Bug#1071203: nicotine: GTK not found, fails to start.
Hi Oliver, thanks for this bug report! I can't reproduce the crash with my sid box, but the upstream dev already pointed that specific GTK4 dependencies are missing [1]. I'll update shortly the new version (3.3.4) with the GTK4 dependencies. Feel free to reopen this bug report if this upload does not fix the crash on your side. Best, François [1] https://github.com/nicotine-plus/nicotine-plus/issues/1448#issuecomment-2122701370 signature.asc Description: This is a digitally signed message part
Bug#1070869: libpam-modules: pam_lastlog.so does not exist
I've tried again to login root on a virtual console. Every login produce the logs in auth.log. Thanks for your help -- Francois
Bug#1070869: libpam-modules: pam_lastlog.so does not exist
Package: libpam-modules Version: 1.5.3-7 Severity: normal Dear Maintainer, I observe in the logs : May 10 08:49:16 xx login[1633]: PAM adding faulty module: pam_lastlog.so May 10 08:49:16 xx login[1633]: PAM unable to dlopen(pam_lastlog.so): /usr/lib/security/pam_lastlog.so: cannot open shared object file: No such file or +directory May 10 08:49:23 xx login[1633]: pam_unix(login:session): session opened for user root(uid=0) by root(uid=0) May 10 08:49:23 xx login[601537]: ROOT LOGIN on '/dev/tty1' I found that pam_lastlog.so does not exist in libpam-modules 1.5.3-7 but it exists in 1.5.2-9.1+b1. I don't know exactly what action produce the logs because I've tried to log in a virtual console as root but no logs are produce again. Kind regards Francois -- System Information: Debian Release: trixie/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 6.7.12-amd64 (SMP w/8 CPU threads; PREEMPT) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages libpam-modules depends on: ii debconf [debconf-2.0] 1.5.86 ii libaudit1 1:3.1.2-2 ii libc6 2.38-7 ii libcrypt1 1:4.4.36-4 ii libdb5.3t645.3.28+dfsg2-7 ii libpam-modules-bin 1.5.3-7 ii libpam0g 1.5.3-7 ii libselinux13.5-2+b2 ii libsystemd0255.5-1 libpam-modules recommends no packages. libpam-modules suggests no packages. -- debconf information: libpam-modules/disable-screensaver: libpam-modules/profiles-disabled: libpam-modules/deprecate-tally:
Bug#1070058: python3-gitlab: Changelog file is empty
Package: python3-gitlab Version: 1:4.3.0-1 Severity: normal Dear Maintainer, The /usr/share/doc/python3-gitlab/changelog.gz is (almost) empty: $ zcat /usr/share/doc/python3-gitlab/changelog.gz ```{include} ../CHANGELOG.md ``` That's obviously not the expected content. This issue is present from (at least) 3.12.0-1 to 4.3.0-1 -- System Information: Debian Release: 12.5 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.1.0-18-amd64 (SMP w/8 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=fr:en_US Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages python3-gitlab depends on: ii python33.11.2-1+b1 ii python3-requests 2.28.1+dfsg-1 ii python3-requests-toolbelt 0.10.1-1 python3-gitlab recommends no packages. Versions of packages python3-gitlab suggests: pn python-gitlab-doc -- no debconf information
Bug#949969: transmission-gtk uses 100% of a CPU core
On Fri, 26 Apr 2024, Alexandre Rossi wrote: [...] > Do you see other unsual CPU usage than can be linked with very low > transfer rates? If not, I guess we can close this. Getting low transfer rates is not easy. I downloaded the Ubuntu 24.04 ISO and got ~50MB/s transfer rates and the CPU usage changed between 50 and 98%. So CPU usage seems to be lower with lower transfer rates. Once transfers slow down transmission does not take much CPU. CPU usage seems to bottom out at about 5% for slow uploads (2-4 MB/s). So I guess this can be closed. -- Francois Gouget http://fgouget.free.fr/ A particle is an irreducible representation of the Poincaré Group - Eugene Wigner
Bug#949969: transmission-gtk uses 100% of a CPU core
On Thu, 25 Apr 2024, Alexandre Rossi wrote: > Hi, > > The example torrent is not available anymore. > > Downloading a torrent with transmission 4 from unstable does not use 100% > CPU core. > > Can you reproduce? I have upgraded to 4.0.2-1 since then and I am now using the QT client. But using the updated torrent (see http://osm.cquest.org/torrents) top still reports Transmission using a full core: $ top -n1 | grep trans 10472 fgouget 20 0 3520476 328540 62496 S 118.8 1.0 330:01.80 transmi+ So 118% CPU. But in ps the CPU usage is stuck at 3.7%: $ ps aux | grep trans fgouget10472 3.7 1.0 3520476 329364 ? Sl Apr19 329:41 /usr/bin/transmission-qt -session 10cae0c76f00017076185990334600170_1710862333_885767 This is while downloading the current osm.pdf.torrent file at a reported 150 MB/s average speed (1200 Mbps). While this is a 1 Gbps Internet connection and it is indeed maxed out, that still at most 125 MB/s. So I think the data must be compressed and transmission is reporting the uncompressed data transfer rate. Also now that the transfer is complete transmission is back to 0% CPU usage. So maybe transmission was just kept busy by the fast transfer rate? (i7-4790K, verifying and uncompressing the data) > Special parameters? Nothing that I know of. I'm not limiting the download speed obviously. Here are some possibly relevant settings from ~/.config/transmission/settings.json: "alt-speed-enabled": false, "cache-size-mb": 4, "dht-enabled": true, "encryption": 1, "lazy-bitfield-enabled": true, "lpd-enabled": false, "peer-congestion-algorithm": "", "peer-limit-global": 240, "peer-limit-per-torrent": 60, "peer-socket-tos": "", "pex-enabled": true, "port-forwarding-enabled": true, "proxy-auth-enabled": false, "proxy-enabled": false, "queue-stalled-enabled": true, "queue-stalled-minutes": 30, "speed-limit-down-enabled": false, "speed-limit-up-enabled": false, "utp-enabled": true, -- Francois Gouget http://fgouget.free.fr/ A particle is an irreducible representation of the Poincaré Group - Eugene Wigner
Bug#1068924: libembree-dev: Please build with ISPC enabled
Package: libembree-dev Severity: wishlist Tags: patch X-Debbugs-Cc: franc...@mzf.fr Dear Maintainer, I'm working on packaging Intel OSPRay [1], and it needs ispc support of embree. Attached a patch that enable ispc for libembree-dev. Could you please enable ISPC support in Embree? I can NMU if you have no time for this. Best, François [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1039111 -- System Information: Debian Release: 12.4 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.1.0-17-amd64 (SMP w/16 CPU threads; PREEMPT) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages libembree-dev depends on: ii libembree3-3 3.13.5+dfsg-2 pn libtbb-dev libembree-dev recommends no packages. Versions of packages libembree-dev suggests: pn embree-tools diff --git a/debian/control b/debian/control index 924a8df..8ab7271 100644 --- a/debian/control +++ b/debian/control @@ -9,6 +9,7 @@ Build-Depends: cmake, debhelper-compat (= 13), freeglut3-dev, + ispc, libglfw3-dev, libjpeg-dev, libopenimageio-dev, diff --git a/debian/rules b/debian/rules index 5d933e2..8ccb71a 100755 --- a/debian/rules +++ b/debian/rules @@ -25,7 +25,7 @@ override_dh_auto_configure: dh_auto_configure -- \ -DCMAKE_SKIP_RPATH=ON \ -DEMBREE_BACKFACE_CULLING=OFF \ - -DEMBREE_ISPC_SUPPORT=OFF \ + -DEMBREE_ISPC_SUPPORT=ON \ -DEMBREE_RAY_MASK=ON \ -DEMBREE_ARM=$(EMBREE_ARM) \ -DEMBREE_IGNORE_CMAKE_CXX_FLAGS=OFF \
Bug#1065696: Fwd: E: unsupported command: poweroff.no-molly-guard
On 2024-03-08 at 22:26:25, Helmut Grohne (hel...@subdivi.de) wrote: > Yes, I think this is a duplicate of #1059691. Could you give feedback on > the contained patch? Indeed, it does look like the same thing. I'm sorry I missed the original bug and never saw your patch. It looks good to me. I agree it feels like adding another layer of duct tape, but hopefully we can clean that up later once we no longer have to support usr-not-merged. I'm going to go ahead and upload to unstable. Many thanks for the patch. Francois -- https://fmarier.org/
Bug#1065696: Fwd: E: unsupported command: poweroff.no-molly-guard
Hi Helmut, This looks like an unexpected edge case from the recent usr-merge changes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1065696 It sounds like a system using sysvinit, instead of systemd, which was recently upgraded using usrmerge. Francois -- https://fmarier.org/
Bug#1065478: ITP: libnpupnp -- UPnP library, based on Pupnp code, extensively rewritten
Package: wnpp Severity: wishlist Owner: Jean-Francois Dockes X-Debbugs-Cc: debian-de...@lists.debian.org, j...@dockes.org * Package name: libnpupnp Version : 6.1.1 Upstream Contact: Jean-Francois Dockes * URL : https://www.lesbonscomptes.com/upmpdcli * License : BSD Programming Lang: C++ Description : UPnP library, based on Pupnp code, extensively rewritten libnpupnp is a rewrite of the venerable libupnp, with the objective of replacing questionable internal code (XML parser, HTTP server and client) with well maintained external packages (libmicrohttpd, libcurl, expat), also using the C++ STL in place of various locally grown containers, with a goal to improve safety and reliability (reasonably modern C++, no bare pointers etc.). As its predecessor, libupnp, libnpupnp provides developers with an API and open source code for building control points, devices, and bridges that are compliant with Version 1.1 of the Universal Plug and Play Device Architecture Specification - see http://www.upnp.org/ for specifications. libnpupnp is mostly proposed for packaging as a dependency to upmpdcli (separate message), but it can be used by other applications. For example mpd and gerbera can be configured to use it in place of libupnp. Documentation: https://www.lesbonscomptes.com/upmpdcli/npupnp-doc/refdoc/html/index.html Source and existing debian directory: https://framagit.org/medoc92/npupnp Existing packages: https://www.lesbonscomptes.com/upmpdcli/pages/downloads.html#debian Looking for a sponsor.
Bug#1065475: ITP: libupnpp -- Application-oriented C++ layer over the libnpupnp base UPnP library
Package: wnpp Severity: wishlist Owner: Jean-Francois Dockes X-Debbugs-Cc: debian-de...@lists.debian.org, j...@dockes.org * Package name: libupnpp Version : 0.26.3 Upstream Contact: Jean-Francois Dockes * URL : https://www.lesbonscomptes.com/upmpdcli * License : LGPL Programming Lang: C++ Description : Application-oriented C++ layer over the libnpupnp base UPnP library libupnpp wraps libnpupnp calls and data inside easier to use C++ constructs. It can be used to build either devices or control points. It is proposed for packaging as a dependency to upmpdcli (packaging requested in a separate message) Source and current debian directory: https://framagit.org/medoc92/libupnpp Existing packages: https://www.lesbonscomptes.com/upmpdcli/pages/downloads.html#debian Looking for a sponsor.
Bug#1065473: ITP: upmpdcli -- UPnP Media Renderer front-end to MPD, the Music Player Daemon
Package: wnpp Severity: wishlist Owner: Jean-Francois Dockes X-Debbugs-Cc: debian-de...@lists.debian.org, j...@dockes.org * Package name: upmpdcli Version : 1.8.9 Upstream Contact: Jean-Francois Dockes * URL : https://www.lesbonscomptes.com/upmpdcli * License : GPL Programming Lang: C++, Python Description : UPnP Media Renderer front-end to MPD, the Music Player Daemon upmpdcli primarily acts as an UPnP Media Renderer to be controlled with any UPnP controller like, e.g. BubbleUPnP or Kazoo on an Android tablet, or any other UPnP or OpenHome Control Point. It uses an MPD instance to actually play the tracks. A typical configuration might have for example, MPD running on a Raspberry PI, with upmpdcli on the same host or any other Linux PC on the network. The program also has a Media Server function, which can be configured by various plugins to act as a Proxy for external services (streaming or radios) or to serve local audio files. Compared to other UPnP renderers upmpdcli brings the combined renderer/server possibility, and support for OpenHome (local management of the playlist, allowing the control point to go to sleep). upmpdcli already has a Debian package, which I am willing to improve for inclusion in the official repositories, I am in need of a sponsor. The source and debian directory can be found here: https://framagit.org/medoc92/upmpdcli The existing Debian packages are pointed to from there: https://www.lesbonscomptes.com/upmpdcli/pages/downloads.html#debian upmpdcli is already part of audio-oriented, Debian-derived distributions (Moode Audio, Volumio), and is quite widely used to build audio streamers based on small computers. It is also embedded in some hardware streamers. Having it distributed from the default Debian repositories would make things much more convenient for potential users. upmpdcli depends on two additional libraries (libupnpp and libnpupnp), also already packaged, which I will propose for inclusion in separate messages.
Bug#1033306: The tor package in stable will soon become unusable
I received the email below from the Tor team. The package that's currently in stable should be updated ASAP since it's going to stop working very soon. I will be switching temporarily to the package in backports, but IMO an update should be pushed to bookworm either via the security repo, or failing that as a stable update. Francois -- Hi, You are running a bunch of Tor relays, which is great. However, that relays' Tor version is obsolete, and because of old bugs, we will soon cut relays and bridges running that version out of the network. Please consider upgrading ASAP! You can find Tor packages and instructions for your distro / OS here: https://community.torproject.org/relay/setup/guard/ If you need help upgrading your relay, please use the Tor Forum: https://forum.torproject.org/c/support/relay-operator/17 ::Stay Connected with the Tor Community:: - Join our Monthly Tor relay operators meetups: https://forum.torproject.org/t/tor-relays-next-tor-relay-operator-meetup-march-2nd-2024-19-00-utc/11568 - Subscribe to the Tor relays mailing list: https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays Thanks, Gus -- The Tor Project Community Team Lead
Bug#1064636: libpcsclite-dev: The i386 libpcsclite-dev 2.0.1-1+b1 package conflicts with the amd64 one
On Sun, 25 Feb 2024, Ludovic Rousseau wrote: [...] > Fixed upstream in > https://github.com/LudovicRousseau/PCSC/commit/e3bfa449df5283cd7389d505399cc57d2065e637 That's great. Thanks. -- Francois Gouget http://fgouget.free.fr/ You don't liberate a people. A people liberates itself. Youssoupha
Bug#1064636: libpcsclite-dev: The i386 libpcsclite-dev 2.0.1-1+b1 package conflicts with the amd64 one
Package: libpcsclite-dev Version: 2.0.1-1+b1 Severity: normal Dear Maintainer, The 2.0.1-1+b1 version of the libpcsclite-dev broke multiarch support because the i386 /usr/share/man/man1/pcsc-spy.1.gz file differs from the amd64 one: $ zdiff -u amd64/share/man/man1/pcsc-spy.1.gz i386/share/man/man1/pcsc-spy.1.gz --- /dev/fd/5 2024-02-25 11:56:37.995245350 +0100 +++ - 2024-02-25 11:56:38.000871866 +0100 @@ -55,7 +55,7 @@ .\" .\" .IX Title "PCSC-SPY 1" -.TH PCSC-SPY 1 2024-02-23 "pcsc-lite 2.0.1" "PC/SC lite" +.TH PCSC-SPY 1 2024-02-22 "pcsc-lite 2.0.1" "PC/SC lite" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Maybe the build was done around midnight causing this date change. Clearly it would be best to either not include the date in the man page, or to use a source for the date that ensures it will be the same for all builds of a given version (maybe take it from the latest changelog entry?). In the meantime this makes it impossible to install both the 32-bit and 64-bit libpcsclite-dev which hampers development of the Wayland support in Wine. Regards,
Bug#966218: Warning about the work-around listed here
A warning to anybody considering to use the suggested work-around. Based on the information suggested in this bug, I put the following in `/etc/modprobe.d/local.conf` on my laptop: options iwlwifi enable_ini=0 in order to suppress the "failed to load iwl-debug-yoyo.bin (-2)" log message. Versions 66 and above of the iwlwifi-ty-a0-gf-a0 firmware would refuse to load with these error messages: [ 18.222536] iwlwifi :aa:00.0: api flags index 2 larger than supported by driver [ 18.222549] iwlwifi :aa:00.0: TLV_FW_FSEQ_VERSION: FSEQ Version: 0.0.2.36 [ 18.222921] iwlwifi :aa:00.0: loaded firmware version 72.a764baac.0 ty-a0-gf-a0-72.ucode op_mode iwlmvm [ 18.375105] iwlwifi :aa:00.0: Detected Intel(R) Wi-Fi 6 AX210 160MHz, REV=0x420 ... [ 19.395451] iwlwifi :aa:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms). [ 19.395569] iwlwifi :aa:00.0: Loaded firmware version: 72.a764baac.0 ty-a0-gf-a0-72.ucode [ 19.395570] iwlwifi :aa:00.0: 0x | ADVANCED_SYSASSERT [ 19.395572] iwlwifi :aa:00.0: 0x | trm_hw_status0 [ 19.395573] iwlwifi :aa:00.0: 0x | trm_hw_status1 [ 19.395573] iwlwifi :aa:00.0: 0x | branchlink2 [ 19.395574] iwlwifi :aa:00.0: 0x | interruptlink1 [ 19.395575] iwlwifi :aa:00.0: 0x | interruptlink2 ... [ 19.395846] iwlwifi :aa:00.0: Failed to start RT ucode: -110 [ 19.395848] iwlwifi :aa:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms). [ 20.873263] iwlwifi :aa:00.0: Failed to run INIT ucode: -110 [ 20.886268] iwlwifi :aa:00.0: retry init count 0 [ 20.907324] iwlwifi :aa:00.0: Detected Intel(R) Wi-Fi 6 AX210 160MHz, REV=0x420 ... [ 21.951601] iwlwifi :aa:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms). [ 21.951753] iwlwifi :aa:00.0: Loaded firmware version: 72.a764baac.0 ty-a0-gf-a0-72.ucode [ 21.951754] iwlwifi :aa:00.0: 0x | ADVANCED_SYSASSERT [ 21.951756] iwlwifi :aa:00.0: 0x | trm_hw_status0 [ 21.951757] iwlwifi :aa:00.0: 0x | trm_hw_status1 [ 21.951758] iwlwifi :aa:00.0: 0x | branchlink2 [ 21.951759] iwlwifi :aa:00.0: 0x | interruptlink1 [ 21.951760] iwlwifi :aa:00.0: 0x | interruptlink2 ... [ 21.952064] iwlwifi :aa:00.0: Failed to start RT ucode: -110 [ 21.952066] iwlwifi :aa:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms). [ 23.529800] iwlwifi :aa:00.0: Failed to run INIT ucode: -110 [ 23.542843] iwlwifi :aa:00.0: retry init count 1 [ 23.555687] iwlwifi :aa:00.0: Detected Intel(R) Wi-Fi 6 AX210 160MHz, REV=0x420 ... [ 24.575479] iwlwifi :aa:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms). [ 24.575586] iwlwifi :aa:00.0: Loaded firmware version: 72.a764baac.0 ty-a0-gf-a0-72.ucode [ 24.575588] iwlwifi :aa:00.0: 0x | ADVANCED_SYSASSERT [ 24.575589] iwlwifi :aa:00.0: 0x | trm_hw_status0 [ 24.575590] iwlwifi :aa:00.0: 0x | trm_hw_status1 [ 24.575590] iwlwifi :aa:00.0: 0x | branchlink2 [ 24.575591] iwlwifi :aa:00.0: 0x | interruptlink1 [ 24.575592] iwlwifi :aa:00.0: 0x | interruptlink2 ... [ 24.575879] iwlwifi :aa:00.0: Failed to start RT ucode: -110 [ 24.575880] iwlwifi :aa:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms). [ 26.049956] iwlwifi :aa:00.0: Failed to run INIT ucode: -110 [ 26.063392] iwlwifi :aa:00.0: retry init count 2 Versions 63 and below of the firmware would load just fine with "enable_ini=0" which suggests to me that this version of the firmware would simply ignore it. Much worse, versions 74 or newer of the firmware would lock up and require a full power off (unplugged from power) to successfully load a firmware again (even 63 or below). Hopefully this comment will save someone some troubleshooting time. My solution is simple: ignore the "failed to load iwl-debug-yoyo.bin (-2)" for now. Francois -- https://fmarier.org/
Bug#1062046: [hel...@subdivi.de: Bug#1062046: libfko3t64 has an undeclared file conflict]
Looks like there's a missing conflict in the package that was just uploaded to experimentatl. - Message transféré de Helmut Grohne - Package: libfko3t64 Version: 2.6.10-20.1~exp1 Severity: serious User: debian...@lists.debian.org Usertags: fileconflict Control: affects -1 + libfko3 X-Debbugs-Cc: Lukas Märdian , vor...@debian.org libfko3t64 has an undeclared file conflict. This may result in an unpack error from dpkg. The files * /usr/lib/x86_64-linux-gnu/libfko.so.3 * /usr/lib/x86_64-linux-gnu/libfko.so.3.0.0 are contained in the packages * libfko3 * 2.6.10-12 as present in bullseye * 2.6.10-16 as present in bookworm * 2.6.10-20+b2 as present in trixie|unstable * libfko3t64/2.6.10-20.1~exp1 as present in experimental These packages can be unpacked concurrently, because there is no relevant Replaces or Conflicts relation. Attempting to unpack these packages concurrently results in an unpack error from dpkg, because none of the packages installs a diversion for the affected files. Kind regards The Debian Usr Merge Analysis Tool This bug report has been automatically filed with no human intervention. The source code is available at https://salsa.debian.org/helmutg/dumat. If the filing is unclear or in error, don't hesitate to contact hel...@subdivi.de for assistance. - Fin du message transféré -
Bug#1061958: fwknop: NMU diff for 64-bit time_t transition
On 2024-01-30 at 05:48:11, Lukas Märdian (sl...@debian.org) wrote: > If you have any concerns about this patch, please reach out ASAP. Although > this package will be uploaded to experimental immediately, there will be a > period of several days before we begin uploads to unstable; so if information > becomes available that your package should not be included in the transition, > there is time for us to amend the planned uploads. No objections from me. If you'd like to create a merge request on https://salsa.debian.org/debian/fwknop, then I can merge and then you can upload to unstable at your convenience. Francois signature.asc Description: PGP signature
Bug#1061592: cryptsetup: Password prompt during boot echoes characters to the screen in plaintext
Package: cryptsetup Version: 2:2.6.1-6+b1 Severity: normal On my machine, if I ESC out of the plymouth password prompt (which does hide the characters I type), I get the a text-mode prompt ("Please unlock disk nvme0n1p4_crypt") which echoes to the screen the characters I type. Then it repeats the prompt with asterisks. So it looks like this: Please unlock disk nvme0n1p4_crypt: SooperSekretPassword1!@ Please unlock disk nvme0n1p4_crypt: *** which isn't great because anybody looking over my shoulder can see it, or anybody who Ctrl+F1 into the console later on and then scrolls back up. Francois -- Package-specific info: -- /proc/cmdline BOOT_IMAGE=/vmlinuz-6.6.13-amd64 root=UUID=4d44aae6-2235-47f2-9de5-595ed5cd4a4c ro rootflags=subvol=@rootfs mem_sleep_default=deep module_blacklist=hid_sensor_hub memtest=1 quiet splash -- /etc/crypttab nvme0n1p3_crypt /dev/nvme0n1p3 /dev/urandom cipher=aes-xts-plain64,size=256,swap,discard nvme0n1p4_crypt UUID=29be86f7-f2fe-412f-afd8-5740f70f5a2e none luks,discard -- /etc/fstab # /etc/fstab: static file system information. # # Use 'blkid' to print the universally unique identifier for a # device; this may be used with UUID= as a more robust way to name devices # that works even if disks are added and removed. See fstab(5). # # systemd generates mount units based on this file, see systemd.mount(5). # Please run 'systemctl daemon-reload' after making changes here. # # /dev/mapper/nvme0n1p4_crypt / btrfs noatime,nodiratime,subvol=@rootfs 0 0 # /boot was on /dev/nvme0n1p2 during installation UUID=7543aee2-af70-44da-bae2-4f059801f08d /boot ext4 ro,noatime,nodiratime,nodev,nosuid,noexec 0 2 # /boot/efi was on /dev/nvme0n1p1 during installation UUID=0B84-3C60 /boot/efi vfatro,nodev,nosuid,noexec,umask=0077 0 1 /dev/mapper/nvme0n1p3_crypt noneswapsw 0 0 # Harden pid directories from normal users proc/proc prochidepid=2 0 0 # Safe tmp directory tmpfs /tmptmpfs size=8G,noexec,nosuid,nodev 0 0 # Removable storage /dev/sr0/media/cdromudf,iso9660 user,noauto,nodev,nosuid 0 0 /dev/sdb1 /media/usbdisk autouser,noauto,nodev,nosuid,noexec 0 0 -- lsmod Module Size Used by snd_seq_dummy 12288 0 snd_hrtimer12288 1 snd_seq 114688 7 snd_seq_dummy snd_seq_device 16384 1 snd_seq nfnetlink_queue32768 1 xt_comment 12288 0 xt_NFQUEUE 12288 1 xt_MASQUERADE 16384 2 xt_mark12288 0 nft_chain_nat 12288 2 nf_nat 65536 2 nft_chain_nat,xt_MASQUERADE tun69632 2 ip6t_frag 16384 1 ip6t_REJECT12288 2 nf_reject_ipv6 20480 1 ip6t_REJECT xt_LOG 16384 2 nf_log_syslog 24576 2 ipt_REJECT 12288 1 nf_reject_ipv4 16384 1 ipt_REJECT xt_tcpudp 16384 0 xt_conntrack 12288 4 nf_conntrack 212992 3 xt_conntrack,nf_nat,xt_MASQUERADE nf_defrag_ipv6 24576 1 nf_conntrack nf_defrag_ipv4 12288 1 nf_conntrack nft_compat 20480 13 nf_tables 372736 479 nft_compat,nft_chain_nat qrtr 57344 4 chaoskey 20480 0 sg 45056 0 uvcvideo 147456 0 videobuf2_vmalloc 20480 1 uvcvideo uvc12288 1 uvcvideo videobuf2_memops 16384 1 videobuf2_vmalloc videobuf2_v4l2 36864 1 uvcvideo videodev 368640 2 videobuf2_v4l2,uvcvideo videobuf2_common 77824 4 videobuf2_vmalloc,videobuf2_v4l2,uvcvideo,videobuf2_memops mc 94208 4 videodev,videobuf2_v4l2,uvcvideo,videobuf2_common binfmt_misc28672 1 nls_ascii 12288 1 nls_cp437 16384 1 vfat 20480 1 fat 102400 1 vfat snd_sof_pci_intel_tgl12288 0 iwlmvm589824 0 snd_sof_intel_hda_common 217088 1 snd_sof_pci_intel_tgl soundwire_intel73728 1 snd_sof_intel_hda_common soundwire_generic_allocation12288 1 soundwire_intel snd_sof_intel_hda_mlink40960 2 soundwire_intel,snd_sof_intel_hda_common soundwire_cadence 45056 1 soundwire_intel mac80211 1392640 1 iwlmvm snd_sof_intel_hda 24576 1 snd_sof_intel_hda_common snd_sof_pci24576 2 snd_sof_intel_hda_common,snd_sof_pci_intel_tgl snd_sof_xtensa_dsp 16384 1 snd_sof_intel_hda_common snd_sof 360448 3 snd_sof_pci,snd_sof_intel_hda_common,snd_sof_intel_hda ext4 1134592 1 snd_sof_utils 16384 1 snd_sof snd_soc_hdac_hda 28672 1 snd_sof_intel_
Bug#1059953: libceres3: ceres-solver built without CUDA support
Hi Kip, > Perhaps another option is having a libceres-cuda-dev / libceres3-cuda > packages that are built with CUDA? Makes sense! However, it requires a brand new source package ceres-solver-cuda to generate these CUDA specific binary packages which will be in the "contrib" area. This would be similar to pytorch [1] and the pytorch-cuda dedicated package [2]. If this matter to you and you want to push it forward, feel free to open an RFP or ITP bug [3]. You may also contact the Debian AI Team because they have some experience with such CPU/GPU package variants. Best, François [1] https://tracker.debian.org/pkg/pytorch [2] https://tracker.debian.org/pkg/pytorch-cuda [3] https://wiki.debian.org/RFP signature.asc Description: This is a digitally signed message part
Bug#1059953: libceres3: ceres-solver built without CUDA support
Hi Kip, > I think the solution is to simply explicitly add nvidia-cuda-dev to the Build- > Depends stanza of of the ceres-solver source package in debian/control. The nvidia-cuda-dev package is part of the non-free area in the Debian archive [1] because if does not comply with the DFSG [2]. If we set it as a build dependency of ceres-solver (and also the nvidia runtime as a package dependency), it would move ceres-solver from the "main" area to the "contrib" area of the Debian archive [3] which is likely unwanted. For GPU acceleration in Debian, you may ask Ceres developers to support free alternatives like ROCm/HIP, OpenCL or SYCL. Otherwise, you would have to build the ceres-solver package yourself using the CMake CUDA flag. Best, François [1] https://tracker.debian.org/pkg/nvidia-cuda-toolkit [2] https://wiki.debian.org/DebianFreeSoftwareGuidelines [3] https://www.debian.org/doc/debian-policy/ch-archive.html#archive-areas signature.asc Description: This is a digitally signed message part
Bug#1059781: xwayland: Xwayland.desktop is broken: it contains Type=Application, but no Exec key/value pair.
Package: xwayland Version: 2:23.2.3-1 Severity: normal Whenever I start dmenu, I get the following message in my logs: File /usr/share/applications/org.freedesktop.Xwayland.desktop is broken: it contains Type=Application, but no Exec key/value pair. at /usr/bin/i3-dmenu-desktop line 256. Francois -- System Information: Debian Release: trixie/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.6.8-amd64 (SMP w/4 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=fr_CA.utf8, LC_CTYPE=fr_CA.utf8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages xwayland depends on: ii libc6 2.37-13 ii libdecor-0-00.2.1-1 ii libdrm2 2.4.117-1 ii libepoxy0 1.5.10-1 ii libgbm1 23.3.1-4 ii libgcrypt20 1.10.3-2 ii libgl1 1.7.0-1 ii libpixman-1-0 0.42.2-1 ii libtirpc3 1.3.4+ds-1 ii libwayland-client0 1.22.0-2.1 ii libxau6 1:1.0.9-1 ii libxcvt00.1.2-1 ii libxdmcp6 1:1.1.2-3 ii libxfont2 1:2.0.6-1 ii libxshmfence1 1.3-1 ii xserver-common 2:21.1.10-1 xwayland recommends no packages. xwayland suggests no packages. -- no debconf information
Bug#1056279: Bug#1057220: Looks like the systemctl links are gone but not the pm-utils ones
Thank you Helmut and Chris for the helpful discussion. I have finally found some time to review your comments and the proposed molly-guard patches. While I'm still not 100% confident I understand the problem (and the fix), the solution you have settled on makes sense to me. With respect to the presence of the real commands in the path, I'm not too worried about it personally. I do agree it's unfortunate and it would be great if we could do this reliably without putting the diverted binary within easy reach, but at the end of the day, molly-guard will never catch all possible mistakes. As Helmut pointed out, it's already missing some cases (and it's always been possible to "init 6" as well), but I think it still provides a useful service if it catches the most common cases of accidental reboots. I had a similar dilemma for another package I maintain (safe-rm) and I've decided there to focus on the most common cases again to reduce complexity, and improve reliability. I will leave this for a few days in case others like Simó want to also chime in, but otherwise I am planning to upload to experimental this week and then unstable a few days later. Again many thanks for all of the work that has gone into solving this thorny problem. Francois
Bug#1057169: pdftk-java: FTBFS with bouncycastle 1.77
Dear pdftk-java maintainers, Please find attached a patch to fix this FTBFS due to bouncycastle update. Because the package gtg depends on pdftk-java, I could provide an NMU. Just let me know. Best, François Description: Fix FTBFS with new version of bouncycastle (#1057169) Author: Francois Mazen Forwarded: https://gitlab.com/pdftk-java/pdftk/-/issues/155 --- a/java/com/gitlab/pdftk_java/com/lowagie/text/pdf/PdfPKCS7.java +++ b/java/com/gitlab/pdftk_java/com/lowagie/text/pdf/PdfPKCS7.java @@ -225,7 +225,7 @@ ASN1ObjectIdentifier objId = (ASN1ObjectIdentifier)signedData.getObjectAt(0); if (!objId.getId().equals(ID_PKCS7_SIGNED_DATA)) throw new SecurityException("Not a valid PKCS#7 object - not signed data"); -ASN1Sequence content = (ASN1Sequence)((DERTaggedObject)signedData.getObjectAt(1)).getObject(); +ASN1Sequence content = (ASN1Sequence)((DERTaggedObject)signedData.getObjectAt(1)).getBaseObject(); // the positions that we care are: // 0 - version // 1 - digestAlgorithms @@ -258,7 +258,7 @@ // the possible ID_PKCS7_DATA ASN1Sequence rsaData = (ASN1Sequence)content.getObjectAt(2); if (rsaData.size() > 1) { -DEROctetString rsaDataContent = (DEROctetString)((DERTaggedObject)rsaData.getObjectAt(1)).getObject(); +DEROctetString rsaDataContent = (DEROctetString)((DERTaggedObject)rsaData.getObjectAt(1)).getBaseObject(); RSAdata = rsaDataContent.getOctets(); } @@ -294,7 +294,7 @@ next = 3; if (signerInfo.getObjectAt(next) instanceof ASN1TaggedObject) { ASN1TaggedObject tagsig = (ASN1TaggedObject)signerInfo.getObjectAt(next); -ASN1Sequence sseq = (ASN1Sequence)tagsig.getObject(); +ASN1Sequence sseq = (ASN1Sequence)tagsig.getBaseObject(); ByteArrayOutputStream bOut = new ByteArrayOutputStream(); ASN1OutputStream dout = ASN1OutputStream.create(bOut); try { signature.asc Description: This is a digitally signed message part
Bug#1057470: Outdated rkhunter since 2018-02
On 2023-12-05 at 20:28:44, Jörg Frings-Fürst (debian@jff.email) wrote: > I did not search for Vulnerabilities. However, I am of the opinion that using > rkhunter in its current form is equivalent to using a 6 year old virus scanner > and therefore involves an increased security risk. Ideally I agree that it would be great if more signatures could be added so that new threats could be detected. I don't see any indication that of vulnerabilities in this software however. Lack of new upstream development is not necessarily an indication that the software is unsafe. Francois -- https://fmarier.org/
Bug#1057470: Outdated rkhunter since 2018-02
On 2023-12-05 at 07:07:23, Jörg Frings-Fürst (debian@jff.email) wrote: > I noticed that the program and the data available on the internet are from > 2018-02. > So almost 6 years old data suggests a non-existent security. Hi Jörg, are you aware of security vulnerabilities in rkhunter or you are simply guessing that it might contain security vulnerabilities? As far as I am aware, rkhunter is not under active development anymore, but it also doesn't have any known vulnerabilities. Francois -- https://fmarier.org/
Bug#1056279: Looks like the systemctl links are gone but not the pm-utils ones
On 2023-11-27 at 03:54:16, Helmut Grohne (hel...@subdivi.de) wrote: > I don't have time to update the patch right now. Let me promise an update > this week, ok? Hi Helmut, My apologies for not responding earlier, but this is a rather thorny problem to solve and I have not had the mental "bandwidth" to dig into this yet. I wanted however to express my sincere appreciation for all of the work you have put into both understanding this problem and coming up with a solution. Francois
Bug#1053707: plasma-nm: after upgrade of network-manager shows "no available connection", networking works
A bypass could be to restart manually the systray but I don't know how to do that. Somebody can explain to me ? Thanks -- Francois Mescam
Bug#1056279: Looks like the systemctl links are gone but not the pm-utils ones
CCing Helmut who wrote the initial patch for systemd 255+ support (see Bug#1055510). I also see the same thing: $ ls -lh /usr/lib/molly-guard/ Permissions Size User Group Date Modified Name .rwxr-xr-x 3,4k root root 11 nov 14:02 molly-guard* lrwxrwxrwx31 root root 14 nov 2019 pm-hibernate -> /usr/lib/pm-utils/bin/pm-action* lrwxrwxrwx31 root root 14 nov 2019 pm-suspend -> /usr/lib/pm-utils/bin/pm-action* lrwxrwxrwx31 root root 14 nov 2019 pm-suspend-hybrid -> /usr/lib/pm-utils/bin/pm-action* $ sudo reboot --help E: not a regular file: /usr/lib/molly-guard/reboot I'm also a little confused by the diverts. Perhaps something changed in systemd (which owns the ultimate underlying symlinks)? Francois -- https://fmarier.org/
Bug#1055510: Best way to coordinate this fix
On 2023-11-10 at 02:45:14, Helmut Grohne (hel...@subdivi.de) wrote: > Thank you. The package built and dumat has imported it. I locally forked > its analysis database pretending that systemd would not declare a > conflict for molly-guard and reran it on that database. It does not > report any issues for molly-guard 0.8. I also checked the underlying > database and see that it recognizes the duplicated diversions there. Thanks for all of the help Helmut! I have uploaded 0.8.1 to unstable. Francois -- https://fmarier.org/
Bug#1055510: Best way to coordinate this fix
On 2023-11-08 at 21:15:58, Helmut Grohne (hel...@subdivi.de) wrote: > Thank you. I suggest going via experimental first. I've just uploaded to experimental. If there are any tests you can easily run there, please do so. I've upgraded in unstable from the current version to 0.8 without problems, so that should in theory work when I eventually upload to unstable. Francois -- https://fmarier.org/
Bug#1055670: fwknop-server: must Depends: apparmor-profiles-extra
> The latest update breaks apparmor for the whole system. > > /etc/apparmor.d/usr.sbin.fwknopd: > include > > This must declare Depends: apparmor-profiles-extra. > > Otherwise the apparmor service can't parse the file and will refuse to start. Ah, that's annoying. I don't think I'll want to make fwknop-server require apparmor. I guess this means I need to reintroduce the fwknop-apparmor package. Thanks for flagging this. Francois -- https://fmarier.org/
Bug#1055510: Best way to coordinate this fix
If anybody would like to double-check (or test) the package I've prepared, it's in salsa right now. Francois
Bug#1055510: Best way to coordinate this fix
Hi Luca, What's the best way to coordinate a fix for this? I assume that we shouldn't upload a new molly-guard packages until the files have actually moved in the systemd package? Should we wait until systemd is in unstable to push a new molly-guard out? Francois -- https://fmarier.org/
Bug#1050453: gtg: superfluous dependency on texlive-extra-utils
Hi Antonio, > The gtg README says it needs pdflatex, and for that the Debian package > depends on texlive-extra-utils. However, on a current testing system, > the pdflatex binary is provided by texlive-latex-base. texlive-extra-utils is required for pdfjam, which is used in the `script_pocketmod` plugin. dpkg -S bin/pdfjam texlive-extra-utils: /usr/bin/pdfjam Looks like this plugin adds lots of dependency for gtg (see [1] for java dependency also) but it's not mandatory for basic usage of gtg. So I would suggest to push it in a separate optional package. Best, François [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051530 signature.asc Description: This is a digitally signed message part
Bug#1051530: pdftk dependency should be optional
Hi Ploum, > pdktk dependency should be marked as "optional" for now Without pdftk dependency, the `script_pocketmod` plugin would not work. So we can't mark pdftk it as optional for now. To avoid the java installation during gtg installation, I would suggest to package the plugins as a separate deb package, which would itself be optional. Would this makes sense to gtg users? Best, François signature.asc Description: This is a digitally signed message part
Bug#1043581: #1043581 already fixed
Hi Jeroen, the CI test failure looks fixed by the 0.6-5 upload which fixed a startup issue. See #1050462 [1]. So I suggest to close this bug. Of course, feel free to reopen when appropriate. Best, François [1] https://bugs.debian.org/1050462 signature.asc Description: This is a digitally signed message part
Bug#1052115: Workrave 1.10.52 ready for GNOME 45
I've just uploaded workrave 1.10.52 which is ready for GNOME 45, but I've not yet enabled that support since support for GNOME 44 and 45 are mutually exclusive. Francois -- https://fmarier.org/
Bug#1051896: rkhunter: CVE-2023-4413
On 2023-09-13 at 14:15:53, Moritz Mühlenhoff (j...@inutil.org) wrote: > https://gist.github.com/MatheuZSecurity/16ef0219db8f85f49f945a25d5eb42d7 My summary of this is: it's possible to figure out what files/ports/etc. rkhunter is looking for by looking at the log file. That log file is: -rw-r- 1 root adm 502K 13 sep 07:41 rkhunter.log and on my machine that means only root and logcheck can see it: $ grep adm /etc/group adm:x:4:logcheck Of course, it's also possible to find out what files/ports/etc. rkhunter is looking for by looking in /usr/share/rkhunter/scripts/ or looking at the source code (https://sourceforge.net/p/rkhunter/rkh_code/ci/develop/tree/files/). So am I missing something here or is this simply not relevant given the rkhunter threat model of being an Open Source tool with a public database? Francois
Bug#1041374: fwknop-client: Cannot resolve own IP address
Sorry for the long delay Patrick. On 2023-07-18 at 00:26:18, pa...@mailbox.org (pa...@mailbox.org) wrote: > currently it is not possible to create a SPA packet without configuring a > RESOLVE_URL in .fwknoprc file. The error message is: > > [-] Could not resolve IP via: '/usr/bin/wget -U Fwknop/2.6.10 > --secure-protocol=auto --quiet -O - https://www.cipherdyne.org/cgi-bin/myip' I also noticed this on one of my machines. > I expect this to be an upstream problem – but I'm not 100% sure :-) Yes, I would say so. It would be good if the fallback could cases like these, though maybe it's not easy to do, I'm not sure. Would you like to suggest this upstream (https://github.com/mrash/fwknop/issues), or would you prefer I do it? The only somewhat related issue I could find is https://github.com/mrash/fwknop/issues/168 (from 8 years ago). Francois -- https://fmarier.org/
Bug#1050303: extension no longer works with Gnome 44
On 2023-08-22 at 14:31:31, Sébastien Villemot (sebast...@debian.org) wrote: > Actually I reported this problem in the Debian BTS because I was not > 100% > sure that this is an upstream issue (the error message is actually > compatible > with a missing file in the .deb). You're right. It turns out the reason why that 2.0 typelib file was missing is that it requires that GTK4 support be enabled: https://github.com/rcaelers/workrave/commit/5fe6e9c0060cae3a4bf1210c92c26b01022ddb1e#diff-67b94d110f4fed7b4a0ea8d4f780209ebbf5b69010701e5e3c646f641c730425 and there was a missing build dependency preventing the GTK4 support from being built. Francois
Bug#1050303: extension no longer works with Gnome 44
Bonjours Sébastien, It does look like a different error message indeed. Are you happy to also report this new problem upstream, or would you prefer I forward your email to upstream's GitHub issue tracker myself? Francois On 2023-08-22 at 12:35:24, Sébastien Villemot (sebast...@debian.org) wrote: > Package: workrave-gnome > Version: 1.10.51.1-2 > Severity: normal > > Dear Maintainer, > > After upgrading to gnome-shell 44, the extension no longer works. > > In the Extensions application, I am unable to activate the extension, and the > following message is displayed: > > Requiring Workrave, version 2.0: Typelib file for namespace 'Workrave', > version '2.0' not found > > Note that this seems to be a different issue than the following upstream one: > https://github.com/rcaelers/workrave/issues/487 > > Thanks for your work, > > -- > ⢀⣴⠾⠻⢶⣦⠀ Sébastien Villemot > ⣾⠁⢠⠒⠀⣿⡁ Debian Developer > ⢿⡄⠘⠷⠚⠋⠀ https://sebastien.villemot.name > ⠈⠳⣄ https://www.debian.org
Bug#1046946: recoll: Fails to build source after successful build
Hi, This should be fixed by the attached patch or some equivalent in the rules file (delete the generated .qm files when cleaning). recoll-Makefile-am-cleanqm.diff Description: Binary data Lucas Nussbaum writes: > Source: recoll > Version: 1.34.7-1 > Severity: minor > Tags: trixie sid ftbfs > User: lu...@debian.org > Usertags: ftbfs-sab-20230813 ftbfs-source-after-build > User: debian...@lists.debian.org > Usertags: qa-doublebuild > > Hi, > > This package fails to build a source package after a successful build > (dpkg-buildpackage ; dpkg-buildpackage -S). > > This is probably a clear violation of Debian Policy section 4.9 (clean > target), > but this is filed as severity:minor for now, because a discussion on > debian-devel showed that we might want to revisit the requirement of a > working > 'clean' target. > > More information about this class of issues, included common problems and > solutions, is available at > https://wiki.debian.org/qa.debian.org/FTBFS/SourceAfterBuild > > Relevant part of the build log: > > cd /<> && runuser -u user42 -- dpkg-buildpackage > > --sanitize-env -us -uc -rfakeroot -S > > > > > > dpkg-buildpackage: info: source package recoll > > dpkg-buildpackage: info: source version 1.34.7-1 > > dpkg-buildpackage: info: source distribution unstable > > dpkg-buildpackage: info: source changed by Kartik Mistry > > > > dpkg-source --before-build . > > debian/rules clean > > dh clean --with python3 > >dh_auto_clean > >make -j8 distclean > > make[1]: Entering directory '/<>' > > Making distclean in . > > make[2]: Entering directory '/<>' > > rm -f recollindex recollq xadump > > test -z "librecoll.la" || rm -f librecoll.la > > rm -rf .libs _libs > > rm -f python/recoll/*.pyc > > rm -f *.o > > rm -rf python/pychm/build > > rm -f ./so_locations > > rm -f aspell/*.o > > rm -rf aspell/.libs aspell/_libs > > rm -rf python/pychm/recollchm.egg-info > > rm -f aspell/*.lo > > rm -rf bincimapmime/.libs bincimapmime/_libs > > rm -rf python/pychm/setup.py > > rm -f bincimapmime/*.o > > rm -rf common/.libs common/_libs > > rm -rf python/recoll/Recoll.egg-info > > rm -f bincimapmime/*.lo > > rm -f *.lo > > rm -rf python/recoll/__pycache__ > > rm -f common/*.o > > rm -rf index/.libs index/_libs > > rm -rf python/recoll/build > > rm -f common/*.lo > > rm -rf internfile/.libs internfile/_libs > > rm -f index/*.o > > rm -f *.tab.c > > test -z "python/recoll/setup.py python/pychm/setup.py > > python/pyaspell/setup.py" || rm -f python/recoll/setup.py > > python/pychm/setup.py python/pyaspell/setup.py > > rm -rf query/.libs query/_libs > > rm -f index/*.lo > > test . = "." || test -z "" || rm -f > > rm -f internfile/*.o > > rm -f aspell/.deps/.dirstamp > > rm -rf rcldb/.libs rcldb/_libs > > rm -f internfile/*.lo > > rm -f aspell/.dirstamp > > rm -f query/*.o > > rm -f bincimapmime/.deps/.dirstamp > > rm -rf unac/.libs unac/_libs > > rm -f query/*.lo > > rm -f bincimapmime/.dirstamp > > rm -rf utils/.libs utils/_libs > > rm -f rcldb/*.o > > rm -f common/.deps/.dirstamp > > rm -f common/autoconfig.h common/stamp-h1 > > rm -f rcldb/*.lo > > rm -f common/.dirstamp > > rm -f unac/*.o > > rm -f index/.deps/.dirstamp > > rm -f unac/*.lo > > rm -f index/.dirstamp > > rm -f utils/*.o > > rm -f internfile/.deps/.dirstamp > > rm -f libtool config.lt > > rm -f utils/*.lo > > rm -f internfile/.dirstamp > > rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags > > rm -f query/.deps/.dirstamp > > rm -f cscope.out cscope.in.out cscope.po.out cscope.files > > rm -f query/.dirstamp > > rm -rf python/pychm/build > > rm -f rcldb/.deps/.dirstamp > > rm -rf python/pychm/dist/* > > rm -f rcldb/.dirstamp > > rm -rf python/pyaspell/build > > rm -f unac/.deps/.dirstamp > > rm -rf python/pyaspell/dist/* > > rm -f unac/.dirstamp > > make -C qtgui clean > > rm -f utils/.deps/.dirstamp > > rm -f utils/.dirstamp > > make[3]: Entering directory '/<>/qtgui' > > rm -f qrc_recoll.cpp > > rm -f .moc/moc_predefs.h > > rm -f .moc/moc_actsearch_w.cpp .moc/moc_advsearch_w.cpp > > .moc/moc_confgui.cpp .moc/moc_confguiindex.cpp .moc/moc_firstidx.cpp > > .moc/moc_fragbuts.cpp .moc/moc_idxmodel.cpp .moc/moc_idxsched.cpp > > .moc/moc_preview_load.cpp .moc/moc_preview_plaintorich.cpp > > .moc/moc_preview_w.cpp .moc/moc_ptrans_w.cpp .moc/moc_rclhelp.cpp > > .moc/moc_rclmain_w.cpp .moc/moc_reslist.cpp .moc/moc_restable.cpp > > .moc/moc_scbase.cpp .moc/moc_searchclause_w.cpp .moc/moc_snippets_w.cpp > > .moc/moc_specialindex.cpp .moc/moc_spell_w.cpp .moc/moc_ssearch_w.cpp > > .moc/moc_systray.cpp .moc/moc_uiprefs_w.cpp .moc/moc_viewaction_w.cpp > > .moc/moc_webcache.cpp .moc/moc_editdialog.cpp .moc/moc_listdialog.cpp > > .moc/moc_qxtconfirmationmessage.cpp .moc/moc_crontool.cpp > >
Bug#1043003: RFP: node-socket-cli -- CLI tool for Socket.dev
Package: wnpp Severity: wishlist * Package name: node-socket-cli Version : 0.7.1 Upstream Contact: Socket (https://github.com/SocketDev/) * URL : https://github.com/SocketDev/socket-cli-js * License : MIT Programming Lang: JavaScript Description : CLI tool for Socket.dev This tool can be used to pull useful security information out of the socket.dev (proprietary) service, but more interestingly, it can also be used as a safety wrapper around the npm: https://socket.dev/blog/introducing-safe-npm
Bug#1038207: 6.4 is now the default kernel
I just hit this bug upgrading the kernel package in unstable. The patch worked for me as well. It would be good to get that uploaded as soon as possible since it's going to affect lots of people now that 6.4 is the default. Francois
Bug#1041759: spamassassin: [SpamAssassin]size() is an alias of "UDPsize()"
Package: spamassassin Version: 4.0.0-6 Severity: normal Dear Maintainer, When I run spamassassin I've a warning : Jul 23 08:40:36.667 [593024] warn: deprecated method; size() is an alias of "UDPsize()" at /usr/share/perl5/Mail/SpamAssassin/DnsResolver.pm line 602. When I use spamassassin from procmail these warning fill the log file but spamassassin run correctly. Regards -- System Information: Debian Release: trixie/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 6.3.0-1-amd64 (SMP w/12 CPU threads; PREEMPT) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages spamassassin depends on: ii adduser 3.137 ii curl7.88.1-10 ii libhtml-parser-perl 3.81-1 ii libhttp-date-perl 6.05-2 ii libio-string-perl 1.08-4 ii libmail-dkim-perl 1.20230212-2 ii libnet-dns-perl 1.39-2 ii libnetaddr-ip-perl 4.079+dfsg-2+b1 ii libsocket6-perl 0.29-3 ii libsys-hostname-long-perl 1.5-3 ii libwww-perl 6.71-2 ii lsb-base11.6 ii perl [libarchive-tar-perl] 5.36.0-7 ii sysvinit-utils [lsb-base] 3.07-1 ii w3m 0.5.3+git20230121-2 Versions of packages spamassassin recommends: ii gnupg 2.2.40-1.1 ii libbsd-resource-perl 1.2911-2+b1 pn libmail-dmarc-perl ii libmail-spf-perl 2.9.0-5 ii perl [libsys-syslog-perl] 5.36.0-7 ii sa-compile 4.0.0-6 ii spamc 4.0.0-6 Versions of packages spamassassin suggests: ii libdbi-perl 1.643-4 ii libencode-detect-perl 1.01-6+b1 pn libgeoip2-perl ii libio-socket-ssl-perl 2.083-1 ii libnet-patricia-perl 1.22-2+b1 ii perl [libcompress-zlib-perl] 5.36.0-7 ii pyzor 1:1.0.0-6 ii razor 1:2.85-9 -- Configuration Files: /etc/spamassassin/local.cf changed: dns_query_restriction deny multi.uribl.com ifplugin Mail::SpamAssassin::Plugin::Shortcircuit endif # Mail::SpamAssassin::Plugin::Shortcircuit -- no debconf information
Bug#1039960: spamassassin-maint deprecated method; prefer $rr->rdstring
Package: spamassassin Version: 4.0.0-6 Severity: normal Dear Maintainer, In the logs I've the message spamassassin-maint[1026416]: deprecated method; prefer $rr->rdstring() at /usr/bin/sa-update line 1460. Regards -- System Information: Debian Release: trixie/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 6.3.0-1-amd64 (SMP w/12 CPU threads; PREEMPT) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages spamassassin depends on: ii adduser 3.134 ii curl7.88.1-10 ii libhtml-parser-perl 3.81-1 ii libhttp-date-perl 6.05-2 ii libio-string-perl 1.08-4 ii libmail-dkim-perl 1.20230212-1 ii libnet-dns-perl 1.39-2 ii libnetaddr-ip-perl 4.079+dfsg-2+b1 ii libsocket6-perl 0.29-3 ii libsys-hostname-long-perl 1.5-3 ii libwww-perl 6.71-1 ii lsb-base11.6 ii perl [libarchive-tar-perl] 5.36.0-7 ii sysvinit-utils [lsb-base] 3.06-4 ii w3m 0.5.3+git20230121-2 Versions of packages spamassassin recommends: ii gnupg 2.2.40-1.1 ii libbsd-resource-perl 1.2911-2+b1 pn libmail-dmarc-perl ii libmail-spf-perl 2.9.0-5 ii perl [libsys-syslog-perl] 5.36.0-7 ii sa-compile 4.0.0-6 ii spamc 4.0.0-6 Versions of packages spamassassin suggests: ii libdbi-perl 1.643-4 ii libencode-detect-perl 1.01-6+b1 pn libgeoip2-perl ii libio-socket-ssl-perl 2.083-1 ii libnet-patricia-perl 1.22-2+b1 ii perl [libcompress-zlib-perl] 5.36.0-7 ii pyzor 1:1.0.0-6 ii razor 1:2.85-9 -- Configuration Files: /etc/spamassassin/local.cf changed: dns_query_restriction deny multi.uribl.com ifplugin Mail::SpamAssassin::Plugin::Shortcircuit endif # Mail::SpamAssassin::Plugin::Shortcircuit -- no debconf information
Bug#1039957: light-locker: coredump from light-locker
Package: light-locker Version: 1.8.0-3 Severity: normal Dear Maintainer, In the logs I observe messages for coredump about light-locker : Jun 29 20:50:54 eiffel7 systemd-coredump[3646]: Process 3616 (light-locker) of user 1000 dumped core.#012#012Module libsystemd.so.0 from deb systemd-252.11-1.amd64#012Stack trace of thread 3616:#012#0 0x7f7e30bf87d7 g_log_structured_array (libglib-2.0.so.0 + 0x5b7d7)#012#1 0x7f7e30bf8bfe g_log_default_handler (libglib-2.0.so.0 + 0x5bbfe)#012#2 0x7f7e30bf8e67 g_logv (libglib-2.0.so.0 + 0x5be67)#012#3 0x7f7e30bf90ff g_log (libglib-2.0.so.0 + 0x5c0ff)#012#4 0x55e5ed1d2085 n/a (light-locker + 0xb085)#012#5 0x7f7e30d0cde9 g_type_create_instance (libgobject-2.0.so.0 + 0x37de9)#012#6 0x7f7e30cf0d30 n/a (libgobject-2.0.so.0 + 0x1bd30)#012#7 0x7f7e30cf23fc g_object_new_with_properties (libgobject-2.0.so.0 + 0x1d3fc)#012#8 0x7f7e30cf3001 g_object_new (libgobject-2.0.so.0 + 0x1e001)#012#9 0x55e5ed1d48e2 gs_listener_new (light-locker + 0xd8e2)#012#10 0x55e5ed1d04c2 n/a (light-locker + 0x94c2)#012#11 0x7f7e30d0cde9 g_type_create_instance (libgobject-2.0.so.0 + 0x37de9)#012#12 0x7f7e30cf0d30 n/a (libgobject-2.0.so.0 + 0x1bd30)#012#13 0x7f7e30cf23fc g_object_new_with_properties (libgobject-2.0.so.0 + 0x1d3fc)#012#14 0x7f7e30cf3001 g_object_new (libgobject-2.0.so.0 + 0x1e001)#012#15 0x55e5ed1d0b02 gs_monitor_new (light-locker + 0x9b02)#012#16 0x55e5ed1cf3fa main (light-locker + 0x83fa)#012#17 0x7f7e308fe18a n/a (libc.so.6 + 0x2718a)#012#18 0x7f7e308fe245 __libc_start_main (libc.so.6 + 0x27245)#012#19 0x55e5ed1cf54a _start (light-locker + 0x854a)#012#012Stack trace of thread 3630:#012#0 0x7f7e309d2fff __poll (libc.so.6 + 0xfbfff)#012#1 0x7f7e30bf19ae n/a (libglib-2.0.so.0 + 0x549ae)#012#2 0x7f7e30bf1acc g_main_context_iteration (libglib-2.0.so.0 + 0x54acc)#012#3 0x7f7e30bf1b11 n/a (libglib-2.0.so.0 + 0x54b11)#012#4 0x7f7e30c1bcfd n/a (libglib-2.0.so.0 + 0x7ecfd)#012#5 0x7f7e3095ffd4 n/a (libc.so.6 + 0x88fd4)#012#6 0x7f7e309e05bc n/a (libc.so.6 + 0x1095bc)#012#012Stack trace of thread 3633:#012#0 0x7f7e309d2fff __poll (libc.so.6 + 0xfbfff)#012#1 0x7f7e30bf19ae n/a (libglib-2.0.so.0 + 0x549ae)#012#2 0x7f7e30bf1cef g_main_loop_run (libglib-2.0.so.0 + 0x54cef)#012#3 0x7f7e30ea28f6 n/a (libgio-2.0.so.0 + 0x1188f6)#012#4 0x7f7e30c1bcfd n/a (libglib-2.0.so.0 + 0x7ecfd)#012#5 0x7f7e3095ffd4 n/a (libc.so.6 + 0x88fd4)#012#6 0x7f7e309e05bc n/a (libc.so.6 + 0x1095bc)#012#012Stack trace of thread 3631:#012#0 0x7f7e309d2fff __poll (libc.so.6 + 0xfbfff)#012#1 0x7f7e30bf19ae n/a (libglib-2.0.so.0 + 0x549ae)#012#2 0x7f7e30bf1acc g_main_context_iteration (libglib-2.0.so.0 + 0x54acc)#012#3 0x7f7e2fa064bd n/a (libdconfsettings.so + 0xb4bd)#012#4 0x7f7e30c1bcfd n/a (libglib-2.0.so.0 + 0x7ecfd)#012#5 0x7f7e3095ffd4 n/a (libc.so.6 + 0x88fd4)#012#6 0x7f7e309e05bc n/a (libc.so.6 + 0x1095bc)#012ELF object binary architecture: AMD x86-64 Jun 29 20:50:54 eiffel7 drkonqi-coredump-launcher[3736]: Nothing handled the dump :O Jun 29 20:50:54 eiffel7 drkonqi-coredump-launcher[3736]: QFile::remove: Empty or null file name Jun 29 20:50:54 eiffel7 drkonqi-coredump-launcher[3736]: Unable to find file for pid 3616 expected at "kcrash-metadata/3616.ini" Jun 29 20:50:54 eiffel7 drkonqi-coredump-processor[3647]: "/usr/bin/light-locker" 3616 "/var/lib/systemd/coredump/core.light-locker.1000.a79dc46db0a3437aa8405f0168a2e653.3616.168806465300.zst" I have these messages since somme months for systemd-coredump and only since some weeks for drkonqi. I've not observe problem in relation with these messages. My laptop is updated every day. I work with kde. Regards -- System Information: Debian Release: trixie/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 6.3.0-1-amd64 (SMP w/8 CPU threads; PREEMPT) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages light-locker depends on: ii dconf-gsettings-backend [gsettings-backend] 0.40.0-4 ii libc62.36-9 ii libcairo21.16.0-7 ii libdbus-1-3 1.14.8-1 ii libdbus-glib-1-2 0.112-3 ii libglib2.0-0 2.74.6-2 ii libgtk-3-0 3.24.37-2 ii libpango-1.0-0 1.50.14+ds-1 ii libpangocairo-1.0-0 1.50.14+ds-1 ii libsystemd0 252.11-1 ii libx11-6 2:1.8.6-1 ii libxext6 2:1.3.4-1+b1 ii libxss1
Bug#1039459: spamd deprecated method size
Package: spamd Version: 4.0.0-6 Severity: minor Dear Maintainer, In the logs I found : spamd[...]: deprecated method; size() is an alias of "UDPsize()" at /usr/share/perl5/Mail/SpamAssassin/DnsResolver.pm line 602. after the begining of spamd with for example systemctl start spamd. I observe no other problem with spamd I have 2 systems runing under testing, I have the same warning on the two, it appears since june 23. Regards -- System Information: Debian Release: trixie/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 6.3.0-1-amd64 (SMP w/8 CPU threads; PREEMPT) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages spamd depends on: ii init-system-helpers 1.65.2 ii rsyslog [system-log-daemon] 8.2302.0-1 ii spamassassin 4.0.0-6 ii systemd 252.11-1 spamd recommends no packages. spamd suggests no packages. -- no debconf information
Bug#1039111: ITP: ospray -- Open, Scalable, and Portable Ray Tracing Engine
Package: wnpp Severity: wishlist Owner: Francois Mazen X-Debbugs-Cc: debian-de...@lists.debian.org, franc...@mzf.fr * Package name: ospray Version : 2.11.0 * URL : https://www.ospray.org/ * License : Apache 2.0 Programming Lang: C++ Description : Open, Scalable, and Portable Ray Tracing Engine Intel OSPRay is an open source, scalable, and portable ray tracing engine for high-performance, high-fidelity visualization on Intel Architecture CPUs. OSPRay is part of the Intel oneAPI Rendering Toolkit and is released under the permissive Apache 2.0 license. The purpose of OSPRay is to provide an open, powerful, and easy-to-use rendering library that allows one to easily build applications that use ray tracing based rendering for interactive applications (including both surface- and volume-based visualizations). OSPRay is completely CPU-based, and runs on anything from laptops, to workstations, to compute nodes in HPC systems. OSPRay is very popular in scientific visualization community and several packages in the Debian archive would benefit from it like VTK, ParaView or F3d. OSPRay package depends on Embree with ISPC enabled build (#956816), rkcommon (#1039110), and optional dependencies like Open VKL (https://www.openvkl.org/) or Open Image Denoise (https://www.openimagedenoise.org/). I plan to package and upload the mandatory dependencies first then package OSPRay and finally package the optional dependencies. I already have an experimental package working at https://salsa.debian.org/mzf/ospray (it requires special build of embree with ispc) and I plan to maintain this package myself. However, I'm open to co- maintenance and team maintenance if it someone volunteers.
Bug#1039110: ITP: rkcommon -- Intel oneAPI Rendering Toolkit common C++/CMake infrastructure
Package: wnpp Severity: wishlist Owner: Francois Mazen X-Debbugs-Cc: debian-de...@lists.debian.org, franc...@mzf.fr * Package name: rkcommon Version : 1.11.0 * URL : https://github.com/ospray/rkcommon * License : Apache-2.0 Programming Lang: C++ Description : Intel oneAPI Rendering Toolkit common C++/CMake infrastructure This project represents a common set of C++ infrastructure and CMake utilities used by various components of Intel® oneAPI Rendering Toolkit. I plan to package it because it's a dependency of OSPRay (https://www.ospray.org/) which I also plan to package. Although I would maintain this package myself, I'm also open to any collaborative maintenance (Team or co-maintainers). I already have a basic package working here: https://salsa.debian.org/mzf/rkcommon
Bug#1038431: FAILED: was not updated because protocol is not supported.
Package: ddclient Version: 3.10.0-2 Severity: normal Since upgrading to bookworm (from bullseye), I see these failures in my logs: ddclient[1081]: FAILED:was not updated because protocol is not supported. This is what my /etc/ddclient.conf contains: ssl=yes protocol=noip use=web, web=https://ip-address-reflector.example/ server=dynupdate.no-ip.com login=username password='...' hostname.dyn.domain.example I thought the systemd unit file was having problems reading the config file in /etc/: -rw--- 1 root root 268 Feb 14 2022 ddclient.conf and so I added this in /lib/systemd/system/ddclient.service: [Service] User=root but it didn't seem to do anything. Francois -- https://fmarier.org/
Bug#1037163: workrave-gnome: Incompatible with GNOME Shell 44
On 2023-06-06 at 11:33:17, Jeremy Bícha (jeremy.bi...@canonical.com) wrote: > If this bug is still not fixed, workrave will need to be removed from > Debian Testing when the Debian GNOME team performs the GNOME Shell 44 > transition which could happen as early as next month. A workaround is > to temporarily stop building the workrave-gnome binary package from > the workrave source. Looks like upstream has a fix: https://github.com/rcaelers/workrave/commit/5fe6e9c0060cae3a4bf1210c92c26b01022ddb1e I'll wait a bit to see if a new upstream release comes. Francois -- https://fmarier.org/
Bug#1034596: RFP: pdfsizeopt -- PDF file size optimizer
Package: wnpp Severity: wishlist * Package name: pdfsizeopt Version : v9 Upstream Contact: Péter Szabó (https://keybase.io/pts) * URL : https://github.com/pts/pdfsizeopt * License : GPL-2.0 Programming Lang: Python Description : PDF file size optimizer pdfsizeopt is a program for converting large PDF files to small ones, without decreasing visual quality or removing interactive features (such as hyperlinks). More specifically, pdfsizeopt is a command-line application and a collection of best practices to optimize the size of PDF files, with focus on PDFs created from TeX and LaTeX documents.
Bug#1034276: unblock: fwknop/2.6.10-16
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock X-Debbugs-Cc: fwk...@packages.debian.org Control: affects -1 + src:fwknop Please unblock package fwknop [ Reason ] The AppArmor profile was incorrectly installed in the systemd system service path: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034055 [ Impact ] I'm not sure whether it would cause any actual problems, but it is likely a policy violation and the bug reporter did file it as an RC bug. [ Tests ] I upgraded to the version I uploaded to unstable yesterday and confirmed that the file is in the new location: $ dpkg -L fwknop-apparmor-profile | grep usr.sbin.fwknopd /usr/share/apparmor/extra-profiles/usr.sbin.fwknopd [ Risks ] Trivial fix. I made it so that the AppArmor profile is not automatically enabled either to avoid changing (i.e. fixing) the behavior compared to what it was in -15. So this should be a no-op in terms of functionality. [ Checklist ] [x] all changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in testing unblock fwknop/2.6.10-16 diff -Nru fwknop-2.6.10/debian/changelog fwknop-2.6.10/debian/changelog --- fwknop-2.6.10/debian/changelog 2023-01-10 21:23:46.0 -0800 +++ fwknop-2.6.10/debian/changelog 2023-04-10 20:52:01.0 -0700 @@ -1,3 +1,12 @@ +fwknop (2.6.10-16) unstable; urgency=high + + * Install apparmor profile in /usr/share/apparmor/extra-profiles/ +instead of the systemd service directory. Note that the profile +will not be used unless manually copied into /etc/apparmor.d/ +(Closes: #1034055). + + -- Francois Marier Mon, 10 Apr 2023 20:52:01 -0700 + fwknop (2.6.10-15) unstable; urgency=medium [ Helmut Grohne ] diff -Nru fwknop-2.6.10/debian/fwknop-apparmor-profile.install fwknop-2.6.10/debian/fwknop-apparmor-profile.install --- fwknop-2.6.10/debian/fwknop-apparmor-profile.install 2023-01-10 21:23:46.0 -0800 +++ fwknop-2.6.10/debian/fwknop-apparmor-profile.install 2023-04-10 20:52:01.0 -0700 @@ -1 +1 @@ -extras/apparmor/usr.sbin.fwknopd /usr/lib/systemd/system/ +extras/apparmor/usr.sbin.fwknopd /usr/share/apparmor/extra-profiles/
Bug#1034055: fwknop-apparmor-profile: AppArmor profile installed in systemd system service path
On 2023-04-07 at 07:23:07, Laurent Bigonville (bi...@debian.org) wrote: > It seems that you install the apparmor profile in the path for systemd system > service > > The following change should be reverted: > https://salsa.debian.org/debian/fwknop/-/commit/d3a5aaef39fedc1bb94e26921afbf63f79b31af7 Hm, that does look like a mistake. I don't remember what might have caused me to make that change. I guess the apparmor profile hasn't been in use for a while then. It seems like it's too late in the release process to re-add it in bookworm. Here's what I'm thinking of doing: - move it to /usr/share/apparmor/extra-profiles/ (so it's not turned on by default) for bookworm - move it back to /etc/apparmor.d/ after bookworm Alternatively, I could also not change anything for bookworm since it's not enabled as an AppArmor profile and it will be ignored as a systemd unit file. What do you think? Francois
Bug#1033306: tor: Tor relays running 0.4.5.16 will soon be cut off from the network
Package: tor Version: 0.4.5.16-1 Severity: grave Justification: renders package unusable I received the following email from the Tor Project: Hi, You are running a bunch of Tor relays, which is great: However, those relays' Tor version is obsolete, and because of old bugs, we will soon cut relays and bridges running that version out of the network. Please consider upgrading! You can find Tor packages and instructions for your distro / OS here: https://community.torproject.org/relay/setup/guard/ If you need help upgrading your relays, please use the Tor Forum: https://forum.torproject.net/c/support/relay-operator/17 Let us know if we can do anything to make the process easier. Thanks! Georg They are currently aiming for a cut-off date 4-6 weeks from now. This means that the version of tor that's in bullseye will essentially stop working for most uses. There is already a version in backports that will work fine, but perhaps it's worth also uploading it to stable for the next point release? Francois -- https://fmarier.org/
Bug#1032222: zulucrypt-gui: Fail to mount hidden volume since upgrade from 5.7.1-2 to 6.2.0-1
Package: zulucrypt-gui Version: 5.7.1-2 Severity: important X-Debbugs-Cc: fle...@yahoo.com Dear Maintainer, On Feb 11th 2023 I upgraded the following packages from 5.7.1-2 to 6.2.0-1 on my system when the packages migrated from unstable to testing: libzulucrypt1.2.0 libzulucrypt-exe1.2.0 libzulucryptpluginmanager1.0.0 zulucrypt-cli zulucrypt-gui zulupolkit Since then, zulucrypt is unable to mount a hiden volume. Mounting the primary volume from the same file works fine. Reverting all 6 packages to 5.7.1-2 solves the issue and I am able to mount both volumes from that file again. -- System Information: Debian Release: bookworm/sid APT prefers testing APT policy: (900, 'testing'), (80, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.1.0-5-amd64 (SMP w/16 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages zulucrypt-gui depends on: ii libblkid1 2.38.1-5 ii libc6 2.36-8 ii libgcc-s1 12.2.0-14 ii libgcrypt20 1.10.1-3 ii libpwquality1 1.4.5-1+b1 ii libqt5core5a5.15.8+dfsg-2 ii libqt5gui5 5.15.8+dfsg-2 ii libqt5network5 5.15.8+dfsg-2 ii libqt5widgets5 5.15.8+dfsg-2 ii libsecret-1-0 0.20.5-3 ii libstdc++6 12.2.0-14 ii libzulucryptpluginmanager1.0.0 5.7.1-2 ii zulucrypt-cli 5.7.1-2 ii zulupolkit 5.7.1-2 zulucrypt-gui recommends no packages. zulucrypt-gui suggests no packages. -- no debconf information
Bug#1030919: Video of the crash
Hello, No idea if it helps in any way, but here is a video of the crash: https://fleuret.org/tmp/bug_1030919.mp4 Cheers, -- Francois Fleuret https://fleuret.org/francois/
Bug#1030919: xserver-xorg-video-intel: The server crashes when the mouse pointer hovers over a gtk button
Package: xserver-xorg-video-intel Version: 2:2.99.917+git20210115-1 Severity: important X-Debbugs-Cc: franc...@fleuret.org The server crashes when the mouse pointer hovers over a specific gtk button of the pavucontrol interface. Otherwise it never crashes. I see this in /var/log/Xorg.0.log.old [73.117] (EE) [73.117] (EE) Backtrace: [73.127] (EE) 0: /usr/lib/xorg/Xorg (OsLookupColor+0x139) [0x55e578a89cc9] [73.128] (EE) 1: /lib/x86_64-linux-gnu/libc.so.6 (__sigaction+0x40) [0x7fee08244f90] [73.128] (EE) 2: /lib/x86_64-linux-gnu/libc.so.6 (pthread_key_delete+0x14c) [0x7fee08293ccc] [73.129] (EE) 3: /lib/x86_64-linux-gnu/libc.so.6 (gsignal+0x12) [0x7fee08244ef2] [73.129] (EE) 4: /lib/x86_64-linux-gnu/libc.so.6 (abort+0xd3) [0x7fee0822f472] [73.130] (EE) 5: /lib/x86_64-linux-gnu/libc.so.6 (__fsetlocking+0x290) [0x7fee082882d0] [73.131] (EE) 6: /lib/x86_64-linux-gnu/libc.so.6 (timer_settime+0x37a) [0x7fee0829d64a] [73.131] (EE) 7: /lib/x86_64-linux-gnu/libc.so.6 (__default_morecore+0x8a0) [0x7fee0829f6b0] [73.131] (EE) 8: /lib/x86_64-linux-gnu/libc.so.6 (__libc_free+0x6f) [0x7fee082a1d2f] [73.132] (EE) unw_get_proc_name failed: no unwind info found [-10] [73.132] (EE) 9: /usr/lib/xorg/modules/drivers/intel_drv.so (?+0x0) [0x7fee075d8a0f] [73.132] (EE) 10: /usr/lib/xorg/Xorg (DamageDestroy+0x23e) [0x55e5789f627e] [73.132] (EE) 11: /usr/lib/xorg/Xorg (ShmRegisterFbFuncs+0x80e) [0x55e5789b084e] [73.132] (EE) 12: /usr/lib/xorg/Xorg (SyncVerifyFence+0x3354) [0x55e5789af214] [73.132] (EE) 13: /usr/lib/xorg/Xorg (RegisterExtensionNames+0x1dd) [0x55e57893d22d] [73.133] (EE) 14: /usr/lib/xorg/Xorg (FreeResource+0xe9) [0x55e57893de19] [73.133] (EE) 15: /usr/lib/xorg/Xorg (dixDestroyPixmap+0x27e) [0x55e57891196e] [73.133] (EE) 16: /usr/lib/xorg/Xorg (SendErrorToClient+0x3d4) [0x55e578916734] [73.133] (EE) 17: /usr/lib/xorg/Xorg (InitFonts+0x3bc) [0x55e57891a6cc] [73.133] (EE) 18: /lib/x86_64-linux-gnu/libc.so.6 (__libc_init_first+0x8a) [0x7fee0823018a] [73.134] (EE) 19: /lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0x85) [0x7fee08230245] [73.134] (EE) 20: /usr/lib/xorg/Xorg (_start+0x21) [0x55e578903b71] [73.134] (EE) [73.134] (EE) Fatal server error: [73.134] (EE) Caught signal 6 (Aborted). Server aborting [73.134] (EE) [73.134] (EE) Please consult the The X.Org Foundation support at http://wiki.x.org for help. [73.134] (EE) Please also check the log file at "/var/log/Xorg.0.log" for additional information. [73.134] (EE) -- Package-specific info: /etc/X11/X does not exist. /etc/X11/X is not a symlink. /etc/X11/X is not executable. Diversions concerning libGL are in place diversion of /usr/lib/arm-linux-gnueabihf/libGL.so.1.2.0 to /usr/lib/mesa-diverted/arm-linux-gnueabihf/libGL.so.1.2.0 by glx-diversions diversion of /usr/lib/powerpc64le-linux-gnu/libGLESv2.so.2 to /usr/lib/mesa-diverted/powerpc64le-linux-gnu/libGLESv2.so.2 by glx-diversions diversion of /usr/lib/libGL.so.1 to /usr/lib/mesa-diverted/libGL.so.1 by glx-diversions diversion of /usr/lib/arm-linux-gnueabihf/libGLESv2.so.2.0.0 to /usr/lib/mesa-diverted/arm-linux-gnueabihf/libGLESv2.so.2.0.0 by glx-diversions diversion of /usr/lib/libGLESv2.so.2 to /usr/lib/mesa-diverted/libGLESv2.so.2 by glx-diversions diversion of /usr/lib/arm-linux-gnueabihf/libGL.so to /usr/lib/mesa-diverted/arm-linux-gnueabihf/libGL.so by glx-diversions diversion of /usr/lib/i386-linux-gnu/libGLX_indirect.so.0 to /usr/lib/mesa-diverted/i386-linux-gnu/libGLX_indirect.so.0 by glx-diversions diversion of /usr/lib/x86_64-linux-gnu/libGLESv1_CM.so.1.1.0 to /usr/lib/mesa-diverted/x86_64-linux-gnu/libGLESv1_CM.so.1.1.0 by glx-diversions diversion of /usr/lib/arm-linux-gnueabihf/libGLESv1_CM.so to /usr/lib/mesa-diverted/arm-linux-gnueabihf/libGLESv1_CM.so by glx-diversions diversion of /usr/lib/i386-linux-gnu/libGLESv2.so.2 to /usr/lib/mesa-diverted/i386-linux-gnu/libGLESv2.so.2 by glx-diversions diversion of /usr/lib/arm-linux-gnueabihf/libGLESv2.so.2.1.0 to /usr/lib/mesa-diverted/arm-linux-gnueabihf/libGLESv2.so.2.1.0 by glx-diversions diversion of /usr/lib/i386-linux-gnu/libGLESv2.so.2.1.0 to /usr/lib/mesa-diverted/i386-linux-gnu/libGLESv2.so.2.1.0 by glx-diversions diversion of /usr/lib/x86_64-linux-gnu/libGLESv2.so.2 to /usr/lib/mesa-diverted/x86_64-linux-gnu/libGLESv2.so.2 by glx-diversions diversion of /usr/lib/x86_64-linux-gnu/libGLX_indirect.so.0 to /usr/lib/mesa-diverted/x86_64-linux-gnu/libGLX_indirect.so.0 by glx-diversions diversion of /usr/lib/arm-linux-gnueabihf/libGL.so.1.2 to /usr/lib/mesa-diverted/arm-linux-gnueabihf/libGL.so.1.2 by glx-diversions diversion of /usr/lib/x86_64-linux-gnu/libGLESv2.so.2.1.0 to /usr/lib/mesa-diverted/x86_64-linux-gnu/libGLESv2.so.2.1.0 by glx-diversions diversion of /usr/lib/powerpc64le-linux-gnu/libGLESv1_CM.so to
Bug#1028394: fwknop FTCBFS: builds the perl extension for the build architecture
On 2023-01-10 at 02:44:41, Helmut Grohne (hel...@subdivi.de) wrote: > fwknop fails to cross build from source, because it attempts to build > its perl extension for the build architecture. In order to get the > development files for the host architecture, a dependency on perl-xs-dev > is needed and since there is no dh_auto_foo involved in the perl > extension, the PERL5LIB needs to be set up manually. I'm attaching a > patch for your convenience. Thanks for the patch Helmut. It's much appreciated given how little I know about the Perl ecosystem these days. Francois signature.asc Description: PGP signature
Bug#1021693: Initial packaging
Initial packaging work: https://salsa.debian.org/debian/buskill Discussion with upstream: https://github.com/BusKill/buskill-app/issues/31 Francois -- https://fmarier.org/
Bug#1016631: reportbug: libgstreamer-plugins-base1.0-dev is not Multi-Arch compatible
This bug is still present in version 1.20.4-1. -- Francois Gouget http://fgouget.free.fr/ Vote Electronique: Les gens qui votent ne décident rien. Ceux qui comptent les votes décident de tout.
Bug#1021530: wireplumber: conflict with pulseaudio?
Hi Dylan, I did not mask pipewire-pulse.service. I believe my system started with just pulseaudio and sound was working fine. At some point I know I installed libpipewire-0.3-dev because of a dependency with something else. I am not sure if this means pipewire was installed or configured at that point... but sound was still working so I didn't notice any issue. The upgrade of wireplumber to 0.4.12-1 is what made the issue visible as sound was no longer working after that. Removing pulseaudio and completing the migration to pipewire fixed the issue. Regards, Francois On Friday, November 18, 2022 at 10:59:01 AM EST, Dylan Aïssi wrote: Hi Francois, Le jeu. 13 oct. 2022 à 22:21, Francois Le Hir a écrit : > > I was able to fix the issue on my side. > The problem (for my situation) was a conflict between pulseaudio and pipewire > as both were running on my system at the same time and pipewire-pulse.service > was masked meaning the sound was not going through pipewire. > And I guess you did not manually mask pipewire-pulse.service before? The pulseaudio.service probably started during the update of pipewire instead of restarting the new pipewire-pulse.service. I have both pulseaudio and pipewire-pulse installed but I have never seen this issue. I wanted to avoid marking pipewire-pulse and pulseaudio in conflict to allow users the possibility to switch but it looks like I will have to do it anyway before the release of Bookworm. Best, Dylan
Bug#1024305: fail2ban: 'allowipv6' not defined in 'Definition'
Package: fail2ban Version: 1.0.2-1 Severity: normal Dear Maintainer, Since fail2ban 1.0.2-1 when fail2ban start it write in the log : Nov 16 18:53:09 eiffel7 fail2ban-server[874403]: 2022-11-16 18:53:09,333 fail2ban.configreader [874403]: WARNING 'allowipv6' not defined in 'Definition'. Using default one: 'auto' I've modified /etc/fail2ban/fail2ban.conf by adding a line 'allowipv6 = auto' and after that the message disapear. The other modified configuration files are modified to correct bug #1024263 but I don't know if s/-E 'set escape' // everywhere in action.d/ is a good answer to the problem. Regards -- System Information: Debian Release: bookworm/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.0.0-4-amd64 (SMP w/8 CPU threads; PREEMPT) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages fail2ban depends on: ii lsb-base 11.5 ii python33.10.6-1 ii sysvinit-utils [lsb-base] 3.05-6 Versions of packages fail2ban recommends: ii iptables 1.8.8-1 ii nftables 1.0.5-2 ii python3-pyinotify 0.9.6-2 ii python3-systemd235-1+b1 ii whois 5.5.14 Versions of packages fail2ban suggests: ii bsd-mailx [mailx]8.1.2-0.20220412cvs-1 ii mailutils [mailx]1:3.15-3+b1 pn monit ii rsyslog [system-log-daemon] 8.2210.0-3 ii sqlite3 3.39.4-1 -- Configuration Files: /etc/fail2ban/action.d/complain.conf changed: [INCLUDES] before = helpers-common.conf [Definition] debug = 0 norestored = 1 actionstart = actionstop = actioncheck = actionban = oifs=${IFS}; RESOLVER_ADDR="%(addr_resolver)s" if [ "" -gt 0 ]; then echo "try to resolve $RESOLVER_ADDR"; fi ADDRESSES=$(dig +short -t txt -q $RESOLVER_ADDR | tr -d '"') IFS=,; ADDRESSES=$(echo $ADDRESSES) IFS=${oifs} IP= if [ ! -z "$ADDRESSES" ]; then ( printf %%b "\n"; date '+Note: Local timezone is %%z (%%Z)'; printf %%b "\nLines containing failures of (max )\n"; %(_grep_logs)s; ) | "Abuse from " $ADDRESSES fi actionunban = addr_resolver = abuse-contacts.abusix.org message = Dear Sir/Madam,\n\nWe have detected abuse from the IP address $IP, which according to a abusix.com is on your network. We would appreciate if you would investigate and take action as appropriate.\n\nLog lines are given below, but please ask if you require any further information.\n\n(If you are not the correct person to contact about this please accept our apologies - your e-mail address was extracted from the whois record by an automated process.)\n\n This mail was generated by Fail2Ban.\nThe recipient address of this report was provided by the Abuse Contact DB by abusix.com. abusix.com does not maintain the content of the database. All information which we pass out, derives from the RIR databases and is processed for ease of use. If you want to change or report non working abuse contacts please contact the appropriate RIR. If you have any further question, contact abusix.com directly via email (i...@abusix.com). Information about the Abuse Contact Database can be found here: https://abusix.com/global-reporting/abuse-contact-db\nabusix.com is neither responsible nor liable for the content or accuracy of this message.\n logpath = /dev/null mailcmd = mail -s mailargs = /etc/fail2ban/action.d/dshield.conf changed: [Definition] norestored = 1 actionstart = actionstop = if [ -f .buffer ]; then cat .buffer | "FORMAT DSHIELD USERID TZ `date +%%z | sed 's/\([+-]..\)\(..\)/\1:\2/'` Fail2Ban" date +%%s > .lastsent fi rm -f .buffer .first actioncheck = actionban = TZONE=`date +%%z | sed 's/\([+-]..\)\(..\)/\1:\2/'` DATETIME="`perl -e '@t=localtime();printf "%%4d-%%02d-%%02d %%02d:%%02d:%%02d",1900+$t[5],$t[4]+1,$t[3],$t[2],$t[1],$t[0]'` $TZONE" PROTOCOL=`awk '{IGNORECASE=1;if($1==""){print $2;exit}}' /etc/protocols` if [ -z "$PROTOCOL" ]; then PROTOCOL=; fi printf %%b "$DATETIME\t\t\t\t\t\t\t$PROTOCOL\t\n" >> .buffer NOW=`date +%%s` if [ ! -f .first ]; then echo | cut -d. -f1 > .first fi if [ ! -f .lastsent ]; then echo 0 > .lastsent fi LOGAGE=$(($NOW - `cat .first`)) LASTREPORT=$(($NOW - `cat .lastsent`)) LINES=$( wc -l .buffer | awk '{ print $1 }' ) if [ $LINES -ge && $LASTREPORT -gt ] || [ $LOGAGE -gt ]; then cat .buffer | "FORMAT DSHIELD USERID TZ $TZONE Fail2Ban"
Bug#1024263: fail2ban: mail from fail2ban send to root set and escape
Package: fail2ban Version: 1.0.2-1 Severity: normal Dear Maintainer, Since version 1.0.2-1 of fail2ban the mails from fail2ban begin by : From: root > Subject: [Fail2Ban] apache-noscript: started on To: root@localhost, set@, escape@ Date: Wed, 16 Nov 2022 17:28:19 +0100 (CET) so they are send to non existing mail adress set@ and escap@. On the previous version of fail2ban the To: was To: root@localhost. Regards -- System Information: Debian Release: bookworm/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.0.0-3-amd64 (SMP w/8 CPU threads; PREEMPT) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages fail2ban depends on: ii lsb-base 11.5 ii python33.10.6-1 ii sysvinit-utils [lsb-base] 3.05-6 Versions of packages fail2ban recommends: ii iptables 1.8.8-1 ii nftables 1.0.5-2 ii python3-pyinotify 0.9.6-2 ii python3-systemd235-1+b1 ii whois 5.5.14 Versions of packages fail2ban suggests: ii bsd-mailx [mailx]8.1.2-0.20220412cvs-1 ii mailutils [mailx]1:3.15-3+b1 pn monit ii rsyslog [system-log-daemon] 8.2210.0-3 ii sqlite3 3.39.4-1 -- no debconf information
Bug#1023403: systemd: After a stand-by a service with an ended trigger is not executed
Since I've install systemd 252.2 apt-daily is executed just after a sleep even if the timer end during sleep state. So I think you can close 1023403. Regards -- Francois Mescam
Bug#1023212: assimp: Failing to open simple COLLADA file on s390x architecture
Source: assimp Severity: normal X-Debbugs-Cc: franc...@mzf.fr Dear Maintainer, F3D [1] uses Assimp to open COLLADA files. The associated autopkgtest fails on s390x architecture only. The test tries to open the COLLADA Example from the 1.5 documentation with is a simple white cube [2] (see Appendix A). The Assimp error description is: "Expected different index count in element." I've created a minimal example to reproduce the issue [3]. The "correct" output using amd64 platform is: Info, T0: Load cube.dae Debug, T0: Assimp 5.2.0 amd64 gcc debug shared singlethreadedsingle : Info, T0: Found a matching importer for this file format: Collada Importer. Info, T0: Import root directory is './' Debug, T0: Collada schema version is 1.5.n Debug, T0: UpdateImporterScale scale set: 1 Info, T0: Entering post processing pipeline Debug, T0: LimitBoneWeightsProcess begin Debug, T0: LimitBoneWeightsProcess end Info, T0: Leaving post processing pipeline Assimp import OK The "wrong" output using s390x platform (zelenka porter box) is: Info, T0: Load cube.dae Debug, T0: Assimp 5.2.0 s390x gcc debug shared singlethreadedsingle : Info, T0: Found a matching importer for this file format: Collada Importer. Info, T0: Import root directory is './' Debug, T0: Collada schema version is 1.5.n Error, T0: Expected different index count in element. Assimp error: Expected different index count in element. Thanks! François [1] https://tracker.debian.org/pkg/f3d [2] https://www.khronos.org/files/collada_spec_1_5.pdf [3] https://salsa.debian.org/mzf/assimp-collada-test
Bug#1022940: tiger: diff for NMU version 1:3.2.4~rc1-3.2
Control: tags 1022940 + patch Control: tags 1022940 + pending Dear maintainer, I've prepared an NMU for tiger (versioned as 1:3.2.4~rc1-3.2) and uploaded it to DELAYED/5. Please feel free to tell me if I should delay it longer. Regards. Francois -- https://fmarier.org/ diff -u tiger-3.2.4~rc1/debian/changelog tiger-3.2.4~rc1/debian/changelog --- tiger-3.2.4~rc1/debian/changelog +++ tiger-3.2.4~rc1/debian/changelog @@ -1,3 +1,10 @@ +tiger (1:3.2.4~rc1-3.2) unstable; urgency=medium + + * Non-maintainer upload. + * debian/rules: add symlink for Linux 6 (Closes: #1022940) + + -- Francois Marier Thu, 27 Oct 2022 21:35:23 -0700 + tiger (1:3.2.4~rc1-3.1) unstable; urgency=medium * Non-maintainer upload. diff -u tiger-3.2.4~rc1/debian/rules tiger-3.2.4~rc1/debian/rules --- tiger-3.2.4~rc1/debian/rules +++ tiger-3.2.4~rc1/debian/rules @@ -60,13 +60,15 @@ # Adjust the permissions of directories that might contain confidential information chmod 0700 debian/tiger/var/lib/tiger/work chmod 0700 debian/tiger/var/log/tiger - # Create symbolic links for Linux versions 3, 4, 5, and default + # Create symbolic links for Linux versions 3, 4, 5, 6 and default [ -e debian/tiger/usr/lib/tiger/systems/Linux/3 ] || \ ln -fs 2 debian/tiger/usr/lib/tiger/systems/Linux/3 [ -e debian/tiger/usr/lib/tiger/systems/Linux/4 ] || \ ln -fs 2 debian/tiger/usr/lib/tiger/systems/Linux/4 [ -e debian/tiger/usr/lib/tiger/systems/Linux/5 ] || \ ln -fs 2 debian/tiger/usr/lib/tiger/systems/Linux/5 + [ -e debian/tiger/usr/lib/tiger/systems/Linux/6 ] || \ + ln -fs 2 debian/tiger/usr/lib/tiger/systems/Linux/6 [ -e debian/tiger/usr/lib/tiger/systems/Linux/default ] || \ ln -fs 2 debian/tiger/usr/lib/tiger/systems/Linux/default # Remove unneeded Makefile files.
Bug#1022940: tiger doesn't support version 6 of the Linux kernel properly
Package: tiger Version: 1:3.2.4~rc1-3.1 Severity: important While there is a `default` symlink in /usr/lib/tiger/systems/Linux/, it doesn't seem to work because I received a very large number of bogus warnings after upgrading to Linux 6: NEW: --WARN-- [lin003w] The process `NetworkMa' is listening on socket 24455 (raw6 on 24455 interface) is run by root. NEW: --WARN-- [lin003w] The process `NetworkMa' is listening on socket 28195 (IPv6 on 28195 interface) is run by 1596. NEW: --WARN-- [lin003w] The process `NetworkMa' is listening on socket 28195 (IPv6 on 28195 interface) is run by 1599. NEW: --WARN-- [lin003w] The process `NetworkMa' is listening on socket UDP (0t0 on UDP interface) is run by root. NEW: --WARN-- [lin003w] The process `NetworkMa' is listening on socket raw6 (root on raw6 interface) is run by 1596. NEW: --WARN-- [lin003w] The process `NetworkMa' is listening on socket raw6 (root on raw6 interface) is run by 1599. NEW: --WARN-- [lin003w] The process `apache2' is listening on socket TCP (0t0 on TCP interface) is run by root. NEW: --WARN-- [lin003w] The process `apache2' is listening on socket TCP (0t0 on TCP interface) is run by www-data. NEW: --WARN-- [lin003w] The process `avahi-dae' is listening on socket UDP (0t0 on UDP interface) is run by avahi. NEW: --WARN-- [lin003w] The process `cupsd' is listening on socket TCP (0t0 on TCP interface) is run by root. NEW: --WARN-- [lin003w] The process `dnsmasq' is listening on socket TCP (0t0 on TCP interface) is run by dnsmasq. NEW: --WARN-- [lin003w] The process `dnsmasq' is listening on socket UDP (0t0 on UDP interface) is run by dnsmasq. ... The fix is to create a symlink for version 6 of the kernel explicitly: cd /usr/lib/tiger/systems/Linux/ sudo ln -s 5 6 Francois -- System Information: Debian Release: bookworm/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.0.0-1-amd64 (SMP w/4 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=fr_CA.utf8, LC_CTYPE=fr_CA.utf8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages tiger depends on: ii binutils 2.39-8 ii bsdutils 1:2.38.1-1.1+b1 ii debconf [debconf-2.0] 1.5.79 ii debianutils5.7-0.3 ii libc6 2.35-3 ii lsb-release12.0-1 ii net-tools 1.60+git20181103.0eebece-1 ii ucf3.0043 Versions of packages tiger recommends: ii chkrootkit 0.55-4+b2 pn john ii postfix [mail-transport-agent] 3.7.3-2 pn tripwire | aide Versions of packages tiger suggests: ii lsof 4.95.0-1 ii lynis 3.0.8-1.1 -- Configuration Files: /etc/cron.d/tiger [Errno 13] Permission non accordée: '/etc/cron.d/tiger' -- debconf information: * tiger/mail_rcpt: root * tiger/policy_adapt: -- https://fmarier.org/
Bug#1022128: rsyslog: shows [localhost] instead of actual hostname in logs
After downgrade to rsyslog_8.2208.0-1+b1_amd64.deb the bug disappear. -- Francois Mescam
Bug#1021530: wireplumber: No sound after upgrade to 0.4.12-1
I was able to fix the issue on my side. The problem (for my situation) was a conflict between pulseaudio and pipewire as both were running on my system at the same time and pipewire-pulse.service was masked meaning the sound was not going through pipewire. The way to test that (as a user not root): systemctl --user restart pipewire-pulse.service Failed to restart pipewire-pulse.service: Unit pipewire-pulse.service is masked. I resolved the issue by uninstalling pulseaudio, rebooting and then doing a correct migration to pipewire as described in the debian wiki here: https://wiki.debian.org/PipeWire I ended up with pipewire, pipewire-pulse, pipewire-alsa and pipewire-jack installed and pulseaudio not installed. After that the sound is working fine. I am able to upgrade to wireplumber 0.4.12-1 and everything works as it should.
Bug#1021693: RFP: buskill -- app for arming/disarming/configuring the BusKill laptop kill cord
Package: wnpp Severity: wishlist * Package name: buskill Version : 0.5.0 Upstream Author : Michael Altfield * URL : https://github.com/BusKill/buskill-app * License : GPL-3.0 Programming Lang: Python Description : app for arming/disarming/configuring the BusKill laptop kill cord BusKill is a laptop kill cord that can trigger your computer to lock or shutdown when it's physically separated from you.
Bug#1021530: wireplumber: No sound after upgrade to 0.4.12-1
I have the exact same issue. Installing 0.4.11-5 fixes it.
Bug#1021566: occt-misc contains architecture dependent CMake files
Package: occt-misc Severity: grave Justification: renders package unusable X-Debbugs-Cc: franc...@mzf.fr Dear Maintainer, the package occt-misc ships the OpenCASCADEConfig.cmake and OpenCASCADEConfigVersion.cmake files which contains architecture dependent information like the build flags or checking the pointer size (32/64 bits). The package is marked as "Architecture: all" which means the amd64 package is installed on all architecture. This makes the package unusable for other architecture than x86_64, especially 32bits architectures where a find_package(OpenCASCADE) fails with the following message: Could not find a configuration file for package "OpenCASCADE" that is compatible with requested version "". The following configuration files were considered but not accepted: /usr/lib/cmake/opencascade/OpenCASCADEConfig.cmake, version: 7.6.3 (64bit) /lib/cmake/opencascade/OpenCASCADEConfig.cmake, version: 7.6.3 (64bit) A simple fix is to change the Architecture to "any". Another fix is to move these CMake files to an other binary package of opencascade which is Architecture "any" (like libocct-foundation-dev for example). François
Bug#976626: Similar package
On 2022-10-01 at 09:57:35, Antoine Beaupré (anar...@debian.org) wrote: > Yeah, so tldr is similar, but cheat has a number of improvements, from > my perspective. Thanks for those details. I had not looked into cheat all that much, but now I'm curious to check it out! Francois -- https://fmarier.org/
Bug#1020590: tiger: diff for NMU version 1:3.2.4~rc1-3.1
Package: tiger Version: 1:3.2.4~rc1-3 Severity: normal Tags: patch Dear maintainer, I've prepared an NMU for tiger (versioned as 1:3.2.4~rc1-3.1) and uploaded it to DELAYED/5. Please feel free to tell me if I should delay it longer. It consists of a single fix for bug #987512. Attached is the debdiff. Regards. Francois -- System Information: Debian Release: bookworm/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.19.0-1-amd64 (SMP w/4 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=fr_CA.utf8, LC_CTYPE=fr_CA.utf8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages tiger depends on: ii binutils 2.38.90.20220713-2 ii bsdutils 1:2.38.1-1 ii debconf [debconf-2.0] 1.5.79 ii debianutils5.7-0.3 ii libc6 2.35-1 ii lsb-release11.4 ii net-tools 1.60+git20181103.0eebece-1 ii ucf3.0043 Versions of packages tiger recommends: ii chkrootkit 0.55-4+b2 pn john ii postfix [mail-transport-agent] 3.6.4-1+b3 pn tripwire | aide Versions of packages tiger suggests: ii lsof 4.95.0-1 ii lynis 3.0.8-1 -- debconf information: * tiger/mail_rcpt: root * tiger/policy_adapt: -- https://fmarier.org/ diff -u tiger-3.2.4~rc1/debian/changelog tiger-3.2.4~rc1/debian/changelog --- tiger-3.2.4~rc1/debian/changelog +++ tiger-3.2.4~rc1/debian/changelog @@ -1,3 +1,10 @@ +tiger (1:3.2.4~rc1-3.1) unstable; urgency=medium + + * Non-maintainer upload. + * Teach tiger about fuse.portal (Closes: #987512) + + -- Francois Marier Fri, 23 Sep 2022 12:03:08 -0700 + tiger (1:3.2.4~rc1-3) unstable; urgency=medium * Acknowledge NMU (Closes: #969303) diff -u tiger-3.2.4~rc1/systems/Linux/2/gen_mounts tiger-3.2.4~rc1/systems/Linux/2/gen_mounts --- tiger-3.2.4~rc1/systems/Linux/2/gen_mounts +++ tiger-3.2.4~rc1/systems/Linux/2/gen_mounts @@ -184,6 +184,7 @@ [ "$1" = "fuse.gvfsd-fuse" ] && LOCAL=1 # Used in Ubuntu 13.10 (Saucy Salamander) replaces fuse.gvfs-fuse-daemon [ "$1" = "fuse.ltspfs" ] && LOCAL=0 # Used by LTSP 5.x [ "$1" = "fuse.lxcfs" ] && LOCAL=0 + [ "$1" = "fuse.portal" ] && LOCAL=0 [ "$1" = "fuse.clamfs" ] && LOCAL=0 # ClamFS anti-virus protected file system [ "$1" = "fuse.javafs" ] && LOCAL=0 # Java FS, used by Wuala secure online storage, see: # https://github.com/puniverse/javafs only in patch2: unchanged: --- tiger-3.2.4~rc1.orig/configure +++ tiger-3.2.4~rc1/configure @@ -1,9 +1,10 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.69. +# Generated by GNU Autoconf 2.71. # # -# Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc. +# Copyright (C) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, +# Inc. # # # This configure script is free software; the Free Software Foundation @@ -14,14 +15,16 @@ # Be more Bourne compatible DUALCASE=1; export DUALCASE # for MKS sh -if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then : +as_nop=: +if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1 +then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST -else +else $as_nop case `(set -o) 2>/dev/null` in #( *posix*) : set -o posix ;; #( @@ -31,46 +34,46 @@ fi + +# Reset variables that may have inherited troublesome values from +# the environment. + +# IFS needs to be set, to space, tab, and newline, in precisely that order. +# (If _AS_PATH_WALK were called with IFS unset, it would have the +# side effect of setting IFS to empty, thus disabling word splitting.) +# Quoting is to prevent editors from complaining about space-tab. as_nl=' ' export as_nl -# Printing a long string crashes Solaris 7 /usr/bin/printf. -as_echo='\\\' -as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo -as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo -# Prefer a ksh shell builtin over an external printf program on Solaris, -# but without wasting forks for bash or zsh. -if test -z "$BASH_VERSION$ZSH_VERSION" \ -&& (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/
Bug#1017648: How to apply the patch in bug 987512
To apply the patch in the other bug, simply open /usr/lib/tiger/systems/Linux/2/gen_mounts in a text editor (as root) and then insert this line: [ "$1" = "fuse.portal" ] && LOCAL=0 in between: [ "$1" = "fuse.lxcfs" ] && LOCAL=0 and: [ "$1" = "fuse.clamfs" ] && LOCAL=0 # ClamFS anti-virus protected file system The patch itself can be found here: https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=987512;filename=tiger-fuse_portal.patch;msg=5 Francois -- https://fmarier.org/
Bug#1019701: RFP: rpi-imager -- Raspberry Pi Imaging Utility
Package: wnpp Severity: wishlist * Package name: rpi-imager Version : 1.7.3 Upstream Author : Raspberry Pi * URL : https://github.com/raspberrypi/rpi-imager * License : Apache-2.0 Programming Lang: C++ Description : Raspberry Pi Imaging Utility Raspberry Pi Imager is the quick and easy way to install Raspberry Pi OS and other operating systems (but not Debian) to a microSD card, ready to use with your Raspberry Pi.
Bug#1019325: Patch
Here's the patch I applied locally to my /etc to fix these warnings. Francois -- https://fmarier.org/ diff --git a/logcheck/ignore.d.server/anon-proxy b/logcheck/ignore.d.server/anon-proxy index 6b111708..31a442fd 100644 --- a/logcheck/ignore.d.server/anon-proxy +++ b/logcheck/ignore.d.server/anon-proxy @@ -1,2 +1,2 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ AnonMix: \[[0-9]+/[0-9]+/[0-9]+-[:0-9]+, info +\] +Try connecting to next Mix\.\.\.$ -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ AnonMix: \[[0-9]+/[0-9]+/[0-9]+-[:0-9]+, info +\] +connected\!$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ AnonMix: \[[0-9]+/[0-9]+/[0-9]+-[:0-9]+, info +\] +connected!$ diff --git a/logcheck/ignore.d.server/cyrus b/logcheck/ignore.d.server/cyrus index c483b8e9..566b3fb7 100644 --- a/logcheck/ignore.d.server/cyrus +++ b/logcheck/ignore.d.server/cyrus @@ -2,5 +2,5 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ cyrus/imapd\[[0-9]+\]: SQUAT failed( to open index file)?$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ cyrus/imapd\[[0-9]+\]: SQUAT returned [0-9]+ messages$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ cyrus/lmtpd\[[0-9]+\]: DBERROR db3: [12] lockers$ -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ cyrus/notifyd\[[0-9]+\]: MAIL, , [^[:space:]]+, [^[:space:]]+, \"[ [:alnum:][:punct:]]+\"$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ cyrus/notifyd\[[0-9]+\]: MAIL, , [^[:space:]]+, [^[:space:]]+, "[ [:alnum:][:punct:]]+"$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ cyrus/squatter\[[0-9]+\]: (skipping|indexing) mailbox [[:alpha:]^\.]+\.\.\.$ diff --git a/logcheck/ignore.d.server/dhcp b/logcheck/ignore.d.server/dhcp index 3b34ef10..2f19495e 100644 --- a/logcheck/ignore.d.server/dhcp +++ b/logcheck/ignore.d.server/dhcp @@ -39,9 +39,9 @@ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dhcpd[[[:digit:]]+]: TLS session successfully started to [:_.[:alnum:]-]+$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dhcpd[[[:digit:]]+]: Successfully logged into LDAP server [._[:alnum:]-]+$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dhcpd[[[:digit:]]+]: (Found dhcpServer LDAP entry|LDAP: Parsing dhcpServer options|LDAP: Parsing dhcpService DN|Found LDAP entry|Parsing external DNs for) '[%=.,_[:alnum:]-]+'( \.\.\.)?$ -^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dhcpd[[[:digit:]]+]: (Searching|No host entry) for \(\&\(objectClass=dhcpHost\)\(dhcpHWAddress=ethernet [[:xdigit:]]{2}:[[:xdigit:]]{2}:[[:xdigit:]]{2}:[[:xdigit:]]{2}:[[:xdigit:]]{2}:[[:xdigit:]]{2}\)\) in LDAP tree [=,.[:alnum:]]+$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dhcpd[[[:digit:]]+]: (Searching|No host entry) for \(&\(objectClass=dhcpHost\)\(dhcpHWAddress=ethernet [[:xdigit:]]{2}:[[:xdigit:]]{2}:[[:xdigit:]]{2}:[[:xdigit:]]{2}:[[:xdigit:]]{2}:[[:xdigit:]]{2}\)\) in LDAP tree [=,.[:alnum:]]+$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dhcpd[[[:digit:]]+]: Found dhcpHWAddress LDAP entry [-_=,.[:alnum:]]+$ -^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dhcpd[[[:digit:]]+]: Sending the following options: '(filename \"[.[:alnum:]]+\"|(fixed-address|next-server) [.[:digit:]]{7,15}|;#012)+'$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dhcpd[[[:digit:]]+]: Sending the following options: '(filename "[.[:alnum:]]+"|(fixed-address|next-server) [.[:digit:]]{7,15}|;#012)+'$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dhcpd[[[:digit:]]+]: Sending config line '(allow booting|allow bootp|ddns-update-style (ad-hoc|interim|none)|(default|max|min)-lease-time [[:digit:]]+|authoritative|option domain-name "[._[:alnum:]-]+"|option domain-name-servers [._,[:alnum:][:space:]-]+|option subnet-mask [.[:digit:]]{7,15}|;#012)+'$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dhcpd[[[:digit:]]+]: Sending config line '((subnet|netmask|option routers|option subnet-mask) [.[:digit:]]{7,15}|(default|max|min)-lease-time [[:digit:]]+|[[:space:]]|\{#012|\}#012|;#012)+'$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dhcpd[[[:digit:]]+]: Sending config line 'pool (range [.[:digit:]]{7,15} [.[:digit:]]+|(default|min|max)-lease-time [[:digit:]]+|failover peer "[-._[:alnum:]]+"|deny dynamic bootp clients|[[:space:]]|\{#012|\}#012|;#012)+'$ diff --git a/logcheck/ignore.d.server/dovecot b/logcheck/ignore.d.server/dovecot index 8f4dcb60..b59ad6da 100644 --- a/logcheck/ignore.d.server/dovecot +++ b/logcheck/ignore.d.server/dovecot @@ -5,7 +5,7 @@ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\) check pass; user unknown$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: pam_unix\(dovecot:[[:alnum:]]+\): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=([-_.@[:alnum:]]+)? rhost=([.:[:xdigit:]]+)?( user=[-_.@[:alnum:]]+)?$ ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: pam_unix\(dovecot:[[:alnum:]]+\): check pass; user unknown$ -^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: pam_ldap: error trying to bind as user \".*\" \(Invalid credentials\)$ +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: pam_ldap: error trying to bind as user ".*" \(Invalid credentials\)
Bug#1019587: qflipper: Missing dependency on qml-module-qt-labs-platform
Package: qflipper Version: 1.1.1-2 Severity: important I installed qflipper and was unable to run it: $ qFlipper 34 [default] QQmlApplicationEngine failed to load component 35 [default] qrc:/main.qml:29:5: Type MainWindow unavailable 35 [default] qrc:/components/MainWindow.qml:7:1: module "Qt.labs.platform" is not installed 35 [APP] qFlipper version 1.1.1-2 commit unknown 2022-08-10T10:13:42 35 [APP] OS info: Debian GNU/Linux bookworm/sid unknown 5.18.0-4-amd64 After installing the qml-module-qt-labs-platform package, everything starts up fine. Please add the missing dependency (or at the very least a Recommends). Francois -- System Information: Debian Release: bookworm/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.18.0-4-amd64 (SMP w/4 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=fr_CA.utf8, LC_CTYPE=fr_CA.utf8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages qflipper depends on: ii libc6 2.34-8 ii libgcc-s1 12.2.0-2 ii libqt5core5a5.15.4+dfsg-5 ii libqt5gui5 5.15.4+dfsg-5 ii libqt5network5 5.15.4+dfsg-5 ii libqt5qml5 5.15.4+dfsg-4 ii libqt5quick55.15.4+dfsg-4 ii libqt5quickcontrols2-5 5.15.4+dfsg-2 ii libqt5serialport5 5.15.4-2 ii libqt5widgets5 5.15.4+dfsg-5 ii libstdc++6 12.2.0-2 ii libusb-1.0-02:1.0.26-1 ii zlib1g 1:1.2.11.dfsg-4.1 qflipper recommends no packages. qflipper suggests no packages. -- no debconf information
Bug#848578: Also running into this problem
On 2022-09-07 at 12:42:31, Nicolas Schier (nico...@fjasle.eu) wrote: > Francois, might you be able to patch your ts with the attached patch > and re-check? As August has gone, I used > > echo test | faketime "2022-08-01" ./ts > > for testing with your specified locale settings. I've patched my /usr/bin/ts as you indicated and the above works well now: $ echo test | faketime "2022-01-04" ts jan 04 00:00:00 test $ echo test | faketime "2022-02-04" ts fév 04 00:00:00 test $ echo test | faketime "2022-07-04" ts jui 04 00:00:00 test $ echo test | faketime "2022-08-04" ts aoû 04 00:00:00 test Also, faketime is really handy! Thanks. Francois
Bug#1018794: RFP: fx -- terminal JSON viewer
Package: wnpp Severity: wishlist * Package name: fx Version : 24.0.0 Upstream Author : Anton Medvedev * URL : https://github.com/antonmedv/fx * License : MIT Programming Lang: Go Description : terminal JSON viewer Function eXecution (fx) is a terminal JSON viewer which includes these features: - Mouse support - Streaming support - Preserves key order - Preserves big numbers
Bug#1018733: RFP: htmlq -- uses CSS selectors to extract bits of content from HTML file
Package: wnpp Severity: wishlist * Package name: htmlq Version : 0.4.0 Upstream Author : Michael Maclean * URL : https://github.com/mgdm/htmlq * License : MIT Programming Lang: Rust Description : uses CSS selectors to extract bits of content from HTML file Like jq, but for HTML. Uses CSS selectors to extract bits of content from HTML files.
Bug#1018258: RFP: procs -- modern replacement for ps
Package: wnpp Severity: wishlist * Package name: procs Version : 0.13.0 Upstream Author : Dalance * URL : https://github.com/dalance/procs * License : MIT Programming Lang: Rust Description : modern replacement for ps procs is a replacement for ps written in Rust. Features: - Colored and human-readable output - Automatic theme detection based on terminal background - Multi-column keyword search - Some additional information which are not supported by ps - TCP/UDP port - Read/Write throughput - Docker container name - More memory information - Pager support - Watch mode (like top) - Tree view
Bug#1018106: sshd: pam_env(sshd:session): deprecated reading of user environment enabled
Package: openssh-server Version: 1:9.0p1-1+b1 Severity: normal Dear Maintainer, Each time a ssh session begins I have in the log on the server : sshd: pam_env(sshd:session): deprecated reading of user environment enabled This arrive since to day after libpam-modules and libpam-runtime were upgraded to 1.5.2-2. I don't know how to solve this, perhaps a modification in /etc/pam.d/sshd but what to do. Regards François -- System Information: Debian Release: bookworm/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.18.0-4-amd64 (SMP w/8 CPU threads; PREEMPT) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages openssh-server depends on: ii adduser3.123 ii debconf [debconf-2.0] 1.5.79 ii dpkg 1.21.9 ii init-system-helpers1.64 ii libaudit1 1:3.0.7-1+b1 ii libc6 2.34-4 ii libcom-err21.46.5-2 ii libcrypt1 1:4.4.28-2 ii libgssapi-krb5-2 1.20-1 ii libkrb5-3 1.20-1 ii libpam-modules 1.5.2-2 ii libpam-runtime 1.5.2-2 ii libpam0g 1.5.2-2 ii libselinux13.4-1+b1 ii libssl33.0.5-2 ii libsystemd0251.3-1 ii libwrap0 7.6.q-31 ii lsb-base 11.2 ii openssh-client 1:9.0p1-1+b1 ii openssh-sftp-server1:9.0p1-1+b1 ii procps 2:3.3.17-7+b1 ii runit-helper 2.14.1 ii ucf3.0043 ii zlib1g 1:1.2.11.dfsg-4.1 Versions of packages openssh-server recommends: ii libpam-systemd [logind] 251.3-1 ii ncurses-term 6.3+20220423-2 ii xauth1:1.1.1-1 Versions of packages openssh-server suggests: ii ksshaskpass [ssh-askpass] 4:5.25.4-1 pn molly-guard pn monkeysphere pn ufw -- debconf information: openssh-server/password-authentication: true openssh-server/permit-root-login: false
Bug#1017956: RFP: croc -- easily and securely send things from one computer to another
Package: wnpp Severity: wishlist * Package name: croc Version : 9.6.0 Upstream Author : Zack Schollz * URL : https://schollz.com/software/croc6 * License : MIT Programming Lang: Go Description : easily and securely send things from one computer to another croc is a tool that allows any two computers to simply and securely transfer files and folders and does all of the following: - allows any two computers to transfer data (using a relay) - provides end-to-end encryption (using PAKE) - enables easy cross-platform transfers (Windows, Linux, Mac) - allows multiple file transfers - allows resuming transfers that are interrupted - local server or port-forwarding not needed - ipv6-first with ipv4 fallback - can use proxy, like tor
Bug#1017687: RFP: xsv -- fast CSV command line toolkit
Package: wnpp Severity: wishlist * Package name: xsv Version : 0.13.0 Upstream Author : Andrew Gallant * URL : https://github.com/BurntSushi/xsv * License : MIT Programming Lang: Rust Description : fast CSV command line toolkit xsv is a command line program for indexing, slicing, analyzing, splitting and joining CSV files. Commands should be simple, fast and composable: 1. Simple tasks should be easy. 2. Performance trade offs should be exposed in the CLI interface. 3. Composition should not come at the expense of performance.
Bug#1017575: RFP: jless -- command-line JSON viewer
Package: wnpp Severity: wishlist * Package name: jless Version : 0.8.0 Upstream Author : Paul Julius Martinez * URL : https://jless.io/ * License : MIT Programming Lang: Rust Description : command-line JSON viewer jless is a command-line JSON viewer. Use it as a replacement for whatever combination of less, jq, cat and your editor you currently use for viewing JSON files. Features: - Clean syntax highlighted display of JSON data, omitting quotes around object keys, closing object and array delimiters, and trailing commas. - Expand and collapse objects and arrays so you can see both the high- and low-level structure of the data. - A wealth of vim-inspired movement commands for efficiently moving around and viewing data. - Full regex-based search for finding exactly the data you're looking for.
Bug#1016995: RFP: sublist3r -- subdomains enumeration tool for penetration testers
Package: wnpp Severity: wishlist * Package name: sublist3r Version : 1.1 Upstream Author : Ahmed Aboul-Ela * URL : https://github.com/aboul3la/Sublist3r * License : GPL-2.0 Programming Lang: Python Description : subdomains enumeration tool for penetration testers Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing, Baidu and Ask. Sublist3r also enumerates subdomains using Netcraft, Virustotal, ThreatCrowd, DNSdumpster and ReverseDNS. subbrute was integrated with Sublist3r to increase the possibility of finding more subdomains using bruteforce with an improved wordlist.
Bug#961867: #961867 python3?-talloc multiarch support is broken because of the dependency on python
Michael Tokarev wrote: > Aside of this package being M-A:same, how do you plan to *use* both > i386 and amd64 versions of this package? Sorry, I did not see that message. Anyway, I don't plan on using both i386 and amd64 versions of the python-talloc package. What I do want is to use both the i386 and amd64 versions of the samba-dev and samba-libs packages which both depend on the corresponding python3?-talloc package: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006875 So if it does indeed make no sense for python-talloc to be MultiArch: same, then I'm fine for this bug to be closed. But then it is Samba that should really be fixed. -- Francois Gouget http://fgouget.free.fr/ Good judgment comes from experience, and experience comes from bad judgment -- Barry LePatner
Bug#1016929: RFP: sd -- intuitive find & replace command-line tool (sed alternative)
Package: wnpp Severity: wishlist * Package name: sd Version : 0.7.6 Upstream Author : Gregory * URL : https://github.com/chmln/sd * License : MIT Programming Lang: Rust Description : intuitive find & replace command-line tool (sed alternative) sd is an intuitive find & replace CLI. sd uses regex syntax that you already know from JavaScript and Python. Find & replace expressions are split up, which makes them easy to read and write. Defaults follow common sense and are tailored for typical daily use.
Bug#976626: Similar package
This seems very similar to the tldr package: https://packages.debian.org/stable/tldr See https://tldr.sh/ for examples. Francois
Bug#848578: Also running into this problem
I can also reproduce this problem with `ts` while `date` works fine: $ date | ts ao� 06 10:33:36 sam 06 aoû 2022 10:33:36 PDT $ date sam 06 aoû 2022 10:35:39 PDT $ echo test | ts ao� 06 10:36:04 test This is what my locale is set to: $ locale LANG=fr_CA.utf8 LANGUAGE= LC_CTYPE="fr_CA.utf8" LC_NUMERIC="fr_CA.utf8" LC_TIME="fr_CA.utf8" LC_COLLATE="fr_CA.utf8" LC_MONETARY="fr_CA.utf8" LC_MESSAGES="fr_CA.utf8" LC_PAPER="fr_CA.utf8" LC_NAME="fr_CA.utf8" LC_ADDRESS="fr_CA.utf8" LC_TELEPHONE="fr_CA.utf8" LC_MEASUREMENT="fr_CA.utf8" LC_IDENTIFICATION="fr_CA.utf8" LC_ALL= $ cat /etc/locale.gen | grep -v '^#' en_CA.UTF-8 UTF-8 en_NZ.UTF-8 UTF-8 fr_CA.UTF-8 UTF-8 Let me know if there's anything else I can provide to help reproduce the problem. Francois -- https://fmarier.org/
Bug#1016631: reportbug: libgstreamer-plugins-base1.0-dev is not Multi-Arch compatible
Package: libgstreamer-plugins-base1.0-dev Version: 1.20.3-2 Severity: normal Dear Maintainer, The libgstreamer-plugins-base1.0-dev package is not multi-arch aware so that the amd64 version conflicts with the i386 one which makes it impossible to install both. In turn this impacts Wine development as it needs to support both 32 and 64 bit Windows applications and needs libgstreamer-plugins-base1.0-dev for some of their functionality. This is a regression in 1.20.3-2. This is also not the first time libgstreamer-plugins-base1.0-dev drops multi-arch support (see bug 862119) despite it being a requirement since Debian 7. -- System Information: Debian Release: bookworm/sid APT prefers oldstable-updates APT policy: (500, 'oldstable-updates'), (500, 'testing'), (500, 'oldstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.18.0-3-amd64 (SMP w/8 CPU threads; PREEMPT) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages libgstreamer-plugins-base1.0-dev depends on: ii gir1.2-gst-plugins-base-1.0 1.20.3-2 ii libc6-dev [libc-dev]2.33-8 ii libdrm-dev 2.4.112-3 ii libegl-dev 1.4.0-1 ii libgbm-dev 22.0.5-1 ii libgl-dev 1.4.0-1 ii libgles-dev 1.4.0-1 ii libglib2.0-dev 2.72.3-1 ii libgstreamer-gl1.0-01.20.3-2 ii libgstreamer-plugins-base1.0-0 1.20.3-2 ii libgstreamer1.0-dev 1.20.3-1 ii libgudev-1.0-dev237-2 ii liborc-0.4-dev 1:0.4.32-2 ii libwayland-dev 1.21.0-1 ii libx11-xcb-dev 2:1.7.5-1 ii pkg-config 0.29.2-1 libgstreamer-plugins-base1.0-dev recommends no packages. libgstreamer-plugins-base1.0-dev suggests no packages. -- no debconf information
Bug#1016605: RFP: dust -- tool to get an instant overview of which directories are using disk space without requiring sort or head
Package: wnpp Severity: wishlist * Package name: dust Version : 0.8.1 Upstream Author : Andy Boot * URL : https://github.com/bootandy/dust * License : Apache-2.0 Programming Lang: Rust Description : tool to get an instant overview of which directories are using disk space without requiring sort or head Dust is meant to give you an instant overview of which directories are using disk space without requiring sort or head. Dust will print a maximum of one 'Did not have permissions message'. Dust will list a slightly-less-than-the-terminal-height number of the biggest subdirectories or files and will smartly recurse down the tree to find the larger ones. There is no need for a '-d' flag or a '-h' flag. The largest subdirectories will be colored. The different colors on the bars: These represent the combined tree hierarchy & disk usage. The shades of grey are used to indicate which parent folder a subfolder belongs to.
Bug#1016389: RFP: choose -- human-friendly and fast alternative to cut and (sometimes) awk
Package: wnpp Severity: wishlist * Package name: choose Version : 1.3.4 Upstream Author : Ryan Geary * URL : https://github.com/theryangeary/choose * License : GPL-3.0 Programming Lang: Rust Description : human-friendly and fast alternative to cut and (sometimes) awk This is choose, a human-friendly and fast alternative to cut and (sometimes) awk. . Features: - terse field selection syntax similar to Python's list slices - negative indexing from end of line - optional start/end index - zero-indexed - reverse ranges - slightly faster than cut for sufficiently long inputs, much faster than awk - regular expression field separators using Rust's regex syntax
Bug#1016361: RFP: dog -- command-line DNS client with colorful output and support for DoH and DoT
Package: wnpp Severity: wishlist * Package name: dog Version : 0.1.0 Upstream Author : Benjamin Sago * URL : https://dns.lookup.dog/ * License : EUPL-1.2 Programming Lang: Rust Description : command-line DNS client with colorful output and support for DoH and DoT dog is a command-line DNS client, like dig. It has colourful output, understands normal command-line argument syntax, supports the DNS-over-TLS and DNS-over-HTTPS protocols, and can emit JSON.
Bug#1014425: rkhunter: rkunter is unable to find config file for 'syslog' daemon
Hi Tim, > I'm getting these emails Daily: > Warning: The 'syslog' daemon is running, but no configuration file can be > found. I'm not sure why you're getting that message, I've never seen it myself. Are you using rsyslog or syslog-ng? Francois -- https://fmarier.org/
Bug#1014195: ITP: gtg -- Getting Things Gnome!, an organizer for the GNOME desktop environment
Package: wnpp Severity: wishlist Owner: Francois Mazen X-Debbugs-Cc: debian-de...@lists.debian.org, franc...@mzf.fr * Package name: gtg Version : 0.6 Upstream Author : Lionel Dricot & Bertrand Rousseau * URL : https://wiki.gnome.org/Apps/GTG * License : GPLv3 Programming Lang: Python Description : Getting Things Gnome!, an organizer for the GNOME desktop environment The purpose of this ITP is to reintroduce the package that have been removed because of python3 transition. The upstream is now active and new releases are available. This package depends on liblarch which needs to be reintroduced first [1]. Getting Things GNOME! (GTG) is a personal tasks and TODO-list items organizer for the GNOME desktop environment and inspired by the ''Getting Things Done'' (GTD) methodology. GTG is designed with flexibility, adaptability, and ease of use in mind, so its user interface and workflow can be used as more than just "GTD" software. GTG is intended to help you track everything you need to do and need to know, from small tasks to large projects. [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014194