Bug#1050835: nuget: CVE-2023-29337

2023-09-28 Thread Bastian Germann
Control: fixed -1 nuget/2.8.7+md510+dhx1-1.1 You can see the fix for the oldest affected and supported product line at https://github.com/NuGet/NuGet.Client/commit/beea05411b6483ecfd8b1e4517c3dc4659bb6ac0 The affected code entered a year ago at

Bug#1038660: Privacy Compliance Department

2023-09-28 Thread Privacy Notification
Disclaimer. This e-mail and its attachments are addressed to the named addressee(s) only and are intended exclusively for the use by the addressee or the entity to which it is addressed. If you are not the named addressee or authorized to receive this message on behalf of the named addressee, any

Bug#1052455: RE: freetype 2.12.1+dfsg-5+deb12u1 makes chromium segfault at startup

2023-09-28 Thread Ben Wagner
I will take a look into this, but I am confused. FT_Get_Color_Glyph_Paint cannot be NULL as it is a regular exported function. This change will affect its behavior to always return 0 (false) but that often happens anyway even without this change (most fonts don't have COLRv1 tables). For now it's

Bug#1053168: Please remove librbd-dev build-depends on all 32 bits arch

2023-09-28 Thread Thomas Goirand
Source: libvirt Version: 9.0.0-4 Severity: important Hi, I'd like to remove 32 bits support from Ceph, because upstream makes some 64 bits assumptions a bit everywhere, because it's not tested in upstream CI, and because it is increasingly difficult to build Ceph on a smaller addressing

Bug#1053166: RM: nuget -- RoQA; ancient version; orphaned

2023-09-28 Thread Bastian Germann
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:nuget nuget is orphaned. Please remove it. The upstream is built on dotnet now and Debian's version is a fork that is no longer maintained. In the event that dotnet

Bug#1053167: Please remove librbd-dev build-depends on 32 bits arch

2023-09-28 Thread Thomas Goirand
Source: fio Severity: important Hi, I'd like to remove 32 bits support from Ceph, because upstream makes some 64 bits assumptions a bit everywhere, because it's not tested in upstream CI, and because it is increasingly difficult to build Ceph on a smaller addressing footprint (we used to have

Bug#1053170: Apache NOTICE file missing from binary package

2023-09-28 Thread John Thorvald Wodder II
Package: bat Version: 0.23.0-4 Severity: serious bat's upstream source and the rust-bat_0.23.0.orig.tar.gz file both contain a NOTICE file which, per the packages's Apache 2.0 license, must be preserved in derivative works. However, this NOTICE file is not present in the binary .deb packages

Bug#1021816: Privacy Compliance Department

2023-09-28 Thread Privacy Notification
Disclaimer. This e-mail and its attachments are addressed to the named addressee(s) only and are intended exclusively for the use by the addressee or the entity to which it is addressed. If you are not the named addressee or authorized to receive this message on behalf of the named addressee, any

Bug#1038660: Privacy Compliance Department

2023-09-28 Thread Privacy Notification
Disclaimer. This e-mail and its attachments are addressed to the named addressee(s) only and are intended exclusively for the use by the addressee or the entity to which it is addressed. If you are not the named addressee or authorized to receive this message on behalf of the named addressee, any

Bug#956102: Privacy Compliance Department

2023-09-28 Thread Privacy Notification
Disclaimer. This e-mail and its attachments are addressed to the named addressee(s) only and are intended exclusively for the use by the addressee or the entity to which it is addressed. If you are not the named addressee or authorized to receive this message on behalf of the named addressee, any

Bug#1049903: petsc: misbuild with gcc-13

2023-09-28 Thread Drew Parsons
Source: petsc Followup-For: Bug #1049903 Control: severity 1049903 important Control: tags 1049903 moreinfo I said previously I'd apply the patch, but I wanted to check the problem first. No problem is showing at https://tests.reproducible-builds.org/debian/rb-pkg/petsc.html even in the

Bug#1052455: RE: freetype 2.12.1+dfsg-5+deb12u1 makes chromium segfault at startup

2023-09-28 Thread Andres Salomon
Thanks! Can we also roll that fix into the freetype bookworm p-u? Looks pretty simple to me; just ensuring that sfnt->get_colr_glyph_paint isn't NULL before calling it. On Thu, Sep 28 2023 at 11:33:45 AM -04:00:00, Ben Wagner wrote: I have been able to figure out what is going on. The

Bug#837060: debootstrap: Do not install packages of Priority:required for buildd variant

2023-09-28 Thread Julien Cristau
On Thu, Sep 28, 2023 at 12:42:27PM +0200, Santiago Vila wrote: > El 28/9/23 a las 11:50, Julien Cristau escribió: > > I still think that is absolutely the wrong thing to do, and makes > > debootstrap more fragile for no good reason. > > Julien, I believe you are mixing two different things here.

Bug#977674: Corrupt changes file when built with --source-only-changes

2023-09-28 Thread Ferenc Wágner
On Mon, 25 Jan 2021 17:45:29 +0100 Johannes Schauer Marin Rodrigues wrote: > The problem is, that when you combine --source-only-changes with --keyid, then > debsign will be run twice (once for the normal changes file and once for the > source-only changes file) and both times with --re-sign.

Bug#1053178: hg-git: incompatible with mercurial 6.5

2023-09-28 Thread Julien Cristau
Source: hg-git Version: 1.0.2-1 Severity: grave X-Debbugs-Cc: jcris...@debian.org Hi, hg-git looks like it needs an update for compatibility with current mercurial, see e.g. https://ci.debian.net/data/autopkgtest/testing/amd64/h/hg-git/38210693/log.gz > ** Unknown exception encountered with

Bug#1053159: ITS: mono

2023-09-28 Thread Bastian Germann
Source: mono I intend to salvage mono with the plan to orphan it in three weeks. Please notify me if you object.

Bug#1053157: ITS: xsp

2023-09-28 Thread Bastian Germann
Source: xsp I intend to salvage xsp with the plan to orphan it in three weeks. Please notify me if you object.

Bug#1053158: ITS: mono-tools

2023-09-28 Thread Bastian Germann
Source: mono-tools I intend to salvage mono-tools with the plan to orphan it in three weeks. Please notify me if you object.

Bug#1053171: smplayer has one incompatibility with mpv (Bookworm)

2023-09-28 Thread Alf
Package: smplayer Version: 22.7.0~ds0-1 amd64 Severity: normal Generally smplayer works fine with installed mpv 0.35.0-3 in Bookworm. However there is one use case where I need a dirty hack to get it working: Watching TV via dvb-c and importing the channels.conf (generated by w-scan). When

Bug#1053167: Please remove librbd-dev build-depends on 32 bits arch

2023-09-28 Thread Martin Steigerwald
Hi Thomas. Am Donnerstag, dem 28.09.2023 um 16:38 +0200 schrieb Thomas Goirand: > So please remove librbd-dev in build-depends of your package for all > 32 bits arch, and remove Ceph support in all 32 bits binaries. I'll > upload Ceph with Build-Depends: architecture-is-64-bit as soon as this >

Bug#1052243: dkms: Signature keys unexpectedly overridden

2023-09-28 Thread Tobias Bossert
Hi Andreas > Did both files exist? Indeed, in my case the `.key` existed while the one meant for the certificate had a different extension...So as you confirmed, the observed "overwriting" behavior is intended. However, I think my point  about not expecting this is still valid -  as the

Bug#1053177: bullseye-pu: package xen/4.14.6-1

2023-09-28 Thread Adam D. Barratt
On Thu, 2023-09-28 at 18:27 +0200, Hans van Kranenburg wrote: > Xen 4.14 support (and security support) has ended upstream. The > upstream > stable branch for version 4.14 is frozen now, and a final maintenance > release version 4.14.6 has been released. We'd like to put this final > update into

Bug#1051466: bookworm-pu: package ovn/23.03.1-1~deb12u1

2023-09-28 Thread Luca Boccassi
On Tue, 19 Sep 2023 08:59:05 +0100 Luca Boccassi wrote: > On Tue, 19 Sept 2023 at 08:21, Salvatore Bonaccorso wrote: > > > > Hi > > > > (not a SRM here, but below some comments) > > > > On Fri, Sep 08, 2023 at 01:32:05PM +0200, Frode Nordahl wrote: > > > Package: release.debian.org > > >

Bug#1053155: monitoring-plugins-contrib: Please include dsa-wrap-nagios-check

2023-09-28 Thread Matthias Förste
Package: monitoring-plugins-contrib Version: 42.20230308 Severity: wishlist Dear Maintainer, the (dsa-)check-statusfile plugin included in the package would be even more useful if the dsa-wrap-nagios-check script that can be used to generate the statusfile for the plugin would also be included.

Bug#1051305: Request to Add 'loong64' to java-common's debian/java_defaults.mk

2023-09-28 Thread tony mancill
On Wed, Sep 13, 2023 at 12:39:50PM +0800, panxuefeng wrote: > Source: java-common > Version: 0.74 > Tags: patch > Severity: wishlist > Usertags: loongarch64 > User: debian-de...@lists.debian.org > I'm going to add loong64 support to the java-common package. Specifically, > added loong64 support

Bug#1053160: [spf] Unknown instance method size while calling IN OPT

2023-09-28 Thread martin f krafft
Package: mtpolicyd Version: 2.05-1.1 Severity: normal I just started evaluating mtpolicyd, and this is the first thing I see in the logs: ``` Sep 28 15:14:46 dovecot mtpolicyd[32030]: error while processing request: plugin spf failed: *** FATAL PROGRAM ERROR!! Unknown instance method "size"

Bug#1053164: nunit: Drop nuget packages

2023-09-28 Thread Bastian Germann
Source: nunit Version: 2.6.4+dfsg-1.1 Severity: important Please drop all nupkg-* packages and the nuget build dependency so that we can get rid of the ancient nuget package.

Bug#1053165: ITS: nunit

2023-09-28 Thread Bastian Germann
Source: nunit I intend to salvage nunit with the plan to orphan it in three weeks. Please notify me if you object.

Bug#1052455: RE: freetype 2.12.1+dfsg-5+deb12u1 makes chromium segfault at startup

2023-09-28 Thread Hugh McMaster
On Thu, 28 Sep 2023 at 21:44, Hugh McMaster wrote: > Hi Andres, > > On Thu, 28 Sept 2023 at 18:49, Andres Salomon wrote: > > > > Control: affects -1 chromium > > > > > > On Thu, 28 Sep 2023 01:24:00 +0900 SuperCat wrote: > > > Hi, > > > > > > In chromium source code, function

Bug#1053164: NMU: Bug#1053164: nunit: Drop nuget packages

2023-09-28 Thread Bastian Germann
I am uploading a NMU to fix this. The debdiff is attached.diff -Nru nunit-2.6.4+dfsg/debian/changelog nunit-2.6.4+dfsg/debian/changelog --- nunit-2.6.4+dfsg/debian/changelog 2020-12-28 01:38:23.0 +0100 +++ nunit-2.6.4+dfsg/debian/changelog 2023-09-28 16:18:51.0 +0200 @@ -1,3

Bug#1052059: bookworm-pu?

2023-09-28 Thread Guilhem Moulin
On Thu, 28 Sep 2023 at 18:26:07 +0300, Martin Dosch via Pkg-roundcube-maintainers wrote: > Are there plans to also upload it to stable-pu? See #1052629 -- Guilhem.

Bug#1038240: chromium: Build with system libsrtp

2023-09-28 Thread Soren Stoutner
On Wednesday, September 27, 2023 8:02:43 PM MST Andres Salomon wrote: > On Fri, 16 Jun 2023 11:15:32 -0700 Soren Stoutner > Really odd that I now get a "permission denied" error when I try to > access that upstream bug. :( I also get that, but when I log in it then allows me to see it. Perhaps

Bug#1051910: mirror submission for ossmirror.mycloud.services

2023-09-28 Thread Adam D. Barratt
Hi, mirrors@ is the correct address. I suspect people are simply busy. (Well, I know people are.) Regards, Adam On Thu, 2023-09-28 at 13:10 +0800, OSSMirror@OnboardCloud wrote: > Hi Adam, > > Thanks for sharing. Looks like we are almost near the ½ way mark to > reaching 50 points today. >

Bug#1053175: colord-gtk: Team uploads without team maintenance

2023-09-28 Thread Bastian Germann
Source: colord-gtk Version: 0.3.0-1 Severity: important X-Debbugs-Cc: jbi...@ubuntu.com Jeremy, you have uploaded several versions of colord-gtk as team uploads. The maintainer is not a team but Christopher James Halse Rogers who seems to be missing in action. Can you please clarify the state of

Bug#1053175: colord-gtk: Team uploads without team maintenance

2023-09-28 Thread Jeremy Bícha
On Thu, Sep 28, 2023 at 12:30 PM Bastian Germann wrote: > Source: colord-gtk > Version: 0.3.0-1 > Severity: important > X-Debbugs-Cc: jbi...@ubuntu.com > > Jeremy, you have uploaded several versions of colord-gtk as team uploads. > The maintainer is not a team but Christopher James Halse Rogers

Bug#1053151: unblock: apt/2.7.6

2023-09-28 Thread Julian Andres Klode
On Thu, Sep 28, 2023 at 11:32:26AM +0200, Julian Andres Klode wrote: > On Thu, Sep 28, 2023 at 11:22:44AM +0200, Julian Andres Klode wrote: > > Package: release.debian.org > > Severity: normal > > User: release.debian@packages.debian.org > > Usertags: unblock > > X-Debbugs-Cc:

Bug#1053102: bookworm-pu: package curl/7.88.1-10+deb12u3

2023-09-28 Thread Adam D. Barratt
Control: tags -1 confirmed On Wed, 2023-09-27 at 21:24 +0800, Carlos Henrique Lima Melara wrote: > A vulnerability was discovered and reported to Curl upstream [1] with > the following CVE ID: CVE-2023-38039. > > The description of the CVE is: > > > When curl retrieves an HTTP response, it

Bug#1052243: dkms: Signature keys unexpectedly overridden

2023-09-28 Thread Andreas Beckmann
Control: tag -1 moreinfo On Tue, 19 Sep 2023 13:37:01 +0200 Tobias Bossert wrote: Package: dkms Version: 3.0.11-3 Enrolled my own secureboot key chain (PK, KEK, db) and wanted dkms to sign kernel modules automatically. I tried to reproduce that in a sid chroot by setting

Bug#1051150: RFS: blender-doc/3.6-1 [ITP] -- Blender Manual by the Blender Foundation

2023-09-28 Thread Hugh McMaster
Hi Jonathan, On Wed, 27 Sept 2023 at 05:48, Jonathan Rubenstein wrote: > > Control: tags -1 - moreinfo > > Hey, I have completed the requested changes with a few exceptions. Nice work. We're almost there. d/copyright: * Please update your explanatory comment to the following: Comment: A

Bug#1052243: dkms: Signature keys unexpectedly overridden

2023-09-28 Thread Andreas Beckmann
Control: tag -1 - moreinfo + upstream Control: severity -1 normal On 28/09/2023 17.05, Tobias Bossert wrote: > Did both files exist? Indeed, in my case the `.key` existed while the one meant for the certificate had a different extension...So as you confirmed, the observed "overwriting"

Bug#1052455: RE: freetype 2.12.1+dfsg-5+deb12u1 makes chromium segfault at startup

2023-09-28 Thread Ben Wagner
I have been able to figure out what is going on. The crash is due to a typo in FreeType which was recently fixed [0]. This change is also needed. I can confirm in a local build that with this typo fix the reported Chromium crash (in libfreetype.so.6) is fixed. To be clear, this FreeType change [0]

Bug#1053174: Block Ben Tris

2023-09-28 Thread Christoph Berg
Package: bugs.debian.org Hi, we keep seeing non-actionable bug reports from Ben Tris that look like this: > Subject: Re: Bug#1052524: postgresql-16: Ow that hurts! On the short > description. > > Package: postgresql-16 > Severity: minor > X-Debbugs-Cc: benatt...@gezapig.nl > > Dear

Bug#1053175: colord-gtk: Team uploads without team maintenance

2023-09-28 Thread Bastian Germann
Am 28.09.23 um 18:35 schrieb Jeremy Bícha: Why did you use that high of a severity? Is something specifically wrong with colord or colord-gtk? Because it seems like a package hijack. But please lower as you please.

Bug#1051241: headsup for gtk + pipewire update

2023-09-28 Thread Jeremy Bícha
Control: severity -1 important Jonas, I went ahead and pushed helvum 0.4.1 to a wip/gnome45 branch of the Salsa repo. (I also pushed the pristine-tar and upstream/latest branches since that seemed to be helpful.) We are nearly ready to upload the new Rust GNOME 45 stack (rust-gtk 0.7, rust-glib

Bug#1053156: libmnl is 18 months out of date

2023-09-28 Thread Marco d'Itri
Source: libmnl Version: 1.0.4-3 Severity: wishlist 1.0.5 was released in April 2022. -- ciao, Marco signature.asc Description: PGP signature

Bug#1039365: Fedora has systemd-unit files for sendmail

2023-09-28 Thread Marco
On Fri, 11 Aug 2023 16:07:23 + Marco wrote: > On Wed, 2 Aug 2023 18:07:52 +0200 Andreas Beckmann > wrote: > > On 30/07/2023 20.46, Marco wrote: > > > On Mon, 26 Jun 2023 08:28:22 + Marco wrote: > > >> Fedora has some systemd unit files included, maybe these are > > >> helpful here: > >

Bug#1052376: possible solution

2023-09-28 Thread Mikhail Kshevetskiy
Hello, The issue you are reporting can be fixed with patches from Bug#1052050. See: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052050 Mikhail Kshevetskiy

Bug#1053007: transition: suitesparse-7.2

2023-09-28 Thread Sébastien Villemot
Le mercredi 27 septembre 2023 à 19:09 +0200, Sebastian Ramacher a écrit : > On 2023-09-26 22:59:30 +0200, Sébastien Villemot wrote: > > Package: release.debian.org > > Severity: normal > > User: release.debian@packages.debian.org > > Usertags: transition > > X-Debbugs-Cc:

Bug#1053162: NMU: Bug#1053162: nupkg-newtonsoft.json.6.0.8: Please drop to prevent autoremoval

2023-09-28 Thread Bastian Germann
I am uploading a NMU to fix this. The debdiff is attached.diff -Nru newtonsoft-json-6.0.8+dfsg/debian/changelog newtonsoft-json-6.0.8+dfsg/debian/changelog --- newtonsoft-json-6.0.8+dfsg/debian/changelog 2021-01-01 23:49:58.0 +0100 +++ newtonsoft-json-6.0.8+dfsg/debian/changelog

Bug#1053163: ITS: newtonsoft-json

2023-09-28 Thread Bastian Germann
Source: newtonsoft-json I intend to salvage newtonsoft-json with the plan to orphan it in three weeks. Please notify me if you object.

Bug#1053169: Please remove librbd-dev build-depends on all 32 bits arch

2023-09-28 Thread Thomas Goirand
Source: tcmu Version: 1.5.4-4.1 Severity: important Hi, I'd like to remove 32 bits support from Ceph, because upstream makes some 64 bits assumptions a bit everywhere, because it's not tested in upstream CI, and because it is increasingly difficult to build Ceph on a smaller addressing footprint

Bug#1051781: python3-h5py: where is the egg files

2023-09-28 Thread Drew Parsons
Source: h5py Followup-For: Bug #1051781 I'm reorganising the package with separate distinfo metadata for the different variants. I think this will fix your problem

Bug#1053179: libavif: drop doc generation on arches without pandoc

2023-09-28 Thread Drew Parsons
Source: libavif Version: 0.11.1-3 Severity: normal The libavif build attempts to build docs (the man page) using pandoc for each architecture. This is a problem since pandoc is not available on several architectures. debian/rules for libavif contains doc logic, defining MAN_PAGES_FLAG. Currently

Bug#835089: Vcs-Browser in debian/control is incorrect

2023-09-28 Thread Bastian Germann
It is at https://salsa.debian.org/dotnet-team/nuget obviously now.

Bug#887526: new upstream version available v4.8.1

2023-09-28 Thread Bastian Germann
On Wed, 14 Jun 2023 16:17:23 -0400 Patrick Hibbs wrote: Is there a reason why this package is still not being updated in Debian? Is Mathieu Malaterre's suggestion accurate? It would be nice to have some clarification. The reason is that the package is orphaned. Nobody cares about it properly.

Bug#1053162: nupkg-newtonsoft.json.6.0.8: Please drop to prevent autoremoval

2023-09-28 Thread Bastian Germann
Package: nupkg-newtonsoft.json.6.0.8 Severity: important Please drop this package along with the build dependency nuget to prevent newtonsoft-json's autoremoval. The package is actually not used.

Bug#1053172: Please remove librbd-dev build-depends on all 32 bits arch

2023-09-28 Thread Thomas Goirand
Package: qemu Severity: important Hi, I'd like to remove 32 bits support from Ceph, because upstream makes some 64 bits assumptions a bit everywhere, because it's not tested in upstream CI, and because it is increasingly difficult to build Ceph on a smaller addressing footprint (we used to have

Bug#1052059: bookworm-pu?

2023-09-28 Thread Martin Dosch
Dear Guilhem, I just realized that it was uploaded for oo-stable and o-stable-pu. Are there plans to also upload it to stable-pu? Best regards, Martin signature.asc Description: PGP signature

Bug#1053161: A lot of warning tex.el and latex.el and font-latex.el and ...

2023-09-28 Thread Janusz S . Bień
sitivo móvel > -- next part -- > An HTML attachment was scrubbed... > URL: > <https://lists.gnu.org/archive/html/auctex/attachments/20230928/e698c772/attachment.htm> Install from ELPA? Regards JSB -- , Janusz S. Bien emeryt (emeritus) https://sites.google.com/view/jsbien

Bug#1053161: auctex: A lot of warning tex.el and latex.el and font-latex.el and ... maybe, old version

2023-09-28 Thread Marcelo Laia
Package: auctex Version: 12.2-1 Severity: normal Dear Maintainer, I started emacs, to day, to compose a course test and get a lot of warnings messages. Please, found that ones at the end. First, I sent a message to auctex mailing list and got a answer [1] suggesting a upgrade in auctex. I

Bug#1021816: Privacy Compliance Department

2023-09-28 Thread Privacy Notification
Disclaimer. This e-mail and its attachments are addressed to the named addressee(s) only and are intended exclusively for the use by the addressee or the entity to which it is addressed. If you are not the named addressee or authorized to receive this message on behalf of the named addressee, any

Bug#956102: Privacy Compliance Department

2023-09-28 Thread Privacy Notification
Disclaimer. This e-mail and its attachments are addressed to the named addressee(s) only and are intended exclusively for the use by the addressee or the entity to which it is addressed. If you are not the named addressee or authorized to receive this message on behalf of the named addressee, any

Bug#1053173: Please remove librados-dev from build-depends on all 32 bits arch

2023-09-28 Thread Thomas Goirand
Source: eckit Version: 1.20.2-1 Severity: important Hi, I'd like to remove 32 bits support from Ceph, because upstream makes some 64 bits assumptions a bit everywhere, because it's not tested in upstream CI, and because it is increasingly difficult to build Ceph on a smaller addressing footprint

Bug#1053176: colord: Team upload without team maintenance

2023-09-28 Thread Bastian Germann
Source: colord Version: 1.4.6-3 Severity: important X-Debbugs-Cc: jbi...@ubuntu.com Jeremy, you have uploaded a version of colord as team upload. The maintainer is not a team but Christopher James Halse Rogers who seems to be missing in action. Can you please clarify the state of this package?

Bug#1052361: bookworm-pu: cups/2.4.2-3+deb12u2

2023-09-28 Thread Thorsten Alteholz
On 27.09.23 20:32, Adam D. Barratt wrote: Please go ahead. great, thanks, ... ... and uploaded.   Thorsten

Bug#1052363: bullseye-pu: cups/2.3.3op2-3+deb11u4

2023-09-28 Thread Thorsten Alteholz
On 27.09.23 20:33, Adam D. Barratt wrote: Thanks; please go ahead. great, thanks, ... ... and uploaded.   Thorsten

Bug#1052629: bookworm-pu: package roundcube/1.6.3+dfsg-1~deb12u1

2023-09-28 Thread Adam D. Barratt
Control: tags -1 confirmed On Mon, 2023-09-25 at 15:31 +0200, Guilhem Moulin wrote: > On Mon, 25 Sep 2023 at 15:15:57 +0200, Guilhem Moulin wrote: > > [ Other info ] > > > > In addition to the debdiff.gz between 1.6.1+dfsg-1 (bookworm) and > > 1.6.3+dfsg-1~deb12u1, > > I attach a patch-applied

Bug#1053142: chromium cannot startup after libfreetype6 upgrade to 2.12.1+dfsg-5+deb12u1

2023-09-28 Thread Bernhard Schmidt
Control: affects -1 src:freetype Technically it probably should be the other way around, but I fear this will be missed otherwise. Marking freetype as affected to at least it shows up there.

Bug#1052629: bookworm-pu: package roundcube/1.6.3+dfsg-1~deb12u1

2023-09-28 Thread Adam D. Barratt
On Thu, 2023-09-28 at 20:33 +0200, Guilhem Moulin wrote: > On Thu, 28 Sep 2023 at 18:53:46 +0100, Adam D. Barratt wrote: > > --- a/CHANGELOG.md > > +++ b/CHANGELOG.md > > @@ -1,5 +1,54 @@ > > # Changelog Roundcube Webmail > > > > +## Unreleased > > + > > > > That seems wrong, given that you're

Bug#1051466: bookworm-pu: package ovn/23.03.1-1~deb12u1

2023-09-28 Thread Adam D. Barratt
On Tue, 2023-09-19 at 08:59 +0100, Luca Boccassi wrote: > On Tue, 19 Sept 2023 at 08:21, Salvatore Bonaccorso < > car...@debian.org> wrote: [...] > > Two obervations: Can you please close #1043598 in the > > debian/changelog as well as the update addresses CVE-2023-3153. [...] > Changelog mentions

Bug#1053182: libvpx: diff for NMU version 1.12.0-1.1

2023-09-28 Thread Salvatore Bonaccorso
X-Debbugs-CC: Sebastian Ramacher Control: tags 1053182 + patch Control: tags 1053182 + pending Dear maintainer, I've prepared an NMU for libvpx (versioned as 1.12.0-1.1) and uploaded it to DELAYED/2. Please feel free to tell me if I should delay it longer. Regards, Salvatore diff -Nru

Bug#1051229: tlp 1.6 doesn't conflict with power-profile-daemon anymore

2023-09-28 Thread Raphaël Halimi
Control: tags -1 wontfix Control: close -1 Dear Sebastien, Thanks for your suggestion and your patch, but I prefer to follow upstream's advice and keep the conflict in place to disallow co-installation of TLP and PPD. Regards, -- Raphaël Halimi

Bug#1036417: NMU 0.17-2.3

2023-09-28 Thread Bastian Germann
I am uploading a NMU to DELAYED/10 to fix this. The debdiff is attached.diff -Nru binfmtc-0.17/NEWS binfmtc-0.17/NEWS --- binfmtc-0.17/NEWS 2023-09-28 21:42:25.0 + +++ binfmtc-0.17/NEWS 2009-02-07 20:43:10.0 + @@ -1,8 +1,6 @@ -0.17 21 Sep 2011 +0.17 + -g

Bug#1053186: apt dist-upgrade wants to remove manually installed packages

2023-09-28 Thread Witold Baryluk
Package: apt Version: 2.7.3 Severity: important X-Debbugs-Cc: witold.bary...@gmail.com Hi. Happens in 2.7.3 and 2.7.6 When on testing and unstable. (as of this writing) root@debian:~# apt dist-upgrade --purge -V Reading package lists... Done Building dependency tree... Done Reading state

Bug#1051466: bookworm-pu: package ovn/23.03.1-1~deb12u1

2023-09-28 Thread Luca Boccassi
On Thu, 28 Sept 2023 at 21:13, Adam D. Barratt wrote: > > On Tue, 2023-09-19 at 08:59 +0100, Luca Boccassi wrote: > > On Tue, 19 Sept 2023 at 08:21, Salvatore Bonaccorso < > > car...@debian.org> wrote: > [...] > > > Two obervations: Can you please close #1043598 in the > > > debian/changelog as

Bug#1051466: bookworm-pu: package ovn/23.03.1-1~deb12u1

2023-09-28 Thread Adam D. Barratt
Control: tags -1 confirmed On Fri, 2023-09-08 at 13:32 +0200, Frode Nordahl wrote: > We would like to upload the latest stable point release of ovn 23.03 > to bookworm-p-u. Stable release branches are maintained upstream with > the intention of providing bug fixes only and no compatibility >

Bug#1053087: xz-java: FTBFS with default Java 21

2023-09-28 Thread Vladimir Petko
Please see the attached log: The relevant part: -- Preparing to unpack .../065-ant_1.10.13-2_all.deb ... Unpacking ant (1.10.13-2) -- buildlog_ubuntu-mantic-amd64.xz-java_1.9-1build1_BUILDING.txt.gz Description: application/gzip

Bug#1053111: e2fsprogs FTBFS when systemd.pc changes systemdsystemunitdir

2023-09-28 Thread Theodore Ts'o
On Tue, Sep 26, 2023 at 10:31:41PM +0200, Helmut Grohne wrote: > Source: e2fsprogs > Version: 1.47.0-2 > Tags: ftbfs patch > User: helm...@debian.org > Usertags: dep17m2 > > We want to change the value of systemdsystemunitdir in systemd.pc to > point below /usr. e2fsprogs' upstream build system

Bug#1053184: Updating the mono Uploaders list

2023-09-28 Thread Tobias Frost
Source: mono Version: 6.8.0.105+dfsg-3.3 6.8.0.105+dfsg-3.3~deb11u1 5.18.0.240+dfsg-3 5.18.0.240+dfsg-3+deb10u1 3.2.8+dfsg-10+deb8u1 3.2.8+dfsg-10 6.8.0.105+dfsg-3.5 4.6.2.7+dfsg-1 4.6.2.7+dfsg-1+deb9u1 Severity: minor User: m...@qa.debian.org Usertags: mia-teammaint Jo Shields has retired, so

Bug#1053087: xz-java: FTBFS with default Java 21

2023-09-28 Thread Emmanuel Bourg
Le 29/09/2023 à 00:58, Vladimir Petko a écrit : The source level 7 is hardcoded in the build properties[1]. [1] https://sources.debian.org/src/xz-java/1.9-1/build.properties That's not a problem, Ant is patched to detect an unsupported level for the JDK used and change it automatically.

Bug#1007049: NMU 1.71-2.3

2023-09-28 Thread Bastian Germann
I am uploading a NMU to DELAYED/10 to fix this. The debdiff is attached.diff -Nru appconfig-1.71/debian/changelog appconfig-1.71/debian/changelog --- appconfig-1.71/debian/changelog 2023-09-28 21:51:49.0 + +++ appconfig-1.71/debian/changelog 2023-09-28 21:47:18.0 +

Bug#1053087: xz-java: FTBFS with default Java 21

2023-09-28 Thread Emmanuel Bourg
Le 27/09/2023 à 00:24, Vladimir Petko a écrit : compile: [mkdir] Created dir: /<>/build/classes [javac] Compiling 108 source files to /<>/build/classes [javac] Ignoring source, target and bootclasspath as release has been set [javac] error: release version 7 not supported

Bug#1053013: beansbinding: FTBFS with default Java 21

2023-09-28 Thread Emmanuel Bourg
Le 29/09/2023 à 01:00, Vladimir Petko a écrit : The source level 7 is hardcoded in project properties[1]. [1] https://sources.debian.org/src/beansbinding/1.2.1-4/nbproject/project.properties/ The javadoc error you reported initially no longer occurs, but when Ant adjusts the level there is

Bug#1053081: svnkit: FTBFS with default Java 21

2023-09-28 Thread Emmanuel Bourg
Le 27/09/2023 à 00:22, Vladimir Petko a écrit : compile-library: [mkdir] Created dir: /<>/svnkit/bin [mkdir] Created dir: /<>/svnkit-cli/bin [mkdir] Created dir: /<>/svnkit-javahl16/bin [javac] /<>/debian/build.xml:20: warning: 'includeantruntime' was not set, defaulting to

Bug#1053185: ITP: python-varlink -- Python implementation of the Varlink protocol

2023-09-28 Thread Luca Boccassi
Package: wnpp Severity: wishlist Owner: Luca Boccassi X-Debbugs-Cc: debian-de...@lists.debian.org * Package name : python-varlink Version : 31.0.0 Upstream Author : various * URL : https://github.com/varlink/python * License :

Bug#1051739: Package is uninstallable, bug unacknowledged, therefore release critical

2023-09-28 Thread Bastian Germann
On Thu, 21 Sep 2023 15:59:45 + Mike Gabriel wrote: Problem here is that the downloaded dropbox executable probably is still GTK-2+. I need to test this and see how easily portable to GTK-3 is. It is a PyQt5 application now. So the dependency is not needed at all. I have verified it.

Bug#1052629: bookworm-pu: package roundcube/1.6.3+dfsg-1~deb12u1

2023-09-28 Thread Guilhem Moulin
On Thu, 28 Sep 2023 at 18:53:46 +0100, Adam D. Barratt wrote: > --- a/CHANGELOG.md > +++ b/CHANGELOG.md > @@ -1,5 +1,54 @@ > # Changelog Roundcube Webmail > > +## Unreleased > + > > That seems wrong, given that you're uploading a released version. Well spotted but that one is upstream's, see

Bug#1053130: bookworm-pu: package glibc/2.36-9+deb12u2

2023-09-28 Thread Adam D. Barratt
Control: tags -1 confirmed On Wed, 2023-09-27 at 23:47 +0200, Aurelien Jarno wrote: > The upstream glibc stable branch got a few fixes since the latest > point > released, including two security fixes. > Please go ahead. Regards, Adam

Bug#1053181: ruby-kramdown-rfc2629: new upstream version available: 1.7.1

2023-09-28 Thread Daniel Kahn Gillmor
Source: ruby-kramdown-rfc2629 Version: 1.6.22-1 Severity: wishlist X-Debbugs-Cc: d...@fifthhorseman.net kramdown-rfc now has version 1.7.1 out. it would be great to have that in debian. Thanks! --dkg -- System Information: Debian Release: trixie/sid APT prefers testing-debug APT

Bug#1053182: libvpx: CVE-2023-5217

2023-09-28 Thread Salvatore Bonaccorso
Source: libvpx Version: 1.12.0-1 Severity: grave Tags: security upstream Justification: user security hole X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for libvpx. CVE-2023-5217[0]: | Heap buffer overflow in vp8 encoding in libvpx in

Bug#1053130: bookworm-pu: package glibc/2.36-9+deb12u2

2023-09-28 Thread Aurelien Jarno
On 2023-09-28 20:58, Adam D. Barratt wrote: > Control: tags -1 confirmed > > On Wed, 2023-09-27 at 23:47 +0200, Aurelien Jarno wrote: > > The upstream glibc stable branch got a few fixes since the latest > > point > > released, including two security fixes. > > > > Please go ahead. > Thanks

Bug#1053183: galera-4: FTBFS on sparc64: one of sever post-build test fail

2023-09-28 Thread Otto Kekäläinen
Source: galera-4 Version: 26.4.16-1 Severity: normal Justification: unofficial architecture Tags. ftbfs X-Debbugs-CC: debian-sp...@lists.debian.org User: debian-sp...@lists.debian.org Usertags: sparc64 Galera does build on sparc64, but one of the post-build tests simply crash. Looking at old

Bug#1053032: fixed in jlibeps 0.1.ds3-7

2023-09-28 Thread Emmanuel Bourg
This change wasn't necessary, Ant automatically updates the source/target level, sorry for the trouble. Emmanuel Bourg

Bug#1053087: xz-java: FTBFS with default Java 21

2023-09-28 Thread Vladimir Petko
The source level 7 is hardcoded in the build properties[1]. [1] https://sources.debian.org/src/xz-java/1.9-1/build.properties

Bug#1053013: beansbinding: FTBFS with default Java 21

2023-09-28 Thread Vladimir Petko
The source level 7 is hardcoded in project properties[1]. [1] https://sources.debian.org/src/beansbinding/1.2.1-4/nbproject/project.properties/

Bug#1053087: xz-java: FTBFS with default Java 21

2023-09-28 Thread Emmanuel Bourg
Le 29/09/2023 à 00:44, Vladimir Petko a écrit : Please see the attached log: The relevant part: -- Preparing to unpack .../065-ant_1.10.13-2_all.deb ... Unpacking ant (1.10.13-2) -- ant/1.10.13-2 adjusted automatically the source/target level. ant/1.10.14-1

Bug#1053045: king: FTBFS with default Java 21

2023-09-28 Thread Emmanuel Bourg
Control: notfound -1 2.24+dfsg2-1 This was already fixed with ant/1.10.14-1. I've rebuilt with OpenJDK 21 and besides the language level there was no compilation error. Emmanuel Bourg

Bug#999962: silversearcher-ag: diff for NMU version 2.2.0+git20200805-1.1

2023-09-28 Thread Manphiz
Nicholas D Steeves writes: > Xiyue Deng writes: > >> Control: tags 62 + pending >> >> Dear maintainer, >> >> I've prepared an NMU for silversearcher-ag (versioned as >> 2.2.0+git20200805-1.1) >> and uploaded it to mentors.debian.net. Please feel free to tell me if I >> should >> delay it

Bug#1052211: bookworm-pu: package electrum/4.3.4+dfsg1-1+deb12u1

2023-09-28 Thread Soren Stoutner
Are the any changes I should make before I upload a package? -- Soren Stoutner so...@stoutner.com signature.asc Description: This is a digitally signed message part.

Bug#1020478: hunspell-br: Package the Qt WebEngine binary dictionary files from your Hunspell source

2023-09-28 Thread Soren Stoutner
Would you be interested in a patch to implement this functionality? -- Soren Stoutner so...@stoutner.com signature.asc Description: This is a digitally signed message part.

  1   2   >