Bug#803304: [Debian-med-packaging] Bug#803304: fixed in dcmtk 3.6.1~20150629-4

[Gert Wollny]

On Mon, 2015-11-16 at 16:29 +0100, Michael Onken wrote:
> There should already be a clean way in DCMTK to solve the issue 
> without applying a Debian-specific patch:
> 
> DCMTK offers the CMake option "BUILD_APPS" which is (obviously) 
> enabled per default. If you disable it, applications (like dcmdump) 
> are not built 

Thanks for the pointer, but it is not that simple, because: 

  * we want these applications, 
  * the web relates executables are moved to another place, 
(I didn't  do the initial packaging, so I'm not sure why), and 
  * we also want to build and run the tests, but we probably don't 
want the tests to be installed. 

Actually, I was also thinking about using the "configure" build
approach instead of the "cmake" one. At least with the last, not yet
packaged snapshot the "configure" based build works, but the "cmake"
one doesn't (at least not on my machine).

Best, 
Gert 

Bug#803359: Please upload golang-github-ugorji-go-codec-dev 0.0~git20151112.0.1a8bf87-1

[Alexandre Viau]

Hello Dimitry,

Can you please upload golang-github-ugorji-go-codec-dev
0.0~git20151112.0.1a8bf87-1 ?

I have prepared it as you requested.

It is on mentors:
 -
http://mentors.debian.net/debian/pool/main/g/golang-github-ugorji-go-codec/golang-github-ugorji-go-codec_0.0~git20151112.0.1a8bf87-1.dsc

Thanks,

-- 
Alexandre Viau
alexan...@alexandreviau.net



signature.asc
Description: OpenPGP digital signature

Bug#805156: libstoragemgmt: FTBFS: failed to find required module pywbem

[Ritesh Raj Sarraf]

On Sun, 2015-11-15 at 18:39 +0100, Kurt Roeckx wrote:
> It still fails on the buildds.

Only for the rebuilds with 1.2.3-1+b1, which is with libssl 1.0.2.

The older build, 1.2.3-1, built successfully with libssl 1.0.0.

So either this has to do with libssl or pywbem.


-- 
Ritesh Raj Sarraf | http://people.debian.org/~rrs
Debian - The Universal Operating System


signature.asc
Description: This is a digitally signed message part

Bug#805081: Please update liblastfm to 1.0.9

[John Stamp]

On Mon, Nov 16, 2015 at 03:04:44AM PST, Stefan Ahlers wrote:
> Hi,
> 
> thank you for your reply!
> > This is a little complicated because Amarok and Clementine both need
> > liblastfm compiled with Qt4.
> >
> > It looks like the latest version 1.1.0 (as yet untagged) allows for
> > coinstallation of the -dev files as well.  So it seems like the best way
> > forward is to upgrade to that version, and then have that source package
> > build both the Qt4 and Qt5 binaries.  It's doable, but you'd need to do
> > more by hand in debian/rules.
> Of course, I will not drop the Qt4 support. My idea is to create two
> separate packages. One package called "liblastfm" is Qt4 based and the
> other package "liblastfm5" is Qt5 based. And so it is very easy to
> handle the debian files.
> 
> My current Qt5 package (http://mentors.debian.net/package/liblastfm5) is
> patched for coinstallation. And so it is possible to install both
> package on the same system without a collision.
> > Would you be interested in taking over maintenance?
> Yes, I'm interested but I'm not a debian maintainer yet. I'm only a
> maintainer for the ubuntu PPA of tomahawk and I started my work on
> debian directly only a few weeks ago. And so I need a sponsoring for
> uploading at the moment.
> 
> I could take over maintenance, update the Qt4 version of liblastfm and
> uploading it to mentors.debian.net, if you wish.
> 
> Stefan

Hmm, I'm not sure how happy the ftp masters will be to have two exact
copies of a source tarball just to simplify debian/rules, but I guess
that's between you and them (or you and your sponsor).

But yes, please take over maintenance of liblastfm.  It'd be good to
have it in the hands of someone who feels more invested in the package.

John

Bug#805288: nano: syntax highlighting for nftables rulesets

[Arturo Borrero Gonzalez]

Package: nano
Version: 2.4.2-1
Severity: wishlist

Dear maintainer,

it would be good to have syntax highlighting for nftables rulesets in the nano 
editor.

Ruleset files tend to be big and complex to read, more or less like source code.
They include comments, variables, and some special words.

nftables its a fairly new thing, so there are no other syntax highlighting for 
other editors yet.

The attached syntax works for me.

thanks, best regards.
syntax "nftables" "\.(nft|nftables)$"
header "^#!.*((nft|nftables))"

# Strings and others
color yellow ""(\\.|[^"])*"" "'(\\.|[^'])*'"
color green "[{}():;|`$<>!=&\\]" "(\]|\[)"

# Objects and operations
color green 
"\<(table|chain|ruleset|set|map|vmap|type|hook|priority|policy)\>[[:space:]]"
color green "\<(include|define)\>[[:space:]]"
color red "[[:space:]]\<(flush|add|remove|replace|delete)\>[[:space:]]"

# Families
color yellow "[[:space:]]\<(ip|ip6|inet|arp|bridge)\>[[:space:]]"

# Terminal statements
color red "\<(drop|reject)\>"
color brightblue "\<(accept|snat|dnat|continue|return|goto)\>"

# Basic variable names
color brightred "\$[[:alpha:]_][[:alnum:]_.]*"

# Comments
color cyan "(^|[[:space:]])#.*$"

# Trailing whitespace
color ,green "[[:space:]]+$"

Bug#796402: slgsl: FTBFS:

[YunQiang Su]

On Fri, 21 Aug 2015 20:03:45 +0100 Chris Lamb  wrote:
> retitle 796402 slgsl: FTBFS: unable to find the gsl library and header
> file
> thanks

I NMUed this package with the attached patch.

>
> (Whoops, better title..)
>
>
> Regards,
>
> --
>   ,''`.
>  : :'  : Chris Lamb
>  `. `'`  la...@debian.org / chris-lamb.co.uk
>`-
>
>


slgsl.debdiff
Description: Binary data

Bug#804457: imapfilter: Uses SSLv3 method

[Andy Whitcroft]

Package: imapfilter
Version: 1:2.6.2-1
Followup-For: Bug #804457
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu xenial ubuntu-patch

Dear Maintainer,

We recently have disabled SSLv3 in Ubuntu as part of testing that we
found that imapfilter coredumped on startup.  Looking at Debian we see
that it is being disabled there such that imapfilter will no longer
build.  For Ubuntu we are applying the attached patch which follows the
recommendation in this Bug and as such should fix the issue in Debian
also:

  * Switch to using SSLv23_client_method in all cases to avoid using
now removed/nutered protocols and increasing forward compatibility.
(LP: #1516585).


Thanks for considering the patch.


-- System Information:
Debian Release: stretch/sid
  APT prefers xenial-updates
  APT policy: (500, 'xenial-updates'), (500, 'xenial-security'), (500, 
'xenial-proposed'), (500, 'xenial'), (100, 'xenial-backports')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-19-generic (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru imapfilter-2.6.2/debian/patches/series imapfilter-2.6.2/debian/patches/series
--- imapfilter-2.6.2/debian/patches/series	2015-01-05 18:29:14.0 +
+++ imapfilter-2.6.2/debian/patches/series	2015-11-16 12:53:46.0 +
@@ -1 +1,2 @@
 fix-makefile.diff
+ubuntu-switch-to-SSLv23_client_method-and-use-CTX-options-to-select-protocol.patch
diff -Nru imapfilter-2.6.2/debian/patches/ubuntu-switch-to-SSLv23_client_method-and-use-CTX-options-to-select-protocol.patch imapfilter-2.6.2/debian/patches/ubuntu-switch-to-SSLv23_client_method-and-use-CTX-options-to-select-protocol.patch
--- imapfilter-2.6.2/debian/patches/ubuntu-switch-to-SSLv23_client_method-and-use-CTX-options-to-select-protocol.patch	1970-01-01 01:00:00.0 +0100
+++ imapfilter-2.6.2/debian/patches/ubuntu-switch-to-SSLv23_client_method-and-use-CTX-options-to-select-protocol.patch	2015-11-16 13:29:59.0 +
@@ -0,0 +1,125 @@
+Description: switch to SSLv23_client_method() and use CTX options to select protocol
+ With us disabling SSLv3 we now either will not build (on Debian) or
+ coredump during initialisation.  As per the Debian bug recommendation
+ switch to always using SSLv23_client_method() as that can handle the best
+ protocol available (including TLS etc) going forward.  Where we need to
+ specify a specific protocol start using SSL_CTS_set_options() to limit
+ the negociable protocols.
+Author: Andy Whitcroft 
+Bug-Debian: https://bugs.debian.org/804457
+Bug-Ubuntu: https://launchpad.net/bugs/1516585
+
+Index: imapfilter-2.6.2/src/imapfilter.c
+===
+--- imapfilter-2.6.2.orig/src/imapfilter.c
 imapfilter-2.6.2/src/imapfilter.c
+@@ -21,10 +21,7 @@
+ 
+ extern buffer ibuf, obuf, nbuf, cbuf;
+ extern regexp responses[];
+-extern SSL_CTX *ssl3ctx, *ssl23ctx, *tls1ctx;
+-#if OPENSSL_VERSION_NUMBER >= 0x01000100fL
+-extern SSL_CTX *tls11ctx, *tls12ctx;
+-#endif
++extern SSL_CTX *ssl23ctx;
+ 
+ options opts;			/* Program options. */
+ environment env;		/* Environment variables. */
+@@ -109,25 +106,13 @@ main(int argc, char *argv[])
+ 
+ 	SSL_library_init();
+ 	SSL_load_error_strings();
+-	ssl3ctx = SSL_CTX_new(SSLv3_client_method());
+ 	ssl23ctx = SSL_CTX_new(SSLv23_client_method());
+-	tls1ctx = SSL_CTX_new(TLSv1_client_method());
+-#if OPENSSL_VERSION_NUMBER >= 0x01000100fL
+-	tls11ctx = SSL_CTX_new(TLSv1_1_client_method());
+-	tls12ctx = SSL_CTX_new(TLSv1_2_client_method());
+-#endif
+ 
+ 	if (exists_dir(opts.truststore))
+ 		capath = opts.truststore;
+ 	if (exists_file(opts.truststore))
+ 		cafile = opts.truststore;
+-	SSL_CTX_load_verify_locations(ssl3ctx, cafile, capath);
+ 	SSL_CTX_load_verify_locations(ssl23ctx, cafile, capath);
+-	SSL_CTX_load_verify_locations(tls1ctx, cafile, capath);
+-#if OPENSSL_VERSION_NUMBER >= 0x01000100fL
+-	SSL_CTX_load_verify_locations(tls11ctx, cafile, capath);
+-	SSL_CTX_load_verify_locations(tls12ctx, cafile, capath);
+-#endif
+ 
+ 	start_lua();
+ #if LUA_VERSION_NUM < 502
+@@ -146,13 +131,7 @@ main(int argc, char *argv[])
+ #endif
+ 	stop_lua();
+ 
+-	SSL_CTX_free(ssl3ctx);
+ 	SSL_CTX_free(ssl23ctx);
+-	SSL_CTX_free(tls1ctx);
+-#if OPENSSL_VERSION_NUMBER >= 0x01000100fL
+-	SSL_CTX_free(tls11ctx);
+-	SSL_CTX_free(tls12ctx);
+-#endif
+ 	ERR_free_strings();
+ 
+ 	regexp_free(responses);
+Index: imapfilter-2.6.2/src/socket.c
+===
+--- imapfilter-2.6.2.orig/src/socket.c
 imapfilter-2.6.2/src/socket.c
+@@ -17,11 +17,7 @@
+ #include "session.h"
+ 
+ 
+-SSL_CTX *ssl3ctx, *ssl23ctx, *tls1ctx;
+-#if OPENSSL_VERSION_NUMBER >= 0x01000100fL
+-SSL_CTX *tls11ctx, *tls12ctx;
+-#endif
+-
++SSL_CTX *ssl23ctx;
+ 
+ /*
+  * Connect to mail server.
+@@ -90,28 +86,28 @@ int
+ 

Bug#804554: fonts-hack-otf: new upstream release 2.018

[Fabian Greffrath]

Hi Paride,

Am Freitag, den 13.11.2015, 12:44 +0100 schrieb Paride Legovini:
> I'm aware of the new release, I just can't find the time for it on
> these
> busy days... I'll package it as soon as I can.
> Thanks for the heads up anyway!

I'd say I could take care of packaging this release. Do you store the
packaging in a GIT repo anywhere (and shouldn't we maybe transfer it to
the Debian pkg-fonts repo in the course of this)?

Best regards,

Fabian


signature.asc
Description: This is a digitally signed message part

Bug#804554: fonts-hack-otf: new upstream release 2.018

[Paride Legovini]

Hi Fabian,

On 2015-11-16 16:18, Fabian Greffrath wrote:
> Hi Paride,
> 
> Am Freitag, den 13.11.2015, 12:44 +0100 schrieb Paride Legovini:
>> I'm aware of the new release, I just can't find the time for it on
>> these
>> busy days... I'll package it as soon as I can.
>> Thanks for the heads up anyway!
> 
> I'd say I could take care of packaging this release. Do you store the
> packaging in a GIT repo anywhere (and shouldn't we maybe transfer it to
> the Debian pkg-fonts repo in the course of this)?

I uploaded 2.018 to mentors a few days ago, is any other action required
from my part? Perhaps I should have pinged you !about this! If there is
any problem let me know.

I'm currently not maintaining the package in a git repository, as it is
quite simple, but I agree it's a good idea to move it to a Debian git repo.

Regards,

Paride

Bug#720603: closed by Sebastian Ramacher <sramac...@debian.org> (Re: Bug#720603: missing files in devel package)

[PICCORO McKAY Lenz]

Package: liblivemedia-dev
Version: 2012.05.17-1~bpo60+1

seems that liblivemedia backports for squeeze do not have all files, but
wors its that Sebastian Ramacher does not help so much, he can made a
forward mail event "close" the bug! what a help!

included, see quickly in debian package search:

packages.debian.org/search?suite=squeeze-backports=any=exactfilename=contents=liveMedia.hh

i got errors when compiling mplayer..  this due:

libmpdemux/demux_rtp_internal.h:33:24: warning: liveMedia.hh: No such
file or directory

how u can see the backported package do not have the file necesary to
activate live555 in mplayer...

i dont knwo if this bug are related to #242821

and i added the previously mails:

Lenz McKAY Gerardo (PICCORO)
http://qgqlochekone.blogspot.com

2015-11-15 14:36 GMT-04:30 Debian Bug Tracking System :

> This is an automatic notification regarding your Bug report
> which was filed against the liblivemedia-dev package:
>
> #720603: missing files in devel package
>
> It has been closed by Sebastian Ramacher .
>
> Their explanation is attached below along with your original report.
> If this explanation is unsatisfactory and you have not received a
> better one in a separate message then please contact Sebastian Ramacher <
> sramac...@debian.org> by
> replying to this email.
>
>
> --
> 720603: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720603
> Debian Bug Tracking System
> Contact ow...@bugs.debian.org with problems
>
>
> -- Mensaje reenviado --
> From: Sebastian Ramacher 
> To: PICCORO McKAY Lenz ,
> 720603-d...@bugs.debian.org
> Cc:
> Date: Sun, 15 Nov 2015 20:03:31 +0100
> Subject: Re: Bug#720603: missing files in devel package
> On 2013-08-23 14:52:11, PICCORO McKAY Lenz wrote:
> > Package: liblivemedia-dev
> > Version: 2012.05.17-1~bpo60+1
>
> For bugs in backported packages please contact
> debian-backpo...@lists.debian.org
> as described at [1].
>
> Cheers
>
> [1] http://backports.debian.org/FAQ/
> --
> Sebastian Ramacher
>
>
> -- Mensaje reenviado --
> From: PICCORO McKAY Lenz 
> To: Debian Bug Tracking System 
> Cc:
> Date: Fri, 23 Aug 2013 14:52:11 -0430
> Subject: missing files in devel package
> Package: liblivemedia-dev
> Version: 2012.05.17-1~bpo60+1
>
> seems that liblivemedia backports for squeeze do not have all files
> included, see quickly in debian package search:
>
>
> packages.debian.org/search?suite=squeeze-backports=any=exactfilename=contents=liveMedia.hh
>
> i got errors when compiling mplayer..  this due:
>
> libmpdemux/demux_rtp_internal.h:33:24: warning: liveMedia.hh: No such
> file or directory
>
> how u can see the backported package do not have the file necesary to
> activate live555 in mplayer...
>
> i dont knwo if this bug are related to #242821
>
> please do not upload bad made packages or at leas the backport
> mantainer must test agains next debian release version of package
> (currently wheeze, respect squeeze)
>
> Lenz McKAY Gerardo (PICCORO)
> http://qgqlochekone.blogspot.com
>
>

Bug#805249: pyparted: FTBFS: PartedException: Unknown disk flag, 1000.

[hpfn]

Hi Chris,

The version 3.10.7-1 of pyparted has:

- 7 'reproducible' builds ( 2 sid and 5 testing )
- 1 'depwait' build ( sid )
- 2 'FTBFS' builds ( sid )

Something happened, but 7 'reproducible' builds
says that the package is ok.

And this line sounds strange:
runTest (tests.test__ped_disk.DiskNewLabeledTestCase) ... sh: 1: parted: not 
found
ERRORparted

Other tests are ok.


regards,
-- 
Herbert Parentes Fortes Neto (hpfn)

Bug#805291: preseed: Offer a way to override initrd-level preseeding with kernel command line preseeding

[Cyril Brulebois]

Hi,

Raphaël Hertzog  (2015-11-16):
> In Kali, we rely on initrd preseeding to set a bunch of Debconf entries
> because it's the only sane way to ensure that we have those during netboot
> too.
> 
> Unfortunately, it makes it very hard for end-users to change some of
> those entries... editing initrd is not the best interface. It would
> be very nice if there was a way to override such preseeding with the
> (kernel) boot command line.
> 
> Right now env-preseed runs before initrd-preseed:
> $ ls debian-installer-startup.d/
> S30env-preseed  S35initrd-preseed  S60auto-install
> 
> I'm not sure what is the rationale for this order but if we don't want to
> swap the order, then I would suggest that we introduce a new syntax that
> let us do this operation.
> 
> I think inverting the order of both script would make a lot of sense. I
> tried to find reasons not to but there is no intermediary script between
> S30 and S35 and thus except for the precedence of preseeding, it has no
> other impact AFAIK.
> 
> Otherwise if not possible I suggest "mirror/hostname!=http://my.mirror; as
> alternative syntax, somewhat mirroring the already existing ?= syntax
> (with the exclamation mark conveying the notion of "forcing") but I'm
> happy with any other syntax that you might prefer.
> 
> Phil & Cyril, please share your opinions/preference as I'll probably try
> to implement this soonish.

I'm afraid I don't have time to spend on figuring out all the possible
consequences of such a move…

Mraw,
KiBi.


signature.asc
Description: Digital signature

Bug#803304: [Debian-med-packaging] Bug#803304: fixed in dcmtk 3.6.1~20150629-4

[Michael Onken]

Hi Gert,

On 16.11.2015 16:52, Gert Wollny wrote:
>> [DCMTK's "BUILD_APPS" Option]
> 
> Thanks for the pointer, but it is not that simple, because:
> 
> * we want these applications, * the web relates executables are moved
> to another place, (I didn't  do the initial packaging, so I'm not
> sure why), and * we also want to build and run the tests, but we
> probably don't want the tests to be installed.

I see, then you're right, there is no ready-to-use solution in DCMTK,
sorry for the noise.

> Actually, I was also thinking about using the "configure" build 
> approach instead of the "cmake" one. At least with the last, not yet 
> packaged snapshot the "configure" based build works, but the "cmake" 
> one doesn't (at least not on my machine).

If the failing system for the CMake build was a Mac, probably these
commits [1] [2] will do the trick. If there is another problem, please
drop us a mail to bugs at dcmtk org.

Thanks Gert,
Michael (DCMTK Team)

[1]
http://git.dcmtk.org/web?p=dcmtk.git;a=commit;h=a3dc5b5270517e36207fa0e1f704c7db1e598774

[2]
http://git.dcmtk.org/web?p=dcmtk.git;a=commit;h=b3ffaff28fe390c5d5932ca00310f804027831c5

-- 
http://www.open-connections.de

Bug#805083: polygraph: FTBFS: SSlv3 method

[Alex Rousskov]

On 11/14/2015 09:02 AM, Alex Rousskov wrote:

> If we can provide a small better fix, we will. If a better fix requires
> too many unrelated changes to this Polygraph version, we will provide a
> patch that disables SSLv3 (until a recent Polygraph version with a
> comprehensive fix is released).

The attached patch allows Polygraph to be built with OpenSSL that does
not support SSLv3 while preserving legacy functionality for those who
need it.


HTH,

Alex.

Support OpenSSL builds without SSLv3 support.

This patch is for Polygraph version 4.3.2-1.2 used by Debian.


diff --git a/src/xstd/Ssl.cc b/src/xstd/Ssl.cc
index 92f81b2..141110e 100644
--- a/src/xstd/Ssl.cc
+++ b/src/xstd/Ssl.cc
@@ -1,68 +1,76 @@
 
 /* Web Polygraph   http://www.web-polygraph.org/
  * Copyright 2003-2011 The Measurement Factory
  * Licensed under the Apache License, Version 2.0 */
 
 #include "xstd/xstd.h"
 
 #if OPENSSL_ENABLED
 #include 
 #include 
 #endif
 
 #include "xstd/Assert.h"
 #include "xstd/String.h"
 #include "xstd/Ssl.h"
 
+#if (OPENSSL_VERSION_NUMBER >= 0x1010L)
+#define SecureProtoAny_method TLS_method
+#else
+#define SecureProtoAny_method SSLv23_method
+#endif
+
 int Ssl::TheLevel = 0;
 
 // XXX: we should set the [SSL] error when SSL library is not found
 // XXX: we should set the global error to an SSL error when an SSL call fails
 
 /* SslCtx class */
 
 SslCtx::SslCtx(SslProtocol protocol, const String ): theCtx(0) {
 #if OPENSSL_ENABLED
 	Must(IsProtocolSupported(protocol));
 	/* Pass *_method() result directly to SSL_CTX_new(3) instead
 	 * of storing it in a variable and calling SSL_CTX_new(3)
 	 * once. These functions use const types in OpenSSL 1.0 and
 	 * non-const types in older OpenSSL versions and it breaks the
 	 * build. */
 	switch(protocol) {
 		case SSLv2:
 #ifndef OPENSSL_NO_SSL2
 			theCtx = ::SSL_CTX_new(::SSLv2_method());
 #endif
 			break;
 		case TLSv1:
 			theCtx = ::SSL_CTX_new(::TLSv1_method());
 			break;
 		case SSLv3:
+#ifndef OPENSSL_NO_SSL3_METHOD
 			theCtx = ::SSL_CTX_new(::SSLv3_method());
+#endif
 			break;
 		case SSLv23:
-			theCtx = ::SSL_CTX_new(::SSLv23_method());
+			theCtx = ::SSL_CTX_new(::SecureProtoAny_method());
 			break;
 		default:
-			theCtx = ::SSL_CTX_new(::SSLv23_method());
+			theCtx = ::SSL_CTX_new(::SecureProtoAny_method());
 			Should(false);
 	}
 	Must(theCtx);
 	Must(::SSL_CTX_set_cipher_list(theCtx, cipher.cstr()));
 #endif
 }
 
 SslCtx::SslCtx(const SslCtx ) {
 	Assert(false);
 }
 
 SslCtx::~SslCtx() {
 #if OPENSSL_ENABLED
 	if (theCtx)
 		::SSL_CTX_free(theCtx);
 #endif
 }
 
 SslCtx ::operator =(const SslCtx ) {
 	Assert(false);

Bug#803304: fixed in dcmtk 3.6.1~20150629-4

[Michael Onken]

There should already be a clean way in DCMTK to solve the issue without
applying a Debian-specific patch:

DCMTK offers the CMake option "BUILD_APPS" which is (obviously) enabled
per default. If you disable it, applications (like dcmdump) are not
built and also the related export file (DCMTKTargets*.cmake) will not
list them any more.

Best regards,
Michael Onken

-- 
http://www.open-connections.de

Bug#787628: Bracketed paste is unsafe

[Yuri D'Elia]

Sorry for the late reply, but as I wasn't included in the reply, I
didn't get any notification. I just stumbled upon it today by chance...

> First of all, the safety is not the same as security, and the bracketed
> paste mode is not a means for security (for a variety of subreasons, the
> main being that pasting a _shell_ command that contains data that the user
> doesn't know is insecure with or without bracketed paste mode filtering
> out certain sequences).

The way I see it, bracketed paste allows the program attached to the tty
to receive clean input from the paste without the terminal interfering.

Ideally, I would like the data to come through *as-is*, 8bit clean.

Unfortunately, bracketed paste is flawed, as it relies on a termination
sequence and doesn't allow escapes. This means that even if I wanted to,
I cannot pass input that includes the termination sequence.

Without filtering the termination sequence at all, there's *no* way to
implement reliably *any* bracketed sequence. It *is* the job of the
terminal program to filter the sequence, and only that sequence, from
the paste. This is not sanitization of the input, it's just protocol.

> Third, even if bracketed paste mode would single out this sequence, it's
> not a security feature, as the user has no feedback on whether this mode
> is enabled, so cannot base her decision to paste on this mode. Advertising
> bracketed paste mode as a security feature would trick users into unsafe
> behaviour.

This patch was produced as a result of some work in zsh, which now uses
bracketed paste to automatically quote (and not execute by default!)
pastes. This is now the default behavior in zsh since 5.1.

Bracketed paste might actually be used by editors, such as vim, to
insert text as-is without having to enter "paste" mode first.

However, bracketed paste needs to be reliable.

> Lastly, guessing what is "safe" and what is "unsafe" in the terminal
> emulator is the wrong place, as it can't know what the application
> interprets. For example, the application might abort paste mode on other
> sequences as well (such as ctrl-c). It's also very difficult to implement,
> even if there was a list of what is to be filtered out, as the patch
> shows, which doesn't manage to filter out sequences at internal borders, so
> not giving the false impression that pasting is safe no matter what it
> contains.

We've been discussing the issue of break processing in the zsh ml, and
indeed the patch is still "incomplete" in the sense that Ctrl+C is still
processed by the terminal discipline, and that's definitely something
that should be avoided.

I'd rather try to manually change and restore the terminal mode through
the pty master in order for the bracketed paste to be fully transparent
for all programs, but I didn't get to it yet.

I don't want to go through the route of xterm, which instead filters the
input "pretending" to know what is safe and what isn't, which like you
say, is just guessing.

> Therefore, I would suggest reassigning this to firefox or other
> applications in Debian GNU/Linux that let you select one text visually,
> but then offer a different text as the selection to other apps, as that is
> indeed a security problem.

Firefox has nothing to do with it here, but it shows one of the most
important aspects of a reliable bracketed paste: if bracketed paste is
implemented correctly in the terminal, proper behavior *can* be
implemented at the application level, as zsh now shows.

Bug#804690: texlive-fonts-extra: Please switch to fonts-noto from fonts-droid

[Vasudev Kamath]

Hi Norbert,

Norbert Preining  writes:

> Hi Vasudev,
>
>> I think it would also be good idea to inform upstream about future of
>> Droid fonts from upstream perspective. I know there are some rendering
>
> That is unfortunately not a problem of upstream (TeX Live), but 
> a problem of up-upstream, those who submit packages to CTAN.
> I am not sure what will happen, but basically I simply follow
> the TeX Live packaging, and if there is a change, I will follow it.
> If not, not.

Alright no issues. I don't know how texlive stuff so it was just a
suggestion :-).

Cheers,

Bug#805291: preseed: Offer a way to override initrd-level preseeding with kernel command line preseeding

[Raphaël Hertzog]

Source: preseed
Version: 1.68
Severity: wishlist
User: de...@kali.org
Usertags: origin-kali

In Kali, we rely on initrd preseeding to set a bunch of Debconf entries
because it's the only sane way to ensure that we have those during netboot
too.

Unfortunately, it makes it very hard for end-users to change some of
those entries... editing initrd is not the best interface. It would
be very nice if there was a way to override such preseeding with the
(kernel) boot command line.

Right now env-preseed runs before initrd-preseed:
$ ls debian-installer-startup.d/
S30env-preseed  S35initrd-preseed  S60auto-install

I'm not sure what is the rationale for this order but if we don't want to
swap the order, then I would suggest that we introduce a new syntax that
let us do this operation.

I think inverting the order of both script would make a lot of sense. I
tried to find reasons not to but there is no intermediary script between
S30 and S35 and thus except for the precedence of preseeding, it has no
other impact AFAIK.

Otherwise if not possible I suggest "mirror/hostname!=http://my.mirror; as
alternative syntax, somewhat mirroring the already existing ?= syntax
(with the exclamation mark conveying the notion of "forcing") but I'm
happy with any other syntax that you might prefer.

Phil & Cyril, please share your opinions/preference as I'll probably try
to implement this soonish.

I track this wishlist on the Kali side too:
https://bugs.kali.org/view.php?id=2143

And it's prompted by the fact that even though we set a mirror in the
initrd, it would be nice if users could pick other mirrors via the command
line. Example case where someone was bitten by this:
https://www.linuxquestions.org/questions/debian-26/kernel-preseed-argument-vs-preseed-cfg-doesn%27t-work-4175534979/

-- System Information:
Debian Release: stretch/sid
  APT prefers squeeze-lts
  APT policy: (500, 'squeeze-lts'), (500, 'oldoldstable'), (500, 'unstable'), 
(500, 'testing'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Bug#801081: xserver-xorg-video-qxl: QXL video unusable due to performance

[Laurent Bigonville]

On Mon, 05 Oct 2015 22:58:26 -0400 Pat Roberts 
 wrote:


> Dear Maintainer,

Hi,

> When QXL video is selected in a virt-manager Debian Jessie or Wheezy 
guest, the
> performance of a whole class of applications is so bad it renders the 
driver

> unusable, up to appearing locked up.

Could you please try to use the version from testing/unstable (0.1.4)?

Cheers,

Laurent Bigonville

Bug#788708: Bug#799632: iceweasel: SIGSEGV when playing videos via gstreamer

[Agustin Martin]

On Sat, Nov 14, 2015 at 03:25:49PM +0100, Soeren D. Schulze wrote:
> I am not sure about those SIGPIPEs.  They occured to me, too, but I could
> just press 'c' in gdb and continue using iceweasel until the SIGSEGV.  On
> the other hand, they are apparently gone now in stretch.
> 
> Could you press 'c' next time it happens, and wait for a SIGSEGV to occur?

Thanks for the info,

This was the first time I got a backtrace, so I naively stopped at
SIGPIPE.

Tried again, pressing 'c' after each SIGPIPE. That way I got a lot of
SIGPIPEs in a single debugging session, but no SIGSEGV happened.

Will try again next time I have access to that box, in case I am lucky.

-- 
Agustin

Bug#804651: owncloud: renaming a folder can destroy all contained files

[David Prévot]

Control: forwarded -1 https://github.com/owncloud/core/issues/13391
Control: tag -1 upstream
Control: tag -1 pending

Hi Cyrille,

Le 16/11/2015 05:26, Cyrille Chépélov a écrit :

>> What are the clients (platform, version number) used to synchronize?
> Here's the output of cat access.log|cut -d " " -f 12- |sort |uniq
> "-"

That doesn’t seem to contain any of the owncloud-client versions.

>> Have you checked upstream issue tracker already for similar issues?
> Yes, with no results.

Looks like I’ve been more “lucky”. There are actually quite a lot of
reports, in core and client issue tracker, many of them are referenced
in [13391].

It looks like upstream dealt with this issue by reducing time when
updating the database [13948] and with proper locking [16237]. That is
available in version 8 (8.2.1~~rc2~dfsg-1 already in people.d.o, and
8.2.1 final will probably be uploaded to experimental), but is not going
to be handled in version 7 AFAICT.

13391: https://github.com/owncloud/core/issues/13391
13948: https://github.com/owncloud/core/pull/13948
16237: https://github.com/owncloud/core/pull/16237

Regards

David



signature.asc
Description: OpenPGP digital signature

Bug#797698: I'm also affected: update to latest upstream release

[Thomas Goirand]

Hi,

I'd like to also tell that I need a higher version of libjs-backbone. I
need at least vesrion 1.2.1, which is needed by OpenStack Fuel.

Can I do the work, and upload a new version to Experimental?

Cheers,

Thomas Goirand (zigo)

Bug#805287: vcftools: New homepage: https://vcftools.github.io/

[Jonas Smedegaard]

Package: vcftools
Severity: minor

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Project has moved - its new homepage is https://vcftools.github.io/

 - Jonas

-BEGIN PGP SIGNATURE-
Version: GnuPG v1

iQIcBAEBAgAGBQJWSdI+AAoJECx8MUbBoAEhHn0P/RZlQz3t5tNc8IkfgHEgY6//
Uj7vwdPjQSOv4FQYq6B6ocWjxYPJFWfeHWYVxJ7ayD6Ein2SCFgiq9/lTtPExiik
eu28GC5oRTXUG555yjNjrvsOLJ/CBLzb5iiqxR594TXqywuHFEl4IZO1abXiXq74
914ltkZFmQ3BEQiJEx+FIgk6ZQm5YTL2cs9J+ALWfjmZT6AOibXh5S7qc4bImLwa
VXrlMCQ6RQh18X1ruK2cPz0y99mkUXtNVc5i9AwLlfx6oydKfR9HqGounnY6T5Xb
r7J5sqTkScvxqtV9YqUs5zeEu0Hp28Wj2RpZj0+U7/1/owntxllvp/onVzkDyBHW
0D03XwoL8Qju149RCgEdNMV5LjG7HvxH/dmM94mlcj/dVQQFu57UwEkBoagrEzNr
ZMybq1tP9VZn9D8WPH4kAp7TkEsotFLs52ahnfLGIu8zDXmC4dSMa+GPknttlRto
s2qqxCX+dExvaLL2eOeKB2v0Hkb4tTIdSDWJxarNMwRhbXBHVdEOaMTTH/mLBCzf
+UELOwaW+U/5keuiwh+L5wwZyg9G70apKXDfFS3hM71jnlYEMAPsCTeH4TkOGWCs
p7jQkJ+ioMGg/aOv7YcfNsE7BiS5ObjKnc76VscrPEyt69dRv4bgIAs77iAmG1Ye
bC8gdWC17nK6XCV83jre
=WyqJ
-END PGP SIGNATURE-

Bug#805278: ITP: heka -- Stream processing software system developed by Mozilla

[Thomas Goirand]

On 11/16/2015 11:22 AM, ChangZhuo Chen wrote:
> Package: wnpp
> Severity: wishlist
> Owner: "ChangZhuo Chen (陳昌倬)" 
> 
> * Package name: heka
>   Version : 0.10.0b1
>   Upstream Author : Ben Bangert, Mike Trinkala, Rob Miller, Victor Ng,
> David Birdsong, Michael Gibson
> * URL : https://github.com/mozilla-services/heka
> * License : MPL-2
>   Programming Lang: Go
>   Description : Stream processing software system developed by Mozilla
> 
>  Heka is an open source stream processing software system developed by
>  Mozilla. Heka is a “Swiss Army Knife” type tool for data processing,
>  useful for a wide variety of different tasks, such as:
>  .
>  * Loading and parsing log files from a file system.
>  * Accepting statsd type metrics data for aggregation and forwarding to
>upstream time series data stores such as graphite or InfluxDB.
>  * Launching external processes to gather operational data from the local
>system.
>  * Performing real time analysis, graphing, and anomaly detection on any
>data flowing through the Heka pipeline.
>  * Shipping data from one location to another via the use of an external
>transport (such as AMQP) or directly (via TCP).
>  * Delivering processed data to one or more persistent data stores.

Hi,

Thanks for working on this. I will need the package too. How far are you
from uploading the package?

Cheers,

Thomas Goirand (zigo)

Bug#805201: [Debian GNUstep maintainers] Bug#805201: gnumail: FTBFS: /usr/bin/ld: cannot find -lAddresses

[Eric Heintzmann]

Le 15/11/2015 21:26, Chris West (Faux) a écrit :

Source: gnumail
Version: 1.2.2-1
Severity: serious
Justification: fails to build from source
Tags: sid
User: reproducible-bui...@lists.alioth.debian.org
Usertags: ftbfs
X-Debbugs-CC: reproducible-bui...@lists.alioth.debian.org

Dear Maintainer,

The package fails to build:

gcc  -shared -Wl,-soname,libGNUMail.so.1  -rdynamic -Wl,-z,relro ... 
obj/GNUMail.obj/WelcomePanel.m.o   -L../   -L/usr/local/lib -L/usr/lib   -lobjc -lgnustep-base 
-lgnustep-gui -lPantomime -lAddresses -lAddressView -lm   && (cd ./GNUMail.framework/Versions/1/.; 
rm -f libGNUMail.so; if [ "libGNUMail.so.1" != "libGNUMail.so.1.2.2" ]; then rm -f 
libGNUMail.so.1; ln -s libGNUMail.so.1.2.2 libGNUMail.so.1; fi; ln -s libGNUMail.so.1 libGNUMail.so; ) || 
rm -f ./GNUMail.framework/Versions/1/./libGNUMail.so.1.2.2 ; \
(cd ./GNUMail.framework/Versions/1/.; \
   rm -f GNUMail; \
   ln -s libGNUMail.so GNUMail) \

/usr/bin/ld: cannot find -lAddresses
/usr/bin/ld: cannot find -lAddressView
collect2: error: ld returned 1 exit status
At first glance, there are strange problems of symlinks in 
libaddresses-dev and libddressview-dev packages.

I can correct the problems and prepare new packages( just need a sponsor).

Eric

Bug#805284: gnome-color-manager: Should not depend on GnuTLS

[Tim Ruehsen]

Package: gnome-color-manager
Version: 3.18.0
Severity: minor

Dear Maintainer,

this package depends on libgnutls-deb0-28 (>= 3.3.0), but I can't see any
hint in the sources why it should.

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Bug#802677: Raising severity - blocking RC bug fixes

[Raphael Hertzog]

Control: forwarded -1 https://code.djangoproject.com/ticket/25761

On Mon, 16 Nov 2015, Neil Williams wrote:
> affects 801930

Note that affects needs a bug and a package. :)

> django-testscenarios has an RC bug (801930) related to django1.8 but
> now cannot be built because python-testtools fails - apparently due to
> changes in the exception / traceback handling in django1.8.

I forwarded this issue upstream. It looks like the fix should be
relatively easy and hopefully upsream will pick it up shortly.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/

Bug#804838: eztrace: build process generates huge file

[Samuel Thibault]

Mattia Rizzolo, on Mon 16 Nov 2015 10:53:53 +, wrote:
> I'm sorry I haven't get back to yet before.
> 
> On Fri, Nov 13, 2015 at 03:35:24PM +0100, Samuel Thibault wrote:
> > system (the testsuite is not supposed to run in parallel anyway), but
> 
> if the testsuite is not supposed to run parallel, then you should avoid
> that:

I thought the makefiles were disabling parallelism for the testsuite,
but apparently not, so I'll do as you suggested. That can indeed
explain why litl_print went crazy since the trace file will be written
concurrently.

Samuel

Bug#804651: owncloud: renaming a folder can destroy all contained files

[David Prévot]

Hi Cyrille,

Le 16/11/2015 09:10, Cyrille Chépélov a écrit :
> Le 16/11/2015 13:45, David Prévot a écrit :
>>
>> Here's the output of cat access.log|cut -d " " -f 12- |sort |uniq
>> "-"
>> That doesn’t seem to contain any of the owncloud-client versions.
> Aren't the "/mirall " records from owncloud-client? They seem to be
> pretty close in versions  to the versions exhibited by the deployed
> owncloud-client…

Indeed, sorry for my initial overlook. One line seems to refer to a
pretty old version. Since some fixes made it in the client side too, it
may be worth upgrading (at least) this one:

"Mozilla/5.0 (Windows) mirall/1.4.2"

> This looks very encouraging! However, do you have any feedback on the
> level of migration testing already done between version 7 and what's
> about to land in p.d.o and experimental?

It seems pretty well tested upstream, and some (positive) feedback
already made it on #785052. The only (known) issue is if server-side
encryption was enable (I have not yet managed to perform the migration
as documented upstream).

#785052: https://bugs.debian.org/785052

> (let's take the latter part off-BTS if needed)

You may follow-up on #785052, or file new issues if relevant (or use our
mailing list , but the
BTS helps tracking in a public place).

Regards

David



signature.asc
Description: OpenPGP digital signature

Bug#756351: libanjuta-3-0: gtkpod 2.1.4-3 segfaults on initialization in anjuta_plugin_handle_get_description

[Julian Gilbey]

On Sat, Aug 30, 2014 at 11:57:16PM +0100, Julian Gilbey wrote:
> On Wed, Jul 30, 2014 at 09:30:53PM -0400, Fred Korz wrote:
> > [...]  I did notice, on the shell from which I
> > invoked /usr/bin/gtkpod 716 consecutive instances of "(gtkpod:20613):
> > libanjuta-CRITICAL **: anjuta_status_progress_increment_ticks: assertion
> > 'status->priv->total_ticks != 0' failed".  By the time I noticed it had 
> > stopped
> > producing them.
> 
> Ditto.

With gtkpod 2.1.5-1 and anjuta 2:3.18.0-1, all seems to be running
smoothly.

   Julian

Bug#795871: cryptsetup: cryptsetup remove on swap hangs at system shutdown time

[Julian Gilbey]

On Mon, Aug 17, 2015 at 05:06:06PM +0100, Julian Gilbey wrote:
> Package: cryptsetup
> Version: 2:1.6.6-5
> Severity: important
> 
> I have two machines which have an encrypted swap partition, and at
> some point they stopped shutting down cleanly.  They are still running
> with a sysvinit init system, if that might be making a difference.
> They reach the /etc/init.d/cryptdisks stop command, they say "Stopping
> remaining crypto disks", and then hang.  Adding some debugging lines
> to /lib/cryptsetup/cryptodisks, it became clear that they are hanging
> on the command: "cryptsetup remove sda7_crypt" within do_close.  (This
> is happening on every shutdown or restart.)
> 
> At that point, the only way to complete the shutdown is to do a
> hardware power-down, hence why I have labelled this bug as
> "important".

I have recently migrated to systemd, and now my machine shuts down
smoothly, so it seems it may be a sysvinit-related issue.

   Julian

Bug#804651: owncloud: renaming a folder can destroy all contained files

[Cyrille Chépélov]

Le 16/11/2015 13:45, David Prévot a écrit :
>
> Here's the output of cat access.log|cut -d " " -f 12- |sort |uniq
> "-"
> That doesn’t seem to contain any of the owncloud-client versions.
Aren't the "/mirall " records from owncloud-client? They seem to be
pretty close in versions  to the versions exhibited by the deployed
owncloud-client…

>
>>> Have you checked upstream issue tracker already for similar issues?
>> Yes, with no results.
> Looks like I’ve been more “lucky”. There are actually quite a lot of
> reports, in core and client issue tracker, many of them are referenced
> in [13391].
OK, great!


>
> It looks like upstream dealt with this issue by reducing time when
> updating the database [13948] and with proper locking [16237]. That is
> available in version 8 (8.2.1~~rc2~dfsg-1 already in people.d.o, and
> 8.2.1 final will probably be uploaded to experimental), but is not going
> to be handled in version 7 AFAICT.
>
> 13391: https://github.com/owncloud/core/issues/13391
> 13948: https://github.com/owncloud/core/pull/13948
> 16237: https://github.com/owncloud/core/pull/16237
This looks very encouraging! However, do you have any feedback on the
level of migration testing already done between version 7 and what's
about to land in p.d.o and experimental? I'll have to strike a very
delicate balance between non-technical users on one hand and a pretty
early packaging of a major version on the other…
(let's take the latter part off-BTS if needed)

-- Cyrille

Bug#805289: Please upgrade to 2.4.0

[Thomas Goirand]

Source: less.js
Version: 1.6.3~dfsg-2
Severity: important

Hi,

I need version 2.4.0 of libjs-less for OpenStack Fuel. Please package
it. Please let me know if it is ok that I do the work in Experimental
first, then you can review the package and upload to Sid.

Cheers,

Thomas Goirand (zigo)

Bug#759972: php-xml-serializer: FTBFS: tests failed

[Prach Pongpanich]

Hi,

I rebuilt php-xml-serializer on sid (2015-11-16).

>chmod +x ./debian/tests_run
>./debian/tests_run
>PHPUnit 5.0.9 by Sebastian Bergmann and contributors.
>
>. 65 / 73 ( 
>89%)
>..FF  73 / 73 
>(100%)
>
>Time: 487 ms, Memory: 7.00Mb
>
>There were 6 failures:

The full build log is attached.

Regards
Prach
I: using fakeroot in build.
I: pbuilder: network access will be disabled during build
I: Current time: Mon Nov 16 21:15:38 ICT 2015
I: pbuilder-time-stamp: 1447683338
I: Building the build Environment
I: extracting base tarball [/var/cache/pbuilder/base-sid.tgz]
I: creating local configuration
I: copying local configuration
W: --override-config is not set; not updating apt.conf Read the manpage for details.
I: mounting /proc filesystem
I: mounting /run/shm filesystem
I: mounting /dev/pts filesystem
I: Mounting /var/cache/pbuilder/result
I: policy-rc.d already exists
I: Obtaining the cached apt archive contents
I: Installing the build-deps
I: user script /var/cache/pbuilder/build//22327/tmp/hooks/D05deps starting
Ign file: ./ InRelease
Ign file: ./ Release.gpg
Ign file: ./ Release
Ign file: ./ Translation-en
Get:1 http://ftp.th.debian.org sid InRelease [256 kB]
Get:2 http://ftp.th.debian.org sid/main amd64 Packages/DiffIndex [7876 B]
Get:3 http://ftp.th.debian.org sid/main Translation-en/DiffIndex [7876 B]
Get:4 http://ftp.th.debian.org sid/main amd64 2015-11-14-0844.46.pdiff [2054 B]
Get:5 http://ftp.th.debian.org sid/main amd64 2015-11-14-1445.49.pdiff [5608 B]
Get:6 http://ftp.th.debian.org sid/main amd64 2015-11-14-2042.49.pdiff [8512 B]
Get:7 http://ftp.th.debian.org sid/main amd64 2015-11-15-0243.28.pdiff [6682 B]
Get:8 http://ftp.th.debian.org sid/main amd64 2015-11-15-0843.03.pdiff [8676 B]
Get:9 http://ftp.th.debian.org sid/main amd64 2015-11-15-1442.46.pdiff [9979 B]
Get:10 http://ftp.th.debian.org sid/main amd64 2015-11-15-2042.38.pdiff [16.9 kB]
Get:11 http://ftp.th.debian.org sid/main amd64 2015-11-16-0243.26.pdiff [17.5 kB]
Get:12 http://ftp.th.debian.org sid/main amd64 2015-11-16-0846.12.pdiff [2281 B]
Get:13 http://ftp.th.debian.org sid/main amd64 2015-11-16-0846.12.pdiff [2281 B]
Get:14 http://ftp.th.debian.org sid/main 2015-11-14-1445.49.pdiff [1115 B]
Get:15 http://ftp.th.debian.org sid/main 2015-11-14-2042.49.pdiff [845 B]
Get:16 http://ftp.th.debian.org sid/main 2015-11-15-0243.28.pdiff [260 B]
Get:17 http://ftp.th.debian.org sid/main 2015-11-15-0843.03.pdiff [876 B]
Get:18 http://ftp.th.debian.org sid/main 2015-11-15-1442.46.pdiff [546 B]
Get:19 http://ftp.th.debian.org sid/main 2015-11-15-2042.38.pdiff [603 B]
Get:20 http://ftp.th.debian.org sid/main 2015-11-16-0243.26.pdiff [617 B]
Get:21 http://ftp.th.debian.org sid/main 2015-11-16-0243.26.pdiff [617 B]
Fetched 355 kB in 8s (43.6 kB/s)
Reading package lists...
I: user script /var/cache/pbuilder/build//22327/tmp/hooks/D05deps finished
I: user script /var/cache/pbuilder/build//22327/tmp/hooks/D10dpkg-speedup starting
I: user script /var/cache/pbuilder/build//22327/tmp/hooks/D10dpkg-speedup finished
 -> Attempting to satisfy build-dependencies
 -> Creating pbuilder-satisfydepends-dummy package
Package: pbuilder-satisfydepends-dummy
Version: 0.invalid.0
Architecture: amd64
Maintainer: Debian Pbuilder Team 
Description: Dummy package to satisfy dependencies with aptitude - created by pbuilder
 This package was created automatically by pbuilder to satisfy the
 build-dependencies of the package being currently built.
Depends: debhelper (>= 8), pkg-php-tools, phpunit (>= 3.6), php-xml-parser
dpkg-deb: building package 'pbuilder-satisfydepends-dummy' in '/tmp/satisfydepends-aptitude/pbuilder-satisfydepends-dummy.deb'.
Selecting previously unselected package pbuilder-satisfydepends-dummy.
(Reading database ... 12534 files and directories currently installed.)
Preparing to unpack .../pbuilder-satisfydepends-dummy.deb ...
Unpacking pbuilder-satisfydepends-dummy (0.invalid.0) ...
dpkg: pbuilder-satisfydepends-dummy: dependency problems, but configuring anyway as you requested:
 pbuilder-satisfydepends-dummy depends on debhelper (>= 8); however:
  Package debhelper is not installed.
 pbuilder-satisfydepends-dummy depends on pkg-php-tools; however:
  Package pkg-php-tools is not installed.
 pbuilder-satisfydepends-dummy depends on phpunit (>= 3.6); however:
  Package phpunit is not installed.
 pbuilder-satisfydepends-dummy depends on php-xml-parser; however:
  Package php-xml-parser is not installed.

Setting up pbuilder-satisfydepends-dummy (0.invalid.0) ...
Reading package lists...
Building dependency tree...
Reading state information...
Initializing package states...
Writing extended state information...
Building tag database...
pbuilder-satisfydepends-dummy is already installed at the requested version (0.invalid.0)
pbuilder-satisfydepends-dummy is already installed at the 

Bug#804050: freetype: new upstream release

[Gianfranco Costamagna]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi,

after irc conversation with mfv I'm attaching the debdiff filtered for
the Debian only directory
(the whole debdiff is around 29MB and even in tar.xz mode is more than
3 MB)

cheers,

G.

On Wed, 11 Nov 2015 17:03:25 +0100 "Matteo F. Vescovi"
 wrote:
> Hi!
> 
> On 2015-11-11 at 15:55 (CET), Andreas Henriksson wrote:
>> Please consider updating freetype to the new upstream release
>> 2.6.1.
>> 
>> As discussed on IRC this fixes graphical issues (very) visible in
>> the GNOME lockscreen (and elsewhere) in Debian Unstable/Testing.
> 
> For the record, I've tested the new version and it builds[1] and
> works[2] just fine.
> 
> So, given that this issue is quite annoying, I'm about uploading
> the linked NMU to DELAYED/10. Steve, I hope it's ok for you.
> 
> Cheers.
> 
> 
> [1]
> http://debomatic-amd64.debian.net/distribution#unstable/freetype/2.6.1
- -0.1/buildlog
>
> 
[2] http://studiovescovi.eu/pub/gnome.png
> 
> -- Matteo F. Vescovi || Debian Developer GnuPG KeyID:
> 4096R/0x8062398983B2CF7A
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=Mt0X
-END PGP SIGNATURE-
--- freetype-2.6/debian/changelog   2015-11-16 15:54:19.0 +0100
+++ freetype-2.6.1/debian/changelog 2015-11-16 15:54:19.0 +0100
@@ -1,3 +1,10 @@
+freetype (2.6.1-0.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * New upstream release (Closes: #804050)
+
+ -- Matteo F. Vescovi   Tue, 10 Nov 2015 21:32:25 +0100
+
 freetype (2.6-2) unstable; urgency=medium
 
   * Adjust symbols references for private symbols to sort to a higher (fake)
--- freetype-2.6/debian/libfreetype6.symbols2015-11-16 15:54:19.0 
+0100
+++ freetype-2.6.1/debian/libfreetype6.symbols  2015-11-16 15:54:19.0 
+0100
@@ -252,6 +252,7 @@
  FT_TrueTypeGX_Validate@Base 2.2.1
  FT_Vector_From_Polar@Base 2.2.1
  FT_Vector_Length@Base 2.2.1
+ FT_Vector_NormLen@Base 2.6.1
  FT_Vector_Polarize@Base 2.2.1
  FT_Vector_Rotate@Base 2.2.1
  FT_Vector_Transform@Base 2.2.1
@@ -259,111 +260,145 @@
  FT_Vector_Unit@Base 2.2.1
  TT_New_Context@Base 2.2.1
  TT_RunIns@Base 2.2.1
- af_arab_dflt_style_class@Base 5.PRIVATE.1
- af_arab_script_class@Base 5.PRIVATE.1
- af_arab_uniranges@Base 5.PRIVATE.1
- af_autofitter_interface@Base 5.PRIVATE.1
- af_beng_dflt_style_class@Base 5.PRIVATE.1
- af_beng_script_class@Base 5.PRIVATE.1
- af_beng_uniranges@Base 5.PRIVATE.1
- af_blue_strings@Base 5.PRIVATE.1
- af_blue_stringsets@Base 5.PRIVATE.1
- af_cjk_writing_system_class@Base 5.PRIVATE.1
- af_cyrl_c2cp_style_class@Base 5.PRIVATE.1
- af_cyrl_c2sc_style_class@Base 5.PRIVATE.1
- af_cyrl_dflt_style_class@Base 5.PRIVATE.1
- af_cyrl_ordn_style_class@Base 5.PRIVATE.1
- af_cyrl_pcap_style_class@Base 5.PRIVATE.1
- af_cyrl_script_class@Base 5.PRIVATE.1
- af_cyrl_sinf_style_class@Base 5.PRIVATE.1
- af_cyrl_smcp_style_class@Base 5.PRIVATE.1
- af_cyrl_subs_style_class@Base 5.PRIVATE.1
- af_cyrl_sups_style_class@Base 5.PRIVATE.1
- af_cyrl_titl_style_class@Base 5.PRIVATE.1
- af_cyrl_uniranges@Base 5.PRIVATE.1
- af_deva_dflt_style_class@Base 5.PRIVATE.1
- af_deva_script_class@Base 5.PRIVATE.1
- af_deva_uniranges@Base 5.PRIVATE.1
- af_dummy_writing_system_class@Base 5.PRIVATE.1
- af_get_char_index@Base 5.PRIVATE.1
- af_get_coverage@Base 5.PRIVATE.1
- af_grek_c2cp_style_class@Base 5.PRIVATE.1
- af_grek_c2sc_style_class@Base 5.PRIVATE.1
- af_grek_dflt_style_class@Base 5.PRIVATE.1
- af_grek_ordn_style_class@Base 5.PRIVATE.1
- af_grek_pcap_style_class@Base 5.PRIVATE.1
- af_grek_script_class@Base 5.PRIVATE.1
- af_grek_sinf_style_class@Base 5.PRIVATE.1
- af_grek_smcp_style_class@Base 5.PRIVATE.1
- af_grek_subs_style_class@Base 5.PRIVATE.1
- af_grek_sups_style_class@Base 5.PRIVATE.1
- af_grek_titl_style_class@Base 5.PRIVATE.1
- af_grek_uniranges@Base 5.PRIVATE.1
- af_gujr_dflt_style_class@Base 5.PRIVATE.1
- af_gujr_script_class@Base 5.PRIVATE.1
- af_gujr_uniranges@Base 5.PRIVATE.1
- af_guru_dflt_style_class@Base 5.PRIVATE.1
- af_guru_script_class@Base 5.PRIVATE.1
- af_guru_uniranges@Base 5.PRIVATE.1
- af_hani_dflt_style_class@Base 5.PRIVATE.1
- af_hani_script_class@Base 5.PRIVATE.1
- af_hani_uniranges@Base 5.PRIVATE.1
- af_hebr_dflt_style_class@Base 5.PRIVATE.1
- 

Bug#805273: zim: The calendar was now journal

[Francois Mescam]

On 16/11/2015 12:08, Raphael Hertzog wrote:

Hello Francois,

On Mon, 16 Nov 2015, Francois Mescam wrote:

Since version 0.65 I noticed that the name of the calendar changed it became 
journal.

It's not practice to have my old calendar under Calendar and the new entries 
under Journal.

If it's not a regression I think it is necessary to explain that change.

I have not seen any change on my side... the top level name used by the
plugin can be configured.

I've not remember I'd change the default name some years ago.

So you can close the bug

Thank's for your rapid help.

Regards


--
 Francois Mescam

Bug#805283: 0install: tries to overwrite file which is also in package 0install-core 2.8-1

[Thomas Leonard]

On 16 November 2015 at 11:26, Vincent Lefevre  wrote:
> Package: 0install
> Version: 2.10-1
> Severity: serious
> Justification: Policy 7.6.1
>
> Upgrade fails of 0install fails with the following error due to
> missing Breaks/Replaces:
>
> Unpacking 0install (2.10-1) over (2.8-1) ...
> dpkg: error processing archive 
> /var/cache/apt/archives/0install_2.10-1_amd64.deb (--unpack):
>  trying to overwrite '/usr/share/applications/0install.desktop', which is 
> also in package 0install-core 2.8-1
> dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)

Hi Vincent,

I've uploaded a new version to mentors which hopefully fixes this:

  https://mentors.debian.net/package/zeroinstall-injector

(the change is 
https://github.com/0install/0install-debian/commit/e09431e23fd050e1e984594f664f9aa664011907)

Chris, would you mind sponsoring this? Sorry...


> -- System Information:
> Debian Release: stretch/sid
>   APT prefers stable-updates
>   APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), 
> (500, 'stable'), (1, 'experimental')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
>
> Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores)
> Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: sysvinit (via /sbin/init)
>
> Versions of packages 0install depends on:
> ii  0install-core2.10-1
> ii  libatk1.0-0  2.18.0-1
> ii  libc62.19-22
> ii  libcairo21.14.4-1
> ii  libfontconfig1   2.11.0-6.3
> ii  libfreetype6 2.6-2
> ii  libgdk-pixbuf2.0-0   2.32.2-1
> ii  libglib2.0-0 2.46.2-1
> ii  libgtk2.0-0  2.24.28-1
> ii  libpango-1.0-0   1.38.1-1
> ii  libpangocairo-1.0-0  1.38.1-1
> ii  libpangoft2-1.0-01.38.1-1
>
> 0install recommends no packages.
>
> 0install suggests no packages.
>
> -- no debconf information



-- 
Dr Thomas Leonardhttp://roscidus.com/blog/
GPG: DA98 25AE CAD0 8975 7CDA  BD8E 0713 3F96 CA74 D8BA

Bug#805285: sogo: Mail from users with apostrophe in name fails with "Unroutable address"

[Keith Edmunds]

Package: sogo
Version: 2.2.9+git20141017-1
Severity: normal
Tags: upstream

Dear Maintainer,

   * What led up to the situation?

Configuration of a user with an apostrophe in the username.

   * What exactly did you do (or not do) that was effective (or
 ineffective)?

Generate outgoing email or calendar requests from this user.

   * What was the outcome of this action?

The mail failed with "Unroutable address"

   * What outcome did you expect instead?

Mail/calendar request to be delivered.


-- This is a copy of the message, including all the headers. --

Return-path: 
Received: from localhost ([127.0.0.1])
by REDACTED.com with esmtp (Exim 4.80)
(envelope-from )
id 1YsplP-000bGK-Mc
for n...@domain.com; Thu, 14 May 2015 10:49:14 +0100
x-sogo-message-type: calendar:invitation
MIME-Version: 1.0
content-type: multipart/mixed; 
boundary="=_=-_OpenGroupware_org_NGMime-68583-1431596951.570516-9--"
date: Thu, 14 May 2015 09:49:11 +
from: "Name With'" 
subject: Event Invitation: "New Event"
to: "Name With'" 
Message-Id: 
X-Spam_score: -0.2
X-Spam_score_int: -1
X-Spam_bar: /

the above is edited to remove personal name of user and system FQDN.

Also reported upstream: http://www.sogo.nu/bugs/view.php?id=3336


-- System Information:
Debian Release: 8.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sogo depends on:
ii  adduser   3.113+nmu3
ii  gnustep-base-runtime  1.24.7-1
ii  libc6 2.19-18+deb8u1
ii  libcurl3-gnutls   7.38.0-4+deb8u2
ii  libgcc1   1:4.9.2-10
ii  libglib2.0-0  2.42.1-1
ii  libgnustep-base1.24   1.24.7-1
ii  libgnutls-deb0-28 3.3.8-6+deb8u3
ii  liblasso3 2.4.1-1
ii  libmemcached111.0.18-4
ii  libobjc4  4.9.2-10
ii  libsbjson2.3  2.3.2-2+b1
ii  libsope1  2.2.9-2
ii  sogo-common   2.2.9+git20141017-1
ii  systemd   215-17+deb8u2
ii  tmpreaper 1.6.13+nmu1
ii  zip   3.0-8

sogo recommends no packages.

Versions of packages sogo suggests:
ii  mysql-server  5.5.46-0+deb8u1
ii  postgresql9.4+169.pgdg70+1

-- Configuration Files:
/etc/default/sogo changed:
PREFORK=10

/etc/sogo/sogo.conf [Errno 13] Permission denied: u'/etc/sogo/sogo.conf'

-- no debconf information

Bug#805286: RM: sane-backends/experimental -- NVIU; Newer version at unstable (exp.: 1.0.25+git20150927-1 vs unstable: 1.0.25-2)

[Jörg Frings-Fürst]

Package: ftp.debian.org
Severity: normal

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hello,

please remove sane-backends from experimental.

A newer version is uploaded into unstable.


Many thanks.

CU
Jörg




-BEGIN PGP SIGNATURE-
Version: GnuPG v1
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=oUZw
-END PGP SIGNATURE-

Bug#805290: ITP: libjs-requirejs-plugins -- small set of plugins for RequireJS

[Thomas Goirand]

Package: wnpp
Severity: wishlist
Owner: Thomas Goirand 

* Package name: libjs-requirejs-plugins
  Version : 1.0.3
  Upstream Author : Miller Medeiros 
* URL : https://github.com/millermedeiros/requirejs-plugins
* License : Expat
  Programming Lang: JavaScript
  Description : small set of plugins for RequireJS

 RequireJS uses plain script tags to load modules/files, so it should allow for
 easy debugging. It can be used simply to load existing JavaScript files so one
 can add it to existing project without having to re-write JavaScript files.
 .
 RequireJS includes an optimization tool one can run as part of packaging steps
 for deploying code. The optimization tool can combine and minify JavaScript
 files to allow for better performance.
 .
 This package contains a small set of plugins for RequireJS:
  * async: Useful for JSONP and asynchronous dependencies (e.g. Google Maps).
  * font: Load web fonts using the WebFont Loader API: requires propertyParser
  * goog: Load Google APIs asynchronously (requires async! plugin and
propertyParser).
  * image: Load image files as dependencies. Option to "cache bust".
  * json: Load JSON files and parses the result. (Requires text! plugin).
  * mdown: Load Markdown files and parses into HTML. (Requires text! plugin
and a markdown converter).
  * noext: Load scripts without appending ".js" extension, useful for
dynamic scripts.

This is a new dependency for OpenStack Fuel.

Bug#805201: gnumail: FTBFS: /usr/bin/ld: cannot find -lAddresses

[Eric Heintzmann]

On Mon, 16 Nov 2015 13:19:39 +0100 Eric Heintzmann 
 wrote:


> >
> > /usr/bin/ld: cannot find -lAddresses
> > /usr/bin/ld: cannot find -lAddressView
> > collect2: error: ld returned 1 exit status
> At first glance, there are strange problems of symlinks in
> libaddresses-dev and libddressview-dev packages.
> I can correct the problems and prepare new packages( just need a 
sponsor).

>
> Eric
>
>

 I've prepared new packages for addresses-for-gnustep
(see them at : http://eh666.free.fr/GNUstep/addresses-for-gnustep/index.php)
GNUMail seems to build fine against them.

Thanks
Eric

Bug#805289: Please upgrade to 2.4.0

[Jonas Smedegaard]

Hi Thomas,

Quoting Thomas Goirand (2015-11-16 14:24:09)
> Severity: important

Normal severity is "wishlist" for requests of newer upstream release.

If you believe this needs special treatment, then please provide 
arguments why that common rule should be side-stepped.


> I need version 2.4.0 of libjs-less for OpenStack Fuel. Please package 
> it. Please let me know if it is ok that I do the work in Experimental 
> first, then you can review the package and upload to Sid.

Recent Less.js has dependencies not yet packaged for Debian.

You are quite welcome helping by packaging those.

You are also quite welcome to help co-maintain less.js packaging, if you 
are ok with its current style of packaging (CDBS and git-buildpackage), 
as documented in README.source.  In that case yes, targeting 
experimental first is good.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


signature.asc
Description: signature

Bug#804690: texlive-fonts-extra: Please switch to fonts-noto from fonts-droid

[Norbert Preining]

Hi Vasudev,

> I think it would also be good idea to inform upstream about future of
> Droid fonts from upstream perspective. I know there are some rendering

That is unfortunately not a problem of upstream (TeX Live), but 
a problem of up-upstream, those who submit packages to CTAN.
I am not sure what will happen, but basically I simply follow
the TeX Live packaging, and if there is a change, I will follow it.
If not, not.

All the best

Norbert


PREINING, Norbert   http://www.preining.info
JAIST, Japan TeX Live & Debian Developer
GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0  ACF0 6CAC A448 860C DC13

Bug#804694: libqt5xcbqpa5 SIGSEGV crashes sporadically at QXcbWindow::handleClientMessageEvent

[Dmitry Shachnev]

Hi Markus,

On Mon, Nov 16, 2015 at 11:30:34AM +0100, Markus Frosch wrote:
> Thanks for your efforts.
> 
> It seems like the bug vanished kind of.
> 
> Quassel sometimes still goes away, but without a SIGSEGV, this is another 
> problem.
> 
> I updated gnome and mutter due to other problems to the unstable versions 
> (3.18.2-1) last week. Since then it seems to be okay. So maybe
> the QT crash was caused by an error with the window manager.
> 
> And yes, I have a multi-monitor setup. With a notebook I'm moving to multiple 
> workplaces.

Qt has some known problems with multi-monitor setup right now. According to
Alexander at the upstream bug I filed, it should be fixed when [1] is merged.

[1]: https://codereview.qt-project.org/138201

--
Dmitry Shachnev


signature.asc
Description: PGP signature

Bug#804830: silversearcher-ag: can not install when emacs23 is installed

[Tatsuya Kinoshita]

Control: reassign -1 silversearcher-ag-el 0.46-1
Control: tags -1 + patch

On November 11, 2015 at 10:58PM -0800, acmay_deb (at acmay.org) wrote:
> Install silversearcher-ag-el for emacs23
> ERROR: install script from silversearcher-ag-el package failed

To prevent this error, please skip byte-compilation when
unsupported flavor in the emacsen-install script.

```
--- a/debian/emacsen-install
+++ b/debian/emacsen-install
@@ -8,8 +8,11 @@
 FLAVOR=$1
 PACKAGE=silversearcher-ag-el
 
-if [ ${FLAVOR} = emacs ]; then exit 0; fi
-if [ ${FLAVOR} = xemacs21 ]; then exit 0; fi
+case $FLAVOR in
+emacs|*xemacs*|emacs23|emacs22|emacs21|emacs20|emacs19|mule2)
+exit 0
+;;
+esac
 
 echo install/${PACKAGE}: Handling install for emacsen flavor ${FLAVOR}
 
```

Thanks,
--
Tatsuya Kinoshita


pgpLYZqQvoWJS.pgp
Description: PGP signature

Bug#367890: rubber: does not reconvert Dia files to EPS on update

[Hilmar Preusse]

On 18.05.06 Bram Senders (b...@luon.net) wrote:

Hi Bram,

https://bugs.debian.org/367890

> Package: rubber
> Version: 1.1-1
> Severity: normal
> 
Meanwhile we're on version 1.3-1. Is your problem still reproducible?

> Rubber can convert Dia files to EPS automatically, which is nice. 
> However, if I edit a Dia file that has previously been converted to
> EPS by Rubber, and I run Rubber again, then the EPS file is not
> updated to reflect the changes in the Dia file (even though the
> timestamp on the Dia file is newer than that on the EPS file).  I
> have to manually remove the EPS file and run Rubber again to see
> the changes reflected in my document.
> 

Thanks,
  Hilmar
-- 
sigmentation fault


signature.asc
Description: PGP signature

Bug#805283: 0install: tries to overwrite file which is also in package 0install-core 2.8-1

[Chris Lamb]

Hi Thomas & Vincent,

> https://github.com/0install/0install-debian/commit/e09431e23fd050e1e984594f664f9aa664011907)
> 
> Chris, would you mind sponsoring this? Sorry...

No problem whatsoever:

Uploading to ftp-master (via ftp to ftp.upload.debian.org):
  Uploading zeroinstall-injector_2.10-2.dsc: done.
  Uploading zeroinstall-injector_2.10.orig.tar.bz2: done.
  Uploading zeroinstall-injector_2.10-2.debian.tar.xz: done.
  Uploading 0install-core_2.10-2_amd64.deb: done.
  Uploading 0install_2.10-2_amd64.deb: done.
  Uploading zeroinstall-injector_2.10-2_all.deb: done.
  Uploading zeroinstall-injector_2.10-2_amd64.changes: done.
Successfully uploaded packages.


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-

Bug#805292: gtkpod: Can't see menus when adding track filter in preferences

[Aki Koskinen]

Subject: gtkpod: Can't see menus when adding track filter in preferences
Package: gtkpod
Version: 2.1.5-1
Severity: normal

Dear Maintainer,

When I try to add a track filter in:
Preferences --> Track display --> Displayed  Columns --> Add

Add Columns window opens but no items are visible and can not be selected.

Please see attached picture. Is this a known bug and can it be fixed?

Best regards,

Aki Koskinen


-- System Information:
Debian Release: 8.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'squeeze-lts'), (500,
'stable'), (500, 'oldstable')
Architecture: i386 (i686)

Kernel: Linux 4.2.0-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gtkpod depends on:
ii  dpkg1.17.25
ii  gtkpod-data 2.1.5-1
ii  libanjuta-3-0   2:3.18.2-1
ii  libatk1.0-0 2.18.0-1
ii  libatomicparsley0   2.1.5-1
ii  libc6   2.19-22
ii  libcairo-gobject2   1.14.0-2.1
ii  libcairo2   1.14.0-2.1
ii  libclutter-1.0-01.24.2-1
ii  libclutter-gtk-1.0-01.6.6-1
ii  libcogl-pango20 1.22.0-1
ii  libcogl-path20  1.22.0-1
ii  libcogl20   1.22.0-1
ii  libcurl3-gnutls 7.38.0-4+deb8u2
ii  libdrm2 2.4.58-2
ii  libegl1-mesa [libegl1-x11]  10.3.2-1+deb8u1
ii  libflac81.3.0-3
ii  libgbm1 10.3.2-1+deb8u1
ii  libgdk-pixbuf2.0-0  2.31.1-2+deb8u3
ii  libgdl-3-5  3.18.0-1
ii  libglib2.0-02.46.1-1
ii  libgpod40.8.3-1.1+b1
ii  libgstreamer-plugins-base1.0-0  1.4.4-2
ii  libgstreamer1.0-0   1.4.4-2
ii  libgtk-3-0  3.18.2-1
ii  libgtkpod1  2.1.5-1
ii  libid3tag0  0.15.1b-11
ii  libimobiledevice4   1.1.6+dfsg-3.1
ii  libjavascriptcoregtk-3.0-0  2.4.8-2
ii  libjson-glib-1.0-0  1.0.2-1
ii  libpango-1.0-0  1.38.1-1
ii  libpangocairo-1.0-0 1.38.1-1
ii  libsoup2.4-12.48.0-1
ii  libvorbisfile3  1.3.4-2
ii  libwayland-client0  1.6.0-2
ii  libwayland-cursor0  1.6.0-2
ii  libwayland-egl1-mesa [libwayland-egl1]  10.3.2-1+deb8u1
ii  libwayland-server0  1.6.0-2
ii  libwebkitgtk-3.0-0  2.4.8-2
ii  libx11-62:1.6.2-3
ii  libxcomposite1  1:0.4.4-1
ii  libxdamage1 1:1.1.4-2+b1
ii  libxext62:1.3.3-1
ii  libxfixes3  1:5.0.1-2+b2
ii  libxi6  2:1.7.4-1+b2
ii  libxkbcommon0   0.5.0-1
ii  libxml2 2.9.2+zdfsg1-4
ii  libxrandr2  2:1.5.0-1
ii  zlib1g  1:1.2.8.dfsg-2+b1

Versions of packages gtkpod recommends:
ii  id3v2 0.1.12-2.1+b1
ii  vorbis-tools  1.4.0-7

Versions of packages gtkpod suggests:
pn  faad 
pn  lame 
pn  mp3gain  
ii  perl 5.20.2-3+deb8u1
ii  python   2.7.9-1

-- no debconf information

Bug#804912: error 530: discloses whether usernames are valid or not!!!

[PICCORO McKAY Lenz]

Hi Jörg.. this bug are very rare.. in my system i have invalid shells
for the users.. so i disabel the shell in pam..

after a weekend i found in vsftp documentation that the shells are
verified by the vsftpd, the option corresponding are check_shell and i
cited the manpage:

check_shell
  Note!  This  option  only  has  an  effect  for  non-PAM
builds of vsftpd. If disabled,
  vsftpd will not check /etc/shells for a valid user shell
for local logins.
  Default: YES

2015-11-13 16:03 GMT-04:30 Jörg Frings-Fürst :
> I have test vsftpd on a fresh installed Debian testing and I can't
> reproduce this bug.
For this u must mark with invalid shell all users or the user, and
make local users login enabled
>
> Is this ok: After comment out the line "authrequiredpam
> _shells.so" the user can login?
YES! but now with the option in config file "check_shell" to "NO"
works, this its the right thing, my users does not have login shell
and login are disabled!

>
> To reproduce this bug I want to build a system like yours.
>
> Please can you send direct to my mail address:
>
> Your vsftpd.conf,
> all files from /etc/pam.d,
> the output of dpkg --get-selections.
Not necesary, solved with added to config file the check_shell=NO

To reproduce the only u must done are setup all users have /bin/false
or /bin/none as shell (invalid shell or no login capable) .. the pam
module also the vsftp itselft try to verify valid shell (see
documentation), but this must be documented if users have special
restrictions, and maybe must be foward upstream to the FAQ of the
vsftp.. due its a common problem that happened due lack of
documentation!

For reproduce to u, u must setup users with no login capabilites
(disable login, or invalid sehlls)

Bug#805167: rpcbind: Regression: must restart rpc bind to run ypbind (nis)

[Elimar Riesebieter]

Control: retitle -1 "Regression: rpcbind doesn't start at boottime on systemd 
controlled machines."

Does Control accept a '\' at a line break?

Hm
-- 
 We all know Linux is great... it does infinite loops in 5 seconds.
-Linus Torvalds

Bug#805265: libqt5network5: Sporadic segfault on exit in QNetworkConfigurationManagerPrivate::pollEngines()

[Dmitry Shachnev]

Control: tags -1 +pending

Hi Florian,

On Mon, Nov 16, 2015 at 08:21:10AM +0100, Florian Bruhin wrote:
> I'd be glad if the patch could be backported:
> 
> http://code.qt.io/cgit/qt/qtbase.git/patch/?id=3f0f707d4b898a96e63e16c13a29f12be01d9b4c

Committed to our packaging repository [1]. If there will be a new upload
to Jessie, then this fix will be included there.

[1]: 
http://anonscm.debian.org/cgit/pkg-kde/qt/qtbase.git/commit/?h=jessie=cce5993e958b0942

--
Dmitry Shachnev


signature.asc
Description: PGP signature

Bug#720603: closed by Sebastian Ramacher <sramac...@debian.org> (Re: Bug#720603: missing files in devel package)

[PICCORO McKAY Lenz]

umm but backports not was included in normal flavors since wheeze a some
months ago?

its hard to understand that changes...

well i copy the mail and sended to backports mails... (the prvious mail)

Lenz McKAY Gerardo (PICCORO)
http://qgqlochekone.blogspot.com

2015-11-16 13:04 GMT-04:30 Fabian Greffrath :

> Hello,
>
> Am Montag, den 16.11.2015, 12:00 -0430 schrieb PICCORO McKAY Lenz:
> > seems that liblivemedia backports for squeeze do not have all files,
> > but wors its that Sebastian Ramacher does not help so much, he can
> > made a forward mail event "close" the bug! what a help!
>
> This is not Sebastian's fault. We cannot track bugs for backported
> packages in the regular Debian bug tracker. This is why he pointed you
> to this document ...
>
> > > For bugs in backported packages please contact debian-backports@lis
> > > ts.debian.org
> > > as described at [1].
> > >
> > > Cheers
> > >
> > > [1] http://backports.debian.org/FAQ/
>
> ... which properly describes what to do in this case.
>
> If you don't read this, it's hardly his fault.
>
>  - Fabian
>

Bug#642349:

[Guillaume Hoffmann]

This is solved since Darcs 2.10.0.

Bug#805295: octave: Plot to file without X display does not work

[Djalil Chafai]

Package: octave
Version: 4.0.0-5+b1
Severity: normal

Dear Maintainer,

consider the following code stored in file plotest.m

# begin
graphics_toolkit('gnuplot')
set(0, 'defaultfigurevisible', 'off');
plot(sin(1:100));
print("plotest.jpg", "-djpg")
# end

bash> export DISPLAY=
bash> octave plotest.m

The image file plotest.jpg contains a fully black figure. It should not.

Best wishes.

-- System Information:
Debian Release: 8.1
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages octave depends on:
ii  libamd2.3.11:4.2.1-3
ii  libarpack2 3.1.5-3
ii  libasound2 1.0.28-1
ii  libblas3 [libblas.so.3]1.2.20110419-10
ii  libc6  2.19-18
ii  libcamd2.3.1   1:4.2.1-3
ii  libccolamd2.8.01:4.2.1-3
ii  libcholmod2.1.21:4.2.1-3
ii  libcolamd2.8.0 1:4.2.1-3
ii  libcxsparse3.1.2   1:4.2.1-3
ii  libfftw3-double3   3.3.4-2
ii  libfftw3-single3   3.3.4-2
ii  libfltk-gl1.3  1.3.3-3
ii  libfltk1.3 1.3.3-3
ii  libfontconfig1 2.11.0-6.3
ii  libfreetype6   2.5.2-3
ii  libgcc11:4.9.2-10
ii  libgl1-mesa-glx [libgl1]   10.6.3-1
ii  libglpk36  4.55-1
ii  libglu1-mesa [libglu1] 9.0.0-2
ii  libgomp1   4.9.2-10
ii  libgraphicsmagick++-q16-12 1.3.23-1
ii  libgraphicsmagick-q16-31.3.21-4
ii  liblapack3 [liblapack.so.3]3.5.0-4
ii  liboctave3v5   4.0.0-5+b1
ii  libopenblas-base [liblapack.so.3]  0.2.12-1
ii  libosmesa6 10.6.3-1
ii  libportaudio2  19+svn20140130-1
ii  libqhull6  2012.1-5
ii  libqrupdate1   1.1.2-1
ii  libqscintilla2-12v52.9+dfsg-9
ii  libqt4-network 4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libqt4-opengl  4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libqtcore4 4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libqtgui4  4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libsndfile11.0.25-9.1
ii  libstdc++6 5.2.1-22
ii  libumfpack5.6.21:4.2.1-3
ii  libx11-6   2:1.6.2-3
ii  octave-common  4.0.0-5
ii  texinfo5.2.0.dfsg.1-6

Versions of packages octave recommends:
ii  default-jre-headless  2:1.7-52
ii  gnuplot-x11   4.6.6-2
ii  libopenblas-base  0.2.12-1
ii  octave-info   3.8.2-4
ii  pstoedit  3.62-2+b1

Versions of packages octave suggests:
ii  octave-doc  3.8.2-4
pn  octave-htmldoc  

-- no debconf information

Bug#805264: What I expected to to happen with gmpy2.mpz/gmpy2.xmpz

[David George Henderson III]

What I'm attempting to do is perform a dot product of an int32 array 
with a list of mpz integers.


z=np.zeros(10,np.int32)
y=[gmpy.mpz[1] *10 ]

summation = gmp.xmpz(0)
for i in range(0,10):
product = gmpy2.xmpz(z[i])
product *= y[i]
summation += product

The bug prevents this from running.

My workaround defeats the purpose of using gmpy2.xmpz typed variables :

for i in range(0,10):
product = gmpy2.xmpz(int(z[i]))

Bug#789077: ruby2.2 transition: about to switch the default in unstable

[Antonio Terceiro]

On Mon, Nov 16, 2015 at 07:57:05PM +0100, Emilio Pozuelo Monfort wrote:
> On 10/11/15 19:49, Emilio Pozuelo Monfort wrote:
> > On 09/11/15 10:21, Emilio Pozuelo Monfort wrote:
> >> On 08/11/15 23:44, Christian Hofstaedtler wrote:
> >>> FTR, we're now down to just subversion, uwsgi and zeroc-ice.
> >>>
> >>> James and Antonio are making some progress with subversion in
> >>> #803589, but it appears to be more tricky (and upstream has no fix
> >>> yet).
> >>>
> >>> zeroc-ice has an upstream fix, but the delta is too large for me to
> >>> backport it as part of an NMU.
> >>>
> >>> Haven't heard back yet from the uwsgi team.
> >>
> >> Thanks for the update.
> >>
> >> You can make those bugs serious now as this is imminent. Let us know once
> >> subversion is fixed.
> > 
> > You can go ahead with the default switch.
> 
> ruby-defaults migrated over the weekend. I guess the next step is dropping
> ruby2.1 from the list of supported interpreters and then binNMUing the 
> packages
> that depend on both libruby2.1 and libruby2.2, so we can get rid of ruby2.1?

Yes. Do you want to create a new transition tracker for that, or change
the existing one?

-- 
Antonio Terceiro 


signature.asc
Description: PGP signature

Bug#805294: uninstalling does not remove /etc/apt/apt.conf.d/20listdifferences

[Caitlin Matos]

Package: apt-listdifferences
Version: 1.20141011
Severity: normal

I have recently uninstalled apt-listdifferences. Now, when I run apt, I see:
/bin/sh: 1: /usr/bin/apt-listdifferences: not found

This appears after the package is downloaded (Get:) but before it says
"Preconfiguring packages...".

It is occurring because /etc/apt/apt.conf.d/20listdifferences still exists.
Removing this file removes the message.

Please add this to the postrm script.

Thanks,
Caitlin



-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages apt-listdifferences depends on:
ii  debconf [debconf-2.0]  1.5.57
ii  debian-keyring 2015.08.13
ii  devscripts 2.15.9
ii  python33.4.3-7
ii  python3-apt1.0.1
ii  python3-debian 0.1.27

Versions of packages apt-listdifferences recommends:
ii  diffstat  1.60-1

apt-listdifferences suggests no packages.

Bug#805249: pyparted: FTBFS: PartedException: Unknown disk flag, 1000.

[solo-debianbugs]

Hmm.

I re-test things on my local builder before reporting them, so I've
definitely been able to reproduce this failure.  My builder is much
more normal than jenkins: it uses apt to resolve packages, and things
like that.

If you don't have any ideas then I can run the build a few more times
and see if I can catch what's up.

Bug#801606: Placnet packaged for Debian [ftpmas...@ftp-master.debian.org: placnet_1.03-1_amd64.changes REJECTED]

[Andreas Tille]

Hi,

on behalf of the Debian Med team that is creating official Debian
packages of software relevant in biology I have packaged placnet[1].
Unfortunately before it will be accepted in Debian there is some need
for clarification of the license.

At the bottom of the placnet web page[2] the license "Creative Commons
Attribution License" is mentioned.  However there are different versions
of this license that make a difference dor fistributors.  Our ftpmaster
considers this link

https://spdx.org/licenses/CC-BY-4.0

as the text which is potentially intended as license text but I would
like to ask you for confirmation that this is true.

Kind regards

   Andreas.

[1] http://blends.debian.org/med/tasks/bio#placnet
[2] http://sourceforge.net/projects/placnet/

- Forwarded message from Thorsten Alteholz 
 -

Date: Mon, 16 Nov 2015 17:00:13 +
From: Thorsten Alteholz 
To: Debian Med Packaging Team , 
Andreas Tille 
Subject: placnet_1.03-1_amd64.changes REJECTED


Hi Andreas,

unfortunately I didn't find any license/copyright information in the source 
tarball.

According to the website the license is CC-BY. As the software has been 
developed 
long after CC-4.0 has been released, I am wondering why you put CC-BY-3.0 in 
your 
debian/copyright.

So I am afraid there is need for clarification.

  Thorsten

===

Please feel free to respond to this email if you don't understand why
your files were rejected, or if you upload new files which address our
concerns.


___
Debian-med-packaging mailing list
debian-med-packag...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/debian-med-packaging


- End forwarded message -

-- 
http://fam-tille.de

Bug#804554: fonts-hack-otf: new upstream release 2.018

[Fabian Greffrath]

Hey Paride,

Am Montag, den 16.11.2015, 17:08 +0100 schrieb Paride Legovini:
> I uploaded 2.018 to mentors a few days ago, is any other action
> required
> from my part? Perhaps I should have pinged you !about this! If there
> is
> any problem let me know.

Just leave a note on the pkg-fonts list or in the bug requesting the
new upstream version that you have already prepared a package and where
it can be found. We are not automatically informed if updated packages
a uploaded to mentors.d.o.

> I'm currently not maintaining the package in a git repository, as it
> is
> quite simple, but I agree it's a good idea to move it to a Debian git
> repo.

Let's get this version into unstable first, then we can take care of
the git repo. I'll have a look at it tomorrow.

Cheers,

Fabian




signature.asc
Description: This is a digitally signed message part

Bug#720603: closed by Sebastian Ramacher <sramac...@debian.org> (Re: Bug#720603: missing files in devel package)

[Fabian Greffrath]

Hello,

Am Montag, den 16.11.2015, 12:00 -0430 schrieb PICCORO McKAY Lenz:
> seems that liblivemedia backports for squeeze do not have all files,
> but wors its that Sebastian Ramacher does not help so much, he can
> made a forward mail event "close" the bug! what a help!

This is not Sebastian's fault. We cannot track bugs for backported
packages in the regular Debian bug tracker. This is why he pointed you
to this document ...

> > For bugs in backported packages please contact debian-backports@lis
> > ts.debian.org
> > as described at [1].
> > 
> > Cheers
> > 
> > [1] http://backports.debian.org/FAQ/

... which properly describes what to do in this case.

If you don't read this, it's hardly his fault.

 - Fabian


signature.asc
Description: This is a digitally signed message part

Bug#805296: please add support for external filters

[Thadeu Lima de Souza Cascardo]

Package: privoxy
Version: 3.0.23-4
Severity: wishlist

External filters are useful for some situations, like replacing files or
analyzing the files content and replacing or doing appropriate changes
to them. Adding --enable-external-filters to debian/rules does that for
me, but I would love to have it enabled in Debian proper.

I know the feature is experimental, but if we don't ship packages for
people to experiment with the feature, then it's harder to make it
stable. Besices, users can just not use it in their configuration, if
they find it too risky.

Thanks.
Cascardo.


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages privoxy depends on:
ii  adduser  3.113+nmu3
ii  init-system-helpers  1.24
ii  initscripts  2.88dsf-59.2
ii  libc62.19-22
ii  libpcre3 2:8.35-7.4
ii  logrotate3.8.7-2
ii  lsb-base 9.20150917
ii  zlib1g   1:1.2.8.dfsg-2+b1

Versions of packages privoxy recommends:
ii  doc-base  0.10.6

privoxy suggests no packages.

-- Configuration Files:
/etc/privoxy/config changed [not included]
/etc/privoxy/user.action changed [not included]

-- no debconf information

Bug#804802: RFS: libjdns-qt5/2.0.3-1 [ITP]

[Gianfranco Costamagna]

control: merge 804802 804801
control: owner -1 !
control: tags -1 moreinfo

Hi

according to dsc file:
d0da8d9af9e94f2e4de2943abb49ef7a72fb4fed 67767 libjdns-qt5_2.0.3.orig.tar.bz2
d0da8d9af9e94f2e4de2943abb49ef7a72fb4fed 67767 libjdns_2.0.3.orig.tar.bz2

please don't create two src:libjdns* packages, but use only one to build the 
two qt flavours.
(not sure if I already answered somewhere in another mail, but this should make 
easier to work
on the package)

let me know if you need help in overriding the dh_auto_build or dh_*_install 
targets.

cheers,

G.

Bug#805167: rpcbind: Regression: must restart rpc bind to run ypbind (nis)

[Elimar Riesebieter]

Control: retitle -1 "Regression: rpcbind doesn't start at boottime
on systemd controlled machines."

* Elimar Riesebieter  [2015-11-15 13:56 +0100]:

> Package: rpcbind
> Version: 0.2.3-0.2
> Severity: important
> 
> Can't run nis:
> # ypbind -no-dbus -broadcast -debug
> 1679: add_server() domain: mynisdomain, broadcast
> 1679: [Welcome to ypbind-mt, version 1.20.1]
> 1679: ping interval is 20 seconds
> Cannot register service: RPC: Unable to receive; errno = Connection refused
> 1679: Unable to register (YPBINDPROG, YPBINDVERS, udp).
> 
> Restarting rpc bind gets me back to restart nis successfull.

It is not a restart. rpcbind doesn't start at bottime at all!

> # service rpcbind restart
> # service nis restart

Running 

# systemctl start rpcbind
# service nis start

Works as well. nis package doesn't provide a service file.


> Reverting to rpcbind 0.2.1-6.1 solves the problem. Please notice
> that this happens only on systemd machines.

The systemd systems I've found this behavior are booting via
GRUB option:

GRUB_CMDLINE_LINUX_DEFAULT="init=/lib/systemd/systemd systemd.show_status=true"

> Running sysvinit only doesn't show this behaviour.

Elimar

-- 
 We all know Linux is great... it does infinite loops in 5 seconds.
-Linus Torvalds

Bug#805298: Updated debconf PO Catalan translation for the package unattended-upgrades 0.86.6

[Innocent De Marchi]

Package: unattended-upgrades
Version: 0.86.6
Severity: wishlist

This is the updated version of the Catalan debconf PO file.

Thanks!

I. De Marchi


ca.po.gz
Description: application/gzip


pgp0Zinja1j7Q.pgp
Description: Signatura digital OpenPGP

Bug#805297: python-ceres: FTBFS: ImportError: No module named mock

[Chris West (Faux)]

Source: python-ceres
Version: 0.10.0~git20150525-1
Severity: serious
Justification: fails to build from source
Tags: sid stretch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: ftbfs
X-Debbugs-CC: reproducible-bui...@lists.alioth.debian.org

Dear Maintainer,

The package fails to build:

I: pybuild base:184: cd 
'/python-ceres-0.10.0~git20150525/.pybuild/pythonX.Y_2.7/build'; python2.7 -m 
unittest discover -v 
tests.test_ceres (unittest.loader.ModuleImportFailure) ... ERROR

==
ERROR: tests.test_ceres (unittest.loader.ModuleImportFailure)
--
ImportError: Failed to import test module: tests.test_ceres
Traceback (most recent call last):
  File "/usr/lib/python2.7/unittest/loader.py", line 254, in _find_tests
module = self._get_module_from_name(name)
  File "/usr/lib/python2.7/unittest/loader.py", line 232, in 
_get_module_from_name
__import__(name)
  File "tests/test_ceres.py", line 8, in 
from mock import ANY, Mock, call, mock_open, patch
ImportError: No module named mock


--
Ran 1 test in 0.000s

FAILED (errors=1)

Full build log:
https://reproducible.debian.net/rb-pkg/unstable/amd64/python-ceres.html

-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Bug#805301: python-mpi4py: Dangling symlink

[Torquil Macdonald Sørensen]

Package: python-mpi4py
Version: 1.3.1+hg20131106-2+b1
Severity: important

python-pmi4py seems to install a dangling symlink. On my system
I have the dangling symlink:

$ ls -l /usr/include/mpi4py
lrwxrwxrwx 1 root root 39 Oct  3 01:02 /usr/include/mpi4py -> 
../share/pyshared/mpi4py/include/mpi4py

The target doesn't exist.

Best regards
Torquil Sørensen

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (990, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages python-mpi4py depends on:
ii  libc62.19-22
ii  libhwloc51.11.1-1
ii  libopenmpi1.61.6.5-11
ii  mpi-default-bin  1.0.2+nmu2
ii  python   2.7.9-1

python-mpi4py recommends no packages.

Versions of packages python-mpi4py suggests:
ii  python-numpy  1:1.9.2-5

-- no debconf information

Bug#801721: pyfaidx package for Debian [ftpmas...@ftp-master.debian.org: python-pyfaidx_0.4.2-1_amd64.changes REJECTED]

[Andreas Tille]

Hi,

the Debian Med team is trying to package all relevant free biological
software for main Debian.  I have created packages from pyfaidx for the
so called task for development of biological applications[1].

Unfortunately it was not yet accepted since there are different licenses
mentioned in the LICENSE file (BSD 3 clause) and setup.py which
mentiones MIT.

Could you please clarify what license is valid for the whole package?

Kind regards and thanks for providing pyfaidx as free software

   Andreas.


[1] http://blends.debian.org/med/tasks/bio-dev#python-pyfaidx

- Forwarded message from Thorsten Alteholz 
 -

Date: Mon, 16 Nov 2015 17:00:13 +
From: Thorsten Alteholz 
To: Debian Med Packaging Team , 
Andreas Tille 
Subject: python-pyfaidx_0.4.2-1_amd64.changes REJECTED


Hi Andreas,

LICENSE and setup.py seem to be divided over the license/copyright information. 
Can you please clarify with upstream who is right?

Thanks!
 Thorsten

===

Please feel free to respond to this email if you don't understand why
your files were rejected, or if you upload new files which address our
concerns.


___
Debian-med-packaging mailing list
debian-med-packag...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/debian-med-packaging


- End forwarded message -

-- 
http://fam-tille.de

Bug#805093: transition: qpdf

[Emilio Pozuelo Monfort]

Control: tags -1 confirmed

On 14/11/15 17:41, Jay Berkenbilt wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: transition
> 
> The latest version of qpdf includes an soname bump. The qpdf
> transition is very small. The only other source package with a
> dependency on libqpdf is cups-filters. qpdf 6.0.0 with libqpdf17 has
> already passed the NEW and is waiting in experimental. As soon as I
> get the green light, I can upload to unstable and a rebuild of
> cups-filters can be triggered. This is completely source compatible
> with the pervious versions.

Go ahead.

Emilio

Bug#805302: qtcreator: hangs when parsing code using c++11 STL vector

[Dominik Wójt]

Package: qtcreator
Version: 3.5.1+dfsg-2
Severity: normal

Dear Maintainer,

The issue can be reporduced using the attached CMakeLists.txt and
qt_creator_hang.cpp files. The code itself is non-sensical, but seems to be
synctatically valid and gets compiled cleanly. It has been extracted from a
much longer sorce file.

Once the project is opened with QtCrator and qt_creator_hang.cpp is opened in
editor, htop shows 100% cpu usage on one core. When user tries to edit the
qt_creator_hang.cpp file additional threads are spawned and all available cpu
cores are getting full load. Though QtCreator seems to continue to work
correctly, it connot be cleanly closed once the issue appears.

The issue is not observed, when the following line is skipped in
CMakeLists.txt.
set( CMAKE_CXX_FLAGS ${CMAKE_CXX_FLAGS} "-std=c++11" )
With the above line skipped QtCreator also get 100% usage after opening the
qt_creator_hang.cpp, but the load drops in a few seconds. Also, when editing
the file additional threads are being spawned and additional cores are being
employed, but the load drops back to low after a few seconds without input.

Regards,
Dominik Wójt

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=pl_PL.utf8, LC_CTYPE=pl_PL.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages qtcreator depends on:
ii  libbotan-1.10-1   1.10.10-6+b1
ii  libc6 2.19-22
ii  libclang1-3.6 1:3.6.2-3
ii  libgcc1   1:5.2.1-23
ii  libqbscore1   1.4.3+dfsg-3
ii  libqbsqtprofilesetup1 1.4.3+dfsg-3
ii  libqt5concurrent5 5.5.1+dfsg-6
ii  libqt5core5a [qtbase-abi-5-5-1]   5.5.1+dfsg-6
ii  libqt5designer5   5.5.1-3
ii  libqt5designercomponents5 5.5.1-3
ii  libqt5gui55.5.1+dfsg-6
ii  libqt5help5   5.5.1-3
ii  libqt5network55.5.1+dfsg-6
ii  libqt5printsupport5   5.5.1+dfsg-6
ii  libqt5qml5 [qtdeclarative-abi-5-5-0]  5.5.1-3
ii  libqt5quick5  5.5.1-3
ii  libqt5quickwidgets5   5.5.1-3
ii  libqt5sql55.5.1+dfsg-6
ii  libqt5sql5-sqlite 5.5.1+dfsg-6
ii  libqt5webkit5 5.5.1+dfsg-2
ii  libqt5widgets55.5.1+dfsg-6
ii  libqt5xml55.5.1+dfsg-6
ii  libstdc++65.2.1-23
ii  qml-module-qtquick-controls   5.5.1-2
ii  qml-module-qtquick2   5.5.1-3
ii  qtchooser 52-gae5eeef-2
ii  qtcreator-data3.5.1+dfsg-2

Versions of packages qtcreator recommends:
ii  gdb   7.10-1
ii  make  4.0-8.2
pn  qt5-doc   
ii  qtbase5-dev-tools 5.5.1+dfsg-6
ii  qtcreator-doc 3.5.1+dfsg-2
ii  qtdeclarative5-dev-tools  5.5.1-3
ii  qttools5-dev-tools5.5.1-3
ii  qttranslations5-l10n  5.5.1-2
ii  qtxmlpatterns5-dev-tools  5.5.1-2
ii  xfce4-terminal [x-terminal-emulator]  0.6.3-2
ii  xterm [x-terminal-emulator]   320-1

Versions of packages qtcreator suggests:
ii  cmake  3.3.2-2
ii  g++4:5.2.1-4
ii  git1:2.6.2-1
pn  kdelibs5-data  
pn  subversion 
#include 

struct B
{
struct C
{
int m_y;
};
};

int main()
{
const std::vector cV;
std::vector::const_iterator end = cV.end();

for(
std::vector::const_reverse_iterator i = cV.rbegin();
i != cV.rend();
++i)
{
if(i->m_y)
{
end = i.base();
break;
}
}

return 1;
}
cmake_minimum_required(VERSION 2.6)

project(qtcreator_hang)

if ("${CMAKE_CXX_COMPILER_ID}" STREQUAL "Clang")
# using Clang
set( CMAKE_CXX_FLAGS ${CMAKE_CXX_FLAGS} "-std=c++11" )
elseif ("${CMAKE_CXX_COMPILER_ID}" STREQUAL "GNU")
# using GCC
set( CMAKE_CXX_FLAGS ${CMAKE_CXX_FLAGS} "-std=c++11" )
elseif ("${CMAKE_CXX_COMPILER_ID}" STREQUAL "Intel")
# using Intel C++
elseif ("${CMAKE_CXX_COMPILER_ID}" STREQUAL "MSVC")
# using Visual Studio C++
endif()

add_executable(qt_creator_hang qt_creator_hang.cpp)

Bug#803078: Bug#805113: CVE-2015-8126: buffer overflow

[Sven Joachim]

On 2015-11-14 12:54 -0800, Josh Triplett wrote:

> Package: libpng12-0
> Version: 1.2.50-2+b2
> Severity: critical
> Tags: security upstream
>
> Quoting https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8126
>> Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE
>> functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and
>> 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow 
>> remote
>> attackers to cause a denial of service (application crash) or possibly have
>> unspecified other impact via a small bit-depth value in an IHDR (aka image
>> header) chunk in a PNG image.
>
> In particular, "1.1.x and 1.2.x before 1.2.54".

On 2015-10-26 19:03 +0100, Salvatore Bonaccorso wrote:

> Source: libpng
> Version: 1.2.44-1
> Severity: important
> Tags: security upstream patch fixed-upstream
> Forwarded: http://sourceforge.net/p/libpng/bugs/241/
>
> Hi,
>
> the following vulnerability was published for libpng.
>
> CVE-2015-7981[0]:
> out-of-bound read vulnerability
>
> If you fix the vulnerability please also make sure to include the
> CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

I have made a local package with libpng 1.2.54 for myself, if anybody is
interested a filtered debdiff containing only the changes in the debian
directory is attached.  The debian/watch file does not work, I have
downloaded libpng-1.2.54.tar.xz from
ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng12/ where there is
also a detached signature.

Cheers,
   Sven

diff -Nru libpng-1.2.50/debian/changelog libpng-1.2.54/debian/changelog
--- libpng-1.2.50/debian/changelog	2014-07-26 04:27:22.0 +0200
+++ libpng-1.2.54/debian/changelog	2015-11-16 17:56:27.0 +0100
@@ -1,3 +1,13 @@
+libpng (1.2.54-0local1) UNRELEASED; urgency=high
+
+  * New upstream release.
+- Fix multiple buffer overflows [CVE-2015-8126] (Closes: #805113).
+- Fix out of bound read [CVE-2015-7981] (Closes: #803078).
+  * Drop patch 02-required-space.patch, applied upstream.
+  * Update remaining patches.
+
+ -- Sven Joachim   Mon, 16 Nov 2015 17:56:26 +0100
+
 libpng (1.2.50-2) unstable; urgency=medium
 
   * Merge 1.2.50-1ubuntu3.
diff -Nru libpng-1.2.50/debian/docs libpng-1.2.54/debian/docs
--- libpng-1.2.50/debian/docs	2014-01-27 04:04:53.0 +0100
+++ libpng-1.2.54/debian/docs	2015-11-16 14:45:07.0 +0100
@@ -1,3 +1,3 @@
-libpng-1.2.50.txt
+libpng-1.2.54.txt
 README
 TODO
diff -Nru libpng-1.2.50/debian/libpng12-0.doc-base libpng-1.2.54/debian/libpng12-0.doc-base
--- libpng-1.2.50/debian/libpng12-0.doc-base	2014-01-27 04:05:25.0 +0100
+++ libpng-1.2.54/debian/libpng12-0.doc-base	2015-11-16 14:45:05.0 +0100
@@ -22,4 +22,4 @@
 Section: Programming
 
 Format: text
-Files: /usr/share/doc/libpng12-0/libpng-1.2.50.txt.gz
+Files: /usr/share/doc/libpng12-0/libpng-1.2.54.txt.gz
diff -Nru libpng-1.2.50/debian/libpng12-0.docs libpng-1.2.54/debian/libpng12-0.docs
--- libpng-1.2.50/debian/libpng12-0.docs	2014-01-27 04:05:06.0 +0100
+++ libpng-1.2.54/debian/libpng12-0.docs	2015-11-16 14:44:43.0 +0100
@@ -2,4 +2,4 @@
 TODO
 ANNOUNCE
 KNOWNBUG
-libpng-1.2.50.txt
+libpng-1.2.54.txt
diff -Nru libpng-1.2.50/debian/patches/01-legacy.patch libpng-1.2.54/debian/patches/01-legacy.patch
--- libpng-1.2.50/debian/patches/01-legacy.patch	2014-07-26 04:14:18.0 +0200
+++ libpng-1.2.54/debian/patches/01-legacy.patch	2015-11-16 14:26:57.0 +0100
@@ -1,23 +1,7 @@
-Index: libpng-1.2.50/libpng-1.2.50.txt
+Index: libpng-1.2.54/png.h
 ===
 libpng-1.2.50.orig/libpng-1.2.50.txt
-+++ libpng-1.2.50/libpng-1.2.50.txt
-@@ -1049,8 +1049,9 @@ the normalized graylevel is computed:
- gray = (rw*red + gw*green + bw*blue)/65536;
- 
- The default values approximate those recommended in the Charles
--Poynton's Color FAQ, 
--Copyright (c) 1998-01-04 Charles Poynton 
-+Poynton's Color FAQ,
-+
-+Copyright (c) 2006-11-28 Charles Poynton 
- 
- Y = 0.212671 * R + 0.715160 * G + 0.072169 * B
- 
-Index: libpng-1.2.50/png.h
-===
 libpng-1.2.50.orig/png.h
-+++ libpng-1.2.50/png.h
+--- libpng-1.2.54.orig/png.h
 libpng-1.2.54/png.h
 @@ -1902,15 +1902,17 @@ extern PNG_EXPORT(void,png_destroy_read_
 png_ptr_ptr, png_infopp info_ptr_ptr, png_infopp end_info_ptr_ptr));
  
@@ -39,10 +23,10 @@
  
  /* Set the libpng method of handling chunk CRC errors */
  extern PNG_EXPORT(void,png_set_crc_action) PNGARG((png_structp png_ptr,
-Index: libpng-1.2.50/png.5
+Index: libpng-1.2.54/png.5
 ===
 libpng-1.2.50.orig/png.5
-+++ libpng-1.2.50/png.5
+--- libpng-1.2.54.orig/png.5
 libpng-1.2.54/png.5
 @@ -18,7 +18,11 @@ gamma and chromaticity data 

Bug#789077: ruby2.2 transition: about to switch the default in unstable

[Emilio Pozuelo Monfort]

On 10/11/15 19:49, Emilio Pozuelo Monfort wrote:
> On 09/11/15 10:21, Emilio Pozuelo Monfort wrote:
>> On 08/11/15 23:44, Christian Hofstaedtler wrote:
>>> FTR, we're now down to just subversion, uwsgi and zeroc-ice.
>>>
>>> James and Antonio are making some progress with subversion in
>>> #803589, but it appears to be more tricky (and upstream has no fix
>>> yet).
>>>
>>> zeroc-ice has an upstream fix, but the delta is too large for me to
>>> backport it as part of an NMU.
>>>
>>> Haven't heard back yet from the uwsgi team.
>>
>> Thanks for the update.
>>
>> You can make those bugs serious now as this is imminent. Let us know once
>> subversion is fixed.
> 
> You can go ahead with the default switch.

ruby-defaults migrated over the weekend. I guess the next step is dropping
ruby2.1 from the list of supported interpreters and then binNMUing the packages
that depend on both libruby2.1 and libruby2.2, so we can get rid of ruby2.1?

Cheers,
Emilio

Bug#789077: ruby2.2 transition: about to switch the default in unstable

[Antonio Terceiro]

On Mon, Nov 16, 2015 at 05:08:09PM -0200, Antonio Terceiro wrote:
> On Mon, Nov 16, 2015 at 07:57:05PM +0100, Emilio Pozuelo Monfort wrote:
> > On 10/11/15 19:49, Emilio Pozuelo Monfort wrote:
> > > On 09/11/15 10:21, Emilio Pozuelo Monfort wrote:
> > >> On 08/11/15 23:44, Christian Hofstaedtler wrote:
> > >>> FTR, we're now down to just subversion, uwsgi and zeroc-ice.
> > >>>
> > >>> James and Antonio are making some progress with subversion in
> > >>> #803589, but it appears to be more tricky (and upstream has no fix
> > >>> yet).
> > >>>
> > >>> zeroc-ice has an upstream fix, but the delta is too large for me to
> > >>> backport it as part of an NMU.
> > >>>
> > >>> Haven't heard back yet from the uwsgi team.
> > >>
> > >> Thanks for the update.
> > >>
> > >> You can make those bugs serious now as this is imminent. Let us know once
> > >> subversion is fixed.
> > > 
> > > You can go ahead with the default switch.
> > 
> > ruby-defaults migrated over the weekend. I guess the next step is dropping
> > ruby2.1 from the list of supported interpreters and then binNMUing the 
> > packages
> > that depend on both libruby2.1 and libruby2.2, so we can get rid of ruby2.1?
> 
> Yes. Do you want to create a new transition tracker for that, or change
> the existing one?

FTR: ruby2.1 has already been removed from the the list in the
ruby-defaults that just went into testing, so we can start binNMUing
when we have a list of packages.

-- 
Antonio Terceiro 


signature.asc
Description: PGP signature

Bug#794919: [Xcb] Bug#794919: libxcb1: Segmentation fault in libqxcb.so

[Andreas Boll]

(Ccing the bug reporter.)

Dear bug reporter,

is this bug still reproducible with the current Qt in testing or
unstable?

Thanks,
Andreas

On Fri, Nov 13, 2015 at 04:50:26PM +0300, Dmitry Shachnev wrote:
> Hi Andreas,
> 
> On Fri, 13 Nov 2015 14:37:51 +0100, Andreas Boll wrote:
> > libqxcb.so belongs to libqt5xcbqpa5.
> > Reassigning to the correct package.
> 
> The reporter uses Jessie, however there was no libqt5xcbqpa5 package in 
> Jessie.
> 
> It would be nice to know whether this bug is reproducible with the current Qt
> in unstable.
> 
> --
> Dmitry Shachnev




signature.asc
Description: Digital signature

Bug#805293: jessie-pu: package systemd/215-17+deb8u3

[Michael Biebl]

Package: release.debian.org
Severity: normal
Tags: jessie
User: release.debian@packages.debian.org
Usertags: pu

I'd like to update the systemd package in stable to fix a few issues
where users asked us explicitly to backport fixes from upstream.

All those issue have been fixed in sid/testing.
Full debdiff is attached.

Annotated changelog

systemd (215-17+deb8u3) stable; urgency=medium

  * Fix namespace breakage due to incorrect path sorting. (Closes: #787758)

http://anonscm.debian.org/cgit/pkg-systemd/systemd.git/commit/?h=biebl/jessie=054e994dd6b7f9aec13d159793c89027ae6d91c3

While I'm not aware of any package in the archive using
ReadOnlyDirectories/ReadWriteDirectories, it's not uncommon for admins to lock
down their services via local configuration.

  * Don't timeout after 90 seconds when no password was entered for cryptsetup
devices. (Closes: #802897)

http://anonscm.debian.org/cgit/pkg-systemd/systemd.git/commit/?h=biebl/jessie=17fa29391f769426876bd51f5f6f992dc23017fd

This one fixes a bug where we timed out and failed if the user didn't enter a
password for a cryptsetup device within 90 seconds.

  * Only set the kernel's timezone when the RTC runs in local time. Otherwise,
every daylight saving time change or time zone change by travelling will
make the time jump, and the local time might jump backwards which creates
unsolvable problems with file timestamps. (Closes: #759319)

http://anonscm.debian.org/cgit/pkg-systemd/systemd.git/commit/?h=biebl/jessie=3918ae33299cf6798b17564e1c4af34d77fd8a18

While this change sound potentially risky, we had this in sid/testing for a 
while.

  * Fix incorrect handling of comma separator in systemd-delta.
(Closes: #793477)

http://anonscm.debian.org/cgit/pkg-systemd/systemd.git/commit/?h=biebl/jessie=4b90ab14dbebd1e4c8f62a051bda4a2e2c6ccbe2

Low risk change for a trivial bug.

  * Make DHCP broadcast behaviour configurable in systemd-networkd via
RequestBroadcast=. This is a backport from upstream which doesn't change
the default setting. (Closes: #797894)

http://anonscm.debian.org/cgit/pkg-systemd/systemd.git/commit/?h=biebl/jessie=06aa37dea9a5b922582ebbcc380fc7e064377f2a

This backports a new feature (configuration setting) for systemd-networkd which
otherwise would be unusable in certain setups. Regression potential is low, as
it doesn't change the existing default behaviour in stable.


Please let me know if I can proceed with the upload.

Regards,
Michael


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.3.0-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
diff --git a/debian/changelog b/debian/changelog
index e534caa..e7f31e9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,9 +1,26 @@
+systemd (215-17+deb8u3) stable; urgency=medium
+
+  * Fix namespace breakage due to incorrect path sorting. (Closes: #787758)
+  * Don't timeout after 90 seconds when no password was entered for cryptsetup
+devices. (Closes: #802897)
+  * Only set the kernel's timezone when the RTC runs in local time. Otherwise,
+every daylight saving time change or time zone change by travelling will
+make the time jump, and the local time might jump backwards which creates
+unsolvable problems with file timestamps. (Closes: #759319)
+  * Fix incorrect handling of comma separator in systemd-delta.
+(Closes: #793477)
+  * Make DHCP broadcast behaviour configurable in systemd-networkd via
+RequestBroadcast=. This is a backport from upstream which doesn't change
+the default setting. (Closes: #797894)
+
+ -- Michael Biebl   Mon, 16 Nov 2015 18:08:32 +0100
+
 systemd (215-17+deb8u2) stable; urgency=medium
 
   * Disable default DNS servers in systemd-resolved. In v215 they are always
 added to resolv.conf as fallback entries even when DNS servers were
 acquired from systemd-networkd. (Closes: #787731)
-  * Use strictly versioned dependendency on libsystemd-dev for the
+  * Use strictly versioned dependency on libsystemd-dev for the
 transitional dev packages. The .pc files of the compat libraries declare
 a strictly versioned dependency on libsystemd.pc, so reflect that in the
 package dependencies as well. (Closes: #794290)
diff --git a/debian/patches/core-namespace-fix-path-sorting.patch b/debian/patches/core-namespace-fix-path-sorting.patch
new file mode 100644
index 000..9fb1399
--- /dev/null
+++ b/debian/patches/core-namespace-fix-path-sorting.patch
@@ -0,0 +1,58 @@
+From: Michal Schmidt 
+Date: Mon, 16 Mar 2015 22:04:21 +0100
+Subject: core/namespace: fix path sorting
+
+The comparison function we use for qsorting paths is overly indifferent.
+Consider these 3 paths for sorting:
+ 

Bug#804554: fonts-hack-otf: new upstream release 2.018

[Paride Legovini]

On 2015-11-16 18:37, Fabian Greffrath wrote:
> Hey Paride,
> 
> Am Montag, den 16.11.2015, 17:08 +0100 schrieb Paride Legovini:
>> I uploaded 2.018 to mentors a few days ago, is any other action
>> required
>> from my part? Perhaps I should have pinged you !about this! If there
>> is
>> any problem let me know.
> 
> Just leave a note on the pkg-fonts list or in the bug requesting the
> new upstream version that you have already prepared a package and where
> it can be found. We are not automatically informed if updated packages
> a uploaded to mentors.d.o.
> 
>> I'm currently not maintaining the package in a git repository, as it
>> is
>> quite simple, but I agree it's a good idea to move it to a Debian git
>> repo.
> 
> Let's get this version into unstable first, then we can take care of
> the git repo. I'll have a look at it tomorrow.

Fine, thank you!

Cheers,

Paride

Bug#798988: iceweasel: fixed on 38.3.0esr-1~deb8u1_amd64

[Philippe Coval]

Package: iceweasel
Followup-For: Bug #798988

I faced this issue after downgrading to stable 
(yes downgraded after I broke kde5 with pinned repos)

It the problem seems gone with stable proposed upgrade :
just install this deb over jessie, it's enough :

ftp://ftp.us.debian.org/debian/pool/main/i/iceweasel/iceweasel_38.3.0esr-1~deb8u1_amd64.deb

Regards

-- Package-specific info:

-- Extensions information
Name: Adblock Edge
Location: ${PROFILE_EXTENSIONS}/{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi
Status: enabled

Name: Default theme
Location: 
/usr/lib/iceweasel/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}
Package: iceweasel
Status: enabled

Name: Flashblock
Location: 
/usr/share/mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/{3d7eb24f-2740-49df-8937-200b1cc08f8a}
Package: xul-ext-flashblock
Status: user-disabled

Name: I don't care about cookies
Location: ${PROFILE_EXTENSIONS}/jid1-kkzogwgsw3a...@jetpack.xpi
Status: enabled

Name: Privacy Badger
Location: ${PROFILE_EXTENSIONS}/jid1-mnnxcxisbpn...@jetpack.xpi
Status: enabled

Name: QuickProxy
Location: 
/usr/share/mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/{d5ea4520-61a1-11da-8cd6-0800200c9a66}
Package: xul-ext-quickproxy
Status: enabled

Name: User Agent Switcher
Location: ${PROFILE_EXTENSIONS}/{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi
Status: enabled

Name: User-Agent Switcher
Location: ${PROFILE_EXTENSIONS}/jid1-kyxeacwua7b...@jetpack.xpi
Status: enabled

-- Plugins information
Name: bjninstallplugin (2.90.658.8)
Location: /usr/lib/mozilla/plugins/npbjninstallplugin_2.90.658.8.so
Package: bjnplugin
Status: enabled

Name: bjnplugin (2.90.658.8)
Location: /usr/lib/mozilla/plugins/npbjnplugin_2.90.658.8.so
Package: bjnplugin
Status: enabled

Name: Skype Buttons for Kopete
Location: /usr/lib/mozilla/plugins/skypebuttons.so
Package: kopete
Status: enabled


-- Addons package information
ii  bjnplugin  2.90.658.8-1 amd64The Blue Jeans Browser Video Plug
ii  iceweasel  38.3.0esr-1~ amd64Web browser based on Firefox
ii  kopete 4:4.14.1-2   amd64instant messaging and chat applic
ii  xul-ext-flashb 1.5.18-1 all  Mozilla extension to block Adobe 
ii  xul-ext-quickp 2009.07.19-3 all  statusbar button to turn the prox

-- System Information:
Debian Release: 8.2
  APT prefers stable
  APT policy: (600, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armel, armhf

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages iceweasel depends on:
ii  debianutils   4.4+b1
ii  fontconfig2.11.0-6.3
ii  libasound21.0.28-1
ii  libatk1.0-0   2.14.0-1
ii  libc6 2.19-18+deb8u1
ii  libcairo2 1.14.0-2.1
ii  libdbus-1-3   1.8.20-0+deb8u1
ii  libdbus-glib-1-2  0.102-1
ii  libevent-2.0-52.0.21-stable-2
ii  libffi6   3.1-2+b2
ii  libfontconfig12.11.0-6.3
ii  libfreetype6  2.5.2-3+deb8u1
ii  libgcc1   1:4.9.2-10
ii  libgdk-pixbuf2.0-02.31.1-2+deb8u3
ii  libglib2.0-0  2.42.1-1
ii  libgtk2.0-0   2.24.25-3
ii  libhunspell-1.3-0 1.3.3-3
ii  libpango-1.0-01.36.8-3
ii  libsqlite3-0  3.8.7.1-1+deb8u1
ii  libstartup-notification0  0.12-4
ii  libstdc++64.9.2-10
ii  libx11-6  2:1.6.2-3
ii  libxcomposite11:0.4.4-1
ii  libxdamage1   1:1.1.4-2+b1
ii  libxext6  2:1.3.3-1
ii  libxfixes31:5.0.1-2+b2
ii  libxrender1   1:0.9.8-1+b1
ii  libxt61:1.1.4-1+b1
ii  procps2:3.3.9-9
ii  zlib1g1:1.2.8.dfsg-2+b1

Versions of packages iceweasel recommends:
ii  gstreamer1.0-libav 1:1.4.5-dmo1
ii  gstreamer1.0-plugins-good  1.4.4-2

Versions of packages iceweasel suggests:
ii  fonts-mathjax  2.4-2
pn  fonts-oflb-asana-math  
ii  fonts-stix [otf-stix]  1.1.1-1
ii  libcanberra0   0.30-2.1
pn  libgnomeui-0   
ii  libgssapi-krb5-2   1.12.1+dfsg-19+deb8u1
pn  mozplugger 

-- no debconf information

Bug#805299: apt: W: Problem unlinking the file security - Clean (21: Is a directory)

[shirish शिरीष]

Package: apt
Version: 1.1~exp15
Severity: important

Dear Maintainer,
Dear Maintainer,
I upgraded to the latest apt following some announce or something that
triggered/told me that apt 1.1~exp15 is now in experimental.

Had a look at the changelog and went for it. The upgrade went smoothly
but get the following when updating the index.

Fetched 758 kB in 2min 44s (4,601 B/s)
Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
W: Problem unlinking the file security - Clean (21: Is a directory)

While I can understand this is just a warning, could somebody share to
which package or where it is coming from.

>From the changelog -

* rework errors and warnings around insecure repositories (Closes: 796549)

I am just wondering how security could be an insecure repository though ?

Is this a new bug or am I not understanding correctly.

As an aside, also at times when there is mismatch which the new apt is
supposed to have solved (although reading the relevant bug report
shares a particular use-case, dunno if its relevant to the issue I
face of generic hash-sum mismatches from mirror repos.)

In case of hash-sum mismatches, I usually go to /var/lib/apt/lists,
remove the entire lists, make sure to mkdir security and partial (as
one or the other doesn't get built if I do it without, think it's
partial, haven't checked that atm.)

Anyways, after doing that I have to do an aptitude update for the
index to be rebuilt properly without using the diffs.

-- Package-specific info:

-- apt-config dump --

APT "";
APT::Architecture "amd64";
APT::Build-Essential "";
APT::Build-Essential:: "build-essential";
APT::Install-Recommends "1";
APT::Install-Suggests "0";
APT::Sandbox "";
APT::Sandbox::User "_apt";
APT::Authentication "";
APT::Authentication::TrustCDROM "true";
APT::NeverAutoRemove "";
APT::NeverAutoRemove:: "^firmware-linux.*";
APT::NeverAutoRemove:: "^linux-firmware$";
APT::NeverAutoRemove:: "^linux-image-4\.2\.0-1-amd64$";
APT::NeverAutoRemove:: "^linux-headers-4\.2\.0-1-amd64$";
APT::NeverAutoRemove:: "^linux-image-extra-4\.2\.0-1-amd64$";
APT::NeverAutoRemove:: "^linux-signed-image-4\.2\.0-1-amd64$";
APT::NeverAutoRemove:: "^kfreebsd-image-4\.2\.0-1-amd64$";
APT::NeverAutoRemove:: "^kfreebsd-headers-4\.2\.0-1-amd64$";
APT::NeverAutoRemove:: "^gnumach-image-4\.2\.0-1-amd64$";
APT::NeverAutoRemove:: "^.*-modules-4\.2\.0-1-amd64$";
APT::NeverAutoRemove:: "^.*-kernel-4\.2\.0-1-amd64$";
APT::NeverAutoRemove:: "^linux-backports-modules-.*-4\.2\.0-1-amd64$";
APT::NeverAutoRemove:: "^linux-tools-4\.2\.0-1-amd64$";
APT::NeverAutoRemove:: "^postgresql-";
APT::VersionedKernelPackages "";
APT::VersionedKernelPackages:: "linux-image";
APT::VersionedKernelPackages:: "linux-headers";
APT::VersionedKernelPackages:: "linux-image-extra";
APT::VersionedKernelPackages:: "linux-signed-image";
APT::VersionedKernelPackages:: "kfreebsd-image";
APT::VersionedKernelPackages:: "kfreebsd-headers";
APT::VersionedKernelPackages:: "gnumach-image";
APT::VersionedKernelPackages:: ".*-modules";
APT::VersionedKernelPackages:: ".*-kernel";
APT::VersionedKernelPackages:: "linux-backports-modules-.*";
APT::VersionedKernelPackages:: "linux-tools";
APT::Never-MarkAuto-Sections "";
APT::Never-MarkAuto-Sections:: "metapackages";
APT::Never-MarkAuto-Sections:: "contrib/metapackages";
APT::Never-MarkAuto-Sections:: "non-free/metapackages";
APT::Never-MarkAuto-Sections:: "restricted/metapackages";
APT::Never-MarkAuto-Sections:: "universe/metapackages";
APT::Never-MarkAuto-Sections:: "multiverse/metapackages";
APT::Move-Autobit-Sections "";
APT::Move-Autobit-Sections:: "oldlibs";
APT::Move-Autobit-Sections:: "contrib/oldlibs";
APT::Move-Autobit-Sections:: "non-free/oldlibs";
APT::Move-Autobit-Sections:: "restricted/oldlibs";
APT::Move-Autobit-Sections:: "universe/oldlibs";
APT::Move-Autobit-Sections:: "multiverse/oldlibs";
APT::Update "";
APT::Update::Post-Invoke-Success "";
APT::Update::Post-Invoke-Success:: "test -x /usr/bin/apt-show-versions
|| exit 0 ; apt-show-versions -i";
APT::Update::Post-Invoke-Success:: "[ ! -f
/var/run/dbus/system_bus_socket ] || /usr/bin/dbus-send --system
--dest=org.debian.apt --type=signal /org/debian/apt
org.debian.apt.CacheChanged || true";
APT::Update::Post-Invoke-Success:: "/usr/bin/test -e
/usr/share/dbus-1/system-services/org.freedesktop.PackageKit.service
&& /usr/bin/test -S /var/run/dbus/system_bus_socket && /usr/bin/gdbus
call --system --dest org.freedesktop.PackageKit --object-path
/org/freedesktop/PackageKit --timeout 4 --method
org.freedesktop.PackageKit.StateHasChanged cache-update > /dev/null;
/bin/echo > /dev/null";
APT::Update::Post-Invoke "";
APT::Update::Post-Invoke:: "[ ! -x /usr/bin/debtags ] || debtags
update || true";
APT::Architectures "";
APT::Architectures:: "amd64";
APT::Compressor "";
APT::Compressor::. "";
APT::Compressor::.::Name ".";
APT::Compressor::.::Extension "";
APT::Compressor::.::Binary "";
APT::Compressor::.::Cost "1";

Bug#805300: getdp: Depends on uninstallable package libscalapack-mpi1

[Torquil Macdonald Sørensen]

Source: getdp
Version: 2.4.2-1+b1
Severity: grave
Justification: renders package unusable

getdp is currently uninstallable on amd64:

$ apt-get install getdp
Reading package lists... Done
Building dependency tree   
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 getdp : Depends: libscalapack-mpi1 (>= 1.8.0) but it is not installable
E: Unable to correct problems, you have held broken packages.

If I try to install libscalapack-mpi1, I get:

$ apt-get install libscalapack-mpi1
Reading package lists... Done
Building dependency tree   
Reading state information... Done
Package libscalapack-mpi1 is not available, but is referred to by another 
package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source
However the following packages replace it:
  libscalapack-openmpi1:i386 libscalapack-openmpi1

E: Package 'libscalapack-mpi1' has no installation candidate

Best regards
Torquil Sørensen

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (990, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Bug#801721: [pyfaidx] Clarify license (thanks @tillea) (94f7c45)

[Andreas Tille]

Hi Matt,

thanks a lot for your super fast response.

I'll upload your latest version then

   Andreas.


On Mon, Nov 16, 2015 at 11:03:17AM -0800, Matt Shirley wrote:
> Clarify license (thanks @tillea)
> 
> BSD 3-part license was required by university at the time. Correct license 
> should be BSD.
> 
> ---
> Reply to this email directly or view it on GitHub:
> https://github.com/mdshw5/pyfaidx/commit/94f7c45e6183af77f8075b9f4fdd9d17586b7bb9
> 

-- 
http://fam-tille.de

Bug#789077: ruby2.2 transition: about to switch the default in unstable

[Emilio Pozuelo Monfort]

On 16/11/15 20:08, Antonio Terceiro wrote:
> On Mon, Nov 16, 2015 at 07:57:05PM +0100, Emilio Pozuelo Monfort wrote:
>> On 10/11/15 19:49, Emilio Pozuelo Monfort wrote:
>>> On 09/11/15 10:21, Emilio Pozuelo Monfort wrote:
 On 08/11/15 23:44, Christian Hofstaedtler wrote:
> FTR, we're now down to just subversion, uwsgi and zeroc-ice.
>
> James and Antonio are making some progress with subversion in
> #803589, but it appears to be more tricky (and upstream has no fix
> yet).
>
> zeroc-ice has an upstream fix, but the delta is too large for me to
> backport it as part of an NMU.
>
> Haven't heard back yet from the uwsgi team.

 Thanks for the update.

 You can make those bugs serious now as this is imminent. Let us know once
 subversion is fixed.
>>>
>>> You can go ahead with the default switch.
>>
>> ruby-defaults migrated over the weekend. I guess the next step is dropping
>> ruby2.1 from the list of supported interpreters and then binNMUing the 
>> packages
>> that depend on both libruby2.1 and libruby2.2, so we can get rid of ruby2.1?
> 
> Yes. Do you want to create a new transition tracker for that, or change
> the existing one?

I have updated the existing one, see

https://release.debian.org/transitions/html/ruby2.2.html

Emilio

Bug#805304: samba-libs: depency libldb1 got updated

[Sebastian]

Package: samba-libs
Severity: normal

Dear Maintainer,

I tried to install samba-libs, apt throws an error

 samba-libs : Hängt ab von: libldb1 (< 2:1.1.22~) aber 2:1.1.23-1 soll 
installiert werden



-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages samba-libs depends on:
ii  libacl1  2.2.52-2
pn  libasn1-8-heimdal
ii  libattr1 1:2.4.47-2
ii  libbsd0  0.7.0-2
ii  libc62.19-22
ii  libcap2  1:2.24-12
ii  libcomerr2   1.42.13-1
ii  libcups2 2.1.0-6
ii  libgnutls-deb0-283.3.18-1
pn  libgssapi3-heimdal   
pn  libhcrypto4-heimdal  
pn  libhx509-5-heimdal   
pn  libkrb5-26-heimdal   
ii  libldap-2.4-22.4.42+dfsg-2
ii  libldb1  2:1.1.23-1
pn  libntdb1 
ii  libpam0g 1.1.8-3.1
ii  libpopt0 1.16-10
ii  libpython2.7 2.7.10-5+b1
ii  libtalloc2   2.1.5-1
ii  libtdb1  1.3.8-1
ii  libtevent0   0.9.26-1
pn  libwbclient0 
ii  multiarch-support2.19-22
pn  python-talloc
ii  zlib1g   1:1.2.8.dfsg-2+b1

samba-libs recommends no packages.

samba-libs suggests no packages.

Bug#801866: update-flashplugin-nonfree and new versions

[Yann Dirson]

It is a bit awkward to have --status report a new version, and
--install just not say anything by default.  With --install --verbose
one can finally understand with some effort that the version it
downloads is the one that's already installed.  But why just not
telling the user something like "We need to do some work to make the
new update available, please be patient and understand what needs to
be done at http://wiki.debian.org/FlashPlayer#maintainance; ... so
that we can all avoid whining in our own corner :)

Best regards,
--
Yann

Bug#789077: ruby2.2 transition: about to switch the default in unstable

[Antonio Terceiro]

On Mon, Nov 16, 2015 at 08:32:03PM +0100, Emilio Pozuelo Monfort wrote:
> On 16/11/15 20:10, Antonio Terceiro wrote:
> > On Mon, Nov 16, 2015 at 05:08:09PM -0200, Antonio Terceiro wrote:
> >> On Mon, Nov 16, 2015 at 07:57:05PM +0100, Emilio Pozuelo Monfort wrote:
> >>> On 10/11/15 19:49, Emilio Pozuelo Monfort wrote:
>  On 09/11/15 10:21, Emilio Pozuelo Monfort wrote:
> > On 08/11/15 23:44, Christian Hofstaedtler wrote:
> >> FTR, we're now down to just subversion, uwsgi and zeroc-ice.
> >>
> >> James and Antonio are making some progress with subversion in
> >> #803589, but it appears to be more tricky (and upstream has no fix
> >> yet).
> >>
> >> zeroc-ice has an upstream fix, but the delta is too large for me to
> >> backport it as part of an NMU.
> >>
> >> Haven't heard back yet from the uwsgi team.
> >
> > Thanks for the update.
> >
> > You can make those bugs serious now as this is imminent. Let us know 
> > once
> > subversion is fixed.
> 
>  You can go ahead with the default switch.
> >>>
> >>> ruby-defaults migrated over the weekend. I guess the next step is dropping
> >>> ruby2.1 from the list of supported interpreters and then binNMUing the 
> >>> packages
> >>> that depend on both libruby2.1 and libruby2.2, so we can get rid of 
> >>> ruby2.1?
> >>
> >> Yes. Do you want to create a new transition tracker for that, or change
> >> the existing one?
> > 
> > FTR: ruby2.1 has already been removed from the the list in the
> > ruby-defaults that just went into testing, so we can start binNMUing
> > when we have a list of packages.
> 
> I can do these:
> 
> emilio@tatooine:~$ grep-dctrl -s Source:Package -n -F Depends libruby2.1 --and
> libruby2.2
> /var/lib/apt/lists/ftp.debian.org_debian_dists_unstable_main_binary-amd64_Packages
[...]

looks good to me


signature.asc
Description: PGP signature

Bug#576540: ITP: theano -- Python library to define, optimize, and evaluate mathematical expressions involving multi-dimensional arrays

[Daniel Stender]

Note: I've started to work on Theano packages now.

It's going to be maintained under the Debian Science umbrella, were it would 
belong into 
the numerical computation task, were Numpy is.

Thanks,
Daniel Stender

-- 
4096R/DF5182C8
46CB 1CA8 9EA3 B743 7676 1DB9 15E0 9AF4 DF51 82C8
LPI certified Linux admin (LPI000329859 64mz6f7kt4)
http://www.danielstender.com/blog/

Bug#805311: ITP: lua-unbound -- unbound binding for LUA

[Victor Seva]

Package: wnpp
Severity: wishlist
Owner: Victor Seva 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

* Package name: lua-unbound
  Version : 0.0+hg~14fd7a2875e4
  Upstream Author : Kim Alvefur 
* URL : https://www.zash.se/luaunbound.html
* License : Expat
  Programming Lang: C, Lua
  Description : unbound binding for LUA

 libunbound performs and validates DNS lookups; it can be used to
 convert hostnames to IP addresses and back and obtain other
 information from the DNS. Cryptographic validation of results is
 performed with DNSSEC

 This is a dependency of mod_s2s_auth_dane to support secure
 delegation and for DANE.
 http://modules.prosody.im/mod_s2s_auth_dane.html
 (will be included at prosody-modules package)

 This will be maintained under the pkg-lua Team

-BEGIN PGP SIGNATURE-
Version: GnuPG v1
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=/iau
-END PGP SIGNATURE-

Bug#805315: cdbs: FTBFS with debhelper/9.20151116 - debhelper-5.sh has no compat

[Niels Thykier]

Package: cdbs
Version: 0.4.130
Severity: serious
Usertags: deprecated-debhelper-compat-leq-3

Hi,

I happened to rebuild cdbs today with the newly uploaded
debhelper/9.20151116 and it FTBFS (test/debhelper-5.sh fails).

AFAICT, the issue is that the test case removes "debian/compat",
making the (test) build default to compat 1, which is no longer
supported.

~Niels

Bug#805310: libsasl2-modules: Annoying message "DIGEST-MD5 common mech free" with svn in systemd journal

[Vincent Lefevre]

Package: libsasl2-modules
Version: 2.1.26.dfsg1-14+b1
Severity: minor

Whenever I use svn, even something like "svn help", a meaningless
message appears in the systemd journal, e.g. journalctl gives:

[...]
Nov 16 21:55:27 zira svn[30840]: DIGEST-MD5 common mech free
Nov 16 21:57:12 zira svn[30987]: DIGEST-MD5 common mech free
Nov 16 21:57:14 zira svn[31025]: DIGEST-MD5 common mech free
Nov 16 21:57:20 zira svn[31051]: DIGEST-MD5 common mech free
Nov 16 21:57:20 zira svn[31026]: DIGEST-MD5 common mech free
Nov 16 21:57:25 zira svn[31052]: DIGEST-MD5 common mech free
Nov 16 21:57:26 zira svn[31086]: DIGEST-MD5 common mech free
Nov 16 21:57:27 zira svn[31087]: DIGEST-MD5 common mech free
Nov 16 21:57:28 zira svn[3]: DIGEST-MD5 common mech free
Nov 16 21:57:33 zira svn[31112]: DIGEST-MD5 common mech free
Nov 16 21:57:34 zira svn[31139]: DIGEST-MD5 common mech free
Nov 16 21:57:36 zira svn[31158]: DIGEST-MD5 common mech free
Nov 16 21:57:37 zira svn[31168]: DIGEST-MD5 common mech free
Nov 16 21:58:11 zira svn[31286]: DIGEST-MD5 common mech free
Nov 16 21:58:12 zira svn[31287]: DIGEST-MD5 common mech free
[...]

That's annoying. According to dgrep, this message comes from
libsasl2-modules.

This problem already occurred back in 2011:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631932

but probably for sysvinit machines. It was fixed in 2014 with:

  * Add logcheck snippet to suppress "DIGEST-MD5 common mech free" messages
(Closes: #732771, #631932).

but this has no effect on my systemd machines. On sysvinit (and systemd)
machines, this message doesn't appear in "/var/log/syslog".

-- System Information:
Debian Release: stretch/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), 
(500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libsasl2-modules depends on:
ii  libc62.19-22
ii  libssl1.0.2  1.0.2d-3

libsasl2-modules recommends no packages.

Versions of packages libsasl2-modules suggests:
pn  libsasl2-modules-gssapi-mit | libsasl2-modules-gssapi-heimdal  
pn  libsasl2-modules-ldap  
pn  libsasl2-modules-otp   
pn  libsasl2-modules-sql   

-- no debconf information

Bug#788113: proot: FTBFS on arm64

[Sebastian Ramacher]

Control: severity -1 serious

On 2015-06-08 19:44:56, Edmund Grimley Evans wrote:
> Source: proot
> Version: 5.1.0-1
> Tags: patch
> 
> Some arm64 stuff was missing from the latest release.
> This patch adds it. It built when I tried it, but I
> haven't done any other testing.

4.0.2-1 built on arm64, so this is a regression. Raising the severity
accordingly.

For the full build log see
https://buildd.debian.org/status/fetch.php?pkg=proot=arm64=5.1.0-1=1424538140

Cheers
-- 
Sebastian Ramacher


signature.asc
Description: PGP signature

Bug#805314: kbd: new upstream release

[Andreas Henriksson]

Package: kbd
Version: 1.15.5-2
Severity: wishlist
Tags: patch

Dear Maintainer,

As previously mentioned in private mail I've prepared an updated
package for the new upstream release.

Please see https://github.com/andhe/pkg-kbd/

Would be nice to see updates and fixes in Debian soon. Please tell
me if you're too busy and looking for help.

Regards,
Andreas Henriksson

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages kbd depends on:
ii  libc6 2.19-22
ii  lsb-base  9.20150917

Versions of packages kbd recommends:
ii  console-setup  1.134

kbd suggests no packages.

-- no debconf information

Bug#211353: chrony: please add debconf question for entering timeserver

[Vincent Blut]

tags 211353 wontfix
thanks

Hello,

Marking as wontfix as I’m definitely not sure implementing the 
debconf mechanism

for such thing is the right approach.

Thanks,
Vincent

Bug#805313: enable DANE s2s authentication for prosody

[Victor Seva]

Package: rtc.debian.org
Severity: wishlist


In order to get mod_s2s_auth_dane [0] luaunbound [1] needs to be
packaged [2].

[0] http://modules.prosody.i/mod_s2s_auth_dane.html
[1] https://www.zash.se/luaunbound.html
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=805311



signature.asc
Description: OpenPGP digital signature

Bug#707334: ITA: sampleicc -- ICC profiles i/o and manipulating library and CMM

[Anthony Fok]

Package: wnpp
Followup-For: Bug #707334
Owner: Anthony Fok 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hello,

I intend to adopt Rene Engelhard's excellent sampleicc package.

Motivations:

 1. To scratch my own itch: I was looking for some tools to try to
make sense of an ICM colour profile that came with my printer.

 2. The name "SampleICC" came up in my (limited) Google search
earlier than Argyll or Little CMS 2.

 3. By the time I realized Argyll has /usr/bin/iccdump and friends,
I have almost finished refreshing sampleicc's Debian packaging for
upload.  ;-)

 4. SampleICC is still included and kept up-to-date (at 1.6.8, the
latest official .tar.gz) in other major Linux distributions like
Arch Linux[1] and openSUSE[2], etc.

 [1] https://aur.archlinux.org/packages/sampleicc/
 [2] http://software.opensuse.org/package/SampleICC

 5. SampleICC is still actively maintained upstream.  1.6.8 was released
in April 2014, whereas 1.6.9 (.zip only, no .tar.gz yet[3]) was released
in September 2015.

 [3] Note-to-self: Bug the upstream for a tarball?  :-)

These motivations led me to believe that SampleICC has merits in its own
rights even though we no longer need it for OpenOffice.org or LibreOffice.

Besides, with Rene's excellent original packaging in place, upgrading
from 1.6.4-1 to 1.6.8-1 (with debhelper 8 to 9 transition etc.) was a
breeze.  It would be such a shame to see Rene's fine work go to waste.

So, if no one objects, I would like to bring this package back into
Debian's fold.  :-)

Cheers,

Anthony

-BEGIN PGP SIGNATURE-
Version: GnuPG v1
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=S+XY
-END PGP SIGNATURE-

Bug#796619: ipsec-tools services

[Andreas Henriksson]

Hello!

Please see the fedora packaging for examples:
http://pkgs.fedoraproject.org/cgit/ipsec-tools.git/tree/

They use a racoon.service while the ipsec-tools init script
equivalent (starting setkey) seems to be done via ifup/ifdown hooks
instead.

Regards,
Andreas Henriksson

Bug#805312: mlmmj-send doesn't honour smtpport (altered via TUNABLE) not all the time.

[Christoph Ehnes]

Source: mlmmj
Version: 1.2.18.1
Severity: normal

Hi all!

The TUNABLE smtpport isn't honoured by mlmmj-send if a subonlypost deny post
is sent. The standard port 25 is used instead.

This is already fixed in the latest upstream version (1.2.19.0).

Best Regards
Christoph Ehnes


-- System Information:
Debian Release: 8.2
  APT prefers stable
  APT policy: (900, 'stable'), (500, 'stable-updates')
Architecture: i386 (i686)

Kernel: Linux 3.16.0-4-686-pae (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages mlmmj depends on:
ii  debconf [debconf-2.0]   1.5.56
ii  libc6   2.19-18+deb8u1
ii  postfix [mail-transport-agent]  2.11.3-1

mlmmj recommends no packages.

Versions of packages mlmmj suggests:
pn  mlmmj-php-web
ii  mlmmj-php-web-admin  1.2.18.1-1

-- Configuration Files:
/etc/cron.d/mlmmj changed [not included]

-- debconf information:
* mlmmj/remove-on-purge: false

Bug#784404: libssh: diff for NMU version 0.6.3-4.2

[gregor herrmann]

Control: tags 784404 + patch
Control: tags 784404 + pending

Dear maintainer,

Chris Knadle has prepared an NMU for libssh (versioned as 0.6.3-4.2)
and I've uploaded it to DELAYED/5. Please feel free to tell me if I
should delay it longer.

Regards.

-- 
 .''`.  Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06
 : :' : Debian GNU/Linux user, admin, and developer -  https://www.debian.org/
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: Carole King: I Feel The Earth Move
diff -Nru libssh-0.6.3/debian/changelog libssh-0.6.3/debian/changelog
--- libssh-0.6.3/debian/changelog	2015-07-18 20:38:50.0 +0200
+++ libssh-0.6.3/debian/changelog	2015-11-16 20:26:31.0 +0100
@@ -1,3 +1,11 @@
+libssh (0.6.3-4.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * debian/patches: Add 0002_CVE-2015-3146.patch from 0.6.5 release upstream
+(Closes: #784404)
+
+ -- Christopher Knadle   Mon, 16 Nov 2015 04:26:51 -0500
+
 libssh (0.6.3-4.1) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -Nru libssh-0.6.3/debian/patches/0002_CVE-2015-3146.patch libssh-0.6.3/debian/patches/0002_CVE-2015-3146.patch
--- libssh-0.6.3/debian/patches/0002_CVE-2015-3146.patch	1970-01-01 01:00:00.0 +0100
+++ libssh-0.6.3/debian/patches/0002_CVE-2015-3146.patch	2015-11-16 20:26:31.0 +0100
@@ -0,0 +1,129 @@
+From 94f6955fbaee6fda9385a23e505497efe21f5b4f Mon Sep 17 00:00:00 2001
+From: Aris Adamantiadis 
+Date: Wed, 15 Apr 2015 16:08:37 +0200
+Subject: [PATCH 1/2] CVE-2015-3146: Fix state validation in packet handlers
+
+The state validation in the packet handlers for SSH_MSG_NEWKEYS and
+SSH_MSG_KEXDH_REPLY had a bug which did not raise an error.
+
+The issue has been found and reported by Mariusz Ziule.
+
+Signed-off-by: Aris Adamantiadis 
+Reviewed-by: Andreas Schneider 
+(cherry picked from commit bf0c7ae0aeb0ebe661d11ea6785fff2cbf4f3dbe)
+---
+ src/packet_cb.c | 16 ++--
+ src/server.c|  8 +---
+ 2 files changed, 15 insertions(+), 9 deletions(-)
+
+diff --git a/src/packet_cb.c b/src/packet_cb.c
+index a10dd1a..e6c613f 100644
+--- a/src/packet_cb.c
 b/src/packet_cb.c
+@@ -94,7 +94,7 @@ SSH_PACKET_CALLBACK(ssh_packet_dh_reply){
+   (void)type;
+   (void)user;
+   SSH_LOG(SSH_LOG_PROTOCOL,"Received SSH_KEXDH_REPLY");
+-  if(session->session_state!= SSH_SESSION_STATE_DH &&
++  if (session->session_state != SSH_SESSION_STATE_DH ||
+ 		session->dh_handshake_state != DH_STATE_INIT_SENT){
+ 	ssh_set_error(session,SSH_FATAL,"ssh_packet_dh_reply called in wrong state : %d:%d",
+ 			session->session_state,session->dh_handshake_state);
+@@ -135,12 +135,16 @@ SSH_PACKET_CALLBACK(ssh_packet_newkeys){
+   (void)user;
+   (void)type;
+   SSH_LOG(SSH_LOG_PROTOCOL, "Received SSH_MSG_NEWKEYS");
+-  if(session->session_state!= SSH_SESSION_STATE_DH &&
+-		session->dh_handshake_state != DH_STATE_NEWKEYS_SENT){
+-	ssh_set_error(session,SSH_FATAL,"ssh_packet_newkeys called in wrong state : %d:%d",
+-			session->session_state,session->dh_handshake_state);
+-	goto error;
++
++  if (session->session_state != SSH_SESSION_STATE_DH ||
++  session->dh_handshake_state != DH_STATE_NEWKEYS_SENT) {
++  ssh_set_error(session,
++SSH_FATAL,
++"ssh_packet_newkeys called in wrong state : %d:%d",
++session->session_state,session->dh_handshake_state);
++  goto error;
+   }
++
+   if(session->server){
+ /* server things are done in server.c */
+ session->dh_handshake_state=DH_STATE_FINISHED;
+diff --git a/src/server.c b/src/server.c
+index 35281ca..1637cce 100644
+--- a/src/server.c
 b/src/server.c
+@@ -165,7 +165,7 @@ static int ssh_server_kexdh_init(ssh_session session, ssh_buffer packet){
+ }
+ 
+ SSH_PACKET_CALLBACK(ssh_packet_kexdh_init){
+-  int rc;
++  int rc = SSH_ERROR;
+   (void)type;
+   (void)user;
+ 
+@@ -193,9 +193,11 @@ SSH_PACKET_CALLBACK(ssh_packet_kexdh_init){
+ ssh_set_error(session,SSH_FATAL,"Wrong kex type in ssh_packet_kexdh_init");
+ rc = SSH_ERROR;
+   }
+-  if (rc == SSH_ERROR)
++
++error:
++  if (rc == SSH_ERROR) {
+   session->session_state = SSH_SESSION_STATE_ERROR;
+-  error:
++  }
+ 
+   return SSH_PACKET_USED;
+ }
+-- 
+2.3.5
+
+
+From e9d16bd3439205ce7e75017405b1ac6ed5ead062 Mon Sep 17 00:00:00 2001
+From: Aris Adamantiadis 
+Date: Wed, 15 Apr 2015 16:25:29 +0200
+Subject: [PATCH 2/2] buffers: Fix a possible null pointer dereference
+
+This is an addition to CVE-2015-3146 to fix the null pointer
+dereference. The patch is not required to fix the CVE but prevents
+issues in future.
+
+Signed-off-by: Aris Adamantiadis 
+Reviewed-by: Andreas Schneider 
+(cherry picked from commit 309102547208281215e6799336b42d355cdd7c5d)
+---
+ src/buffer.c | 8 
+ 1 file changed, 8 

Bug#805305: tasksel: Please consider adding GNOME Flashback as a desktop choice

[Dmitry Shachnev]

Source: tasksel
Version: 3.34
Severity: wishlist

Dear tasksel maintainers,

I would like you to consider adding the GNOME Flashback desktop to the list of
supported desktop environments in Debian.

GNOME Flashback is the classic desktop based on the GNOME Panel and the Metacity
window manager — the same components that were powering the default session in
Debian ≤ 6 (Squeeze). It tries to use mainline GNOME components where possible,
all code specific to the GNOME Flashback session (apart from the panel and the
WM) is in the gnome-flashback package.

Some links:

* https://wiki.gnome.org/Projects/GnomeFlashback
* http://mitya57.me/weblog/2015/07/gnome-flashback-316-in-testing.html

According to the commit message in [1], there may be not enough space to add yet
another desktop, however I consider that GNOME Flashback is a better choice for
the top list as compared to i.e. MATE or Cinnamon, as it has a small codebase,
is actively developed, uses modern GNOME technologies and is familiar for users
of previous Debian versions.

[1]: 
http://anonscm.debian.org/cgit/tasksel/tasksel.git/commit/?id=952ee6491807d54d

I do not have much tasksel experience, however attached is a potential patch
against the packaging git master. Thanks for considering this.

--
Dmitry ShachnevFrom c381f8c60f698813f95d6ee5ed078b7f7bf2783a Mon Sep 17 00:00:00 2001
From: Dmitry Shachnev 
Date: Mon, 2 Nov 2015 00:21:25 +0300
Subject: [PATCH] Add GNOME Flashback as a desktop choice

---
 debian/control| 51 ++-
 debian/templates  |  2 +-
 tasks/gnome-flashback-desktop |  7 ++
 3 files changed, 58 insertions(+), 2 deletions(-)
 create mode 100644 tasks/gnome-flashback-desktop

diff --git a/debian/control b/debian/control
index e754936..208d8d5 100644
--- a/debian/control
+++ b/debian/control
@@ -44,7 +44,7 @@ Recommends:
 # The order here is significant when installing this task manually;
 # when tasksel installs this task it instead selects one of these based
 # on the tasksel/desktop debconf setting.
-	task-gnome-desktop | task-xfce-desktop | task-kde-desktop | task-lxde-desktop | task-cinnamon-desktop | task-mate-desktop, 
+	task-gnome-desktop | task-gnome-flashback-desktop | task-xfce-desktop | task-kde-desktop | task-lxde-desktop | task-cinnamon-desktop | task-mate-desktop,
 # For use by third-party apps.
 	xdg-utils,
 # mdns/zeroconf stuff
@@ -96,6 +96,55 @@ Recommends:
 # we need a working network setup at least
 	network-manager-gnome,
 
+Package: task-gnome-flashback-desktop
+Architecture: all
+Description: GNOME Flashback
+ This task package is used to install the Debian desktop, featuring
+ the GNOME Flashback desktop environment, and with other packages that
+ Debian users expect to have available on the desktop.
+Depends: ${misc:Depends},
+	task-desktop,
+# the basic components required for the session
+	gnome-session-flashback,
+# the display manager
+	gdm3,
+# the control center
+	gnome-control-center,
+# some core GNOME applications
+	eog,
+	gedit,
+	gnome-calculator,
+	gnome-screenshot,
+	gnome-terminal,
+# network manager applet
+	network-manager-gnome,
+Recommends:
+# accessibility support
+	gnome-orca,
+# web browser
+	iceweasel,
+# mail client
+	evolution,
+# package management
+	gnome-software,
+# some non-core GNOME applications
+	alacarte,
+	gnome-disk-utility,
+	gnome-documents,
+	gnome-tweak-tool,
+	yelp,
+# libreoffice suite
+	libreoffice,
+	libreoffice-gnome,
+	libreoffice-evolution,
+	libreoffice-help-en-us,
+# make thesaurus work
+	mythes-en-us,
+# make spellchecker work
+	hunspell-en-us,
+# make hyphenation work
+	hyphen-en-us,
+
 Package: task-kde-desktop
 Architecture: all
 Description: KDE
diff --git a/debian/templates b/debian/templates
index bccc719..faa4d75 100644
--- a/debian/templates
+++ b/debian/templates
@@ -17,7 +17,7 @@ _Description: Choose software to install:
 
 Template: tasksel/desktop
 Type: multiselect
-Choices: gnome, kde, xfce, lxde, cinnamon, mate
+Choices: gnome, gnome-flashback, kde, xfce, lxde, cinnamon, mate
 Description: This can be preseeded to override the default desktop.
 
 Template: tasksel/title
diff --git a/tasks/gnome-flashback-desktop b/tasks/gnome-flashback-desktop
new file mode 100644
index 000..5657696
--- /dev/null
+++ b/tasks/gnome-flashback-desktop
@@ -0,0 +1,7 @@
+Task: gnome-flashback-desktop
+Relevance: 7
+Parent: desktop
+Test-default-desktop: 3 gnome-flashback
+Section: user
+Key:
+  task-gnome-flashback-desktop
-- 
2.6.2



signature.asc
Description: OpenPGP digital signature

Bug#805306: bacula-fd authorization key rejected by storage daemon on IPV6-only host

[Luc Maisonobe]

Package: bacula-fd
Version: 7.0.5+dfsg-3
Severity: important
Tags: ipv6

Dear Maintainer,

   * What led up to the situation?

Upgrading bacula-fd to . (and then to 7.0.5+dfsg-3) on the
client machines, while the backup server (which runs Debian stable)
still uses 5.2.6+dfsg-9.3 for both bacula-director and bacula-sd.
The server would be really difficult to upgrade, it should really
remain in Debian stable.

Only IPV6 communitation is allowed for bacula between the client and
the server. This may be related to bug #742914 that was precisely
fixed in 7.0.5+dfsg-2.

After this upgrade, I get messages like:

16-Nov 20:13 . JobId 4415: Start Backup JobId 4415,
Job=BackupClient.2015-11-16_20.10.15_44
16-Nov 20:13 . JobId 4415: Using Device "MyStorage"
16-Nov 20:13 -fd JobId 4415: Fatal error: Authorization key
rejected by Storage daemon.
Please see http://www.bacula.org/en/rel-
manual/Bacula_Freque_Asked_Questi.html#SECTION0026 for help.
16-Nov 20:13 . JobId 4415: Fatal error: Bad response to
Storage command: wanted 2000 OK storage
, got 2902 Bad storage

16-Nov 20:13 . JobId 4415: Error: Bacula .
5.2.6 (21Feb12):


Prior to this update, everything went well.

   * What exactly did you do (or not do) that was effective (or
 ineffective)?

Reinstalling previous version from jessie (5.2.6+dfsg-9.3).

   * What was the outcome of this action?

Going back to previous version worked.

   * What outcome did you expect instead?

I would have expected bacula to run regardless of the versions differences
between client and server.



-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages bacula-fd depends on:
ii  bacula-common  7.0.5+dfsg-3
ii  libacl12.2.52-2
ii  libc6  2.19-22
ii  libcap21:2.24-12
ii  libgcc11:5.2.1-23
ii  liblzo2-2  2.08-1.2
ii  libssl1.0.21.0.2d-3
ii  libstdc++6 5.2.1-23
ii  libwrap0   7.6.q-25
ii  lsb-base   9.20150917
ii  ucf3.0030
ii  zlib1g 1:1.2.8.dfsg-2+b1

bacula-fd recommends no packages.

bacula-fd suggests no packages.

-- no debconf information

Bug#805119: Acknowledgement (dar: Corrupted archives with dar ≥ 2.5.0)

[GCS]

Hi Peter,

On Mon, Nov 16, 2015 at 6:41 AM, Peter Colberg  wrote:
> This bug has been fixed in upstream commit 92cdf9c, which will be
> included in version 2.5.2 to be released soon. I raised the severity
> level to grave since the bug may result in data loss.
 Such archives still can be extracted if you use the
'--sequential-read' switch. Still, going to upload a package version
with the fix included.

Laszlo/GCS

Bug#789077: ruby2.2 transition: about to switch the default in unstable

[Emilio Pozuelo Monfort]

On 16/11/15 21:59, Antonio Terceiro wrote:
> On Mon, Nov 16, 2015 at 08:32:03PM +0100, Emilio Pozuelo Monfort wrote:
>> On 16/11/15 20:10, Antonio Terceiro wrote:
>>> On Mon, Nov 16, 2015 at 05:08:09PM -0200, Antonio Terceiro wrote:
 On Mon, Nov 16, 2015 at 07:57:05PM +0100, Emilio Pozuelo Monfort wrote:
> On 10/11/15 19:49, Emilio Pozuelo Monfort wrote:
>> On 09/11/15 10:21, Emilio Pozuelo Monfort wrote:
>>> On 08/11/15 23:44, Christian Hofstaedtler wrote:
 FTR, we're now down to just subversion, uwsgi and zeroc-ice.

 James and Antonio are making some progress with subversion in
 #803589, but it appears to be more tricky (and upstream has no fix
 yet).

 zeroc-ice has an upstream fix, but the delta is too large for me to
 backport it as part of an NMU.

 Haven't heard back yet from the uwsgi team.
>>>
>>> Thanks for the update.
>>>
>>> You can make those bugs serious now as this is imminent. Let us know 
>>> once
>>> subversion is fixed.
>>
>> You can go ahead with the default switch.
>
> ruby-defaults migrated over the weekend. I guess the next step is dropping
> ruby2.1 from the list of supported interpreters and then binNMUing the 
> packages
> that depend on both libruby2.1 and libruby2.2, so we can get rid of 
> ruby2.1?

 Yes. Do you want to create a new transition tracker for that, or change
 the existing one?
>>>
>>> FTR: ruby2.1 has already been removed from the the list in the
>>> ruby-defaults that just went into testing, so we can start binNMUing
>>> when we have a list of packages.
>>
>> I can do these:
>>
>> emilio@tatooine:~$ grep-dctrl -s Source:Package -n -F Depends libruby2.1 
>> --and
>> libruby2.2
>> /var/lib/apt/lists/ftp.debian.org_debian_dists_unstable_main_binary-amd64_Packages
> [...]
> 
> looks good to me

Scheduling that.

Emilio