Bug#654126: Pending fixes for bugs in the plexus-io package

[pkg-java-maintainers]

tag 654126 + pending
thanks

Some bugs in the plexus-io package are closed in revision
e0be5c5aad40dcc6e29d633b56b315fa2d137a2d in branch 'master' by tony
mancill

The full diff can be seen at
https://anonscm.debian.org/cgit/pkg-java/plexus-io.git/commit/?id=e0be5c5

Commit message:

Remove Michael Koch from Uploaders (Closes: #654126)

Bug#862235: ITP: node-dot -- Concise and fast javascript templating

[Pirate Praveen]

Package: wnpp
Severity: wishlist
Owner: Pirate Praveen 
X-Debbugs-CC: debian-de...@lists.debian.org

* Package name: node-dot
  Version : 1.1.1
  Upstream Author : Laura Doktorova 
* URL : http://github.com/olado/doT
* License : Expat
  Programming Lang: JavaScript
  Description : Concise and fast javascript templating

 This library provides concise and fast javascript templating compatible
with
 nodejs and other javascript environments.
 .
 This library is a build dependency of ajv, a JSON Schema Validator.
 .
 Node.js is an event-based server-side JavaScript engine.



signature.asc
Description: OpenPGP digital signature

Bug#861683: Install xserver-xorg-legacy by default for stretch

[Moritz Muehlenhoff]

On Tue, May 02, 2017 at 07:39:37PM +0200, Michael Biebl wrote:
> Same is true for users of startx. They need the suid wrapper provided by
> xserver-xorg-legacy in such a case.

That's not true. I use the text mode console nearly all the time and only 
start X as needed via startx, that works fine without the setuid wrapper.

Cheers,
Moritz

Bug#862148: Lynx: Long search strings to Google get truncated.

[David Lawyer]

On Tue, May 09, 2017 at 07:48:53PM -0400, Thomas Dickey wrote:
> On Mon, May 08, 2017 at 09:17:22PM -0700, David Lawyer wrote:
> > Package: lynx
> > Varsion: 2.8.9dev13-l
> > 
> > When I type in a search string (in English) to Google or Bing and the 
> > length of my
> > search string is longer than the blank space that Goolge or Bing provides
> > for it, the excess part of the string doesn't get typed in (or if it does
> > it doesn't get echoed to the screen).  This problem was not present in
> > dev11-1.  I suspect that this bug is due to the fix for another bug
> > involving the echoing of multi-byte characters #841155 which dev13-1
> > fixed.  But it seems that this fix has resulted in a new bug.
> 
> I see.  While I'm fixing this case, it would be nice to know if the
> original bug report is addressed...
Yes, the typing of search terms in Russian (mult-byte characters) worked
OK in dev13-1 but I probably didn't use long strings.  Thanks for 
getting it fixed.
> 
> -- 
> Thomas E. Dickey 
> http://invisible-island.net
> ftp://invisible-island.net


David Lawyer

Bug#862234: libsvm FTCBFS: uninstallable python build dependency, uses build architecture toolchain

[Helmut Grohne]

Source: libsvm
Version: 3.21+ds-1.1
Tags: patch
User: helm...@debian.org
Usertags: rebootstrap

libsvm fails to cross build from source. It's dependency on python-all
is not installable, because python-all can only be installed for
executable architectures. Switching that dependency to the build
architecture by appending either :native or :any fixes that. While at
it, I also propose moving default-jdk to Build-Depends-Indep to reflect
that it is only used during binary-indep. Further down the road, it
invokes plain g++, which is the build architecture compiler where a host
architecture one was needed. Prepending $(DEB_HOST_GNU_TYPE)- fixes
that as well and with the attached patch applied, libsvm cross builds
successfully. Please consider applying it after stretch is released.

Helmut
diff --minimal -Nru libsvm-3.21+ds/debian/changelog 
libsvm-3.21+ds/debian/changelog
--- libsvm-3.21+ds/debian/changelog 2016-07-30 05:20:01.0 +0200
+++ libsvm-3.21+ds/debian/changelog 2017-05-10 06:27:12.0 +0200
@@ -1,3 +1,13 @@
+libsvm (3.21+ds-1.2) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Fix FTCBFS: (Closs: #-1)
++ Move default-jdk to Build-Depends-Indep
++ Annotate python-all dependency with :native
++ Use a triplet-prefixed CXX
+
+ -- Helmut Grohne   Wed, 10 May 2017 06:27:12 +0200
+
 libsvm (3.21+ds-1.1) unstable; urgency=medium
 
   * Non-maintainer upload.
diff --minimal -Nru libsvm-3.21+ds/debian/control libsvm-3.21+ds/debian/control
--- libsvm-3.21+ds/debian/control   2016-02-05 17:03:53.0 +0100
+++ libsvm-3.21+ds/debian/control   2017-05-10 06:27:12.0 +0200
@@ -7,8 +7,9 @@
debhelper (>= 9), 
libtool, 
cdbs, 
-   python-all (>= 2.3.5-7), 
+   python-all:native (>= 2.3.5-7), 
dh-python, 
+Build-Depends-Indep:
default-jdk
 Standards-Version: 3.9.8
 Homepage: http://www.csie.ntu.edu.tw/~cjlin/libsvm/
diff --minimal -Nru libsvm-3.21+ds/debian/rules libsvm-3.21+ds/debian/rules
--- libsvm-3.21+ds/debian/rules 2016-07-21 19:58:59.0 +0200
+++ libsvm-3.21+ds/debian/rules 2017-05-10 06:26:10.0 +0200
@@ -1,5 +1,6 @@
 #!/usr/bin/make -f
 
+include /usr/share/dpkg/architecture.mk
 include /usr/share/cdbs/1/rules/debhelper.mk
 
 # install examples
@@ -28,7 +29,9 @@
 DPKG_EXPORT_BUILDFLAGS = 1
 include /usr/share/dpkg/buildflags.mk
 
-CXX ?= g++
+ifeq ($(origin CXX),default)
+CXX = $(DEB_HOST_GNU_TYPE)-g++
+endif
 HARDEN_CFLAGS=$(CFLAGS) $(LDFLAGS) $(CPPFLAGS)
 HARDEN_CXXFLAGS=$(CXXFLAGS) $(LDFLAGS) $(CPPFLAGS)
 

Bug#862233: libpomegranate-clojure: Package does not work with available version of maven

[Elana Hashman]

Package: libpomegranate-clojure
Version: 0.3.1-1
Severity: grave
Justification: renders package unusable
Control: block 819811 by -1

libpomegranate-clojure 0.2.0 and 0.3.1 depend on Maven 3.0.4. However,
only 3.3.9 is available in stretch and sid. When I attempt to use the
package, I get a ClassNotFoundException:

$ clojure -cp 
/usr/share/java/aether-api.jar:/usr/share/java/aether-util.jar:/usr/share/java/aether-impl.jar:/usr/share/java/aether-connector-file.jar:/usr/share/java/aether-connector-wagon.jar:/usr/share/java/maven-aether-provider-3.x.jar:/usr/share/java/dynapath.jar:/usr/share/java/wagon-provider-api.jar:/usr/share/java/aether-spi.jar:/usr/share/java/wagon-http-2.x.jar:/usr/share/java/wagon-ssh-2.x.jar:/usr/share/java/wagon-http-shared-2.x.jar:/usr/share/java/wagon-http-shared4-2.x.jar:/usr/share/java/pomegranate.jar

Clojure 1.8.0
user=> (use 'cemerick.pomegranate)
CompilerException java.lang.ClassNotFoundException: 
org.apache.maven.repository.internal.DefaultServiceLocator, 
compiling:(cemerick/pomegranate/aether.clj:1:1)


This is because, as detailed in 819811[*],


[pomegranate] relies on an old version of Aether under org.sonotype.
Aether moved from being maintained by Sonotype to being maintained by
Eclipse in 2012, and then Eclipse archived the Aether project in 2016.
The Aether changes are why pomegranate does not work against Maven
3.3.9; many classes have been renamed, refactored, and moved.


Phil Hagelberg is currently working to fix upstream pomegranate to rely
on Maven 3.5.0, which directly bundles the orphaned Aether. When
pomegranate 0.4.0 is released with the changes, we should be able to
upgrade the package and fix the issue.

[*]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819811#113

-- System Information:
Debian Release: 9.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.8.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libpomegranate-clojure depends on:
ii  libaether-java   1.13.1-3
ii  libdynapath-clojure  0.2.5-1
ii  libmaven3-core-java  3.3.9-4
ii  libwagon-java1.0.0-9
ii  libwagon2-java   2.10-6

libpomegranate-clojure recommends no packages.

libpomegranate-clojure suggests no packages.

-- no debconf information

Bug#862232: hlint.1: incorrect path to the full documentation

[Paul Wise]

Package: hlint
Version: 1.9.35-3+b1
Severity: minor
File: /usr/share/man/man1/hlint.1.gz

The manual page says:

The full documentation for HLint is available in 
/usr/share/doc/hlint/hlint.htm.

But this file does not exist:

$ ls -l /usr/share/doc/hlint/hlint.htm*
ls: cannot access '/usr/share/doc/hlint/hlint.htm*': No such file or 
directory

Instead the full documentation is in markdown format:

$ dpkg -L hlint | grep -i readme
/usr/share/doc/hlint/README.md.gz

-- System Information:
Debian Release: 9.0
  APT prefers testing-debug
  APT policy: (900, 'testing-debug'), (900, 'testing'), (860, 
'testing-proposed-updates'), (850, 'buildd-testing-proposed-updates'), (800, 
'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 
'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages hlint depends on:
ii  libc6 2.24-10
ii  libffi6   3.2.1-6
ii  libgmp10  2:6.1.2+dfsg-1

Versions of packages hlint recommends:
ii  ghc  8.0.1-17+b1

hlint suggests no packages.

-- no debconf information

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


signature.asc
Description: This is a digitally signed message part

Bug#862231: caja: Caja doesn't draw user desktop background

[Fabián Inostroza]

Package: caja
Version: 1.16.2-2
Severity: normal

Dear Maintainer,

After last weekend update Caja (I suppose) no longer draws the desktop
background that the user has set.

Choosing other desktop background using appearance settings doesn't have any 
effect.

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=es_CL.UTF-8, LC_CTYPE=es_CL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages caja depends on:
ii  caja-common   1.16.2-2
ii  desktop-file-utils0.23-1
ii  gvfs  1.30.4-1
ii  libatk1.0-0   2.22.0-1
ii  libc6 2.24-10
ii  libcairo-gobject2 1.14.8-1
ii  libcairo2 1.14.8-1
ii  libcaja-extension11.16.2-2
ii  libexempi32.4.1-1
ii  libexif12 0.6.21-2+b2
ii  libgail-3-0   3.22.11-1
ii  libgdk-pixbuf2.0-02.36.5-2
ii  libglib2.0-0  2.50.3-2
ii  libglib2.0-data   2.50.3-2
ii  libgtk-3-03.22.11-1
ii  libice6   2:1.0.9-2
ii  libmate-desktop-2-17  1.16.1-1
ii  libpango-1.0-01.40.5-1
ii  libpangocairo-1.0-0   1.40.5-1
ii  libselinux1   2.6-3+b1
ii  libsm62:1.2.2-1+b3
ii  libstartup-notification0  0.12-4+b2
ii  libunique-3.0-0   3.0.2-2
ii  libx11-6  2:1.6.4-3
ii  libxext6  2:1.3.3-1+b2
ii  libxml2   2.9.4+dfsg1-2.2
ii  libxrender1   1:0.9.10-1
ii  mate-desktop  1.16.1-1
ii  shared-mime-info  1.8-1

Versions of packages caja recommends:
ii  gvfs-backends  1.30.4-1

Versions of packages caja suggests:
ii  engrampa1.16.0-2
ii  gstreamer1.0-tools  1.10.4-1
pn  meld

-- no debconf information

Bug#859912: FTBFS on khal

[Daniel Baumann]

ftr, I've opened #862178.

Regards,
Daniel

Bug#861073: libxinerama failed to cross build at configure

[Do Thanh Trung]

Hi,

I saw that there are several packages have same problem with "auto 
malloc0returnsnull".

This problem makes them cannot cross-build.
Should I file new bug for each one of them?

Those packages are:
libdmx
libfs
libx11
libxext
libxi
libxinerama
libxrandr
libxrender
libxres
libxss
libxt
libxv
libxvmc
libxxf86vm

Trung.

--
This mail was scanned by BitDefender
For more information please visit http://www.bitdefender.com

Bug#862230: mplayer: error while loading shared libraries: R_PPC_REL24 relocation at 0x207ac54c for symbol `htonl' out of range

[Rogério Brito]

Package: mplayer
Version: 2:1.3.0-6
Severity: important

Hi.

In my PowerPC G4 iBook, I am running unstable and I'm getting the following
error when starting mplayer (with parameters, without, doesn't matter):

$ mplayer 
mplayer: error while loading shared libraries: R_PPC_REL24 relocation at 
0x2062d54c for symbol `htonl' out of range

If there is any extra information that I can supply, please let me know.


Thanks,

Rogério Brito.

-- System Information:
Debian Release: 9.0
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental')
Architecture: powerpc
 (ppc)

Kernel: Linux 4.9.0-3-powerpc
Locale: LANG=en_US.utf-8, LC_CTYPE=pt_BR.utf-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages mplayer depends on:
ii  liba52-0.7.4  0.7.4-19
ii  libaa11.4p5-44+b1
ii  libasound21.1.3-5
ii  libass5   1:0.13.4-2
ii  libaudio2 1.9.4-5+b1
ii  libavcodec57  7:3.2.4-1
ii  libavformat57 7:3.2.4-1
ii  libavutil55   7:3.2.4-1
ii  libbluray11:0.9.3-3
ii  libbs2b0  3.1.0+dfsg-2.2
ii  libc6 2.24-10
ii  libcaca0  0.99.beta19-2+b2
ii  libcdio-cdda1 0.83-4.3+b1
ii  libcdio-paranoia1 0.83-4.3+b1
ii  libcdio13 0.83-4.3+b1
ii  libdca0   0.0.5-10
ii  libdirectfb-1.2-9 1.2.10.0-9
ii  libdv41.0.0-11
ii  libdvdnav45.0.3-3
ii  libdvdread4   5.0.3-2
ii  libenca0  1.19-1+b1
ii  libfaad2  2.8.0~cvs20161113-1
ii  libfontconfig12.11.0-6.7+b1
ii  libfreetype6  2.6.3-3.2
ii  libfribidi0   0.19.7-1+b1
ii  libgif7   5.1.4-0.4
ii  libgl1-mesa-glx [libgl1]  13.0.6-1
ii  libjack-jackd2-0 [libjack-0.125]  1.9.10+20150825git1ed50c92~dfsg-5
ii  libjpeg62-turbo   1:1.5.1-2
ii  liblirc-client0   0.9.4c-9
ii  libmad0   0.15.1b-8
ii  libmpeg2-40.5.1-7+b2
ii  libmpg123-0   1.23.8-1+b1
ii  libogg0   1.3.2-1
ii  libopenal11:1.17.2-4+b2
ii  libpng16-16   1.6.28-1
ii  libpostproc54 7:3.2.4-1
ii  libpulse0 10.0-1
ii  libsdl1.2debian   1.2.15+dfsg1-4
ii  libsmbclient  2:4.5.8+dfsg-1
ii  libspeex1 1.2~rc1.2-1+b2
ii  libswresample27:3.2.4-1
ii  libswscale4   7:3.2.4-1
ii  libtheora01.1.1+dfsg.1-14+b1
ii  libtinfo5 6.0+20161126-1
ii  libvdpau1 1.1.1-6
ii  libvorbisidec11.0.2+svn18153-1
ii  libx11-6  2:1.6.4-3
ii  libxext6  2:1.3.3-1+b2
ii  libxinerama1  2:1.1.3-1+b3
ii  libxss1   1:1.2.2-1
ii  libxv12:1.0.11-1
ii  libxvidcore4  2:1.3.4-1+b2
ii  libxvmc1  2:1.0.10-1
ii  libxxf86dga1  2:1.1.4-1+b3
ii  libxxf86vm1   1:1.1.4-1+b2
ii  zlib1g1:1.2.8.dfsg-5

mplayer recommends no packages.

Versions of packages mplayer suggests:
ii  bzip2   1.0.6-8.1
ii  fontconfig  2.11.0-6.7+b1
ii  fonts-freefont-ttf  20120503-6
pn  mplayer-doc 
pn  netselect | fping   

-- no debconf information

-- 
Rogério Brito : rbrito@{ime.usp.br,gmail.com} : GPG key 4096R/BCFC
http://cynic.cc/blog/ : github.com/rbrito : profiles.google.com/rbrito
DebianQA: http://qa.debian.org/developer.php?login=rbrito%40ime.usp.br

Bug#862229: libssl1.0.2: Illegal instruction on a PowerPC G4 (32 bits) "in OPENSSL_crypto207_probe () at ppccpuid.s:20"

[Rogério Brito]

Package: libssl1.0.2
Version: 1.0.2k-1
Severity: important

Hi.

While trying to start telegram-desktop on a PowerPC G4 (that is, one with
the altivec instructions), I am getting a SIGILL and, installing the debug
symbols for libssl1.0.2, I was able to get the following (not entirely
complete, but hopefully, enough) bactrace:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

(gdb) run
Starting program: /usr/bin/telegram-desktop 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/powerpc-linux-gnu/libthread_db.so.1".
[New Thread 0xb7e042a0 (LWP 4958)]
Gtk-Message: Failed to load module "canberra-gtk-module"

Thread 1 "telegram-deskto" received signal SIGILL, Illegal instruction.
0x1d21dd40 in OPENSSL_crypto207_probe () at ppccpuid.s:20
20  ppccpuid.s: No such file or directory.
(gdb) bt
#0  0x1d21dd40 in OPENSSL_crypto207_probe () at ppccpuid.s:20
#1  0x1d21e26c in OPENSSL_cpuid_setup () at ppccap.c:152
#2  0x1d2c1524 in OPENSSL_add_all_algorithms_noconf () at c_all.c:82
#3  0x1d2b58d4 in OPENSSL_add_all_algorithms_conf () at evp_acnf.c:71
#4  0x1e7411f8 in ?? () from /usr/lib/powerpc-linux-gnu/libQt5Network.so.5
#5  0x1e734e70 in ?? () from /usr/lib/powerpc-linux-gnu/libQt5Network.so.5
#6  0x1e718ef4 in QSslSocket::supportsSsl() () from 
/usr/lib/powerpc-linux-gnu/libQt5Network.so.5
#7  0x202edca4 in ThirdParty::start() ()
#8  0x207e8aac in Messenger::Messenger() ()
#9  0x20643c50 in Application::createMessenger() ()
#10 0x20644004 in Sandbox::launch() ()
#11 0x20644428 in Application::socketError(QLocalSocket::LocalSocketError) ()
#12 0x1d700aec in QMetaObject::activate(QObject*, int, int, void**) () from 
/usr/lib/powerpc-linux-gnu/libQt5Core.so.5
#13 0x1d70127c in QMetaObject::activate(QObject*, QMetaObject const*, int, 
void**) ()
   from /usr/lib/powerpc-linux-gnu/libQt5Core.so.5
#14 0x1e6ece00 in QLocalSocket::error(QLocalSocket::LocalSocketError) () from 
/usr/lib/powerpc-linux-gnu/libQt5Network.so.5
#15 0x1e6f7640 in ?? () from /usr/lib/powerpc-linux-gnu/libQt5Network.so.5
#16 0x1e6f83cc in ?? () from /usr/lib/powerpc-linux-gnu/libQt5Network.so.5
#17 0x1e6f85b0 in 
QLocalSocket::connectToServer(QFlags) ()
   from /usr/lib/powerpc-linux-gnu/libQt5Network.so.5
#18 0x1e6ed3d4 in QLocalSocket::connectToServer(QString const&, 
QFlags) ()
   from /usr/lib/powerpc-linux-gnu/libQt5Network.so.5
#19 0x20644aa0 in Application::Application(int&, char**) ()
#20 0x201dd7dc in main ()
(gdb) 

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

If there is anything else that I can provide, please let me know and I will
do my best.


Thanks,

Rogério.


-- System Information:
Debian Release: 9.0
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental')
Architecture: powerpc
 (ppc)

Kernel: Linux 4.9.0-3-powerpc
Locale: LANG=en_US.utf-8, LC_CTYPE=pt_BR.utf-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libssl1.0.2 depends on:
ii  debconf [debconf-2.0]  1.5.60
ii  libc6  2.24-10

libssl1.0.2 recommends no packages.

libssl1.0.2 suggests no packages.

-- debconf information:
  libssl1.0.2/restart-failed:
  libssl1.0.2/restart-services:

-- 
Rogério Brito : rbrito@{ime.usp.br,gmail.com} : GPG key 4096R/BCFC
http://cynic.cc/blog/ : github.com/rbrito : profiles.google.com/rbrito
DebianQA: http://qa.debian.org/developer.php?login=rbrito%40ime.usp.br

Bug#862176: gcc-snapshot: needs packages from experimental, with -fsanitize=address

[Vincent Lefevre]

On 2017-05-10 03:26:14 +0200, Vincent Lefevre wrote:
> Forget that. This breaks the use of LD_RUN_PATH. :( Or the contents
> of LD_RUN_PATH should be added as rpath arguments by the wrapper.

In case this can be useful:

#!/bin/sh
LD_LIBRARY_PATH=/usr/lib/gcc-snapshot/lib:$LD_LIBRARY_PATH
PATH=/usr/lib/gcc-snapshot/bin:$PATH
rpath=""
OLD_IFS="$IFS"
IFS=:
for i in $LD_RUN_PATH
do
  rpath="$rpath -Wl,-rpath -Wl,$i"
done
IFS="$OLD_IFS"
exec gcc -Wl,-rpath -Wl,/usr/lib/gcc-snapshot/lib \
 -Wl,-rpath -Wl,/usr/lib/gcc-snapshot/lib32 \
 -Wl,-rpath -Wl,/usr/lib/gcc-snapshot/libx32 $rpath "$@"

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Bug#813740: ITP: semver -- Python package to work with Semantic Versioning

[陳昌倬]

Control: retitle -1 ITP: semver -- Python package to work with Semantic 
Versioning
Control: owner -1 !

I will handle this one.


-- 
ChangZhuo Chen (陳昌倬) czchen@{czchen,debian}.org
http://czchen.info/
Key fingerprint = BA04 346D C2E1 FE63 C790  8793 CC65 B0CD EC27 5D5B


signature.asc
Description: PGP signature

Bug#862176: gcc-snapshot: needs packages from experimental, with -fsanitize=address

[Vincent Lefevre]

On 2017-05-10 01:31:02 +0200, Vincent Lefevre wrote:
> > closing this issue, there is no "propoer" solution.
> 
> I'm just thinking... Couldn't the use of a run path for
> /usr/lib/gcc-snapshot/lib be a proper solution? i.e. give
> a better wrapper as an example? For instance, on amd64,
> the wrapper could be:
> 
> --- snip --
> #!/bin/sh
> LD_LIBRARY_PATH=/usr/lib/gcc-snapshot/lib:$LD_LIBRARY_PATH
> PATH=/usr/lib/gcc-snapshot/bin:$PATH
> exec gcc -Wl,-rpath -Wl,/usr/lib/gcc-snapshot/lib \
>  -Wl,-rpath -Wl,/usr/lib/gcc-snapshot/lib32 \
>  -Wl,-rpath -Wl,/usr/lib/gcc-snapshot/libx32 "$@"
> --- snip --

Forget that. This breaks the use of LD_RUN_PATH. :( Or the contents
of LD_RUN_PATH should be added as rpath arguments by the wrapper.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Bug#814038: [Aptitude-devel] Bug#814038: aptitude: Provide a way to reverse order with any of the available sorting criterias

[Axel Beckert]

Hi Manuel,

Manuel A. Fernandez Montecelo wrote:
> >Thanks for the reminder, but probably not, at least not this weekend.
> 
> I plan to do a release next week-end or so, to include the latest
> translations.

Ok, thanks for yet another reminder. I hope to get it done in time,
but I'm on a conferency meeting on Friday 

> I think that all documentation fixes are welcome, so if you feel so
> inclined, it would be a great time to address this, and so we have a
> beefier update than just translation updates, even if not much more :D
> 
> Same goes for #702565.

*nod*
Regards, Axel (should go to bed now)
-- 
 ,''`.  |  Axel Beckert , http://people.debian.org/~abe/
: :' :  |  Debian Developer, ftp.ch.debian.org Admin
`. `'   |  4096R: 2517 B724 C5F6 CA99 5329  6E61 2FF9 CD59 6126 16B5
  `-|  1024D: F067 EA27 26B9 C3FC 1486  202E C09E 1D89 9593 0EDE

Bug#862225: draft patch

[Trent W. Buck]

This goes into the deb-src package something like this (attached, UNTESTED).
git://anonscm.debian.org/collab-maint/libpam-mount.git

I couldn't find docs for the pam-auth-update config format;
https://wiki.ubuntu.com/PAMConfigFrameworkSpec is the original blueprint.

I couldn't test it experimentally because my pam-mounts aren't authenticated. ☹
>From f4b3f64158e8a65a44c76a97ca5951cba86023b0 Mon Sep 17 00:00:00 2001
From: "Trent W. Buck" 
Date: Wed, 10 May 2017 10:01:03 +1000
Subject: [PATCH] (EXPERIMENTAL) after expired-password reset, mount with NEW
 password

---
 debian/pam-auth-update | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/pam-auth-update b/debian/pam-auth-update
index 8b509ef..9f251d6 100644
--- a/debian/pam-auth-update
+++ b/debian/pam-auth-update
@@ -8,3 +8,6 @@ Session-Interactive-Only: yes
 Session-Type: Additional
 Session:
 	optional	pam_mount.so
+Password-Type: Additional
+Password:
+	optional	pam_mount.so	disable_interactive
-- 
2.1.4

Bug#862228: desktop-base: xml errors in /usr/share/gnome-background-properties/debian-joy.xml and debian-joy-inksplat.xml

[Mark Hedges]

Package: desktop-base
Version: 9.0.2
Severity: normal

I tried to run `nautilus-desktop` in LXDE after killing pcmanfm, then tried to 
change the desktop background:


hedges@hazelnut:~$ nautilus-desktop
/usr/share/gnome-background-properties/debian-joy-inksplat.xml:14: parser error 
: expected '>'

   ^
/usr/share/gnome-background-properties/debian-joy-inksplat.xml:15: parser error 
: Premature end of data in tag wallpapers line 3

^
/usr/share/gnome-background-properties/debian-joy.xml:14: parser error : 
expected '>'

   ^
/usr/share/gnome-background-properties/debian-joy.xml:15: parser error : 
Premature end of data in tag wallpapers line 3

^
/usr/share/gnome-background-properties/debian-joy-inksplat.xml:14: parser error 
: expected '>'

   ^
/usr/share/gnome-background-properties/debian-joy-inksplat.xml:15: parser error 
: Premature end of data in tag wallpapers line 3

^
/usr/share/gnome-background-properties/debian-joy.xml:14: parser error : 
expected '>'

   ^
/usr/share/gnome-background-properties/debian-joy.xml:15: parser error : 
Premature end of data in tag wallpapers line 3


Removing the extraneous "" opening tag in the files fixed the 
warning, although it still didn't let me change the background.

Mark


-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.9.0-2-rt-amd64 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages desktop-base depends on:
ii  dpkg 1.18.23
ii  librsvg2-common  2.40.16-1+b1

desktop-base recommends no packages.

Versions of packages desktop-base suggests:
ii  gnome  1:3.22+2

-- no debconf information

Bug#862148: Lynx: Long search strings to Google get truncated.

[Thomas Dickey]

On Mon, May 08, 2017 at 09:17:22PM -0700, David Lawyer wrote:
> Package: lynx
> Varsion: 2.8.9dev13-l
> 
> When I type in a search string (in English) to Google or Bing and the length 
> of my
> search string is longer than the blank space that Goolge or Bing provides
> for it, the excess part of the string doesn't get typed in (or if it does
> it doesn't get echoed to the screen).  This problem was not present in
> dev11-1.  I suspect that this bug is due to the fix for another bug
> involving the echoing of multi-byte characters #841155 which dev13-1
> fixed.  But it seems that this fix has resulted in a new bug.

I see.  While I'm fixing this case, it would be nice to know if the
original bug report is addressed...

-- 
Thomas E. Dickey 
http://invisible-island.net
ftp://invisible-island.net


signature.asc
Description: Digital signature

Bug#862217: [Pkg-sysvinit-devel] Bug#862217: initscript does fsck on empty floppy drive and stops booting

[Henrique de Moraes Holschuh]

On Tue, 09 May 2017, David Lawyer wrote:
> My PC has a floppy drive which I seldom use.  When I boot linux, it runs
> /etc/init.d/checkfs.sh which runs fsck.fat on the floppy drive
> /dev/fd0.  The fsck fails because there is no floppy in the drive and

...

> Linux should not try to run fsck on a floppy drive at boottime, unless
> perhaps if it's booting from floppy and the boot fails.  I'm booting from
> my harddrive.

...

> Here's my /etc/fstab file:
> # /etc/fstab: static file system information for 80GB Maxtor.
> #
> #
> LABEL=80GB-Maxtor /ext4defaults0   1
> LABEL=80GB-Maxtor-swp   noneswapsw0   0
> /dev/cdrom /home/dave/cd  iso9660 rw,noauto,user   0   2  
> LABEL=8GB-Maxtor /bak ext4rw,noauto,user,exec  0  
>  2
> /dev/fd0  /home/dave/fd   vfatrw,noauto,user,noexec,  0   
> 1   

Please change that last line in /etc/fstab to:

/dev/fd0 /home/dave/fd vfat rw,noauto,user,noexec 0 0

(i.e. that last "1" needs to be "0").

After updating /etc/fstab, please regenerate the initramfs just in case.
As root:

update-initramfs -u

Then reboot to test the changes, without a floppy inserted.  It should
not attempt to fsck /dev/fd0.

-- 
  Henrique Holschuh

Bug#862176: gcc-snapshot: needs packages from experimental, with -fsanitize=address

[Vincent Lefevre]

Control: reopen -1
Control: severity -1 minor
Control: retitle -1 gcc-snapshot: README.Debian is inaccurate concerning 
LD_LIBRARY_PATH

On 2017-05-10 00:00:10 +0200, Matthias Klose wrote:
> set LD_LIBRARY_PATH for running your binaries.

OK, I now understand (I didn't see that gcc-snapshot provided
/usr/lib/gcc-snapshot/lib/libasan.so.4), but this was not clear.
The /usr/share/doc/gcc-snapshot/README.Debian file first says:


To use this snapshot, you should set the following environment variables:

LD_LIBRARY_PATH=/usr/lib/gcc-snapshot/lib:$LD_LIBRARY_PATH
PATH=/usr/lib/gcc-snapshot/bin:$PATH


That way, things will work. But just after, it suggests an alternate
solution:


You might also like to use a shell script to wrap up this 
funcationality, e.g. 
 
place in /usr/local/bin/gcc-snapshot and chmod +x it 
 
--- snip --
#! /bin/sh
LD_LIBRARY_PATH=/usr/lib/gcc-snapshot/lib:$LD_LIBRARY_PATH
PATH=/usr/lib/gcc-snapshot/bin:$PATH
gcc "$@"
--- snip --

Make the same for g++, g77, gij, gcj, cpp, ...


This is the solution I'm currently using, but as you say, this may
not be sufficient. There should be some warning saying that under
some conditions, such as the use of the address sanitizer, the
LD_LIBRARY_PATH will also be needed for the generated binaries.
Or...

> closing this issue, there is no "propoer" solution.

I'm just thinking... Couldn't the use of a run path for
/usr/lib/gcc-snapshot/lib be a proper solution? i.e. give
a better wrapper as an example? For instance, on amd64,
the wrapper could be:

--- snip --
#!/bin/sh
LD_LIBRARY_PATH=/usr/lib/gcc-snapshot/lib:$LD_LIBRARY_PATH
PATH=/usr/lib/gcc-snapshot/bin:$PATH
exec gcc -Wl,-rpath -Wl,/usr/lib/gcc-snapshot/lib \
 -Wl,-rpath -Wl,/usr/lib/gcc-snapshot/lib32 \
 -Wl,-rpath -Wl,/usr/lib/gcc-snapshot/libx32 "$@"
--- snip --

This seems to work (I've tested on amd64 with and without -m32).
Wouldn't this be a better solution?

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Bug#862217: initscript does fsck on empty floppy drive and stops booting

[Ian Jackson]

David Lawyer writes ("Bug#862217: initscript does fsck on empty floppy drive 
and stops booting"):
> Package: initscripts
> Version: 2.88dsf-59.9_i38
...
> /dev/fd0  /home/dave/fd   vfatrw,noauto,user,noexec,  0   
> 1   

The final field there, the 1, is the fs_passno field and means to
check the filesystem.  See fstab(5).  Where did that fstab entry come
from ?  That is where the bug lies.

Regards,
Ian.

Bug#862227: haskell-posix-pty: FTBFS on non-Linux: libutil.h absent

[Aaron M. Ucko]

Source: haskell-posix-pty
Version: 0.2.1.1-1
Severity: important
Justification: fails to build from source

Builds of haskell-posix-pty for kFreeBSD and the Hurd have been failing:

  cbits/fork_exec_with_pty.c:19:21: error:
   fatal error: libutil.h: No such file or directory

Per
https://sources.debian.net/src/haskell-posix-pty/0.2.1.1-1/cbits/fork_exec_with_pty.c/#L16,
upstream apparently assumes that only Linux has , and that
other operating systems should use  (or , in the
case of macOS).  AFAICT, *all* glibc systems have , so I'd
suggest substituting __GLIBC__ for __linux__ here.

Could you please take a look?

Thanks!

-- 
Aaron M. Ucko, KB1CJC (amu at alum.mit.edu, ucko at debian.org)
http://www.mit.edu/~amu/ | http://stuff.mit.edu/cgi/finger/?a...@monk.mit.edu

Bug#862226: XeTeX chokes if fontconfig returns a WOFF file to them

[Bobby de Vos]

Package: texlive-binaries
Version: 2015.20160222.37495-1
Severity: normal

This issue was first filed under the fontconfig package,
see https://bugs.debian.org/861938 for all the needed details.

-- 
Bobby de Vos
/bobby_de...@sil.org/

Bug#834095: libcwidget-dev: Bad Declaration in cwidget.pc

[Manuel A. Fernandez Montecelo]

Control: tags -1 + pending


Hi Leo,

2016-08-11 22:46 Leo L. Schwab:

Package: libcwidget-dev
Version: 0.5.17-4+b1
Severity: normal

Dear Maintainer,

Upon installation of libcwidget-dev, 'pkg-config --cflags' returns
an incomplete set of options:


$ pkg-config --cflags cwidget
-I/usr/lib/x86_64-linux-gnu/cwidget -I/usr/include/sigc++-2.0 
-I/usr/lib/x86_64-linux-gnu/sigc++-2.0/include


Missing from this list is '-I/usr/include/cwidget', needed for any
compilation to succeed.  Looking at cwidget.pc, it appears that Cflags is
defined incorrectly, referring to ${includedir} rather than
${pkgincludedir}.  I've attached a diff/patch that fixes the problem on my
local machine.


Thanks for the report and the patch.

I committed this fix to the upstream side of cwidget, it will be
released soon-ish.


Cheers.

--
Manuel A. Fernandez Montecelo 

Bug#862225: pam_mount mounts using old password when a password change is forced on login

[Floris Bos]

Package: libpam-mount

Version: 2.14-1.1



I have a setup where client computers run Debian Jessie and use:


- libpam-ldapd for authentication
- libpam-mount to mount a remote home directory through sshfs, using the 
login password entered by the user. The remote server uses the same ldap 
server for authentication.



Normally works.

However if the user's password has expired, and he is forced to change 
it straight away on login, libpam-mount fails to mount the home directory.


It tries to login to the remote server with the old password, instead of 
the changed new one.



It seems the Debian package only adds libpam-mount to 
/etc/pam.d/common-auth (to capture the entererd password), and 
/etc/pam.d/common-session (where it uses the earlier captured password 
to do the actual mount).


However to be able to capture the new password on forced password 
changes on login, it should also be added to /etc/pam.d/common-password



Adding the following line there seems to fix it for me:


passwordoptionalpam_mount.so 
disable_interactive




--
Yours sincerely,

Floris Bos

Bug#862068: 9wm: inactive window border color

[Jacob Adams]

On Mon, May 8, 2017 at 1:39 AM, Ricardo Fabian Peliquero <
zh...@lasampa.com.ar> wrote:

> Setting inactive window border color to black falls back to default 
> (white). Other colors, however, do work as expected.


Thanks for the report!

I've fixed this bug upstream with commit d3c813eaa221
I'll tag it and upload it this weekend.

Thanks,

Jacob

Thanks for the report!I've fixed this bug upstream with commit On Mon, May 8, 2017 at 1:39 AM, Ricardo Fabian Peliquero  wrote:Package: 9wm
Version: 1.3.9-1
Severity: normal

Dear Maintainer,

Setting inactive window border color to black falls back to default (white). Other colors, however, do work as expected.

Kindest regards,

Ricardo

-- System Information:
Debian Release: 9.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.11.0-trunk-amd64 (SMP w/2 CPU cores)
Locale: LANG=es_AR.UTF-8, LC_CTYPE=es_AR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages 9wm depends on:
ii  libc6     2.24-10
ii  libx11-6  2:1.6.4-3
ii  libxext6  2:1.3.3-1+b2

9wm recommends no packages.

Versions of packages 9wm suggests:
ii  9menu  1.9-1+b1

-- no debconf information

Bug#862223: RFS: xtensor/0.10.1-1

[Ghislain Vaillant]

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for the following package:

* Package name: xtensor
  Version : 0.10.1-1
  Upstream Author : Johan Mabille and Sylvain Corlay
* URL : http://quantstack.net/xtensor
* License : BSD
  Section : libs

One can check out the package by visiting the following URL:

  https://anonscm.debian.org/git/debian-science/packages/xtensor.git

Changes since the last upload:

  * Fixup the watch regex
  * New upstream version 0.10.1

Best regards,
Ghis

Bug#702565: [Aptitude-devel] Bug#814038: aptitude: Provide a way to reverse order with any of the available sorting criterias

[Manuel A. Fernandez Montecelo]

Hi Axel,

2016-06-11 00:16 Axel Beckert:

Hi Manuel,

Manuel A. Fernandez Montecelo wrote:

>>I think adding the information about negation here, probably terser
>>than in the User's Manual, would be good thing while not really
>>duplicating data (like the list of available sorting criteria, which
>>probably changes more often than the negation character).
>>
>>I can take care of that.

[…]

>Please do, and add the sort criteria as well.

Any chance of addressing this soon?


Thanks for the reminder, but probably not, at least not this weekend.


I plan to do a release next week-end or so, to include the latest
translations.

I think that all documentation fixes are welcome, so if you feel so
inclined, it would be a great time to address this, and so we have a
beefier update than just translation updates, even if not much more :D

Same goes for #702565.


Cheers.
--
Manuel A. Fernandez Montecelo 

Bug#862224: morris: should be in BoardGame not LogicalGame

[Xavier Brochard]

Package: morris
Version: 0.2-2+b1
Severity: minor

Dear Maintainer,

As a game against an opponent, Morris should be categorized in BoardGame not in 
LogicalGame where you are supposed to play alone.
Some similar games in BoardGame casegorie : Pentopi, Gnugo, kigo, FLTK checkers 
(in fltk1.3-games)

Regards
Xavier Brochard


-- System Information:
Debian Release: 8.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.3.0-0.bpo.1-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages morris depends on:
ii  gconf-service   3.2.6-3
ii  libboost-signals1.55.0  1.55.0+dfsg-3
ii  libc6   2.19-18+deb8u7
ii  libcairo2   1.14.0-2.1+deb8u2
ii  libgcc1 1:4.9.2-10
ii  libgconf-2-43.2.6-3
ii  libglib2.0-02.42.1-1+b1
ii  libgtk2.0-0 2.24.25-3+deb8u1
ii  libstdc++6  4.9.2-10

morris recommends no packages.

Versions of packages morris suggests:
pn  morris-dbg  

-- no debconf information

Bug#862222: pawX11 crashes at start

[Simon]

Package: paw
Version: 1:2.14.04.dfsg.2-9+b2
Severity: grave
Justification: renders package unusable

Dear Maintainer,
on my machine the pawX11 executable crashes right on start with
the error message:

LOCB/LOCF: address 0x557a8da31260 exceeds the 32 bit address space
or is not in the data segments
This may result in program crash or incorrect results
Therefore we will stop here


Googling the problem leads to some very old site
https://bugzilla.redhat.com/show_bug.cgi?id=241416
claiming that gfortran build requires the flag -fno-automatic
Could that have been dropped out at some point?




-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages paw depends on:
ii  gfortran 4:6.3.0-4
ii  libc62.24-10
ii  libgcc1  1:6.3.0-16
ii  libgfortran3 6.3.0-16
ii  liblapack3 [liblapack.so.3]  3.7.0-1
ii  libquadmath0 6.3.0-16
ii  libx11-6 2:1.6.4-3
ii  netbase  5.4
ii  paw-common   1:2.14.04.dfsg.2-9

paw recommends no packages.

Versions of packages paw suggests:
ii  gv 1:3.7.4-1+b1
pn  paw-demos  

-- no debconf information

Bug#862083: firejail: crashes when using --allow-debuggers ("free(): invalid pointer")

[Sascha Silbe]

Dear Reiner,

Reiner Herrmann  writes:

[...]
> I was able to reproduce the issue in a jessie chroot with the bpo package.
> After some debugging I found that it is a memory corruption in fs.c.
> Fortunately it has also already been fixed upstream [1], which is
> already part of 0.9.44.10-1.
> I will cherry-pick the fix for (hopefully) stretch and backports.

Awesome, thanks!

Sascha


signature.asc
Description: PGP signature

Bug#851877: fails every time

[Guillaume Delacour]

Hi,

On Sat, 6 May 2017 20:57:44 +0200 Adam Borowski  wrote:
> On Sat, May 06, 2017 at 08:00:11PM +0200, Michael Stapelberg wrote:
> > Thanks. It seems like getaddrinfo() is returning two results when resolving
> > localhost. Can you provide the contents of your hostname resolution-related
> > configuration please? I.e., /etc/hosts, /etc/resolv.conf,
> > /etc/nsswitch.conf, anything else you might have tweaked in that area.
> 
> nsswitch.conf: always default.
> 
> 
> amd64 (100% fails on all chroots):
> .--[ /etc/hosts ]
> 127.0.0.1 localhost
> 127.0.1.1 umbar.angband.plumbar
> #lots of commented out stuff
> 
> # The following lines are desirable for IPv6 capable hosts
> ::1 localhost ip6-localhost ip6-loopback
> ff02::1 ip6-allnodes
> ff02::2 ip6-allrouters
> +--[ /etc/resolv.conf ]
> domain angband.pl
> search angband.pl
> nameserver 2001:6a0:118::3:2
> `
> 
> armhf (100% fails on all chroots):
> .--[ /etc/hosts ]
> 127.0.0.1 localhost
> ::1   localhost ip6-localhost ip6-loopback
> fe00::0   ip6-localnet
> ff00::0   ip6-mcastprefix
> ff02::1   ip6-allnodes
> ff02::2   ip6-allrouters
> 
> 127.0.0.1  kholdankholdan.angband.pl
> 2001:6a0:118::3:6 narchost
> #2001:6a0:118::3:3apt.angband.pl
> +--[ /etc/resolv.conf ]
> domain angband.pl
> search angband.pl
> nameserver 10.0.1.2
> `
> 
> arm64 (100% ok on all chroots):
> .--[ /etc/hosts ]
> 127.0.0.1 localhost
> 127.0.1.1 sirius.angband.pl sirius
> 
> # The following lines are desirable for IPv6 capable hosts
> ::1 localhost ip6-localhost ip6-loopback
> fe00::0 ip6-localnet
> ff00::0 ip6-mcastprefix
> ff02::1 ip6-allnodes
> ff02::2 ip6-allrouters
> +--[ /etc/resolv.conf ]
> domain angband.pl
> nameserver 10.0.1.2
> nameserver 2001:6a0:118::3:2
> `
> 

I've also spent time to reproduce this and despite my attempt to disable
localhost IPv6 resolution [0], i already encountered issues for echosrv
on ::1.

You can also try to replace any occurrence of `localhost` on t file by
127.0.0.1. If the testsuite cause trouble, i'll disable IPv6 completely
even on loopback (i didn't like the idea at first glance because want to
keep the testsuite as close as upstream ship it).

Then, any other special configurations in /etc/gai.conf ?

[0]:
https://anonscm.debian.org/cgit/collab-maint/sslh.git/tree/debian/patches/ftbfs_localhost.diff

-- 
Guillaume Delacour



signature.asc
Description: OpenPGP digital signature

Bug#862221: csh: Wrong arithmetic precedence

[Gilles Filippini]

Package: csh
Version: 20110502-2.2+b1
Severity: important

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

bsd-csh returns wrong results for simple arithmetic expressions such as 'a - b 
+ c':
 $ /bin/bsd-csh -c '@ var = 10 - 2 + 3; echo $var # should be 11'
 5 # should be 11

It seems it operates from the right to the left, computing a - (b + c) instead 
of (a - b) + c.

tcsh gives the correct result:
 $ /bin/tcsh -c '@ var = 10 - 2 + 3; echo $var # should be 11'
 11 # should be 11

Thanks,

_g.

- -- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages csh depends on:
ii  libbsd0  0.8.3-1
ii  libc62.24-10

csh recommends no packages.

csh suggests no packages.

- -- no debconf information

-BEGIN PGP SIGNATURE-

iQEzBAEBCAAdFiEEoJObzArDE05WtIyR7+hsbH/+z4MFAlkSORwACgkQ7+hsbH/+
z4OLrwgAhqoUBugwz1M8n9p+OSDZyyUvpLUkOiUyvceof/3Tw9f6NvHPeGhGZ/Gh
lngbneSWpkBZ+gZ4iVlHuIy4230spIMSM+/ukjwIxZ7hZ7PU6C9YklYy68iYNE7V
MjqVOmjftgX7M0z0cyEQ1/Vj66ubaVYmYInclbBV8eRqdunHGWfl0iRedOpCQ+79
r9MSljAXj482qnkHRg3R+c+jJlMyQfCzj/aaNteCrM03xx8WrAG93oTLNtuOl8nF
QdGhO/ToPz8W9FPNkEaVePUfnVMPYZ6FVrtLzUfRHbr+u+2ueRy66mZHdahbQGnd
iG6dJfbx9E5ITn2uzcmSC8otzPinBQ==
=+hB4
-END PGP SIGNATURE-

Bug#858923: libpam-winbind: Cannot change password via passwd (pam) in default config

[Matthew Gabeler-Lee]

Package: libpam-winbind
Version: 2:4.5.8+dfsg-1
Followup-For: Bug #858923

The common recommendation for how to fix this issue, as long as you don't
have too much else in the way of "interesting" module stacking is to remove
use_authtok from the pam_winbind entry.

But that will get clobbered the next time pam-auth-update gets run AFAICT.

So I thought the next best solution would be to edit
/usr/share/pam-configs/winbind to change the template entry for winbind. 
But that's not a conf file, so it too will get clobbered, this time on
package upgrade.

Making /usr/share/pam-configs/winbind a conffile would at least allow
reasonable sysadmin workarounds.

While others disagree, I'd go so far as to say that removing use_authtok
should be the default, as the simple PAM configs are going to be vastly more
common than the complex stacking ones that might be adversely affected by
that.

Another way around this I guess might be to have a special PAM module that's
not part of the normal stack whose sole purpose is to force the prompt for
the new password to happen, and then make all the "real" modules use
use_authtok, including pam_unix.  That's a more complex and invasive change,
though.

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 
'testing-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 
'experimental')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libpam-winbind depends on:
ii  dpkg1.18.23
ii  libbsd0 0.8.3-1
ii  libc6   2.24-10
ii  libpam-runtime  1.1.8-3.5
ii  libpam0g1.1.8-3.5
ii  libtalloc2  2.1.8-1
ii  libwbclient02:4.5.8+dfsg-1
ii  samba-common2:4.5.8+dfsg-1
ii  samba-libs  2:4.5.8+dfsg-1
ii  winbind 2:4.5.8+dfsg-1

libpam-winbind recommends no packages.

Versions of packages libpam-winbind suggests:
ii  libnss-winbind  2:4.5.8+dfsg-1

-- no debconf information

Bug#862219: unblock: at-spi2-atk/2.22.0-2

[Samuel Thibault]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Hello,

Upstream of at-spi has released some serious fixes for at-spi2-atk,
which I have uploaded as at-spi2-atk 2.22.0-2, and attached to this
mail.

git-7cdc1f91c9802b0b8ecd2afea38c1717b1921736 fixes a memory corruption
reported by valgrind, which could make basically any application crash
when the Orca screen reader is running, when processing events. It does
so by just using the right glib function for what the buggy code meant
to do.

git-8d3cc68f7bc62c7015d986212be0d5d776920ee2 fixes memory references
after dropping a refcount from the object (thus potentially freed), also
leading to potential crash of any application when the Orca screen
reader is running.

unblock at-spi2-atk/2.22.0-2

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 
'testing-debug'), (500, 'buildd-unstable'), (500, 'unstable'), (500, 'stable'), 
(500, 'oldstable'), (1, 'experimental-debug'), (1, 'buildd-experimental'), (1, 
'experimental')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.11.0 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

-- 
Samuel
if (argc > 1 && strcmp(argv[1], "-advice") == 0) {
printf("Don't Panic!\n");
exit(42);
}
-- Arnold Robbins in the LJ of February '95, describing RCS
diff -Nru at-spi2-atk-2.22.0/debian/changelog 
at-spi2-atk-2.22.0/debian/changelog
--- at-spi2-atk-2.22.0/debian/changelog 2016-10-01 22:09:42.0 +0200
+++ at-spi2-atk-2.22.0/debian/changelog 2017-05-09 21:35:33.0 +0200
@@ -1,3 +1,12 @@
+at-spi2-atk (2.22.0-2) unstable; urgency=medium
+
+  * patches/git-7cdc1f91c9802b0b8ecd2afea38c1717b1921736: Fix GList handling
+resulting in memory corruption.
+  * patches/git-8d3cc68f7bc62c7015d986212be0d5d776920ee2: Fix use after free
+when returned objects hold only one ref.
+
+ -- Samuel Thibault   Tue, 09 May 2017 21:35:33 +0200
+
 at-spi2-atk (2.22.0-1) unstable; urgency=medium
 
   * New upstream release.
diff -Nru 
at-spi2-atk-2.22.0/debian/patches/git-7cdc1f91c9802b0b8ecd2afea38c1717b1921736 
at-spi2-atk-2.22.0/debian/patches/git-7cdc1f91c9802b0b8ecd2afea38c1717b1921736
--- 
at-spi2-atk-2.22.0/debian/patches/git-7cdc1f91c9802b0b8ecd2afea38c1717b1921736  
1970-01-01 01:00:00.0 +0100
+++ 
at-spi2-atk-2.22.0/debian/patches/git-7cdc1f91c9802b0b8ecd2afea38c1717b1921736  
2017-05-09 21:35:33.0 +0200
@@ -0,0 +1,101 @@
+commit 7cdc1f91c9802b0b8ecd2afea38c1717b1921736
+Author: Rui Matos 
+Date:   Mon Apr 24 14:39:05 2017 +0200
+
+atk-adaptor/bridge: Fix GList handling resulting in memory corruption
+
+As pointed out by this valgrind log:
+
+==2809== Thread 1:
+==2809== Invalid write of size 8
+==2809==at 0x18FCF001: remove_events (bridge.c:759)
+==2809==by 0x18FCF001: handle_event_listener_deregistered 
(bridge.c:788)
+==2809==by 0x18FCF001: signal_filter (bridge.c:827)
+==2809==by 0x200ECDFD: dbus_connection_dispatch 
(dbus-connection.c:4631)
+==2809==by 0x1FEBD0F4: ??? (in /usr/lib64/libatspi.so.0.0.1)
+==2809==by 0xFD8D4C8: g_main_dispatch (gmain.c:3201)
+==2809==by 0xFD8D4C8: g_main_context_dispatch (gmain.c:3854)
+==2809==by 0xFD8D817: g_main_context_iterate.isra.21 (gmain.c:3927)
+==2809==by 0xFD8DAE9: g_main_loop_run (gmain.c:4123)
+==2809==by 0xDFF84B4: gtk_main (in /usr/lib64/libgtk-3.so.0.2200.10)
+==2809==by 0x403DE0: main (in /usr/bin/evolution)
+==2809==  Address 0x29f22540 is 16 bytes inside a block of size 24 free'd
+==2809==at 0x4C2ACDD: free (vg_replace_malloc.c:530)
+==2809==by 0xFD92BCD: g_free (gmem.c:189)
+==2809==by 0xFDAA518: g_slice_free1 (gslice.c:1136)
+==2809==by 0xFD89463: g_list_remove (glist.c:521)
+==2809==by 0x18FCF000: remove_events (bridge.c:759)
+==2809==by 0x18FCF000: handle_event_listener_deregistered 
(bridge.c:788)
+==2809==by 0x18FCF000: signal_filter (bridge.c:827)
+==2809==by 0x200ECDFD: dbus_connection_dispatch 
(dbus-connection.c:4631)
+==2809==by 0x1FEBD0F4: ??? (in /usr/lib64/libatspi.so.0.0.1)
+==2809==by 0xFD8D4C8: g_main_dispatch (gmain.c:3201)
+==2809==by 0xFD8D4C8: g_main_context_dispatch (gmain.c:3854)
+==2809==by 0xFD8D817: g_main_context_iterate.isra.21 (gmain.c:3927)
+==2809==by 0xFD8DAE9: g_main_loop_run (gmain.c:4123)
+==2809==by 0xDFF84B4: gtk_main (in /usr/lib64/libgtk-3.so.0.2200.10)
+==2809==by 0x403DE0: main (in /usr/bin/evolution)
+==2809==  Block was alloc'd at
+==2809==at 0x4C29BE3: malloc (vg_replace_malloc.c:299)
+==2809==by 0xFD92ABD: g_malloc 

Bug#862220: unblock: at-spi2-core/2.22.0-6

[Samuel Thibault]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Hello,

Upstream of at-spi has released some serious fixes for at-spi2-core,
which I have uploaded as at-spi2-core 2.22.0-6, and attached to this
mail.

git-329ef2c4ebcb3aec6dcfcac15357fd583a60c969 is reported to help fixing
https://bugzilla.gnome.org/show_bug.cgi?id=767074
Orca would sometimes hang or crash when closing an application, thus
leaving blind users without access to the computer, and have to restart
Orca blindly.  It seems there are still some cases where the crash
happens, but only after upgrading at-spi2-atk to version 2.24, which we
do not have in Debian yet.

git-eba079f3e72e61e6b55d81727ab50c85d505d296 fixes crashes in Orca too
when getting the Position property fails.

These would probably help with the grave orca Bug#862008

Samuel

unblock at-spi2-core/2.22.0-6

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 
'testing-debug'), (500, 'buildd-unstable'), (500, 'unstable'), (500, 'stable'), 
(500, 'oldstable'), (1, 'experimental-debug'), (1, 'buildd-experimental'), (1, 
'experimental')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.11.0 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

-- 
Samuel
 Battery 1: charging, 90%, charging at zero rate - will never fully charge.
 -+- acpi - et pourtant, ca monte -+-
diff -Nru at-spi2-core-2.22.0/debian/changelog 
at-spi2-core-2.22.0/debian/changelog
--- at-spi2-core-2.22.0/debian/changelog2016-12-27 19:14:48.0 
+0100
+++ at-spi2-core-2.22.0/debian/changelog2017-05-09 21:44:08.0 
+0200
@@ -1,3 +1,13 @@
+at-spi2-core (2.22.0-6) unstable; urgency=medium
+
+  * patches/git-329ef2c4ebcb3aec6dcfcac15357fd583a60c969:
+clear root accessible's ref to the app, fixes Orca sometimes hanging when
+apps are quit.
+  * patches/git-eba079f3e72e61e6b55d81727ab50c85d505d296:
+atspi_table_cell_get_position: don't crash on error
+
+ -- Samuel Thibault   Tue, 09 May 2017 21:44:08 +0200
+
 at-spi2-core (2.22.0-5) unstable; urgency=medium
 
   * patches/register-client-early: Replace by upstream proposed fix:
diff -Nru 
at-spi2-core-2.22.0/debian/patches/git-329ef2c4ebcb3aec6dcfcac15357fd583a60c969 
at-spi2-core-2.22.0/debian/patches/git-329ef2c4ebcb3aec6dcfcac15357fd583a60c969
--- 
at-spi2-core-2.22.0/debian/patches/git-329ef2c4ebcb3aec6dcfcac15357fd583a60c969 
1970-01-01 01:00:00.0 +0100
+++ 
at-spi2-core-2.22.0/debian/patches/git-329ef2c4ebcb3aec6dcfcac15357fd583a60c969 
2017-05-09 21:44:08.0 +0200
@@ -0,0 +1,20 @@
+commit 329ef2c4ebcb3aec6dcfcac15357fd583a60c969
+Author: Mike Gorse 
+Date:   Tue Jan 24 18:10:52 2017 -0600
+
+atspi_application_dispose: clear root accessible's ref to the app
+
+Hoping that this might fix 
https://bugzilla.gnome.org/show_bug.cgi?id=767074
+
+diff --git a/atspi/atspi-application.c b/atspi/atspi-application.c
+index 65cabdc..f7dd225 100644
+--- a/atspi/atspi-application.c
 b/atspi/atspi-application.c
+@@ -58,6 +58,7 @@ atspi_application_dispose (GObject *object)
+ 
+   if (application->root)
+   {
++g_clear_object (>root->parent.app);
+ g_object_unref (application->root);
+ application->root = NULL;
+   }
diff -Nru 
at-spi2-core-2.22.0/debian/patches/git-eba079f3e72e61e6b55d81727ab50c85d505d296 
at-spi2-core-2.22.0/debian/patches/git-eba079f3e72e61e6b55d81727ab50c85d505d296
--- 
at-spi2-core-2.22.0/debian/patches/git-eba079f3e72e61e6b55d81727ab50c85d505d296 
1970-01-01 01:00:00.0 +0100
+++ 
at-spi2-core-2.22.0/debian/patches/git-eba079f3e72e61e6b55d81727ab50c85d505d296 
2017-05-09 21:42:44.0 +0200
@@ -0,0 +1,24 @@
+commit eba079f3e72e61e6b55d81727ab50c85d505d296
+Author: Mike Gorse 
+Date:   Mon Mar 27 12:57:35 2017 -0500
+
+atspi_table_cell_get_position: don't crash on error
+
+diff --git a/atspi/atspi-table-cell.c b/atspi/atspi-table-cell.c
+index c18e6dc..1df1fa9 100644
+--- a/atspi/atspi-table-cell.c
 b/atspi/atspi-table-cell.c
+@@ -163,9 +163,12 @@ atspi_table_cell_get_position (AtspiTableCell *obj,
+   g_return_val_if_fail (obj != NULL, -1);
+ 
+   reply = _atspi_dbus_call_partial (obj, "org.freedesktop.DBus.Properties",
+-"Get", NULL, "ss",
++"Get", error, "ss",
+ atspi_interface_table_cell, "Position");
+ 
++  if (!reply)
++return -1;
++
+   dbus_message_iter_init (reply, );
+ 
+   /* TODO: Return error here */
diff -Nru at-spi2-core-2.22.0/debian/patches/series 
at-spi2-core-2.22.0/debian/patches/series
--- at-spi2-core-2.22.0/debian/patches/series   2016-12-27 17:27:38.0 
+0100
+++ 

Bug#862218: mumble: spams console with "warning: Unknown speex_preprocess_ctl request: 26" (and 35)

[Sascha Silbe]

Package: mumble
Version: 1.2.8-2
Severity: normal

Dear Maintainer,

on all the ARM based systems that I've tried (OLPC XO-1.75 (*), Wandboard
Quad, OpenRD Base) mumble spams stdout or stderr with these lines:

=== Begin ===
warning: Unknown speex_preprocess_ctl request:  26
warning: Unknown speex_preprocess_ctl request:  35
=== End ===


It's producing them at such a high rate that sshd consumes considerable
CPU time when I run mumble over SSH.

At least on the Wandboard Quad it happens both with on-board audio and
with a USB headset (Microsoft LifeChat LX-6000); OpenRD Base doesn't
have on-board audio so I only tried the USB headset. On XO-1.75 it
crashes before it can output more than a few of these lines; see my
other bug report (which apparently ended up on
debian-backpo...@lists.debian.org because I had the backports version
installed when I reported the bug).

Sascha

-- System Information:
Debian Release: 8.8
  APT prefers stable-updates
  APT policy: (990, 'stable-updates'), (990, 'stable'), (100, 'testing')
Architecture: armhf (armv7l)

Kernel: Linux 4.10.15-wandboard-30-2-g80e913c7cb9e (SMP w/4 CPU cores; 
PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages mumble depends on:
ii  gconf2 3.2.6-3
ii  libasound2 1.0.28-1
ii  libavahi-client3   0.6.31-5
ii  libavahi-common3   0.6.31-5
ii  libavahi-compat-libdnssd1  0.6.31-5
ii  libc6  2.19-18+deb8u9
ii  libg15daemon-client1   1.9.5.3-8.3
ii  libgcc11:4.9.2-10
ii  libopus0   1.1-2
ii  libprotobuf9   2.6.1-1
ii  libpulse0  5.0-13
ii  libqt4-dbus4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libqt4-network 4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libqt4-sql 4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libqt4-sql-sqlite  4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libqt4-svg 4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libqt4-xml 4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libqtcore4 4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libqtgui4  4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1
ii  libsndfile11.0.25-9.1+deb8u1
ii  libspeechd20.8-7
ii  libspeex1  1.2~rc1.2-1
ii  libspeexdsp1   1.2~rc1.2-1
ii  libssl1.0.01.0.1t-1+deb8u6
ii  libstdc++6 4.9.2-10
ii  libx11-6   2:1.6.2-3
ii  libxi6 2:1.7.4-1+b2
ii  lsb-release4.1+Debian13+nmu1

mumble recommends no packages.

Versions of packages mumble suggests:
ii  mumble-server  1.2.8-2
pn  speech-dispatcher  

-- no debconf information

Bug#862217: initscript does fsck on empty floppy drive and stops booting

[David Lawyer]

Package: initscripts
Version: 2.88dsf-59.9_i38

My PC has a floppy drive which I seldom use.  When I boot linux, it runs
/etc/init.d/checkfs.sh which runs fsck.fat on the floppy drive
/dev/fd0.  The fsck fails because there is no floppy in the drive and
booting halts.  The error message is: open: No such device or address fsck.fat 
4.1 (2017-01-24).
The error message is also wrong since there is such a device, /dev/fd0,
but it has no media (disk) in it.  Following this error message are
messages that fsck failed and that I can type C-d to continue booting.

Linux should not try to run fsck on a floppy drive at boottime, unless
perhaps if it's booting from floppy and the boot fails.  I'm booting from
my harddrive.

Here's my /etc/fstab file:
# /etc/fstab: static file system information for 80GB Maxtor.
#
#
LABEL=80GB-Maxtor   /ext4defaults0   1
LABEL=80GB-Maxtor-swp   noneswapsw0   0
/dev/cdrom   /home/dave/cd  iso9660 rw,noauto,user   0   2  
LABEL=8GB-Maxtor /bak   ext4rw,noauto,user,exec  0   2
/dev/fd0/home/dave/fd   vfatrw,noauto,user,noexec,  0   
1   

David Lawyer

Bug#861736:

[Gilles Filippini]

Control: tags -1 + patch

On Mon, 8 May 2017 14:34:31 + PICCA Frederic-Emmanuel
 wrote:
> Here after rebuilding hdf5 in debug mode
> 
> :~/Debian/nexus$ ./bug.py
> H5get_libversion(majnum=0xbf8a5b04, minnum=0xbf8a5b08, relnum=0xbf8a5b0c) = 
> SUCCEED;
> H5Eset_auto2(estack=H5P_DEFAULT, func=NULL, client_data=NULL) = SUCCEED;
> H5open() = SUCCEED;
> H5Pcreate(cls=8 (genprop class)) = 18 (genprop list);
> H5Pget_cache(plist=18 (genprop list), mdc_nelmts=0xbf8a5af8, 
> rdcc_nslots=0xbf8a5afc, rdcc_nbytes=0xbf8a5b00, rdcc_w0=0xbf8a5b10) = SUCCEED;
> H5Pset_cache(plist=18 (genprop list), mdc_nelmts=0, rdcc_nslots=521, 
> rdcc_nbytes=1024000, rdcc_w0=0.75) = SUCCEED;
> H5Pset_fclose_degree(plist=18 (genprop list), degree=H5F_CLOSE_STRONG) = 
> SUCCEED;
> H5check_version(majnum=1, minnum=10, relnum=0) = SUCCEED;
> H5open() = SUCCEED;
> H5Fcreate(filename=0x82517ef8, flags=2, fcpl=H5P_DEFAULT, fapl=18 (genprop 
> list)) = 0 (file);
> H5Pclose(plist=18 (genprop list)) = SUCCEED;
> ERROR: cannot open file: filenamenxs.h5
> Traceback (most recent call last):
>   File "./bug.py", line 5, in 
> e.save("filenamenxs.h5", 'w5')
>   File "/usr/lib/python2.7/dist-packages/nxs/tree.py", line 868, in save
> file = NeXusTree(filename, format)
>   File "/usr/lib/python2.7/dist-packages/nxs/napi.py", line 320, in __init__
> raise NeXusError, "Could not %s %s"%(op,filename)

This error and others are caused by HDF5 handles being stored as int
instead of hid_t. This type changed from int to int64_t with release
1.10.0 of HDF5.

Please find attached a patch proposal.

Thanks,

_g.
diff -Nru nexus-4.3.2-svn1921/debian/changelog 
nexus-4.3.2-svn1921/debian/changelog
--- nexus-4.3.2-svn1921/debian/changelog2016-07-22 23:05:27.0 
+0200
+++ nexus-4.3.2-svn1921/debian/changelog2017-05-09 19:49:46.0 
+0200
@@ -1,3 +1,11 @@
+nexus (4.3.2-svn1921-5) UNRELEASED; urgency=medium
+
+  * QA upload.
+  * New patch hdf5-1.10-support.patch to fix incorrect type for HDF5
+handles: should be hid_t instead of int (closes: #861736)
+
+ -- Gilles Filippini   Tue, 09 May 2017 19:49:46 +0200
+
 nexus (4.3.2-svn1921-4) unstable; urgency=medium
 
   * QA upload.
diff -Nru nexus-4.3.2-svn1921/debian/patches/hdf5-1.10-support.patch 
nexus-4.3.2-svn1921/debian/patches/hdf5-1.10-support.patch
--- nexus-4.3.2-svn1921/debian/patches/hdf5-1.10-support.patch  1970-01-01 
01:00:00.0 +0100
+++ nexus-4.3.2-svn1921/debian/patches/hdf5-1.10-support.patch  2017-05-09 
19:49:46.0 +0200
@@ -0,0 +1,111 @@
+Description: HDF5 1.10.x uses 64 bit handles. They're not int anymore.
+Author: Gilles Filippini 
+Bug-Debian: https://bugs.debian.org/861736
+Index: nexus-4.3.2-svn1921/src/napi5.c
+===
+--- nexus-4.3.2-svn1921.orig/src/napi5.c
 nexus-4.3.2-svn1921/src/napi5.c
+@@ -54,12 +54,12 @@ extern  void *NXpData;
+   hsize_t iCurrentIDX;
+ } iStack5[NXMAXSTACK];
+ struct iStack5 iAtt5;
+-int iFID;
+-int iCurrentG;
+-int iCurrentD;
+-int iCurrentS;
+-int iCurrentT;
+-int iCurrentA;
++hid_t iFID;
++hid_t iCurrentG;
++hid_t iCurrentD;
++hid_t iCurrentS;
++hid_t iCurrentT;
++hid_t iCurrentA;
+ int iNX;
+ int iNXID;
+ int iStackPtr;
+@@ -434,7 +434,7 @@ NXstatus  NX5open(CONSTCHAR *filename, N
+   NXstatus  NX5makegroup (NXhandle fid, CONSTCHAR *name, CONSTCHAR *nxclass) 
+   {
+ pNexusFile5 pFile;
+-herr_t iRet;
++hid_t iRet;
+ hid_t iVID;
+ hid_t attr1,aid1, aid2;
+ char pBuffer[1024] = "";
+@@ -487,7 +487,7 @@ NXstatus  NX5open(CONSTCHAR *filename, N
+ 
+ pNexusFile5 pFile;
+ hid_t attr1, atype;
+-herr_t iRet;
++hid_t iRet;
+ char pBuffer[1024];
+ char data[128];
+   
+@@ -654,7 +654,7 @@ static hid_t nxToHDF5Type(int datatype)
+ int compress_type, int64_t 
chunk_size[])
+   {
+   hid_t datatype1, dataspace, iNew;
+-  herr_t iRet;
++  hid_t iRet;
+   hid_t type, cparms = -1;
+   pNexusFile5 pFile;
+   char pBuffer[256];
+@@ -992,8 +992,8 @@ static hid_t nxToHDF5Type(int datatype)
+ return NX_OK;
+   }
+ /*--*/
+-static int getAttVID(pNexusFile5 pFile){
+-  int vid;
++static hid_t getAttVID(pNexusFile5 pFile){
++  hid_t vid;
+  if(pFile->iCurrentG == 0 && pFile->iCurrentD == 0){
+/* global attribute */
+vid = H5Gopen(pFile->iFID,"/", H5P_DEFAULT);
+@@ -1007,7 +1007,7 @@ static int getAttVID(pNexusFile5 pFile){
+  return vid;
+ }
+ /*---*/
+-static void killAttVID(pNexusFile5 pFile, int vid){
++static void killAttVID(pNexusFile5 pFile, hid_t vid){
+   

Bug#859342: Florence: segfault when clicking on size changing keys

[Bernhard Übelacker]

Hello,
this bug is probably a duplicate of
https://bugs.debian.org/805895

Kind regards,
Bernhard

Bug#805895: florence crashed with SIGSEGV in _IO_vfprintf_internal()

[Bernhard Übelacker]

Hello,
not being the maintainer I tried to reproduce the issue.

I think we see here an exhaustion of the stack.

Because clicking on the zoom button triggers a
change of a g_settings/dconf entry.
That triggers the callback view_set_scalex into florence.
That tries to set the g_settings/dconf entry again.
And so on.

Attached (ugly) patch avoids the recursion by leaving functions
view_set_scalex and view_set_scaley if we are already executing them.
But there is probably a better way by using
g_signal_handler_block/unblock?


Kind regards,
Bernhard




benutzer@debian:~$ gdb -q --args florence
Reading symbols from florence...Reading symbols from 
/usr/lib/debug/.build-id/50/4563f002de302f17974c902b711a2e6280778d.debug...done.
done.
(gdb) run
Starting program: /usr/bin/florence 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Florence version 0.6.3
[New Thread 0x7fffe4823700 (LWP 557)]
[New Thread 0x7fffe4022700 (LWP 558)]
[New Thread 0x7fffe3821700 (LWP 559)]
[New Thread 0x7fffe3020700 (LWP 560)]
[New Thread 0x7fffe23d8700 (LWP 562)]
XRecord extension found version=1.13
Your screen does not support alpha channel. Semi-transparency is disabled
[New Thread 0x7fffe191b700 (LWP 565)]
WARNING: Service name lost.
WARNING: Notification failed

(florence:552): GLib-GObject-CRITICAL **: g_object_set: assertion 'G_IS_OBJECT 
(object)' failed

(florence:552): GStreamer-CRITICAL **: gst_element_get_bus: assertion 
'GST_IS_ELEMENT (element)' failed

(florence:552): GStreamer-CRITICAL **: gst_bus_add_watch_full: assertion 
'GST_IS_BUS (bus)' failed

(florence:552): GStreamer-CRITICAL **: gst_object_unref: assertion 'object != 
NULL' failed

(florence:552): dconf-WARNING **: failed to commit changes to dconf: Failed to 
execute child process "dbus-launch" (Datei oder Verzeichnis nicht gefunden)

(florence:552): dconf-WARNING **: failed to commit changes to dconf: Failed to 
execute child process "dbus-launch" (Datei oder Verzeichnis nicht gefunden)

...

(florence:552): dconf-WARNING **: failed to commit changes to dconf: Failed to 
execute child process "dbus-launch" (Datei oder Verzeichnis nicht gefunden)

Thread 1 "florence" received signal SIGSEGV, Segmentation fault.
g_settings_get_value (settings=0x557e25c0 [GSettings], 
key=key@entry=0x55578638 "scalex") at ././gio/gsettings.c:1200
1200././gio/gsettings.c: Datei oder Verzeichnis nicht gefunden.
(gdb) bt
#0  0x7457488e in g_settings_get_value (settings=0x557e25c0 
[GSettings], key=key@entry=0x55578638 "scalex") at ././gio/gsettings.c:1200
#1  0x555685ed in settings_value_get (item=item@entry=SETTINGS_SCALEX) 
at settings.c:348
#2  0x55568877 in settings_get_double (item=item@entry=SETTINGS_SCALEX) 
at settings.c:407
#3  0x5556e7a6 in view_set_scalex (settings=0x557e25c0 [GSettings], 
key=0x5588a31d "scalex", user_data=0x55907a30) at view.c:733
#7  0x74242fbf in  (instance=instance@entry=0x557e25c0, 
signal_id=, detail=) at ././gobject/gsignal.c:3447
#4  0x74227ecf in g_closure_invoke (closure=0x5599c660, 
return_value=return_value@entry=0x0, n_param_values=2, 
param_values=param_values@entry=0x7f7ff280, 
invocation_hint=invocation_hint@entry=0x7f7ff200) at 
././gobject/gclosure.c:804
#5  0x74239f82 in signal_emit_unlocked_R 
(node=node@entry=0x55879a40, detail=detail@entry=1267, 
instance=instance@entry=0x557e25c0, 
emission_return=emission_return@entry=0x0, 
instance_and_params=instance_and_params@entry=0x7f7ff280)
at ././gobject/gsignal.c:3635
#6  0x74242bdc in g_signal_emit_valist (instance=, 
signal_id=, detail=, 
var_args=var_args@entry=0x7f7ff440) at ././gobject/gsignal.c:3391
#8  0x74573516 in g_settings_real_change_event (settings=0x557e25c0 
[GSettings], keys=0x7f7ffb04, n_keys=) at 
././gio/gsettings.c:386
#9  0x7fffecdb0038 in ffi_call_unix64 () at ../src/x86/unix64.S:76
#10 0x7fffecdafa9a in ffi_call (cif=cif@entry=0x7f7ff790, 
fn=fn@entry=0x745734a0 , rvalue=, avalue=avalue@entry=0x7f7ff680) at ../src/x86/ffi64.c:525
#11 0x74228c8a in g_cclosure_marshal_generic_va 
(closure=0x55879af0, return_value=0x7f7ff950, instance=, 
args_list=, marshal_data=, n_params=2, 
param_types=0x55879b20) at ././gobject/gclosure.c:1604
#12 0x742280f2 in _g_closure_invoke_va 
(closure=closure@entry=0x55879af0, 
return_value=return_value@entry=0x7f7ff950, 
instance=instance@entry=0x557e25c0, args=args@entry=0x7f7ffa20, 
n_params=2, param_types=0x55879b20)
at ././gobject/gclosure.c:867
#13 0x742423a1 in g_signal_emit_valist (instance=0x557e25c0, 
signal_id=, detail=0, var_args=var_args@entry=0x7f7ffa20) at 
././gobject/gsignal.c:3300
#14 0x74242fbf in g_signal_emit 
(instance=instance@entry=0x557e25c0, signal_id=, 
detail=detail@entry=0) at 

Bug#862215: unblock: reprotest/0.6.2

[Ximin Luo]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package reprotest

I made an important cosmetic bugfix, and added some more documentation on usage
and known bugs. We also added signing keys to verify future releases with.

unblock reprotest/0.6.2

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 
'testing-debug'), (300, 'unstable'), (200, 'experimental'), (1, 
'experimental-debug')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Bug#862216: release-notes: [Stretch] improve text about iproute2 and net-tools

[Andreas Henriksson]

Package: release-notes
Severity: normal

Hello,

I recently ran across the stretch release notes draft and particularly
"5.3.9. iproute2 will replace net-tools".
See 
https://www.debian.org/releases/stretch/amd64/release-notes/ch-information.en.html#iproute2

This might be nitpicking but I find the text slightly misleading, so
I thought I'd share some thoughts.

"[...], while iproute2 has been upgraded to important."

This happened almost a decade ago (in 2008) and has been part of new
debian installations since Debian 5.0 Lenny.

The net-tools package is still available as well so for those still
wanting to use it still can, they just need to explicitly install it.

I'm not sure I should write these texts but here's an attempt at providing
an alternative description.

--8<---8<--8<--8<---

5.3.9 Users are adviced to use iproute2 instead of net-tools

The net-tools package is no longer part of new installations by default, since 
it's priority has been lowered from important to optional. Users are instead 
advised to use the modern iproute2 toolset (which has been part of new installs 
for several releases already and continues to be).
If you still prefer to continue using the net-tools programs you can simply 
install it via 'apt install net-tools'.

Here is a summary of the net-tools commands, together with their iproute2 
equivalent:

[...]

--8<---8<--8<--8<---


Please note that the 'iw' command (as suggested for iwconfig
replacement) is not from the iproute2 toolset, but rather from it's own
package 'iw'!
Similar for the ifrename command, which I wonder if it shouldn't be
considered a legacy command instead of a replacement for anything.
Modern interface naming tools more high level than 'ip link' would
likely be systemd-networkd these days.


(Original suggestion seems to have been in http://bugs.debian.org/851229 )

Hope this helps. Feel free to close this without action if you feel
the current text serves the purpose of release notes well enough
already. Also feel free to reach out to iprou...@packages.debian.org
for any advice related to the package and its usage.


Regards,
Andreas Henriksson


-- System Information:
Debian Release: 9.0
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 
'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Bug#806945: bash: Please make bash build reproducibly

[Ximin Luo]

Ximin Luo:
> [..]
> 
> CFLAGS - we eventually want to patch gcc to fix this; bash doesn't need to
>   handle this specifically.
> BUILD_DIR - this does seem bash-specific, but I haven't yet studied the
>   Makefiles in enough detail to propose something concrete.
> PDF ID - this is caused by [1] and we will probably patch texlive-bin to fix
>   this; bash doesn't need to handle this specifically.
> 

Hi, here is an updated patch that fixes the BUILD_DIR issue. My patch to GCC 
(#862113) fixes the CFLAGS issue here, as expected. The only remaining issue is 
the PDF ID issue, which I'll work on in the near-to-mid future.

i.e. this patch is (hopefully) the complete set of changes that need to go into 
the bash package, for reproducibility purposes.

Together with the GCC patch and a future texlive package, these will make the 
bash package fully reproducible under all build environments.

X

-- 
GPG: ed25519/56034877E1F87C35
GPG: rsa4096/1318EFAC5FBBDBCE
https://github.com/infinity0/pubkeys.git
diff -Nru bash-4.4/debian/changelog bash-4.4/debian/changelog
--- bash-4.4/debian/changelog	2017-01-24 16:13:37.0 +0100
+++ bash-4.4/debian/changelog	2016-09-26 14:40:45.0 +0200
@@ -1,3 +1,17 @@
+bash (4.4-4.0~reproducible1) UNRELEASED; urgency=medium
+
+  [ Ximin Luo ]
+  * Non-maintainer upload.
+  * Set PGRP_PIPE unconditionally on Linux, reproducibly.
+  * Don't embed @BUILD_DIR@ in loadables example Makefile, so we can build
+reproducibly. Instead, pass in the real value from the parent Makefile.
+
+  [ Reiner Herrmann ]
+  * Use the system man2html instead of the embedded one, for better build
+reproducibility.
+
+ -- Ximin Luo   Mon, 26 Sep 2016 14:40:45 +0200
+
 bash (4.4-4) unstable; urgency=medium
 
   * Apply upstream patches 008 - 011.
diff -Nru bash-4.4/debian/control bash-4.4/debian/control
--- bash-4.4/debian/control	2017-01-20 11:52:59.0 +0100
+++ bash-4.4/debian/control	2016-09-26 14:40:45.0 +0200
@@ -6,7 +6,7 @@
 Build-Depends: autoconf, autotools-dev, bison, libncurses5-dev,
  texinfo, texi2html, debhelper (>= 9), gettext, sharutils,
  locales , time ,
- xz-utils, dpkg-dev (>= 1.16.1)
+ xz-utils, dpkg-dev (>= 1.16.1), man2html
 Build-Depends-Indep: texlive-latex-base, ghostscript, texlive-fonts-recommended
 Homepage: http://tiswww.case.edu/php/chet/bash/bashtop.html
 Vcs-Browser: https://code.launchpad.net/~doko/+junk/pkg-bash-debian
diff -Nru bash-4.4/debian/patches/no-buildpath-in-runtime-example-makefile.diff bash-4.4/debian/patches/no-buildpath-in-runtime-example-makefile.diff
--- bash-4.4/debian/patches/no-buildpath-in-runtime-example-makefile.diff	1970-01-01 01:00:00.0 +0100
+++ bash-4.4/debian/patches/no-buildpath-in-runtime-example-makefile.diff	2016-09-26 14:40:45.0 +0200
@@ -0,0 +1,101 @@
+Index: bash-4.4/examples/loadables/Makefile.in
+===
+--- bash-4.4.orig/examples/loadables/Makefile.in
 bash-4.4/examples/loadables/Makefile.in
+@@ -35,7 +35,7 @@ loadablesdir = @loadablesdir@
+ headersdir = @headersdir@
+ 
+ topdir = @top_srcdir@
+-BUILD_DIR = @BUILD_DIR@
++BUILD_DIR = $(CURDIR)
+ srcdir = @srcdir@
+ VPATH = @srcdir@
+ 
+Index: bash-4.4/examples/loadables/Makefile.inc.in
+===
+--- bash-4.4.orig/examples/loadables/Makefile.inc.in
 bash-4.4/examples/loadables/Makefile.inc.in
+@@ -38,7 +38,7 @@ loadablesdir = @loadablesdir@
+ headersdir = @headersdir@
+ 
+ topdir = @top_srcdir@
+-BUILD_DIR = @BUILD_DIR@
++BUILD_DIR = $(CURDIR)
+ srcdir = @srcdir@
+ VPATH = @srcdir@
+ 
+Index: bash-4.4/Makefile.in
+===
+--- bash-4.4.orig/Makefile.in
 bash-4.4/Makefile.in
+@@ -561,6 +561,7 @@ OTHER_DOCS = $(srcdir)/CHANGES $(srcdir)
+ OTHER_INSTALLED_DOCS = CHANGES COMPAT NEWS POSIX RBASH README
+ 
+ LOADABLES_DIR = ${top_builddir}/examples/loadables
++LOADABLES_MAKE = cd $(LOADABLES_DIR) && $(MAKE) BUILD_DIR=$(BUILD_DIR)
+ 
+ # Keep GNU Make from exporting the entire environment for small machines.
+ .NOEXPORT:
+@@ -757,7 +758,7 @@ reconfig: force
+ 	sh $(srcdir)/configure -C
+ 
+ loadables:
+-	cd $(LOADABLES_DIR) && $(MAKE) $(MFLAGS) all
++	$(LOADABLES_MAKE) $(MFLAGS) all
+ 
+ #newversion:	mkversion
+ #	$(RM) .build
+@@ -799,7 +800,7 @@ install:	.made installdirs
+ 		infodir=$(infodir) htmldir=$(htmldir) DESTDIR=$(DESTDIR) $@ )
+ 	-( cd $(DEFDIR) ; $(MAKE) $(MFLAGS) DESTDIR=$(DESTDIR) $@ )
+ 	-( cd $(PO_DIR) ; $(MAKE) $(MFLAGS) DESTDIR=$(DESTDIR) $@ )
+-	-( cd $(LOADABLES_DIR) && $(MAKE) $(MFLAGS) DESTDIR=$(DESTDIR) $@ )
++	-( $(LOADABLES_MAKE) $(MFLAGS) DESTDIR=$(DESTDIR) $@ )
+ 
+ install-strip:
+ 	$(MAKE) $(MFLAGS) INSTALL_PROGRAM='$(INSTALL_PROGRAM) -s' \
+@@ -842,7 +843,7 @@ uninstall:	.made
+ 		man3dir=$(man3dir) man3ext=$(man3ext) \
+ 		infodir=$(infodir) htmldir=$(htmldir) DESTDIR=$(DESTDIR) $@ )
+ 	-( cd $(PO_DIR) ; 

Bug#833193: RFS: chapel/1.15-1 [ITP]

[Ben Albrecht]

Hi Lumin,

Thanks for your comments. See responses below.

>Hello guys,
>
>I quickly went through the packaging, and had some comments about it:
>(I didn't carefully read your previous discussion and I have no
>permission to upload)
>
>* debian/changelog:
>  currently Debian is still in the deep freeze stage, I'd recommend
>you upload to experimental
>  first. Besides, experimental is more fault-tolerant.

We plan to stick with sid per Sean's guidance.

>* chapel-doc.install:
>  you may want to provide some room for users to install several
>versions of chapel at the
>  same time, but I'd recommend the way similar to gcc/llvm packaging does.
>  you may want to install stuff like this:
>/usr/share/doc/chapel/1.15/stuff
>/usr/share/doc/chapel/1.16/stuff
>  but this should be better:
>/usr/share/doc/chapel-1.15/stuff
>/usr/share/doc/chapel-1.16/stuff
>  for example:
>/usr/share/doc/gcc-{5,6}

We do install the Chapel modules and runtime to versioned directories
like this:

/usr/share/chapel/1.15/modules etc

The documentation is installed to

 /usr/share/doc/chapel/1.15/rst etc

Is it obviously better in your opinion to use

 /usr/share/chapel-1.15/modules

e.g.? If so, can you say why?

>* control:
>  * Vcs-* fields are your *packaging repo* instead of upstream git repo.

OK, we'll update it.

>  * python2.7: since python policy recommends python3 for new
>packages, could you please
>also provide a python3 version if upstream supports it?

The upstream project supports both Python 2.7 and Python 3.
Would it be sufficient to depend on Python >= 2.7?
I don't think it would make sense to update the scripts to
have a Python 3 shebang (like #!/usr/bin/env python3).
Do we assume that /usr/bin/env python returns a python 3 in
some cases?

>* rules:
>  * dh compat 10 has parallel build as default, you can optionally
>bump compat to 10. Before
>you are really about to do that, check debhelper(7) first for the
>checklist from v9->v10.

Actually I tried changing it to 10 and ran in to issues. All of the
documentation I can find about actually creating Debian packages
says to use 9 and never change it.

https://www.debian.org/doc/manuals/maint-guide/dother.en.html#compat

>  * it seems that util/quickstart/setchplenv.bash is just exporting
>some environt variables
>for the use of buildsystem. exporting these variables in rules
>instead of sourcing with
>bash should be better, and in this way you can gain more control
>from rules, including
>the CHPL_LLVM flag which seems to be a key of one of your TODO.

We got it working that way as a temporary measure and intend
to change it as more Chapel packages are needed. However we don't
see anything wrong with doing it that way for now.

>This chapel 1.15 package was succesfully built on my laptop and a
>simple helloworld example is working.

Glad that it worked for you!

Best,

Ben

Bug#862214: Pre-approval request, unblock: vtk6/6.3.0+dfsg1-5

[Anton Gladky]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package vtk6

During the last upload of the version 6.3.0+dfsg1-4 some line endings
in autopkgtests were accidentally broken and it causes test failures [1].

This upload is trivial and just replaces broken line endings.

[1] https://ci.debian.net/packages/v/vtk6/unstable/amd64/

unblock vtk6/6.3.0+dfsg1-5


Thanks,

Anton
diff -Nru vtk6-6.3.0+dfsg1/debian/changelog vtk6-6.3.0+dfsg1/debian/changelog
--- vtk6-6.3.0+dfsg1/debian/changelog   2017-03-14 21:34:10.0 +0100
+++ vtk6-6.3.0+dfsg1/debian/changelog   2017-05-09 22:38:56.0 +0200
@@ -1,3 +1,9 @@
+vtk6 (6.3.0+dfsg1-5) unstable; urgency=medium
+
+  * Fix line endings in autopkgtests to let them run.
+
+ -- Anton Gladky   Tue, 09 May 2017 22:38:56 +0200
+
 vtk6 (6.3.0+dfsg1-4) unstable; urgency=medium
 
   * [9a28dbe] Fix symlink onto vtk. (Closes: #857533).
diff -Nru vtk6-6.3.0+dfsg1/debian/patches/100_javac-heap.patch 
vtk6-6.3.0+dfsg1/debian/patches/100_javac-heap.patch
--- vtk6-6.3.0+dfsg1/debian/patches/100_javac-heap.patch2016-04-14 
14:36:27.0 +0200
+++ vtk6-6.3.0+dfsg1/debian/patches/100_javac-heap.patch2017-05-09 
22:38:24.0 +0200
@@ -1,8 +1,8 @@
-Description: set JVM max memory to 1024m.
-Author: Matthias Klose 
-Acked-By: Anton Gladky 
-Last-Update: 2016-02-12
-
+Description: set JVM max memory to 1024m.
+Author: Matthias Klose 
+Acked-By: Anton Gladky 
+Last-Update: 2016-02-12
+
 Index: VTK-6.3.0/Wrapping/Java/CMakeLists.txt
 ===
 --- VTK-6.3.0.orig/Wrapping/Java/CMakeLists.txt
diff -Nru vtk6-6.3.0+dfsg1/debian/patches/101_java_install_path.patch 
vtk6-6.3.0+dfsg1/debian/patches/101_java_install_path.patch
--- vtk6-6.3.0+dfsg1/debian/patches/101_java_install_path.patch 2016-04-14 
14:36:38.0 +0200
+++ vtk6-6.3.0+dfsg1/debian/patches/101_java_install_path.patch 2017-05-09 
22:38:24.0 +0200
@@ -1,11 +1,11 @@
-Description: Install Java modules in the correct path
- This patch corrects the installation of the native Java modules
- to go to the path given by the Debian Java Policy. This helps
- to later use the simple install file to get them to the right
- location in the package. 
-Author: Gert Wollny 
-Bug: https://bugs.debian.org/750184
-Upstream-Bug: http://www.vtk.org/Bug/view.php?id=14126
-
+Description: Correct code to enable use of system proj4 
+Author: Matthew Woehlke 
+Bug: https://bugs.debian.org/750184
+Upstream-Bug: http://www.vtk.org/Bug/view.php?id=14126
+
 Index: VTK-6.3.0/CMake/FindLIBPROJ4.cmake
 ===
 --- VTK-6.3.0.orig/CMake/FindLIBPROJ4.cmake
diff -Nru vtk6-6.3.0+dfsg1/debian/patches/104_fix_gcc_version_6.patch 
vtk6-6.3.0+dfsg1/debian/patches/104_fix_gcc_version_6.patch
--- vtk6-6.3.0+dfsg1/debian/patches/104_fix_gcc_version_6.patch 2016-04-14 
14:36:53.0 +0200
+++ vtk6-6.3.0+dfsg1/debian/patches/104_fix_gcc_version_6.patch 2017-05-09 
22:38:24.0 +0200
@@ -1,7 +1,7 @@
-Description: Fix to be able to compile with gcc-6
-Author: Gerardo Malazdrewicz 
-Bug: https://bugs.debian.org/812296
-
+Description: Fix to be able to compile with gcc-6
+Author: Gerardo Malazdrewicz 
+Bug: https://bugs.debian.org/812296
+
 Index: VTK-6.3.0/CMake/GenerateExportHeader.cmake
 ===
 --- VTK-6.3.0.orig/CMake/GenerateExportHeader.cmake
diff -Nru vtk6-6.3.0+dfsg1/debian/patches/105_unforce_embedded_glew.patch 
vtk6-6.3.0+dfsg1/debian/patches/105_unforce_embedded_glew.patch
--- vtk6-6.3.0+dfsg1/debian/patches/105_unforce_embedded_glew.patch 
2016-04-14 

Bug#862213: realmd FTCBFS: python build dependency unsatisfiable, uses build architecture pkg-config

[Helmut Grohne]

Source: realmd
Version: 0.16.3-1
Tags: patch
User: helm...@debian.org
Usertags: rebootstrap

realmd fails to cross build from source. Its build dependency on python
is not installable, because installing a host architecture python
typically fails. What realmd really needs is a build architecture python
though, thus it should be annotated with :native or :any. Even then it
fails to cross build, because it uses the build architecture pkg-config
and thus fails to locate glib-2.0, which is only requested for the host
architecture. Adding $ac_tool_prefix solves that and thus fixes the
cross build. Please consider applying the attached patch after stretch
is released.

Helmut
diff --minimal -Nru realmd-0.16.3/debian/changelog 
realmd-0.16.3/debian/changelog
--- realmd-0.16.3/debian/changelog  2016-08-15 13:17:15.0 +0200
+++ realmd-0.16.3/debian/changelog  2017-05-09 20:50:48.0 +0200
@@ -1,3 +1,12 @@
+realmd (0.16.3-1.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Fix FTCBFS: (Closes: #-1)
++ Annotate python build-dependency with :native
++ Add cross.patch
+
+ -- Helmut Grohne   Tue, 09 May 2017 20:50:48 +0200
+
 realmd (0.16.3-1) unstable; urgency=medium
 
   * New upstream release.
diff --minimal -Nru realmd-0.16.3/debian/control realmd-0.16.3/debian/control
--- realmd-0.16.3/debian/control2016-08-15 13:17:15.0 +0200
+++ realmd-0.16.3/debian/control2017-05-09 20:50:47.0 +0200
@@ -12,7 +12,7 @@
libpolkit-gobject-1-dev,
libsystemd-dev [linux-any],
pkg-config,
-   python,
+   python:native,
xmlto,
xsltproc
 Standards-Version: 3.9.8
diff --minimal -Nru realmd-0.16.3/debian/patches/cross.patch 
realmd-0.16.3/debian/patches/cross.patch
--- realmd-0.16.3/debian/patches/cross.patch1970-01-01 01:00:00.0 
+0100
+++ realmd-0.16.3/debian/patches/cross.patch2017-05-09 20:50:48.0 
+0200
@@ -0,0 +1,18 @@
+Subject: fix cross compilation
+From: Helmut Grohne 
+
+Consider $ac_tool_prefix when searching for pkg-config.
+
+Index: realmd-0.16.3/configure.ac
+===
+--- realmd-0.16.3.orig/configure.ac
 realmd-0.16.3/configure.ac
+@@ -63,7 +63,7 @@
+ AC_PROG_MAKE_SET
+ AC_PROG_RANLIB
+ IT_PROG_INTLTOOL($INTLTOOL_REQ)
+-AC_PATH_PROG(PKG_CONFIG, pkg-config, no)
++PKG_PROG_PKG_CONFIG
+ 
+ GETTEXT_PACKAGE=realmd
+ AC_SUBST([GETTEXT_PACKAGE])
diff --minimal -Nru realmd-0.16.3/debian/patches/series 
realmd-0.16.3/debian/patches/series
--- realmd-0.16.3/debian/patches/series 2016-08-15 13:17:15.0 +0200
+++ realmd-0.16.3/debian/patches/series 2017-05-09 20:50:48.0 +0200
@@ -1 +1,2 @@
 01_freeipa_section.patch
+cross.patch

Bug#860950: steam: attempt to induce similar fatal crash

[Stephen Liebbe]

Package: steam
Followup-For: Bug #860950

Dear Maintainer,

attempted to induce crash by disabling GLX extension and removing the missing 
file. Results follow

$ grep GLX ~/.local/share/xorg/Xorg.0.log
[ 4.347] (**) Extension "GLX" is disabled
$ rm ~/.steam/public/steambootstrapper_english.txt
$ steam
Running Steam on debian 9 64-bit
STEAM_RUNTIME is enabled automatically
ILocalize::AddFile() failed to load file "public/steambootstrapper_english.txt".
[2017-05-09 15:51:40] Startup - updater built Apr 25 2017 22:45:11
[2017-05-09 15:51:40] Verifying installation...
[2017-05-09 15:51:40] BVerifyInstalledFiles: 
public/steambootstrapper_english.txt is -1 bytes, expected 3602
[2017-05-09 15:51:40] Verification complete
[2017-05-09 15:51:40] Downloading Update...
[2017-05-09 15:51:40] Checking for available update...
[2017-05-09 15:51:41] Download Complete.
[2017-05-09 15:51:41] uninstalled manifest found in 
/home/stretch/.steam/package/steam_client_ubuntu12 (1).
[2017-05-09 15:51:41] Extracting package...
[2017-05-09 15:51:51] Installing update...
[2017-05-09 15:51:54] Cleaning up...
[2017-05-09 15:51:54] Update complete, launching...
[2017-05-09 15:51:54] Shutdown
Restarting Steam by request...
Running Steam on debian 9 64-bit
STEAM_RUNTIME has been set by the user to: 
/home/stretch/.steam/ubuntu12_32/steam-runtime
[2017-05-09 15:51:54] Startup - updater built Apr 25 2017 22:45:11
[2017-05-09 15:51:54] Verifying installation...
[2017-05-09 15:51:54] Verification complete
At this point a graphical notification window is show that says "OpenGL GLX 
extension not supported by display"
Clicking OK ends steam program execution, returning to command prompt.

Current testing distribution of steam reinstalls missing file and handles GLX 
error properly.

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.18 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages steam depends on:
ii  debconf [debconf-2.0]1.5.60
ii  libc62.24-10
ii  libgl1-mesa-dri  13.0.6-1+b2
ii  libgl1-mesa-glx  13.0.6-1+b2
ii  libgpg-error01.26-2
ii  libstdc++6   6.3.0-16
ii  libtxc-dxtn-s2tc [libtxc-dxtn0]  1.0+git20151227-2
ii  libudev1 232-22
ii  libx11-6 2:1.6.4-3
ii  libxinerama1 2:1.1.3-1+b3
ii  xz-utils 5.2.2-1.2+b1

Versions of packages steam recommends:
ii  fonts-liberation  1:1.07.4-2
ii  gnome-terminal [x-terminal-emulator]  3.22.2-1
ii  libxss1   1:1.2.2-1
ii  xterm [x-terminal-emulator]   327-2
ii  zenity3.22.0-1+b1

Versions of packages steam suggests:
ii  steam-devices  1.0.0.54-2

-- debconf information:
* steam/question: I AGREE
* steam/license:
  steam/purge:

Bug#862212: RFA: drmips -- Educational MIPS simulator

[Bruno Nova]

Package: wnpp
Severity: normal

I request an adopter for the drmips package.

I have little free time now, so I'm offering my Debian packages up for
adoption.

I am the developer of the upstream project.
The project is very rarely updated.

I was keeping the source code of the Debian package in the "debian" branch of
this Git repository: https://github.com/brunonova/drmips
In there I currently have a new version of the package on hold, as Debian is
currently frozen.

After you clone that repository and checkout the "debian" branch, you can get
it ready for work with these commands:
$ uscan --force-download
$ tar xf ../drmips_*.orig.tar.xz

I'll maintain the package in the meantime.


The package description is:
 DrMIPS is a graphical simulator of the MIPS processor to support computer
 architecture teaching and learning. It is intuitive, versatile and
 configurable.
 .
 The simulator is available not only for personal computers but also for
 Android devices, especially tablets.
 .
 DrMIPS was created under the Master's dissertation entitled
 'Tool to Support Computer Architecture Teaching and Learning' at the
 Faculty of Engineering of the University of Porto, in Portugal.

Bug#862211: RFA: nautilus-hide -- Extension for Nautilus to hide files without renaming them

[Bruno Nova]

Package: wnpp
Severity: normal

I request an adopter for the nautilus-hide package.

I have little free time now, so I'm offering my Debian packages up for
adoption.

I am the developer of the upstream project.
It's rarely updated, and usually only to add new translations.

I was keeping the source code of the Debian package in the "debian" branch of
this Git repository: https://github.com/brunonova/nautilus-hide
In there I currently have a new version of the package on hold, as Debian is
currently frozen.

After you clone that repository and checkout the "debian" branch, you can get
it ready for work with these commands:
$ uscan --force-download
$ tar xf ../nautilus-hide_*.orig.tar.xz

I'll maintain the package in the meantime.


The package description is:
 Nautilus Hide is a simple Python extension for the Nautilus file manager that
 adds options to the right-click menu to hide or unhide files.
 .
 The extension hides the files without renaming them (i.e. without prefixing a
 dot ('.') or suffixing a tilde ('~')).
 It does that by adding their names to the folder's '.hidden' file, which

Bug#862210: RFA: nautilus-admin -- Extension for Nautilus to do administrative operations

[Bruno Nova]

Package: wnpp
Severity: normal

I request an adopter for the nautilus-admin package.

I am the developer of the upstream project.
It's rarely updated, and usually only to add new translations.

I was keeping the source code of the Debian package in the "debian" branch of
this Git repository: https://github.com/brunonova/nautilus-admin
In there I currently have a new version of the package on hold, as Debian is
currently frozen.

After you clone that repository and checkout the "debian" branch, you can get
it ready for work with these commands:
$ uscan --force-download
$ tar xf ../nautilus-admin_*.orig.tar.xz

I'll maintain the package in the meantime.


The package description is:
 Nautilus Admin is a simple Python extension for the Nautilus file manager
 that adds some administrative actions to the right-click menu:
 .
   * Open as Administrator: opens a folder in a new Nautilus window
 running with administrator (root) privileges.
   * Edit as Administrator: opens a file in a Gedit window running
 with administrator (root) privileges.

Bug#862208: matrix-synapse: [INTL:nl] Dutch translation of debconf messages

[Frans Spiesschaert]

 

Package: matrix-synapse 
Severity: wishlist 
Tags: l10n patch 
 

Dear Maintainer, 
 
== 
Please find attached the Dutch translation of matrix-synapse debconf messages. 
It has been submitted for review to the debian-l10n-dutch mailing list. 
Please add it to your next package revision. 
It should be put as debian/po/nl.po in your package build tree. 
=== 

-- 
Regards,
Frans



nl.po.gz
Description: application/gzip


signature.asc
Description: This is a digitally signed message part

Bug#862209: shim-signed: [INTL:nl] Dutch translation of debconf messages

[Frans Spiesschaert]

 

Package: shim-signed 
Severity: wishlist 
Tags: l10n patch 
 

Dear Maintainer, 
 
== 
Please find attached the Dutch translation of shim-signed debconf messages. 
It has been submitted for review to the debian-l10n-dutch mailing list. 
Please add it to your next package revision. 
It should be put as debian/po/nl.po in your package build tree. 
=== 

-- 
Regards,
Frans



nl.po.gz
Description: application/gzip


signature.asc
Description: This is a digitally signed message part

Bug#862207: error: libcrypto does not provide GOST

[martin f krafft]

Package: ldnsutils
Version: 1.7.0-1
Severity: normal

When trying ti use ldns-key2ds with -g, I get an error about GOST
not being available.

% ldns-key2ds -g -n _combined.key
error: libcrypto does not provide GOST

Either the option should be disabled, or ldns-key2ds linked with
a libcrypto that provides GOST.

-- System Information:
Debian Release: 9.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_NZ, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages ldnsutils depends on:
ii  libc6   2.24-10
ii  libldns21.7.0-1
ii  libpcap0.8  1.8.1-3
ii  libssl1.1   1.1.0e-1

ldnsutils recommends no packages.

ldnsutils suggests no packages.

-- no debconf information


-- 
 .''`.   martin f. krafft  @martinkrafft
: :'  :  proud Debian developer
`. `'`   http://people.debian.org/~madduck
  `-  Debian - when you have better things to do than fixing systems


digital_signature_gpg.asc
Description: Digital GPG signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)

Bug#862200: cwidget FTCBFS: untranslated build-dependency on g++

[Manuel A. Fernandez Montecelo]

Hi Helmut,

2017-05-09 19:56 GMT+02:00 Helmut Grohne :
> Source: cwidget
> Version: 0.5.17-4
> Tags: patch
> User: helm...@debian.org
> Usertags: rebootstrap
>
> cwidget fails to cross build, because its build dependency on g++ is
> unsatisfiable. In theory, we'd have to apply toolchain dependency cross
> translation to such a dependency, but this feature is unavailable in the
> archive at present. The intent of the dependency was to help with the
> libstdc++6 transition, which has long completed. Thus I propose to
> simply drop the dependency. Once done, cwidget cross builds
> successfully. Please consider applying the attached patch after stretch
> is released.

Yes, you are right, thanks for the patch.


-- 
Manuel A. Fernandez Montecelo 

Bug#862206: xorg: USB keyboard settings lost over time; repeated setxkbmap breaks internal/external keyboards

[Joel Roth]

Package: xorg
Version: 1:7.7+7
Severity: normal

Dear Maintainer,

I run Jessie on a Lenovo T430 laptop. I start X with these
keyboard options:

setxkbmap -option ctrl:nocaps,terminate:ctrl_alt_bksp

Part1: Over time, the external USB keyboard config reverts to default. 

Part2: Attempting to work around the issue, I repeated the
above call at 4min intervals. After a time, the keyboard
configuration gets completely broken (both main keyboard and
external). For example the Up and Down arrows don't access
command history at terminal prompt, and trigger print
screen. PgUp and PgDown also don't function normally.

The following command triggers the keyboard configuration
problems on my machine. 

perl -e 'for (1..500){ `setxkbmap -option ctrl:nocaps,terminate:ctrl_alt_bksp` 
}'

Thank you for your attention.


-- Package-specific info:
X server symlink status:

lrwxrwxrwx 1 root root 13 Nov 28  2015 /etc/X11/X -> /usr/bin/Xorg
-rwxr-xr-x 1 root root 2401376 Feb 10  2015 /usr/bin/Xorg

Diversions concerning libGL are in place

diversion of /usr/lib/arm-linux-gnueabihf/libGL.so.1.2.0 to 
/usr/lib/mesa-diverted/arm-linux-gnueabihf/libGL.so.1.2.0 by glx-diversions
diversion of /usr/lib/libGL.so.1 to /usr/lib/mesa-diverted/libGL.so.1 by 
glx-diversions
diversion of /usr/lib/arm-linux-gnueabihf/libGLESv2.so.2.0.0 to 
/usr/lib/mesa-diverted/arm-linux-gnueabihf/libGLESv2.so.2.0.0 by glx-diversions
diversion of /usr/lib/libGLESv2.so.2 to /usr/lib/mesa-diverted/libGLESv2.so.2 
by glx-diversions
diversion of /usr/lib/arm-linux-gnueabihf/libGL.so to 
/usr/lib/mesa-diverted/arm-linux-gnueabihf/libGL.so by glx-diversions
diversion of /usr/lib/x86_64-linux-gnu/libGLESv1_CM.so.1.1.0 to 
/usr/lib/mesa-diverted/x86_64-linux-gnu/libGLESv1_CM.so.1.1.0 by glx-diversions
diversion of /usr/lib/arm-linux-gnueabihf/libGLESv1_CM.so to 
/usr/lib/mesa-diverted/arm-linux-gnueabihf/libGLESv1_CM.so by glx-diversions
diversion of /usr/lib/i386-linux-gnu/libGLESv2.so.2 to 
/usr/lib/mesa-diverted/i386-linux-gnu/libGLESv2.so.2 by glx-diversions
diversion of /usr/lib/x86_64-linux-gnu/libGLESv2.so.2 to 
/usr/lib/mesa-diverted/x86_64-linux-gnu/libGLESv2.so.2 by glx-diversions
diversion of /usr/lib/arm-linux-gnueabihf/libGL.so.1.2 to 
/usr/lib/mesa-diverted/arm-linux-gnueabihf/libGL.so.1.2 by glx-diversions
diversion of /usr/lib/libGLESv1_CM.so.1.1.0 to 
/usr/lib/mesa-diverted/libGLESv1_CM.so.1.1.0 by glx-diversions
diversion of /usr/lib/i386-linux-gnu/libGLESv1_CM.so.1 to 
/usr/lib/mesa-diverted/i386-linux-gnu/libGLESv1_CM.so.1 by glx-diversions
diversion of /usr/lib/x86_64-linux-gnu/libGLESv1_CM.so to 
/usr/lib/mesa-diverted/x86_64-linux-gnu/libGLESv1_CM.so by glx-diversions
diversion of /usr/lib/arm-linux-gnueabihf/libGLESv1_CM.so.1.1.0 to 
/usr/lib/mesa-diverted/arm-linux-gnueabihf/libGLESv1_CM.so.1.1.0 by 
glx-diversions
diversion of /usr/lib/libGL.so.1.2.0 to /usr/lib/mesa-diverted/libGL.so.1.2.0 
by glx-diversions
diversion of /usr/lib/libGLESv2.so to /usr/lib/mesa-diverted/libGLESv2.so by 
glx-diversions
diversion of /usr/lib/libGL.so.1.2 to /usr/lib/mesa-diverted/libGL.so.1.2 by 
glx-diversions
diversion of /usr/lib/i386-linux-gnu/libGLESv1_CM.so.1.1.0 to 
/usr/lib/mesa-diverted/i386-linux-gnu/libGLESv1_CM.so.1.1.0 by glx-diversions
diversion of /usr/lib/x86_64-linux-gnu/libGL.so.1.2.0 to 
/usr/lib/mesa-diverted/x86_64-linux-gnu/libGL.so.1.2.0 by glx-diversions
diversion of /usr/lib/arm-linux-gnueabihf/libGLESv2.so to 
/usr/lib/mesa-diverted/arm-linux-gnueabihf/libGLESv2.so by glx-diversions
diversion of /usr/lib/libGL.so to /usr/lib/mesa-diverted/libGL.so by 
glx-diversions
diversion of /usr/lib/arm-linux-gnueabihf/libGLESv2.so.2 to 
/usr/lib/mesa-diverted/arm-linux-gnueabihf/libGLESv2.so.2 by glx-diversions
diversion of /usr/lib/x86_64-linux-gnu/libGL.so.1.2 to 
/usr/lib/mesa-diverted/x86_64-linux-gnu/libGL.so.1.2 by glx-diversions
diversion of /usr/lib/i386-linux-gnu/libGLESv2.so to 
/usr/lib/mesa-diverted/i386-linux-gnu/libGLESv2.so by glx-diversions
diversion of /usr/lib/libGLESv1_CM.so to /usr/lib/mesa-diverted/libGLESv1_CM.so 
by glx-diversions
diversion of /usr/lib/i386-linux-gnu/libGL.so.1.2.0 to 
/usr/lib/mesa-diverted/i386-linux-gnu/libGL.so.1.2.0 by glx-diversions
diversion of /usr/lib/i386-linux-gnu/libGL.so to 
/usr/lib/mesa-diverted/i386-linux-gnu/libGL.so by glx-diversions
diversion of /usr/lib/x86_64-linux-gnu/libGL.so.1 to 
/usr/lib/mesa-diverted/x86_64-linux-gnu/libGL.so.1 by glx-diversions
diversion of /usr/lib/arm-linux-gnueabihf/libGL.so.1 to 
/usr/lib/mesa-diverted/arm-linux-gnueabihf/libGL.so.1 by glx-diversions
diversion of /usr/lib/i386-linux-gnu/libGLESv2.so.2.0.0 to 
/usr/lib/mesa-diverted/i386-linux-gnu/libGLESv2.so.2.0.0 by glx-diversions
diversion of /usr/lib/libGLESv1_CM.so.1 to 
/usr/lib/mesa-diverted/libGLESv1_CM.so.1 by glx-diversions
diversion of /usr/lib/x86_64-linux-gnu/libGL.so to 
/usr/lib/mesa-diverted/x86_64-linux-gnu/libGL.so by 

Bug#862205: libsndfile: CVE-2017-8361: global buffer overflow in flac_buffer_copy

[Salvatore Bonaccorso]

Source: libsndfile
Version: 1.0.27-2
Severity: important
Tags: security patch upstream
Forwarded: https://github.com/erikd/libsndfile/issues/232#issuecomment-300267444

Hi,

the following vulnerability was published for libsndfile.

CVE-2017-8361[0]:
| The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows
| remote attackers to cause a denial of service (buffer overflow and
| application crash) or possibly have unspecified other impact via a
| crafted audio file.

root@sid:~/libsndfile-1.0.27# ASAN_OPTIONS='detect_leaks=0' 
./programs/sndfile-convert 
~/poc/00265-libsndfile-globaloverflow-flac_buffer_copy /tmp/out.wav
=
==19742==ERROR: AddressSanitizer: global-buffer-overflow on address 
0x555fbce48220 at pc 0x555fbcb08bbe bp 0x78e810d0 sp 0x78e810c8
WRITE of size 4 at 0x555fbce48220 thread T0
#0 0x555fbcb08bbd in flac_buffer_copy /root/libsndfile-1.0.27/src/flac.c:263
#1 0x555fbcb09bc1 in sf_flac_write_callback 
/root/libsndfile-1.0.27/src/flac.c:387
#2 0x7fa32d65f18e  (/usr/lib/x86_64-linux-gnu/libFLAC.so.8+0x4e18e)
#3 0x7fa32d66269c in FLAC__stream_decoder_process_single 
(/usr/lib/x86_64-linux-gnu/libFLAC.so.8+0x5169c)
#4 0x555fbcb0caa7 in flac_read_loop /root/libsndfile-1.0.27/src/flac.c:920
#5 0x555fbcb0ce26 in flac_read_flac2i /root/libsndfile-1.0.27/src/flac.c:962
#6 0x555fbcae3f8c in sf_readf_int /root/libsndfile-1.0.27/src/sndfile.c:1778
#7 0x555fbcad8ec7 in sfe_copy_data_int 
/root/libsndfile-1.0.27/programs/common.c:87
#8 0x555fbcad8930 in main 
/root/libsndfile-1.0.27/programs/sndfile-convert.c:340
#9 0x7fa32c8b12b0 in __libc_start_main 
(/lib/x86_64-linux-gnu/libc.so.6+0x202b0)
#10 0x555fbcad7639 in _start 
(/root/libsndfile-1.0.27/programs/sndfile-convert+0x2d639)

0x555fbce48220 is located 32 bytes to the left of global variable 'sf_errno' 
defined in 'sndfile.c:293:5' (0x555fbce48240) of size 4
0x555fbce48220 is located 0 bytes to the right of global variable 'data' 
defined in 'common.c:80:14' (0x555fbce44220) of size 16384
SUMMARY: AddressSanitizer: global-buffer-overflow 
/root/libsndfile-1.0.27/src/flac.c:263 in flac_buffer_copy
Shadow bytes around the buggy address:
  0x0aac779c0ff0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0aac779c1000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0aac779c1010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0aac779c1020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0aac779c1030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x0aac779c1040: 00 00 00 00[f9]f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9
  0x0aac779c1050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0aac779c1060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0aac779c1070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0aac779c1080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0aac779c1090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:   00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:   fa
  Heap right redzone:  fb
  Freed heap region:   fd
  Stack left redzone:  f1
  Stack mid redzone:   f2
  Stack right redzone: f3
  Stack partial redzone:   f4
  Stack after return:  f5
  Stack use after scope:   f8
  Global redzone:  f9
  Global init order:   f6
  Poisoned by user:f7
  Container overflow:  fc
  Array cookie:ac
  Intra object redzone:bb
  ASan internal:   fe
  Left alloca redzone: ca
  Right alloca redzone:cb
==19742==ABORTING
root@sid:~/libsndfile-1.0.27#


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-8361
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8361

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Bug#862083: firejail: crashes when using --allow-debuggers ("free(): invalid pointer")

[Reiner Herrmann]

Control: severity -1 important
Control: notfound -1 0.9.44.10-1

Hi Sascha,

On Mon, May 08, 2017 at 12:20:41PM +0200, Sascha Silbe wrote:
> when passing --allow-debuggers to firejail to enable strace or gdb to
> work inside firejail (in order to figure out why the sandboxed
> application doesn't work), firejail crashes immediately on start-up:
> 
> sascha.silbe@twin:~$ firejail --allow-debuggers echo ok
> Reading profile /etc/firejail/default.profile
> Reading profile /etc/firejail/disable-common.inc
> Reading profile /etc/firejail/disable-programs.inc
> Reading profile /etc/firejail/disable-passwdmgr.inc
> 
> ** Note: you can use --noprofile to disable default.profile **
> 
> Parent pid 8465, child pid 8466
> *** Error in `firejail': free(): invalid pointer: 0x55b39282d354 ***
> Error: cannot establish communication with the parent, exiting...
> sascha.silbe@twin:~$

Thank you for the report.

I was able to reproduce the issue in a jessie chroot with the bpo package.
After some debugging I found that it is a memory corruption in fs.c.
Fortunately it has also already been fixed upstream [1], which is
already part of 0.9.44.10-1.
I will cherry-pick the fix for (hopefully) stretch and backports.

Regards,
  Reiner

[1] 
https://github.com/netblue30/firejail/commit/b0cb1b40c3dd23e9584ab6b0686871ab02d298d0


signature.asc
Description: Digital signature

Bug#862204: libsndfile: CVE-2017-8362

[Salvatore Bonaccorso]

Source: libsndfile
Version: 1.0.27-2
Severity: important
Tags: upstream security patch
Forwarded: https://github.com/erikd/libsndfile/issues/231

Hi,

the following vulnerability was published for libsndfile.

CVE-2017-8362[0]:
| The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows
| remote attackers to cause a denial of service (invalid read and
| application crash) via a crafted audio file.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-8362
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8362
[1] https://github.com/erikd/libsndfile/issues/231

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Bug#862203: libsndfile: CVE-2017-8363: heap-based buffer overflow in flac_buffer_copy

[Salvatore Bonaccorso]

Source: libsndfile
Version: 1.0.27-2
Severity: important
Tags: upstream patch security
Forwarded: https://github.com/erikd/libsndfile/issues/233

Hi,

the following vulnerability was published for libsndfile.

CVE-2017-8363[0]:
| The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows
| remote attackers to cause a denial of service (heap-based buffer
| over-read and application crash) via a crafted audio file.

root@sid:~/libsndfile-1.0.27# ASAN_OPTIONS='detect_leaks=0' 
./programs/sndfile-convert ~/poc/00266-libsndfile-heapoverflow-flac_buffer_copy 
/tmp/out.wav 
=
==19330==ERROR: AddressSanitizer: heap-buffer-overflow on address 
0x6211dd10 at pc 0x55c421b34b75 bp 0x7ffe33908460 sp 0x7ffe33908458
READ of size 4 at 0x6211dd10 thread T0
#0 0x55c421b34b74 in flac_buffer_copy /root/libsndfile-1.0.27/src/flac.c:263
#1 0x55c421b38a75 in flac_read_loop /root/libsndfile-1.0.27/src/flac.c:916
#2 0x55c421b38e26 in flac_read_flac2i /root/libsndfile-1.0.27/src/flac.c:962
#3 0x55c421b0ff8c in sf_readf_int /root/libsndfile-1.0.27/src/sndfile.c:1778
#4 0x55c421b04ec7 in sfe_copy_data_int 
/root/libsndfile-1.0.27/programs/common.c:87
#5 0x55c421b04930 in main 
/root/libsndfile-1.0.27/programs/sndfile-convert.c:340
#6 0x7fa2e7acf2b0 in __libc_start_main 
(/lib/x86_64-linux-gnu/libc.so.6+0x202b0)
#7 0x55c421b03639 in _start 
(/root/libsndfile-1.0.27/programs/sndfile-convert+0x2d639)

0x6211dd10 is located 0 bytes to the right of 4112-byte region 
[0x6211cd00,0x6211dd10)
allocated by thread T0 here:
#0 0x7fa2e8b67d28 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xc1d28)
#1 0x7fa2e887bfa8  (/usr/lib/x86_64-linux-gnu/libFLAC.so.8+0x4cfa8)

SUMMARY: AddressSanitizer: heap-buffer-overflow 
/root/libsndfile-1.0.27/src/flac.c:263 in flac_buffer_copy
Shadow bytes around the buggy address:
  0x0c427fffbb50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c427fffbb60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c427fffbb70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c427fffbb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c427fffbb90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x0c427fffbba0: 00 00[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c427fffbbb0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c427fffbbc0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c427fffbbd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c427fffbbe0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c427fffbbf0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:   00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:   fa
  Heap right redzone:  fb
  Freed heap region:   fd
  Stack left redzone:  f1
  Stack mid redzone:   f2
  Stack right redzone: f3
  Stack partial redzone:   f4
  Stack after return:  f5
  Stack use after scope:   f8
  Global redzone:  f9
  Global init order:   f6
  Poisoned by user:f7
  Container overflow:  fc
  Array cookie:ac
  Intra object redzone:bb
  ASan internal:   fe
  Left alloca redzone: ca
  Right alloca redzone:cb
==19330==ABORTING
root@sid:~/libsndfile-1.0.27#

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-8363
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8363
[1] https://github.com/erikd/libsndfile/issues/233

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Bug#862202: libsndfile: CVE-2017-8365

[Salvatore Bonaccorso]

Source: libsndfile
Version: 1.0.27-2
Severity: important
Tags: upstream security patch
Forwarded: https://github.com/erikd/libsndfile/issues/230 

Hi,

the following vulnerability was published for libsndfile.

CVE-2017-8365[0]:
| The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote
| attackers to cause a denial of service (buffer over-read and
| application crash) via a crafted audio file.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-8365
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8365
[1] https://github.com/erikd/libsndfile/issues/230

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Bug#862167: jessie-pu: package polarssl/1.3.9-2.1+deb8u2

[Adam D. Barratt]

Control: tags -1 + confirmed

On Tue, 2017-05-09 at 11:42 +0100, James Cowgill wrote:
> This polarssl update fixes CVE-2017-2784 (Freeing of memory allocated on
> stack when validating a public key with a secp224k1 curve) which is a
> no-DSA security issue.
> 
> I've tested the CVE with the testcase which was added to mbedtls (and it
> passes only after the patch is applied). Unfortunately the test system
> is broken in polarssl (doesn't handle crashes) so adding the test to
> jessie won't have any affect on the builds unless the test system is
> fixed as well.

Please go ahead.

Regards,

Adam

Bug#838462: same crash

[Hans-Christoph Steiner]

Control: reassign -1 xserver-xorg-input-libinput 0.18-1
Control: retitle -1 xorg crashes when input device removed during suspend

Looks like its this bug:
https://bugs.freedesktop.org/show_bug.cgi?id=97117

I'm getting this same crash on ElementaryOS Loki (based on Ubuntu 16.04)
with light-locker 1.7.0-2ubuntu1 and xserver-xorg-input-libinput
0.18.0-1.  It is on a Dell m3800 with dual Intel/nVidia graphics setup
with bumblebee and nouveau.  I'm pretty sure it happens when I put the
laptop to sleep with the external mouse plugged in, then I wake up the
laptop without that mouse plugged in.  I happens right after I log into
the lock screen.


[  8894.710] (II) config/udev: removing device Yubico Yubikey NEO OTP+CCID
[  8894.721] (II) UnloadModule: "libinput"
[  8924.009] (II) config/udev: removing device Microsoft Comfort Mouse 3000
[  8924.009] (II) UnloadModule: "libinput"
[  8924.009] (II) config/udev: removing device Microsoft Comfort Mouse 3000
[  8924.024] (II) UnloadModule: "libinput"
[  8942.192] (II) AIGLX: Suspending AIGLX clients for VT switch
[  8944.824] (II) config/udev: Adding input device Microsoft Comfort
Mouse 3000 (/dev/input/mouse0)
[  8944.824] (II) No input driver specified, ignoring this device.
[  8944.824] (II) This device may have been added with another device file.
[  8944.881] (II) config/udev: Adding input device Microsoft Comfort
Mouse 3000 (/dev/input/event6)
[  8944.881] (**) Microsoft Comfort Mouse 3000: Applying InputClass
"evdev pointer catchall"
[  8944.881] (**) Microsoft Comfort Mouse 3000: Applying InputClass
"evdev keyboard catchall"
[  8944.881] (**) Microsoft Comfort Mouse 3000: Applying InputClass
"libinput pointer catchall"
[  8944.881] (**) Microsoft Comfort Mouse 3000: Applying InputClass
"libinput keyboard catchall"
[  8944.881] (II) Using input driver 'libinput' for 'Microsoft Comfort
Mouse 3000'
[  8944.881] (**) Microsoft Comfort Mouse 3000: always reports core events
[  8944.881] (**) Option "Device" "/dev/input/event6"
[  8944.881] (**) Option "_source" "server/udev"
[  8944.882] (II) input device 'Microsoft Comfort Mouse 3000',
/dev/input/event6 is tagged by udev as: Keyboard Mouse
[  8944.882] (II) input device 'Microsoft Comfort Mouse 3000',
/dev/input/event6 is a pointer caps
[  8944.882] (II) input device 'Microsoft Comfort Mouse 3000',
/dev/input/event6 is a keyboard
[  8944.896] (II) libinput: Microsoft Comfort Mouse 3000: needs a
virtual subdevice
[  8944.896] (**) Option "config_info"
"udev:/sys/devices/pci:00/:00:14.0/usb3/3-3/3-3.3/3-3.3:1.0/0003:045E:077B.0004/input/input19/event6"
[  8944.896] (II) XINPUT: Adding extended input device "Microsoft
Comfort Mouse 3000" (type: MOUSE, id 11)
[  8944.896] (**) Option "AccelerationScheme" "none"
[  8944.896] (**) Microsoft Comfort Mouse 3000: (accel) selected scheme
none/0
[  8944.896] (**) Microsoft Comfort Mouse 3000: (accel) acceleration
factor: 2.000
[  8944.896] (**) Microsoft Comfort Mouse 3000: (accel) acceleration
threshold: 4
[  8944.896] (**) Microsoft Comfort Mouse 3000: Applying InputClass
"evdev pointer catchall"
[  8944.896] (**) Microsoft Comfort Mouse 3000: Applying InputClass
"evdev keyboard catchall"
[  8944.896] (**) Microsoft Comfort Mouse 3000: Applying InputClass
"libinput pointer catchall"
[  8944.896] (**) Microsoft Comfort Mouse 3000: Applying InputClass
"libinput keyboard catchall"
[  8944.896] (II) Using input driver 'libinput' for 'Microsoft Comfort
Mouse 3000'
[  8944.896] (**) Microsoft Comfort Mouse 3000: always reports core events
[  8944.896] (**) Option "Device" "/dev/input/event6"
[  8944.896] (**) Option "_source" "_driver/libinput"
[  8944.896] (II) libinput: Microsoft Comfort Mouse 3000: is a virtual
subdevice
[  8944.896] (EE)
[  8944.896] (EE) Backtrace:
[  8944.896] (EE) 0: /usr/lib/xorg/Xorg (xorg_backtrace+0x4e)
[0x562060e51ade]
[  8944.896] (EE) 1: /usr/lib/xorg/Xorg (0x562060c9f000+0x1b6e69)
[0x562060e55e69]
[  8944.896] (EE) 2: /lib/x86_64-linux-gnu/libc.so.6
(0x7fba0d806000+0x354b0) [0x7fba0d83b4b0]
[  8944.896] (EE) 3: /usr/lib/x86_64-linux-gnu/libinput.so.10
(libinput_device_config_tap_get_finger_count+0x0) [0x7fba06139b00]
[  8944.896] (EE) 4: /usr/lib/xorg/modules/input/libinput_drv.so
(0x7fba06359000+0x6953) [0x7fba0635f953]
[  8944.896] (EE) 5: /usr/lib/xorg/Xorg (0x562060c9f000+0xa2998)
[0x562060d41998]
[  8944.896] (EE) 6: /usr/lib/xorg/modules/input/libinput_drv.so
(0x7fba06359000+0x55e7) [0x7fba0635e5e7]
[  8944.897] (EE) 7: /usr/lib/xorg/modules/input/libinput_drv.so
(0x7fba06359000+0x582c) [0x7fba0635e82c]
[  8944.897] (EE) 8: /usr/lib/xorg/Xorg (ProcessWorkQueue+0x21)
[0x562060cf7c71]
[  8944.897] (EE) 9: /usr/lib/xorg/Xorg (WaitForSomething+0xad)
[0x562060e4e6dd]
[  8944.897] (EE) 10: /usr/lib/xorg/Xorg (0x562060c9f000+0x53b8e)
[0x562060cf2b8e]
[  8944.897] (EE) 11: /usr/lib/xorg/Xorg (0x562060c9f000+0x57dd3)
[0x562060cf6dd3]
[  8944.897] (EE) 12: /lib/x86_64-linux-gnu/libc.so.6
(__libc_start_main+0xf0) [0x7fba0d826830]
[  

Bug#862201: dolibarr: Applying absolute discount in proposal fails

[Maximilian Stein]

Package: dolibarr
Version: 4.0.2+dfsg4-2
Severity: normal

Dear Maintainer,

After having added a customer in Dolibarr, I gave this customer an
absolute discount. Then, I tried to create a proposal, however, applying
the discount fails with the error message:

"You have an error in your SQL syntax; check the manual that corresponds
to your MariaDB server version for the right syntax to use near ' 0)' at
line 1 sql=INSERT INTO llx_propaldet (fk_propal, fk_parent_line, label,
description, fk_product, product_type, fk_remise_except, qty, tva_tx,
localtax1_tx, localtax2_tx, localtax1_type, localtax2_type, subprice,
remise_percent, info_bits, total_ht, total_tva, total_localtax1,
total_localtax2, total_ttc, fk_product_fournisseur_price, buy_price_ht,
special_code, rang, fk_unit, date_start, date_end, fk_multicurrency,
multicurrency_code, multicurrency_subprice, multicurrency_total_ht,
multicurrency_total_tva, multicurrency_total_ttc) VALUES (1, null, null,
'test discount', null, '0', '1', 1, 19, 0, 0, '0', '0', -100, 0, '2',
-100, -19, 0, 0, -119, null, '0', 0, -1, NULL, null, null, null, '', 0,
0, , 0)"

Apparently, the SQL statement is invalid. I tried to manually execute
the statement through the mysql tool and added a value of '0' at the
last but one position in the value vector. This has actually worked, so
the discount is now correctly applied in the offer.

I then tried to find a quickfix for this problem. The SQL statement is
crafted in the file
"/usr/share/dolibarr/htdocs/comm/propal/class/propal.class.php" on lines
3252 and following. The class member "multicurrency_total_tva" seems to
be uninitialized, so I just changed line 3098 to:

var $multicurrency_total_tva = 0;

As I am not using multiple currency currently, this seems to be an
adequate fix for me now.

Best,
Maximilian

-- System Information:
Debian Release: 8.8
  APT prefers stable
  APT policy: (900, 'stable'), (800, 'testing'), (500, 'stable-updates')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages dolibarr depends on:
ii  fonts-dejavu-core   2.34-1
ii  javascript-common   11
ii  libapache2-mod-php  1:7.0+49
ii  libapache2-mod-php7.0 [libapache2-mod-php]  7.0.16-3
ii  libjs-jquery3.1.1-2
ii  libjs-jquery-cookie 11-3
ii  libjs-jquery-flot   0.8.2+dfsg-1
ii  libjs-jquery-ui 1.10.1+dfsg-1
ii  libnusoap-php   0.9.5-3
ii  libphp-adodb5.20.9-1
ii  php-curl1:7.0+49
ii  php-gd  1:7.0+49
ii  php-ldap1:7.0+49
ii  php-pclzip  2.8.2-4
ii  php-tcpdf   6.0.093+dfsg-1
ii  php7.0-cli [php-cli]7.0.16-3
ii  php7.0-curl [php-curl]  7.0.16-3
ii  php7.0-gd [php-gd]  7.0.16-3
ii  php7.0-ldap [php-ldap]  7.0.16-3
ii  php7.0-mysql [php-mysqli]   7.0.16-3
ii  xdg-utils   1.1.0~rc1+git20111210-7.4

Versions of packages dolibarr recommends:
ii  apache2 [httpd]   2.4.25-3
ii  default-mysql-client  1.0.2
ii  default-mysql-server  1.0.2

Versions of packages dolibarr suggests:
pn  php-geoip  
ii  w3m [www-browser]  0.5.3-19+deb8u1

-- no debconf information




signature.asc
Description: OpenPGP digital signature

Bug#862200: cwidget FTCBFS: untranslated build-dependency on g++

[Helmut Grohne]

Source: cwidget
Version: 0.5.17-4
Tags: patch
User: helm...@debian.org
Usertags: rebootstrap

cwidget fails to cross build, because its build dependency on g++ is
unsatisfiable. In theory, we'd have to apply toolchain dependency cross
translation to such a dependency, but this feature is unavailable in the
archive at present. The intent of the dependency was to help with the
libstdc++6 transition, which has long completed. Thus I propose to
simply drop the dependency. Once done, cwidget cross builds
successfully. Please consider applying the attached patch after stretch
is released.

Helmut
diff --minimal -Nru cwidget-0.5.17/debian/changelog 
cwidget-0.5.17/debian/changelog
--- cwidget-0.5.17/debian/changelog 2015-08-13 15:13:04.0 +0200
+++ cwidget-0.5.17/debian/changelog 2017-05-09 19:51:07.0 +0200
@@ -1,3 +1,11 @@
+cwidget (0.5.17-4.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Drop versioned g++ dependency, because the libstdc++6 transition is
+complete and the dependency breaks cross compilation. (Closes: #-1)
+
+ -- Helmut Grohne   Tue, 09 May 2017 19:51:07 +0200
+
 cwidget (0.5.17-4) unstable; urgency=medium
 
   * Acknowledge NMU.
diff --minimal -Nru cwidget-0.5.17/debian/control cwidget-0.5.17/debian/control
--- cwidget-0.5.17/debian/control   2015-08-13 15:00:44.0 +0200
+++ cwidget-0.5.17/debian/control   2017-05-09 19:51:05.0 +0200
@@ -6,7 +6,6 @@
 Vcs-Browser: http://anonscm.debian.org/gitweb/?p=cwidget/cwidget.git
 Maintainer: Manuel A. Fernandez Montecelo 
 Build-Depends: debhelper (>= 9~),
-   g++ (>= 4:5.2),
dh-autoreconf,
gettext,
libcppunit-dev (>= 1.13.2-2.1),

Bug#862199: thunderbird: Thunderbird crashes when removing massively mails

[Jean-Philippe MENGUAL]

Package: thunderbird
Version: 1:45.8.0-3
Severity: normal

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

I switched from Icedove to Thunderbird. I use MATE with Orca screen reader and 
accessibility stack enabled.

   * What exactly did you do (or not do) that was effective (or
 ineffective)?

1. Open a folder with a lot of mails (here, Inbox in my libreoffice box, or in 
my linuxfromscratch box)
2. Go th the newest mail with End key 
3. Remove quickly mails that you do not want to read. Use Del key and press it
quickly many times

   * What was the outcome of this action?

After some mails (here, I removed about 100 mails), Thunderbird crashes and open
the crash reporter.

   * What outcome did you expect instead?

Should not crash.

*** End of the template - remove these template lines ***

The log is attached with trace from debug symbols. If something is missing, tell
me what command use in Gdb or other -dbg to install.

Regards

-- System Information:
Debian Release: 9.0
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing')
Architecture: amd64
 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages thunderbird depends on:
ii  debianutils   4.8.1
ii  fontconfig2.11.0-6.7+b1
ii  libasound21.1.3-5
ii  libatk1.0-0   2.22.0-1
ii  libc6 2.24-10
ii  libcairo2 1.14.8-1
ii  libdbus-1-3   1.10.18-1
ii  libdbus-glib-1-2  0.108-2
ii  libevent-2.0-52.0.21-stable-3
ii  libffi6   3.2.1-6
ii  libfontconfig12.11.0-6.7+b1
ii  libfreetype6  2.6.3-3.2
ii  libgcc1   1:6.3.0-16
ii  libgdk-pixbuf2.0-02.36.5-2
ii  libglib2.0-0  2.50.3-2
ii  libgtk2.0-0   2.24.31-2
ii  libhunspell-1.4-0 1.4.1-2+b2
ii  libicu57  57.1-6
ii  libnspr4  2:4.12-6
ii  libnss3   2:3.26.2-1
ii  libpango-1.0-01.40.5-1
ii  libpangocairo-1.0-0   1.40.5-1
ii  libpangoft2-1.0-0 1.40.5-1
ii  libpixman-1-0 0.34.0-1
ii  libsqlite3-0  3.16.2-3
ii  libstartup-notification0  0.12-4+b2
ii  libstdc++66.3.0-16
ii  libvpx4   1.6.1-3
ii  libx11-6  2:1.6.4-3
ii  libxcomposite11:0.4.4-2
ii  libxdamage1   1:1.1.4-2+b3
ii  libxext6  2:1.3.3-1+b2
ii  libxfixes31:5.0.3-1
ii  libxrender1   1:0.9.10-1
ii  libxt61:1.1.5-1
ii  psmisc22.21-2.1+b2
ii  x11-utils 7.7+3+b1
ii  zlib1g1:1.2.8.dfsg-5

Versions of packages thunderbird recommends:
ii  hunspell-en-us [hunspell-dictionary] 20070829-7
ii  hunspell-fr-classical [hunspell-dictionary]  1:5.7-1
ii  lightning1:45.8.0-3

Versions of packages thunderbird suggests:
pn  apparmor  
ii  fonts-lyx 2.2.2-1
ii  libgssapi-krb5-2  1.15-1

-- no debconf information
Le script a débuté sur mar. 09 mai 2017 19:24:26 CEST
]0;jp@hypra: ~/a/dolibarrjp@hypra:~/a/dolibarr

$ gdb /usr/bin/thunderbird 
GNU gdb (Debian 7.12-6) 7.12.0.20161007-git
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
.
Find the GDB manual and other documentation resources online at:
.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
"/usr/bin/thunderbird": not in executable format: Format de fichier non reconnu
(gdb) run
Starting program:  
No executable file specified.
Use the "file" or "exec-file" command.
(gdb) quit
]0;jp@hypra: ~/a/dolibarrjp@hypra:~/a/dolibarr

$ gdb /usr/bin/thunderbird 
[1@l[1@i[1@b[1@//thunderbird
GNU gdb (Debian 7.12-6) 7.12.0.20161007-git
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type 

Bug#862198: ITP: python-bayespy -- variational Bayesian inference tools for Python

[Ghislain Antony Vaillant]

Package: wnpp
Severity: wishlist
Owner: Ghislain Antony Vaillant 

* Package name: python-bayespy
  Version : 0.5.6
  Upstream Author : Jaakko Luttinen 
* URL : https://www.bayespy.org/
* License : Expat
  Programming Lang: Python
  Description : variational Bayesian inference tools for Python

Long-Description:
 BayesPy provides tools for Bayesian inference with Python. The user constructs
 a model as a Bayesian network, observes data and runs posterior inference. The
 goal is to provide a tool which is efficient, flexible and extendable enough
 for expert use but also accessible for more casual users.

This package will be co-maintained by the Debian Science Team.

Bug#862197: mark elinks-data Multi-Arch: foreign

[Helmut Grohne]

Package: elinks-data
Version: 0.12~pre6-12
Tags: patch
User: helm...@debian.org
Usertags: rebootstrap

elinks cannot be installed for non-native architectures, because its
dependency on elinks-data would be unsatisfiable. In general,
Architecture: all packages can never satisfy dependencies from
non-native architectures unless marked Multi-Arch: foreign. In this
case, such a marking is correct, because elinks-data does not have any
maintainer scripts nor dependencies. The same holds for elinks-doc. The
attached patch marks both of them Multi-Arch: foreign. Please consider
applying it after stretch is released.

Helmut
diff --minimal -Nru elinks-0.12~pre6/debian/changelog 
elinks-0.12~pre6/debian/changelog
--- elinks-0.12~pre6/debian/changelog   2016-10-23 21:17:47.0 +0200
+++ elinks-0.12~pre6/debian/changelog   2017-05-09 19:35:24.0 +0200
@@ -1,3 +1,10 @@
+elinks (0.12~pre6-12.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Mark elinks-data and elinks-doc Multi-Arch: foreign (Closes: #-1)
+
+ -- Helmut Grohne   Tue, 09 May 2017 19:35:24 +0200
+
 elinks (0.12~pre6-12) unstable; urgency=medium
 
   * Fix maint script (Closes: #788160)
diff --minimal -Nru elinks-0.12~pre6/debian/control 
elinks-0.12~pre6/debian/control
--- elinks-0.12~pre6/debian/control 2016-10-23 21:17:47.0 +0200
+++ elinks-0.12~pre6/debian/control 2017-05-09 19:35:19.0 +0200
@@ -34,6 +34,7 @@
 
 Package: elinks-data
 Architecture: all
+Multi-Arch: foreign
 Depends: ${misc:Depends}
 Pre-Depends: ${misc:Pre-Depends}
 Recommends: elinks (= ${source:Version})
@@ -59,6 +60,7 @@
 Package: elinks-doc
 Section: doc
 Architecture: all
+Multi-Arch: foreign
 Depends: ${misc:Depends}
 Pre-Depends: ${misc:Pre-Depends}
 Suggests: elinks

Bug#862196: mark xmltoman Multi-Arch: foreign

[Helmut Grohne]

Package: xmltoman
Version: 0.4-4
Tags: patch
User: helm...@debian.org
Usertags: rebootstrap
Control: affects -1 + src:avahi src: src:seccure src:shairport-sync 
src:syrep

The packages listed under affects cannot satisfy their cross build
dependencies, because their dependency on xmltoman is not satisfiable.
In general, Architecture: all packages can never satisfy cross build
dependencies unless marked Multi-Arch: foreign. In this case, such a
marking is reasonable, because xmltoman provides command line utilities,
whose output and interaction does not depend on the architecture of the
perl interpreter used to run xmltoman. Please consider applying the
attached patch after stretch is released.

Helmut
diff --minimal -Nru xmltoman-0.4/debian/changelog xmltoman-0.4/debian/changelog
--- xmltoman-0.4/debian/changelog   2017-01-16 19:08:47.0 +0100
+++ xmltoman-0.4/debian/changelog   2017-05-09 19:28:48.0 +0200
@@ -1,3 +1,10 @@
+xmltoman (0.4-4.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Mark xmltoman Multi-Arch: foreign. (Closes: #-1)
+
+ -- Helmut Grohne   Tue, 09 May 2017 19:28:48 +0200
+
 xmltoman (0.4-4) unstable; urgency=medium
 
   * QA upload.
diff --minimal -Nru xmltoman-0.4/debian/control xmltoman-0.4/debian/control
--- xmltoman-0.4/debian/control 2017-01-16 19:08:47.0 +0100
+++ xmltoman-0.4/debian/control 2017-05-09 19:27:54.0 +0200
@@ -8,6 +8,7 @@
 
 Package: xmltoman
 Architecture: all
+Multi-Arch: foreign
 Depends: ${misc:Depends}, libxml-parser-perl
 Description: simple XML to man converter
  xmltoman and xmlmantohtml are two small scripts to convert xml to man

Bug#774449: sensible-utils: please make sensible-utils build reproducibly

[Ximin Luo]

Hi, here is an updated patch - it gets rid of filesystem and umask differences, 
which started cropping up. I think previously I was testing with an older 
version of reprotest, which didn't properly test these differences.

I also took the chance to refactor the rules file slightly, for readability.

X

-- 
GPG: ed25519/56034877E1F87C35
GPG: rsa4096/1318EFAC5FBBDBCE
https://github.com/infinity0/pubkeys.git
diff -Nru sensible-utils-0.0.9/debian/changelog sensible-utils-0.0.9.0~reproducible1/debian/changelog
--- sensible-utils-0.0.9/debian/changelog	2013-06-06 14:19:53.0 +0200
+++ sensible-utils-0.0.9.0~reproducible1/debian/changelog	2017-05-09 19:08:51.0 +0200
@@ -1,3 +1,18 @@
+sensible-utils (0.0.9.0~reproducible1) UNRELEASED; urgency=low
+
+  [ Jérémy Bobbio ]
+  * Make package build reproducibly:
+- Stop recording current time when creating gzip files.
+- Fix mtimes before creating binary packages.
+
+  [ Ximin Luo ]
+  * Make package build reproducible, pt 2:
+- Sort file list, to avoid filesystem differences.
+- Explicitly install every language man dir, to avoid umask differences.
+- Slightly refactoring for readability.
+
+ -- Ximin Luo   Tue, 09 May 2017 19:08:51 +0200
+
 sensible-utils (0.0.9) unstable; urgency=low
 
   * Fix bashism in select-editor
diff -Nru sensible-utils-0.0.9/debian/rules sensible-utils-0.0.9.0~reproducible1/debian/rules
--- sensible-utils-0.0.9/debian/rules	2012-05-14 09:23:19.0 +0200
+++ sensible-utils-0.0.9.0~reproducible1/debian/rules	2017-05-09 19:05:54.0 +0200
@@ -9,6 +9,11 @@
 INSTALL_SCRIPT  = $(INSTALL) -p-o root -g root  -m  755
 INSTALL_DIR = $(INSTALL) -p -d -o root -g root  -m  755
 
+MAN_LANGS = de es fr it ja pl
+MAN_DIRS = $(MAN_LANGS:%=debian/sensible-utils/usr/share/man/%/man1)
+
+BUILD_DATE := $(shell dpkg-parsechangelog | sed -n -e 's/^Date: //p')
+
 DEB_BUILD_ARCH_OS ?= $(shell dpkg-architecture -qDEB_BUILD_ARCH_OS)
 DEB_BUILD_GNU_TYPE = $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
 DEB_HOST_GNU_TYPE = $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
@@ -52,41 +57,30 @@
 	$(INSTALL_DIR) debian/sensible-utils/DEBIAN \
 		   debian/sensible-utils/usr/bin \
 		   debian/sensible-utils/usr/share/man/man1 \
+		   $(MAN_DIRS) \
 		   debian/sensible-utils/usr/lib/mime/packages \
 		   debian/sensible-utils/usr/share/doc/$(package)
 	$(MAKE) install DESTDIR=$(CURDIR)/debian/sensible-utils INSTALL_PROGRAM="$(INSTALL_PROGRAM)"
 
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/man1/sensible-pager.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/man1/sensible-browser.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/fr/man1/sensible-pager.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/fr/man1/sensible-browser.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/pl/man1/sensible-pager.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/pl/man1/sensible-browser.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/es/man1/sensible-pager.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/es/man1/sensible-browser.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/de/man1/sensible-pager.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/de/man1/sensible-browser.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/ja/man1/sensible-pager.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/ja/man1/sensible-browser.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/it/man1/sensible-pager.1.gz
-	ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/it/man1/sensible-browser.1.gz
+	set -e; for i in "" $(MAN_LANGS); do \
+		ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/$$i/man1/sensible-pager.1.gz; \
+		ln -s sensible-editor.1.gz debian/sensible-utils/usr/share/man/$$i/man1/sensible-browser.1.gz; \
+	done
 	$(INSTALL_FILE) debian/changelog debian/sensible-utils/usr/share/doc/$(package)
 	find debian/sensible-utils/usr/share/man/man1 \
-	 debian/sensible-utils/usr/share/man/es/man1 \
-	 debian/sensible-utils/usr/share/man/fr/man1 \
-	 debian/sensible-utils/usr/share/man/pl/man1 \
-	 debian/sensible-utils/usr/share/man/de/man1 \
-	 debian/sensible-utils/usr/share/man/ja/man1 \
-	 debian/sensible-utils/usr/share/man/it/man1 \
- debian/sensible-utils/usr/share/doc/$(package) -type f | xargs gzip -9
+	 $(MAN_DIRS) \
+	 debian/sensible-utils/usr/share/doc/$(package) -type f | xargs gzip -9n
 	$(INSTALL_FILE) debian/copyright debian/sensible-utils/usr/share/doc/$(package)
 	$(INSTALL_SCRIPT) debian/postinst debian/sensible-utils/DEBIAN/
 	$(INSTALL_SCRIPT) debian/postrm debian/sensible-utils/DEBIAN/
 	$(INSTALL_FILE) debian/mime 

Bug#862194: [Pkg-fedora-ds-maintainers] Bug#862194: 389-ds-base FTBFS on mips/mipsel: slapi_counter.c:210:5: error: unknown register name 'edx' in 'asm'

[Timo Aaltonen]

On 09.05.2017 19:37, Adrian Bunk wrote:
> Source: 389-ds-base
> Version: 1.3.5.17-1
> Severity: serious
> 
> https://buildd.debian.org/status/package.php?p=389-ds-base=sid
> 
> ...
> libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -DBUILD_NUM=\"2017.129.86\" 
> "-DVENDOR=\"389 Project\"" -DBRAND=\"389\" -DCAPBRAND=\"389\" 
> -UPACKAGE_VERSION -UPACKAGE_TARNAME -UPACKAGE_STRING -UPACKAGE_BUGREPORT 
> -I../ldap/include -I../ldap/servers/slapd -I../include -I. 
> -DLOCALSTATEDIR=\"/var\" -DSYSCONFDIR=\"/etc\" 
> -DLIBDIR=\"/usr/lib/mips-linux-gnu\" -DBINDIR=\"/usr/bin\" 
> -DDATADIR=\"/usr/share\" -DDOCDIR=\"/usr/share/doc/389-ds-base\" 
> -DSBINDIR=\"/usr/sbin\" 
> -DPLUGINDIR=\"/usr/lib/mips-linux-gnu/dirsrv/plugins\" 
> -DTEMPLATEDIR=\"/usr/share/dirsrv/data\" -DWITH_SYSTEMD -I/usr/include 
> -I/usr/include/nss -I/usr/include/nspr -I/usr/include/nspr 
> -I/usr/include/sasl -I/usr/include -I/usr/include -isystem 
> /usr/include/mit-krb5 -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 
> -fdebug-prefix-map=/«PKGBUILDDIR»=. -fstack-protector-strong -Wformat 
> -Werror=format-security -c ../ldap/servers/slapd/slapi_counter.c  -fPIC -DPIC 
> -o ldap/servers/slapd/.libs/libslapd_la-slapi_counter.o
> ../ldap/servers/slapd/slapi_counter.c: In function 'slapi_counter_set_value':
> ../ldap/servers/slapd/slapi_counter.c:210:5: error: unknown register name 
> 'edx' in 'asm'
>  __asm__ __volatile__(
>  ^~~
> ../ldap/servers/slapd/slapi_counter.c:210:5: error: unknown register name 
> 'ecx' in 'asm'
> ../ldap/servers/slapd/slapi_counter.c:210:5: error: unknown register name 
> 'ebx' in 'asm'
> ../ldap/servers/slapd/slapi_counter.c:210:5: error: unknown register name 
> 'eax' in 'asm'
> ../ldap/servers/slapd/slapi_counter.c: In function 'slapi_counter_get_value':
> ../ldap/servers/slapd/slapi_counter.c:277:5: error: unknown register name 
> 'edx' in 'asm'
>  __asm__ __volatile__(
>  ^~~
> ../ldap/servers/slapd/slapi_counter.c:277:5: error: unknown register name 
> 'ecx' in 'asm'
> ../ldap/servers/slapd/slapi_counter.c:277:5: error: unknown register name 
> 'ebx' in 'asm'
> ../ldap/servers/slapd/slapi_counter.c:277:5: error: unknown register name 
> 'eax' in 'asm'
> Makefile:8384: recipe for target 
> 'ldap/servers/slapd/libslapd_la-slapi_counter.lo' failed
> make[2]: *** [ldap/servers/slapd/libslapd_la-slapi_counter.lo] Error 1
> 
> 
> This code tries to use x86 asm on nsome on-x86 platforms.

Uh, so it seems.. Filed upstream and pinged folks on irc:

https://pagure.io/389-ds-base/issue/49245



-- 
t

Bug#862195: sendip: please make the build reproducible

[Chris Lamb]

Source: sendip
Version: 2.5-7
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that sendip could not be built reproducibly.

This is because it uses an embedded copy of help2man which does
not support SOURCE_DATE_EPOCH.

Patch attached to use the Debian-supplied one (which it should be
doing anyway, I suppose...)


 [0] https://reproducible-builds.org/


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-
--- a/debian/control2017-05-09 17:34:12.813413625 +0100
--- b/debian/control2017-05-09 17:34:58.141642157 +0100
@@ -3,7 +3,7 @@
 Priority: optional
 Section: net
 Standards-Version: 3.9.3
-Build-Depends: debhelper (>= 8)
+Build-Depends: debhelper (>= 8), help2man
 Homepage: http://www.earth.li/projectpurple/progs/sendip.html
 
 Package: sendip
--- a/debian/patches/08-reproducible-build.diff 1970-01-01 01:00:00.0 
+0100
--- b/debian/patches/08-reproducible-build.diff 2017-05-09 17:35:34.197825457 
+0100
@@ -0,0 +1,17 @@
+Description: Make the build reproducible
+Author: Chris Lamb 
+Last-Update: 2017-05-09
+
+--- sendip-2.5.orig/Makefile
 sendip-2.5/Makefile
+@@ -42,8 +42,8 @@ else \
+ $(CC) -o $@ $(LDFLAGS) $(CFLAGS) $+ ; \
+ fi"
+ 
+-sendip.1: ./help2man $(PROGS) $(PROTOS) VERSION
+-  ./help2man -n "Send arbitrary IP packets" -N >sendip.1
++sendip.1:
++  help2man -n "Send arbitrary IP packets" -N ./sendip >sendip.1
+ 
+ sendip.spec:  sendip.spec.in VERSION
+   echo -n '%define ver ' >sendip.spec
--- a/debian/patches/series 2017-05-09 17:34:12.813413625 +0100
--- b/debian/patches/series 2017-05-09 17:35:10.957707162 +0100
@@ -5,3 +5,4 @@
 05-as-needed.diff
 06-clang-fix.diff
 07-gcc-5-fix.diff
+08-reproducible-build.diff

Bug#861771: Fails to install: postinst script returned error exit status 1

[Simon McVittie]

On Tue, 09 May 2017 at 11:11:15 -0400, Ryan Kavanagh wrote:
> If I correctly interpreted the following,
> /var/log/dpkg.log.4.gz:2017-01-24 15:51:39 upgrade nodm:amd64 0.12-1.1 
> 0.13-1
> I appear to be upgrading from 0.12-1.1, which was installed 2017-01-23.

I think you would have experienced this installation failure any time
you upgraded nodm, then; so, not a regression between stretch and
sid. That's good. However, it is a regression since jessie.

> > I think this bug makes it unusable to users [...], so not all users.
> 
> Feel free to set the importance of the bug to non-RC then.

I'm not the maintainer, so I'll defer to them.

I have a non-maintainer upload in the DELAYED queue to fix this (and a
couple of other bugs with a good risk/benefit ratio), on the assumption
that it is potentially RC; I'd say it's at least 'important', since
there's an explicitly supported configuration in which the package is
unusable (admittedly, that configuration is one where the package isn't
actually in use) and the failure mode across upgrades from jessie to
stretch is pretty bad. However, I'm happy to cancel that NMU if the
maintainers would rather not have it.

S

Bug#87619: popularity-contest should use alternate method if /usr is mounted readonly

[Bill Allombert]

On Tue, May 09, 2017 at 04:59:56PM +0200, Manolo Díaz wrote:
> Package: popularity-contest
> Version: 1.64
> Followup-For: Bug #87619
> 
> Dear Maintainer,
> 
> I think there are other circumstances under which popcon provides
> unreliable "Vote" values:
> /usr is mounted relatime

relatime is fine, since atime are still updated one time by day.

> A program that checks the system integrity, such as debsums

> In that case, is it worth to have popularity-contest installed or
> should I deinstall it?

Well the 'inst' field is still correct, so this is still useful.

Cheers,
-- 
Bill. 

Imagine a large red swirl here. 

Bug#87619: popularity-contest should use alternate method if /usr is mounted readonly

[Manolo Díaz]

On Tuesday, 9 May 2017 at 16:47 UTC
Bill Allombert wrote:

> On Tue, May 09, 2017 at 04:59:56PM +0200, Manolo Díaz wrote:
> > Package: popularity-contest
> > Version: 1.64
> > Followup-For: Bug #87619
> > 
> > Dear Maintainer,
> > 
> > I think there are other circumstances under which popcon provides
> > unreliable "Vote" values:
> > /usr is mounted relatime  
> 
> relatime is fine, since atime are still updated one time by day.
> 
> > A program that checks the system integrity, such as debsums  
> 
> > In that case, is it worth to have popularity-contest installed or
> > should I deinstall it?  
> 
> Well the 'inst' field is still correct, so this is still useful.
> 
> Cheers,

All right, I'll keep it installed then. Thank you.

Regards,
-- 
Manolo Díaz

Bug#862194: 389-ds-base FTBFS on mips/mipsel: slapi_counter.c:210:5: error: unknown register name 'edx' in 'asm'

[Adrian Bunk]

Source: 389-ds-base
Version: 1.3.5.17-1
Severity: serious

https://buildd.debian.org/status/package.php?p=389-ds-base=sid

...
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -DBUILD_NUM=\"2017.129.86\" 
"-DVENDOR=\"389 Project\"" -DBRAND=\"389\" -DCAPBRAND=\"389\" -UPACKAGE_VERSION 
-UPACKAGE_TARNAME -UPACKAGE_STRING -UPACKAGE_BUGREPORT -I../ldap/include 
-I../ldap/servers/slapd -I../include -I. -DLOCALSTATEDIR=\"/var\" 
-DSYSCONFDIR=\"/etc\" -DLIBDIR=\"/usr/lib/mips-linux-gnu\" 
-DBINDIR=\"/usr/bin\" -DDATADIR=\"/usr/share\" 
-DDOCDIR=\"/usr/share/doc/389-ds-base\" -DSBINDIR=\"/usr/sbin\" 
-DPLUGINDIR=\"/usr/lib/mips-linux-gnu/dirsrv/plugins\" 
-DTEMPLATEDIR=\"/usr/share/dirsrv/data\" -DWITH_SYSTEMD -I/usr/include 
-I/usr/include/nss -I/usr/include/nspr -I/usr/include/nspr -I/usr/include/sasl 
-I/usr/include -I/usr/include -isystem /usr/include/mit-krb5 -I/usr/include 
-Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -fdebug-prefix-map=/«PKGBUILDDIR»=. 
-fstack-protector-strong -Wformat -Werror=format-security -c 
../ldap/servers/slapd/slapi_counter.c  -fPIC -DPIC -o 
ldap/servers/slapd/.libs/libslapd_la-slapi_counter.o
../ldap/servers/slapd/slapi_counter.c: In function 'slapi_counter_set_value':
../ldap/servers/slapd/slapi_counter.c:210:5: error: unknown register name 'edx' 
in 'asm'
 __asm__ __volatile__(
 ^~~
../ldap/servers/slapd/slapi_counter.c:210:5: error: unknown register name 'ecx' 
in 'asm'
../ldap/servers/slapd/slapi_counter.c:210:5: error: unknown register name 'ebx' 
in 'asm'
../ldap/servers/slapd/slapi_counter.c:210:5: error: unknown register name 'eax' 
in 'asm'
../ldap/servers/slapd/slapi_counter.c: In function 'slapi_counter_get_value':
../ldap/servers/slapd/slapi_counter.c:277:5: error: unknown register name 'edx' 
in 'asm'
 __asm__ __volatile__(
 ^~~
../ldap/servers/slapd/slapi_counter.c:277:5: error: unknown register name 'ecx' 
in 'asm'
../ldap/servers/slapd/slapi_counter.c:277:5: error: unknown register name 'ebx' 
in 'asm'
../ldap/servers/slapd/slapi_counter.c:277:5: error: unknown register name 'eax' 
in 'asm'
Makefile:8384: recipe for target 
'ldap/servers/slapd/libslapd_la-slapi_counter.lo' failed
make[2]: *** [ldap/servers/slapd/libslapd_la-slapi_counter.lo] Error 1


This code tries to use x86 asm on nsome on-x86 platforms.

Bug#862193: tar: Cannot utime: Read-only file system

[Stefan Froehlich]

Package: tar
Version: 1.27.1-2+deb8u1
Severity: normal

Dear Maintainer,

the following happens:

# /bin/tar cz -p -P --atime-preserve --warning=no-file-ignored 
--warning=no-file-changed --one-file-system /
/bin/tar: /etc/machine-id: Cannot utime: Read-only file system  
/bin/tar: Exiting with failure status due to previous errors

"atime-preserve" does advise tar to write back the former access time, so
the error message is correct, *but* if a file system is read-only there
is no need to write back the access time in the first place, as can't
have been changed.

Searching for this lead me to
, so obviously there
is already a (quite trivial) fix for this.

Bye,
Stefan

-- System Information:
Debian Release: 8.8
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages tar depends on:
ii  libacl1  2.2.52-2
ii  libc62.19-18+deb8u9
ii  libselinux1  2.3-2

tar recommends no packages.

Versions of packages tar suggests:
ii  bzip21.0.6-7+b3
pn  ncompress
pn  tar-scripts  
ii  xz-utils 5.1.1alpha+20120614-2+b3

-- no debconf information

Bug#862191: RFP: brython -- implementation of Python 3 running in the browser

[W. Martin Borgert]

Package: wnpp
Severity: wishlist

* Package name: brython
  Version : 3.2.6
  Upstream Author : Pierre Quentel 
* URL : https://github.com/brython-dev/brython
* License : BSD
  Programming Lang: JavaScript
  Description : implementation of Python 3 running in the browser

Brython (Browser Python) is an implementation of Python 3 running
in the browser, with an interface to the DOM elements and events.

Brython supports most of the syntax of Python 3, including
comprehensions, generators, metaclasses, imports, etc. and many
modules of the CPython distribution.

It includes libraries to interact with DOM elements and events,
and with existing Javascript libraries such as jQuery, 3D,
Highcharts, Raphael etc. It supports lastest specs of
HTML5/CSS3, and can use CSS Frameworks like Bootstrap3, LESS,
SASS etc.

Bug#862192: golang-github-docker-docker-credential-helpers FTBFS on mips*: no buildable Go source files in /<>/obj-mips-linux-gnu/src/github.com/docker/docker-credential-helpers/secretser

[Adrian Bunk]

Source: golang-github-docker-docker-credential-helpers
Version: 0.5.0-1
Severity: important

https://buildd.debian.org/status/package.php?p=golang-github-docker-docker-credential-helpers=sid

...
make[1]: Entering directory '/<>'
dh_auto_build
go install -v -p 1 github.com/docker/docker-credential-helpers/client 
github.com/docker/docker-credential-helpers/credentials 
github.com/docker/docker-credential-helpers/secretservice 
github.com/docker/docker-credential-helpers/secretservice/cmd
github.com/docker/docker-credential-helpers/credentials
github.com/docker/docker-credential-helpers/client
github.com/docker/docker-credential-helpers/secretservice
go build github.com/docker/docker-credential-helpers/secretservice: no 
buildable Go source files in 
/<>/obj-mips-linux-gnu/src/github.com/docker/docker-credential-helpers/secretservice
dh_auto_build: go install -v -p 1 
github.com/docker/docker-credential-helpers/client 
github.com/docker/docker-credential-helpers/credentials 
github.com/docker/docker-credential-helpers/secretservice 
github.com/docker/docker-credential-helpers/secretservice/cmd returned exit 
code 1
debian/rules:7: recipe for target 'override_dh_auto_build' failed
make[1]: *** [override_dh_auto_build] Error 1

Bug#860633: [pkg-go] Bug#860633: Bug#860633: golang-gopkg-asn1-ber.v1: FTBFS on i386: dh_auto_test: go test -v -p 1 gopkg.in/asn1-ber.v1 returned exit code 2

[Dr. Tobias Quathamer]

Am 06.05.2017 um 15:45 schrieb Dr. Tobias Quathamer:

Hi,

I would suggest that we remove this package from testing (stretch).


Removal request: https://bugs.debian.org/862190




signature.asc
Description: OpenPGP digital signature

Bug#862190: RM: golang-gopkg-asn1-ber.v1/1.1-1

[Dr. Tobias Quathamer]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: rm

Dear release team,

I think we should remove golang-gopkg-asn1-ber.v1 from testing. The 
package has an FTBFS RC bug on i386 which does not have a clean fix. 
(https://bugs.debian.org/860633)


In testing, there's only one package as reverse dependency 
(golang-github-go-ldap-ldap), so that one would be removed as well.


The package golang-github-go-ldap-ldap has no reverse dependencies in 
testing.


Of course, there's already an autoremoval pending, but it's still a 
month away, and we'd all like to release stretch rather sooner than 
later, wouldn't we? :-)


Regards,
Tobias



$ dak rm -nR -s testing golang-github-go-ldap-ldap
Will remove the following packages from testing:

golang-github-go-ldap-ldap |2.4.1-1 | source
golang-github-go-ldap-ldap-dev |2.4.1-1 | all

Maintainer: pkg-go 

--- Reason ---

--

Checking reverse dependencies...
No dependency problem found.

$ dak rm -nR -s testing golang-gopkg-asn1-ber.v1
Will remove the following packages from testing:

golang-gopkg-asn1-ber.v1 |  1.1-1 | source
golang-gopkg-asn1-ber.v1-dev |  1.1-1 | all

Maintainer: pkg-go 

--- Reason ---

--

Checking reverse dependencies...
# Broken Depends:
golang-github-go-ldap-ldap: golang-github-go-ldap-ldap-dev

# Broken Build-Depends:
golang-github-go-ldap-ldap: golang-gopkg-asn1-ber.v1-dev

Dependency problem found.



signature.asc
Description: OpenPGP digital signature

Bug#862171: debugger back trace

[Erez]

I get a very similar trace for smplayer:

(gdb) bt
#0  0x in ?? ()
#1  *0x772cc6ee in copyActionToPlatformItem*
(action=action@entry=0x55d8fe40,
item=item@entry=0x55d259b0, itemsMenu=0x55ead140) at
*widgets/qmenu.cpp:3277*
#2  0x772cc2f1 in QMenuPrivate::syncPlatformMenu
(this=0x55dfe5b0) at widgets/qmenu.cpp:192
#3  0x772cc407 in QMenu::setPlatformMenu
(this=this@entry=0x55e9ea60,
platformMenu=) at widgets/qmenu.cpp:3482
#4  0x774b5e85 in QSystemTrayIconPrivate::addPlatformMenu
(this=0x55cf4b50, menu=0x55e9ea60) at util/qsystemtrayicon.cpp:767
#5  0x774b5f13 in QSystemTrayIconPrivate::addPlatformMenu
(this=0x55cf4b50, menu=0x55dff970) at util/qsystemtrayicon.cpp:760
#6  0x774b5f62 in QSystemTrayIconPrivate::updateMenu_sys_qpa
(this=0x55cf4b50) at util/qsystemtrayicon.cpp:716
#7  0x5570d513 in ?? ()
#8  0x55776330 in ?? ()
#9  0x5571b6d4 in ?? ()
#10 0x5571bf05 in ?? ()
#11 0x5571fa06 in ?? ()
#12 0x555ad214 in ?? ()
#13 0x751fe2b1 in __libc_start_main (main=0x555acde0, argc=1,
argv=0x7fffdaf8, init=, fini=,
rtld_fini=, stack_end=0x7fffdae8) at
../csu/libc-start.c:291
#14 0x555ae8ba in ?? ()
(gdb)

I think that it is a bug in libqt5widgets5.

Erez


On 9 May 2017 at 15:06, Sebastian Ramacher  wrote:

> On 2017-05-09 14:21:55, Erez wrote:
> > (gdb) bt
> > #0  0x in ?? ()
> > #1  0x7fffe26f86ee in ?? () from
> > /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
> > #2  0x7fffe26f82f1 in ?? () from
> > /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
> > #3  0x7fffe28e1e85 in ?? () from
> > /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
> > #4  0x7fffe28e1f13 in ?? () from
> > /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
> > #5  0x7fffe28e1f62 in ?? () from
> > /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
> > #6  0x7fffe2b163f2 in ?? () from
> > /usr/lib/x86_64-linux-gnu/vlc/plugins/gui/libqt4_plugin.so
> > #7  0x7fffe2b204ee in ?? () from
> > /usr/lib/x86_64-linux-gnu/vlc/plugins/gui/libqt4_plugin.so
> > #8  0x7fffe2b271a6 in ?? () from
> > /usr/lib/x86_64-linux-gnu/vlc/plugins/gui/libqt4_plugin.so
> > #9  0x7fffe2b1070d in ?? () from
> > /usr/lib/x86_64-linux-gnu/vlc/plugins/gui/libqt4_plugin.so
> > #10 0x779a2424 in start_thread (arg=0x7fffe015c700) at
> > pthread_create.c:333
> > #11 0x774e19bf in clone () at
> > ../sysdeps/unix/sysv/linux/x86_64/clone.S:105
> > (gdb)
>
> Please install the corresponding -dbgsym (vlc-plugin-qt-dbgsym and the
> same for
> all Qt5 packages) packages [1] and re-create the backtrace with the
> debuggin
> symbols installed.
>
> Cheers
>
>
> [1] https://wiki.debian.org/AutomaticDebugPackages, see Status
>
> > ___
> > pkg-multimedia-maintainers mailing list
> > pkg-multimedia-maintain...@lists.alioth.debian.org
> > http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/
> pkg-multimedia-maintainers
>
>
> --
> Sebastian Ramacher
>

Bug#862189: transition: hunspell

[Rene Engelhard]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Hi,

Simply a "new" upstream.

Ben file:

title = "hunspell";
is_affected = .depends ~ "libhunspell-1.4-0" | .depends ~ "libhunspell-1.6-0";
is_good = .depends ~ "libhunspell-1.6-0";
is_bad = .depends ~ "libhunspell-1.4-0";

(there's already a auto-hunspell tracker.)

Note newer firefoxes (as in experimental) already seem to need >= 1.6...

Of the packages using hunspell, only lokalize failed (again, no surprise on how 
they
do the detection), filed #862163.

Regards,

Rene

Bug#815943: Contract-Position

[Volioti, G]

One of the Major producer of steel in Asia(Japan) is currently employing both 
individuals/companies on a part time basis to help their growing business in 
your region, with good pay and commissions involved. Please be advise that this 
job only takes an hour of your time daily,thereby giving you room to go about 
your daily activities without interruption, Advise for details if interested.

Bug#862171: debugger back trace

[Erez]

On 9 May 2017 at 15:06, Sebastian Ramacher  wrote:

> dbgsym



(gdb) bt
#0  0x in ?? ()
#1  0x7fffde6f86ee in copyActionToPlatformItem
(action=action@entry=0x7fffc431a330,
item=item@entry=0x7fffc42d4240, itemsMenu=0x7fffc41cd5e0) at
widgets/qmenu.cpp:3277
#2  0x7fffde6f82f1 in QMenuPrivate::syncPlatformMenu
(this=0x7fffc431f8a0) at widgets/qmenu.cpp:192
#3  0x7fffde6f8407 in QMenu::setPlatformMenu
(this=this@entry=0x7fffc430e650,
platformMenu=) at widgets/qmenu.cpp:3482
#4  0x7fffde8e1e85 in QSystemTrayIconPrivate::addPlatformMenu
(this=0x7fffc4324f30, menu=0x7fffc430e650) at util/qsystemtrayicon.cpp:767
#5  0x7fffde8e1f13 in QSystemTrayIconPrivate::addPlatformMenu
(this=0x7fffc4324f30, menu=0x7fffc41e7e50) at util/qsystemtrayicon.cpp:760
#6  0x7fffde8e1f62 in QSystemTrayIconPrivate::updateMenu_sys_qpa
(this=0x7fffc4324f30) at util/qsystemtrayicon.cpp:716
#7  0x7fffde8ffa8f in QSystemTrayIconPrivate::updateMenu_sys
(this=) at util/qsystemtrayicon_x11.cpp:320
#8  0x7fffde8e14c6 in QSystemTrayIcon::setContextMenu (this=, menu=menu@entry=0x7fffc41e7e50) at util/qsystemtrayicon.cpp:177
#9  0x7fffdeb163f2 in VLCMenuBar::updateSystrayMenu (mi=0x7fffc40eb9a0,
p_intf=, b_force_visible=) at menus.cpp:1171
#10 0x7fffdeb204ee in MainInterface::createSystray
(this=this@entry=0x7fffc40eb9a0)
at main_interface.cpp:1206
#11 0x7fffdeb271a6 in MainInterface::initSystray (this=0x7fffc40eb9a0)
at main_interface.cpp:541
#12 MainInterface::MainInterface (this=0x7fffc40eb9a0, _p_intf=) at main_interface.cpp:185
#13 0x7fffdeb1070d in Thread (obj=0x558722a8) at qt4.cpp:532
#14 0x779a2424 in start_thread (arg=0x7fffdc15c700) at
pthread_create.c:333
#15 0x774e19bf in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:105
(gdb)

Bug#823556: Mattermost dependencies

[Pierre Rudloff]

Hello,

It seems we would need to package the following Go dependencies before 
we can package Mattermost:

github.com/ssor/bom
code.google.com/p/freetype-go/freetype
bitbucket.org/taruti/pbkdf2.go
code.google.com/p/goplan9/plan9/acme
github.com/decker502/dnspod-go
github.com/edeckers/auroradnsclient
github.com/ovh/go-ovh/ovh
github.com/pyr/egoscale/src/egoscale
github.com/rainycape/memcache
github.com/timewasted/linode/dns
google.golang.org/api/dns/v1
gopkg.in/ns1/ns1-go.v2/rest

Regards,

Bug#862187: unblock: autopkgtest/4.4

[Martin Pitt]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Hello release team,

Please consider autopkgtest 4.4 [1] for Jessie. It contains mostly bug fixes
and one small new feature which doesn't affect Debian. IMHO it's low risk as
(1) it's not a package that users usually have installed, it's a developer
CI/QA tool, and (2) it has quite an extensive testsuite (including an
autopkgtest that autopkgtests itself ☺).

I attach the complete debdiff and do some changelog risk annotation here.

| autopkgtest (4.4) unstable; urgency=medium
| 
|   [ Martin Pitt ]
|   * doc/README.package-tests.rst: Document network access (Closes: #851556)

Documentation only, no risk.

|   * qemu: Robustify ssh port locks.
| Stop assuming that /run/lock is user-writable (it is not in non-Debian
| systems). Instead create the lock file in /tmp and use 'x' to avoid
| /tmp file races.

Does affect Debian as it changes existing behaviour, but I've tested that quite
extensively. Note that we don't use the QEMU runner in production on ci.d.n.

|   * tests/autopkgtest: Fix crashes when running on non-apt system

No runtime impact, self-tests only.

|   * Fix candidate version detection for packages containing regexp operators
| '+' and '.' are valid characters in a Debian package name. Escape them
| in the call to apt-cache policy so that we get what we want to know.
| (Closes: #855954)

This is an important fix that I'd like to get into stretch to fix testing
packages with particular names when using apt pinning.

|   [ Iain Lane ]
|   * Fix build_source to work if "Package-List" is the last line in the apt
| output (Closes: #851899)

Corner case, but low risk fix and covered by several tests.

|   * autopkgtest-virt-lxd: Check uptime for reboot waiting. (LP: #1654025)

lxd is not in Debian, thus very little risk. This change has been in Ubuntu's
production CI for several months now.

|   * Add a debug-fail hook and implement it for autopkgtest-virt-ssh.
| At the minute, this is mainly so that the nova script can have its
| failure information (`nova console-log') propagated up to the output, so
| that in the case of kernel panics or other random failures we get useful
| output that the driver of autopkgtest (e.g. autopkgtest-cloud) can look
| at. (LP: #1630578)

Somewhat intrusive, but again this change has been in Ubuntu's production CI
for several months now. We don't (yet) use this Openstack cloud instance
testing mode in Debian's CI.

|   * autopkgtest-build-lxd: Allow overriding the target release by setting
| RELEASE=. This will cause the container to be dist-upgraded to the new
| release. Useful for the very early stages of a release when the LXD
| images on images.linuxcontainers.org don't exist yet.

lxd is not in Debian, thus practically no risk.

|   [ Barry Warsaw ]
|   * Pass Dpkg::Options::=--force-confnew to apt-get install.
| This avoids dpkg from prompting for conffile installation when you always
| want the new conffile in the testbed anyway. (Closes: #852475)

This is another important bug fix which screws up some tests completely.

Thanks,

Pitti

unblock autopkgtest/4.4

[1] https://tracker.debian.org/news/844681
diff --git a/debian/changelog b/debian/changelog
index 03bc2c0..7435939 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,39 @@
+autopkgtest (4.4) unstable; urgency=medium
+
+  [ Martin Pitt ]
+  * doc/README.package-tests.rst: Document network access (Closes: #851556)
+  * qemu: Robustify ssh port locks.
+Stop assuming that /run/lock is user-writable (it is not in non-Debian
+systems). Instead create the lock file in /tmp and use 'x' to avoid
+/tmp file races.
+  * tests/autopkgtest: Fix crashes when running on non-apt system
+  * Fix candidate version detection for packages containing regexp operators
+'+' and '.' are valid characters in a Debian package name. Escape them
+in the call to apt-cache policy so that we get what we want to know.
+(Closes: #855954)
+
+  [ Iain Lane ]
+  * Fix build_source to work if "Package-List" is the last line in the apt
+output (Closes: #851899)
+  * autopkgtest-virt-lxd: Check uptime for reboot waiting. (LP: #1654025)
+  * Add a debug-fail hook and implement it for autopkgtest-virt-ssh.
+At the minute, this is mainly so that the nova script can have its
+failure information (`nova console-log') propagated up to the output, so
+that in the case of kernel panics or other random failures we get useful
+output that the driver of autopkgtest (e.g. autopkgtest-cloud) can look
+at. (LP: #1630578)
+  * autopkgtest-build-lxd: Allow overriding the target release by setting
+RELEASE=. This will cause the container to be dist-upgraded to the new
+release. Useful for the very early stages of a release when the LXD
+images on images.linuxcontainers.org don't exist yet.
+
+  [ Barry Warsaw ]
+ 

Bug#861771: Fails to install: postinst script returned error exit status 1

[Ryan Kavanagh]

found 861771 0.12-1.1
thanks

On Mon, May 08, 2017 at 08:14:28PM +0100, Simon McVittie wrote:
> On Wed, 03 May 2017 at 16:13:25 -0400, Ryan Kavanagh wrote:
> > nodm fails to install/upgrade.
> 
> What version did you upgrade from, and how long had you had that version
> installed before upgrading?

If I correctly interpreted the following,
/var/log/dpkg.log.4.gz:2017-01-24 15:51:39 upgrade nodm:amd64 0.12-1.1 
0.13-1
I appear to be upgrading from 0.12-1.1, which was installed 2017-01-23.

> If you try to downgrade to 0.13-1 (in testing), do you still get this?

Yes.

> If you do, please mark this bug as found in 0.13-1 so the fix for #860463

You got to it before I did, thanks :-)

> I suspect this regressed in 0.12-1.1 with the addition of the native
> systemd unit.

That seems to be right. Purging and reinstalling produces the bug for
versions >= 0.12-1.1, but not with 0.12-1.

> I think this bug makes it unusable to users [...], so not all users.

Feel free to set the importance of the bug to non-RC then.

Best wishes,
Ryan

-- 
|_)|_/  Ryan Kavanagh  | GPG: 4E46 9519 ED67 7734 268F
| \| \  https://ryanak.ca/ |  BD95 8F7B F8FC 4A11 C97A


signature.asc
Description: PGP signature

Bug#862186: unblock: cryptsetup/2:1.7.3-4

[Guilhem Moulin]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Hi there,

cryptsetup/2:1.7.3-4 closes RC bug #861074.  Quoting myself from Message
#15,

initramfs-tools 0.130 landed into testing on May 1st, and as of
2:1.7.3-3 the cryptroot hook doesn't detect resume devices with the
new logic from initramfs-tools >=0.129:

  * setting RESUME under in an initramfs-tools configuration file
other than /etc/initramfs-tools/conf.d/resume isn't supported
  * setting RESUME=none yields a (harmless) warning
  * setting RESUME=auto (or leaving the variable undefined) might
result into an unresumable device: the initrd is then configured
to resume from the largest swap partition, which might not be
unlocked in time

2:1.7.3-4 also closes #861802 (license mismatch) as well as #847620
(drop obsolete update-rc.d parameters).  Debdiff attached.

Thanks for considering its inclusion in Stretch!
Cheers,
-- 
Guilhem.
diff -Nru cryptsetup-1.7.3/debian/changelog cryptsetup-1.7.3/debian/changelog
--- cryptsetup-1.7.3/debian/changelog   2016-12-09 01:18:17.0 +0100
+++ cryptsetup-1.7.3/debian/changelog   2017-05-09 13:50:59.0 +0200
@@ -1,3 +1,16 @@
+cryptsetup (2:1.7.3-4) unstable; urgency=high
+
+  [ Guilhem Moulin ]
+  * Drop obsolete update-rc.d parameters.  Thanks to Michael Biebl for the
+patch. (Closes: #847620)
+  * debian/copyright: Fix license mismatch (docs/examples/*
+lib/crypto_backend/* lib/loopaes/* lib/tcrypt/* lib/verity/* python/* are
+LGPL-2.1+ not GPL-2+). (Closes: #861802)
+  * debian/initramfs/cryptroot-hook: honor RESUME={none,auto} as documented in
+initramfs.conf(5) by initramfs-tools >=0.129. (Closes: #861074)
+
+ -- Jonas Meurer   Tue, 09 May 2017 13:50:59 +0200
+
 cryptsetup (2:1.7.3-3) unstable; urgency=medium
 
   [ Jonas Meurer ]
diff -Nru cryptsetup-1.7.3/debian/control cryptsetup-1.7.3/debian/control
--- cryptsetup-1.7.3/debian/control 2016-12-09 01:18:17.0 +0100
+++ cryptsetup-1.7.3/debian/control 2017-05-09 13:50:59.0 +0200
@@ -13,7 +13,7 @@
 Package: cryptsetup
 Architecture: linux-any
 Depends: ${shlibs:Depends}, ${misc:Depends}, dmsetup, cryptsetup-bin (>= 
2:1.6.0)
-Recommends: kbd, console-setup, initramfs-tools (>= 0.91) | 
linux-initramfs-tool, busybox | busybox-static
+Recommends: kbd, console-setup, initramfs-tools (>= 0.129) | 
linux-initramfs-tool, busybox | busybox-static
 Suggests: dosfstools, liblocale-gettext-perl, keyutils
 Provides: cryptsetup-luks
 Conflicts: cryptsetup-luks
diff -Nru cryptsetup-1.7.3/debian/copyright cryptsetup-1.7.3/debian/copyright
--- cryptsetup-1.7.3/debian/copyright   2016-12-09 01:18:17.0 +0100
+++ cryptsetup-1.7.3/debian/copyright   2017-05-09 13:50:59.0 +0200
@@ -40,6 +40,23 @@
 Copyright: © 2005 Canonical Ltd.
 License: GPL-2+
 
+Files: docs/examples/*
+Copyright: © 2011 Red Hat, Inc.
+License: LGPL-2.1+
+
+Files: lib/crypto_backend/* lib/loopaes/* lib/tcrypt/* lib/verity/* python/*
+Copyright: © 2009-2014 Red Hat, Inc.
+   © 2010-2015 Milan Broz 
+License: LGPL-2.1+
+
+Files: lib/crypto_backend/crc32.c
+Copyright: © 1986 Gary S. Brown
+License: public-domain
+ Gary S. Brown's licence is as follows:
+ .
+ You may use this program, or code or tables extracted from it, as
+ desired without restriction.
+
 License: GPL-2+
  This package is free software; you can redistribute it and/or modify
  it under the terms of the GNU General Public License as published by
@@ -57,3 +74,22 @@
  .
  On Debian systems, the complete text of the GNU General Public
  License v2 can be found in `/usr/share/common-licenses/GPL-2'.
+
+License: LGPL-2.1+
+ This package is free software; you can redistribute it and/or modify it
+ under the terms of the GNU Lesser General Public License as published
+ by the Free Software Foundation; either version 2.1 of the License, or
+ (at your option) any later version.
+ .
+ This package is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ Lesser General Public License for more details.
+ .
+ You should have received a copy of the GNU Lesser General Public
+ License along with this package; if not, write to the Free Software
+ Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ 02110-1301 USA.
+ .
+ On Debian systems, the complete text of the GNU Lesser General Public
+ License v2.1 can be found in `/usr/share/common-licenses/LGPL-2.1'.
diff -Nru cryptsetup-1.7.3/debian/initramfs/cryptroot-hook 
cryptsetup-1.7.3/debian/initramfs/cryptroot-hook
--- cryptsetup-1.7.3/debian/initramfs/cryptroot-hook2016-12-09 
01:18:17.0 +0100
+++ cryptsetup-1.7.3/debian/initramfs/cryptroot-hook2017-05-09 
13:50:59.0 +0200
@@ -93,12 +93,17 @@
esac

Bug#862039: r-bioc-gviz: accesses the internet during build

[Chris Lamb]

Andreas Tille wrote:

> the gviz package received a bug report about trying to access a remote
> location at package build time which is forbidden by Debian policy.
[…]
> Do you have any hints how this access could be prevented?

Just in case it helps, in other packages I've seen that exporting an
HTTP_PROXY environment variable to some deliberately broken or empty
value has prevented these calls…

… but YMMV, untested, etc. :)


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-

Bug#862185: snort: Logs truncated at startup

[Mattthew Gabeler-Lee]

Package: snort
Version: 2.9.7.0-5
Severity: important

The default (and recommended even by UPSTREAM) configuration for snort
logging has the "nostamp" flag on the logging configurations.

Which means that every time you start snort, it truncates your logfile.

This is a BRILLIANT configuration default and recommendation for security
software! /s

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages snort depends on:
ii  adduser  3.115
ii  debconf [debconf-2.0]1.5.60
ii  libc62.24-10
ii  libdaq2  2.0.4-3+b1
ii  libdumbnet1  1.12-7+b1
ii  liblzma5 5.2.2-1.2+b1
ii  libpcap0.8   1.8.1-3
ii  libpcre3 2:8.39-3
ii  logrotate3.11.0-0.1
ii  net-tools1.60+git20161116.90da8a0-1
ii  rsyslog [system-log-daemon]  8.24.0-1
ii  snort-common 2.9.7.0-5
ii  snort-common-libraries   2.9.7.0-5
ii  snort-rules-default  2.9.7.0-5
ii  zlib1g   1:1.2.8.dfsg-5

Versions of packages snort recommends:
ii  iproute2  4.9.0-1

Versions of packages snort suggests:
pn  snort-doc  

-- Configuration Files:
/etc/default/snort changed [not included]

-- debconf information excluded

Bug#860749: mesa-va-drivers: Critical error in library 'mesa' with i965 video driver

[Julien Cristau]

Control: severity -1 important
Control: tags -1 - lfs
Control: reassign -1 src:linux 4.9.18-1
Control: tags -1 upstream

On 05/09/2017 03:27 PM, Andreas Boll wrote:
> On Tue, May 09, 2017 at 03:00:34PM +0200, Andreas Boll wrote:
>> The following looks like an issue with the kernel graphics driver:
> 
> Looks like a known upstream kernel issue:
> https://bugs.freedesktop.org/show_bug.cgi?id=93782
> 
> Please try the workaround described in comment 40 [1] first, by adding
> 
> video=SVIDEO-1:d
> 
> to the kernel command line.
> 
> Thanks,
> Andreas
> 
> [1] https://bugs.freedesktop.org/show_bug.cgi?id=93782#c40
> 
>>
>>> [   21.472066] [drm:drm_atomic_helper_commit_cleanup_done [drm_kms_helper]] 
>>> *ERROR* [CRTC:26:pipe A] flip_done timed out
>>> [   21.576017] [ cut here ]
>>> [   21.576062] WARNING: CPU: 0 PID: 100 at 
>>> /build/linux-9r9Ph5/linux-4.9.18/drivers/gpu/drm/drm_irq.c:1254 
>>> drm_wait_one_vblank+0x197/0x1a0 [drm]
>>> [   21.576200] vblank wait timed out on crtc 0
>>> [   21.576201] Modules linked in: uvcvideo videobuf2_vmalloc arc4 
>>> videobuf2_memops iwl3945 videobuf2_v4l2 iwlegacy videobuf2_core 
>>> snd_hda_codec_si3054 mac80211 videodev media cfg80211 iTCO_wdt 
>>> iTCO_vendor_support joydev evdev r592 memstick snd_hda_codec_realtek 
>>> snd_hda_codec_generic rfkill snd_hda_intel pcspkr snd_hda_codec coretemp 
>>> serio_raw snd_hda_core snd_hwdep lpc_ich mfd_core snd_pcm snd_timer sg i915 
>>> shpchp drm_kms_helper ene_ir rc_core drm i2c_algo_bit battery ac snd 
>>> soundcore video wmi button acpi_cpufreq tpm_tis tpm_tis_core tpm parport_pc 
>>> ppdev lp parport ip_tables x_tables autofs4 ext4 crc16 jbd2 crc32c_generic 
>>> fscrypto ecb glue_helper lrw gf128mul ablk_helper cryptd aes_x86_64 mbcache 
>>> sr_mod cdrom sd_mod ata_generic psmouse i2c_i801 i2c_smbus ata_piix libata 
>>> scsi_mod tg3 firewire_ohci sdhci_pci
>>> [   21.576257]  sdhci mmc_core firewire_core crc_itu_t ptp pps_core libphy 
>>> ehci_pci uhci_hcd ehci_hcd usbcore usb_common
>>> [   21.576269] CPU: 0 PID: 100 Comm: kworker/u4:3 Not tainted 4.9.0-2-amd64 
>>> #1 Debian 4.9.18-1
>>> [   21.576270] Hardware name: - N/A 
>>>/IFT01 , BIOS 1.18 06/18/2008
>>> [   21.576276] Workqueue: events_unbound async_run_entry_fn
>>> [   21.576278]   b4928714 a5e440917a60 
>>> 
>>> [   21.576281]  b4676e9e 9898383c a5e440917ab8 
>>> 
>>> [   21.576283]  0101 98983a6edc08 9898383f8800 
>>> b4676f1f
>>> [   21.576286] Call Trace:
>>> [   21.576293]  [] ? dump_stack+0x5c/0x78
>>> [   21.576296]  [] ? __warn+0xbe/0xe0
>>> [   21.576298]  [] ? warn_slowpath_fmt+0x5f/0x80
>>> [   21.576301]  [] ? finish_wait+0x3c/0x70
>>> [   21.576315]  [] ? drm_wait_one_vblank+0x197/0x1a0 [drm]
>>> [   21.576317]  [] ? prepare_to_wait_event+0xf0/0xf0
>>> [   21.576389]  [] ? 
>>> intel_get_load_detect_pipe+0x624/0x640 [i915]
>>> [   21.576425]  [] ? intel_tv_detect+0x155/0x550 [i915]
>>> [   21.576440]  [] ? 
>>> drm_property_replace_global_blob+0xd8/0x120 [drm]
>>> [   21.576458]  [] ? 
>>> drm_helper_probe_single_connector_modes+0x3f6/0x4e0 [drm_kms_helper]
>>> [   21.576465]  [] ? 
>>> drm_fb_helper_initial_config+0xac/0x440 [drm_kms_helper]
>>> [   21.576500]  [] ? intel_fbdev_initial_config+0x14/0x30 
>>> [i915]
>>> [   21.576502]  [] ? async_run_entry_fn+0x34/0x140
>>> [   21.576504]  [] ? process_one_work+0x184/0x410
>>> [   21.576506]  [] ? worker_thread+0x4d/0x480
>>> [   21.576508]  [] ? process_one_work+0x410/0x410
>>> [   21.576510]  [] ? kthread+0xce/0xf0
>>> [   21.576512]  [] ? __switch_to+0x2c1/0x6c0
>>> [   21.576514]  [] ? kthread_park+0x60/0x60
>>> [   21.576517]  [] ? ret_from_fork+0x25/0x30
>>> [   21.576519] ---[ end trace 872a41b26fe6df4f ]---
> 

Bug#862039: r-bioc-gviz: accesses the internet during build

[Andreas Tille]

Hi,

the gviz package received a bug report about trying to access a remote
location at package build time which is forbidden by Debian policy.

I wonder if there is an easy way to prevent this.  Due to so called
Build-Depends it is granted that biocinstaller code is installed on
the building machine so there should be no reason to access
  http://bioconductor.org/BiocInstaller.dcf
at least for my possibly naive understanding.

Do you have any hints how this access could be prevented?

Kind regards

   Andreas.

On Tue, May 09, 2017 at 09:00:09AM -0500, Dirk Eddelbuettel wrote:
> 
> On 9 May 2017 at 14:57, Andreas Tille wrote:
> | Hi Chris,
> | 
> | On Sun, May 07, 2017 at 06:06:10PM +0100, Chris Lamb wrote:
> | > 
> | > Whilst r-bioc-gviz builds successfully on unstable/amd64, according to
> | > Debian Policy 4.9 packages may not attempt network access during
> | > a build.
> | > 
> | >00:00:00.00 IP 5f02d4499efa.36140 > dns.z9.domain: 4778+ A? 
> bioconductor.org. (34)
> | >00:00:00.51 IP 5f02d4499efa.36140 > dns.z9.domain: 45901+ ? 
> bioconductor.org. (34)
> | >00:00:01.725656 IP dns.z9.domain > 5f02d4499efa.36140: 45901 0/1/0 
> (121)
> | >00:00:03.219280 IP dns.z9.domain > 5f02d4499efa.36140: 4778 8/4/0 A 
> 52.222.253.6, A 52.222.253.158, A 52.222.253.218, A 52.222.253.224, A 
> 52.222.253.45, A 52.222.253.252, A 52.222.253.94, A 52.222.253.219 (298)
> | >00:00:03.306580 IP 5f02d4499efa.8 > 52.222.253.6.https: Flags [S], 
> seq 4243355363, win 29200, options [mss 1460,sackOK,TS val 493652159 ecr 
> 0,nop,wscale 7], length 0
> | >00:00:03.347988 IP 52.222.253.6.https > 5f02d4499efa.8: Flags 
> [S.], seq 1407308632, ack 4243355364, win 28960, options [mss 1412,sackOK,TS 
> val 1448496045 ecr 493652159,nop,wscale 8], length 0
> | >00:00:03.348046 IP 5f02d4499efa.8 > 52.222.253.6.https: Flags [.], 
> ack 1, win 229, options [nop,nop,TS val 493652169 ecr 1448496045], length 0
> | >00:00:03.450001 IP 5f02d4499efa.8 > 52.222.253.6.https: Flags 
> [P.], seq 1:518, ack 1, win 229, options [nop,nop,TS val 493652195 ecr 
> 1448496045], length 517
> | >00:00:03.491891 IP 52.222.253.6.https > 5f02d4499efa.8: Flags [.], 
> ack 518, win 118, options [nop,nop,TS val 1448496060 ecr 493652195], length 0
> | >00:00:03.495857 IP 52.222.253.6.https > 5f02d4499efa.8: Flags [.], 
> seq 1:1401, ack 518, win 118, options [nop,nop,TS val 1448496060 ecr 
> 493652195], length 1400
> | > 
> | >   [..]
> | > 
> | > The full build log (including tcpdump output) is attached.
> | 
> | I can confirm that the build log contains
> | 
> |   URL 'http://bioconductor.org/BiocInstaller.dcf': status was 'Couldn't 
> connect to server'
> | 
> | when using pbuilder or sbuild.  I guess the problem remained hidden
> | since so far nobody did a tcpdump while building the package and since
> | the build runs fine after checking that the resource is not available
> | nobody noticed so far.
> | 
> | I admit I'm a bit clueless how to fix the issue since the build process
> | of R packages is a bit "encapsulated" and I'm afraid about simply
> | seeking the said URL and patching it out.  I'm not sure about the
> | potential side effects for the resulting deb at package installation
> | time.
> | 
> | Thus I'm forwarding the bug to Debian Science list for further advise.
> 
> I am fairly certain that this must be coming from the BioConductor side of
> things.  R does call 'home' when you 'R CMD check --as-cran', but we of
> course do not do that during builds.  We just call 'R CMD INSTALL ...'
> 
> Dirk
> 
> -- 
> http://dirk.eddelbuettel.com | @eddelbuettel | e...@debian.org
> 

-- 
http://fam-tille.de

Bug#87619: popularity-contest should use alternate method if /usr is mounted readonly

[Manolo Díaz]

Package: popularity-contest
Version: 1.64
Followup-For: Bug #87619

Dear Maintainer,

I think there are other circumstances under which popcon provides
unreliable "Vote" values:
/usr is mounted relatime
A program that checks the system integrity, such as debsums

In that case, is it worth to have popularity-contest installed or
should I deinstall it?

Best regards,
-- 
Manolo Díaz

Bug#862184: nmon: new upstream version available (16g)

[Salvatore Bonaccorso]

Source: nmon
Version: 16f+debian-0.1
Severity: wishlist

Hi

There is a new upstream version available for nmon, can you consider
packaging it? (after the freeze + release for unstable, or
experimental already).

Regards,
Salvatore

Bug#862114: RFS: xe/0.6.1-1 [ITP] -- simple xargs and apply replacement

[Mezgani Ali]

Hello,

I think that we should not talk about a replacement as listed in the
subject but about an alternative.


Regards,

On Tue, May 9, 2017 at 4:05 PM, Andrey Rahmatullin  wrote:

> On Tue, May 09, 2017 at 09:52:17AM -0400, PICCORO McKAY Lenz wrote:
> > xe its not an emulator package name?
> There is no such package, no.
>
> --
> WBR, wRAR
>

Bug#862183: libjgroups-java: please make the build reproducible

[Chris Lamb]

Source: libjgroups-java
Version: 2.12.2.Final-4
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that libjgroups-java could not be built reproducibly due to it
outputing results by iterating over a non-deterministic data
structure.

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-
--- a/debian/patches/02_reproducible_build.patch1970-01-01 
01:00:00.0 +0100
--- b/debian/patches/02_reproducible_build.patch2017-05-09 
15:33:46.683278749 +0100
@@ -0,0 +1,39 @@
+Description: Make the build reproducible
+Author: Chris Lamb 
+Last-Update: 2017-05-09
+
+--- 
libjgroups-java-2.12.2.Final.orig/src/org/jgroups/util/XMLSchemaGenerator.java
 libjgroups-java-2.12.2.Final/src/org/jgroups/util/XMLSchemaGenerator.java
+@@ -7,8 +7,8 @@ import java.lang.reflect.Field;
+ import java.lang.reflect.Method;
+ import java.lang.reflect.Modifier;
+ import java.net.URL;
+-import java.util.HashSet;
+-import java.util.Set;
++import java.util.TreeSet;
++import java.util.SortedSet;
+ 
+ import javax.xml.parsers.DocumentBuilder;
+ import javax.xml.parsers.DocumentBuilderFactory;
+@@ -74,7 +74,7 @@ public class XMLSchemaGenerator {
+  allType.setAttribute("maxOccurs", "unbounded");
+  complexType.appendChild(allType);
+ 
+- Set classes = getClasses("org.jgroups.protocols", 
Protocol.class);
++ SortedSet classes = getClasses("org.jgroups.protocols", 
Protocol.class);
+  for (Class clazz : classes) {
+ classToXML(xmldoc, allType, clazz, "");
+  }
+@@ -99,10 +99,10 @@ public class XMLSchemaGenerator {
+   }
+}
+ 
+-   private static Set getClasses(String packageName, Class 
assignableFrom)
++   private static SortedSet getClasses(String packageName, Class 
assignableFrom)
+ throws IOException, ClassNotFoundException {
+   ClassLoader loader = Thread.currentThread().getContextClassLoader();
+-  Set classes = new HashSet();
++  SortedSet classes = new TreeSet();
+   String path = packageName.replace('.', '/');
+   URL resource = loader.getResource(path);
+   if (resource != null) {
--- a/debian/patches/series 2017-05-09 14:57:00.438646581 +0100
--- b/debian/patches/series 2017-05-09 15:17:54.003369976 +0100
@@ -1 +1,2 @@
 01_disable_diagnostics.patch
+02_reproducible_build.patch

Bug#862181: krank: Please do not depends on transitional dummy pkg ttf-dejavu

[Boyuan Yang]

Package: krank
Version: 0.7+dfsg2-3
Severity: minor
User: 073p...@gmail.com
Usertags: fonts-transitional-dummy-pkg-migration

Dear maintainer,

Your package krank depends on the following transitional dummy package(s):

* ttf-dejavu, which should be fonts-dejavu now

Please update your dependency list and use real packages in the next
upload.

Thanks!

--
Boyuan Yang

signature.asc
Description: This is a digitally signed message part.

Bug#862182: python-distutils-extra: Generated debian/rules file cannot be used with latest make

[Vsevolod Velichko]

Package: python-distutils-extra
Version: 2.40
Severity: important

Dear Maintainer,

debian/rules file generated by python-mkdebian is broken. Current version of 
GNU Make at least in Ubuntu Zesty complains about it:

   debian/rules:4: *** missing separator (did you mean TAB instead of 8 
spaces?).

So the package generated with python-mkdebian cannot be built.
Please consider the patch below:


diff --git a/debian/local/python-mkdebian b/debian/local/python-mkdebian
index 83226b9..1dd6312 100755
--- a/debian/local/python-mkdebian
+++ b/debian/local/python-mkdebian
@@ -74,9 +74,9 @@ override_dh_python2:
 f.write('''#!/usr/bin/make -f
 %%:
 ifneq ($(shell dh -l | grep -xF translations),)
-dh $@ --with python2,translations
+\tdh $@ --with python2,translations
 else
-dh $@ --with python2
+\tdh $@ --with python2
 endif
 
 %s



-- System Information:
Debian Release: stretch/sid
  APT prefers zesty-updates
  APT policy: (500, 'zesty-updates'), (500, 'zesty-security'), (500, 
'zesty-proposed'), (500, 'zesty')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.10.0-21-generic (SMP w/4 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages python-distutils-extra depends on:
ii  intltool0.51.0-3
pn  python:any  

python-distutils-extra recommends no packages.

Versions of packages python-distutils-extra suggests:
ii  devscripts  2.16.8ubuntu2

-- no debconf information