date:20200227

Bug#952656: how to reproduce in docker

2020-02-27 Thread Paolo Greppi

1. hanging:

docker run --rm -it debian:buster-slim /bin/bash
apt update
apt install -y --no-install-recommends yarnpkg
yarnpkg add --verbose highlight.js

output:

yarn add v1.13.0
verbose 0.668 Checking for configuration file "/.npmrc".
verbose 0.668 Checking for configuration file "/usr/local/share/.npmrc".
verbose 0.669 Checking for configuration file "/usr/etc/npmrc".
verbose 0.669 Checking for configuration file "/root/.npmrc".
verbose 0.669 Checking for configuration file "/.npmrc".
verbose 0.67 Checking for configuration file "/.yarnrc".
verbose 0.67 Checking for configuration file "/usr/local/share/.yarnrc".
verbose 0.671 Checking for configuration file "/usr/etc/yarnrc".
verbose 0.671 Checking for configuration file "/root/.yarnrc".
verbose 0.671 Checking for configuration file "/.yarnrc".
verbose 0.675 current time: 2020-02-27T07:30:32.620Z
info No lockfile found.
verbose 0.805 Performing "GET" request to "https://yarnpkg.com/latest-version;.
[1/4] Resolving packages...
verbose 1.088 Performing "GET" request to
"https://registry.yarnpkg.com/highlight.js;.
⠂ highlight.js

[hangs]

2. crashing:

docker run --rm -it debian:buster-slim /bin/bash
apt update
apt install -y --no-install-recommends yarnpkg
cat > package.json
{
"dependencies": {
"highlight.js": "^9.18.1"
}
}
^d
cat > yarn.lock
highlight.js@^9.18.1:
version "9.18.1"
resolved
"https://registry.yarnpkg.com/highlight.js/-/highlight.js-9.18.1.tgz#ed21aa001fe6252bb10a3d76d47573c6539fe13c;
integrity
sha512-OrVKYz70LHsnCgmbXctv/bfuvntIKDz177h0Co37DQ5jamGZLVmoCVMtjMtNZY3X9DrCcKfklHPNeA0uPZhSJg==
^d
yarnpkg install --verbose

output:

yarn install v1.13.0
warning package.json: No license field
verbose 0.616 Checking for configuration file "/.npmrc".
verbose 0.617 Checking for configuration file "/usr/local/share/.npmrc".
verbose 0.617 Checking for configuration file "/usr/etc/npmrc".
verbose 0.617 Checking for configuration file "/root/.npmrc".
verbose 0.618 Checking for configuration file "/.npmrc".
verbose 0.618 Checking for configuration file "/.yarnrc".
verbose 0.619 Checking for configuration file "/usr/local/share/.yarnrc".
verbose 0.619 Checking for configuration file "/usr/etc/yarnrc".
verbose 0.619 Checking for configuration file "/root/.yarnrc".
verbose 0.619 Checking for configuration file "/.yarnrc".
verbose 0.624 current time: 2020-02-27T07:40:15.667Z
verbose 0.723 Performing "GET" request to "https://yarnpkg.com/latest-version;.
warning No license field
[1/4] Resolving packages...
[2/4] Fetching packages...
verbose 0.997 Performing "GET" request to
"https://registry.yarnpkg.com/highlight.js/-/highlight.js-9.18.1.tgz;.

also, the error is not reported: echo $? returns: 0

Bug#952572: procps: move binaries back to /bin

2020-02-27 Thread Craig Small

On Thu, 27 Feb. 2020, 4:51 pm Paul Wise,  wrote:

>
> Another option would be a compat symlink.
>

I did think of that but then you have to conditionally put a symlink in
when there isn't the /bin directory link or maybe usrmerge there doing it's
thing or perhaps there is some third thing that does this linking I didn't
know about.

So it was just easier to put the binaries back to  /bin. I don't personally
run any unmerged systems so it is hard to test and keep resting.

If someone comes up with a install time helper that does this conditional
moving then I'll use that.

 - Craig

Bug#952667: fscrypt: Please package fscrypt 2.6, it has a new policy that is said to be much better

2020-02-27 Thread valette

Source: fscrypt
Version: 0.2.5-2
Severity: wishlist

Discussing bugs, I have been told to use the new version to reproduce and if
possible to move to the new policy that is said to be much more robust.

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.4.22 (SMP w/2 CPU cores; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=fr_FR.UTF8, LC_CTYPE=fr_FR.UTF8 (charmap=UTF-8), LANGUAGE= 
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)

Bug#952639: src:budgie-desktop: Compile using mutter-6

2020-02-27 Thread David Mohammed

ah  - I see its in the new queue.  I'll have to wait until the
archive-admins have accepted it so that I can test build followed by
an upload.

On Wed, 26 Feb 2020 at 18:50, Marco Trevisan  wrote:
>
> Il 26/02/20 19:13, David Mohammed ha scritto:
> > Thx. Has mutter 6 been uploaded yet? If so... experimental or unstable?
>
> Yes, it's in experimental so far.
>
> mutter (3.35.91-1) experimental

Bug#952666: pure-ftpd: CVE-2020-9274

2020-02-27 Thread Salvatore Bonaccorso

Source: pure-ftpd
Version: 1.0.49-3
Severity: important
Tags: security upstream

Hi,

The following vulnerability was published for pure-ftpd.

CVE-2020-9274[0]:
| An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer
| vulnerability has been detected in the diraliases linked list. When
| the *lookup_alias(const char alias) or print_aliases(void) function is
| called, they fail to correctly detect the end of the linked list and
| try to access a non-existent list member. This is related to
| init_aliases in diraliases.c.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2020-9274
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9274
[1] 
https://github.com/jedisct1/pure-ftpd/commit/8d0d42542e2cb7a56d645fbe4d0ef436e38bcefa

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Bug#888705: abseil-cpp packaging

2020-02-27 Thread Olaf van der Spek

Op do 27 feb. 2020 om 06:54 schreef László Böszörményi :
>  Are you going to rename it to abseil-cpp (as Google has abseil-python
> as well, make a disparity between the two)?

Python libraries use a "python3-" prefix while C/C++ libraries use a
"lib" prefix, so I don't think it makes sense to change the name.

Bug#952665: debian-edu-config: Don't do unnecessary wget to the internet

2020-02-27 Thread Petter Reinholdtsen

[Mike Gabriel]
> The dc=skole object in LDAP can reference a Firefox/Chromium default  
> homepage in its labeledURI field. If this URI points to some school  
> homepage on the internet, we observe bad system logon performance in  
> computer labs.

If you place (

Bug#952656: related upstream bug + behavior of upstream-provided package

2020-02-27 Thread Paolo Greppi

see: https://github.com/yarnpkg/yarn/issues/1390

upstream-provided package correctly reports the error:

docker run --rm -it debian:buster-slim /bin/bash

apt update && apt install -y curl gnupg2
curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add -
echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee
/etc/apt/sources.list.d/yarn.list
apt update && apt install -y yarn
apt remove ca-certificates
cat > package.json
{
"dependencies": {
"highlight.js": "^9.18.1"
}
}
^d
cat > yarn.lock
highlight.js@^9.18.1:
version "9.18.1"
resolved
"https://registry.yarnpkg.com/highlight.js/-/highlight.js-9.18.1.tgz#ed21aa001fe6252bb10a3d76d47573c6539fe13c;
integrity
sha512-OrVKYz70LHsnCgmbXctv/bfuvntIKDz177h0Co37DQ5jamGZLVmoCVMtjMtNZY3X9DrCcKfklHPNeA0uPZhSJg==
^d
yarn install --verbose
yarn install v1.22.0
warning package.json: No license field
verbose 0.77 Checking for configuration file "/.npmrc".
verbose 0.77 Checking for configuration file "/usr/local/share/.npmrc".
verbose 0.771 Checking for configuration file "/usr/etc/npmrc".
verbose 0.771 Checking for configuration file "/root/.npmrc".
verbose 0.771 Checking for configuration file "/.npmrc".
verbose 0.772 Checking for configuration file "/.yarnrc".
verbose 0.772 Checking for configuration file "/usr/local/share/.yarnrc".
verbose 0.773 Checking for configuration file "/usr/etc/yarnrc".
verbose 0.773 Checking for configuration file "/root/.yarnrc".
verbose 0.773 Checking for configuration file "/.yarnrc".
verbose 0.777 current time: 2020-02-27T08:00:59.988Z
verbose 0.813 Performing "GET" request to "https://yarnpkg.com/latest-version;.
warning No license field
[1/4] Resolving packages...
[2/4] Fetching packages...
verbose 0.877 Performing "GET" request to
"https://registry.yarnpkg.com/highlight.js/-/highlight.js-9.18.1.tgz;.
verbose 0.968 Error: unable to get local issuer certificate
at TLSSocket.onConnectSecure (_tls_wrap.js:1055:34)
at TLSSocket.emit (events.js:189:13)
at TLSSocket._finishInit (_tls_wrap.js:633:8)
error An unexpected error occurred:
"https://registry.yarnpkg.com/highlight.js/-/highlight.js-9.18.1.tgz: unable to
get local issuer certificate".
info If you think this is a bug, please open a bug report with the information
provided in "/yarn-error.log".
info Visit https://yarnpkg.com/en/docs/cli/install for documentation about this
command.

1 2 >

1 - 100 of 150 matches

Mail list logo