Bug#776586: libparanamer-java: Please package paranamer-maven-plugin

2015-01-29 Thread Markus Koschany
On 29.01.2015 17:07, Emmanuel Bourg wrote:
 Package: libparanamer-java
 Version: 2.7-1
 Severity: wishlist
 
 The paranamer project contains a Maven plugin which is required to build
 Apache Avro. Currently the libparanamer-java package contains only the sources
 for the main artifact, it should be repackaged to pull the full sources from
 Github [1] and build the Maven plugin.
 
 [1] https://github.com/paul-hammant/paranamer
 

I asked the developer to tag new releases on github.

https://github.com/paul-hammant/paranamer/issues/18

Since this hasn't happened yet, it would require to pull the sources
from the git repository directly.

Markus



signature.asc
Description: OpenPGP digital signature


Bug#776587: [pkg-apparmor] Bug#776587: bugs.debian.org: Enable push/pull notifications for usertags

2015-01-29 Thread intrigeri
Hi,

u wrote (29 Jan 2015 16:26:33 GMT) :
 currently there is no possibility to be notified when a bug is
 usertagged for a certain user.

I'll add just a little bit of background, in the hope it helps someone
look into it earlier: we, the Debian AppArmor team, plan to
extensively use usertags so that e.g. package maintainers can put
AppArmor-related issues on our radar, when they ship AppArmor
confinement profiles in their own packages and lack the expertise to
deal with all the consequences thereof.

Cheers,
-- 
intrigeri


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776589: unzip: CVE-2014-9636 heap overflow via mismatched block sizes

2015-01-29 Thread Marc Deslauriers
Package: unzip
Version: 6.0-13
Severity: normal
Tags: patch
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu vivid ubuntu-patch



*** /tmp/tmp7DfOwv/bug_body

In Ubuntu, the attached patch was applied to achieve the following:

  * SECURITY UPDATE: heap overflow via mismatched block sizes
- debian/patches/12-cve-2014-9636-test-compr-eb: ensure compressed and
  uncompressed block sizes match when using STORED method in extract.c.
- CVE-2014-9636


Thanks for considering the patch.


-- System Information:
Debian Release: jessie/sid
  APT prefers utopic-updates
  APT policy: (500, 'utopic-updates'), (500, 'utopic-security'), (500, 
'utopic-proposed'), (500, 'utopic'), (100, 'utopic-backports')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-30-generic (SMP w/4 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
diff -Nru unzip-6.0/debian/changelog unzip-6.0/debian/changelog
diff -Nru unzip-6.0/debian/patches/12-cve-2014-9636-test-compr-eb unzip-6.0/debian/patches/12-cve-2014-9636-test-compr-eb
--- unzip-6.0/debian/patches/12-cve-2014-9636-test-compr-eb	1969-12-31 19:00:00.0 -0500
+++ unzip-6.0/debian/patches/12-cve-2014-9636-test-compr-eb	2015-01-29 11:15:34.0 -0500
@@ -0,0 +1,43 @@
+From a9bfab5b52d08879bbc5e0991684b700127ddcff Mon Sep 17 00:00:00 2001
+From: mancha mancha1 AT zoho DOT com
+Date: Mon, 3 Nov 2014
+Subject: Info-ZIP UnZip buffer overflow
+
+By carefully crafting a corrupt ZIP archive with extra fields that
+purport to have compressed blocks larger than the corresponding
+uncompressed blocks in STORED no-compression mode, an attacker can
+trigger a heap overflow that can result in application crash or
+possibly have other unspecified impact.
+
+This patch ensures that when extra fields use STORED mode, the
+compressed and uncompressed block sizes match.
+
+---
+ extract.c |8 
+ 1 file changed, 8 insertions(+)
+
+Index: unzip-6.0/extract.c
+===
+--- unzip-6.0.orig/extract.c	2015-01-29 11:15:31.118569464 -0500
 unzip-6.0/extract.c	2015-01-29 11:15:31.114569431 -0500
+@@ -2230,6 +2230,7 @@
+ ulg eb_ucsize;
+ uch *eb_ucptr;
+ int r;
++ush method;
+ 
+ if (compr_offset  4)/* field is not compressed: */
+ return PK_OK;/* do nothing and signal OK */
+@@ -2246,6 +2247,12 @@
+  ((eb_ucsize  0L)  (eb_size = (compr_offset + EB_CMPRHEADLEN
+ return IZ_EF_TRUNC; /* no/bad compressed data! */
+ 
++method = makeword(eb + (EB_HEADSIZE + compr_offset));
++if ((method == STORED)  (eb_size - compr_offset != eb_ucsize))
++	return PK_ERR;			  /* compressed  uncompressed
++	   * should match in STORED
++	   * method */
++
+ if (
+ #ifdef INT_16BIT
+ (((ulg)(extent)eb_ucsize) != eb_ucsize) ||
diff -Nru unzip-6.0/debian/patches/series unzip-6.0/debian/patches/series
--- unzip-6.0/debian/patches/series	2014-12-25 07:37:44.0 -0500
+++ unzip-6.0/debian/patches/series	2015-01-29 11:25:49.0 -0500
@@ -9,4 +9,5 @@
 09-cve-2014-8139-crc-overflow
 10-cve-2014-8140-test-compr-eb
 11-cve-2014-8141-getzip64data
+12-cve-2014-9636-test-compr-eb
 20-unzip60-alt-iconv-utf8


Bug#776557: debian-policy: Please clarify 2.5 'unix heritage = important'

2015-01-29 Thread Matthias Urlichs
Hi,

Bill Allombert:
 On the other hand, ed scripts are still in use:
 - by diff

Reasonable people have been using diff -u for the last umpteen years.

 - by apt-get: the pdiff system use ed scripts
 
which I assume has a dependency on ed.

 so it is useful to keep the reference to what this is all about somewhere.
 
Sure. Nobody wants to drop ed from Debian. (I hope.)

-- 
-- Matthias Urlichs


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776590: opendkim: init script doesn't return a correct exit value

2015-01-29 Thread Nicolas Lafont
Package: opendkim
Severity: important

Dear Maintainer,

The init script of opendkim use the return keywork in place of exit 
keyword in start, stop and status function, but there is no other
call in this script that would send the returned code as an exit
value.

So when you're using this init script, the exit value is always 0

Using the status argument, when opendkim is not started, this value
is normaly 3

This impact some high availability tools, like pacemaker, who use
exit codes to monitor the process.

I include a simple patch in which I replaced the return keyword by
exit.

-- System Information:
Debian Release: 7.8
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776131: gridengine: Should gridengine be removed from jessie?

2015-01-29 Thread Roland Fehrenbacher
 Ondřej == Ondřej Surý ond...@sury.org writes:

Ondřej Hi Roland, On Thu, Jan 29, 2015, at 13:39, Roland
Ondřej Fehrenbacher wrote:
 My offer to take over still stands. What needs to be done to keep
 it in jessie? Can we package Son of Grid Engine and still get
 it uploaded to jessie?

Ondřej Nope, the only thing you can do is fix the RC bugs to keep
Ondřej the gridengine in jessie.

Ok, so it'll have to go ...

Ondřej So I guess it would be better to just remove it from jessie,
Ondřej do the work on 8.x in unstable and use jessie-backports to
Ondřej provide the usable current version to jessie users if
Ondřej there's a need for it.

Sounds like a reasonable plan.

Cheers,

Roland

---
http://www.q-leap.com / http://qlustar.com
  --- HPC / Storage / Cloud Linux Cluster OS ---


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776588: python3-psutil: import fails with TypeError in LXC

2015-01-29 Thread Martin Pitt
Package: python3-psutil
Version: 2.1.1-1

Hello,

trying to import psutil in an LXC container (amd64 guest and host)
fails both for Python 2:

| $ python -c 'import psutil'
| Traceback (most recent call last):
|   File string, line 1, in module
|   File /usr/lib/python2.7/dist-packages/psutil/__init__.py, line 1444, in 
module
| _last_cpu_times = cpu_times()
|   File /usr/lib/python2.7/dist-packages/psutil/__init__.py, line 1439, in 
cpu_times
| return _psplatform.cpu_times()
|   File /usr/lib/python2.7/dist-packages/psutil/_pslinux.py, line 231, in 
cpu_times
| return scputimes(*fields)
| TypeError: __new__() takes exactly 8 arguments (1 given)

... and Python 3:

| Traceback (most recent call last):
|   File string, line 1, in module
|   File /usr/lib/python3/dist-packages/psutil/__init__.py, line 1444, in 
module
| _last_cpu_times = cpu_times()
|   File /usr/lib/python3/dist-packages/psutil/__init__.py, line 1439, in 
cpu_times
| return _psplatform.cpu_times()
|   File /usr/lib/python3/dist-packages/psutil/_pslinux.py, line 231, in 
cpu_times
| return scputimes(*fields)
| TypeError: __new__() missing 7 required positional arguments: 'user', 'nice', 
'system', 'idle', 'iowait', 'irq', and 'softirq'

This does not happen on my host system or in a schroot, so I suppose
this is somehow platform specific? LXC should be fairly reproducible,
but of course I'm happy to try additional debugging steps/test
potential fixes.

I tried some older versions (1.2.1 and 1.1.3) and they fail in the
same way, so it's not a (recent) regression.

Thanks,

Martin

-- 
Martin Pitt| http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)


signature.asc
Description: Digital signature


Bug#776587: bugs.debian.org: Enable push/pull notifications for usertags

2015-01-29 Thread u
Package: bugs.debian.org
Severity: wishlist

Dear Maintainer,

currently there is no possibility to be notified when a bug is
usertagged for a certain user.

From what I've seen it's only possible to query UDD directly or
eventually to use the SOAP interface.

Thus I am hereby requesting that when a bug is usertagged, the user can
receive a notification of some sort, just like the package maintainer
does when a bug report is submitted.

Best regards,
Ulrike


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776583: libparanamer-java: Missing parent POM

2015-01-29 Thread Emmanuel Bourg
Le 29/01/2015 17:08, Markus Koschany a écrit :

 thanks for noticing. I think I would go for adding the --no-parent flag.
 Shall I update the package with this change?

Hi Markus,

I've updated the package in the Git repository with the --no-parent
flag. I haven't uploaded it yet because I also need the Maven plugin
(#776586).

Emmanuel Bourg


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#774316: [Pkg-openldap-devel] Bug#774316: Bug#774316: fails to upgrade to jessie with cannot add entry with empty dn

2015-01-29 Thread Ryan Tandy

Control: forcemerge 546368 774316

Hi,

On Wed, Dec 31, 2014 at 09:27:22AM -0800, Ryan Tandy wrote:
At first glance this sounds like an invalid configuration. Assuming 
the messages are accurate, slapadd is correct in refusing to add 
entries that are outside of the configured suffix. Basically I expect 
this to be a duplicate of #546368. Do you think that's correct?


I didn't see a response to this, so I'm merging this with the existing 
report about the upgrade behaviour in such a scenario. Of course, feel 
free to undo it if it turns out I'm wrong.


thanks
Ryan


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#775892: unblock (pre-approval): python-django/1.7.3-1

2015-01-29 Thread Raphael Hertzog
Control: retitle -1 unblock (pre-approval): python-django/1.7.4-1

On Wed, 21 Jan 2015, Raphael Hertzog wrote:
 I would like to upload python-django 1.7.3-1 to sid and jessie.
 It's a new upstream version but it contains only bugfixes
 (a few of which are security related, see #775375).
[...]
 Please let me know your thoughts.

I want to add that my request is now to upload 1.7.4-1 since upstream
released a new bugfix version:
https://docs.djangoproject.com/en/1.7/releases/1.7.4/

BTW, that version contains a fix for an unreported FTBFS that we have in
Debian and that has been introduced by the recent security patches and thus
by Neil's NMU:
https://code.djangoproject.com/ticket/24193

(Just verified my assertion by running sbuild on version 1.7.1-1.1)

Please don't let this request languish for ever.

/me just suffered the pain of backporting Django security patches
to version 1.2 for squeeze-lts. I really want to make it easier for
us in the future by following upstream closely on their stable release
when there's really few risks in doing so.

Thanks.
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776578: Spurious warning about interfaces.d/* files

2015-01-29 Thread Andrew Shadura
On 29 January 2015 at 15:10, martin f krafft madd...@debian.org wrote:
 At least while d-i does not put files into
 /etc/network/interfaces.d, this should probably not happen:

   root@bike:~# ifup eth0
   warning: couldn't open interfaces file /etc/network/interfaces.d/*
   […]

 It seems to be ifupdown, not a hook:

   root@bike:~# ifup --verbose eth0
   Parsing file /etc/network/interfaces.d/*
   warning: couldn't open interfaces file /etc/network/interfaces.d/*
   […]

Oh, I see. wordexp(3) doesn't tell ifupdown when it in fact matched no
files at all, and just returns the pattern so ifupdown tries to source
it.

-- 
Cheers,
  Andrew


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776580: CVE-2014-9623: Glance user storage quota bypass

2015-01-29 Thread Thomas Goirand
Package: glance
Version: 2014.1.3-11
Severity: important
Tags: patch

Note from maintainer: I'm opening this bug before uploading the fix.

Title: Glance user storage quota bypass
Reporter: Tushar Patil (NTT)
Products: Glance
Versions: up to 2014.1.3 and 2014.2 version up to 2014.2.1

Description:
Tushar Patil from NTT reported a vulnerability in Glance. By deleting images
that are being uploaded, a malicious user can overcome the storage quota and
thus may overrun the backend. Images in deleted state are not taken into
account by quota and won't be effectively deleted until the upload is
completed. Only Glance setups configured with user_storage_quota are
affected.

Kilo (development branch) fix:
https://review.openstack.org/144464

Juno fix:
https://review.openstack.org/149387

Icehouse fix:
https://review.openstack.org/149646

CVE: CVE-2014-9623


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#715855: libeb16: patch for #715855 (resent)

2015-01-29 Thread paulownia
[ I am resending the mail with the patch as the BTS has interpreted
  the first one as a control message and is hiding it; apologies for
  the confusion. ]

The three bugs in libeb tools detected by Mayhem all have the same
cause: The function url_parts_parse() in eb/urlparts.c performs a
NULL-pointer dereference when trying to parse certain ill-formed ebook
URLs.

`hostport' is one of several local variables that url_parts_parse
initalises to NULL and then tries to match to particular parts of the
URL string. However, if the url string contains // and ends in @,
the 'hostport' pointer is dereferenced even though it still has the
value NULL, which is causing the segfault.

You can reproduce the crash easily by running
$ ebfont EBNET:// @
(or passing a similar book URL to any of the other eb tools)

The following patch wraps the code that causes the NULL-pointer
dereference with a test that (hostport != NULL). The URL parsing code
in url_parts_parse() looks a little fragile though, there may be other
bugs.

I am reassigning the bug to libeb6, because url_parts_parse() is run
as a consequence of calling eb_bind(), which is part of the library
API.

Here is the patch:

--- a/eb/urlparts.c
+++ b/eb/urlparts.c
@@ -355,20 +355,22 @@ url_parts_parse(URL_Parts *parts, const char *url)
 * Get host and port.
 * IPv6 address is enclosed in `[' and `]'.
 */
-   if (*hostport == '[') {
-   right_bracket = strchr(hostport + 1, ']');
-   if (right_bracket == NULL)
-   separator = NULL;
-   else {
-   if (*(right_bracket + 1) == ':'
-   || *(right_bracket + 1) == '\0') {
-   hostport++;
-   *right_bracket = '\0';
+   if (hostport != NULL) {
+   if (*hostport == '[') {
+   right_bracket = strchr(hostport + 1, ']');
+   if (right_bracket == NULL)
+   separator = NULL;
+   else {
+   if (*(right_bracket + 1) == ':'
+   || *(right_bracket + 1) == '\0') {
+   hostport++;
+   *right_bracket = '\0';
+   }
+   separator = strchr(right_bracket + 1, ':');
+   }
+   } else {
+   separator = strchr(hostport, ':');
}
-   separator = strchr(right_bracket + 1, ':');
-   }
-   } else {
-   separator = strchr(hostport, ':');
}
 
if (separator != NULL) {


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776395: java-package: Does not use the system's keystore

2015-01-29 Thread Francesc Zacarias
Hi Emmanuel,

Good point! I'm attaching a new patch adding a switch to enable or
disable this feature. The default is disabled, so the script will work
as before unless explicitly stated.

Please, tell me if I need to do something else to get this merged.

Cheers!
Francesc

On 28 January 2015 at 00:07, Emmanuel Bourg ebo...@apache.org wrote:
 Hi Francesc,

 Thank you for the patch, this is an interesting suggestion. I wonder if
 we should really go that far with the system integration of the
 generated package though. I can imagine that someone may want to install
 a stock Oracle JRE with no Debian interferences. So maybe this
 integration could be enabled optionally with a
 --with-system-certificates parameter on the command line.

 Emmanuel Bourg

From de83ea689caf8bc072155d3da57ed06f78127a40 Mon Sep 17 00:00:00 2001
From: Francesc Zacarias franc...@spotify.com
Date: Tue, 27 Jan 2015 17:07:43 +0100
Subject: [PATCH] Add option to integrate with the system's keystore

---
 lib/javase.sh | 10 +-
 lib/jdk.sh|  3 +++
 lib/jre.sh|  5 -
 make-jpkg | 17 ++---
 make-jpkg.1   |  5 +
 5 files changed, 31 insertions(+), 9 deletions(-)

diff --git a/lib/javase.sh b/lib/javase.sh
index 3e539b3..9bfd3ec 100644
--- a/lib/javase.sh
+++ b/lib/javase.sh
@@ -126,8 +126,16 @@ if [ \$1 = configure ]; then
   update-alternatives --install \$link_path/\$link_name \$plugin_name \$plugin $j2se_priority
 fi
 }
-
 EOF
+if [ $create_cert_softlinks == true ];then
+cat  $debian_dir/postinst  EOF
+for subdir in lib/security jre/lib/security;do
+if [ -f $jvm_base$j2se_name/\$subdir/cacerts ]; then
+ln -sf /etc/ssl/certs/java/cacerts $jvm_base$j2se_name/\$subdir/cacerts
+fi
+done
+EOF
+fi
 eval $j2se_install  $debian_dir/postinst
 
 cat  $debian_dir/postinst  EOF
diff --git a/lib/jdk.sh b/lib/jdk.sh
index 1c75876..46dec6f 100644
--- a/lib/jdk.sh
+++ b/lib/jdk.sh
@@ -13,6 +13,9 @@ j2sdk_control() {
 # No browser on ARM yet
 java_browser_plugin=
 fi
+if [ $create_cert_softlinks == true ]; then
+depends=$depends, ca-certificates-java
+fi
 for i in `seq 5 ${j2se_release}`;
 do
 provides_runtime=${provides_runtime} java${i}-runtime,
diff --git a/lib/jre.sh b/lib/jre.sh
index 93aed8b..7b339d8 100644
--- a/lib/jre.sh
+++ b/lib/jre.sh
@@ -1,6 +1,9 @@
 
 j2re_control() {
 j2se_control
+if [ $create_cert_softlinks == true ]; then
+depends=ca-certificates-java
+fi
 for i in `seq 5 ${j2se_release}`;
 do
 provides_runtime=${provides_runtime} java${i}-runtime,
@@ -9,7 +12,7 @@ j2re_control() {
 cat  EOF
 Package: $j2se_package
 Architecture: any
-Depends: \${misc:Depends}, \${shlibs:Depends}
+Depends: \${misc:Depends}, \${shlibs:Depends}, $depends
 Recommends: netbase
 Provides: java-virtual-machine, java-runtime, java2-runtime, $provides_runtime java-runtime-headless, java2-runtime-headless, $provides_headless java-browser-plugin
 Description: $j2se_title
diff --git a/make-jpkg b/make-jpkg
index a90c26e..6e53003 100755
--- a/make-jpkg
+++ b/make-jpkg
@@ -79,14 +79,15 @@ Supported java binary distributions currently include:
 
 The following options are recognized:
 
-  --full-name NAME   full name used in the maintainer field of the package
-  --email EMAIL  email address used in the maintainer field of the package
-  --changes  create a .changes file
-  --revision add debian revision
-  --source   build a source package instead of a binary deb package
+  --full-name NAME full name used in the maintainer field of the package
+  --email EMAILemail address used in the maintainer field of the package
+  --changescreate a .changes file
+  --revision   add debian revision
+  --source build a source package instead of a binary deb package
+  --with-system-certs  integrate with the system's keystore
 
-  --help display this help and exit
-  --version  output version information and exit
+  --help   display this help and exit
+  --versionoutput version information and exit
 
 EOF
 }
@@ -131,6 +132,8 @@ while [[ $# -gt 0  x$1 == x--* ]]; do
 genchanges=true
 elif [[ x$1 == x--source ]]; then
 build_source=true
+elif [[ x$1 == x--with-system-certs ]]; then
+create_cert_softlinks=true
 else
 unrecognized_option $1
 fi
diff --git a/make-jpkg.1 b/make-jpkg.1
index bceec92..ba1d000 100644
--- a/make-jpkg.1
+++ b/make-jpkg.1
@@ -52,6 +52,11 @@ add debian revision
 .B --source
 build a source package instead of a binary deb package
 .TP
+.B --with-system-certs
+Replace the JVMs keystore with a softlink to the system's keystore,
+(/etc/ssl/certs/java/cacerts) which is managed automatically by the
+ca-certificates and ca-certificates-java packages.
+.TP
 .B --help
 display help text and exit
 .TP
-- 
2.1.4



Bug#776566: Please cater to serial consoles

2015-01-29 Thread Lennart Sorensen
On Thu, Jan 29, 2015 at 04:05:45PM +0300, Michael Tokarev wrote:
 29.01.2015 15:12, Samuel Thibault wrote:
  martin f krafft, le Thu 29 Jan 2015 11:52:36 +0100, a écrit :
2. the boot: prompt appears on both, console and serial console,
  
  Nack with my brltty maintainer hat: you don't want to send things on the
  serial port without the user saying to do this. In the case of braille
  devices, we have already seen some device being bricked by such behavior
  because it unfortunately made the device enter a ROM-flash mode...
 
 Some serial-connected models of Powercom UPSes will turn off power after
 seeing this sequence... ;)  I don't remember which code it is exactly,
 but it is a single char from lowercase latin letters.

Hmm, according to the driver the character is \xba (so not a standard
latin character) but of course get the baud rate wrong (which you almost
certainly will) and who knows what characters you end up sending.

So I agree, there are many reasons not to assume what is connected to
the serial port.

Devices can have lots of serial ports, and who is to say if any of them
should be a console or not, and even if they are, at what baud rate?
And certainly serial consoles are not a common use case on x86 machines.

-- 
Len Sorensen


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776395: java-package: Does not use the system's keystore

2015-01-29 Thread Emmanuel Bourg
This looks excellent, thank you very much. I'll merge it in the next upload.

Emmanuel Bourg


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#715855: libeb16: patch to fix #715855 and other mayhem-detected crashes

2015-01-29 Thread paulownia
reassign 715855 libeb16
tags 715855 + patch
stop

The three bugs in libeb tools detected by Mayhem all have the same
cause: The function url_parts_parse() in eb/urlparts.c performs a
NULL-pointer dereference when trying to parse certain ill-formed ebook
URLs.

`hostport' is one of several local variables that url_parts_parse
initalises to NULL and then tries to match to particular parts of the
URL string. However, if the url string contains // and ends in @,
the 'hostport' pointer is dereferenced even though it still has the
value NULL, which is causing the segfault.

You can reproduce the crash easily by running
$ ebfont EBNET:// @
(or passing a similar book URL to any of the other eb tools)

The following patch wraps the code that causes the NULL-pointer
dereference with a test that (hostport != NULL). The URL parsing code
in url_parts_parse() looks a little fragile though, there may be other
bugs.

I am reassigning the bug to libeb16, because url_parts_parse() is run
as a consequence of calling eb_bind(), which is part of the library
API.

Here is the patch:

--- a/eb/urlparts.c
+++ b/eb/urlparts.c
@@ -355,20 +355,22 @@ url_parts_parse(URL_Parts *parts, const char *url)
 * Get host and port.
 * IPv6 address is enclosed in `[' and `]'.
 */
-   if (*hostport == '[') {
-   right_bracket = strchr(hostport + 1, ']');
-   if (right_bracket == NULL)
-   separator = NULL;
-   else {
-   if (*(right_bracket + 1) == ':'
-   || *(right_bracket + 1) == '\0') {
-   hostport++;
-   *right_bracket = '\0';
+   if (hostport != NULL) {
+   if (*hostport == '[') {
+   right_bracket = strchr(hostport + 1, ']');
+   if (right_bracket == NULL)
+   separator = NULL;
+   else {
+   if (*(right_bracket + 1) == ':'
+   || *(right_bracket + 1) == '\0') {
+   hostport++;
+   *right_bracket = '\0';
+   }
+   separator = strchr(right_bracket + 1, ':');
+   }
+   } else {
+   separator = strchr(hostport, ':');
}
-   separator = strchr(right_bracket + 1, ':');
-   }
-   } else {
-   separator = strchr(hostport, ':');
}
 
if (separator != NULL) {


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776587: bugs.debian.org: Enable push/pull notifications for usertags

2015-01-29 Thread Don Armstrong
On Thu, 29 Jan 2015, u wrote:
 currently there is no possibility to be notified when a bug is
 usertagged for a certain user.
 
 From what I've seen it's only possible to query UDD directly or
 eventually to use the SOAP interface.

[...]


On Thu, 29 Jan 2015, intrigeri wrote:
 I'll add just a little bit of background, in the hope it helps someone
 look into it earlier: we, the Debian AppArmor team, plan to
 extensively use usertags so that e.g. package maintainers can put
 AppArmor-related issues on our radar, when they ship AppArmor
 confinement profiles in their own packages and lack the expertise to
 deal with all the consequences thereof.

Yeah, something along these lines would be useful.

In the meantime, you can use the SOAP interface, UDD, or rsync to see
when the set of tagged bugs changes... but that's not quite as useful as
it could be.


-- 
Don Armstrong  http://www.donarmstrong.com

When I was a kid I used to pray every night for a new bicycle. Then I 
realized that the Lord doesn't work that way so I stole one and asked
Him to forgive me.
 -- Emo Philips.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776591: python-markdown: calls logging.captureWarnings on import

2015-01-29 Thread Julien Cristau
Package: python-markdown
Version: 2.5.1-2
Severity: important

Hi,

python-markdown in jessie calls logging.captureWarnings(True) on import,
unconditionally.  For a library, this is unbelievably antisocial.
Logging should be left in control of the application.

Cheers,
Julien

-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'testing-updates'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages python-markdown depends on:
ii  python  2.7.8-2
pn  python:any  none

Versions of packages python-markdown recommends:
ii  python-pygments  2.0.1+dfsg-1
ii  python-yaml  3.11-2

Versions of packages python-markdown suggests:
pn  python-markdown-doc  none

-- no debconf information

-- 
Julien Cristau  julien.cris...@logilab.fr
Logilab http://www.logilab.fr/
Informatique scientifique  gestion de connaissances


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776557: debian-policy: Please clarify 2.5 'unix heritage = important'

2015-01-29 Thread Bill Allombert
On Thu, Jan 29, 2015 at 10:49:42AM +0100, Matthias Urlichs wrote:
 Hi,
 
 Martin Zobel-Helas:
  the following sentence in 2.5 leave much room for maneuver, therefor i
  would like to see a clarification how it should be interpreted:
  
  | Important programs, including those which one would expect to find on
  | any Unix-like system. If the expectation is that an experienced Unix
  | person who found it missing would say What on earth is going on, where
  | is foo?, it must be an important package.
  
  Background here is, that i moved the package ed to optional years ago,
  and now have bug #776413 open, which disagrees on that move.
 
 Quite frankly, any experienced Unix person who still uses ed for, well,
 anything at all really, should ask themselves where the hell they've been
 during the last 20 years or so.

I do not think people are still using ed for interactive use
(unless they have no other choice left)

On the other hand, ed scripts are still in use:
- by diff
- by apt-get: the pdiff system use ed scripts

so it is useful to keep the reference to what this is all about somewhere.

Cheers,
-- 
Bill. ballo...@debian.org

Imagine a large red swirl here. 


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776557: debian-policy: Please clarify 2.5 'unix heritage = important'

2015-01-29 Thread Adam D. Barratt

On 2015-01-29 16:55, Matthias Urlichs wrote:

Hi,

Bill Allombert:

[...]

- by apt-get: the pdiff system use ed scripts


which I assume has a dependency on ed.


apt uses an internal implementation.

Regards,

Adam


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#775480: scowl: text files should be encoded in UTF-8

2015-01-29 Thread Don Armstrong
On Thu, 29 Jan 2015, Ben Finney wrote:
 Hmm. Could you transition the package, by providing in the next release:
 
 * /usr/share/dict/scowl/
   No data files, only the directories below.
 
 * /usr/share/dict/scowl/ISO-8859-1/
   The upstream data files in the upstream's choice, ISO-8859-1
   encoding. (If additional non-Unicode encodings are provided,
   additional directories can provide those too.)
 
 * /usr/share/dict/scowl/UTF-8/
   The same data files, transcoded to UTF-8.
 
 This would signal the change, while allowing allow any dependent
 programs to make an explicit choice about which encoding they want.
 
 Then, in some future release, the UTF-8 files can be the default,
 while the non-Unicode encodings can continue to exist.
 
 Then, and only if this seems desirable, we can deprecate the
 non-Unicode encodings; and finally, in some release after that, remove
 any non-Unicode encodings.
 
 Does that sound feasible?

Yeah; the only issue is that this would require having two copies of the
files.

Since (AFAICT), there are no Debian dependencies on the wordlist, I
think I'm just going to transition to UTF-8 early, and provide a package
which has the files as iso8859-1 for a release with a NEWS item
indicating that if people need the files, they should either adapt to
UTF-8, or install the ISO8859-1 package.

I'll also implore them if they are using the ISO8859-1 package to
contact me if they expect to need it beyond the release of stretch.

In buster, I'll just stop building the ISO8859-1 package.

All of this needs to be communicated with upstream, though; I should get
on that.

-- 
Don Armstrong  http://www.donarmstrong.com

Something the junk advertisers don't seem to understand: we live in an
information super-saturated world. If I don't want to buy something,
no amount of shouting or propagandizing will budge me; all it will do
is get me annoyed. On the other hand, if I have a need for your
product, I can seek it out in an eyeblink.
 -- Charles Stross Toast: A Con Report in _Toast_ p136


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776550: unattended-upgrades: Depend on cron

2015-01-29 Thread christophe


Package: unattended-upgrades
Version: 0.79.5+wheezy1
Severity: normal

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?  Fresh install of LXC container with 
homegrown template

   * What exactly did you do (or not do) that was effective (or
 ineffective)? Installed unattended-upgrades, but it didn't upgrade 
packages because of missing cron package

   * What was the outcome of this action? No upgrades
   * What outcome did you expect instead? Upgrades

*** End of the template - remove these lines ***


-- System Information:
Debian Release: 7.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16-0.bpo.2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages unattended-upgrades depends on:
ii  apt0.9.7.9+deb7u6
ii  apt-utils  0.9.7.9+deb7u6
ii  debconf [debconf-2.0]  1.5.49
ii  lsb-base   4.1+Debian8+deb7u1
ii  lsb-release4.1+Debian8+deb7u1
ii  python 2.7.3-4+deb7u1
ii  python-apt 0.8.8.2
ii  ucf3.0025+nmu3
ii  xz-utils   5.1.1alpha+20120614-2

unattended-upgrades recommends no packages.

Versions of packages unattended-upgrades suggests:
ii  bsd-mailx  8.1.2-0.2006cvs-1
ii  exim4-daemon-light [mail-transport-agent]  4.80-7

-- debconf information:
* unattended-upgrades/enable_auto_updates: true


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776137: sudo: fails to switch between sudo and sudo-ldap: chown: cannot access '/etc/sudoers': No such file or directory

2015-01-29 Thread Christian Kastner
Hi Andreas,

I'm not quite sure we're on the same page yet, but I'm also not 100%
confident that I'm in the right. So here are some additional thoughts:

On 2015-01-29 09:31, Andreas Beckmann wrote:
 And while switching sudo-sudo-ldap the following happens:
 
 sudo gets removed, conffile remains
 sudo-ldap.preinst gets called with no previous version, so the conffile
 handling is activated  - the md5sum matches that one from wheezy and
 therefore /etc/sudoers is moved aside

It's moved aside if, and only if, /etc/sudoers is the pristine package
version. So if it's moved to /etc/sudoers.pre-conffile, we know that

  1. The conffile has not been modified by the user
  2. The conffile has not been deleted by the user

Furthermore, the only reason it is being moved is to avoid a modified
conffile dialogue when the file was, in fact, not modified.

 sudo-ldap replaces sudo and takes over a deleted conffile

I don't think so... see above: if it had been deleted (in the sense that
the user rm -f'ed it), /etc/sudoers.pre-conffile would not exist (md5sum
mismatch of /etc/sudoers).

 this is not reinstated - per policy
 sudo-ldap.postinst explodes on the deleted conffile.

There's two cases here:

Case 1: If it had been deleted (by the user), then postinst would indeed
fail at the chown. Part A. of my patch addresses this issue.

Case 2: if /etc/sudoers but /etc/sudoers.pre-conffile exists, then we
know that we have an untouched conffile that was only temporarily moved
just to avoid a modified conffile dialogue. So it must be moved back.
Part B. of my patch does this.

 could you try how switching between sudo and sudo-ldap works if the
 wheezy md5sum is removed from teh preinst?

With my patch applied, I tried various combinations of:

  1. not touching /etc/sudoers
  2. modifying /etc/sudoers
  3. deleting /etc/sudoers

whilst switching back-and-forth between sudo and sudo-ldap, and all did
the right thing.

  1. /etc/sudoers is the package maintainer's version
  2. /etc/sudoers is the user-modified version
  3. /etc/sudoers does not exist (and a warning is issued)


Thoughts?

Christian


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#724456: locales: regeneration of locales by locale-gen breaks programs; should be done in a temporary file

2015-01-29 Thread Vincent Lefevre
Control: found -1 2.13-38+deb7u7

On 2013-09-24 02:07:39 +0200, Vincent Lefevre wrote:
 The regeneration of all the locales by /usr/sbin/locale-gen is slow,
 so that it sometimes breaks programs. It currently removes the
 /usr/lib/locale/locale-archive file to rebuild it, and until the
 used locales are available, various programs (e.g. executed by cron)
 break.
[...]

This still occurs: on a computation server, glibc was upgraded
yesterday, and one of my programs failed with the following error.

perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = en_US.UTF-8,
LC_TIME = en_DK,
LC_COLLATE = POSIX,
LC_CHARMAP = UTF-8,
LANG = POSIX
are supported and installed on your system.
perl: warning: Falling back to the standard locale (C).

and locale: Cannot set LC_CTYPE to default locale: Too many levels of
symbolic links in a program started by the Perl script.

-- 
Vincent Lefèvre vinc...@vinc17.net - Web: https://www.vinc17.net/
100% accessible validated (X)HTML - Blog: https://www.vinc17.net/blog/
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#768291: Bug 768291

2015-01-29 Thread Alistair Leslie-Hughes
After recompiling the kernel, which stop creating /dev/input/js0 for a 
MS keyboard, this error doesn't occur any more.


Kernel bug reference.
https://bugzilla.kernel.org/show_bug.cgi?id=37982


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776137: sudo: fails to switch between sudo and sudo-ldap: chown: cannot access '/etc/sudoers': No such file or directory

2015-01-29 Thread Andreas Beckmann
Hi Christian,

thanks for looking into this.

What we have here is a conffile shared between two packages that
Conflicts+Replaces each other. That's even more weird than placing
conffiles in multi-arch:same packages ... at least they don't ship
different versions (but they did in lenny ...)

I think the conffiles part should be factored out to a separate package
(e.g. sudoers). But probably not for jessie :-)

If I see this correctly, in wheezy /etc/sudoers finally became a
conffile. So the preinst scripts are wrong - they should not touch (or
move around) the unmodified wheezy conffile.

And while switching sudo-sudo-ldap the following happens:

sudo gets removed, conffile remains
sudo-ldap.preinst gets called with no previous version, so the conffile
handling is activated  - the md5sum matches that one from wheezy and
therefore /etc/sudoers is moved aside
sudo-ldap replaces sudo and takes over a deleted conffile
this is not reinstated - per policy
sudo-ldap.postinst explodes on the deleted conffile.

could you try how switching between sudo and sudo-ldap works if the
wheezy md5sum is removed from teh preinst?

Andreas

On 2015-01-28 23:56, Christian Kastner wrote:
 Control: tags -1 + patch
 
 On Sat, 24 Jan 2015 12:05:52 +0100 Andreas Beckmann a...@debian.org wrote:
 The upgrade to jessie with sudo-ldap/jessie went smooth, and thereafter
 I wanted to switch to sudo/jessie, which failed due to missing
 /etc/sudoers, the problem is reproducible in plain jessie, too:

 # apt-get install sudo
 snip
 WARNING:  /etc/sudoers not present!
 chown: cannot access '/etc/sudoers': No such file or directory
 dpkg: error processing package sudo (--configure):
  subprocess installed post-installation script returned error exit status 1
 Errors were encountered while processing:
  sudo
 E: Sub-process /usr/bin/dpkg returned an error code (1)
 
 The problem stems from the solution used to avoid an unnecessary action
 prompt for a conffile change when in fact there was no change. See bugs
 #636049, #612532, #660594.
 
   1. Each respective preinst checks, via md5sum, if /etc/sudoers has
  changed. Iff not, it is moved to a temporary location at
  /etc/sudoers.pre-conffile.
 
   2. Each respective postinst checks whether /etc/sudoers is present,
  and warns if it isn't (see WARNING quoted above).
 
   3. Then follows an unconditional chown of /etc/sudoers, and when this
  fails, postinst aborts because of set -e.
 
 This is the first problem. It is of course possible for this file to be
 generally absent (it's a conffile, and the user might have forcefully
 removed it), so this chown should be guarded by a test for existence.

Is sudo useful at all if /etc/sudoers is missing?

   3. Later on, there is an attempted to remove the temporarily
  renamed /etc/sudoers.pre-conffile mentioned above:
 
 # if we've gotten this far .. remove the saved, unchanged old sudoers file
 rm -f /etc/sudoers.pre-conffile

that is an *old* pristine sudoer that was not a conffile

 This I don't understand. Why remove it? This file can only exist because
 of step 1. above, and if it exists, the purpose was to just temporarily
 move it out of the way to avoid a conffile-change question. Why is it
 being removed now? Shouldn't it just be moved back in step 2.?

dpkg should have installed a new sudoers (that is now a conffile)

the .pre-conffile is a backup that should be restored in failed-upgrade
or removed in postinst, so the intention is right, just the preinst
should not have touch a conffile

 Please find attached a debdiff against the version in t-p-u that
 
   A. Makes the chmod/chown conditional on the existence of /etc/sudoers

maybe its better to explode here if sudoers does not exist - I assume
sudo will be nonfunctional without it

   B. When /etc/sudoers.pre-conffile exists, moves it back to
  /etc/sudoers. This is done unconditionally since the very
  existence of /etc/sudoers.pre-conffile implies that it is the
  pristine package version (recall the md5sum check above). So
  the user did not delete or change /etc/sudoers, and we want it
  back.

there was never the intention to restore this in a pre-conffile to
conffile upgrade case ...

 I'm confident that change A. is correct and necessary, but change B.
 depends on whether I understood the problem the code is trying to solve
 correctly!
 
 I tested this with various combinations (pristine, changed, deleted
 /etc/sudoers), and TTBOMYK the result is policy-conform. Additional
 testing would be highly appreciated, though.
 
 Regards,
 Christian
 


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#763020: libakonadiprotocolinternals1: akonadi fails sync imap folders after sleep resume

2015-01-29 Thread Kai Michael Hamich
Hi,

i had this problem too the last days ... 

i dont know if this message is related to this bug, but after resuming, 
akonadi print out these lines:


QObject::startTimer: QTimer cannot have a negative interval
QObject::startTimer: QTimer cannot have a negative interval
QObject::startTimer: QTimer cannot have a negative interval
QObject::startTimer: QTimer cannot have a negative interval
SEARCH: 
Query: { limit : -1, negated : false, rel : 1, subTerms : [ { 
cond : 0, key : email, negated : false, value : 
b...@sandroknauss.de } ] } 
MimeTypes: (text/directory) 
Collections: QVector(3, 3, 1391, 1392, 1391, 1392) 
Remote: false 
Recursive true 
Executing search kmail2-1620836711-SearchSession 
Search done kmail2-1620836711-SearchSession (without remote search) 
Result: 0 matches 
QObject::startTimer: QTimer cannot have a negative interval
QObject::startTimer: QTimer cannot have a negative interval
QObject::startTimer: QTimer cannot have a negative interval
QObject::startTimer: QTimer cannot have a negative interval


Regards,

Kai




Am Donnerstag, 29. Januar 2015, 03:13:54 schrieb Sandro Knauß:
 tags 763020 +moreinfo
 thanks
 
 Hey,
 
  Atfer resuming (sleep mode), akonadi hangs on a folder, unable to sync
 
 I can't reproduce this behaviour.
 * What kinds of resources do you use?
 * Is there a active network connection while going to sleep?
 * Can you run akonadi restart in a console and attach the output with a
 sleep in between?
 
 Regads,
 
 sandro


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776533: [Pkg-haskell-maintainers] Bug#776533: libghc-aeson-dev-7.0.3 has serious vulnerability to DOS attack.

2015-01-29 Thread Joachim Breitner
Hi,

Am Donnerstag, den 29.01.2015, 11:35 +0900 schrieb Shohei Murayama:
 The aeson-7.0.3 package has serious vulnerbility to DOS attack.
 This issue had already reported and completely fixed in upstream,
 see the URL.
 
 https://github.com/bos/aeson/issues/198
 
 The following packages had been updated in order to fix the issue.
 
 aeson-7.0.3 - aeson-7.0.6
 scientific-0.2.0.2 - scientific-3.2.0
 attoparsec-0.11.2.1 - attoparsec-0.11.3.4

thanks for the report.

I doubt that we can fix this for jessie at this point in the release,
and the version waiting in experimental already has the fix.


Greetings,
Joachim

-- 
Joachim nomeata Breitner
Debian Developer
  nome...@debian.org | ICQ# 74513189 | GPG-Keyid: F0FBF51F
  JID: nome...@joachim-breitner.de | http://people.debian.org/~nomeata



signature.asc
Description: This is a digitally signed message part


Bug#776554: sulogin says System Maintenance Mode, doesn't asks for a password if the /etc/passwd (or shadow) entry for the user is empty

2015-01-29 Thread Peng, Nancy (NSN - CN/Beijing)
Package: Busybox
Version: v1.22.1

If the /etc/passwd (or shadow) entry for the user is empty, I invoke `sulogin' 
without arguments from an ordinary shell
prompt, it prints `System Maintenance Mode', rather than to ask user for a 
password Give root password for system maintenance
(or type Control-D for normal startup)

Here is a transcript:

  $ sulogin
  System Maintenance Mode
  $ /sbin/hello
  System Maintenance Mode
  $


I suggest that sulogin always ask user for a password even if /etc/passwd (or 
shadow) entry for the user is empty.

Kernel version: Linux lrc-lsp-k2-a-0 3.10.47-rt50 #1 SMP PREEMPT RT Tue Dec 16 
16:04:37 EET 2014 armv7l GNU/Linux

Shared C library: libc-2.19-2014.04.so




Bug#776557: debian-policy: Please clarify 2.5 'unix heritage = important'

2015-01-29 Thread Martin Zobel-Helas
Package: debian-policy
Severity: important

Hi,

the following sentence in 2.5 leave much room for maneuver, therefor i
would like to see a clarification how it should be interpreted:

| Important programs, including those which one would expect to find on
| any Unix-like system. If the expectation is that an experienced Unix
| person who found it missing would say What on earth is going on, where
| is foo?, it must be an important package.

Background here is, that i moved the package ed to optional years ago,
and now have bug #776413 open, which disagrees on that move. I would
like to keep ed in optional, but also see the arguments the submitter
gave here. 

Hoping for your assistance,

Martin

-- System Information:
Debian Release: 8.0
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.18.0-trunk-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

-- 
 Martin Zobel-Helas zo...@debian.orgDebian System Administrator
 Debian  GNU/Linux Developer   Debian Listmaster
 http://about.me/zobel   Debian Webmaster
 GPG Fingerprint:  6B18 5642 8E41 EC89 3D5D  BDBB 53B1 AC6D B11B 627B 


signature.asc
Description: Digital signature


Bug#775801: tomcat7: update ecj.jar also to avoid java.util.Map$Entry cannot be resolved error during jsp compilation

2015-01-29 Thread Ralf Hauser
Dear Emmanuel,

On a different installation of debian stable, Christian did the following:
1) apt-get upgrade
  --- libecj-java was unchanged
2) install tomcat7.056
libtomcat7-java:all 7.0.28-4+deb7u1 = 7.0.56-1~bpo70+2
tomcat7-common:all 7.0.28-4+deb7u1 = 7.0.56-1~bpo70+2
tomcat7:all 7.0.28-4+deb7u1 = 7.0.56-1~bpo70+2
3) tried to run tomcat, but the Map$Entry cannot be resolved problem was
there
4) then Christian did apt-get -t wheezy-backports install libecj-java
  --libecj-java:all 3.5.1-3 = 3.10.1-1~bpo70+1
5) now the problem no longer occurs

So, I guess in your backport the dependency for this is missing?

Ralf
 -Original Message-
 From: Emmanuel Bourg [mailto:emmanuel.bo...@gmail.com] On Behalf Of
 Emmanuel Bourg
 Sent: Dienstag, 20. Januar 2015 10:36
 To: Ralf Hauser; 775...@bugs.debian.org
 Subject: Re: Bug#775801: tomcat7: update ecj.jar also to avoid
 java.util.Map$Entry cannot be resolved error during jsp compilation
 
 Hi Ralf,
 
 Thank you for the report. Could you install the libecj-java/3.10.1-1
package
 from the wheezy-backports and try again please? It contains the version
4.4
 used by Tomcat upstream and is likely to fix this issue.
 
 Emmanuel Bourg


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776551: please deprecate usage of --compare-versions with and explain why

2015-01-29 Thread Tomas Pospisek
Package: dpkg
Version: 1.17.23
Severity: wishlist
Tags: patch

Hello,

I've expanded the dpkg man page section on --compare-versions as
follows:

  --compare-versions ver1 op ver2
  ...
  ... These are provided only for compatibility with control file syntax:
= = =  , are deprecated and should not be used, due to
  confusing semantics.  To illustrate: 0.1  0.1 evaluates as true.

You can find the respective commit here:

  
http://anonscm.debian.org/cgit/users/tpo/dpkg.git/commit/?id=83a79497628da68d4d96ba22233b0b1ea2dceb82

And can pull from here:

  git://git.debian.org/users/tpo/dpkg.git

I've spend an hour or two before figuring out, that it was the weird '' ''
semantics that is broken. So I'd be glad if you could include more
explicit documentation of the problem and spare others wasting their time
debuging the fallout of these particular semantics.

Please pull. Thanks,
*t

-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_CH.utf8, LC_CTYPE=de_CH.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages dpkg depends on:
ii  libbz2-1.0   1.0.6-7+b2
ii  libc62.19-13
ii  liblzma5 5.1.1alpha+20120614-2+b3
ii  libselinux1  2.3-2
ii  tar  1.27.1-2+b1
ii  zlib1g   1:1.2.8.dfsg-2+b1

dpkg recommends no packages.

Versions of packages dpkg suggests:
ii  apt  1.0.9.6

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776556: ITP: htrace -- Tracing framework for distributed systems written in Java

2015-01-29 Thread Emmanuel Bourg
Package: wnpp
Severity: wishlist
Owner: Emmanuel Bourg ebo...@apache.org

* Package name: htrace
  Version : 3.0.4
  Upstream Author : Cloudera
* URL : http://htrace.org
* License : Apche-2.0
  Programming Lang: Java
  Description : Tracing framework for distributed systems written in Java

HTrace is a tracing framework recording spans (basic units of work, like
a remote procedure call) and traces (set of spans forming a tree-like structure)
to measure execution times in distributed systems.

HTrace is a dependency of Hadoop.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776558: Check signature in uscan

2015-01-29 Thread Mathieu Malaterre
Package: ilmbase
Version: 1.0.1-6.1
Tags: patch

It would be nice to start checking download:

$ cat debian/watch
version=3
opts=pgpsigurlmangle=s/$/.sig/ \
http://download.savannah.gnu.org/releases/openexr/ilmbase-([\d\.]+)\.tar\.gz

It currently fails though:

$ wget http://download.savannah.gnu.org/releases/openexr/ilmbase-2.2.0.tar.gz
$ wget 
http://download.savannah.gnu.org/releases/openexr/ilmbase-2.2.0.tar.gz.sig
$ gpg --verify ilmbase-2.2.0.tar.gz.sig
gpg: assuming signed data in `ilmbase-2.2.0.tar.gz'
gpg: Signature made Sun 10 Aug 2014 07:11:49 AM CEST using RSA key ID AC103A8D
gpg: Can't check signature: public key not found


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776555: RM: cross-gcc/experimental -- ROM; Wrong (epoched) version number.

2015-01-29 Thread Wookey
Package: ftp.debian.org
Severity: normal

This package was accidentally uploaded to experimental with the wrong 
version number (using an epoch):  1:4.9.2+9 
The version series in unstable is correct: 9, 10, 11, 12, 13

Whilst it is clearly possible, it would be annoying to have to bump
the version number in use because of this mistake.

Please remove the source (cross-gcc) and binary (cross-gcc-dev) packages (in 
experimental).
We are aware that this version number can never be re-used inthe archive 
without breakage.

This removal is agreed amongst all member of the Debian Cross-toolchain
maintenance team, including the package maintainers.

Thanks


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776520: testng: jquery-1.7.1.min.js is missing from testng.jar

2015-01-29 Thread Eugene Zhukov
 It seems jquery-1.7.1.min.js is missing from /usr/share/java/testng.jar.

This is correct. The build process was tweaked back and forth first to
exclude, then to include it.

The end result is that current binary in Jessie doesn't include it,
but the source package does include it.
So, apt-get source testng in Jessie/unstable and then debuild,
produces binary with jquery-1.7.1.min.js.

Eugene


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776549: bashate: detects MS Windows icon resource as shell script

2015-01-29 Thread Paul Wise
Package: python-bashate
Version: 0.2.0-1
Severity: normal
File: /usr/bin/python2-bashate

bashate should ignore binary files in the discover_files call:

pabs@chianamo ~ $ svn co --quiet https://svn.code.sf.net/p/icns/code
icns-svn
pabs@chianamo ~ $ cd icns-svn/
pabs@chianamo ~/icns-svn $ bashate
E003: Indent not multiple of 4: 'binary gunk here'
 - ./samples/test2.rsrc: L2
binary gunk here
 - ./samples/test2.rsrc: L3
binary gunk here
 - ./samples/test2.rsrc: L15
E003: Indent not multiple of 4: 
..
16 bashate error(s) found
pabs@chianamo ~/icns-svn $ file samples/test2.rsrc
samples/test2.rsrc: MS Windows icon resource, 149x254
pabs@chianamo ~/icns-svn $ xxd samples/test2.rsrc | head -n1
000:  0100  95fe  94fe  003c  ...

-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (900, 'testing'), (890,
'buildd-testing-proposed-updates'), (800, 'unstable'), (790,
'buildd-unstable'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages python-bashate depends on:
ii  dpkg   1.17.23
ii  python 2.7.8-2
ii  python-babel   1.3+dfsg.1-5
ii  python-pbr 0.8.2-1
pn  python2.7:any  none

python-bashate recommends no packages.

python-bashate suggests no packages.

-- no debconf information

-- 
bye,
pabs

https://wiki.debian.org/PaulWise



signature.asc
Description: This is a digitally signed message part


Bug#776553: unblock: darcs/2.8.5-2

2015-01-29 Thread Joachim Breitner
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Please unblock package darcs. A RC bug was filed against it due to
insufficient copyright statements, this was fixed by Christopher
Reichert.

unblock darcs/2.8.5-2

- -- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (101, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armhf

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1

iEYEARECAAYFAlTJ97IACgkQ9ijrk0dDIGzFKwCfWxNndKDdj9yRgy6K153YzbR0
DBsAn1BO7h3MQwzdmsBVuSxQsaHmaqwW
=5Guz
-END PGP SIGNATURE-
diff -Nru darcs-2.8.5/debian/changelog darcs-2.8.5/debian/changelog
--- darcs-2.8.5/debian/changelog	2014-09-07 17:53:14.0 +0200
+++ darcs-2.8.5/debian/changelog	2015-01-29 09:25:24.0 +0100
@@ -1,3 +1,9 @@
+darcs (2.8.5-2) unstable; urgency=low
+
+  * Add copyright information for src/Crypt/*, Closes: bug#775588
+
+ -- Christopher Reichert creicher...@gmail.com  Wed, 28 Jan 2015 22:00:00 -0600
+
 darcs (2.8.5-1) unstable; urgency=low
 
   * Adjust watch file to new hackage layout
diff -Nru darcs-2.8.5/debian/copyright darcs-2.8.5/debian/copyright
--- darcs-2.8.5/debian/copyright	2012-10-13 13:16:13.0 +0200
+++ darcs-2.8.5/debian/copyright	2015-01-29 09:25:24.0 +0100
@@ -85,3 +85,38 @@
  On Debian systems, the full text of the GNU General Public
  License version 2 can be found in the file
  `/usr/share/common-licenses/GPL-2'.
+
+Files: src/Crypt/SHA256.hs
+Copyright: Zooko O'Whielacronx
+License: GPL
+  On Debian systems the full text of the GNU General Public License can be found
+  in the `/usr/share/common-licenses/GPL' file.
+
+Files: src/Crypt/sha2.*
+Copyright: 2005, 2007 Olivier Gay olivier@a3.epfl.ch
+License: BSD-C3
+  All rights reserved.
+  .
+  Redistribution and use in source and binary forms, with or without
+  modification, are permitted provided that the following conditions
+  are met:
+  1. Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+  2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+  3. Neither the name of the project nor the names of its contributors
+ may be used to endorse or promote products derived from this software
+ without specific prior written permission.
+  .
+  THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
+  ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+  IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+  ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
+  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+  DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+  OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+  HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+  LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+  OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+  SUCH DAMAGE.


Bug#765285: upstream patch use

2015-01-29 Thread olivier sallou
Upstream is analysing the patch to integrate it in their code, testing if
atomic is present or not in a correct way.

I will wait for code update or more info from upstream.

Olivier


Bug#776552: spim: new upstream version 9.1.13 at sourceforge

2015-01-29 Thread spim@discard.email
Package: spim
Version: 8.0+dfsg-6
 
The version of SPIM available in Debian is very out-of-date.
SPIM is now hosted at sourcefourge: http://spimsimulator.sourceforge.net/
The latest upstream version is 9.1.13: 
https://sourceforge.net/projects/spimsimulator/files
The upstream version of SPIM has a new QT based GUI


Bug#775801: tomcat7: update ecj.jar also to avoid java.util.Map$Entry cannot be resolved error during jsp compilation

2015-01-29 Thread Emmanuel Bourg
Hi Ralf,

Thank you for the feedback. You are right, I'll update the tomcat7
backport and specify the version of ecj expected.

Emmanuel Bourg


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776560: ibus Japanese input fails using mozc

2015-01-29 Thread Mitchell Ota
Package: ibus
Version: 1.5.9-1
Severity: important

Dear Maintainer,

I have ibus and mozc installed for Japanese input. While I can add them to
the menu successfully, when I try to switch input methods, the icon switches
to mozc, but Japanese input does not work.

I have tried this with anthy and have not been successful either. It seems
to be working fine when checking ~/.xsession-errors and when I use im-config.

-- Package-specific info:
default-display-manager: /usr/sbin/lightdm
ibus is /usr/bin/ibus
ibus-setup is /usr/bin/ibus-setup
im-config -l =  ibus xim
im-config -m = default missing ibus
XMODIFIERS=@im=ibus
GTK_IM_MODULE=ibus
QT4_IM_MODULE=ibus
QT_IM_MODULE=xim
XDG_DATA_DIRS=/usr/share/xfce4:/usr/local/share/:/usr/share/:/usr/share
XDG_MENU_PREFIX=xfce-
PATH=/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games

ls -l /usr/lib/ibus/
total 284
-rwxr-xr-x 1 root root  19088 Oct 22 06:12 ibus-dconf
-rwxr-xr-x 1 root root  10576 Oct 22 06:12 ibus-engine-simple
-rwxr-xr-x 1 root root 165048 Oct 22 06:12 ibus-ui-gtk3
-rwxr-xr-x 1 root root  89496 Oct 22 06:12 ibus-x11

-- System Information:
Debian Release: 8.0
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.18-3.dmz.2-liquorix-amd64 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages ibus depends on:
ii  dconf-cli0.22.0-1
ii  dconf-gsettings-backend [gsettings-backend]  0.22.0-1
ii  gir1.2-gtk-3.0   3.14.5-1
ii  gir1.2-ibus-1.0  1.5.9-1
ii  gnome-icon-theme 3.12.0-1
ii  libatk1.0-0  2.14.0-1
ii  libc62.19-13
ii  libcairo21.14.0-2.1
ii  libdconf10.22.0-1
ii  libgdk-pixbuf2.0-0   2.31.1-2+b1
ii  libglib2.0-0 2.42.1-1
ii  libgtk-3-0   3.14.5-1
ii  libgtk2.0-0  2.24.25-1
ii  libibus-1.0-51.5.9-1
ii  libnotify4   0.7.6-2
ii  libpango-1.0-0   1.36.8-3
ii  libpangocairo-1.0-0  1.36.8-3
ii  librsvg2-common  2.40.5-1
ii  libx11-6 2:1.6.2-3
ii  libxi6   2:1.7.4-1+b2
ii  python-notify0.1.1-4
ii  python3-gi   3.14.0-1
pn  python3:any  none

Versions of packages ibus recommends:
ii  ibus-gtk   1.5.9-1
ii  ibus-gtk3  1.5.9-1
ii  ibus-qt4   1.3.2-2
ii  im-config  0.27-1

Versions of packages ibus suggests:
ii  ibus-clutter  0.0+git20090728.a936bacf-5.1+b1
ii  ibus-doc  1.5.9-1
ii  ibus-qt4  1.3.2-2
pn  libqt5gui5none

-- Configuration Files:
/etc/X11/xinit/xinput.d/ibus e1d6b34d3391810daec087452e28badc [Errno 2] No such 
file or directory: u'/etc/X11/xinit/xinput.d/ibus 
e1d6b34d3391810daec087452e28badc'

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776565: Booting does not currently work

2015-01-29 Thread martin f krafft
Package: di-netboot-assistant
Version: 0.38a
Severity: serious

The pxelinux.0 file installed by di-netboot-assistant does not work.
Before it even asks for pxelinux.cfg/* files, it seeks ldlinux.c32
(cf. #750586), but the menu defined in pxelinux.cfg/default
eventually sets the search path, so this is a catch-22 that somehow
needs to be broken.

pxelinux.0 should probably not need to load ldlinux.c32 at this
stage until the user made a selection in the menu.

If I symlink ldlinux.c32 into place, then it loads all boot-screen
files (according to the tftp logs), but before displaying a menu, it
then looks for libcom32.c32, which it does not
find, and hence fails to load
  ::/debian-installer/daily/i386/boot-screens/vesamenu.c32

Symlinking this file then exposes libutil.c32 as missing.

Note that the problem exists also with the pxelinux.0 file from the
pxelinux package (which you could be using instead anyway…)

Even if I skip the menu and tell clients to use
::/debian-installer/daily/i386/pxelinux.0 instead, the files
ldlinux.c32, libcom32.c32 and libutil.c32 are being sought from
::/debian-installer/daily/i386 instead of ./boot-screens, where they
live.

So far I have been unable to find *anything* to make
di-netboot-assistant produce a usable TFTP directory layout, even
for a single architecture, without having to hand-edit files for
specific clients. Hence I think this is release-critical.

-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_NZ, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages di-netboot-assistant depends on:
ii  curl  7.38.0-4
ii  wget  1.16-3

Versions of packages di-netboot-assistant recommends:
ii  atftpd  0.7.git20120829-1

Versions of packages di-netboot-assistant suggests:
pn  dhcp3-server | udhcpd | dnsmasq  none
pn  elilonone
ii  syslinux 3:6.03+dfsg-5
ii  vim-addon-manager0.5.3

-- Configuration Files:
/etc/di-netboot-assistant/di-netboot-assistant.conf changed:
TFTP_ROOT=/srv/tftp
MIRROR_REGEXPS=s=://ftp.debian.org/=://ftp.stw-bonn.de/=
s=://ftp.ubuntu.com/=://ftp.hawo.stw.uni-erlangen.de/=
umask 0002

/etc/di-netboot-assistant/di-sources.list changed:
stable  amd64   
http://ftp.debian.org/dists/stable/main/installer-amd64/current/images/ 
netboot/netboot.tar.gz
stable  i386
http://ftp.debian.org/dists/stable/main/installer-i386/current/images/  
netboot/netboot.tar.gz
stable  ia64
http://ftp.debian.org/dists/stable/main/installer-ia64/current/images/  
netboot/netboot.tar.gz
stable  sparc   
http://ftp.debian.org/dists/stable/main/installer-sparc/current/images/ 
netboot/boot.img
stable-gtk  amd64   
http://ftp.debian.org/dists/stable/main/installer-amd64/current/images/ 
netboot/gtk/netboot.tar.gz
stable-gtk  i386
http://ftp.debian.org/dists/stable/main/installer-i386/current/images/  
netboot/gtk/netboot.tar.gz
wheezy  amd64   
http://ftp.debian.org/dists/wheezy/main/installer-amd64/current/images/ 
netboot/netboot.tar.gz
wheezy  i386
http://ftp.debian.org/dists/wheezy/main/installer-i386/current/images/  
netboot/netboot.tar.gz
wheezy  ia64
http://ftp.debian.org/dists/wheezy/main/installer-ia64/current/images/  
netboot/netboot.tar.gz
wheezy  sparc   
http://ftp.debian.org/dists/wheezy/main/installer-sparc/current/images/ 
netboot/boot.img
wheezy-gtk  amd64   
http://ftp.debian.org/dists/wheezy/main/installer-amd64/current/images/ 
netboot/gtk/netboot.tar.gz
wheezy-gtk  i386
http://ftp.debian.org/dists/wheezy/main/installer-i386/current/images/  
netboot/gtk/netboot.tar.gz
oldstable   amd64   
http://ftp.debian.org/dists/oldstable/main/installer-amd64/current/images/  
netboot/netboot.tar.gz
oldstable   i386
http://ftp.debian.org/dists/oldstable/main/installer-i386/current/images/   
netboot/netboot.tar.gz
oldstable   ia64
http://ftp.debian.org/dists/oldstable/main/installer-ia64/current/images/   
netboot/netboot.tar.gz
oldstable   sparc   
http://ftp.debian.org/dists/oldstable/main/installer-sparc/current/images/  
netboot/boot.img
oldstable-gtk   amd64   
http://ftp.debian.org/dists/oldstable/main/installer-amd64/current/images/  
netboot/gtk/netboot.tar.gz
oldstable-gtk   i386
http://ftp.debian.org/dists/oldstable/main/installer-i386/current/images/   
netboot/gtk/netboot.tar.gz
squeeze amd64   
http://ftp.debian.org/dists/squeeze/main/installer-amd64/current/images/
netboot/netboot.tar.gz
squeeze i386
http://ftp.debian.org/dists/squeeze/main/installer-i386/current/images/ 
netboot/netboot.tar.gz
squeeze ia64
http://ftp.debian.org/dists/squeeze/main/installer-ia64/current/images/ 
netboot/netboot.tar.gz
squeeze sparc   

Bug#776528: BackendException: ssh connection to user@hostname:22 failed: No authentication methods available

2015-01-29 Thread Francois Marier
On 2015-01-29 at 20:23:21, Alexander Zangerl wrote:
 On Tue, 27 Jan 2015 15:10:34 +1300, Francois Marier writes:
 After upgrading from duplicity 0.6.24-2 to 0.7.01-1, my backups to an ssh
 host stopped working.
 
 i can't reproduce that; i've just used 0.7.01 sftp and scp backups
 without major problems, using sftp://me@somehost/location as well as
 scp://me@somehost/location.

This is what fails for me:

duplicity cleanup --ssh-options=-oIdentityFile=id_rsa 
-oUserKnownHostsFile=known_hosts --force scp://user@hostname/backup

 Now, if I try to run any of the duplicity commands, I get the following:
 
   BackendException: ssh connection to user@hostname:22 failed: No 
  authenticatio
 n methods available
 
 looks like you need to set up ssh-agent and key auth, or 
 use --ssh-askpass or provide the password to duplicity via FTP_PASSWORD.
 i've tested all three options and they work fine.

I'm using a password-less key (as per the above command-line) so it's not a
password or ssh-agent problem.

 it looks as if the strictness of the auth handling changed somewhere
 between 0.6.24 and 0.7.01, but the changelog doesn't show anything pertinent.

There's also the possibility that it doesn't have anything to do with
authentication. paramiko has a tendency to return misleading or unhelpful
messages, unfortunately.

Francois

-- 
Francois Marier   identi.ca/fmarier
http://fmarier.org  twitter.com/fmarier


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#775783: [Pkg-graphite-maint] Bug#775783: [graphite-web] Please prepare a candidate including maxDataPoints backport

2015-01-29 Thread Jonas Genannt
Hello,

 I would like to ask you for considering preparing a candidate that
 includes support for graphite-web maxDataPoints, which improves graphite
 and graphite-based dashboards (like grafana) drastically.
 
 Please see the official doc referring to it here
 http://grafana.org/docs/performance/

that is a good idea. The newest version of Graphite has this included. But 
there is a
patch available for the older version:

https://github.com/graphite-project/graphite-web/commit/5b1015df91b7740a96299594a3a1727238517c20#diff-e87e8c4fda2bf408f4864aad6741df42


Do you mean, we should try to get this in Jessie?

Greets,
Jonas


signature.asc
Description: PGP signature


Bug#775783: [Pkg-graphite-maint] Bug#775783: [graphite-web] Please prepare a candidate including maxDataPoints backport

2015-01-29 Thread Jonas Genannt
Hello,

  https://github.com/graphite-project/graphite-web/commit/5b1015df91b7740a96299594a3a1727238517c20#diff-e87e8c4fda2bf408f4864aad6741df42
 
 
  Do you mean, we should try to get this in Jessie?

 Yes indeed, the performance impact is hge! I strongly recommend it.

I will test the patch and upload it if it works to unstable. So you can test it 
also.

After all worked, we can ask for a freeze exception.

Jonas


signature.asc
Description: PGP signature


Bug#776559: autoupdate: add option that reports needed updates to configure.ac

2015-01-29 Thread Paul Wise
Package: autoconf
Severity: wishlist
File: /usr/bin/autoupdate
Usertags: check-all-the-things

I would like to have an option for autoupdate that doesn't modify
configure.ac but instead reports the needed changes to stdout. This is
needed to non-destructively report that configure.ac needs updating. In
addition it should use a temporary directory for autom4te.cache/ so that
the existing one if any doesn't get modified.

The context is that I'm working on a tool to check all of the files in a
source package and I would like to check the autotools parts too.

https://anonscm.debian.org/cgit/collab-maint/check-all-the-things.git

-- 
bye,
pabs

https://wiki.debian.org/PaulWise



signature.asc
Description: This is a digitally signed message part


Bug#746418: Fixed?

2015-01-29 Thread intrigeri
Francois Marier wrote (26 Jan 2015 23:54:39 GMT) :
 If I look at the /etc/apparmor.d/abstractions/ubuntu-browsers file on my Sid
 machine, it looks like this is fixed:
 [...]
 Or perhaps I've misunderstood what this bug is about?

I think you did misunderstood:

* This bug is about confining Iceweasel properly under its
  own profile.
* These lines in abstractions/ubuntu-browsers are about very vaguely
  confining Firefox/Iceweasel with the (broadly open)
  sanitized_helper, when it's started from e.g. Evince or Pidgin.

The latter indeed is properly addressed in Debian these days AFAIK,
as you point out. The former is not, hence this bug report.

Hoping to have clarified :)


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776567: mclibs: FTBFS on mips64el - segfault in testsuite

2015-01-29 Thread James Cowgill
Source: mclibs
Version: 20061220+dfsg3-3
Severity: important

Hi,

mclibs FTBFS on mips64el with the following error:
 testing in /mclibs/eurodec/eudtest...
 make[4]: Entering directory 
 '/«BUILDDIR»/mclibs-20061220+dfsg3/build/mclibs/eurodec/eudtest'
 gfortran main.F
 gfortran steerd.F
 gfortran steerf.F
 gfortran testd.F
 gfortran testf.F
 rm -f eudtest
 Linking with cern libraries
 -L/«BUILDDIR»/mclibs-20061220+dfsg3/shlib 
 -L/«BUILDDIR»/mclibs-20061220+dfsg3/lib -leurodec -lpacklib -lkernlib -lm 
 -lnsl -lcrypt -ldl -lgfortran
 gfortran -g -o eudtest -O2 -D_FORTIFY_SOURCE=2 -fno-range-check 
 -fno-automatic -fno-second-underscore -fstack-protector 
 --param=ssp-buffer-size=4 -fno-automatic -Wl,-z,relro   
 -L/«BUILDDIR»/mclibs-20061220+dfsg3/src/lib  main.o steerd.o steerf.o testd.o 
 testf.o   `cernlib -dy eurodec packlib`  \
  || rm -f eudtest
 rm -f eurodec.dat
 ln -s /«BUILDDIR»/mclibs-20061220+dfsg3/build/mclibs/eurodec/eurodec.dat 
 eurodec.dat
 cp /«BUILDDIR»/mclibs-20061220+dfsg3/src/mclibs/eurodec/eudtest/eutitle.data 
 eutitle.dat
 Testing eurodec
   ... using eudtest
 
 Program received signal SIGSEGV: Segmentation fault - invalid memory 
 reference.
 
 Backtrace for this error:
 #0  0xFFEF774A97
 Segmentation fault
 make[4]: *** [test] Error 139

Full log:
http://mipsdebian.imgtec.com/debian/logs/m/mclibs/mclibs_20061220+dfsg3-3_mips64el-20150115-1442.build.gz

I'm afraid I don't know fortran very well and the code doesn't exactly
look easy to debug. I've attached the full stacktrace (with cernlib
rebuilt with debugging symbols) which will hopefully help.

Thanks,
James
Starting program: 
/home/jcowgill/mclibs/mclibs-20061220+dfsg3/build/mclibs/eurodec/eudtest/eudtest
 

Program received signal SIGSEGV, Segmentation fault.
mzstor (ixstor=..., chname=..., chopt=..., ifence=..., lv=..., llr=..., 
lld=..., limit=..., last=..., _chname=6, _chopt=1)
at 
/home/jcowgill/cernlib/cernlib-20061220+dfsg3/src/packlib/zebra/mq/mzstor.F:224
224   LQ(KQS+NDATA-1) = IQNIL
#0  mzstor (ixstor=..., chname=..., chopt=..., ifence=..., lv=..., llr=..., 
lld=..., limit=..., last=..., _chname=6, _chopt=1)
at 
/home/jcowgill/cernlib/cernlib-20061220+dfsg3/src/packlib/zebra/mq/mzstor.F:224
nqstor = 0
nqofft = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
kqsp = -904699402
nqoffs = (-904699402, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
nqallo = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
nqiam = 0
lqatab = 1039166639
lqasto = 1038964867
lqbtis = 201772
lqwktb = 1027125
nqwktb = 2560
lqwkfz = 1029685
mqkeys = (1095909957, 1414090313, 1162760004)
nqinit = -1
nqtsys = 399
nqm99 = 0
nqperm = 0
nqfata = 0
nqcase = 0
nqtrac = 2
mqtrac = (1414748749, 538989135, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 
0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 
0, 0, 0, 0, 0, 0, 0)
jqstor = 0
kqt = 0
kqs = -904699402
jqdivi = 0
jqdivr = 0
jqkind = 0
jqmode = 0
jqdivn = 0
jqshar = 0
jqshr1 = 0
jqshr2 = 0
nqresv = 0
lqstor = 134265465
iqcur = (134265465, 5, 1, 1, 1, 164, 5001, 0, 0, -2, 1463898159, 
538980163, 0, 0, 0, 0)
nqfend = 5
nqstru = 1
nqref = 1
nqlink = 1
nqminr = 164
lq2end = 5001
jqdvll = 0
jqdvsy = 0
nqlogl = -2
nqsnam = (1463898159, 538980163, 0, 0, 0, 0)
lqpsto = 0
iqtabv = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
nqpfen = 0
nqpstr = 0
nqpref = 0
nqplk = 0
nqpmin = 0
lqp2e = 0
jqpdvl = 0
jqpdvs = 0
nqplog = 0
nqpnam = (0, 0, 0, 0, 0, 0)
lqsyss = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
lqsysr = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
iqtdum = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 
0, 0)
lqsta = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 
49988)
lqend = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
nqdmax = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
iqmode = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
iqkind = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
iqrcu = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
iqrto = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
iqrno = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
nqdini = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
nqdwip = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
nqdgau = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
nqdgaf = (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 

Bug#775480: scowl: text files should be encoded in UTF-8

2015-01-29 Thread Ben Finney
On 20-Jan-2015, Don Armstrong wrote:

 Those files which are in the scowl binary package are [in encodings
 that are not UTF-8], but that's because that's how upstream
 distributes them.
 
 It makes sense for them to also be in UTF-8, but I'm loathe to
 change them without fully understanding the use cases of people who
 have scowl installed, and whose usage might be broken by a sudden
 switch from ISO8859-1 to UTF-8.

Hmm. Could you transition the package, by providing in the next release:

* /usr/share/dict/scowl/
  No data files, only the directories below.

* /usr/share/dict/scowl/ISO-8859-1/
  The upstream data files in the upstream's choice, ISO-8859-1
  encoding. (If additional non-Unicode encodings are provided,
  additional directories can provide those too.)

* /usr/share/dict/scowl/UTF-8/
  The same data files, transcoded to UTF-8.

This would signal the change, while allowing allow any dependent
programs to make an explicit choice about which encoding they want.

Then, in some future release, the UTF-8 files can be the default,
while the non-Unicode encodings can continue to exist.

Then, and only if this seems desirable, we can deprecate the
non-Unicode encodings; and finally, in some release after that, remove
any non-Unicode encodings.

Does that sound feasible?

-- 
 \   “A computer once beat me at chess, but it was no match for me |
  `\ at kick boxing.” —Emo Philips |
_o__)  |
Ben Finney b...@benfinney.id.au


signature.asc
Description: Digital signature


Bug#776557: debian-policy: Please clarify 2.5 'unix heritage = important'

2015-01-29 Thread Matthias Urlichs
Hi,

Martin Zobel-Helas:
 the following sentence in 2.5 leave much room for maneuver, therefor i
 would like to see a clarification how it should be interpreted:
 
 | Important programs, including those which one would expect to find on
 | any Unix-like system. If the expectation is that an experienced Unix
 | person who found it missing would say What on earth is going on, where
 | is foo?, it must be an important package.
 
 Background here is, that i moved the package ed to optional years ago,
 and now have bug #776413 open, which disagrees on that move.

Quite frankly, any experienced Unix person who still uses ed for, well,
anything at all really, should ask themselves where the hell they've been
during the last 20 years or so.

-- 
-- Matthias Urlichs


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776137: sudo: fails to switch between sudo and sudo-ldap: chown: cannot access '/etc/sudoers': No such file or directory

2015-01-29 Thread Christian Kastner
I just noticed that I completely overlooked your other comments to my
original mail. Sorry about that!

On 2015-01-29 09:31, Andreas Beckmann wrote:
 On 2015-01-28 23:56, Christian Kastner wrote:
 This is the first problem. It is of course possible for this file to be
 generally absent (it's a conffile, and the user might have forcefully
 removed it), so this chown should be guarded by a test for existence.
 
 Is sudo useful at all if /etc/sudoers is missing?

No, but if it's missing, then the user must have removed it, and policy
compels us to honor that decision.

   3. Later on, there is an attempted to remove the temporarily
  renamed /etc/sudoers.pre-conffile mentioned above:

 # if we've gotten this far .. remove the saved, unchanged old sudoers file
 rm -f /etc/sudoers.pre-conffile
 
 that is an *old* pristine sudoer that was not a conffile

Yes, this is tricky. It's not a conffile from the *old* sudo's POV. It
is very much a conffile from the *new* sudo's POV, and therefore the
user-preservation semantics apply (I'd say).

 This I don't understand. Why remove it? This file can only exist because
 of step 1. above, and if it exists, the purpose was to just temporarily
 move it out of the way to avoid a conffile-change question. Why is it
 being removed now? Shouldn't it just be moved back in step 2.?
 
 dpkg should have installed a new sudoers (that is now a conffile)

Well, if the old sudoers md5sum matches what is in postinst, then either
(a) installing the new one or (b) temporarily-renaming-and-switching the
old one have the same effect, except that (a) has the unwanted modified
conffile dialogue.

And if the old sudoers md5sum does not match what is in postinst,
sudoers has user modifications. Albeit from a time before sudoers was a
conffile; but if I upgraded from squeeze to wheezy, I would absolutely
expect my sudoers to be preserved regardless of that.

 the .pre-conffile is a backup that should be restored in failed-upgrade
 or removed in postinst, so the intention is right, just the preinst
 should not have touch a conffile
 
 Please find attached a debdiff against the version in t-p-u that

   A. Makes the chmod/chown conditional on the existence of /etc/sudoers
 
 maybe its better to explode here if sudoers does not exist - I assume
 sudo will be nonfunctional without it

See above (user must have deleted it, we must comply with that)

   B. When /etc/sudoers.pre-conffile exists, moves it back to
  /etc/sudoers. This is done unconditionally since the very
  existence of /etc/sudoers.pre-conffile implies that it is the
  pristine package version (recall the md5sum check above). So
  the user did not delete or change /etc/sudoers, and we want it
  back.
 
 there was never the intention to restore this in a pre-conffile to
 conffile upgrade case ...

I think this can be reduced to the (a) or (b) case I listed above.

Regards,
Christian


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776561: unblock: qt-at-spi/0.3.1-5

2015-01-29 Thread Samuel Thibault
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package qt-at-spi

Hello,

Version 0.3.1-5 fixes bug #762672.

Some users report that KDE application startup becomes very long when
qt-at-spi is installed.  According to the application output, this
happens because the at-spi bus is not responding for some reason.  A
typical case where that was happening was when lightdm-gtk-greeter was
not cleaning its own at-spi bus (Bug #760740), but this was fixed.
Some users have however been reporting that it still happens.  I have
been unable to reproduce that situation except with a hard kill -STOP
on the at-spi bus, in which case I indeed get a couple of minute KDE
application start delay.

While I'm not able to reproduce the actual issue (at-spi bus not
responding) in normal conditions, I'd rather mitigate the effect by
reducing the timeout, from the default dbus timeout (25s for each
failing RPC) to 1s. As shown by the patch, 3 RPCs are failing before the
application can finish startup.  It thus mitigates the effect from a
couple of minutes delay down to 3 seconds.

unblock qt-at-spi/0.3.1-5

-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'buildd-unstable'), (500, 'unstable'), 
(500, 'stable'), (500, 'oldstable'), (1, 'buildd-experimental'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.18.0 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)

-- 
Samuel
N  sl  -  display animations aimed to correct users who accidentally enter
Nsl instead of ls.
diff -Nru qt-at-spi-0.3.1/debian/changelog qt-at-spi-0.3.1/debian/changelog
--- qt-at-spi-0.3.1/debian/changelog2013-06-30 23:55:00.0 +0200
+++ qt-at-spi-0.3.1/debian/changelog2015-01-29 02:56:31.0 +0100
@@ -1,3 +1,11 @@
+qt-at-spi (0.3.1-5) unstable; urgency=low
+
+  * patches/timeout: Mitigate kde application startup time when the at-spi bus
+is hosed (Closes: #762672).
+  * Bump Standards-Version to 3.9.6 (no changes).
+
+ -- Samuel Thibault sthiba...@debian.org  Thu, 29 Jan 2015 02:56:29 +0100
+
 qt-at-spi (0.3.1-4) unstable; urgency=low
 
   * patches/werror: New patch to drop use of -Werror (Closes: #701343).
diff -Nru qt-at-spi-0.3.1/debian/control qt-at-spi-0.3.1/debian/control
--- qt-at-spi-0.3.1/debian/control  2012-10-04 02:11:26.0 +0200
+++ qt-at-spi-0.3.1/debian/control  2014-09-19 17:49:32.0 +0200
@@ -3,7 +3,7 @@
 Maintainer: Debian Accessibility Team debian-accessibil...@lists.debian.org
 Uploaders: Luke Yelavich luke.yelav...@canonical.com, Samuel Thibault 
sthiba...@debian.org
 Build-Depends: debhelper (= 7.3), libqt4-dev (= 4:4.8~), libatspi2.0-dev, 
hardening-wrapper, qt4-dev-tools
-Standards-Version: 3.9.3
+Standards-Version: 3.9.6
 Section: misc
 
 Package: qt-at-spi
diff -Nru qt-at-spi-0.3.1/debian/patches/series 
qt-at-spi-0.3.1/debian/patches/series
--- qt-at-spi-0.3.1/debian/patches/series   2013-03-05 01:06:03.0 
+0100
+++ qt-at-spi-0.3.1/debian/patches/series   2015-01-29 01:59:48.0 
+0100
@@ -1 +1,2 @@
 werror
+timeout
diff -Nru qt-at-spi-0.3.1/debian/patches/timeout 
qt-at-spi-0.3.1/debian/patches/timeout
--- qt-at-spi-0.3.1/debian/patches/timeout  1970-01-01 01:00:00.0 
+0100
+++ qt-at-spi-0.3.1/debian/patches/timeout  2015-01-29 02:54:16.0 
+0100
@@ -0,0 +1,30 @@
+--- a/src/dbusconnection.cpp
 b/src/dbusconnection.cpp
+@@ -83,7 +83,7 @@ QString DBusConnection::getAccessibility
+ QDBusMessage m = QDBusMessage::createMethodCall(org.a11y.Bus,
+ /org/a11y/bus,
+ org.a11y.Bus, 
GetAddress);
+-QDBusMessage reply = c.call(m);
++QDBusMessage reply = c.call(m, QDBus::Block, 1000);
+ if (reply.type() == QDBusMessage::ErrorMessage) {
+ qWarning()  Qt at-spi: error getting the accessibility dbus 
address:   reply.errorMessage();
+ return QString();
+--- a/src/atspiadaptor.cpp
 b/src/atspiadaptor.cpp
+@@ -770,7 +770,7 @@ void AtSpiAdaptor::updateEventListeners(
+ QDBusMessage m = QDBusMessage::createMethodCall(org.a11y.atspi.Registry,
+ 
/org/a11y/atspi/registry,
+ 
org.a11y.atspi.Registry, GetRegisteredEvents);
+-QDBusReplyQSpiEventListenerArray listenersReply = 
m_dbus-connection().call(m);
++QDBusReplyQSpiEventListenerArray listenersReply = 
m_dbus-connection().call(m, QDBus::Block, 1000);
+ if (listenersReply.isValid()) {
+ const QSpiEventListenerArray evList = listenersReply.value();
+ Q_FOREACH(const QSpiEventListener ev, evList) {
+@@ -1260,6 +1260,7 @@ void 

Bug#271397: FW: 1.5m CAD to you:Email(leonhirt...@outlook.com)for Info

2015-01-29 Thread Thomas, Charmaine, L




From: Thomas, Charmaine, L
Sent: Thursday, January 29, 2015 5:00 AM
To: Thomas, Charmaine, L
Subject: 1.5m CAD to you:Email(leonhirt...@outlook.com)for Info



The information contained in this email may be confidential and/or legally 
privileged. It has been sent for the sole use of the intended recipient(s). If 
the reader of this message is not an intended recipient, you are hereby 
notified that any unauthorized review, use, disclosure, dissemination, 
distribution, or copying of this communication, or any of its content, is 
strictly prohibited. If you have received this communication in error, please 
contact the sender by reply email and destroy all copies of the original 
message. Thank you.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776562: apt: Please document explicitly that apt-get --force-yes may allow unauthenticated packages to be installed

2015-01-29 Thread Axel Beckert
Package: apt
Version: 1.0.9.6
Severity: wishlist
Tags: security

Dear APT Developers,

apt-get(8) states:

   --force-yes
   Force yes; this is a dangerous option that will cause apt to
   continue without prompting if it is doing something
   potentially harmful. It should not be used except in very
   special situations. Using force-yes can potentially destroy
   your system! Configuration Item: APT::Get::force-yes.

Please mention explicitly that this may cause unauthenticated packages
to be installed.

Reasoning:

Many people seem to assume that the aforementioned words dangerous and
harmful imply broken stuff or inconsistencies, i.e. stuff doesn't work
anymore afterwards.

They don't expect or at least don't think of security-related issues
like e.g. a compromised system which you may not notice immediately.

Examples of bug reports caused due this assumption:

* https://github.com/grml/grml-debootstrap/issues/62 (grml-debootstrap;
  upstream bug report)

* https://bugs.debian.org/776487 (in xen-tools; initially reported
  upstream, bug exists since 2005)

-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (990, 'unstable'), (600, 'testing'), (500, 'buildd-unstable'), 
(400, 'stable'), (110, 'experimental'), (1, 'buildd-experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.18.0-trunk-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages apt depends on:
ii  debian-archive-keyring  2014.3
ii  gnupg   1.4.18-6
ii  libapt-pkg4.12  1.0.9.6
ii  libc6   2.19-13
ii  libgcc1 1:4.9.2-10
ii  libstdc++6  4.9.2-10

apt recommends no packages.

Versions of packages apt suggests:
ii  apt-doc 1.0.9.6
ii  aptitude0.6.11-1+b1
ii  dpkg-dev1.17.23
ii  python-apt  0.9.3.11
ii  wajig   2.17

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776528: BackendException: ssh connection to user@hostname:22 failed: No authentication methods available

2015-01-29 Thread Alexander Zangerl
tags 776528 + unreproducible moreinfo
severity 776528 normal
thanks

On Tue, 27 Jan 2015 15:10:34 +1300, Francois Marier writes:
After upgrading from duplicity 0.6.24-2 to 0.7.01-1, my backups to an ssh
host stopped working.

i can't reproduce that; i've just used 0.7.01 sftp and scp backups
without major problems, using sftp://me@somehost/location as well as
scp://me@somehost/location.

Now, if I try to run any of the duplicity commands, I get the following:

  BackendException: ssh connection to user@hostname:22 failed: No authenticatio
n methods available

looks like you need to set up ssh-agent and key auth, or 
use --ssh-askpass or provide the password to duplicity via FTP_PASSWORD.
i've tested all three options and they work fine.

it looks as if the strictness of the auth handling changed somewhere
between 0.6.24 and 0.7.01, but the changelog doesn't show anything pertinent.

i believe the old version fell back to interactive asking without insisting
on --ssh-askpass if no suitable ssh-agent was a/v.

regards
az


-- 
Alexander Zangerl + GPG Key 0xB963BD5F (or 0x42BD645D) + http://snafu.priv.at/
A decade ago, I observed that commercial certificate authorities protect
you from anyone from whom they are unwilling to take money. That turns out
to be wrong; they don't even do that much. -- Matt Blaze


signature.asc
Description: Digital Signature


Bug#776506: [git-buildpackage/experimental] buildpackage: Tag currently checked out head

2015-01-29 Thread Guido Günther
tag 776506 pending
thanks

Date:   Thu Jan 29 09:25:38 2015 +0100
Author: Guido Günther a...@sigxcpu.org
Commit ID: 229f259f8c205db5924eb3e276872ecc3d7eb370
Commit URL: 
https://honk.sigxcpu.org/gitweb/?p=git-buildpackage.git;a=commitdiff;h=229f259f8c205db5924eb3e276872ecc3d7eb370
Patch URL: 
https://honk.sigxcpu.org/gitweb/?p=git-buildpackage.git;a=commitdiff_plain;h=229f259f8c205db5924eb3e276872ecc3d7eb370

buildpackage: Tag currently checked out head

Tag the head checked out at command invocation. The build can
take some time and the repo might have changed underneath us.

Closes: #776506

A snapshot build including this change will be available at
http://honk.sigxcpu.org:8001/job/git-buildpackage/
  


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776562: apt: Please document explicitly that apt-get --force-yes may allow unauthenticated packages to be installed

2015-01-29 Thread Sebastian Pipping
On 01/29/2015 11:28 AM, Axel Beckert wrote:
 Please mention explicitly that this may cause unauthenticated packages
 to be installed.

+1


Sebastian


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776568: unblock: testng/6.8.8-4

2015-01-29 Thread Eugene Zhukov
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package testng

* Adds explicit build-dep on ant. (Closes: #771260)
* Adds back jquery-1.7.1.min.js. RC bug. (Closes: #776520)

debdiff:
File lists identical (after any substitutions)

Control files: lines which differ (wdiff format)

Installed-Size: [-894-] {+861+}
Version: [-6.8.8-4-] {+6.8.8-3+}

unblock testng/6.8.8-4

-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776564: Patched php5 does not emit error when timezone database is unavailable

2015-01-29 Thread Jorrit Schippers - nCode
Package: php5
Version: 5.6.5+dfsg-1
Severity: minor

I am reporting an issue with the Ubuntu version of this package deliberately
with Debian, because the issue lies with the Debian-maintained system
timezone database patch.

use_embedded_timezonedb.patch changes the behavior of the php5 package such
that it reads timezone information from /usr/share/zoneinfo. Among other
files, it reads /usr/share/zoneinfo/zone.tab. On a system I use, this file
was erroneously unavailable due to chroot and not mapping the file properly.
This caused various PHP functions to malfunction with no error or an error
that was hard to debug.

new DateTimeZone('UTC') : Exception: 'Unknown or bad timezone (UTC)'
timezone_identifiers_list() : empty result

The patch does not emit any warning when /usr/share/zoneinfo/zone.tab can't
be read. I suggest adding a warning or error using the regular PHP error
logging functions.

The relevant code of the patch:

+static struct location_info **create_location_table(void)
...
+fp = fopen(zone_tab, r);
+if (!fp) {
+return NULL;
+}

NULL is ignored silently in other parts of the code.

Kind regards,

Jorrit Schippers


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#775953: openntpd if-up.d hook can cause system boot to hang indefinitely

2015-01-29 Thread Dererk
|tags 775953 + unreproducible
severity 775953 important
thanks

Since I cant reproduce this on my side on a armv5 (which is not where
the bug has been originally filled though), I'm lowering the severity
since this appears to be a result of a possible very custom
configuration around bridge and openntpd itself.

(Further info is still pending on reporter side)



Cheers,

Dererk
|

-- 
BOFH excuse #223:
The lines are all busy (busied out, that is -- why let them in to begin with?).



signature.asc
Description: OpenPGP digital signature


Bug#775891: [Pkg-anonymity-tools] Bug#775891: torbrowser-launcher: Tor Project changed alpha/beta versioning, now tb-l always suggests downloading alphas/betas

2015-01-29 Thread Holger Levsen
control: reopen -1
control: forwarded -1 
https://github.com/micahflee/torbrowser-launcher/issues/169
control: found -1 0.1.9-1~experimental1
control: severity -1 serious
# justification: we don't want no alphas+betas

Hi,

seems this bug is back :(


cheers,
Holger



signature.asc
Description: This is a digitally signed message part.


Bug#776563: claws-mail: Content loss when printing mails with long lines

2015-01-29 Thread Manolo Díaz
Package: claws-mail
Version: 3.11.1-3
Severity: normal
Tags: upstream

Dear Maintainer,

When printing mails with long lines, part of its content is lost. Print
Preview works fine though. I think it's easier to understand the problem
with a picture, so there are images attached.

Version 3.11.1-65-gd8a6df from hydra.debian.net is also tested: the same
problem.

Best Regards,
Manolo Díaz


-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.18.4+ (SMP w/2 CPU cores)
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages claws-mail depends on:
ii  libarchive13 3.1.2-10
ii  libassuan0   2.1.2-2
ii  libatk1.0-0  2.14.0-1
ii  libc62.19-13
ii  libcairo21.14.0-2.1
ii  libcompfaceg11:1.5.2-5
ii  libdb5.3 5.3.28-7~deb8u1
ii  libdbus-1-3  1.8.12-3
ii  libdbus-glib-1-2 0.102-1
ii  libenchant1c2a   1.6.0-10.1
ii  libetpan17   1.5-2
ii  libfontconfig1   2.11.0-6.3
ii  libfreetype6 2.5.2-2
ii  libgdk-pixbuf2.0-0   2.31.1-2+b1
ii  libglib2.0-0 2.42.1-1
ii  libgnutls-deb0-283.3.8-5
ii  libgpg-error01.17-3
ii  libgpgme11   1.5.1-6
ii  libgtk2.0-0  2.24.25-1
ii  libice6  2:1.0.9-1+b1
ii  libldap-2.4-22.4.40-3
ii  liblockfile1 1.09-6
ii  libpango-1.0-0   1.36.8-3
ii  libpangocairo-1.0-0  1.36.8-3
ii  libpangoft2-1.0-01.36.8-3
ii  libpisock9   0.12.5-dfsg-1
ii  libsasl2-2   2.1.26.dfsg1-12
ii  libsm6   2:1.2.2-1+b1
ii  xdg-utils1.1.0~rc1+git20111210-7.3
ii  zlib1g   1:1.2.8.dfsg-2+b1

Versions of packages claws-mail recommends:
ii  aspell-en [aspell-dictionary]   
7.1-0-1.1
ii  aspell-es [aspell-dictionary]   1.11-9
ii  claws-mail-i18n 3.11.1-3
pn  xfonts-100dpi | xfonts-75dpi | xfonts-100dpi-transcoded | xfontsnone

Versions of packages claws-mail suggests:
pn  claws-mail-doc   none
pn  claws-mail-tools none
ii  iceweasel [www-browser]  31.4.0esr-1
ii  links [www-browser]  2.8-2+b3
ii  lynx-cur [www-browser]   2.8.9dev1-2+b1
ii  mousepad 0.3.0-2

-- no debconf information



Bug#504804: info

2015-01-29 Thread santiago
On Mon, Jan 26, 2015 at 03:28:02PM +0200, Henri Salo wrote:
 This was closed because of https://bugs.debian.org/504804#13
 
 
 It is about the inconsistence between
 
 --file=some_file
 and
 --file some_file
 
 THE EQUAL = sign.
 
 
 This is a different bug than =~ case.

I don't see why it's different than the original bug report. It is an
inconsistency issue between:

% echo a  ~/tmp-pattern
% echo hola | LANG=C grep --file=/home/santiago/tmp-pattern
hola
% echo hola | LANG=C grep --file /home/santiago/tmp-pattern
hola
% echo hola | LANG=C grep --file ~/tmp-pattern 
hola
% echo hola | LANG=C grep --file=~/tmp-pattern
grep: ~/tmp-pattern: No such file or directory
% echo hola | LANG=C grep --file=${HOME}/tmp-pattern 
hola


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776566: Please cater to serial consoles

2015-01-29 Thread Samuel Thibault
martin f krafft, le Thu 29 Jan 2015 11:52:36 +0100, a écrit :
   2. the boot: prompt appears on both, console and serial console,

Nack with my brltty maintainer hat: you don't want to send things on the
serial port without the user saying to do this. In the case of braille
devices, we have already seen some device being bricked by such behavior
because it unfortunately made the device enter a ROM-flash mode...

Samuel


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#775783: [Pkg-graphite-maint] Bug#775783: [graphite-web] Please prepare a candidate including maxDataPoints backport

2015-01-29 Thread Dererk
On 29/01/15 08:11, Jonas Genannt wrote:
 Hello,

 https://github.com/graphite-project/graphite-web/commit/5b1015df91b7740a96299594a3a1727238517c20#diff-e87e8c4fda2bf408f4864aad6741df42


 Do you mean, we should try to get this in Jessie?
 Yes indeed, the performance impact is hge! I strongly recommend it.
 I will test the patch and upload it if it works to unstable. So you can test 
 it also.

 After all worked, we can ask for a freeze exception.

   Jonas

Sounds good to me!

Do let me know as soon as you have something for me to test and I'll be
there!


Cheers,

Dererk

-- 
BOFH excuse #241:
_Rosin_ core solder? But...




signature.asc
Description: OpenPGP digital signature


Bug#644717: scans UNRELATED filesystems for DCIM directory

2015-01-29 Thread Salvatore Bonaccorso
Control: found -1 1.12.3-4

Hi all,

On Mon, Mar 10, 2014 at 11:56:13PM +, althaser wrote:
 Hey Eduard,
 
 Could you please still reproduce this issue with newer versions ?

It looks this is also present in gvfs-backends/1.12.3-4 in wheezy, not
checked newer versions.

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#750586: Problem continues to exist

2015-01-29 Thread martin f krafft
Unfortunately, ldlinux.c32 is still being sought and not found. Any
news?

-- 
 .''`.   martin f. krafft madduck@d.o @martinkrafft
: :'  :  proud Debian developer
`. `'`   http://people.debian.org/~madduck
  `-  Debian - when you have better things to do than fixing systems


digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)


Bug#776566: Please cater to serial consoles

2015-01-29 Thread martin f krafft
Package: di-netboot-assistant
Version: 0.38a
Severity: wishlist

There seems to be no way to elegantly handle serial console clients.
In the past, one already had to copy e.g.
daily/i386/pxelinux.cfg/default to the UUID-specific file of
a client, thereby hardcoding daily/i386 for this client and forgoing
the possibility of chosing via the menu. One also had to manually
add the serial and console parameters to this file, and change
the reference to menu.cfg to serial.cfg, which often also required
changes when e.g. ttyS1 was to be used, or vga=778 just did not
work.

Now it seems that serial.cfg is no longer provided at all.

It would be really great if di-netboot-install went one of the
following ways instead:

  1. a DHCP option flags a given client as having a serial console,
 causing the menu to be displayed on the specified serial
 console, as well as the kernel parameters set accordingly;

  2. the boot: prompt appears on both, console and serial console,
 and if enter is received on the serial console, then that's
 where stuff continues, else a normal install happens.

  3. displaying the menu on both consoles and letting the user
 select serial if appropriate.

Thanks for your consideration.

-- System Information:
Debian Release: 8.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_NZ, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages di-netboot-assistant depends on:
ii  curl  7.38.0-4
ii  wget  1.16-3

Versions of packages di-netboot-assistant recommends:
ii  atftpd  0.7.git20120829-1

Versions of packages di-netboot-assistant suggests:
pn  dhcp3-server | udhcpd | dnsmasq  none
pn  elilonone
ii  syslinux 3:6.03+dfsg-5
ii  vim-addon-manager0.5.3

-- Configuration Files:
/etc/di-netboot-assistant/di-netboot-assistant.conf changed:
TFTP_ROOT=/srv/tftp
MIRROR_REGEXPS=s=://ftp.debian.org/=://ftp.stw-bonn.de/=
s=://ftp.ubuntu.com/=://ftp.hawo.stw.uni-erlangen.de/=
umask 0002

/etc/di-netboot-assistant/di-sources.list changed:
stable  amd64   
http://ftp.debian.org/dists/stable/main/installer-amd64/current/images/ 
netboot/netboot.tar.gz
stable  i386
http://ftp.debian.org/dists/stable/main/installer-i386/current/images/  
netboot/netboot.tar.gz
stable  ia64
http://ftp.debian.org/dists/stable/main/installer-ia64/current/images/  
netboot/netboot.tar.gz
stable  sparc   
http://ftp.debian.org/dists/stable/main/installer-sparc/current/images/ 
netboot/boot.img
stable-gtk  amd64   
http://ftp.debian.org/dists/stable/main/installer-amd64/current/images/ 
netboot/gtk/netboot.tar.gz
stable-gtk  i386
http://ftp.debian.org/dists/stable/main/installer-i386/current/images/  
netboot/gtk/netboot.tar.gz
wheezy  amd64   
http://ftp.debian.org/dists/wheezy/main/installer-amd64/current/images/ 
netboot/netboot.tar.gz
wheezy  i386
http://ftp.debian.org/dists/wheezy/main/installer-i386/current/images/  
netboot/netboot.tar.gz
wheezy  ia64
http://ftp.debian.org/dists/wheezy/main/installer-ia64/current/images/  
netboot/netboot.tar.gz
wheezy  sparc   
http://ftp.debian.org/dists/wheezy/main/installer-sparc/current/images/ 
netboot/boot.img
wheezy-gtk  amd64   
http://ftp.debian.org/dists/wheezy/main/installer-amd64/current/images/ 
netboot/gtk/netboot.tar.gz
wheezy-gtk  i386
http://ftp.debian.org/dists/wheezy/main/installer-i386/current/images/  
netboot/gtk/netboot.tar.gz
oldstable   amd64   
http://ftp.debian.org/dists/oldstable/main/installer-amd64/current/images/  
netboot/netboot.tar.gz
oldstable   i386
http://ftp.debian.org/dists/oldstable/main/installer-i386/current/images/   
netboot/netboot.tar.gz
oldstable   ia64
http://ftp.debian.org/dists/oldstable/main/installer-ia64/current/images/   
netboot/netboot.tar.gz
oldstable   sparc   
http://ftp.debian.org/dists/oldstable/main/installer-sparc/current/images/  
netboot/boot.img
oldstable-gtk   amd64   
http://ftp.debian.org/dists/oldstable/main/installer-amd64/current/images/  
netboot/gtk/netboot.tar.gz
oldstable-gtk   i386
http://ftp.debian.org/dists/oldstable/main/installer-i386/current/images/   
netboot/gtk/netboot.tar.gz
squeeze amd64   
http://ftp.debian.org/dists/squeeze/main/installer-amd64/current/images/
netboot/netboot.tar.gz
squeeze i386
http://ftp.debian.org/dists/squeeze/main/installer-i386/current/images/ 
netboot/netboot.tar.gz
squeeze ia64
http://ftp.debian.org/dists/squeeze/main/installer-ia64/current/images/ 
netboot/netboot.tar.gz
squeeze sparc   
http://ftp.debian.org/dists/squeeze/main/installer-sparc/current/images/
netboot/boot.img
squeeze-gtk amd64   

Bug#775356: Please test

2015-01-29 Thread Axel Beckert
Hi Thomas,

Thomas Hood wrote:
 Axel, can you please install resolvconf 1.76.1 and check that it
 works properly?

Also works without issues. i.e. no syntax errors anymore. Thanks!

Regards, Axel
-- 
 ,''`.  |  Axel Beckert a...@debian.org, http://people.debian.org/~abe/
: :' :  |  Debian Developer, ftp.ch.debian.org Admin
`. `'   |  4096R: 2517 B724 C5F6 CA99 5329  6E61 2FF9 CD59 6126 16B5
  `-|  1024D: F067 EA27 26B9 C3FC 1486  202E C09E 1D89 9593 0EDE


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#775783: [Pkg-graphite-maint] Bug#775783: [graphite-web] Please prepare a candidate including maxDataPoints backport

2015-01-29 Thread Dererk
On 29/01/15 07:57, Jonas Genannt wrote:
 Hello,

 I would like to ask you for considering preparing a candidate that
 includes support for graphite-web maxDataPoints, which improves graphite
 and graphite-based dashboards (like grafana) drastically.

 Please see the official doc referring to it here
 http://grafana.org/docs/performance/
 that is a good idea. The newest version of Graphite has this included. But 
 there is a
 patch available for the older version:

 https://github.com/graphite-project/graphite-web/commit/5b1015df91b7740a96299594a3a1727238517c20#diff-e87e8c4fda2bf408f4864aad6741df42


 Do you mean, we should try to get this in Jessie?

 Greets,
   Jonas
Hi Jonas!
Thanks for getting back on this that quickly!

Yes indeed, the performance impact is hge! I strongly recommend it.


Thanks for all the work around graphite and keep the good work coming!



Cheers,

Dererk

-- 
BOFH excuse #15:
temporary routing anomaly




signature.asc
Description: OpenPGP digital signature


Bug#776131: gridengine: Should gridengine be removed from jessie?

2015-01-29 Thread Ondřej Surý
Hi Roland,

On Thu, Jan 29, 2015, at 13:39, Roland Fehrenbacher wrote:
 My offer to take over still stands. What needs to be done to keep it in
 jessie? Can we package Son of Grid Engine and still get it uploaded to
 jessie?

Nope, the only thing you can do is fix the RC bugs to keep the
gridengine in jessie.

So I guess it would be better to just remove it from jessie, do the work
on 8.x in unstable and use jessie-backports to provide the usable
current version to jessie users if there's a need for it.

Cheers,
-- 
Ondřej Surý ond...@sury.org
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776131: gridengine: Should gridengine be removed from jessie?

2015-01-29 Thread Roland Fehrenbacher
 Ondřej == Ondřej Surý ond...@sury.org writes:

Hi Ondřej, Salvatore, 

I haven't done anything yet since nobody answered to my requests on
alioth and I've been busy since.

Ondřej Hi Salvatore, given this thread:

Ondřej 
http://lists.alioth.debian.org/pipermail/pkg-gridengine-devel/2014-October/thread.html

Ondřej and no response here:

Ondřej https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703256

Ondřej I would suggest that gridengine should be removed from
Ondřej Debian and reintroduced when there's somebody who will
Ondřej activelly maintain it. Ccing the folks who expressed
Ondřej interest in taking over and logol package that would be
Ondřej affected by the removal.

My offer to take over still stands. What needs to be done to keep it in
jessie? Can we package Son of Grid Engine and still get it uploaded to
jessie?

Cheers,

Roland

---
http://www.q-leap.com / http://qlustar.com
  --- HPC / Storage / Cloud Linux Cluster OS ---


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776581: please update cppcheck to 1.68

2015-01-29 Thread Vlad Orlov
Package: cppcheck
Version: 1.67-1
Severity: wishlist


Hi,

A new version of cppcheck is available upstream. Can you please package it?

Changelog: http://sourceforge.net/p/cppcheck/news/2015/01/cppcheck-168/

Bug#776582: makedumpfile: Handling of panic_on_oops definition is incorrect

2015-01-29 Thread Louis Bouchard
Package: makedumpfile
Version: 1:1.5.7-4
Severity: normal

Dear Maintainer,

The handling of the definition of kernel.panic_on_oops is incorrect.

sysctl -a returns all definitions and disregard the value of KDUMP_SYSCTL
so the test is invariably true no matter what the definition of
kernel.panic_on_oops is.


-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages makedumpfile depends on:
ii  libbz2-1.0  1.0.6-5
ii  libc6   2.19-1
ii  libdw1  0.159-4.1
ii  libelf1 0.159-4.1
ii  perl5.18.2-4
ii  zlib1g  1:1.2.8.dfsg-1

Versions of packages makedumpfile recommends:
ii  crash7.0.8-1
ii  kexec-tools  1:2.0.7-5

makedumpfile suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776583: libparanamer-java: Missing parent POM

2015-01-29 Thread Emmanuel Bourg
Package: libparanamer-java
Version: 2.7-1
Severity: grave
Justification: renders package unusable

libparanamer-java doesn't contain the parent POM 
(com.thoughtworks.paranamer:paranamer-parent)
which is referenced in the paranamer's POM. This breaks any Maven build 
depending on paranamer.
For example when packaging Apache Avro I got this error:

  [INFO] 

  [ERROR] BUILD ERROR
  [INFO] 

  [INFO] Error building POM (may not be this project's POM).
  
  
  Project ID: com.thoughtworks.paranamer:paranamer:bundle:debian
  
  Reason: Cannot find parent: com.thoughtworks.paranamer:paranamer-parent for 
project: com.thoughtworks.paranamer:paranamer:bundle:debian for project 
com.thoughtworks.paranamer:paranamer:bundle:debian

The paranamer-parent POM should either be included in the package, or the 
--no-parent
flag should be added to the maven-repo-helper settings to remove the reference 
to the
parent POM.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776569: ITP: libproc-queue-perl -- Perl module to limit the number of child processes

2015-01-29 Thread Alexander Zangerl
Package: wnpp
Severity: wishlist
Owner: Alexander Zangerl a...@debian.org

* Package name: libproc-queue-perl
  Version : 1.23
  Upstream Author : Salvador Fandiño sfand...@yahoo.com
* URL : http://search.cpan.org/dist/Proc-Queue/
* License : Artistic
  Programming Lang: Pure Perl
  Description : Perl module to limit the number of child processes

 Proc::Queue lets you parallelise a perl program using the fork, exit, wait
 and waitpid calls as usual but without taking care of creating too many
 processes and overloading the machine.
 .
 It redefines perl fork, exit, wait and waitpid core functions. Old programs
 do not need to be reprogrammed, only the use Proc::Queue ... sentence has to
 be added to them.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776570: ITP: libstatistics-lite-perl -- Perl module for simple statistical analysis

2015-01-29 Thread Alexander Zangerl
Package: wnpp
Severity: wishlist
Owner: Alexander Zangerl a...@debian.org

* Package name: libstatistics-lite-perl
  Version : 3.2
  Upstream Author : Brian Lalonde br...@webcoder.info
* URL : http://search.cpan.org/dist/Statistics-Lite/
* License : Artistic
  Programming Lang: Pure Perl
  Description : Perl module for simple statistical analysis

 Statistics::Lite is a lightweight, functional alternative to larger, more
 complete, object-oriented statistics packages. As such, it is likely to be
 better suited, in general, to smaller data sets.
 .
 When you just want something to give some very basic, high-school-level
 statistical values, without having to set up and populate an object first,
 this module may be useful.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#775783: [Pkg-graphite-maint] Bug#775783: [graphite-web] Please prepare a candidate including maxDataPoints backport

2015-01-29 Thread Jonas Genannt
Hello,

 Do let me know as soon as you have something for me to test and I'll be
 there!


I have uploaded 0.9.12+debian-7 to unstable with the patched included. It 
worked for me.

Could you please test it also?


debdiff graphite-web_0.9.12+debian-6_all.deb 
graphite-web_0.9.12+debian-7_all.deb

File lists identical (after any substitutions)

Control files: lines which differ (wdiff format)

Installed-Size: [-8384-] {+8385+}
Version: [-0.9.12+debian-6-] {+0.9.12+debian-7+}


Attached the debdiff source patch.

Greets,
Jonas
diff -Nru graphite-web-0.9.12+debian/debian/changelog graphite-web-0.9.12+debian/debian/changelog
--- graphite-web-0.9.12+debian/debian/changelog	2014-09-03 19:47:00.0 +0200
+++ graphite-web-0.9.12+debian/debian/changelog	2015-01-29 12:37:32.0 +0100
@@ -1,3 +1,10 @@
+graphite-web (0.9.12+debian-7) unstable; urgency=low
+
+  * added patch for maxDataPoints
+huge performance impact for dashboards like grafana (Closes: #775783)
+
+ -- Jonas Genannt jonas.gena...@capi2name.de  Thu, 29 Jan 2015 12:36:30 +0100
+
 graphite-web (0.9.12+debian-6) unstable; urgency=medium
 
   [ Vincent Bernat ]
diff -Nru graphite-web-0.9.12+debian/debian/patches/add_maximum_returned_datapoints.patch graphite-web-0.9.12+debian/debian/patches/add_maximum_returned_datapoints.patch
--- graphite-web-0.9.12+debian/debian/patches/add_maximum_returned_datapoints.patch	1970-01-01 01:00:00.0 +0100
+++ graphite-web-0.9.12+debian/debian/patches/add_maximum_returned_datapoints.patch	2015-01-29 12:37:32.0 +0100
@@ -0,0 +1,71 @@
+From 5b1015df91b7740a96299594a3a1727238517c20 Mon Sep 17 00:00:00 2001
+Author: Philip Hoy, gingerlime
+Date: Sun, 19 May 2013 10:56:28 +0200
+Description: Added ability to set maximum returned datapoints for json requests
+ This is a backport for the 0.9.x branch of Graphite.
+ This patch is a huge performance impact for dashboards like grafana.
+
+---
+ webapp/graphite/render/views.py | 35 +++
+ 1 file changed, 31 insertions(+), 4 deletions(-)
+
+diff --git a/webapp/graphite/render/views.py b/webapp/graphite/render/views.py
+index 34b2710..813d002 100644
+--- a/webapp/graphite/render/views.py
 b/webapp/graphite/render/views.py
+@@ -12,6 +12,7 @@
+ See the License for the specific language governing permissions and
+ limitations under the License.
+ import csv
++import math
+ from datetime import datetime
+ from time import time
+ from random import shuffle
+@@ -128,10 +129,34 @@ def renderView(request):
+ 
+ if format == 'json':
+   series_data = []
+-  for series in data:
+-timestamps = range(series.start, series.end, series.step)
+-datapoints = zip(series, timestamps)
+-series_data.append( dict(target=series.name, datapoints=datapoints) )
++  if 'maxDataPoints' in requestOptions and any(data):
++startTime = min([series.start for series in data])
++endTime = max([series.end for series in data])
++timeRange = endTime - startTime
++maxDataPoints = requestOptions['maxDataPoints']
++for series in data:
++  numberOfDataPoints = timeRange/series.step
++  if maxDataPoints  numberOfDataPoints:
++valuesPerPoint = math.ceil(float(numberOfDataPoints) / float(maxDataPoints))
++secondsPerPoint = int(valuesPerPoint * series.step)
++# Nudge start over a little bit so that the consolidation bands align with each call
++# removing 'jitter' seen when refreshing.
++nudge = secondsPerPoint + (series.start % series.step) - (series.start % secondsPerPoint)
++series.start = series.start + nudge
++valuesToLose = int(nudge/series.step)
++for r in range(1, valuesToLose):
++  del series[0]
++series.consolidate(valuesPerPoint)
++timestamps = range(series.start, series.end, secondsPerPoint)
++  else:
++timestamps = range(series.start, series.end, series.step)
++  datapoints = zip(series, timestamps)
++  series_data.append(dict(target=series.name, datapoints=datapoints))
++  else:
++for series in data:
++  timestamps = range(series.start, series.end, series.step)
++  datapoints = zip(series, timestamps)
++  series_data.append( dict(target=series.name, datapoints=datapoints) )
+ 
+   if 'jsonp' in requestOptions:
+ response = HttpResponse(
+@@ -230,6 +255,8 @@ def parseOptions(request):
+   requestOptions['jsonp'] = queryParams['jsonp']
+   if 'noCache' in queryParams:
+ requestOptions['noCache'] = True
++  if 'maxDataPoints' in queryParams and queryParams['maxDataPoints'].isdigit():
++requestOptions['maxDataPoints'] = int(queryParams['maxDataPoints'])
+ 
+   requestOptions['localOnly'] = queryParams.get('local') == '1'
+ 
diff -Nru graphite-web-0.9.12+debian/debian/patches/series 

Bug#774769: [lftp] saves unknown host's fingerprint in known_hosts without any prompt

2015-01-29 Thread Noël Köthe
Hello Moritz,

Am Montag, den 26.01.2015, 13:13 +0100 schrieb Moritz Mühlenhoff:

  Thanks for your report. I agree the user should be asked and forwarded
  your report to the upstream issue tracker.
 
 Since this has been fixed upstream, could you pick the fix for
 jessie?

I will work on a jessie update tomorrow.

Regards

Noël


signature.asc
Description: This is a digitally signed message part


Bug#776131: gridengine: Should gridengine be removed from jessie?

2015-01-29 Thread Ondřej Surý
Hi Salvatore,

given this thread:

http://lists.alioth.debian.org/pipermail/pkg-gridengine-devel/2014-October/thread.html

and no response here:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703256

I would suggest that gridengine should be removed from Debian and
reintroduced when there's somebody who will activelly maintain it. Ccing
the folks who expressed interest in taking over and logol package that
would be affected by the removal.

If you agree I suggest to reassign this to ftp-master as RoQA.

Cheers,
-- 
Ondřej Surý ond...@sury.org
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776139: mailbox annotations loss when moving mailbox

2015-01-29 Thread Ondřej Surý
Hi Daniel,

could you please report this bug to the upstream bugzilla? This needs to
be fixed upstream and not just in Debian package. I will then pull the
patch from upstream.

Cheers,
Ondrej

On Sat, Jan 24, 2015, at 12:58, GALAMBOS Daniel wrote:
 Package: cyrus-imapd-2.4
 
 Cyrus imapd loses annotations like expiration data, if the given mailbox
 moved to another partition.
 Moving and renaming mailbox uses the same command, if no moving just
 renaming happens, the annotations are kept.
 
 Transcription from cyradm is attached.   Annotations are stored by cyrus
 in a server-global database, when renaming happens, it needed to rename
 the keys of it.
 In imap/imapd.c:5708 the renaming function called unconditionally
 regardless of the name changed or not, but probably renaming to the same
 name should not delete it.
 
 The annotate.c and the relevant part of imapd.c haven't changed between
 2.4.16-4+deb7u2 and 2.4.17+caldav~beta10-16, so probably jessie also
 affected
 
 --
 Daniel Galambos / Dancsa
 ___
 Pkg-Cyrus-imapd-Debian-devel mailing list
 pkg-cyrus-imapd-debian-de...@lists.alioth.debian.org
 http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-cyrus-imapd-debian-devel
 Email had 1 attachment:
 + cyradm.txt
   2k (text/plain)


-- 
Ondřej Surý ond...@sury.org
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776566: Please cater to serial consoles

2015-01-29 Thread Michael Tokarev
29.01.2015 15:12, Samuel Thibault wrote:
 martin f krafft, le Thu 29 Jan 2015 11:52:36 +0100, a écrit :
   2. the boot: prompt appears on both, console and serial console,
 
 Nack with my brltty maintainer hat: you don't want to send things on the
 serial port without the user saying to do this. In the case of braille
 devices, we have already seen some device being bricked by such behavior
 because it unfortunately made the device enter a ROM-flash mode...

Some serial-connected models of Powercom UPSes will turn off power after
seeing this sequence... ;)  I don't remember which code it is exactly,
but it is a single char from lowercase latin letters.

Thanks,

/mjt


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776572: fail2ban: $named missing as dependency in init script

2015-01-29 Thread Jochen Fahrner
Package: fail2ban
Version: 0.8.6-3wheezy3
Severity: important

Dear Maintainer,
the init script for fail2ban is missing $named as dependency.
So it's getting started before named is running, and the initial processing
of log files fails on all lines with a hostname.

So you should change

# Required-Start:$local_fs $remote_fs $named
# Required-Stop: $local_fs $remote_fs $named

For completeness you should als add ufw to Sholud-Start and Should-Stop.

-- System Information:
Debian Release: 7.8
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages fail2ban depends on:
ii  lsb-base4.1+Debian8+deb7u1
ii  python  2.7.3-4+deb7u1
ii  python-central  0.6.17

Versions of packages fail2ban recommends:
ii  iptables  1.4.14-3.1
ii  python-gamin  0.1.10-4.1
ii  whois 5.1.1~deb7u1

Versions of packages fail2ban suggests:
ii  heirloom-mailx [mailx]  12.5-2+deb7u1

-- Configuration Files:
/etc/fail2ban/jail.conf changed [not included]
/etc/init.d/fail2ban changed [not included]

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776551: please deprecate usage of --compare-versions with and explain why

2015-01-29 Thread Tomas Pospisek

Hi Guillem

On Thu, 29 Jan 2015, Guillem Jover wrote:


On Thu, 2015-01-29 at 09:42:11 +0100, Tomas Pospisek wrote:

Package: dpkg
Version: 1.17.23
Severity: wishlist
Tags: patch



I've expanded the dpkg man page section on --compare-versions as
follows:

  --compare-versions ver1 op ver2
  ...
  ... These are provided only for compatibility with control file syntax:
= = =  , are deprecated and should not be used, due to
  confusing semantics.  To illustrate: 0.1  0.1 evaluates as true.



I've spend an hour or two before figuring out, that it was the weird '' ''
semantics that is broken. So I'd be glad if you could include more
explicit documentation of the problem and spare others wasting their time
debuging the fallout of these particular semantics.


Right, I'm marking '' and '' as deprecated there, and making the code
issue a warning in the same way the control file parser is doing.

I don't think the rest of the operators deserve to be deprecated
though.


What about:

  These are provided only for compatibility with control file syntax:
= = =  . The operators '' and '' are deprecated and should
  not be used, due to confusing semantics.  To illustrate: 0.1  0.1
  evaluates as true.

I've updated my git accordingly in case you want to pull from it [1].
*t

[1] git://git.debian.org/users/tpo/dpkg.git


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776573: Correct seriuos - serious typo in manpage

2015-01-29 Thread Chris Lamb
Package: polygen
Version: 1.0.6.ds2-13
Severity: wishlist
Tags: patch

The attached patch corrects a seriuos - serious typo in the
manpage.


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-
diff --git a/debian/man.grm b/debian/man.grm
index e54770f..2e909e4 100644
--- a/debian/man.grm
+++ b/debian/man.grm
@@ -55,7 +55,7 @@ Description ::=   ShortDesc \n.PP\n
^ \n.PP\n
^ Here a source program is a grammar definition, the execution 
consists in the exploration of such grammar by selecting a random path and the 
result is the sentence built on the way.
^ \n.PP\n
-   ^ Though PolyGen is quite a seriuos piece of software then, 
what else would be more noble for it than being used as a parody tool for 
linguistical habits, stereotypes and trends of this foolish era?
+   ^ Though PolyGen is quite a serious piece of software then, 
what else would be more noble for it than being used as a parody tool for 
linguistical habits, stereotypes and trends of this foolish era?
^ \n.PP\n
^ Principles of parody are focusing a ridiculous topic and 
eventually abstracting its rules and schemes (here in terms of a grammar 
definition) by which reproducing it through the variatio device.
^ \n.PP\n
diff --git a/grm/eng/man.grm b/grm/eng/man.grm
index c666d66..9c7f08f 100644
--- a/grm/eng/man.grm
+++ b/grm/eng/man.grm
@@ -52,7 +52,7 @@ Description ::=   ShortDesc \n.PP\n
^ \n.PP\n
^ Here a source program is a grammar definition, the execution 
consists in the exploration of such grammar by selecting a random path and the 
result is the sentence built on the way.
^ \n.PP\n
-   ^ Though PolyGen is quite a seriuos piece of software then, 
what else would be more noble for it than being used as a parody tool for 
linguistical habits, stereotypes and trends of this foolish era?
+   ^ Though PolyGen is quite a serious piece of software then, 
what else would be more noble for it than being used as a parody tool for 
linguistical habits, stereotypes and trends of this foolish era?
^ \n.PP\n
^ Principles of parody are focusing a ridiculous topic and 
eventually abstracting its rules and schemes (here in terms of a grammar 
definition) by which reproducing it through the variatio device.
^ \n.PP\n
diff --git a/grm/ita/man.grm b/grm/ita/man.grm
index 445981d..6c2ee21 100644
--- a/grm/ita/man.grm
+++ b/grm/ita/man.grm
@@ -52,7 +52,7 @@ Description ::=   ShortDesc \n.PP\n
^ \n.PP\n
^ Here a source program is a grammar definition, the execution 
consists in the exploration of such grammar by selecting a random path and the 
result is the sentence built on the way.
^ \n.PP\n
-   ^ Though PolyGen is quite a seriuos piece of software then, 
what else would be more noble for it than being used as a parody tool for 
linguistical habits, stereotypes and trends of this foolish era?
+   ^ Though PolyGen is quite a serious piece of software then, 
what else would be more noble for it than being used as a parody tool for 
linguistical habits, stereotypes and trends of this foolish era?
^ \n.PP\n
^ Principles of parody are focusing a ridiculous topic and 
eventually abstracting its rules and schemes (here in terms of a grammar 
definition) by which reproducing it through the variatio device.
^ \n.PP\n


Bug#775687: libmspack: CHM decompression: another pointer arithmetic overflow

2015-01-29 Thread Sebastian Andrzej Siewior
0.5alpha has been just released [0] with this issue fixed. If you
package that one you get rid of all currently known bugs :)

[0] http://www.cabextract.org.uk/libmspack/libmspack-0.5alpha.tar.gz

Sebastian


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776571: RFS: svg.path/2.0~b1-1 -- [ITP] Python modules providing SVG objects

2015-01-29 Thread Daniel Stender
Package: sponsorship-requests
Severity: wishlist

Hello,

I am looking for a sponsor for my package of svg.path:

* Package name: svg.path
  Version : 2.0b1
  Upstream Author : Lennart Regebro rege...@gmail.com
* URL : https://github.com/regebro/svg.path
* License : CC0-1.0
  Programming Lang: Python
  Description : Python library providing SVG path objects and parser

It builds those binary packages:
python-svg.path - SVG path objects and parser for Python
python3-svg.path - SVG path objects and parser for Python3

Description: SVG path objects and parser for Python
 In SVG (Scalable Vector Graphics), paths are used to draw simple or
 compounded shape outlines. svg.path is a collection of objects
 that implement the path commands in SVG (Line, Arc, QuadraticBezier,
 CubicBezier), and a parser for SVG path definitions.

Buildlog:
http://www.danielstender.com/buildlogs/svg.path_2.0~b1-1_amd64-20150129-1319.build

For a member of this group, I've already put it under the care
of the DPMT:
http://anonscm.debian.org/viewvc/python-modules/packages/svg.path/trunk/

And uploaded it to Mentors:
http://mentors.debian.net/package/svg.path
dget -x
http://mentors.debian.net/debian/pool/main/s/svg.path/svg.path_2.0~b1-1.dsc

Thank you very much for considering,
Daniel Stender

-- 
http://qa.debian.org/developer.php?login=debian%40danielstender.com
4096R/DF5182C8
46CB1CA89EA3B74376761DB915E09AF4DF5182C8


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776557: debian-policy: Please clarify 2.5 'unix heritage = important'

2015-01-29 Thread Charles Plessy
Le Thu, Jan 29, 2015 at 09:06:15AM +, Martin Zobel-Helas a écrit :
 
 the following sentence in 2.5 leave much room for maneuver, therefor i
 would like to see a clarification how it should be interpreted:
 
 | Important programs, including those which one would expect to find on
 | any Unix-like system. If the expectation is that an experienced Unix
 | person who found it missing would say What on earth is going on, where
 | is foo?, it must be an important package.
 
 Background here is, that i moved the package ed to optional years ago,
 and now have bug #776413 open, which disagrees on that move. I would
 like to keep ed in optional, but also see the arguments the submitter
 gave here. 

Hi Martin,

I fully agree.

Given that Debian is 20 years old, we can not expect people to have the same
opinion on What on earth is going on, where is foo? means.  On my side, I
thought that killall or less would be what-on-earth programs, but this is
not the case.  My first reaction was to argue they should be present by default
on minimal systems, but my current opinion would be to rather keep minimal
systems as lean as possible and rely on tasks for adding groups of packages.

Regarding the Policy, we need to either find a different principle for defining
the Important priority, or transfer the responsibility for choices to a
do-o-cratic group of persons, like people making minimal images, maintaining
debootstrap, etc.  (and by default, the package maintainer of course)

Have a nice day,

-- 
Charles Plessy
Debian Med packaging team,
http://www.debian.org/devel/debian-med
Tsurumi, Kanagawa, Japan


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776572: fail2ban: $named missing as dependency in init script

2015-01-29 Thread Yaroslav Halchenko
Thanks Jochen,

Added at least upstream for now

$ git show
commit c96415da2790e03ed8ab9b0f7c38dbc7a5da359e
Author: Yaroslav Halchenko deb...@onerussian.com
Date:   Thu Jan 29 08:32:20 2015 -0500

added $named and ufw to debian-initd (Debian bug #776572)

diff --git a/files/debian-initd b/files/debian-initd
index d9bb3f5..0d2bed9 100755
--- a/files/debian-initd
+++ b/files/debian-initd
@@ -3,8 +3,8 @@
 # Provides:  fail2ban
 # Required-Start:$local_fs $remote_fs
 # Required-Stop: $local_fs $remote_fs
-# Should-Start:  $time $network $syslog iptables firehol shorewall ipmasq 
arno-iptables-firewall iptables-persistent ferm
-# Should-Stop:   $network $syslog iptables firehol shorewall ipmasq 
arno-iptables-firewall iptables-persistent ferm
+# Should-Start:  $time $network $syslog $named iptables firehol shorewall 
ipmasq arno-iptables-firewall iptables-persistent ferm ufw
+# Should-Stop:   $network $syslog $named iptables firehol shorewall ipmasq 
arno-iptables-firewall iptables-persistent ferm ufw
 # Default-Start: 2 3 4 5
 # Default-Stop:  0 1 6
 # Short-Description: Start/stop fail2ban


-- 
Yaroslav O. Halchenko, Ph.D.
http://neuro.debian.net http://www.pymvpa.org http://www.fail2ban.org
Research Scientist,Psychological and Brain Sciences Dept.
Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755
Phone: +1 (603) 646-9834   Fax: +1 (603) 646-1419
WWW:   http://www.linkedin.com/in/yarik


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776551: please deprecate usage of --compare-versions with and explain why

2015-01-29 Thread Guillem Jover
Hi!

On Thu, 2015-01-29 at 09:42:11 +0100, Tomas Pospisek wrote:
 Package: dpkg
 Version: 1.17.23
 Severity: wishlist
 Tags: patch

 I've expanded the dpkg man page section on --compare-versions as
 follows:
 
   --compare-versions ver1 op ver2
   ...
   ... These are provided only for compatibility with control file syntax:
 = = =  , are deprecated and should not be used, due to
   confusing semantics.  To illustrate: 0.1  0.1 evaluates as true.

 I've spend an hour or two before figuring out, that it was the weird '' ''
 semantics that is broken. So I'd be glad if you could include more
 explicit documentation of the problem and spare others wasting their time
 debuging the fallout of these particular semantics.

Right, I'm marking '' and '' as deprecated there, and making the code
issue a warning in the same way the control file parser is doing.

I don't think the rest of the operators deserve to be deprecated
though.

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#776229: [Pkg-auth-maintainers] Bug#776229: Bug#776229: libpam-yubico: Provide visual feedback that button is pressed

2015-01-29 Thread Simon Josefsson
Thijs Kinkhorst th...@debian.org writes:

 On Mon, January 26, 2015 00:16, Simon Josefsson wrote:
 Thijs Kinkhorst th...@debian.org writes:

 Hi,

 When authentication via yubikey is triggered, the module prompts:

   YubiKey for `username':

 However, there's no visual feedback that characters are being input when
 you press the button on the yubikey, so as a user you're unsure if
 anything
 is happening (and this may take half a second or more). Especially with
 the Nano which has no physical feedback when touching it.

 It would be nice if the prompt would change when the first character of
 input was received.

 Hi.  Is this even possible to achieve from libpam-yubico?  The module
 doesn't know that it is used with a terminal, it might be called from a
 GNOME Screensaver, non-interactive SSH server, or whatever.  The
 application is responsible for these user interaction settings.

 Have you seen any other PAM module behave in a way that we could mimic?
 Then we can look at the code of that and see if that is applicable to
 our module.

 I'm not very much into PAM internals so it didn't occur to me that this
 may be problematic. I decuded from the Yubikey for text that the module
 had influence over the prompt. If this is not feasible then please close
 this request.

We control the text, but not the particular prompting (that's done by
the application that is using the PAM framework, which can be GUI or
text or a network server etc) -- however it may be possible to do
something better here, I don't know.  I see no problem keeping this open
until someone has time to dig into the details and tell us something
conclusive.

/Simon


signature.asc
Description: PGP signature


Bug#776574: makedumpfile: Please enable firmware assisted dump

2015-01-29 Thread Louis Bouchard
Package: makedumpfile
Version: 1:1.5.7-4
Severity: normal

Dear Maintainer,

Starting from POWER6, the firmware now has a capability to preserve the
partition memory dump during system crash and boot into a fresh copy of the
kernel with fully-reset system. This feature adds the necessary support to
exploit the dump capture capability provided by Power firmware. With this
feature support, the production kernel will register for firmware-assisted dump
using RTAS (Runtime Abstraction Service) calls and builds required ELF header
which then gets exported through '/proc/vmcore' in the second kernel after
crash. This feature improves Power serviceability by making it more robust
compared to current kdump mechanism on Linux

The proposed patch from Ubuntu enable the capture of firmware assisted dumps


-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages makedumpfile depends on:
ii  libbz2-1.0  1.0.6-5
ii  libc6   2.19-1
ii  libdw1  0.159-4.1
ii  libelf1 0.159-4.1
ii  perl5.18.2-4
ii  zlib1g  1:1.2.8.dfsg-1

Versions of packages makedumpfile recommends:
ii  crash7.0.8-1
ii  kexec-tools  1:2.0.7-5

makedumpfile suggests no packages.

-- no debconf information
diff -Nru makedumpfile-1.5.7/debian/changelog makedumpfile-1.5.7/debian/changelog
--- makedumpfile-1.5.7/debian/changelog	2014-12-05 03:12:02.0 -0600
+++ makedumpfile-1.5.7/debian/changelog	2015-01-28 21:02:52.0 -0600
@@ -1,3 +1,10 @@
+makedumpfile (1:1.5.7-4ubuntu1) vivid; urgency=medium
+
+  [ Hari Bathini hbath...@linux.vnet.ibm.com ]
+  * Add powerpc firmware-assisted dump (fadump) for kdump-config
+
+ -- Chris J Arges chris.j.ar...@ubuntu.com  Wed, 28 Jan 2015 21:00:17 -0600
+
 makedumpfile (1:1.5.7-4) experimental; urgency=medium
 
   * Enable kdump-tools to work as a systemd service
diff -Nru makedumpfile-1.5.7/debian/kdump-config makedumpfile-1.5.7/debian/kdump-config
--- makedumpfile-1.5.7/debian/kdump-config	2014-12-05 05:17:00.0 -0600
+++ makedumpfile-1.5.7/debian/kdump-config	2015-01-28 21:04:38.0 -0600
@@ -55,8 +55,19 @@
 # Constants
 vmcore_file=/proc/vmcore
 sys_kexec_crash=/sys/kernel/kexec_crash_loaded
+sys_fadump_enabled=/sys/kernel/fadump_enabled
+sys_fadump_registered=/sys/kernel/fadump_registered
 kexec_cmd_file=$KDUMP_COREDIR/kexec_cmd
 
+# DUMP_MODE = kdump/fadump
+# The default dump mode is kdump.
+DUMP_MODE=kdump
+
+# If /sys/kernel/fadump_enabled is set to `1`, use fadump as dump mechanism
+if [ -e $sys_fadump_enabled ]  [ `cat $sys_fadump_enabled` -eq 1 ]; then
+	DUMP_MODE=fadump
+fi
+
 # Utility Functions
 #
 function kdump_help()
@@ -65,14 +76,19 @@
 Usage:
 kdump-config {help|test|show|status|load|unload|savecore|propagate}
   help  - print this page
-  test  - Do a dry-run of the load command.  Show the kernels and
-  parameters that will be used and echo the kexec command.
-  The kexec command will not be executed.
-  show  - Show kdump status, kexec command, and any current parameters.
-  status- evaluate /sys/kernel/kexec_crash_loaded and print a message
+  test  - Do a dry-run of kdump kernel load command by showing
+  the kernels and parameters that will be used and echo'ing
+  the kexec command. The kexec command will not be executed.
+  If using fadump, check if required sysfs directories exist.
+  show  - Show dump mode, status, any current parameters.
+  Show kexec command for kdump.
+  status- evaluate /sys/kernel/{kexec_crash_loaded,fadump_registered}
+  depending on dump mode. Print appropriate message
   load  - Locate the kdump kernel, debug kernel, and establish links for
   makedumpfile.  Then load the kdump kernel using kexec
+  If using fadump, register.
   unload- unload the kdump kernel using kexec
+  If using fadump, unregister.
   savecore  - use previously made links to save /proc/vmcore
   propagate - Send public ssh key to remote host for passwordless connection
 
@@ -81,10 +97,13 @@
 
 function kdump_show()
 {
+	echo DUMP_MODE:$DUMP_MODE
 	echo USE_KDUMP:$USE_KDUMP
 	echo KDUMP_SYSCTL: $KDUMP_SYSCTL
 	echo KDUMP_COREDIR:$KDUMP_COREDIR
-	echo crashkernel addr: $IOMEM_ADDR
+	if [ $DUMP_MODE == kdump ]; then
+		echo crashkernel addr: $IOMEM_ADDR
+	fi
 
 	if [ -n $SSH ];then
 		echo SSH:  $SSH
@@ -100,6 +119,16 @@
 		echo HOSTTAG:  $HOSTTAG
 	fi
 
+	if [ $DUMP_MODE == fadump ]; then
+		if [ -e $sys_fadump_registered ] 
+			[ `cat $sys_fadump_registered` -eq 1 ] ; then
+			echo current state:ready to fadump;
+		else
+			echo current state:Not ready to fadump;
+		fi
+		return 

Bug#776576: polygen: please make the build reproducible

2015-01-29 Thread Chris Lamb
Source: polygen
Version: 1.0.6.ds2-13
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org

Hi,

While working on the reproducible builds effort [1], we have noticed
that polygen could not be built reproducibly.

The attached patch removes randomness from the build system. Once
applied, polygen can be built reproducibly in our current experimental
framework.

(The manpages, etc. are still random, but seeded from the latest
debian/changelog entry.)


 [1]: https://wiki.debian.org/ReproducibleBuilds


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-
diff -urNad polygen.orig/polygen-1.0.6.ds2/debian/rules 
polygen/polygen-1.0.6.ds2/debian/rules
--- polygen.orig/polygen-1.0.6.ds2/debian/rules 2015-01-29 12:23:55.134601132 
+
+++ polygen/polygen-1.0.6.ds2/debian/rules  2015-01-29 13:22:28.293057129 
+
@@ -6,7 +6,9 @@
 
 POLYGEN_BASE=.
 DEB_BUILDDIR=$(POLYGEN_BASE)/src
-POLYGEN=$(DEB_BUILDDIR)/polygen
+POLYGEN_BIN=$(DEB_BUILDDIR)/polygen
+POLYGEN_SEED = $(shell date --date=$(shell dpkg-parsechangelog --show-field 
Date) +%s)
+POLYGEN=$(POLYGEN_BIN) -seed $(POLYGEN_SEED)
 export POLYGEN
 
 # set $(NATIVE) to true if this arch has an optimising compiler
@@ -44,7 +46,7 @@
find $(POLYGEN_BASE)/grm/ -name \*.grm | 
debian/make_polygen-data_manpage  polygen-data.6
 
 install/polygen::
-   install -o root -g root -m 755 $(POLYGEN) 
debian/$(cdbs_curpkg)/usr/games/
+   install -o root -g root -m 755 $(POLYGEN_BIN) 
debian/$(cdbs_curpkg)/usr/games/
install -o root -g root -m 755 -d 
debian/$(cdbs_curpkg)/usr/share/doc/polygen
install -o root -g root -m 644 $(POLYGEN_BASE)/eng/HOWTO-Refman.html 
debian/$(cdbs_curpkg)/usr/share/doc/polygen/HOWTO-Refman.en.html
install -o root -g root -m 644 $(POLYGEN_BASE)/ita/HOWTO-Refman.html 
debian/$(cdbs_curpkg)/usr/share/doc/polygen/HOWTO-Refman.it.html


Bug#776575: Dial pad doesn't work during calls

2015-01-29 Thread Jean-Michel Nirgal Vourgère
Package: jitsi
Version: 2.4.4997-1.2
Severity: normal

Hello

During call to robots, sometimes one is asked to press 1 or 2 and so on.

This doesn't work.

With pulse audio, audio data can be heard in the headset, but is not
sent remotly (I tried calling myself to double check).

With portaudio, you can hear nothing. Then when you hang, you can hear
all the beeps that were supposed to go out during the call, much too
late obviously. ;)

-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages jitsi depends on:
ii  default-jre [java6-runtime]2:1.7-52
ii  libbcprov-java 1.49+dfsg-3
ii  libcommons-codec-java  1.9-1
ii  libcommons-lang3-java  3.3.2-1
ii  libcommons-logging-java1.2-1
ii  libdbus-java   2.8-5
ii  libdnsjava-java2.1.5-0.1
ii  libfelix-framework-java4.4.0-1
ii  libfelix-main-java 4.4.0-1
ii  libhttpclient-java 4.3.5-2
ii  libhttpcore-java   4.3.3-1
ii  libhttpmime-java   4.3.5-2
ii  libjcalendar-java  1.3.3-3
ii  libjgoodies-forms-java 1.6.0-4
ii  libjitsi-jni   2.4.4997-1.2
ii  libjmdns-java  3.4.1-2
ii  libjna-java4.1.0-1
ii  libjson-simple-java1.1.1-2
ii  libjzlib-java  1.1.3-1
ii  liblaf-widget-java 4.3-2
ii  liblog4j1.2-java   1.2.17-5
ii  libmac-widgets-java0.10.0+svn416-dfsg1-1
ii  libunixsocket-java 0.7.3-1
ii  libxpp3-java   1.1.4c-2
ii  openjdk-6-jre [java6-runtime]  6b33-1.13.5-1
ii  openjdk-7-jre [java6-runtime]  7u71-2.5.3-2

jitsi recommends no packages.

jitsi suggests no packages.

-- no debconf information



signature.asc
Description: OpenPGP digital signature


Bug#776565: Booting does not currently work

2015-01-29 Thread martin f krafft
also sprach Cyril Brulebois k...@debian.org [2015-01-29 16:44 +0100]:
 Latest news (hrm) are:
   [2013-07-17] Accepted 0.38a in unstable (low) (Christian Perrier)
   [2013-07-28] di-netboot-assistant 0.38a MIGRATED to testing (Britney)
 
 At this stage, it'd probably be a good idea to have it removed
 from testing;

Yeah, except I'd love to have it. :(
But it seems obviously broken. Let's wait another day or two and
hope that maybe Christian, Franklin or Joey have a say?

-- 
 .''`.   martin f. krafft madduck@d.o @martinkrafft
: :'  :  proud Debian developer
`. `'`   http://people.debian.org/~madduck
  `-  Debian - when you have better things to do than fixing systems
 
this sentence contradicts itself -- no actually it doesn't.
 -- douglas hofstadter


digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)


Bug#776565: Booting does not currently work

2015-01-29 Thread Cyril Brulebois
martin f krafft madd...@debian.org (2015-01-29):
 also sprach Cyril Brulebois k...@debian.org [2015-01-29 16:44 +0100]:
  Latest news (hrm) are:
[2013-07-17] Accepted 0.38a in unstable (low) (Christian Perrier)
[2013-07-28] di-netboot-assistant 0.38a MIGRATED to testing (Britney)
  
  At this stage, it'd probably be a good idea to have it removed
  from testing;
 
 Yeah, except I'd love to have it. :(

Work on it through stretch, backport it?

 But it seems obviously broken. Let's wait another day or two and
 hope that maybe Christian, Franklin or Joey have a say?

I'm not sure it's reasonable to expect fixing di-n-a at this point of
the release cycle, frankly.

(I'd even go as far as moving the not a few words to the right.)

Of course, I'm happy to take other opinions anyway.

Mraw,
KiBi.


signature.asc
Description: Digital signature


Bug#776507: (pre-approval) unblock: gnuplot/4.6.6-2

2015-01-29 Thread Niels Thykier
Control: tags -1 confirmed moreinfo

On 2015-01-28 21:01, Anton Gladky wrote:
 Package: release.debian.org
 Severity: normal
 User: release.debian@packages.debian.org
 Usertags: unblock
 
 Dear release team,
 
 please consider an approving an upload of a package gnuplot.
 
 Though it fixes an important bug #776434,  I think it should
 be fixed in Jessie. There was a mistake in update-alternatives
 handling. After installing gnuplot and gnuplot5, the help
 for gnuplot disappeared.
 
 Gnuplot has a very large popcon value (71k). I think it is
 important to have a working help for this package.
 
 Proposed diff is attached.
 
 unblock gnuplot/4.6.6-2
 
 Thank you
 
 Anton
 

Ack, please upload this package and remove the moreinfo tag from this
bug once gnuplot has been accepted into unstable.

Thanks,
~Niels


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



  1   2   3   >