Thread Hillel Lubman
On Wed, 13 Jul 2022 21:02:02 +0300 Dmitry Shachnev wrote: > > I expect users to complain if something doesn't work. > > Also note that now we get releases from Qt every couple of months, so sooner > or later we will get most of the patches this way (and it will be easier to > deal with the

Bug#1014845: [Pkg-javascript-devel] Bug#1014845: node-moment: CVE-2022-31129

2022-07-13 Thread Salvatore Bonaccorso
Hi Yadd, On Wed, Jul 13, 2022 at 09:14:56PM +0200, Yadd wrote: > On 13/07/2022 08:38, Salvatore Bonaccorso wrote: > > Source: node-moment > > Version: 2.29.3+ds-1 > > Severity: grave > > Tags: security upstream > > X-Debbugs-Cc: car...@debian.org, Debian Security Team > > > > > > Hi, > > > >

Bug#1014450: usernames have a 32 character limit

2022-07-13 Thread Marc Haber
Hi, On Wed, Jul 06, 2022 at 12:32:16PM +0200, Marc Haber wrote: > the useradd documentation says that a user name has a 32 character > limit. We should enforce this as well. Matt, would you want to take a quick plunge at this as well? You're still deeply acquained with the entire name checking

Bug#1008082: Beginning work

2022-07-13 Thread Jason Franklin
On Wed, Jul 13, 2022 at 10:18:55PM +0200, Marc Haber wrote: > are you progressing here? If not, I'd like to tackle this with some low > priority. Unfortunately, I have not made any progress on this yet. Too many personal things in the way... > If adduser --lock sets the shell to nologin, how

Bug#994540: transition: imagemagick

2022-07-13 Thread Sebastian Ramacher
Hi On 2021-09-29 10:38:07 +0200, jo...@mister-muffin.de wrote: > In-reply-to: > From: Johannes Schauer Marin Rodrigues > > Hi, > > On Sun, 26 Sep 2021 21:27:19 +0200 Sebastian Ramacher > wrote: > > On 2021-09-17 12:51:37 +, Bastien Roucariès wrote: > > > Package: release.debian.org > > >

Bug#1014879: Please do not depend on gnome-remote-desktop

2022-07-13 Thread Josh Triplett
On Wed, Jul 13, 2022 at 10:51:05PM +0200, Jeremy Bicha wrote: > On Wed, Jul 13, 2022 at 6:27 PM Josh Triplett wrote: > > gnome-control-center 1:42.3-1 adds a dependency on gnome-remote-desktop, > > Please see https://launchpad.net/bugs/1980606 (which was mentioned in > the debian/changelog). >

Bug#1014450: usernames have a 32 character limit

2022-07-13 Thread Marc Haber
On Wed, Jul 13, 2022 at 04:50:20PM -0400, Matt Barry wrote: > On Wed, 2022-07-13 at 22:44 +0200, Marc Haber wrote: > > On Wed, Jul 06, 2022 at 12:32:16PM +0200, Marc Haber wrote: > > > the useradd documentation says that a user name has a 32 character > > > limit. We should enforce this as well. >

Bug#1013204: markdown-it-py: FTBFS with flit < 3.4 (<3.3?)

2022-07-13 Thread David (Plasma) Paul
On Wed, 22 Jun 2022 14:13:29 +0200 Bastian Germann wrote: > On Sat, 18 Jun 2022 17:58:24 -0500 "David (Plasma) Paul" > wrote: > > markdown-it-py fails to build from source with versions of flit > > earlier than 3.4 according to the package's pyproject.toml.[0] > > Attached is a patch to fix the

Bug#1014836: remrun: Source-only upload is needed

2022-07-13 Thread Peter Pentchev
On Tue, Jul 12, 2022 at 04:50:57PM -0400, Boyuan Yang wrote: > Source: remrun > Version: 0.2.0-1 > Severity: important > X-Debbugs-CC: r...@debian.org > > Dear Debian remrun package maintainer, > > According to https://tracker.debian.org/pkg/remrun , your package needs > another source-only

  1   2   >