Processed: block 724375 with 719468
Processing commands for cont...@bugs.debian.org: > block 724375 with 719468 Bug #724375 [src:gcc-h8300-hms] Please stop build depending on automake1.4, automake1.9 and automake1.10 724375 was not blocked by any bugs. 724375 was not blocking any bugs. Added blocking bug(s) of 724375: 719468 > thanks Stopping processing here. Please contact me if you need assistance. -- 724375: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724375 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Processed: block 724379 with 669513
Processing commands for cont...@bugs.debian.org: > block 724379 with 669513 Bug #724379 [src:gnat-4.4] Please stop build depending on automake1.4, automake1.9 and automake1.10 724379 was not blocked by any bugs. 724379 was not blocking any bugs. Added blocking bug(s) of 724379: 669513 and 707277 > thanks Stopping processing here. Please contact me if you need assistance. -- 724379: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724379 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#736565: FTBFS on non-"PC" architectures: FAIL: scram_mt.test
Le Mon, Mar 10, 2014 at 12:13:34AM +1100, Aníbal Monsalve Salazar a écrit : > On Sun, Mar 09, 2014 at 07:58:25PM +0900, Charles Plessy wrote: > > > > Speaking of Upstream, I see a new release, version 1.13.5. Would you > > like me to upload it ? > > Yes, please. Uploaded ! Sorry for the delay. Charles -- Charles Plessy Debian Med packaging team, http://www.debian.org/devel/debian-med Tsurumi, Kanagawa, Japan -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#559783: Upping the severity
> > Increasing the severity since this prevents new uploads as it fails > > the embedded library check. > Hi, Eric! > cve-2009-3720 has closed long ago. > also upstream is dead (only security problems are fixed). > Do You have any other (not cve-2009-3720) causes to keep severity > serious? Yes, ftp master will not accept uploads due to the embedded libraries so it's effectively FTBFS. -- Eric Dorland ICQ: #61138586, Jabber: ho...@jabber.com signature.asc Description: Digital signature
Processed: block 549098 with 559783
Processing commands for cont...@bugs.debian.org: > block 549098 with 559783 Bug #549098 [src:centerim] centerim: Pending removal of automake{1.4,1.7}, please update for automake1.9 or higher Bug #724002 [src:centerim] Please stop build depending on automake1.4, automake1.9 and automake1.10 549098 was not blocked by any bugs. 549098 was not blocking any bugs. Added blocking bug(s) of 549098: 559783 724002 was not blocked by any bugs. 724002 was not blocking any bugs. Added blocking bug(s) of 724002: 559783 > thanks Stopping processing here. Please contact me if you need assistance. -- 549098: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=549098 724002: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724002 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#730960: Does not (or no longer?) depend on Ruby 1.8
reopen 730960 tags 730960 + pending thanks David Suárez dijo [Fri, Mar 14, 2014 at 07:29:52PM +0100]: > Maybe I miss something, but on current unstable version (0.6.5-7), we have: > > > Vcs-Browser: http://git.debian.org/?p=pkg-ruby-extras/ruby-bdb.git;a=summary > > Homepage: https://rubyforge.org/projects/bdb/ > > XS-Ruby-Versions: ruby1.8 Ugh, I'm sorry - I guess I just checked on the changelog entry in the git tree, and it seemed to have been uploaded already! I'm reopening the bug, but tagging it as pending. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Processed: Re: Does not (or no longer?) depend on Ruby 1.8
Processing commands for cont...@bugs.debian.org: > reopen 730960 Bug #730960 {Done: Gunnar Wolf } [src:ruby-bdb] ruby-bdb: FTBFS: Hard dependency on ruby1.8 Bug reopened Ignoring request to alter fixed versions of bug #730960 to the same values previously set > tags 730960 + pending Bug #730960 [src:ruby-bdb] ruby-bdb: FTBFS: Hard dependency on ruby1.8 Added tag(s) pending. > thanks Stopping processing here. Please contact me if you need assistance. -- 730960: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730960 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Processed: severity of 741607 is wishlist
Processing commands for cont...@bugs.debian.org: > severity 741607 wishlist Bug #741607 [gmp] please merge GMP's upstream licensing changes Severity set to 'wishlist' from 'critical' > thanks Stopping processing here. Please contact me if you need assistance. -- 741607: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741607 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741656: grub-common: grub-mkrescue lost its -J flag, d-i now FTBFS on kfreebsd-*
[ cc-ing debian-boot@ for information. ] Cyril Brulebois (2014-03-15): > Package: grub-common > Version: 2.02~beta2-7 > Severity: serious > File: /usr/bin/grub-mkrescue > Tags: d-i > Justification: triggers FTBFS > > Hi, > > so there are some grub-* packages used in debian-installer's build-deps, > and grub-common is among them, since grub-mkrescue is used on kfreebsd-*. > It apparently lost its -J flag, making debian-installer FTBFS on those > architectures. Excerpt from a daily build log after 2014-03-10: > | # Create the ISO with Joliet extensions, needed for win32-loader.ini > | grub-mkrescue --output=./tmp/netboot-9/mini.iso ./tmp/netboot-9/cd_tree -J > | grub-mkrescue: invalid option -- 'J' > | Try 'grub-mkrescue --help' or 'grub-mkrescue --usage' for more information. > | make[2]: *** [arch_miniiso] Error 64 That this option gets rejected isn't entirely surprising given we previously had a pass-through for unknown options: grub2-2.00/util/grub-mkrescue.in (shell script): | # Check the arguments. | while test $# -gt 0 | do | option=$1 | shift | | case "$option" in … | *) | source="${source} ${option} $@"; break ;; | esac | done while lastest upload has a version rewritten in C and rejecting unknown options instead of passing them through: grub2-2.02~beta2/util/grub-mkrescue.c: | static struct argp_option options[] = { … | {0, 0, 0, 0, 0, 0} | }; | | argp_parser (int key, char *arg, struct argp_state *state) | { | if (grub_install_parse (key, arg)) | return 0; | switch (key) | { … | default: | return ARGP_ERR_UNKNOWN; | } | } [BTW the tag for -7 isn't to be found in the git repository right now.] Mraw, KiBi. signature.asc Description: Digital signature
Bug#741656: grub-common: grub-mkrescue lost its -J flag, d-i now FTBFS on kfreebsd-*
Package: grub-common Version: 2.02~beta2-7 Severity: serious File: /usr/bin/grub-mkrescue Tags: d-i Justification: triggers FTBFS Hi, so there are some grub-* packages used in debian-installer's build-deps, and grub-common is among them, since grub-mkrescue is used on kfreebsd-*. It apparently lost its -J flag, making debian-installer FTBFS on those architectures. Excerpt from a daily build log after 2014-03-10: | # Create the ISO with Joliet extensions, needed for win32-loader.ini | grub-mkrescue --output=./tmp/netboot-9/mini.iso ./tmp/netboot-9/cd_tree -J | grub-mkrescue: invalid option -- 'J' | Try 'grub-mkrescue --help' or 'grub-mkrescue --usage' for more information. | make[2]: *** [arch_miniiso] Error 64 Not too nice when I'm about to upload debian-installer for jessie alpha 1. :( Mraw, KiBi. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#688173: Info received (Please port to libnl-3.x)
Is there any chance to see this bug fixed? Apparently upstream has released versions which have been ported to libnl-3. So an update would be appreciated. -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth? signature.asc Description: OpenPGP digital signature
Bug#741652: grub-pc-bin: No boot, cannot find root partition
Source: grub-pc-bin Version: 2.02~beta2-7 Severity: critical Justification: breaks the whole system Dear Maintainer, * What led up to the situation? Upgrade from 2.00-22 to 2.02~beta2-7 * What exactly did you do (or not do) that was effective (or ineffective)? Found reference to bug 741464, not exactly the same but worth trying, nothing else found on Net Boot with installation disc, mount LVM partitions, chroot, downgrade to 2.00-22 using dpkg, update-grub * What was the outcome of this action? Booted OK, then downgraded related 2.02~beta2-7 packages Additional information: during boot, was dropped to an initramfs shell when root partition not found. Only two partitions found, the reiserfs sda1 /boot and the swap partition in LVM, problem seemed to be failure of reiserfs in LVM. Tried with rootdelay=30 seconds, no different -- Package-specific info: *** BEGIN /proc/mounts /dev/mapper/first-root / reiserfs rw,relatime 0 0 /dev/mapper/first-backup /backup reiserfs rw,relatime 0 0 /dev/sda1 /boot reiserfs rw,relatime,notail 0 0 /dev/mapper/first-home /home reiserfs rw,relatime 0 0 /dev/mapper/first-tmp /tmp reiserfs rw,relatime 0 0 /dev/mapper/first-usr /usr reiserfs rw,relatime 0 0 /dev/mapper/first-var /var reiserfs rw,relatime 0 0 *** END /proc/mounts *** BEGIN /boot/grub/device.map (hd0) /dev/disk/by-id/ata-Hitachi_HDT721032SLA360_STF204ML0XDJMP *** END /boot/grub/device.map *** BEGIN /boot/grub/grub.cfg # # DO NOT EDIT THIS FILE # # It is automatically generated by grub-mkconfig using templates # from /etc/grub.d and settings from /etc/default/grub # ### BEGIN /etc/grub.d/00_header ### if [ -s $prefix/grubenv ]; then set have_grubenv=true load_env fi set default="0" if [ x"${feature_menuentry_id}" = xy ]; then menuentry_id_option="--id" else menuentry_id_option="" fi export menuentry_id_option if [ "${prev_saved_entry}" ]; then set saved_entry="${prev_saved_entry}" save_env saved_entry set prev_saved_entry= save_env prev_saved_entry set boot_once=true fi function savedefault { if [ -z "${boot_once}" ]; then saved_entry="${chosen}" save_env saved_entry fi } function load_video { if [ x$feature_all_video_module = xy ]; then insmod all_video else insmod efi_gop insmod efi_uga insmod ieee1275_fb insmod vbe insmod vga insmod video_bochs insmod video_cirrus fi } if [ x$feature_default_font_path = xy ] ; then font=unicode else insmod part_msdos insmod lvm insmod reiserfs set root='lvm/first-usr' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='lvm/first-usr' fcd5801a-eb3e-4eeb-b44c-fd00eb5cbab3 else search --no-floppy --fs-uuid --set=root fcd5801a-eb3e-4eeb-b44c-fd00eb5cbab3 fi font="/share/grub/unicode.pf2" fi if loadfont $font ; then set gfxmode=auto load_video insmod gfxterm set locale_dir=$prefix/locale set lang=en_GB insmod gettext fi terminal_output gfxterm if [ "${recordfail}" = 1 ] ; then set timeout=-1 else set timeout=5 fi ### END /etc/grub.d/00_header ### ### BEGIN /etc/grub.d/05_debian_theme ### insmod part_msdos insmod lvm insmod reiserfs set root='lvm/first-usr' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='lvm/first-usr' fcd5801a-eb3e-4eeb-b44c-fd00eb5cbab3 else search --no-floppy --fs-uuid --set=root fcd5801a-eb3e-4eeb-b44c-fd00eb5cbab3 fi insmod png if background_image /share/images/desktop-base/joy-grub.png; then set color_normal=white/black set color_highlight=black/white else set menu_color_normal=cyan/blue set menu_color_highlight=white/blue fi ### END /etc/grub.d/05_debian_theme ### ### BEGIN /etc/grub.d/10_linux ### function gfxmode { set gfxpayload="${1}" } set linux_gfx_mode= export linux_gfx_mode menuentry 'Debian GNU/Linux' --class debian --class gnu-linux --class gnu --class os $menuentry_id_option 'gnulinux-simple-9bc3e03d-ce1a-403a-871b-fb7aa701b816' { load_video insmod gzio insmod part_msdos insmod reiserfs set root='hd0,msdos1' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint-bios=hd0,msdos1 --hint-efi=hd0,msdos1 --hint-baremetal=ahci0,msdos1 --hint='hd0,msdos1' d73f3638-d220-48ef-8ac9-915a1cf20aab else search --no-floppy --fs-uuid --set=root d73f3638-d220-48ef-8ac9-915a1cf20aab fi echo'Loading Linux 3.13-1-amd64 ...' linux /vmlinuz-3.13-1-amd64 root=/dev/mapper/first-root ro rootdelay=10 echo'Loading initial ramdisk ...' initrd /initrd.img-3.13-1-amd64 } submenu 'Advanced options for Debian GNU/Linux' $menuentry_id_option 'gnulinux-advanced-9bc3e03d-ce1a-403a-871b-fb7aa701b816' { menuentry 'Debian GNU/Linux, with Linux 3.13-1-amd64' --cl
Bug#724688: libxul with icedove 24.3.0 and lightning 2.6.4
Many thanks for the guidance. I missed the connection to iceowl-extension somehow. -Andrew -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741236: [Pkg-xfce-devel] Bug#741236: re
On Thu, Mar 13, 2014 at 09:11:19PM +0400, Alexey Petrovsky wrote: > I have all the same. Is libpam-systemd installed? Can you install it and see if it fixes the problem? Regards, -- Yves-Alexis Perez signature.asc Description: Digital signature
Bug#741512: marked as done (clamav-base configure error ('/usr/share/doc/clamav-base/examples/clamd.conf does not exist!'))
Your message dated Fri, 14 Mar 2014 21:19:25 + with message-id and subject line Bug#741512: fixed in clamav 0.98.1+dfsg-3 has caused the Debian Bug report #741512, regarding clamav-base configure error ('/usr/share/doc/clamav-base/examples/clamd.conf does not exist!') to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 741512: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741512 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Package: clamav Version: 0.98.1+dfsg-1+deb6u1 Severity: normal Upgrade to clamav 0.98.1+dfsg-1+deb6u1 (from squeeze-updates) failed with the following error: Setting up clamav-base (0.98.1+dfsg-1+deb6u1) ... Error: The new file /usr/share/doc/clamav-base/examples/clamd.conf does not exist! dpkg: error processing clamav-base (--configure): subprocess installed post-installation script returned error exit status 1 The following was sufficient to work around the problem: cp /usr/share/doc/clamav-base/examples/clamd.conf.sample /usr/share/doc/clamav-base/examples/clamd.conf dpkg --pending --configure -- System Information: Debian Release: 6.0.9 APT prefers oldstable-updates APT policy: (500, 'oldstable-updates'), (500, 'oldstable') Architecture: i386 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/dash Versions of packages clamav depends on: ii clamav-freshclam [c 0.98.1+dfsg-1+deb6u1 anti-virus utility for Unix - viru ii libc6 2.11.3-4 Embedded GNU C Library: Shared lib ii libclamav6 0.98.1+dfsg-1+deb6u1 anti-virus utility for Unix - libr ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime Versions of packages clamav recommends: ii clamav-base 0.98.1+dfsg-1+deb6u1 anti-virus utility for Unix - base Versions of packages clamav suggests: ii clamav-docs 0.98.1+dfsg-1+deb6u1 anti-virus utility for Unix - docu -- no debconf information --- End Message --- --- Begin Message --- Source: clamav Source-Version: 0.98.1+dfsg-3 We believe that the bug you reported is fixed in the latest version of clamav, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 741...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Scott Kitterman (supplier of updated clamav package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 14 Mar 2014 16:30:45 -0400 Source: clamav Binary: clamav-base clamav-docs clamav-dbg clamav libclamav-dev libclamav6 clamav-daemon clamav-testfiles clamav-freshclam clamav-milter Architecture: source all i386 Version: 0.98.1+dfsg-3 Distribution: unstable Urgency: medium Maintainer: ClamAV Team Changed-By: Scott Kitterman Description: clamav - anti-virus utility for Unix - command-line interface clamav-base - anti-virus utility for Unix - base package clamav-daemon - anti-virus utility for Unix - scanner daemon clamav-dbg - debug symbols for ClamAV clamav-docs - anti-virus utility for Unix - documentation clamav-freshclam - anti-virus utility for Unix - virus database update utility clamav-milter - anti-virus utility for Unix - sendmail integration clamav-testfiles - anti-virus utility for Unix - test files libclamav-dev - anti-virus utility for Unix - development files libclamav6 - anti-virus utility for Unix - library Closes: 741512 Changes: clamav (0.98.1+dfsg-3) unstable; urgency=medium . [ Scott Kitterman ] * Switch to format 3.0 (quilt) to enable use of git-dpm * Extract existing inline changes into new commits/dpm patches - Change paths in sample conf file to match Debian - Add patch so that RAR tests are not expected to pass with RAR disabled - Add 0003-configure-use-pkg-config-for-check-so-test-is-detect.patch - Add 0004-Stop-using-a-cargo-culted-syscall-table-and-trust-th.patch - Add 0005-configure.ac-patches-to-got-with-autoreconf-and-auto.patch - Add 0006-Fix-STAT64-definition-and-add-missing-includes.patch * Fix vcs-field-not-canonical for both git and web access * Add libxml2-dev to build-depends for dmg and xar suppor
Bug#741620: upgrade broke starttls?
severity 741620 grave thanks On 03/14/2014 04:38 PM, Joey Hess wrote: > Package: courier-imap-ssl > Version: 4.15-1 > Severity: normal > > Establishing connection to kitenet.net:143 > ERROR: While attempting to sync account 'joey' > command: CAPABILITY => socket error: - [Errno 1] > _ssl.c:1429: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number > > This seems to have been caused by upgrading courier. > Since ssl is involved, I think oflinimap must have tried to STARTTLS, > which its docs say it will do automatically when (accidentially) > configured to not use imaps. > > The good thing about this bug is I probably only configured that while on some > horrible imaps blocking network, so I fixed my offlinimap config to use imaps > and that works. > I'm increasing the severity until I have time to look at this bug - I don't want to break STARTTLS in Debian testing. Thanks for reporting Regards Racke -- Perl and Dancer Development Visit our Open Source conference on E-commerce: http://www.ecommerce-innovation.com/ -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Processed: Re: Bug#741620: upgrade broke starttls?
Processing commands for cont...@bugs.debian.org: > severity 741620 grave Bug #741620 [courier-imap-ssl] upgrade broke starttls? Severity set to 'grave' from 'normal' > thanks Stopping processing here. Please contact me if you need assistance. -- 741620: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741620 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#740506: libetpan: needs update for db5.3
Hi Hideki, On Sat, Mar 08, 2014 at 09:14:37AM +0900, Hideki Yamane wrote: > control: tags -1 fixed-upstream patch pending > > On Sun, 2 Mar 2014 13:50:35 +0100 > Julien Cristau wrote: > > db5.1 is being replaced by 5.3, but libetpan doesn't seem to want to > > build against the latter (configure checks for a list of versions > > explicitly, not including 5.3, and chooses 5.1 if it finds it before it > > checks for the unversioned libdb.so). > > It's just because upstream doesn't know about 5.3, I've pull requested it > to upstream and merged. see https://github.com/dinhviethoa/libetpan/pull/115 > So I'll upload updated package to 10-days delayed queue. > > > $ LANG=C dpkg --info ../build/libetpan16_1.1-2.1_amd64.deb > > (snip) > > Version: 1.1-2.1 > > Architecture: amd64 > > Maintainer: Ricardo Mones > > Installed-Size: 875 > > Depends: libc6 (>= 2.15), libcurl3-gnutls (>= 7.16.2), libdb5.3, libexpat1 > > (>= 2.0.1), libgcc1 (>= 1:4.1.1), libgcrypt11 (>= 1.4.5), libgnutls26 (>= > > 2.12.17-0), libgpg-error0 (>= 1.10), liblockfile1 (>= 1.0), libsasl2-2, > > libstdc++6 (>= 4.1.1), zlib1g (>= 1:1.1.4) > > Section: libs > > (snip) > > NMU package depends to libdb5.3 :) Nice, thanks! But, shouldn't this be uploaded to unstable? > Also, upstream has already shipped version 1.3pre2, we should update our > package version before jessie release, IMHO. Well, no problem with this, of course :) Pinged you on irc, but got no response, so here I go again: Are you interested on helping with libetpan maintenance? I'm planning to move yoush git repo to collab-maint (already talked with him and he agreed), but have no experience with gbp, and not much time to take care of libetpan itself, so any help is welcome. regards, -- Ricardo Mones ~ Absence of evidence is not evidence of absence. Carl Sagan signature.asc Description: Digital signature
Processed: Re: Bug#741557: libapache2-mod-gnutls: apache will not start with mod_gnutls enabled
Processing control commands: > retitle -1 libapache2-mod-gnutls: apache will not start if mod_authnz_ldap is > loaded before mod_gnutls Bug #741557 [libapache2-mod-gnutls] libapache2-mod-gnutls: apache will not start with mod_gnutls enabled Changed Bug title to 'libapache2-mod-gnutls: apache will not start if mod_authnz_ldap is loaded before mod_gnutls' from 'libapache2-mod-gnutls: apache will not start with mod_gnutls enabled' -- 741557: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741557 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741557: libapache2-mod-gnutls: apache will not start with mod_gnutls enabled
Control: retitle -1 libapache2-mod-gnutls: apache will not start if mod_authnz_ldap is loaded before mod_gnutls On Fri 2014-03-14 12:29:35 -0400, Clint Adams wrote: > On Thu, Mar 13, 2014 at 10:53:31PM -0400, Daniel Kahn Gillmor wrote: >> I'm not able to replicate this: > > Sorry, authnz_ldap also needs to be loaded. indeed: root@sid:~# a2enmod authnz_ldap Considering dependency ldap for authnz_ldap: Enabling module ldap. Enabling module authnz_ldap. To activate the new configuration, you need to run: service apache2 restart root@sid:~# service apache2 restart [FAIL] Restarting web server: apache2 failed! [warn] The apache2 configtest failed. ... (warning). Output of config test was: [Fri Mar 14 14:46:41.352172 2014] [:emerg] [pid 2813:tid 3074697024] gnutls_check_version() failed. Required: gnutls-3.2.11 Found: gnutls-2.12.23 AH00013: Pre-configuration failed Action 'configtest' failed. The Apache error log may have more information. root@sid:~# however, if i sneakily rearrange the order of module loading, apache at least can start up: root@sid:~# mv /etc/apache2/mods-enabled/{,zz.}authnz_ldap.load root@sid:~# service apache2 restart [ ok ] Restarting web server: apache2. root@sid:~# (this breaks "a2dismod authnz_ldap", of course) (i note that mod_ldap.so also links to libgnutls26.so, but doesn't trigger the problem because ldap.load sorts lexicographically after gnutls.load) So, should we go ahead and have the same conversation about libgnutls28-dev vs libgnutls-dev with the ldap folks? or should we ask the apache folks about sorting modules differently? or should we nudge the gmp folks to release a new version sooner rather than later? or all of the above? in a twisty maze of licenses, in danger of being eaten by a grue, --dkg pgpKWvHqHQpF9.pgp Description: PGP signature
Bug#730960: Does not (or no longer?) depend on Ruby 1.8
Hi, El Jueves, 13 de marzo de 2014 18:45:43 Gunnar Wolf escribió: > Hi, > > Reviewing ruby-bdb, I did not find any references either in its > current Debian packaging or in the source itself to Ruby 1.8 (outside > of historical comments): > > $ grep -ri '1\.8' . > ./tests/runit_.rb:if RUBY_VERSION >= "1.8" > ./bdbxml1/Changes:* adapted for 1.8 > ./README.en: For Berkeley DB 1.85 and 1.86 see bdb1 > ./debian/changelog:for libdb-ruby1.8 > ./debian/changelog: * debian/rules: running tests on install/libdb-ruby1.8 > instead of ./debian/changelog:binary/libdb-ruby1.8, because the binary > target for ruby1.8 is run just ./debian/changelog:ruby1.9 and not with > ruby1.8. > ./debian/rules:#export DH_RUBY_IGNORE_TESTS=ruby1.8 ruby1.9.1 > require-rubygems ./Changes:-- 0.1.8 > ./Changes:* adapted for 1.8.0 > ./Changes:* corrected various bug with 1.8.0 > ./util/marshal16.c: marshal.c from 1.6.8 adapted for 1.8.0 Maybe I miss something, but on current unstable version (0.6.5-7), we have: > Vcs-Browser: http://git.debian.org/?p=pkg-ruby-extras/ruby-bdb.git;a=summary > Homepage: https://rubyforge.org/projects/bdb/ > XS-Ruby-Versions: ruby1.8 David -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#729873: marked as done (libjpeg-turbo: CVE-2013-6629 CVE-2013-6630)
Your message dated Fri, 14 Mar 2014 18:18:33 + with message-id and subject line Bug#729873: fixed in libjpeg-turbo 1.3.0-3 has caused the Debian Bug report #729873, regarding libjpeg-turbo: CVE-2013-6629 CVE-2013-6630 to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 729873: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729873 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Package: libjpeg-turbo Severity: important Tags: security Justification: user security hole Originally announced through Google Chrome: http://googlechromereleases.blogspot.de/2013/11/stable-channel-update.html More information in this posting by Michal Zalewski: http://packetstormsecurity.com/files/123989/IJG-jpeg6b-libjpeg-turbo-Uninitialized-Memory.html Cheers, Moritz --- End Message --- --- Begin Message --- Source: libjpeg-turbo Source-Version: 1.3.0-3 We believe that the bug you reported is fixed in the latest version of libjpeg-turbo, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 729...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Mike Gabriel (supplier of updated libjpeg-turbo package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 14 Mar 2014 18:56:25 +0100 Source: libjpeg-turbo Binary: libturbojpeg1 libturbojpeg1-dev libjpeg-turbo-test Architecture: source amd64 Version: 1.3.0-3 Distribution: unstable Urgency: low Maintainer: Debian TigerVNC Packaging Team Changed-By: Mike Gabriel Description: libjpeg-turbo-test - Program for testing libjpeg-turbo libturbojpeg1 - TurboJPEG runtime library - SIMD optimized libturbojpeg1-dev - Development files for the turbo JPEG library Closes: 729873 Changes: libjpeg-turbo (1.3.0-3) unstable; urgency=low . * debian/patches: (Closes: #729873) + Add patch 004_CVE-2013-6629.patch. Check for duplications in jdmarker.c (CVE-2013-6629). + Add patch 005_CVE-2013-6630.patch: Properly clear out memory in jdmarker.c. (CVE-2013-6630). Checksums-Sha1: 9ce639825915da5a8704b7c46e98d43781a199a1 2220 libjpeg-turbo_1.3.0-3.dsc 631b6084ccbdcacfeb5a81b12733898408f35f59 9220 libjpeg-turbo_1.3.0-3.debian.tar.xz 10c15968bad47c9a3948dadbb416aa765f82e23d 153954 libturbojpeg1_1.3.0-3_amd64.deb 72147d88cd602873d03f306223d0b1a225b05dd3 143782 libturbojpeg1-dev_1.3.0-3_amd64.deb bba5005475a2ade9d881ab01829fbe0df5e496db 21906 libjpeg-turbo-test_1.3.0-3_amd64.deb Checksums-Sha256: 2a5e832846494ef0e4c2a0589fe2a70ba8628698005749374fec67d6d7a3d5d8 2220 libjpeg-turbo_1.3.0-3.dsc 6908bb7c798c56cd6cc6b727ef492666b6f4765e96f51c05c6b825bd53231c24 9220 libjpeg-turbo_1.3.0-3.debian.tar.xz 624c6dca2d048d69ee7f256e3217d76bf485322991550f5238556572ef476bd1 153954 libturbojpeg1_1.3.0-3_amd64.deb a8c56051a8a177672e5bde2415f5c7f72f3510d0dc6449698fe887e4a9a72793 143782 libturbojpeg1-dev_1.3.0-3_amd64.deb 3ed7a0e911a07e2dfad277d3167fdb3793908f65beddd1d14df2cb41adfad970 21906 libjpeg-turbo-test_1.3.0-3_amd64.deb Files: 5b47e80769f033e154b9ae957da73cf0 2220 graphics optional libjpeg-turbo_1.3.0-3.dsc d5567a6cc53e8651eb43686b0a5e834c 9220 graphics optional libjpeg-turbo_1.3.0-3.debian.tar.xz 1a70d2aa72132a4e1a78863722dc174b 153954 libs optional libturbojpeg1_1.3.0-3_amd64.deb 13d4fbfc42590e129b61452d9a1cf871 143782 libdevel optional libturbojpeg1-dev_1.3.0-3_amd64.deb c28b64edf5013405a7d54411985661ab 21906 debug extra libjpeg-turbo-test_1.3.0-3_amd64.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJTI0P8AAoJEJr0azAldxsxfcMP/REuVHjoTn/U0cjdhbVrhM9l im47n77e+k95c+8dRiOd92RhwG5TOtlD5l7qPcnVtZh5Zww378OXU0nKaFcrMGMN ZTMu7ol77FqdzqFHba5iyAJxBXnY7VkmsLTu/hRe4d4qmdxJZ7l/r/dXlWoivHFM 1LYA2eCzMCACZoT5tZkr96n5/QPDHZ3qrHWyojXASZvUvq6Ntm96NlDJDbbd43eT gRgJ2ZLc649u1Vs/7tEJiY8QK53fqQ+XlbgShOJeWjJQY/vyc07+dxmNx1TAkiMy bEBjx9/DrLbjZX2ljoWOjic5ixoCh9BKa1JlO83Q1GH7ZwKfWmeRNNT4K7CGt8el k7hn58KA5diiLWKEfzDNVijcYXbiFSG1ULShBbb4EZQSzTdqqwVk1r54kYQ4G2KT MBlNB5L/VB+pHVxC7AyfkgiGSJVZ1La0/N0W6PpF8SYgp57xxxcG2syv0H5l2pJv AGl+47w3IsdqsEAwhOc6WaABQ7s9aOqjEQJXhpneiFRNSLCxhjuQs2bP7FXZjWTN BdjGtr6lWNoHAen+9vrbLw9f6PyqvWMpExZs+gBv3B4P5lDDXW
Bug#741637: libxapian22: Please raise package priority to "important"
Package: libxapian22 Version: 1.2.17-1 Severity: serious Justification: Policy 2.5 -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, during testing of a script to check for Policy 2.5 requirments, I saw that aptitude (priority important) depends on libxapian22 (Prioity optional). Quoting the policy: Packages must not depend on packages with lower priority values (excluding build-time dependencies). In order to ensure this, the priorities of one or more packages may need to be adjusted. So please adjust the prioity to important with your next upload and also trigger ftpmasters afterwards to adjust the "override disparities" in the archive. Argueable, this can also be seen as a bug in aptitude, but I think that aptitude deserves "important". If you disagree, just reassign this bug to aptitude) Best regards, Tobias Frost - -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.13-1-amd64 (SMP w/4 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libxapian22 depends on: ii libc6 2.18-4 ii libgcc1 1:4.8.2-16 ii libstdc++6 4.8.2-16 ii libuuid12.20.1-5.6 ii zlib1g 1:1.2.8.dfsg-1 libxapian22 recommends no packages. Versions of packages libxapian22 suggests: pn xapian-tools - -- no debconf information -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCAAGBQJTI0afAAoJEJFk+h0XvV02IWcP/1iIqXBwTPTIRN+1ncSNh86J xEVmGCVyHyOJMEjgJGrRY6XCv7c15WUJi/R2drwvVZg/RZn6PZHquxZe3Qg3N7KO um1Y23/sGGiH1YkKZXCqbUY1Y+XuSOkQwjKPbQkUZox0AKLLtr8yNtOtSp30nwOV 7euQEYuxonHJJiGsHufB4TJF1jc6V3cW0oa5pHZJb972eTwPx99RNH2LIgKRGvkb P1Hvt1n885asl4ZV6tnu2tjXbmnVYuBzDAXwKdkzyXY98DLox5isEisBcbAdSyQ8 nA1EJ9Lbt3t68gVwlAg3egrG+8yepsvDcJy2vcj9gVHdBPl7w9x8cgtE99C5vYcP 9l5OONH/ayeRVqzl6/vFp1qAz410KAX8ZrjQuB2lCMzTZU6yejBXyODR5451Yfvc ALW97IzATbyM0y3yys1w2vIc7BpRcg47Ir4p4fKqmyPDF54MsYJNw0gMsQZoa4xX JuNS2T6Za9dg2GOHWkyYx9kOzp/9MJyg9ppmXId0KWTVC5if7dL8NEOvh+VAhVd1 8evPgqxt29rmshbQLtD8Ky7NpI9d3lZFTf4h0EV4L4I6qiNt4lHSBXVNxLZY3YqF PPGqNZ0jHczvzGieI7mp2tTC4x7afBY/9oiuN2BHcbUVe9iS1W7HGrXg6ouCMfZQ v8pWN9YvIFGS1ONjlI5h =5oJZ -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741635: libsqlite3-0: Please raise package priority to "important"
Package: libsqlite3-0 Severity: serious Justification: Policy 2.5 -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, during testing of a script to check for Policy 2.5 requirments, I saw that aptitude (priority important) depends on libsqlite3-0 (Prioity standard). Quoting the policy: Packages must not depend on packages with lower priority values (excluding build-time dependencies). In order to ensure this, the priorities of one or more packages may need to be adjusted. So please adjust the prioity to important with your next upload and also trigger ftpmasters afterwards to adjust the "override disparities" in the archive. Argueable, this can also be seen as a bug in aptitude, but I think that aptitude deserves "important". If you disagree, just reassign this bug to aptitude) Best regards, Tobias Frost - -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.13-1-amd64 (SMP w/4 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCAAGBQJTI0SdAAoJEJFk+h0XvV02H1wQAJjmpRl4bU4gel/z9OaUDFzH XynPuPoIk3FArxD3IVNZxgEQvj4WNdn/pxf1bBKOkzlAc5CBReSMs5iGdinH6C5Z Vv1OSP6IPdX65sBnlNrOvm7d0Y3Q6AcDKMoczrzB/feeGLj2AWzhPEP5o70jhSeL TSivQFbaK/Mv+8ZPQIwng1O7E5MzugWkqaWx1rky9mEetlVna+eWp8B6FUi10rQm fpg5VCBbRYsn/f1q2SKqw9GYmdIh6vh3CuE3pGn6XyMMQZj2e3IVnMJIBxpZxjqS /YvvZfBNHwfLTuAHLoUh04C4Si8rJsDzhD0m+OpTk+cG0PbXYqikvyg5Lr9ryEbP EDBpZIW0jqwVC4oipZUwEPy/nTKygNOQXsN0zijUZgV4sRZdvmEWMiV4fN3AWi5V bj6MbMHao+VYBanavgS7urDlvu6q06khjTSmFeuZNr/3+EoyvAdz7hCupMl6zu2G FBsJ/kIo9glqZAnLBkkk5PvEx1cNcbizpOXaqSQ7E2cC8hjDfQWypNqOwW6dHGKS KbZpC3OA534JbbBdXO++wUg/Jrx+p9fIKuZudLM1vjpD4dtZpQPDA0XdK0NgN+A4 EW/ZaRpSvHWhbE67WVlvCJgshIzS/IS12FcyMeDi4W+3jBEkCEYcHVX2RwsSOeLJ UtLgE6zVVhvGre9WlyaX =kerD -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741568: lack of symbol versioning and gnutls mismatch results in problem
On Fri, Mar 14, 2014 at 09:25:19AM -0400, Daniel Kahn Gillmor wrote: > Clint, another option is for you to rebuild libmsv against > libcurl4-nss-dev until the libcurl4-gnutls mishegas is sorted out. the Thanks for this idea; I have done so. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741630: samplv1: FTBFS on i386, kfreebsd-i386: /usr/bin/ld: cannot find -lsamplv1
Source: samplv1 Version: 0.4.0-1 Severity: serious Justification: fails to build from source Tags: sid jessie samplv1 failed to build on the i386 and kfreebsd-i386 buildds: | g++ -c -pipe -D_FORTIFY_SOURCE=2 -ffast-math -O2 -Wall -W -D_REENTRANT -DDATADIR="/usr/share" -DQT_NO_DEBUG -DQT_XML_LIB -DQT_GUI_LIB -DQT_CORE_LIB -DQT_SHARED -I/usr/share/qt4/mkspecs/linux-g++ -I. -I/usr/include/qt4/QtCore -I/usr/include/qt4/QtGui -I/usr/include/qt4/QtXml -I/usr/include/qt4 -I/usr/local/include -I/usr/include -I/usr/include/qt4 -I/usr/include/qt4 -I.moc_jack -I.ui_jack -o .obj_jack/moc_samplv1widget_wave.o .moc_jack/moc_samplv1widget_wave.cpp | /usr/bin/ld: cannot find -lsamplv1 | collect2: error: ld returned 1 exit status A full build log is available at https://buildd.debian.org/status/fetch.php?pkg=samplv1&arch=i386&ver=0.4.0-1&stamp=1394546433 Regards -- Sebastian Ramacher signature.asc Description: Digital signature
Bug#741600: 389-ds-base: CVE-2014-0132
On 14.03.2014 14:07, Moritz Muehlenhoff wrote: > Package: 389-ds-base > Severity: grave > Tags: security > Justification: user security hole > > Hi, > please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0132 for > details. Thanks, fixed in git.d.o. -- t -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741557: libapache2-mod-gnutls: apache will not start with mod_gnutls enabled
On Thu, Mar 13, 2014 at 10:53:31PM -0400, Daniel Kahn Gillmor wrote: > I'm not able to replicate this: Sorry, authnz_ldap also needs to be loaded. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741623: terminatorx: FTBFS on kfreebsd-*: too many arguments to function 'void append_alsa_device_list(GtkComboBoxText*)'
Source: terminatorx Version: 3.90-1 Severity: serious Justification: fails to build from source (but built successfully in the past) Tags: sid jessie terminatorx fails to build on kfreebsd-*: | g++ -DHAVE_CONFIG_H -I. -I.. -D_FORTIFY_SOURCE=2 -I/usr/include/libxml2 -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -finput-charset=utf-8 -DXML_MANUAL=\"/usr/share/gnome/help/terminatorX-manual/C/terminatorX-manual.xml\" -pthread -I/usr/include/gtk-2.0 -I/usr/lib/x86_64-kfreebsd-gnu/gtk-2.0/include -I/usr/include/atk-1.0 -I/usr/include/cairo -I/usr/include/gdk-pixbuf-2.0 -I/usr/include/pango-1.0 -I/usr/include/gio-unix-2.0/ -I/usr/include/freetype2 -I/usr/include/glib-2.0 -I/usr/lib/x86_64-kfreebsd-gnu/glib-2.0/include -I/usr/include/pixman-1 -I/usr/include/libpng12 -I/usr/include/libdrm -I/usr/include/harfbuzz-D_REENTRANT -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -c -o tX_engine.o tX_engine.cc | tX_dialog.cc: In function 'void init_tx_options(GtkWidget*)': | tX_dialog.cc:387:75: error: too many arguments to function 'void append_alsa_device_list(GtkComboBoxText*)' | append_alsa_device_list(GTK_COMBO_BOX_TEXT(combo), globals.alsa_device_id); |^ | tX_dialog.cc:248:6: note: declared here | void append_alsa_device_list(GtkComboBoxText *combo) { | ^ | make[5]: *** [tX_dialog.o] Error 1 See https://buildd.debian.org/status/fetch.php?pkg=terminatorx&arch=kfreebsd-amd64&ver=3.90-1&stamp=1394454594 for a full build log. Regards -- Sebastian Ramacher signature.asc Description: Digital signature
Bug#658896: Still an issue
Hi there, I just stumbled upon this bug as well. We're +/- one year after the wheezy release and this is still an issue. It seems as though one patch was able to fix the problem, and even though we're considering a change of librairies for jessie, it would be really helpful to fix this in wheezy. -- Gabriel Filion signature.asc Description: OpenPGP digital signature
Processed: Re: gst-plugins-good0.10: FTBFS: XML parser errors
Processing control commands: > tags -1 +fixed-upstream +patch Bug #739810 [src:gst-plugins-good0.10] gst-plugins-good0.10: FTBFS: XML parser errors Added tag(s) fixed-upstream. Bug #739810 [src:gst-plugins-good0.10] gst-plugins-good0.10: FTBFS: XML parser errors Added tag(s) patch. -- 739810: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739810 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#739810: gst-plugins-good0.10: FTBFS: XML parser errors
control: tags -1 +fixed-upstream +patch Hi, I've prepared patch for this bug as attached. Please consider to apply it. Thanks. -- Hideki Yamane diff -Nru gst-plugins-good0.10-0.10.31/debian/changelog gst-plugins-good0.10-0.10.31/debian/changelog --- gst-plugins-good0.10-0.10.31/debian/changelog 2013-11-23 05:20:30.0 +0900 +++ gst-plugins-good0.10-0.10.31/debian/changelog 2014-03-14 22:36:40.0 +0900 @@ -1,3 +1,13 @@ +gst-plugins-good0.10 (0.10.31-3+nmu3) unstable; urgency=low + + * Non-maintainer upload. + * debian/patches +- add bug#739810.patch + + Fix FTBFS, patch taken from upstream bugzilla (Closes: #739810) +Thanks to Marcin Juszkiewicz for the info. + + -- Hideki Yamane Fri, 14 Mar 2014 22:36:41 +0900 + gst-plugins-good0.10 (0.10.31-3+nmu2) UNRELEASED; urgency=low [Balint Reczey] diff -Nru gst-plugins-good0.10-0.10.31/debian/patches/bug#739810.patch gst-plugins-good0.10-0.10.31/debian/patches/bug#739810.patch --- gst-plugins-good0.10-0.10.31/debian/patches/bug#739810.patch 1970-01-01 09:00:00.0 +0900 +++ gst-plugins-good0.10-0.10.31/debian/patches/bug#739810.patch 2014-03-14 22:31:46.0 +0900 @@ -0,0 +1,53 @@ +From 2d489753eb7fe7571ac93b38a319bc59c7451d38 Mon Sep 17 00:00:00 2001 +From: Sebastian Rasmussen +Date: Tue, 11 Feb 2014 01:53:26 +0100 +Subject: [PATCH] docs: Rebalance docbook tags in comments + +Fixes https://bugzilla.gnome.org/show_bug.cgi?id=724085 +--- + gst/audiofx/audiocheblimit.c | 4 ++-- + gst/udp/gstudpsrc.c | 4 ++-- + 2 files changed, 4 insertions(+), 4 deletions(-) + +diff --git a/gst/audiofx/audiocheblimit.c b/gst/audiofx/audiocheblimit.c +index 549a9d2..7568d6a 100644 +--- a/gst/audiofx/audiocheblimit.c b/gst/audiofx/audiocheblimit.c +@@ -46,12 +46,12 @@ + * be at most this value. A lower ripple value will allow a faster rolloff. + * + * As a special case, a Chebyshev type 1 filter with no ripple is a Butterworth filter. +- * ++ * + * + * Be warned that a too large number of poles can produce noise. The most poles are possible with + * a cutoff frequency at a quarter of the sampling rate. + * +- * ++ * + * + * Example launch line + * |[ +diff --git a/gst/udp/gstudpsrc.c b/gst/udp/gstudpsrc.c +index c2cbd92..7dffef8 100644 +--- a/gst/udp/gstudpsrc.c b/gst/udp/gstudpsrc.c +@@ -78,14 +78,14 @@ + * + * The message is typically used to detect that no UDP arrives in the receiver + * because it is blocked by a firewall. +- * ++ * + * + * A custom file descriptor can be configured with the + * #GstUDPSrc:sockfd property. The socket will be closed when setting the + * element to READY by default. This behaviour can be + * overriden with the #GstUDPSrc:closefd property, in which case the application + * is responsible for closing the file descriptor. +- * ++ * + * + * Examples + * |[ +-- +1.8.5.3 diff -Nru gst-plugins-good0.10-0.10.31/debian/patches/series gst-plugins-good0.10-0.10.31/debian/patches/series --- gst-plugins-good0.10-0.10.31/debian/patches/series 2013-11-23 05:23:59.0 +0900 +++ gst-plugins-good0.10-0.10.31/debian/patches/series 2014-03-14 22:32:13.0 +0900 @@ -2,3 +2,4 @@ 01_v4l2_calls.patch 02_gstv4l2bufferpool.patch 99_ltmain_as-needed.patch +bug#739810.patch
Bug#741610: Lock screen does not allow to enter password
Package: gdm Version: 3.8.4-6 Severity: grave Debian: Testing amd64 Regression: No gnome-shell: 3.8.4-5+b1 gnome-session: 3.8.4-3 Sometimes, the lock screen does not allow to enter the password while a session is currently running. It completely disallows the current session to be recovered. Trying to restart gdm does not help. And the only way I could find was to reboot my computer. This could lead to data corruption (ie I had to make my backup again). I found no relevant information in the various logs. The bug seems to appear seldom and hazardously. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741568: lack of symbol versioning and gnutls mismatch results in problem
On 03/14/2014 06:29 AM, Alessandro Ghedini wrote: > "Avoid making git unredistributable" doesn't sound that silly to me (having > these kind of problems in the first place kind of is though). > > There's also the chance that switching to libgnutls28 would break packages > that > directly or indirectly depend on libgnutls26 (that is, the inverse of the > libapache2-mod-gnutls problem). i'm hoping we can drop libgnutls26 entirely before jessie releases, so i don't think this will be an issue. >> If libcurl-gnutls really has licensing concerns about moving to >> libgnutls28, and that causing problems for GPLv2 code that links against >> this version of libcurl, one possibility is to introduce >> libcurl4-gnutls28 -- there are already 3 TLS-library flavors of libcur, >> what is one more? :P > > That's not going to happen. If anything libgnutls-dev and libgnutls28-dev > can't > be installed at the same time, and just because curl's packaging is already a > mess doesn't mean it's ok to make it even more messier. This wasn't a serious suggestion, which i tried to indicate with the :P sorry that it wasn't clearer. > On the bright side, I was looking into reducing the libcurl flavors to just > the > libnss one, but that's not yet possible, as long as #726116 doesn't get fixed. that would be an interesting approach. >> There is no good reason i can see for libapache2-mod-gnutls to prefer >> the older version with less robust algorithm availability and weaker >> configuration options. > > Well, "making it work, i.e. fix #741557, and avoid having it removed from > testing" sounds like a pretty good reason to me. Granted, it's really not that > much of a good solution, but it would hopefully be only temporary. "making it work" for a security-oriented tool should *not* mean "sacrificing the only believed-to-be-secure ciphersuites and protocol versions just for the sake of shipping code". I don't think mod-gnutls should be removed from testing, but i'd rather that it be removed from testing than force building against libgnutls26. Clint, another option is for you to rebuild libmsv against libcurl4-nss-dev until the libcurl4-gnutls mishegas is sorted out. the irony here is that libmsv doesn't actually use TLS for its outbound connections at all, so the choice of what to use here isn't actually relevant :/ for the sake of libmsv, i'd be happy to build against a libcurl4-no-tls-dev package! (Alessandro, i'm not actually suggesting this a serious suggestion for libcurl; it's just an observation about the frustrating pointlessness of all this wrangling). --dkg signature.asc Description: OpenPGP digital signature
Processed: Re: Bug#741568: lack of symbol versioning and gnutls mismatch results in problem
Processing control commands: > clone 741568 -2 Bug #741568 [libcurl4-gnutls-dev] lack of symbol versioning and gnutls mismatch results in problem Bug 741568 cloned as bug 741607 741607 was not blocked by any bugs. 741607 was blocking: 741557 Added blocking bug(s) of 741607: 741557 > reassign -2 gmp Bug #741607 [libcurl4-gnutls-dev] lack of symbol versioning and gnutls mismatch results in problem Bug reassigned from package 'libcurl4-gnutls-dev' to 'gmp'. No longer marked as found in versions curl/7.35.0-1. Ignoring request to alter fixed versions of bug #741607 to the same values previously set > retitle -2 please merge GMP's upstream licensing changes Bug #741607 [gmp] lack of symbol versioning and gnutls mismatch results in problem Changed Bug title to 'please merge GMP's upstream licensing changes' from 'lack of symbol versioning and gnutls mismatch results in problem' -- 741568: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741568 741607: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741607 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741568: lack of symbol versioning and gnutls mismatch results in problem
Control: clone 741568 -2 Control: reassign -2 gmp Control: retitle -2 please merge GMP's upstream licensing changes On 03/14/2014 06:29 AM, Alessandro Ghedini wrote: > On Thu, Mar 13, 2014 at 10:42:23PM -0400, Daniel Kahn Gillmor wrote: >> On 03/13/2014 09:44 PM, Clint Adams wrote: >>> On Fri, Mar 14, 2014 at 01:11:16AM +0100, Alessandro Ghedini wrote: Well, nope. libgnutls28 still links against libgmp10 which is still LGPL3+. Unless I'm missing something that would make git (GPL2only) unredistributable. So no, that's not actually possible (again, unless I'm missing something). >>> >>> As far as I'm concerned, git should change its license irrespective of any >>> gmp compromise. >> >> i'd love to see git sort out more sensible licensing too, but libgmp >> *is* actually in the process of a transition to dual-licensed LGPL3+ and >> GPL2+: > > As I said in my email, I'm already aware of this, but as long as that hasn't > reached Debian we still have to deal with the problem. You may ask the gmp > maintainer to merge those changes in Debian though. That would help. Consider this an ask to the GMP maintainers. It would be great if GMP's upstream licensing change could be merged/reflected in the debian packaging, since there are a chain of outstanding licensing issues that the shift will neatly resolve. Many many thanks to GMP for making these licensing changes, compromise though they may be, for the sake of the redistributability of many critical pieces of the free software ecosystem. --dkg signature.asc Description: OpenPGP digital signature
Bug#740345: [Pkg-systemd-maintainers] Bug#740345: Bug#740345: Bug#740345: systemd: configuration/arch-any files under /usr/lib/
Hi Michael, Michael Biebl writes: > I don't think we necessarily need the distinction between directories in > /usr/lib/ holding architecture-indep only data or a mixture, and with > the current proposal #740345 would still be a valid bug, though with > non-RC severity (as it would violate a should directive). > > But I guess it would then be one of those cases where we simply tag the > bug as wontfix. That directory is sort-of API and we shouldn't change it > downstream, imho. Agreed. Thanks for taking care of this. -- Best regards, Michael -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#738401: marked as done (postgresql-pljava: FTBFS: dpkg-source: error: postgresql-pljava-1.4.3/debian/control doesn't list any binary package)
Your message dated Fri, 14 Mar 2014 13:00:07 + with message-id and subject line Bug#731518: fixed in postgresql-pljava 1.4.3-3 has caused the Debian Bug report #731518, regarding postgresql-pljava: FTBFS: dpkg-source: error: postgresql-pljava-1.4.3/debian/control doesn't list any binary package to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 731518: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731518 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Source: postgresql-pljava Version: 1.4.3-2 Severity: serious Tags: jessie sid User: debian...@lists.debian.org Usertags: qa-ftbfs-20140208 qa-ftbfs Justification: FTBFS on amd64 Hi, During a rebuild of all packages in sid, your package failed to build on amd64. Relevant part (hopefully): > fakeroot debian/rules clean > (set -e; \ > VERSIONS=`pg_buildext supported-versions /«PKGBUILDDIR»`; \ > grep-dctrl -vP PGVERSION debian/control.in > debian/control.pgxs_tmp; \ > for v in $VERSIONS; do \ > grep-dctrl -P PGVERSION debian/control.in | sed -e > "s:PGVERSION:$v:" >> debian/control.pgxs_tmp; \ > done; \ > mv debian/control.pgxs_tmp debian/control) || (rm -f > debian/control.pgxs_tmp; exit 1) > dh_testdir > dh_testroot > rm -rf build build-?.? build-stamp > dh_clean > dpkg-source -b postgresql-pljava-1.4.3 > dpkg-source: error: postgresql-pljava-1.4.3/debian/control doesn't list any > binary package > dpkg-buildpackage: error: dpkg-source -b postgresql-pljava-1.4.3 gave error > exit status 255 > > Build finished at 20140209-0206 The full build log is available from: http://aws-logs.debian.net/ftbfs-logs/2014/02/08/postgresql-pljava_1.4.3-2_unstable.log A list of current common problems and possible solutions is available at http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute! About the archive rebuild: The rebuild was done on EC2 VM instances from Amazon Web Services, using a clean, minimal and up-to-date chroot. Every failed build was retried once to eliminate random failures. --- End Message --- --- Begin Message --- Source: postgresql-pljava Source-Version: 1.4.3-3 We believe that the bug you reported is fixed in the latest version of postgresql-pljava, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 731...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Peter Eisentraut (supplier of updated postgresql-pljava package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Thu, 13 Mar 2014 00:16:40 -0400 Source: postgresql-pljava Binary: postgresql-9.3-pljava-gcj Architecture: source i386 Version: 1.4.3-3 Distribution: unstable Urgency: low Maintainer: Peter Eisentraut Changed-By: Peter Eisentraut Description: postgresql-9.3-pljava-gcj - Java procedural language for PostgreSQL 9.3 Closes: 731518 Changes: postgresql-pljava (1.4.3-3) unstable; urgency=low . * Build for PostgreSQL 9.3 (closes: #731518) Checksums-Sha1: 85c5ad6ca91c07048501b0903ff747f38d959460 1418 postgresql-pljava_1.4.3-3.dsc eb29dcc9e40abc49cffaed8e825cb1c858901a8c 6044 postgresql-pljava_1.4.3-3.debian.tar.xz 6fa2113834542a5b6e469307b76119bf1ab02b87 284668 postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb Checksums-Sha256: 2fa26de68f60f40f7df20845a45742020a100c2e2fc09e435270503188c1142b 1418 postgresql-pljava_1.4.3-3.dsc 11d59eac06588abdb7e1a028ba704c4162af43d306139955b595f91f32fc796d 6044 postgresql-pljava_1.4.3-3.debian.tar.xz 98cda49d7e30315bd84c70b0bf25f8f2165f4ada8120a4ed8c09fe18020f4bba 284668 postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb Files: a1e53a4034b2de5b0780a6e325a72570 1418 database optional postgresql-pljava_1.4.3-3.dsc c888bd400bf6263c401686c81ea872b0 6044 database optional postgresql-pljava_1.4.3-3.debian.tar.xz fb5475f00c6bdf0c45540bebc37bbdea 284668 database optional postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.15 (GNU/Linux) iEYEARECAAYFAlMhM1gACgkQTTx8oVVPtMbfTgCfbrjp111sLpBiRkurHV7mOagt dV0AoMOTlpnOmSFLksg0Q56qb7yG0WkG =kbO4 -END PGP SI
Bug#731518: marked as done (FTBFS, postgresql-9.1 not supported any more; please move to 9.3)
Your message dated Fri, 14 Mar 2014 13:00:07 + with message-id and subject line Bug#731518: fixed in postgresql-pljava 1.4.3-3 has caused the Debian Bug report #731518, regarding FTBFS, postgresql-9.1 not supported any more; please move to 9.3 to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 731518: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731518 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Package: postgresql-pljava Version: 1.4.3-2 Severity: important User: pkg-postgresql-pub...@lists.alioth.debian.org Usertags: migration-93 For wheezy we support PostgreSQL 9.3, and want to drop postgresql-9.1. Can you please build a -9.3 extension (only)? Thanks, Martin -- Martin Pitt| http://www.piware.de Ubuntu Developer (www.ubuntu.com) | Debian Developer (www.debian.org) signature.asc Description: Digital signature --- End Message --- --- Begin Message --- Source: postgresql-pljava Source-Version: 1.4.3-3 We believe that the bug you reported is fixed in the latest version of postgresql-pljava, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 731...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Peter Eisentraut (supplier of updated postgresql-pljava package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Thu, 13 Mar 2014 00:16:40 -0400 Source: postgresql-pljava Binary: postgresql-9.3-pljava-gcj Architecture: source i386 Version: 1.4.3-3 Distribution: unstable Urgency: low Maintainer: Peter Eisentraut Changed-By: Peter Eisentraut Description: postgresql-9.3-pljava-gcj - Java procedural language for PostgreSQL 9.3 Closes: 731518 Changes: postgresql-pljava (1.4.3-3) unstable; urgency=low . * Build for PostgreSQL 9.3 (closes: #731518) Checksums-Sha1: 85c5ad6ca91c07048501b0903ff747f38d959460 1418 postgresql-pljava_1.4.3-3.dsc eb29dcc9e40abc49cffaed8e825cb1c858901a8c 6044 postgresql-pljava_1.4.3-3.debian.tar.xz 6fa2113834542a5b6e469307b76119bf1ab02b87 284668 postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb Checksums-Sha256: 2fa26de68f60f40f7df20845a45742020a100c2e2fc09e435270503188c1142b 1418 postgresql-pljava_1.4.3-3.dsc 11d59eac06588abdb7e1a028ba704c4162af43d306139955b595f91f32fc796d 6044 postgresql-pljava_1.4.3-3.debian.tar.xz 98cda49d7e30315bd84c70b0bf25f8f2165f4ada8120a4ed8c09fe18020f4bba 284668 postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb Files: a1e53a4034b2de5b0780a6e325a72570 1418 database optional postgresql-pljava_1.4.3-3.dsc c888bd400bf6263c401686c81ea872b0 6044 database optional postgresql-pljava_1.4.3-3.debian.tar.xz fb5475f00c6bdf0c45540bebc37bbdea 284668 database optional postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.15 (GNU/Linux) iEYEARECAAYFAlMhM1gACgkQTTx8oVVPtMbfTgCfbrjp111sLpBiRkurHV7mOagt dV0AoMOTlpnOmSFLksg0Q56qb7yG0WkG =kbO4 -END PGP SIGNATURE End Message ---
Bug#741604: libspring-java: Multiple security issues
Package: libspring-java Severity: grave Tags: security Justification: user security hole http://www.gopivotal.com/security/cve-2014-0054 http://www.gopivotal.com/security/cve-2014-1904 I'm not sure whether these are worth a DSA? Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741603: missing license in debian/copyright
Package: ompl Version: 0.14.1-1 Severity: serious User: alteh...@debian.org Usertags: ftp X-Debbugs-CC: ftpmas...@ftp-master.debian.org thanks Dear Maintainer, please add the missing licenses of ompl-0.14.1-Source\doc\css\bootstrap-responsive.css ompl-0.14.1-Source\doc\css\bootstrap.css ompl-0.14.1-Source\doc\js\bootstrap.js ompl-0.14.1-Source\doc\js\gen_validatorv31.js ompl-0.14.1-Source\doc\js\jquery.js ompl-0.14.1-Source\doc\php\captcha_code_file.php ompl-0.14.1-Source\py-bindings\py_boost_function.hpp ompl-0.14.1-Source\src\external\omplext_odeint\boost\* ompl-0.14.1-Source\tests\* to debian/copyright. Thanks! Thorsten -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741602: virtualbox: CVE-2014-0981 CVE-2014-0982 CVE-2014-0983
Package: virtualbox Severity: grave Tags: security Justification: user security hole Hi, please see http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741600: 389-ds-base: CVE-2014-0132
Package: 389-ds-base Severity: grave Tags: security Justification: user security hole Hi, please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0132 for details. Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#740491: same problem, different solution
The two previous suggestions didn't fix it for me so I removed rpcbind, nfs-common and nfs-kernel-server then reinstalled them one at a time. That worked foe me. Robin -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741599: missing license in debian/copyright
Package: geographiclib Version: 1.34-1 Severity: serious User: alteh...@debian.org Usertags: ftp X-Debbugs-CC: ftpmas...@ftp-master.debian.org thanks Dear Maintainer, please add the missing expat license of dozens of files to debian/copyright. Thanks! Thorsten -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#740673: apt-cdrom ident started requesting to insert cd even if cd is already mounted
Cyril Brulebois (2014-03-13): > Important note on interactivity: > > I've noticed the “apt-cdrom add” we have in apt-setup has a final > “< /dev/null” to explicitly disable interactivity. I've tried patching > all “apt-cdrom ident” calls to include that redirection as well, which > affects the following files: > generators/40cdrom > generators/41cdset > load-install-cd > > I've generated an ISO with the updated udebs, and the default install > went through without any hangs. I've also verified half-way through > that packages available in the ISO were seen this way in /target by > apt, meaning only the missing packages were downloaded from the > configurer network mirror. > > Initially, I wasn't too happy about patching apt-setup this late, but > the code deduplication commit points out that “apt-cdrom add” and > “apt-cdrom ident” are quite close, so maybe we should just release with > a patched apt-setup, disabling interactivity for all “apt-cdrom > {add,ident}” calls, and see how well it goes. > > > Do (apt/d-i) folks think this is crazy, or worth a try? So this commit landed in apt 0.9.16, uploaded today: | commit b374004b8ffebe393c5fd5e8056f7a99849c0ebd | Author: David Kalnischkies | Date: Mon Mar 10 00:09:56 2014 +0100 | | apt-cdrom ident shouldn't be interactive | | Commit 62dcbf84 changed the code of ident to look more like the code for | add on my suggestion. This made ident interactive as it starts with a | unmount, press enter, mount cycle. The first two are skipped now. | This fixes d-i/apt-setup which is using it to get ID as well as label. | | Closes: 740673 Given it's bundled with a lot more changes, I don't feel like having apt rushed into testing, so I'll probably push the “< /dev/null” bits to apt-setup so as to disable interactivity from the caller, and get that into testing urgently. Mraw, KiBi. signature.asc Description: Digital signature
Bug#740345: [Pkg-systemd-maintainers] Bug#740345: Bug#740345: Bug#740345: systemd: configuration/arch-any files under /usr/lib/
Am 11.03.2014 11:02, schrieb Michael Stapelberg: > Hi Michael, > > Michael Biebl writes: >> See the discussion in >> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741304 >> >> Tollef, Michael S., we should consider seconding Joeyh's proposal to get >> this into the next debian-policy revision. > Thanks for pointing out that bug. I agree with the proposal. How do we > officially second this? Is seconding how policy changes work? I wasn't entirely sure about the current process, so I looked around a bit and found [0]. This proposal [1] already has three seconds (Russ, Jakub and Julien), so that should already be sufficient. Obviously, additional seconds don't hurt and I consider to do so myself. I don't think we necessarily need the distinction between directories in /usr/lib/ holding architecture-indep only data or a mixture, and with the current proposal #740345 would still be a valid bug, though with non-RC severity (as it would violate a should directive). But I guess it would then be one of those cases where we simply tag the bug as wontfix. That directory is sort-of API and we shouldn't change it downstream, imho. Michael [0] https://wiki.debian.org/PolicyChangesProcess [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741304 -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth? signature.asc Description: OpenPGP digital signature
Bug#741568: lack of symbol versioning and gnutls mismatch results in problem
On Thu, Mar 13, 2014 at 10:42:23PM -0400, Daniel Kahn Gillmor wrote: > On 03/13/2014 09:44 PM, Clint Adams wrote: > > On Fri, Mar 14, 2014 at 01:11:16AM +0100, Alessandro Ghedini wrote: > >> Well, nope. libgnutls28 still links against libgmp10 which is still LGPL3+. > >> Unless I'm missing something that would make git (GPL2only) > >> unredistributable. > >> So no, that's not actually possible (again, unless I'm missing something). > > > > As far as I'm concerned, git should change its license irrespective of any > > gmp compromise. > > i'd love to see git sort out more sensible licensing too, but libgmp > *is* actually in the process of a transition to dual-licensed LGPL3+ and > GPL2+: As I said in my email, I'm already aware of this, but as long as that hasn't reached Debian we still have to deal with the problem. You may ask the gmp maintainer to merge those changes in Debian though. That would help. > This should suffice for git, afaict. GMPLib hasn't rolled a release > that includes this change yet, but they do apparently plan a release in > "early 2014". I'd love to see gnutls26 just go away in debian when this > transition happens, but it seems silly to block on it. "Avoid making git unredistributable" doesn't sound that silly to me (having these kind of problems in the first place kind of is though). There's also the chance that switching to libgnutls28 would break packages that directly or indirectly depend on libgnutls26 (that is, the inverse of the libapache2-mod-gnutls problem). > If libcurl-gnutls really has licensing concerns about moving to > libgnutls28, and that causing problems for GPLv2 code that links against > this version of libcurl, one possibility is to introduce > libcurl4-gnutls28 -- there are already 3 TLS-library flavors of libcur, > what is one more? :P That's not going to happen. If anything libgnutls-dev and libgnutls28-dev can't be installed at the same time, and just because curl's packaging is already a mess doesn't mean it's ok to make it even more messier. On the bright side, I was looking into reducing the libcurl flavors to just the libnss one, but that's not yet possible, as long as #726116 doesn't get fixed. > >> Also, I don't see how this is a critical bug in curl. If your concern is > >> libapache2-mod-gnutls why not just switch it back to libgnutls26? > > > > That's a question for the libapache2-mod-gnutls maintainer. > > GnuTLS 2.12.x (SONAME 26) is not supported by upstream any longer (has > not been for years) and GnuTLS 3.x (SONAME 28) has significant > improvements in terms of protocol version and algorithm availability > (e.g. AES-GCM, the only known cipher mode that resists all known attacks > is not available in 2.12.x) and useful configuration options (e.g. > priority string improvements). > > There is no good reason i can see for libapache2-mod-gnutls to prefer > the older version with less robust algorithm availability and weaker > configuration options. Well, "making it work, i.e. fix #741557, and avoid having it removed from testing" sounds like a pretty good reason to me. Granted, it's really not that much of a good solution, but it would hopefully be only temporary. Cheers -- perl -E '$_=q;$/= @{[@_]};and s;\S+;;eg;say~~reverse' signature.asc Description: Digital signature
Bug#740673: marked as done (apt-cdrom ident started requesting to insert cd even if cd is already mounted)
Your message dated Fri, 14 Mar 2014 09:50:02 + with message-id and subject line Bug#740673: fixed in apt 0.9.16 has caused the Debian Bug report #740673, regarding apt-cdrom ident started requesting to insert cd even if cd is already mounted to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 740673: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=740673 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Package: apt Version: 0.9.15.5 Severity: important Tags: d-i User: debian-h...@lists.debian.org Usertags: hurd Control: found -1 0.9.15.2 Control: notfound -1 0.9.15.1 On hurd, "apt-cdrom ident" started requesting to insert cdrom even if cdrom is already mounted. That breaks debian-installer given it's called by load-install-cd. Recent debian-installer builds get stuck at "Configuring apt - Scanning the CD-ROM". See https://bugs.debian.org/728153 root@hurd01:~# df /dev/hd2 Filesystem 1K-blocks Used Available Use% Mounted on /dev/hd2 660026 660026 0 100% /media/cdrom0 root@hurd01:~# apt-cdrom ident Using CD-ROM mount point /media/cdrom/ Unmounting CD-ROM Waiting for disc... Please insert a Disc in the drive and press enter << Mounting CD-ROM... Identifying.. [478550b67bb0515eb3936a92b05b79be-2] Stored label: Unmounting CD-ROM... root@hurd01:~# dpkg -i libapt-pkg4.12_0.9.15.1_hurd-i386.deb dpkg: warning: downgrading libapt-pkg4.12:hurd-i386 from 0.9.15.5 to 0.9.15.1 (Reading database ... 130961 files and directories currently installed.) Preparing to unpack .../libapt-pkg4.12_0.9.15.1_hurd-i386.deb ... Unpacking libapt-pkg4.12:hurd-i386 (0.9.15.1) over (0.9.15.5) ... Setting up libapt-pkg4.12:hurd-i386 (0.9.15.1) ... Processing triggers for libc-bin (2.18-3) ... root@hurd01:~# apt-cdrom ident Using CD-ROM mount point /media/cdrom/ Mounting CD-ROM Identifying.. [478550b67bb0515eb3936a92b05b79be-2] Stored label: Unmounting CD-ROM... -- System Information: Debian Release: jessie/sid APT prefers unreleased APT policy: (500, 'unreleased'), (500, 'unstable'), (1, 'experimental') Architecture: hurd-i386 (i686-AT386) Kernel: GNU-Mach 1.4-486-dbg/Hurd-0.5 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages apt depends on: ii debian-archive-keyring 2012.4 ii gnupg 1.4.16-1.1 ii libapt-pkg4.12 0.9.15.5 ii libc0.3 2.18-3 ii libgcc1 1:4.8.2-16 ii libstdc++6 4.8.2-16 apt recommends no packages. Versions of packages apt suggests: pn apt-doc ii aptitude0.6.10-1 ii dpkg-dev1.17.6 ii python-apt 0.9.3.1 ii xz-utils5.1.1alpha+20120614-2 -- no debconf information --- End Message --- --- Begin Message --- Source: apt Source-Version: 0.9.16 We believe that the bug you reported is fixed in the latest version of apt, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 740...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Michael Vogt (supplier of updated apt package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Fri, 14 Mar 2014 09:45:05 +0100 Source: apt Binary: apt libapt-pkg4.12 libapt-inst1.5 apt-doc libapt-pkg-dev libapt-pkg-doc apt-utils apt-transport-https Architecture: source all amd64 Version: 0.9.16 Distribution: unstable Urgency: medium Maintainer: APT Development Team Changed-By: Michael Vogt Description: apt- commandline package manager apt-doc- documentation for APT apt-transport-https - https download transport for APT apt-utils - package management related utility programs libapt-inst1.5 - deb package format runtime library libapt-pkg-dev - development files for APT's libapt-pkg and libapt-inst libapt-pkg-doc - documentation for APT development libapt-pkg4.12 - package management runtime library Closes: 661537 740673 740843 741056 Changes: apt (0.9.16) unstable; urgency=medium . [ Michael Vogt ] * add hashsum support in apt-helper download-file and add more tests . [ Trần Ngọc Quân ] * l10n: vi.po (624t): Update Vietnamese translation . [ Dav
Processed: found 741303 in 1:0.97.0-beta.1-1
Processing commands for cont...@bugs.debian.org: > found 741303 1:0.97.0-beta.1-1 Bug #741303 [libfeel++1] libfeel++1: libfeelpp.so.1.0.0 links with both GPL-licensed and GPL-incompatible libraries Marked as found in versions feel++/1:0.97.0-beta.1-1. > thanks Stopping processing here. Please contact me if you need assistance. -- 741303: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741303 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#740730: marked as done (fcitx-mozc: input method doesn't load with GTK2 frontend)
Your message dated Fri, 14 Mar 2014 17:41:05 +0900 with message-id <20140314084105.gb5...@camelia.2ion.de> and subject line Re: Bug#740730: fcitx-mozc: input method doesn't load with GTK2 frontend has caused the Debian Bug report #740730, regarding fcitx-mozc: input method doesn't load with GTK2 frontend to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 740730: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=740730 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Package: fcitx-mozc Version: 1.13.1651.102-2 Severity: grave Justification: renders package unusable Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? Upgraded fcitx-mozc along with mozc-server and dependencies from 1.12.1599.102 to 1.13.1651.102-2. However, the problem was already present in 1.13.1651.102-1. * What was the outcome of this action? The input method was expected to become active. * What outcome did you expect instead? The input didn't activate at all. Furthermore, the problem appears only with the GTK2 front-end. The GTK3, Qt4, Qt5 front-ends work flawlessly. Also, in GTK2 the input method is not registered at all as it doesn't appear in the context menu on GTK2 text entries (right click -> Input Methods lists only "Simple" and "None" with "Simple" selected as the default). I think that the severity setting is justified because core productivity applications like Iceweasel still rely on GTK2. -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (990, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.13-5.dmz.2-liquorix-amd64 (SMP w/2 CPU cores; PREEMPT) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages fcitx-mozc depends on: ii fcitx-bin 1:4.2.8.3-2+b1 ii fcitx-data 1:4.2.8.3-2 ii fcitx-modules 1:4.2.8.3-2+b1 ii libc6 2.18-4 ii libprotobuf82.5.0-9 ii libstdc++6 4.8.2-16 ii mozc-data 1.12.1599.102-1 ii mozc-server 1.13.1651.102-2 ii tegaki-zinnia-japanese 0.3-1 Versions of packages fcitx-mozc recommends: ii fcitx 1:4.2.8.3-2 ii mozc-utils-gui 1.13.1651.102-2 fcitx-mozc suggests no packages. -- no debconf information --- End Message --- --- Begin Message --- Version: 1.13.1651.102-2 The bug was resolved in the related package fcitx-frontend-gtk2 with version 1:4.2.8.3-3.--- End Message ---
Bug#735809: obnam: FTBFS: Tests failed
On Fri, Jan 17, 2014 at 08:12:28PM +0100, David Suárez wrote: > > FAILURE: test_lgetxattr (vfs_local_tests.XAttrTests) > > Traceback (most recent call last): > > File "./obnamlib/vfs_local_tests.py", line 74, in test_lgetxattr > > self.assertEqual(_obnam.lgetxattr(self.filename, "user.hello"), "world") > > AssertionError: 95 != 'world' > > > > FAILURE: test_lsetxattr (vfs_local_tests.XAttrTests) > > Traceback (most recent call last): > > File "./obnamlib/vfs_local_tests.py", line 69, in test_lsetxattr > > ["user.hello", "user.key"]) > > AssertionError: Lists differ: [''] != ['user.hello', 'user.key'] Right, this is because the filesystem used by the builds for $TMPDIR doesn't support user xattrs. I've fixed the code to skip these tests in that circumstance. Thank you for reporting this! -- http://www.cafepress.com/trunktees -- geeky funny T-shirts http://gtdfh.branchable.com/ -- GTD for hackers -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#737596: mysql-5.5: CVE-2014-0001: command-line tool buffer overflow via long server version string
Control: clone 737596 -1 Control: reassign -1 src:mysql-5.6 Control: retitle -1 mysql-5.6: CVE-2014-0001: command-line tool buffer overflow via long server version string Hi, On Tue, Feb 04, 2014 at 06:51:50AM +0100, Salvatore Bonaccorso wrote: > Source: mysql-5.5 > Severity: important > Tags: security upstream > > Hi, > > the following vulnerability was published for mysql-5.5. > > CVE-2014-0001[0]: > command-line tool buffer overflow via long server version string > > If you fix the vulnerability please also make sure to include the > CVE (Common Vulnerabilities & Exposures) id in your changelog entry. > > For further information see: > > [0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0001 > http://security-tracker.debian.org/tracker/CVE-2014-0001 > [1] http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64 > [2] https://bugzilla.redhat.com/show_bug.cgi?id=1054592 > > Please adjust the affected versions in the BTS as needed. The same seems to apply to mysql-5.6 at first glance. Cloning the original bugreport to make a copy for the mysql-5.6 source package. Regards, Salvatore signature.asc Description: Digital signature
Processed: Re: Bug#737596: mysql-5.5: CVE-2014-0001: command-line tool buffer overflow via long server version string
Processing control commands: > clone 737596 -1 Bug #737596 [src:mysql-5.5] mysql-5.5: CVE-2014-0001: command-line tool buffer overflow via long server version string Bug 737596 cloned as bug 741590 > reassign -1 src:mysql-5.6 Bug #741590 [src:mysql-5.5] mysql-5.5: CVE-2014-0001: command-line tool buffer overflow via long server version string Bug reassigned from package 'src:mysql-5.5' to 'src:mysql-5.6'. No longer marked as found in versions mysql-5.5/5.5.20-1. Ignoring request to alter fixed versions of bug #741590 to the same values previously set > retitle -1 mysql-5.6: CVE-2014-0001: command-line tool buffer overflow via > long server version string Bug #741590 [src:mysql-5.6] mysql-5.5: CVE-2014-0001: command-line tool buffer overflow via long server version string Changed Bug title to 'mysql-5.6: CVE-2014-0001: command-line tool buffer overflow via long server version string' from 'mysql-5.5: CVE-2014-0001: command-line tool buffer overflow via long server version string' -- 737596: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737596 741590: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741590 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#741585: libexplain51-dbg and libexplain30-dbg: error when trying to install together
Package: libexplain30-dbg,libexplain51-dbg Version: libexplain30-dbg/0.52.D002-1 Version: libexplain51-dbg/1.4.D001-1 Severity: serious User: trei...@debian.org Usertags: edos-file-overwrite Date: 2014-03-14 Architecture: amd64 Distribution: sid Hi, automatic installation tests of packages that share a file and at the same time do not conflict by their package dependency relationships has detected the following problem: Selecting previously unselected package libperl4-corelibs-perl. (Reading database ... 10943 files and directories currently installed.) Preparing to unpack .../libperl4-corelibs-perl_0.003-1_all.deb ... Unpacking libperl4-corelibs-perl (0.003-1) ... Selecting previously unselected package lsof. Preparing to unpack .../lsof_4.86+dfsg-1_amd64.deb ... Unpacking lsof (4.86+dfsg-1) ... Selecting previously unselected package libexplain30. Preparing to unpack .../libexplain30_0.52.D002-1_amd64.deb ... Unpacking libexplain30 (0.52.D002-1) ... Selecting previously unselected package libexplain51. Preparing to unpack .../libexplain51_1.4.D001-1_amd64.deb ... Unpacking libexplain51 (1.4.D001-1) ... Selecting previously unselected package libexplain30-dbg. Preparing to unpack .../libexplain30-dbg_0.52.D002-1_amd64.deb ... Unpacking libexplain30-dbg (0.52.D002-1) ... Selecting previously unselected package libexplain51-dbg. Preparing to unpack .../libexplain51-dbg_1.4.D001-1_amd64.deb ... Unpacking libexplain51-dbg (1.4.D001-1) ... dpkg: error processing archive /var/cache/apt/archives/libexplain51-dbg_1.4.D001-1_amd64.deb (--unpack): trying to overwrite '/usr/lib/debug/usr/bin/explain', which is also in package libexplain30-dbg 0.52.D002-1 dpkg-deb: error: subprocess paste was killed by signal (Broken pipe) Processing triggers for man-db (2.6.6-1) ... Errors were encountered while processing: /var/cache/apt/archives/libexplain51-dbg_1.4.D001-1_amd64.deb E: Sub-process /usr/bin/dpkg returned an error code (1) This is a serious bug as it makes installation fail, and violates sections 7.6.1 and 10.1 of the policy. An optimal solution would consist in only one of the packages installing that file, and renaming or removing the file in the other package. Depending on the circumstances you might also consider Replace relations or file diversions. If the conflicting situation cannot be resolved then, as a last resort, the two packages have to declare a mutual Conflict. Please take into account that Replaces, Conflicts and diversions should only be used when packages provide different implementations for the same functionality. Here is a list of files that are known to be shared by both packages (according to the Contents file for sid/amd64, which may be slightly out of sync): /usr/lib/debug/usr/bin/explain This bug has been filed against both packages. If you, the maintainers of the two packages in question, have agreed on which of the packages will resolve the problem please reassign the bug to that package. You may then also register in the BTS that the other package is affected by the bug. -Ralf. PS: for more information about the detection of file overwrite errors of this kind see http://edos.debian.net/file-overwrites/. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org