Bug#1059315: tinyxml: CVE-2023-34194 CVE-2023-40462 CVE-2023-40458

2023-12-30 Thread Felix Geyer
Hi, On 30.12.23 16:06, Guilhem Moulin wrote: Control: tag -1 + patch Hi, I had a look at these issues for Buster (LTS). Unfortunately the upstream project appears to be inactive. On Fri, 22 Dec 2023 at 14:50:57 +0100, Moritz Mühlenhoff wrote: CVE-2023-34194[0]: | StringEqual in

Bug#1057693: valgrind: i386 vex x86->IR: unhandled instruction bytes: 0x2E 0x8D 0xB4 0x26

2023-12-11 Thread Felix Geyer
On Fri, 8 Dec 2023 15:48:27 +0100 Emanuele Rocca wrote: > Hi Simon, > > On 2023-12-07 08:39, Simon Josefsson wrote: > > During debci autopkgtest of a new version of libgssglue on i386 I got > > a failure like this, which is fatal and execution halts. > > > > 117s vex x86->IR: unhandled

Bug#1057428: libseccomp ftbfs on i386

2023-12-04 Thread Felix Geyer
On 04.12.23 22:03, Matthias Klose wrote: Package: src:libseccomp Version: 2.5.4-2 Severity: serious Tags: sid trixie User: debian-pyt...@lists.debian.org Usertags: python3.12 libseccomp ftbfs on i386. probably not related to Python 3.12, but blocks the addition of Python 3.12 Seems like

Bug#1055285: libseccomp misbehave on loong64

2023-11-05 Thread Felix Geyer
Hi, On 03.11.23 15:39, Miao Wang wrote: Package: libseccomp2 Version: 2.5.4-1+loong64 Severity: normal Tags: patch libseccomp2 in debian ports lonng64 cannot work properly because it is using a wrong mapping between syscall numbers and names, which can be reproduced by first installing package

Bug#1051323: libseccomp: Please add support for loongarch64

2023-10-29 Thread Felix Geyer
Control: tags -1 - patch Hi, On 06.09.23 10:27, zhangdandan wrote: Would it be possible to include the support for LoongArch in the next upload? Your opinions are welcome. If you have any questions, you can contact me at any time. [1]:https://github.com/seccomp/libseccomp

Bug#1037420: bookworm-pu: package systemd/252.11-1~deb12u1

2023-07-10 Thread Felix Geyer
Hi Luca, On Mon, 12 Jun 2023 15:33:45 +0100 Luca Boccassi wrote: > Dear Release Team, > > We would like to upload the latest stable point release of systemd 252 > to bookworm-p-u. Stable release branches are maintained upstream with > the intention of providing bug fixes only and no

Bug#1035094: udev: /dev/serial/by-id/ symlinks not created anymore for USB devices

2023-04-29 Thread Felix Geyer
Package: udev Version: 247.3-7+deb11u2 Tags: bullseye Since udev 247.3-7+deb11u2 /dev/serial/by-id/* symlinks are not created anymore for USB serial devices. This is a regression from backporting udev-always-create-device-symlinks-for-USB-disks.patch It was fixed upstream by

Bug#1033825: systemd-zram-generator: Not started automatically on install

2023-04-02 Thread Felix Geyer
Package: systemd-zram-generator Version: 1.1.2-2 systemd-zram-generator provides a default configuration for zram0 but doesn't start it automatically on package installation. It's only active after calling systemctl daemon-reload manually or rebooting. I think the package should call

Bug#1033641: libseccomp failing to build from source on bookworm with python 3.11

2023-03-31 Thread Felix Geyer
On 29.03.23 10:28, Mayer, Dirk wrote: make[3]: Nothing to be done for 'install-data-am'. /usr/lib/python3/dist-packages/setuptools/command/install.py:34: SetuptoolsDeprecationWarning: setup.py install is deprecated. Use build and pip and other standards-based tools. warnings.warn(

Bug#1003044: internal 'getzoneinfofile_stream' method emits a warning message

2023-03-05 Thread Felix Geyer
On Sun, 05 Mar 2023 18:50:06 +0100 Arnout Vandecappelle wrote: This still fails to address the original issue: an irrelevant warning is printed when performing a fairly mundane thing (requesting a nonexistent timezone). That part could be easily fixed. We can just remove the fallback from

Bug#1003044: python3-dateutil: python_dateutil get_zonefile_instance functionality is broken (no zoneinfo found)

2023-02-21 Thread Felix Geyer
On 21.02.23 20:46, Sandro Tosi wrote: it produces output on stderr, which many tools consider it an error and fails build. When raising the severity of a bug to grave I would expect some concrete details on what exactly is broken instead of a hand-wavy "breaks some stuff". But anyway let's

Bug#1003044: python3-dateutil: python_dateutil get_zonefile_instance functionality is broken (no zoneinfo found)

2023-01-29 Thread Felix Geyer
On Sat, 7 Jan 2023 03:34:19 -0500 Sandro Tosi wrote: > python-dateutil expects to have 'dateutil-zoneinfo.tar.gz' in it's directory > tree, but this file is removed in the packaging. > > Error: > "/usr/lib/python3/dist-packages/dateutil/zoneinfo/__init__.py:26: UserWarning: > I/O error(2):

Bug#1023105: bullseye-pu: package tinyxml/2.6.2-4+deb11u1

2022-11-25 Thread Felix Geyer
On 23.11.22 21:48, Adam D. Barratt wrote: Control: tags -1 + confirmed On Sun, 2022-10-30 at 10:31 +0100, Felix Geyer wrote: Fixing the no-dsa tagged CVE-2021-42260 [ Impact ] DoS vulnerability Please go ahead. Uploaded, thanks! Felix

Bug#1023959: python-crc32c ftbfs on arm64

2022-11-13 Thread Felix Geyer
On Sun, 13 Nov 2022 09:10:37 +0100 Matthias Klose wrote: Package: src:python-crc32c Version: 2.3-1 Severity: serious Tags: sid bookworm ftbfs User: debian-pyt...@lists.debian.org Usertag: python3.11 [...] In file included from crc32c_arm64.c:22:

Bug#1023105: bullseye-pu: package tinyxml/2.6.2-4+deb11u1

2022-10-30 Thread Felix Geyer
@@ +tinyxml (2.6.2-4+deb11u1) bullseye; urgency=medium + + * Import fix for CVE-2021-42260. +- Add CVE-2021-42260.patch + + -- Felix Geyer Thu, 20 Oct 2022 16:32:51 +0200 + tinyxml (2.6.2-4) unstable; urgency=medium [ Helmut Grohne ] diff -Nru tinyxml-2.6.2/debian/patches/CVE-2021-42260.patch

Bug#997366: speedcrunch: FTBFS: TypeError: 'SpeedCrunchSessionLexer' object is not callable

2022-10-29 Thread Felix Geyer
hinx-4.patch + + -- Felix Geyer Sat, 29 Oct 2022 09:59:26 +0200 + speedcrunch (0.12.0-5) unstable; urgency=medium * d/patches, d/control: fix docs build with Sphinx >= 2.0 diff -Nru speedcrunch-0.12.0/debian/patches/0007-fix-docs-build-with-Sphinx-4.patch speedcrunch-0.12.0/debian/pat

Bug#1020453: docker.io: consider backporting to stable

2022-10-15 Thread Felix Geyer
On Wed, 21 Sep 2022 22:33:39 +0200 Libor Klepáč wrote: Package: docker.io Followup-For: Bug #908603 Hello Maintainers, could you please consider backporting docker.io version 20.10.17 to stable? We are hitting problem with graylog docker image.

Bug#1012140: bullseye-pu: package docker.io/20.10.5+dfsg1-1+deb11u2

2022-05-30 Thread Felix Geyer
of +containers (Closes: #989490) + * Explicitly pass the containerd socket path to dockerd to make sure it +doesn't start containerd on its own. + + -- Felix Geyer Mon, 30 May 2022 20:34:49 +0200 + docker.io (20.10.5+dfsg1-1+deb11u1) bullseye; urgency=medium * Backport patches for CVE-2021-41089

Bug#989490: docker: systemd shutdown script takes a long time waiting for containers that aren't running?

2021-12-20 Thread Felix Geyer
Control: tags -1 patch On Tue, 12 Oct 2021 13:47:08 +0200 pedeb wrote: Hi Andrew, Looks like the systemd unit is not properly configured. I had the same the same problem and here is a solution. Meanwhile this is not solved in debian, you can place the systemd unit in a way that is not

Bug#996025: bullseye-pu: package libseccomp/2.5.1-1+deb11u1

2021-12-05 Thread Felix Geyer
On 03.12.21 17:40, Adam D. Barratt wrote: Control: tags -1 + confirmed On Thu, 2021-11-25 at 19:29 +0100, Felix Geyer wrote: On Sun, 10 Oct 2021 14:34:30 +0200 Felix Geyer wrote: libseccomp 2.5.1 only knows about syscall up to Linux 5.8. The proposed changes add the syscalls up to Linux 5.14

Bug#996025: bullseye-pu: package libseccomp/2.5.1-1+deb11u1

2021-11-25 Thread Felix Geyer
On Sun, 10 Oct 2021 14:34:30 +0200 Felix Geyer wrote: Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu [ Reason ] libseccomp 2.5.1 only knows about syscall up to Linux 5.8. The proposed changes add the syscalls up to Linux

Bug#996025: bullseye-pu: package libseccomp/2.5.1-1+deb11u1

2021-10-10 Thread Felix Geyer
; urgency=medium + + * Add support for syscalls up to Linux 5.14. + + -- Felix Geyer Sun, 10 Oct 2021 13:35:59 +0200 + libseccomp (2.5.1-1) unstable; urgency=medium * New upstream release. diff -Nru libseccomp-2.5.1/debian/patches/series libseccomp-2.5.1/debian/patches/series --- libseccomp

Bug#994285: libseccomp: FTBFS on arm64, armhf, mips64el and mipsel

2021-09-30 Thread Felix Geyer
Hi, On 30.09.21 08:40, Johannes Schauer Marin Rodrigues wrote: Hi Felix, On Fri, 17 Sep 2021 07:15:16 +0200 Johannes Schauer Marin Rodrigues wrote: you set the upstream bug to https://github.com/seccomp/libseccomp/issues/336 but I don't think that is correct. The failures is not the same

Bug#976090: zfsutils-linux: trim script fails if a pool doesn't support it

2020-11-29 Thread Felix Geyer
Package: zfsutils-linux Version: 0.8.5-1 /usr/lib/zfs-linux/trim fails if one of the pools doesn't support trim (e.g. is on a HDD). zpool trim seems to return exit code 255 in these cases. Since the script is started with sh -e trim is never run on any subsequent pools.

Bug#973533: nmu: util-linux_2.36-3+b1

2020-11-01 Thread Felix Geyer
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu util-linux doesn't know about the new capabilities from Linux 5.9 yet, e.g.: % setpriv --bounding-set -all echo test setpriv: libcap-ng is too old for "all" caps The problem is not

Bug#970760: pipewire: PipeWire failing to open devices and loading libspa-alsa

2020-10-20 Thread Felix Geyer
On Wed, 23 Sep 2020 01:18:59 +0200 Paul Menzel wrote: Package: pipewire Version: 0.3.12-1 Severity: normal Forwarded: https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/293 Dear Debian folks, If PipeWire is started first in the user session, it prevents PulseAudio from accessing the

Bug#972558: gnome-settings-daemon: gsd-housekeeping crashes with filesystem that lack atime

2020-10-20 Thread Felix Geyer
Package: gnome-settings-daemon Version: 3.38.0-2 Tags: fixed-upstream gsd-housekeeping segfaults every few minutes when /home is on a filesystem that lacks atime (for example ZFS with atime=off): >

Bug#970632: nmu: util-linux_2.36-3

2020-09-20 Thread Felix Geyer
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu util-linux doesn't know about the new capabilities from Linux 5.8 yet, e.g.: % setpriv --bounding-set -all echo test setpriv: libcap-ng is too old for "all" caps The problem is not

Bug#962141: docker.io: CVE-2020-13401

2020-06-14 Thread Felix Geyer
for CVE-2020-13401 (Closes: #962141) + + -- Felix Geyer Sun, 14 Jun 2020 22:12:29 +0200 + docker.io (18.09.1+dfsg1-7.1+deb10u1) buster-security; urgency=medium [ Arnaud Rebillout ] diff -Nru docker.io-18.09.1+dfsg1/debian/patches/cve-2020-13401-disable-IPv6-router-advertisements.patch

Bug#954852: [Pkg-cmake-team] Bug#954852: cmake depends on libarchive13 3.3.3, but only 3.2.2 is available

2020-03-24 Thread Felix Geyer
Hi Andreas, On 24.03.20 14:14, Martijn de Gouw wrote: Package: cmake Version: 3.13.2-1~bpo9+1 Severity: important Dear Maintainer, cmake in stretch-backports depends on libarchive13 (>= 3.3.3), but libarchive13 (3.2.2-2+deb9u2) is the highest available version for stretch (including

Bug#950627: Regression: Unable to config with CMake

2020-02-10 Thread Felix Geyer
On 10.02.20 02:24, Brian Clinkenbeard wrote: I believe I am also having this issue. "find_package(SDL2 REQUIRED)" in CMakeLists.txt yields the following error: -- Target architecture: x86_64 CMake Error at /usr/share/cmake-3.16/Modules/FindPackageHandleStandardArgs.cmake:146 (message):  

Bug#950688: boost1.71: python autopkgtest fails

2020-02-04 Thread Felix Geyer
Source: boost1.71 Version: 1.71.0-5 Severity: serious The boost1.71 python autopkgtest fails with cmake >= 3.16 because the python include path isn't added correctly. In debian/tests/srcs/python/CMakeLists.txt the variable Python_INCLUDE_DIR is used but the correct variable is

Bug#950627: Regression: Unable to config with CMake

2020-02-04 Thread Felix Geyer
Hi, On 2020-02-04 11:41, Kyuma Ohta wrote: Package: libsdl2-dev Version: 2.0.10+dfsg1-2 Severity: important Dear Maintainer, From this version, building any softwares with CMake, not configurable. This is *REGRESSION* of fix of BUG #946496. Please revert this fix, or apply fixes to CMake

Bug#947061: libsdl2-gfx-dev missing SDL2_gfxPrimitives_font.h

2020-02-03 Thread Felix Geyer
Hi David, On 20.12.19 08:10, David Griffith wrote: Package: libsdl2-gfx-dev Version: 1.0.4+dfsg-3 Severity: important I tried to compile a program that requires SDL2_gfxPrimitives_font.h from libsdl2-gfx-dev. Specifically I tried to compile https://github.com/lkundrak/koules from the SDL2

Bug#949813: purple-plugin-pack: diff for NMU version 2.7.0-3.1

2020-01-25 Thread Felix Geyer
Hi Laurent, On 25.01.20 10:39, Laurent Bigonville wrote: Package: purple-plugin-pack Version: 2.7.0-3 Severity: normal Tags: patch pending Dear maintainer, I've prepared an NMU for purple-plugin-pack (versioned as 2.7.0-3.1) and uploaded it to DELAYED/10. Please feel free to tell me if I

Bug#909740: libsdl2-dev: No longer multi-arch co-installable

2020-01-19 Thread Felix Geyer
Hi Hugh, On 10.12.19 23:18, Hugh McMaster wrote: At this point, I don’t see anything preventing us from adding the extra include path, although I’m going to do some tests builds of various SDL2-based programs to be certain. Neverball could also be patched to call pkg-config with SDL2_ttf,

Bug#948924: [Pkg-cmake-team] Bug#948924: Bug#948924: cmake: FTBFS: test failure against libxslt 1.1.34

2020-01-16 Thread Felix Geyer
On 2020-01-15 03:21, Mattia Rizzolo wrote: Oh wow. So it turns out that my attempt at hastening the rebuilds by pre-installed the new binaries in the choort backfired here. Having said that, reading that .cmake file is't not clear to me why it would skip the test if libxslt1-dev is not

Bug#948924: [Pkg-cmake-team] Bug#948924: cmake: FTBFS: test failure against libxslt 1.1.34

2020-01-14 Thread Felix Geyer
On 14.01.20 23:33, Mattia Rizzolo wrote: Hi Felix, thank you for the quick follow up On Tue, Jan 14, 2020 at 10:29:26PM +0100, Felix Geyer wrote: your package failed to rebuild in a sid/amd64 chroot against libslt 1.1.34. The problem seems to be that cmake's FindLibXslt can't deal

Bug#948924: [Pkg-cmake-team] Bug#948924: cmake: FTBFS: test failure against libxslt 1.1.34

2020-01-14 Thread Felix Geyer
Hi Mattia, On 14.01.20 21:42, Mattia Rizzolo wrote: Source: cmake Version: 3.15.4-1 Severity: important Tags: ftbfs User: libx...@packages.debian.org Usertags: ftbfs-34 Dear maintainer, your package failed to rebuild in a sid/amd64 chroot against libslt 1.1.34. In particular, that version is

Bug#946931: [Pkg-kde-extras] Bug#946931: Bug#946931: quassel-core: apparmor denials

2020-01-11 Thread Felix Geyer
On 11.01.20 02:58, Scott Kitterman wrote: I gave this a try and I still get apparmor denials: Jan 10 20:54:13 relay02 kernel: [ 1372.562938] audit: type=1400 audit(1578707653.245:28): apparmor="DENIED" operation="open" profile="/usr/bin/ quasselcore" name="/proc/sys/kernel/random/boot_id"

Bug#909740: libsdl2-dev: No longer multi-arch co-installable

2019-12-09 Thread Felix Geyer
On 08.12.19 14:03, Hugh McMaster wrote: After reviewing the four proposals, I too prefer the pkg-config solution to the others. That said, your proposal using the Debian-specific header is wonderfully simple. In the longer term, I'm hoping there will be a push at some point to no longer install

Bug#945489: llvm-toolchain-9: autopkgtest needs update for new version of cmake: fails on warning

2019-12-07 Thread Felix Geyer
Hi LLVM maintainers, On Mon, 25 Nov 2019 21:59:48 +0100 Paul Gevers wrote: > Source: llvm-toolchain-9 > Version: 1:9.0.0-3 > Severity: serious > X-Debbugs-CC: debian...@lists.debian.org, cm...@packages.debian.org > Tags: sid bullseye > User: debian...@lists.debian.org > Usertags: needs-update >

Bug#909740: libsdl2-dev: No longer multi-arch co-installable

2019-12-05 Thread Felix Geyer
Hi Simon, On 27.11.19 20:18, Simon McVittie wrote: > In an attempt to unblock this bug I've implemented several versions of a > solution to it, so that the SDL2 maintainers can choose their favourite > and merge it. > > [...] > > Do the SDL2 maintainers have any comments on these MRs, or

Bug#944893: wslay: autopkgtest fails due to broken CMakeLists.txt

2019-11-17 Thread Felix Geyer
Source: wslay Version: 1.1.0-1 Severity: serious The wslay autopkgtest fails since cmake 3.15 entered unstable: > CMake Warning (dev) in CMakeLists.txt: > No project() command is present. The top-level CMakeLists.txt file must > contain a literal, direct call to the project() command. Add

Bug#944892: oce: autopkgtest fails due to broken CMakeLists.txt

2019-11-17 Thread Felix Geyer
Source: oce Version: 0.18.2-3 Severity: serious The oce autopkgtest fails since cmake 3.15 entered unstable: > CMake Warning (dev) in CMakeLists.txt: > No project() command is present. The top-level CMakeLists.txt file must > contain a literal, direct call to the project() command. Add a

Bug#943312: [Pkg-cmake-team] Bug#943312: cmake: FindMPI.cmake does not work during cross compilation

2019-11-12 Thread Felix Geyer
Hi Helmut, On 23.10.19 09:47, Helmut Grohne wrote: Package: cmake Version: 3.13.4-1 Tags: patch upstream User: debian-cr...@lists.debian.org Usertags: ftcbfs Control: affects -1 + src:flann src:hyphy src:liggghts src:sopt FindMPI.cmake uses compiler wrappers such as mpicc to discover the

Bug#886758: fixed in libjsoncpp 1.8.4-1

2019-11-12 Thread Felix Geyer
Hi Peter, On Mon, 01 Oct 2018 14:10:30 + Peter Spiess-Knafl wrote: Source: libjsoncpp Source-Version: 1.8.4-1 We believe that the bug you reported is fixed in the latest version of libjsoncpp, which is due to be installed in the Debian FTP archive. A unit test of cmake 3.15 fails

Bug#943888: check_libs: ignores deleted mmaped files

2019-10-31 Thread Felix Geyer
ere upgraded: root: (sd-pam) (544), systemd (1, 543), [...] -- Felix Geyer Berater Tel.: +49 2166 9901-0 Fax:+49 2166 9901-100 E-Mail: felix.ge...@credativ.de PGP:D1DF 8149 7643 8822 7283 92DC 1004 DA1C FF6D B892 https://www.credativ.de credativ GmbH, HRB Mönchengladbach 12080 USt-ID-Num

Bug#941994: quassel-core: do not require execmem

2019-10-08 Thread Felix Geyer
On 08.10.19 20:57, Christian Göttsche wrote: Package: quassel-core Version: 1:0.13.1-1 Severity: wishlist Currently quassel-core requires the SELinux process permission execmem. This is not a problem by itself, but for a 24/7 daemon hanging on the internet it would be nice to not require it.

Bug#941674: gnome-shell-extension-dashtodock: Not working

2019-10-07 Thread Felix Geyer
Control: tags -1 + fixed-upstream On Thu, 03 Oct 2019 19:10:50 +0200 Domenico Cufalo wrote: Package: gnome-shell-extension-dashtodock Version: 66-1 Severity: grave Justification: renders package unusable Dear Maintainer, * What led up to the situation? Latest upgrade to Gnome 3.34

Bug#941892: gnome-shell-extension-suspend-button: broken with gnome 3.34

2019-10-07 Thread Felix Geyer
Package: gnome-shell-extension-suspend-button Version: 0~git20180827-2 Severity: serious Tags: fixed-upstream The suspend button extension fails to load on Gnome 3.34, making it completely unusable: JS WARNING: [/usr/share/gnome-shell/extensions/suspend-button@laserb/extension.js 165]:

Bug#940136: aqbanking-tools: Transaction fails with 9075::Starke Kundenauthentifizierung notwendig.

2019-09-12 Thread Felix Geyer
On Thu, 12 Sep 2019 23:20:14 +0200 Paul Menzel wrote: Package: aqbanking-tools Version: 5.8.2-0.1 Severity: important Dear Debian folks, Unfortunately, I am unable to do a transactions with abtransfers, and get the error below from the Berlin Volksbank (hbci11.fiducia.de). 9050::Die

Bug#935503: gnucash: HBCI/FinTS module not ready for PSD2, will not work after 14 September 2019

2019-09-10 Thread Felix Geyer
On Fri, 23 Aug 2019 12:08:10 +0200 Matthias Merz wrote: Package: gnucash Version: 1:3.6-1 Severity: important Dear Maintainer, German legislation requires some changes to HBCI, rendering the HBCI interface of gnucash 3.6-1 in Debian mostly useless due to missing requirements. As mentioned in

Bug#934905: libaqbanking35: libaqbanking not ready for PSD2, will not work after 14 September 2019

2019-09-01 Thread Felix Geyer
On 25.08.19 13:33, Felix Geyer wrote: Hi Micha, On Mon, 19 Aug 2019 20:19:28 +0200 Micha Lenk wrote: Hi Christian, I understand your bug report and confirm it to be an issue. Unfortunately I don't have much capacity at the moment to work on an updated package in a timely manner. But I do

Bug#939042: RM: sdl-stretch -- ROM; dead upstream, no rdeps

2019-08-31 Thread Felix Geyer
Package: ftp.debian.org Severity: normal Please remove sdl-stretch from unstable. The last upstream release is from 2011, there is no SDL2 version and there are no reverse dependencies. Cheers, Felix

Bug#934905: libaqbanking35: libaqbanking not ready for PSD2, will not work after 14 September 2019

2019-08-25 Thread Felix Geyer
Hi Micha, On Mon, 19 Aug 2019 20:19:28 +0200 Micha Lenk wrote: Hi Christian, I understand your bug report and confirm it to be an issue. Unfortunately I don't have much capacity at the moment to work on an updated package in a timely manner. But I do appreciate and support any volunteer's

Bug#932755: sdl-image1.2: multiple security issues

2019-07-27 Thread Felix Geyer
Hi Hugo, On 27.07.19 19:39, Hugo Lefeuvre wrote: Dear SDL packages maintainers, I have uploaded the jessie LTS update. I will coordinate with the security team for stretch and buster fixes via point release. Concerning testing: can I upload the NMU? Sure, please go ahead! Cheers, Felix

Bug#932882: python3-pyroute2: /usr/bin/ss2 shipped in both packages

2019-07-24 Thread Felix Geyer
Package: python3-pyroute2 Version: 0.5.4-1 Severity: serious /usr/bin/ss2 is shipped in python-pyroute2 and python3-pyroute2 without any kind of Conflicts/Replaces resulting in an error when trying to install both packages: > Preparing to unpack .../10-python-pyroute2_0.5.4-1_all.deb ... >

Bug#931739: quassel-core: key too small error after upgrade to buster

2019-07-15 Thread Felix Geyer
Hi, On 09.07.19 22:09, Red Omen wrote: Package: quassel-core Version: 1:0.13.1-1 Severity: normal Dear Maintainer, After upgrading to buster and restarting quassel-core whenever a client attempts to connect it fails and the log shows: Socket error 21: Error loading local certificate,

Bug#923545: Offer to prepare Ninja 1.9.0 package

2019-07-03 Thread Felix Geyer
Hi Gregor, On 24.06.19 08:52, Gregor Jasny wrote: Hello Felix, I'd like to help you with Ninja 1.9.0 packaging. Would you agree to me preparing ninja 1.9.0 on salsa? Right now I'm taking care of of two packages: v4l-utils (10+ years) and c-ares. I've imported 1.9.0 into the Git repo. If

Bug#924609: Bug#924610: Bug#924609: Ports of CVE patches from Debian LTS for libsdl1.2

2019-04-29 Thread Felix Geyer
Hi, On 24.04.19 21:33, Salvatore Bonaccorso wrote: Hi Kari, On Wed, Apr 24, 2019 at 07:15:44PM +0300, Kari Pahula wrote: Hi. I've ported the CVE patches from Debian LTS for libsdl1.2 in unstable. First thanks for working on the issues! I have not reviewed your patches, but just a remark.

Bug#924270: O: keepassx -- Cross Platform Password Manager

2019-03-11 Thread Felix Geyer
d other necessary changes (like the port to Qt5). > I'm also long-time user of keepassx. > > I checked the upstream. In surprise, I found the master version has > switched to Qt-5. And the upstream author is Felix Geyer, who is DD as > well. > > Felix, could you have som

Bug#923420: coreutils: mv broken when file system doesn't support RENAME_NOREPLACE

2019-02-27 Thread Felix Geyer
Package: coreutils Version: 8.30-2 Severity: serious Hi, With those distro patches from version 8.30-2 mv fails on filesystems that don't support the renameat2 RENAME_NOREPLACE flag. I noticed this because coreutils 8.30-2 breaks autopkgtest with the qemu runner which calls mv on a 9p

Bug#923310: ITS: ninja-build

2019-02-26 Thread Felix Geyer
Hi, On 2019-02-26 08:09, Mo Zhou wrote: Source: ninja-build X-Debbugs-CC: fge...@debian.org Hi Felix, The last upload for ninja-build dates back to more than 1 year ago. There are some changes lined up but nothing that warranted an upload:

Bug#921618: virt-manager: Unnecessary dependency on python-requests

2019-02-07 Thread Felix Geyer
dependency. Felix -- Felix Geyer Berater Tel.: +49 2166 9901-0 Fax:+49 2166 9901-100 E-Mail: felix.ge...@credativ.de PGP:D1DF 8149 7643 8822 7283 92DC 1004 DA1C FF6D B892 https://www.credativ.de credativ GmbH, HRB Mönchengladbach 12080 USt-ID-Nummer: DE204566209 Trompeterallee 108, 41189

Bug#916487: [Pkg-cmake-team] Bug#911400: Bug#916487: cmake: Please add small workaround for m68k

2019-02-03 Thread Felix Geyer
Hi Adrian, On 15.12.18 14:43, John Paul Adrian Glaubitz wrote: > Control: forcemerge 911400 916487 > > Just realized that I already reported the issue as #911400, thus merging > with #916487. Re-attaching the patch just to make sure the patch lands > in the visible bug report. I'm not really

Bug#896811: stretch-pu: package icinga2/2.6.0-2+deb9u1

2018-12-09 Thread Felix Geyer
Hi Julien, On 03.12.18 08:16, Julien Cristau wrote: Looks fine to upload, go ahead. Thanks, uploaded. Cheers, Felix

Bug#916058: chromium: Widevine not working in chromium 71

2018-12-09 Thread Felix Geyer
Package: chromium Version: 71.0.3578.80-1 Tags: patch Hi, In chromium 71 the widevine adapter stopped working. The widevine_cdm_version.h include seems to be hidden behind #ifs that are only enabled when the Widevine CDM is bundled. Attached is a debdiff that fixes this (adapted from the Arch

Bug#915148: [Pkg-cmake-team] Bug#915148: cmake: regression in ros-ros-comm build

2018-12-01 Thread Felix Geyer
Hi, On 01.12.18 06:31, Gianfranco Costamagna wrote: Package: cmake Version: 3.13.1-1 Severity: serious Affects: ros-ros-comm A simple ros-ros-comm rebuild now fails with the new cmake in unstable, due to lpthread not being found as target. I don't know if catkin is to blame, or something else,

Bug#849513: d/control: Conflicts can be removed

2018-11-30 Thread Felix Geyer
Hi, On Mon, 19 Nov 2018 21:40:46 +0100 Mathieu Malaterre wrote: While the binary name is a long story, I believe it does not make sense to continue keeping: $ cat d/control ... Conflicts: ninja Indeed, I'll remove it with the next upload. With regard to renaming the package: I really

Bug#915039: CVE-2018-19516: HTML email can open browser window automatically

2018-11-29 Thread Felix Geyer
Source: kf5-messagelib Version: 4:18.08.1-1 Severity: grave Tags: upstream security Hi, KDE published the following security advisory (CVE-2018-19516): > messagelib by default displays emails as plain text, but gives the user > an option to "Prefer HTML to plain text" in the settings and if

Bug#908357: stretch-pu: package libseccomp/2.3.1-2.1+deb9u1

2018-11-02 Thread Felix Geyer
On 01.11.18 21:24, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Sun, 2018-09-09 at 00:15 +0200, Felix Geyer wrote: >> libseccomp in stretch doesn't support some Linux 4.9 syscalls and >> statx so whitelisting/blacklisting them is not possible. >> >

Bug#912475: [Pkg-cmake-team] Bug#912475: qtmultimedia-opensource-src: FTBFS on hurd: no qtaudioengine

2018-10-31 Thread Felix Geyer
Hi, On 01.11.18 00:38, Samuel Thibault wrote: > The link line contains /usr/lib/i386-gnu/libsndio.so in one case, and > -lsndio in the other case. I don't know why cmake makes a difference. In > both cases we have absolute paths in > >

Bug#908290: [zfs-linux] Please package 0.7.10

2018-09-16 Thread Felix Geyer
Control: severity -1 serious On Sat, 8 Sep 2018 00:33:57 -0400 Antonio Russo wrote: The recent release of zfsonlinux 0.7.10 adds support for Linux kernel 4.18. Bumping severity as Linux 4.18 has reached testing. Felix

Bug#906794: quassel-core: postinst script fails on Debian testing

2018-09-09 Thread Felix Geyer
Hi, On 21.08.18 08:15, Joseph Nuthalapati wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: quassel-core Version: 1:0.12.5-2 Severity: important Dear maintainer, Installation of quassel-core fails on Debian testing. When "dpkg - --configure -a" is run, the following error is

Bug#908357: stretch-pu: package libseccomp/2.3.1-2.1+deb9u1

2018-09-08 Thread Felix Geyer
loc and pkey_free + * Add support for the statx syscall. + + -- Felix Geyer Sat, 08 Sep 2018 21:34:13 +0200 + libseccomp (2.3.1-2.1) unstable; urgency=medium [ Martin Pitt ] diff -Nru libseccomp-2.3.1/debian/patches/29-syscalls-linux4.9.patch libseccomp-2.3.1/debian/patches/29-syscalls-linux

Bug#903261: ITA: libapache2-mod-fcgid

2018-08-18 Thread Felix Geyer
Hi Xavier, On 18.08.2018 13:56, Xavier wrote: Hello Felix, I'm going to adopt libapache2-mod-fcgid. That's great! I'm DM for now but approved for DD (https://nm.debian.org/process/495). Package is ready with the following changes: * Taken (Closes: #903261) * debian/copyright:

Bug#905140: [Pkg-cmake-team] Bug#905140: Bug #905140 in cmake marked as pending

2018-08-09 Thread Felix Geyer
Hi, On 09.08.2018 22:38, Svante Signell wrote: Hello, What about the bugs with patches, e.g. for Hurd and kFreeBSD. Still somebody needs to NMU this package... You don't seem interested in fixing bugs to your package, except RC ones. Not the ideal way Debian maintainers should work with their

Bug#887809: RFP: borgmatic -- A wrapper script for Borg backup software that creates and prunes backups

2018-08-02 Thread Felix Geyer
Hi, On Tue, 31 Jul 2018 11:17:46 +0200 Andrej Shadura wrote: > Hi Olivier, > > On Mon, 30 Jul 2018, 13:03 Olivier Berger, > wrote: > > Out of curiosity, have you made any progress towards packaging borgmatic ?> > > Unfortunately, I have not. I figured I don’t really need it myself, > since

Bug#905138: [Pkg-cmake-team] Bug#905138: cmake: FTBFS on kfreebsd-any

2018-08-01 Thread Felix Geyer
Hi, On 31.07.2018 17:01, Svante Signell wrote: > Source: cmake > Version: 3.11.2-1 > Severity: important > Tags: patch > Usertags: linux-any, freebsd-any, hurd-any > > Hello, > > Currently cmake does FTBFs on kfreebsd-any due to a missing dependency > on libfreebsd-glue-0 and a missing dependency

Bug#864755: Bash completion missing in 2.15

2018-07-11 Thread Felix Geyer
-> ganeti etc). The completion still works after a jessie->stretch upgrade because ganeti lacks the maintainer script to remove the /etc/bash_completion.d/ganeti config file. So the old version of the completion stays there. Felix -- Felix Geyer Berater Tel.: +49 2166 9901-0 Fax:

Bug#903261: O: libapache2-mod-fcgid -- FastCGI interface module for Apache 2

2018-07-08 Thread Felix Geyer
Package: wnpp I'm orphaning libapache2-mod-fcgid because I haven't used it for a long time and for most use cases better alternatives exist. The package is in a reasonable shape however upstream has been mostly inactive for the last couple of years. Felix

Bug#897568: zfs-dkms 0.7.6 fails to build on 4.16.0-1-amd64

2018-05-06 Thread Felix Geyer
Control: severity -1 grave On Wed, 2 May 2018 17:13:03 -0700 Sohum Banerjea wrote: > zfs-dkms fails to build on installing linux kernel 4.16.0-1-amd64, with the > following error. Bumping the severity since it makes the package unusable with the testing/unstable kernel. Felix

Bug#897560: [Pkg-cmake-team] Bug#897560: cmake: CHECK_FUNCTION_EXISTS is broken

2018-05-03 Thread Felix Geyer
Hi, On 02.05.2018 23:45, Nicolas Braud-Santoni wrote: > Package: cmake > Version: 3.11.1-1 > Severity: important > > Dear cmake maintainers, > > CMake's CHECK_FUNCTION_EXISTS was seemingly broken in the last upload, > resulting > in configure failures when the function exists in headers but

Bug#896811: [Pkg-nagios-devel] Bug#896811: stretch-pu: package icinga2/2.6.0-2+deb9u1

2018-05-01 Thread Felix Geyer
Hi Bas, On 24.04.2018 15:08, Bas Couwenberg wrote: > Hi Felix, > > Thanks for caring about icinga2. > > Please help maintain the package withing the Nagios team. > > On 2018-04-24 14:59, Felix Geyer wrote: >> I'd like to upload this fix to stretch, debdiff is atta

Bug#896914: quassel: Implement custom deserializer to add our own sanity checks

2018-04-25 Thread Felix Geyer
Hi, On Wed, 25 Apr 2018 20:58:52 +0200 Salvatore Bonaccorso wrote: > Source: quassel > Version: 1:0.12.4-1 > Severity: normal > Tags: patch security upstream > Control: fixed -1 1:0.12.5-1 > > Hi Felix, > > Filling this as bug to have an identifier, since no CVE has been >

Bug#896811: stretch-pu: package icinga2/2.6.0-2+deb9u1

2018-04-24 Thread Felix Geyer
@@ +icinga2 (2.6.0-2+deb9u1) stretch; urgency=medium + + * Fix timestamps being stored as local time in PostgreSQL. + + -- Felix Geyer <felix.ge...@credativ.de> Mon, 23 Apr 2018 15:47:44 +0200 + icinga2 (2.6.0-2) unstable; urgency=medium * [e0f34e4] Add patch 41_ido_m

Bug#895518: libsdl2-dev is not Multi-Arch compatible

2018-04-12 Thread Felix Geyer
Hi, On 12.04.2018 11:28, Francois Gouget wrote: > Package: libsdl2-dev > Version: 2.0.8+dfsg1-1 > Severity: normal > > Dear Maintainer, > > The development package is not multiarch aware which causes the amd64 > version to conflict with the i386 one, thus making it impossible to > install both.

Bug#895241: ITP: snapcast -- multi-room client-server audio player

2018-04-08 Thread Felix Geyer
Package: wnpp Severity: wishlist Owner: Felix Geyer <fge...@debian.org> * Package name: snapcast Version : 0.13.0 Upstream Author : Johannes Pohl * URL : https://github.com/badaix/snapcast * License : GPL Description : multi-room client-server

Bug#878233: check_running_kernel: find: ‘/boot/efi’: Permission denied

2018-03-09 Thread Felix Geyer
oot is an own filesystem and /boot/lost+found is only root readable. Adding a -maxdepth 1 to the offending find calls does the trick. A patch is attached. Felix -- Felix Geyer Berater Tel.: +49 2166 9901-0 Fax:+49 2166 9901-100 E- Mail: felix.ge...@credativ.de PGP:D1DF 8149

Bug#889728: stretch-pu: package bareos/16.2.4-3+deb9u2

2018-02-26 Thread Felix Geyer
On 23.02.2018 18:30, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Tue, 2018-02-06 at 13:45 +0100, Felix Geyer wrote: >> I'd like to fix bug #889040 in stretch: >> >> * Fix backups failing with "No Volume name given". >>   - Backport

Bug#891026: zfs-dkms: Incompatible with kernel 4.15

2018-02-21 Thread Felix Geyer
Package: zfs-dkms Version: 0.7.5-1 Severity: serious Hi, Kernel 4.15 has just landed in unstable. THe zfs-linux 0.7.5 module fails to build against 4.15 and thus needs to be updated to 0.7.6. Please let me know if you need help updating the package. Cheers, Felix

Bug#889728: stretch-pu: package bareos/16.2.4-3+deb9u2

2018-02-06 Thread Felix Geyer
/changelog 2018-02-02 10:58:25.0 +0100 @@ -1,3 +1,11 @@ +bareos (16.2.4-3+deb9u2) stretch; urgency=medium + + * Fix backups failing with "No Volume name given". (Closes: #889040) +- Backport upstream commit: Don't return empty volname if volume is on + unwanted vol

Bug#889040: bareos-director: Backups sometimes fail with "No Volume name given"

2018-02-01 Thread Felix Geyer
e "" failed: ERR=Could not open file device "X" (/X/). No Volume name > given. Felix -- Felix Geyer Berater Tel.: +49 2166 9901-125 Fax:+49 2166 9901-100 E- Mail: felix.ge...@credativ.de PGP:D1DF 8149 7643 8822 7283 92DC 1004 DA1C FF6D B892 http://www.credativ

Bug#888228: [Pkg-cmake-team] Bug#888228: cmake: ignores linker scripts on the Hurd (and kFreeBSD?)

2018-01-24 Thread Felix Geyer
Hi, On 24.01.2018 03:47, Aaron M. Ucko wrote: > Package: cmake > Version: 3.9.5-1 > Severity: important > Tags: upstream > User: debian-h...@lists.debian.org > Usertags: hurd-i386 > Control: affects -1 src:mariadb-connector-c > > The build of mariadb-connector-c for hurd-i386 (admittedly not a >

Bug#886680: choqok: Depends on transitional package libqca2-plugin-ossl

2018-01-11 Thread Felix Geyer
On 11.01.2018 13:35, Lisandro Damián Nicanor Pérez Meyer wrote: > Or Team upload if you feel like it too. Ok sure, I'll do an NMU (it's not team maintained). Felix

Bug#886681: qgis-providers: (Build-)Depends on transitional package libqca2-plugin-ossl

2018-01-08 Thread Felix Geyer
Package: qgis-providers Version: 2.14.21+dfsg-2 Hi, qgis build-depends and qgis-providers depends on the transitional package libqca2-plugin-ossl. I intend to remove it in the buster cycle. Please change the (build-)dependency to libqca2-plugins. Thanks, Felix

Bug#886680: choqok: Depends on transitional package libqca2-plugin-ossl

2018-01-08 Thread Felix Geyer
Package: choqok Version: 1.6-2 Hi, choqok depends on the transitional package libqca2-plugin-ossl. I intend to remove it in the buster cycle. libqca2-plugin-ossl is wrong anyway since it shipped plugins for the Qt 4 version. Please make choqok depend on libqca-qt5-2-plugins instead. Thanks,

Bug#806500: [Pkg-kde-extras] Bug#884652: quassel-client: connection password stored in plan Ascii in a chmod 644 file

2017-12-18 Thread Felix Geyer
On Mon, 18 Dec 2017 18:04:19 +0100 Heinrich Schuchardt wrote: > Not encoding the password means that any user application can fetch it > and send it to the internet even if ~/.config is chmod 700. > > Can anything be worse? Well, that's the unfortunate state of security on

Bug#883703: apparmor: Feature pinning breaks mount

2017-12-06 Thread Felix Geyer
Package: apparmor Version: 2.11.1-1 Severity: important Feature pinning breaks mount() of confined processes with kernel 4.14. With feature pinning enabled the parser seem to not load the mount rules but the kernel still somewhat enforces mount mediation. For example starting a libvirt qemu VM

  1   2   3   4   5   6   7   8   >