Processed: block 724375 with 719468

2014-03-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> block 724375 with 719468
Bug #724375 [src:gcc-h8300-hms] Please stop build depending on automake1.4, 
automake1.9 and automake1.10
724375 was not blocked by any bugs.
724375 was not blocking any bugs.
Added blocking bug(s) of 724375: 719468
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
724375: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724375
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: block 724379 with 669513

2014-03-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> block 724379 with 669513
Bug #724379 [src:gnat-4.4] Please stop build depending on automake1.4, 
automake1.9 and automake1.10
724379 was not blocked by any bugs.
724379 was not blocking any bugs.
Added blocking bug(s) of 724379: 669513 and 707277
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
724379: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724379
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#736565: FTBFS on non-"PC" architectures: FAIL: scram_mt.test

2014-03-14 Thread Charles Plessy
Le Mon, Mar 10, 2014 at 12:13:34AM +1100, Aníbal Monsalve Salazar a écrit :
> On Sun, Mar 09, 2014 at 07:58:25PM +0900, Charles Plessy wrote:
> > 
> > Speaking of Upstream, I see a new release, version 1.13.5.  Would you
> > like me to upload it ?
> 
> Yes, please.

Uploaded !  Sorry for the delay.

Charles

-- 
Charles Plessy
Debian Med packaging team,
http://www.debian.org/devel/debian-med
Tsurumi, Kanagawa, Japan


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#559783: Upping the severity

2014-03-14 Thread Eric Dorland
> > Increasing the severity since this prevents new uploads as it fails
> > the embedded library check.

> Hi, Eric!

> cve-2009-3720 has closed long ago.
> also upstream is dead (only security problems are fixed).

> Do You have any other (not cve-2009-3720) causes to keep severity
> serious?

Yes, ftp master will not accept uploads due to the embedded libraries
so it's effectively FTBFS.

-- 
Eric Dorland 
ICQ: #61138586, Jabber: ho...@jabber.com



signature.asc
Description: Digital signature


Processed: block 549098 with 559783

2014-03-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> block 549098 with 559783
Bug #549098 [src:centerim] centerim: Pending removal of automake{1.4,1.7}, 
please update for automake1.9 or higher
Bug #724002 [src:centerim] Please stop build depending on automake1.4, 
automake1.9 and automake1.10
549098 was not blocked by any bugs.
549098 was not blocking any bugs.
Added blocking bug(s) of 549098: 559783
724002 was not blocked by any bugs.
724002 was not blocking any bugs.
Added blocking bug(s) of 724002: 559783
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
549098: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=549098
724002: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724002
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#730960: Does not (or no longer?) depend on Ruby 1.8

2014-03-14 Thread Gunnar Wolf
reopen 730960
tags 730960 + pending
thanks

David Suárez dijo [Fri, Mar 14, 2014 at 07:29:52PM +0100]:
> Maybe I miss something, but on current unstable version (0.6.5-7), we have:
> 
> > Vcs-Browser: http://git.debian.org/?p=pkg-ruby-extras/ruby-bdb.git;a=summary
> > Homepage: https://rubyforge.org/projects/bdb/
> > XS-Ruby-Versions: ruby1.8

Ugh, I'm sorry - I guess I just checked on the changelog entry in the
git tree, and it seemed to have been uploaded already!

I'm reopening the bug, but tagging it as pending.


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: Re: Does not (or no longer?) depend on Ruby 1.8

2014-03-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> reopen 730960
Bug #730960 {Done: Gunnar Wolf } [src:ruby-bdb] ruby-bdb: 
FTBFS: Hard dependency on ruby1.8
Bug reopened
Ignoring request to alter fixed versions of bug #730960 to the same values 
previously set
> tags 730960 + pending
Bug #730960 [src:ruby-bdb] ruby-bdb: FTBFS: Hard dependency on ruby1.8
Added tag(s) pending.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
730960: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730960
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: severity of 741607 is wishlist

2014-03-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> severity 741607 wishlist
Bug #741607 [gmp] please merge GMP's upstream licensing changes
Severity set to 'wishlist' from 'critical'
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
741607: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741607
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741656: grub-common: grub-mkrescue lost its -J flag, d-i now FTBFS on kfreebsd-*

2014-03-14 Thread Cyril Brulebois
[ cc-ing debian-boot@ for information. ]

Cyril Brulebois  (2014-03-15):
> Package: grub-common
> Version: 2.02~beta2-7
> Severity: serious
> File: /usr/bin/grub-mkrescue
> Tags: d-i
> Justification: triggers FTBFS
> 
> Hi,
> 
> so there are some grub-* packages used in debian-installer's build-deps,
> and grub-common is among them, since grub-mkrescue is used on kfreebsd-*.
> It apparently lost its -J flag, making debian-installer FTBFS on those
> architectures. Excerpt from a daily build log after 2014-03-10:
> | # Create the ISO with Joliet extensions, needed for win32-loader.ini
> | grub-mkrescue --output=./tmp/netboot-9/mini.iso ./tmp/netboot-9/cd_tree -J
> | grub-mkrescue: invalid option -- 'J'
> | Try 'grub-mkrescue --help' or 'grub-mkrescue --usage' for more information.
> | make[2]: *** [arch_miniiso] Error 64

That this option gets rejected isn't entirely surprising given we
previously had a pass-through for unknown options:

grub2-2.00/util/grub-mkrescue.in (shell script):
| # Check the arguments.
| while test $# -gt 0
| do
| option=$1
| shift
| 
| case "$option" in
…
| *)
| source="${source} ${option} $@"; break ;;
| esac
| done

while lastest upload has a version rewritten in C and rejecting unknown
options instead of passing them through:

grub2-2.02~beta2/util/grub-mkrescue.c:
| static struct argp_option options[] = {
…
|   {0, 0, 0, 0, 0, 0}
| };
| 
| argp_parser (int key, char *arg, struct argp_state *state)
| {
|   if (grub_install_parse (key, arg))
| return 0;
|   switch (key)
| {
…
| default:
|   return ARGP_ERR_UNKNOWN;
| }
| }

[BTW the tag for -7 isn't to be found in the git repository right now.]

Mraw,
KiBi.


signature.asc
Description: Digital signature


Bug#741656: grub-common: grub-mkrescue lost its -J flag, d-i now FTBFS on kfreebsd-*

2014-03-14 Thread Cyril Brulebois
Package: grub-common
Version: 2.02~beta2-7
Severity: serious
File: /usr/bin/grub-mkrescue
Tags: d-i
Justification: triggers FTBFS

Hi,

so there are some grub-* packages used in debian-installer's build-deps,
and grub-common is among them, since grub-mkrescue is used on kfreebsd-*.
It apparently lost its -J flag, making debian-installer FTBFS on those
architectures. Excerpt from a daily build log after 2014-03-10:
| # Create the ISO with Joliet extensions, needed for win32-loader.ini
| grub-mkrescue --output=./tmp/netboot-9/mini.iso ./tmp/netboot-9/cd_tree -J
| grub-mkrescue: invalid option -- 'J'
| Try 'grub-mkrescue --help' or 'grub-mkrescue --usage' for more information.
| make[2]: *** [arch_miniiso] Error 64

Not too nice when I'm about to upload debian-installer for jessie alpha 1. :(

Mraw,
KiBi.


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#688173: Info received (Please port to libnl-3.x)

2014-03-14 Thread Michael Biebl
Is there any chance to see this bug fixed?
Apparently upstream has released versions which have been ported to
libnl-3. So an update would be appreciated.


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#741652: grub-pc-bin: No boot, cannot find root partition

2014-03-14 Thread Joe Rowan
Source: grub-pc-bin
Version: 2.02~beta2-7
Severity: critical
Justification: breaks the whole system

Dear Maintainer,


   * What led up to the situation?
Upgrade from 2.00-22 to 2.02~beta2-7

   * What exactly did you do (or not do) that was effective (or
 ineffective)?
Found reference to bug 741464, not exactly the same but worth trying, nothing 
else found on Net
Boot with installation disc, mount LVM partitions, chroot, downgrade to 2.00-22 
using dpkg, update-grub

   * What was the outcome of this action?
Booted OK, then downgraded related 2.02~beta2-7 packages


Additional information: during boot, was dropped to an initramfs shell when 
root partition not found. Only two partitions found, the reiserfs sda1 /boot 
and the swap partition in LVM, problem seemed to be failure of reiserfs in LVM.
Tried with rootdelay=30 seconds, no different




-- Package-specific info:

*** BEGIN /proc/mounts
/dev/mapper/first-root / reiserfs rw,relatime 0 0
/dev/mapper/first-backup /backup reiserfs rw,relatime 0 0
/dev/sda1 /boot reiserfs rw,relatime,notail 0 0
/dev/mapper/first-home /home reiserfs rw,relatime 0 0
/dev/mapper/first-tmp /tmp reiserfs rw,relatime 0 0
/dev/mapper/first-usr /usr reiserfs rw,relatime 0 0
/dev/mapper/first-var /var reiserfs rw,relatime 0 0
*** END /proc/mounts

*** BEGIN /boot/grub/device.map
(hd0)   /dev/disk/by-id/ata-Hitachi_HDT721032SLA360_STF204ML0XDJMP
*** END /boot/grub/device.map

*** BEGIN /boot/grub/grub.cfg
#
# DO NOT EDIT THIS FILE
#
# It is automatically generated by grub-mkconfig using templates
# from /etc/grub.d and settings from /etc/default/grub
#

### BEGIN /etc/grub.d/00_header ###
if [ -s $prefix/grubenv ]; then
  set have_grubenv=true
  load_env
fi
set default="0"

if [ x"${feature_menuentry_id}" = xy ]; then
  menuentry_id_option="--id"
else
  menuentry_id_option=""
fi

export menuentry_id_option

if [ "${prev_saved_entry}" ]; then
  set saved_entry="${prev_saved_entry}"
  save_env saved_entry
  set prev_saved_entry=
  save_env prev_saved_entry
  set boot_once=true
fi

function savedefault {
  if [ -z "${boot_once}" ]; then
saved_entry="${chosen}"
save_env saved_entry
  fi
}
function load_video {
  if [ x$feature_all_video_module = xy ]; then
insmod all_video
  else
insmod efi_gop
insmod efi_uga
insmod ieee1275_fb
insmod vbe
insmod vga
insmod video_bochs
insmod video_cirrus
  fi
}

if [ x$feature_default_font_path = xy ] ; then
   font=unicode
else
insmod part_msdos
insmod lvm
insmod reiserfs
set root='lvm/first-usr'
if [ x$feature_platform_search_hint = xy ]; then
  search --no-floppy --fs-uuid --set=root --hint='lvm/first-usr'  
fcd5801a-eb3e-4eeb-b44c-fd00eb5cbab3
else
  search --no-floppy --fs-uuid --set=root fcd5801a-eb3e-4eeb-b44c-fd00eb5cbab3
fi
font="/share/grub/unicode.pf2"
fi

if loadfont $font ; then
  set gfxmode=auto
  load_video
  insmod gfxterm
  set locale_dir=$prefix/locale
  set lang=en_GB
  insmod gettext
fi
terminal_output gfxterm
if [ "${recordfail}" = 1 ] ; then
  set timeout=-1
else
  set timeout=5
fi
### END /etc/grub.d/00_header ###

### BEGIN /etc/grub.d/05_debian_theme ###
insmod part_msdos
insmod lvm
insmod reiserfs
set root='lvm/first-usr'
if [ x$feature_platform_search_hint = xy ]; then
  search --no-floppy --fs-uuid --set=root --hint='lvm/first-usr'  
fcd5801a-eb3e-4eeb-b44c-fd00eb5cbab3
else
  search --no-floppy --fs-uuid --set=root fcd5801a-eb3e-4eeb-b44c-fd00eb5cbab3
fi
insmod png
if background_image /share/images/desktop-base/joy-grub.png; then
  set color_normal=white/black
  set color_highlight=black/white
else
  set menu_color_normal=cyan/blue
  set menu_color_highlight=white/blue
fi
### END /etc/grub.d/05_debian_theme ###

### BEGIN /etc/grub.d/10_linux ###
function gfxmode {
set gfxpayload="${1}"
}
set linux_gfx_mode=
export linux_gfx_mode
menuentry 'Debian GNU/Linux' --class debian --class gnu-linux --class gnu 
--class os $menuentry_id_option 
'gnulinux-simple-9bc3e03d-ce1a-403a-871b-fb7aa701b816' {
load_video
insmod gzio
insmod part_msdos
insmod reiserfs
set root='hd0,msdos1'
if [ x$feature_platform_search_hint = xy ]; then
  search --no-floppy --fs-uuid --set=root --hint-bios=hd0,msdos1 
--hint-efi=hd0,msdos1 --hint-baremetal=ahci0,msdos1 --hint='hd0,msdos1'  
d73f3638-d220-48ef-8ac9-915a1cf20aab
else
  search --no-floppy --fs-uuid --set=root 
d73f3638-d220-48ef-8ac9-915a1cf20aab
fi
echo'Loading Linux 3.13-1-amd64 ...'
linux   /vmlinuz-3.13-1-amd64 root=/dev/mapper/first-root ro 
rootdelay=10 
echo'Loading initial ramdisk ...'
initrd  /initrd.img-3.13-1-amd64
}
submenu 'Advanced options for Debian GNU/Linux' $menuentry_id_option 
'gnulinux-advanced-9bc3e03d-ce1a-403a-871b-fb7aa701b816' {
menuentry 'Debian GNU/Linux, with Linux 3.13-1-amd64' --cl

Bug#724688: libxul with icedove 24.3.0 and lightning 2.6.4

2014-03-14 Thread Andrew Olney
Many thanks for the guidance. I missed the connection to 
iceowl-extension somehow.


-Andrew


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741236: [Pkg-xfce-devel] Bug#741236: re

2014-03-14 Thread Yves-Alexis Perez
On Thu, Mar 13, 2014 at 09:11:19PM +0400, Alexey Petrovsky wrote:
>  I have all the same.

Is libpam-systemd installed? Can you install it and see if it fixes the
problem?

Regards,
-- 
Yves-Alexis Perez


signature.asc
Description: Digital signature


Bug#741512: marked as done (clamav-base configure error ('/usr/share/doc/clamav-base/examples/clamd.conf does not exist!'))

2014-03-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Mar 2014 21:19:25 +
with message-id 
and subject line Bug#741512: fixed in clamav 0.98.1+dfsg-3
has caused the Debian Bug report #741512,
regarding clamav-base configure error 
('/usr/share/doc/clamav-base/examples/clamd.conf does not exist!')
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
741512: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741512
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: clamav
Version: 0.98.1+dfsg-1+deb6u1
Severity: normal

Upgrade to clamav 0.98.1+dfsg-1+deb6u1 (from squeeze-updates) failed with
the following error:

Setting up clamav-base (0.98.1+dfsg-1+deb6u1) ...
Error: The new file /usr/share/doc/clamav-base/examples/clamd.conf does not 
exist!
dpkg: error processing clamav-base (--configure):
 subprocess installed post-installation script returned error exit status 1


The following was sufficient to work around the problem:
cp /usr/share/doc/clamav-base/examples/clamd.conf.sample 
/usr/share/doc/clamav-base/examples/clamd.conf
dpkg --pending --configure


-- System Information:
Debian Release: 6.0.9
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: i386 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

Versions of packages clamav depends on:
ii  clamav-freshclam [c 0.98.1+dfsg-1+deb6u1 anti-virus utility for Unix - viru
ii  libc6   2.11.3-4 Embedded GNU C Library: Shared lib
ii  libclamav6  0.98.1+dfsg-1+deb6u1 anti-virus utility for Unix - libr
ii  zlib1g  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages clamav recommends:
ii  clamav-base 0.98.1+dfsg-1+deb6u1 anti-virus utility for Unix - base

Versions of packages clamav suggests:
ii  clamav-docs 0.98.1+dfsg-1+deb6u1 anti-virus utility for Unix - docu

-- no debconf information
--- End Message ---
--- Begin Message ---
Source: clamav
Source-Version: 0.98.1+dfsg-3

We believe that the bug you reported is fixed in the latest version of
clamav, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 741...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Scott Kitterman  (supplier of updated clamav package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Fri, 14 Mar 2014 16:30:45 -0400
Source: clamav
Binary: clamav-base clamav-docs clamav-dbg clamav libclamav-dev libclamav6 
clamav-daemon clamav-testfiles clamav-freshclam clamav-milter
Architecture: source all i386
Version: 0.98.1+dfsg-3
Distribution: unstable
Urgency: medium
Maintainer: ClamAV Team 
Changed-By: Scott Kitterman 
Description: 
 clamav - anti-virus utility for Unix - command-line interface
 clamav-base - anti-virus utility for Unix - base package
 clamav-daemon - anti-virus utility for Unix - scanner daemon
 clamav-dbg - debug symbols for ClamAV
 clamav-docs - anti-virus utility for Unix - documentation
 clamav-freshclam - anti-virus utility for Unix - virus database update utility
 clamav-milter - anti-virus utility for Unix - sendmail integration
 clamav-testfiles - anti-virus utility for Unix - test files
 libclamav-dev - anti-virus utility for Unix - development files
 libclamav6 - anti-virus utility for Unix - library
Closes: 741512
Changes: 
 clamav (0.98.1+dfsg-3) unstable; urgency=medium
 .
   [ Scott Kitterman ]
   * Switch to format 3.0 (quilt) to enable use of git-dpm
   * Extract existing inline changes into new commits/dpm patches
 - Change paths in sample conf file to match Debian
 - Add patch so that RAR tests are not expected to pass with RAR disabled
 - Add 0003-configure-use-pkg-config-for-check-so-test-is-detect.patch
 - Add 0004-Stop-using-a-cargo-culted-syscall-table-and-trust-th.patch
 - Add 0005-configure.ac-patches-to-got-with-autoreconf-and-auto.patch
 - Add 0006-Fix-STAT64-definition-and-add-missing-includes.patch
   * Fix vcs-field-not-canonical for both git and web access
   * Add libxml2-dev to build-depends for dmg and xar suppor

Bug#741620: upgrade broke starttls?

2014-03-14 Thread Stefan Hornburg (Racke)
severity 741620 grave
thanks

On 03/14/2014 04:38 PM, Joey Hess wrote:
> Package: courier-imap-ssl
> Version: 4.15-1
> Severity: normal
> 
>  Establishing connection to kitenet.net:143
>  ERROR: While attempting to sync account 'joey'
>   command: CAPABILITY => socket error:  - [Errno 1] 
> _ssl.c:1429: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
> 
> This seems to have been caused by upgrading courier.
> Since ssl is involved, I think oflinimap must have tried to STARTTLS,
> which its docs say it will do automatically when (accidentially)
> configured to not use imaps.
> 
> The good thing about this bug is I probably only configured that while on some
> horrible imaps blocking network, so I fixed my offlinimap config to use imaps
> and that works.
> 

I'm increasing the severity until I have time to look at this bug - I don't 
want to
break STARTTLS in Debian testing.

Thanks for reporting

Regards
Racke

-- 
Perl and Dancer Development

Visit our Open Source conference on E-commerce:

http://www.ecommerce-innovation.com/


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Processed: Re: Bug#741620: upgrade broke starttls?

2014-03-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> severity 741620 grave
Bug #741620 [courier-imap-ssl] upgrade broke starttls?
Severity set to 'grave' from 'normal'
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
741620: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741620
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#740506: libetpan: needs update for db5.3

2014-03-14 Thread Ricardo Mones
  Hi Hideki,

On Sat, Mar 08, 2014 at 09:14:37AM +0900, Hideki Yamane wrote:
> control: tags -1 fixed-upstream patch pending
> 
> On Sun, 2 Mar 2014 13:50:35 +0100
> Julien Cristau  wrote:
> > db5.1 is being replaced by 5.3, but libetpan doesn't seem to want to
> > build against the latter (configure checks for a list of versions
> > explicitly, not including 5.3, and chooses 5.1 if it finds it before it
> > checks for the unversioned libdb.so).
> 
>  It's just because upstream doesn't know about 5.3, I've pull requested it
>  to upstream and merged. see https://github.com/dinhviethoa/libetpan/pull/115
>  So I'll upload updated package to 10-days delayed queue.
> 
> >  $ LANG=C dpkg --info ../build/libetpan16_1.1-2.1_amd64.deb 
> > (snip)
> >  Version: 1.1-2.1
> >  Architecture: amd64
> >  Maintainer: Ricardo Mones 
> >  Installed-Size: 875
> >  Depends: libc6 (>= 2.15), libcurl3-gnutls (>= 7.16.2), libdb5.3, libexpat1 
> > (>= 2.0.1), libgcc1 (>= 1:4.1.1), libgcrypt11 (>= 1.4.5), libgnutls26 (>= 
> > 2.12.17-0), libgpg-error0 (>= 1.10), liblockfile1 (>= 1.0), libsasl2-2, 
> > libstdc++6 (>= 4.1.1), zlib1g (>= 1:1.1.4)
> >  Section: libs
> > (snip)
> 
>  NMU package depends to libdb5.3 :)

  Nice, thanks! But, shouldn't this be uploaded to unstable?

>  Also, upstream has already shipped version 1.3pre2, we should update our
>  package version before jessie release, IMHO.

  Well, no problem with this, of course :)

  Pinged you on irc, but got no response, so here I go again:

  Are you interested on helping with libetpan maintenance? I'm planning
to move yoush git repo to collab-maint (already talked with him and he
agreed), but have no experience with gbp, and not much time to take care
of libetpan itself, so any help is welcome.

  regards,
-- 
  Ricardo Mones 
  ~
  Absence of evidence is not evidence of absence.  Carl Sagan



signature.asc
Description: Digital signature


Processed: Re: Bug#741557: libapache2-mod-gnutls: apache will not start with mod_gnutls enabled

2014-03-14 Thread Debian Bug Tracking System
Processing control commands:

> retitle -1 libapache2-mod-gnutls: apache will not start if mod_authnz_ldap is 
> loaded before mod_gnutls
Bug #741557 [libapache2-mod-gnutls] libapache2-mod-gnutls: apache will not 
start with mod_gnutls enabled
Changed Bug title to 'libapache2-mod-gnutls: apache will not start if 
mod_authnz_ldap is loaded before mod_gnutls' from 'libapache2-mod-gnutls: 
apache will not start with mod_gnutls enabled'

-- 
741557: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741557
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741557: libapache2-mod-gnutls: apache will not start with mod_gnutls enabled

2014-03-14 Thread Daniel Kahn Gillmor
Control: retitle -1 libapache2-mod-gnutls: apache will not start if 
mod_authnz_ldap is loaded before mod_gnutls

On Fri 2014-03-14 12:29:35 -0400, Clint Adams wrote:
> On Thu, Mar 13, 2014 at 10:53:31PM -0400, Daniel Kahn Gillmor wrote:
>> I'm not able to replicate this:
>
> Sorry, authnz_ldap also needs to be loaded.

indeed:

root@sid:~# a2enmod authnz_ldap
Considering dependency ldap for authnz_ldap:
Enabling module ldap.
Enabling module authnz_ldap.
To activate the new configuration, you need to run:
  service apache2 restart
root@sid:~# service apache2 restart
[FAIL] Restarting web server: apache2 failed!
[warn] The apache2 configtest failed. ... (warning).
Output of config test was:
[Fri Mar 14 14:46:41.352172 2014] [:emerg] [pid 2813:tid 3074697024] 
gnutls_check_version() failed. Required: gnutls-3.2.11 Found: gnutls-2.12.23
AH00013: Pre-configuration failed
Action 'configtest' failed.
The Apache error log may have more information.
root@sid:~# 

however, if i sneakily rearrange the order of module loading, apache at
least can start up:

root@sid:~# mv /etc/apache2/mods-enabled/{,zz.}authnz_ldap.load 
root@sid:~# service apache2 restart
[ ok ] Restarting web server: apache2.
root@sid:~# 

(this breaks "a2dismod authnz_ldap", of course)

(i note that mod_ldap.so also links to libgnutls26.so, but doesn't
trigger the problem because ldap.load sorts lexicographically after
gnutls.load)

So, should we go ahead and have the same conversation about
libgnutls28-dev vs libgnutls-dev with the ldap folks?  or should we ask
the apache folks about sorting modules differently?  or should we nudge
the gmp folks to release a new version sooner rather than later?  or all
of the above?

in a twisty maze of licenses, in danger of being eaten by a grue,

   --dkg


pgpKWvHqHQpF9.pgp
Description: PGP signature


Bug#730960: Does not (or no longer?) depend on Ruby 1.8

2014-03-14 Thread David Suárez
Hi,

El Jueves, 13 de marzo de 2014 18:45:43 Gunnar Wolf escribió:
> Hi,
> 
> Reviewing ruby-bdb, I did not find any references either in its
> current Debian packaging or in the source itself to Ruby 1.8 (outside
> of historical comments):
> 
> $ grep -ri '1\.8' .
> ./tests/runit_.rb:if RUBY_VERSION >= "1.8"
> ./bdbxml1/Changes:* adapted for 1.8
> ./README.en:  For Berkeley DB 1.85 and 1.86 see bdb1
> ./debian/changelog:for libdb-ruby1.8
> ./debian/changelog:  * debian/rules: running tests on install/libdb-ruby1.8
> instead of ./debian/changelog:binary/libdb-ruby1.8, because the binary
> target for ruby1.8 is run just ./debian/changelog:ruby1.9 and not with
> ruby1.8.
> ./debian/rules:#export DH_RUBY_IGNORE_TESTS=ruby1.8 ruby1.9.1
> require-rubygems ./Changes:-- 0.1.8
> ./Changes:* adapted for 1.8.0
> ./Changes:* corrected various bug with 1.8.0
> ./util/marshal16.c:  marshal.c from 1.6.8 adapted for 1.8.0

Maybe I miss something, but on current unstable version (0.6.5-7), we have:

> Vcs-Browser: http://git.debian.org/?p=pkg-ruby-extras/ruby-bdb.git;a=summary
> Homepage: https://rubyforge.org/projects/bdb/
> XS-Ruby-Versions: ruby1.8

David


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#729873: marked as done (libjpeg-turbo: CVE-2013-6629 CVE-2013-6630)

2014-03-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Mar 2014 18:18:33 +
with message-id 
and subject line Bug#729873: fixed in libjpeg-turbo 1.3.0-3
has caused the Debian Bug report #729873,
regarding libjpeg-turbo: CVE-2013-6629 CVE-2013-6630
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
729873: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729873
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libjpeg-turbo
Severity: important
Tags: security
Justification: user security hole

Originally announced through Google Chrome:
http://googlechromereleases.blogspot.de/2013/11/stable-channel-update.html

More information in this posting by Michal Zalewski:
http://packetstormsecurity.com/files/123989/IJG-jpeg6b-libjpeg-turbo-Uninitialized-Memory.html

Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: libjpeg-turbo
Source-Version: 1.3.0-3

We believe that the bug you reported is fixed in the latest version of
libjpeg-turbo, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 729...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mike Gabriel  (supplier of updated libjpeg-turbo package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Fri, 14 Mar 2014 18:56:25 +0100
Source: libjpeg-turbo
Binary: libturbojpeg1 libturbojpeg1-dev libjpeg-turbo-test
Architecture: source amd64
Version: 1.3.0-3
Distribution: unstable
Urgency: low
Maintainer: Debian TigerVNC Packaging Team 

Changed-By: Mike Gabriel 
Description: 
 libjpeg-turbo-test - Program for testing libjpeg-turbo
 libturbojpeg1 - TurboJPEG runtime library - SIMD optimized
 libturbojpeg1-dev - Development files for the turbo JPEG library
Closes: 729873
Changes: 
 libjpeg-turbo (1.3.0-3) unstable; urgency=low
 .
   * debian/patches: (Closes: #729873)
 + Add patch 004_CVE-2013-6629.patch. Check for duplications in
   jdmarker.c (CVE-2013-6629).
 + Add patch 005_CVE-2013-6630.patch: Properly clear out memory in
   jdmarker.c. (CVE-2013-6630).
Checksums-Sha1: 
 9ce639825915da5a8704b7c46e98d43781a199a1 2220 libjpeg-turbo_1.3.0-3.dsc
 631b6084ccbdcacfeb5a81b12733898408f35f59 9220 
libjpeg-turbo_1.3.0-3.debian.tar.xz
 10c15968bad47c9a3948dadbb416aa765f82e23d 153954 libturbojpeg1_1.3.0-3_amd64.deb
 72147d88cd602873d03f306223d0b1a225b05dd3 143782 
libturbojpeg1-dev_1.3.0-3_amd64.deb
 bba5005475a2ade9d881ab01829fbe0df5e496db 21906 
libjpeg-turbo-test_1.3.0-3_amd64.deb
Checksums-Sha256: 
 2a5e832846494ef0e4c2a0589fe2a70ba8628698005749374fec67d6d7a3d5d8 2220 
libjpeg-turbo_1.3.0-3.dsc
 6908bb7c798c56cd6cc6b727ef492666b6f4765e96f51c05c6b825bd53231c24 9220 
libjpeg-turbo_1.3.0-3.debian.tar.xz
 624c6dca2d048d69ee7f256e3217d76bf485322991550f5238556572ef476bd1 153954 
libturbojpeg1_1.3.0-3_amd64.deb
 a8c56051a8a177672e5bde2415f5c7f72f3510d0dc6449698fe887e4a9a72793 143782 
libturbojpeg1-dev_1.3.0-3_amd64.deb
 3ed7a0e911a07e2dfad277d3167fdb3793908f65beddd1d14df2cb41adfad970 21906 
libjpeg-turbo-test_1.3.0-3_amd64.deb
Files: 
 5b47e80769f033e154b9ae957da73cf0 2220 graphics optional 
libjpeg-turbo_1.3.0-3.dsc
 d5567a6cc53e8651eb43686b0a5e834c 9220 graphics optional 
libjpeg-turbo_1.3.0-3.debian.tar.xz
 1a70d2aa72132a4e1a78863722dc174b 153954 libs optional 
libturbojpeg1_1.3.0-3_amd64.deb
 13d4fbfc42590e129b61452d9a1cf871 143782 libdevel optional 
libturbojpeg1-dev_1.3.0-3_amd64.deb
 c28b64edf5013405a7d54411985661ab 21906 debug extra 
libjpeg-turbo-test_1.3.0-3_amd64.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
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Bug#741637: libxapian22: Please raise package priority to "important"

2014-03-14 Thread coldtobi
Package: libxapian22
Version: 1.2.17-1
Severity: serious
Justification: Policy 2.5

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi,

during testing of a script to check for Policy 2.5 requirments, I saw that 
aptitude (priority important)
depends on libxapian22 (Prioity optional).

Quoting the policy:
Packages must not depend on packages with lower priority values (excluding
build-time dependencies). In order to ensure this, the priorities of one or
more packages may need to be adjusted.

So please adjust the prioity to important with your next upload and also 
trigger ftpmasters afterwards to adjust the
"override disparities" in the archive.

Argueable, this can also be seen as a bug in aptitude, but I think that 
aptitude deserves "important".
If you disagree, just reassign this bug to aptitude)

Best regards,
Tobias Frost


- -- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.13-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libxapian22 depends on:
ii  libc6   2.18-4
ii  libgcc1 1:4.8.2-16
ii  libstdc++6  4.8.2-16
ii  libuuid12.20.1-5.6
ii  zlib1g  1:1.2.8.dfsg-1

libxapian22 recommends no packages.

Versions of packages libxapian22 suggests:
pn  xapian-tools  

- -- no debconf information

-BEGIN PGP SIGNATURE-
Version: GnuPG v1
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=5oJZ
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741635: libsqlite3-0: Please raise package priority to "important"

2014-03-14 Thread coldtobi
Package: libsqlite3-0
Severity: serious
Justification: Policy 2.5

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi,

during testing of a script to check for Policy 2.5 requirments, I saw that 
aptitude (priority important)
depends on libsqlite3-0 (Prioity standard).

Quoting the policy:
Packages must not depend on packages with lower priority values (excluding
build-time dependencies). In order to ensure this, the priorities of one or
more packages may need to be adjusted.

So please adjust the prioity to important with your next upload and also 
trigger ftpmasters afterwards to adjust the
"override disparities" in the archive.

Argueable, this can also be seen as a bug in aptitude, but I think that 
aptitude deserves "important".
If you disagree, just reassign this bug to aptitude)

Best regards,
Tobias Frost

- -- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.13-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-BEGIN PGP SIGNATURE-
Version: GnuPG v1
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=kerD
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741568: lack of symbol versioning and gnutls mismatch results in problem

2014-03-14 Thread Clint Adams
On Fri, Mar 14, 2014 at 09:25:19AM -0400, Daniel Kahn Gillmor wrote:
> Clint, another option is for you to rebuild libmsv against
> libcurl4-nss-dev until the libcurl4-gnutls mishegas is sorted out.  the

Thanks for this idea; I have done so.


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741630: samplv1: FTBFS on i386, kfreebsd-i386: /usr/bin/ld: cannot find -lsamplv1

2014-03-14 Thread Sebastian Ramacher
Source: samplv1
Version: 0.4.0-1
Severity: serious
Justification: fails to build from source
Tags: sid jessie

samplv1 failed to build on the i386 and kfreebsd-i386 buildds:
| g++ -c -pipe -D_FORTIFY_SOURCE=2 -ffast-math -O2 -Wall -W -D_REENTRANT 
-DDATADIR="/usr/share" -DQT_NO_DEBUG -DQT_XML_LIB -DQT_GUI_LIB -DQT_CORE_LIB 
-DQT_SHARED -I/usr/share/qt4/mkspecs/linux-g++ -I. -I/usr/include/qt4/QtCore 
-I/usr/include/qt4/QtGui -I/usr/include/qt4/QtXml -I/usr/include/qt4 
-I/usr/local/include -I/usr/include -I/usr/include/qt4 -I/usr/include/qt4 
-I.moc_jack -I.ui_jack -o .obj_jack/moc_samplv1widget_wave.o 
.moc_jack/moc_samplv1widget_wave.cpp
| /usr/bin/ld: cannot find -lsamplv1
| collect2: error: ld returned 1 exit status

A full build log is available at
https://buildd.debian.org/status/fetch.php?pkg=samplv1&arch=i386&ver=0.4.0-1&stamp=1394546433

Regards
-- 
Sebastian Ramacher


signature.asc
Description: Digital signature


Bug#741600: 389-ds-base: CVE-2014-0132

2014-03-14 Thread Timo Aaltonen
On 14.03.2014 14:07, Moritz Muehlenhoff wrote:
> Package: 389-ds-base
> Severity: grave
> Tags: security
> Justification: user security hole
> 
> Hi,
> please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0132 for 
> details.

Thanks, fixed in git.d.o.


-- 
t


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741557: libapache2-mod-gnutls: apache will not start with mod_gnutls enabled

2014-03-14 Thread Clint Adams
On Thu, Mar 13, 2014 at 10:53:31PM -0400, Daniel Kahn Gillmor wrote:
> I'm not able to replicate this:

Sorry, authnz_ldap also needs to be loaded.


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741623: terminatorx: FTBFS on kfreebsd-*: too many arguments to function 'void append_alsa_device_list(GtkComboBoxText*)'

2014-03-14 Thread Sebastian Ramacher
Source: terminatorx
Version: 3.90-1
Severity: serious
Justification: fails to build from source (but built successfully in the past)
Tags: sid jessie

terminatorx fails to build on kfreebsd-*:
| g++ -DHAVE_CONFIG_H -I. -I..   -D_FORTIFY_SOURCE=2 -I/usr/include/libxml2 -g 
-O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat 
-Werror=format-security -finput-charset=utf-8   
-DXML_MANUAL=\"/usr/share/gnome/help/terminatorX-manual/C/terminatorX-manual.xml\"
 -pthread -I/usr/include/gtk-2.0 -I/usr/lib/x86_64-kfreebsd-gnu/gtk-2.0/include 
-I/usr/include/atk-1.0 -I/usr/include/cairo -I/usr/include/gdk-pixbuf-2.0 
-I/usr/include/pango-1.0 -I/usr/include/gio-unix-2.0/ -I/usr/include/freetype2 
-I/usr/include/glib-2.0 -I/usr/lib/x86_64-kfreebsd-gnu/glib-2.0/include 
-I/usr/include/pixman-1 -I/usr/include/libpng12 -I/usr/include/libdrm 
-I/usr/include/harfbuzz-D_REENTRANT  -g -O2 -fstack-protector 
--param=ssp-buffer-size=4 -Wformat -Werror=format-security -c -o tX_engine.o 
tX_engine.cc
| tX_dialog.cc: In function 'void init_tx_options(GtkWidget*)':
| tX_dialog.cc:387:75: error: too many arguments to function 'void 
append_alsa_device_list(GtkComboBoxText*)'
|   append_alsa_device_list(GTK_COMBO_BOX_TEXT(combo), globals.alsa_device_id);
|^
| tX_dialog.cc:248:6: note: declared here
|  void append_alsa_device_list(GtkComboBoxText *combo) {
|   ^
| make[5]: *** [tX_dialog.o] Error 1

See
https://buildd.debian.org/status/fetch.php?pkg=terminatorx&arch=kfreebsd-amd64&ver=3.90-1&stamp=1394454594
for a full build log.

Regards
-- 
Sebastian Ramacher


signature.asc
Description: Digital signature


Bug#658896: Still an issue

2014-03-14 Thread Gabriel Filion
Hi there,

I just stumbled upon this bug as well. We're +/- one year after the
wheezy release and this is still an issue.

It seems as though one patch was able to fix the problem, and even
though we're considering a change of librairies for jessie, it would be
really helpful to fix this in wheezy.

-- 
Gabriel Filion



signature.asc
Description: OpenPGP digital signature


Processed: Re: gst-plugins-good0.10: FTBFS: XML parser errors

2014-03-14 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 +fixed-upstream +patch
Bug #739810 [src:gst-plugins-good0.10] gst-plugins-good0.10: FTBFS: XML parser 
errors
Added tag(s) fixed-upstream.
Bug #739810 [src:gst-plugins-good0.10] gst-plugins-good0.10: FTBFS: XML parser 
errors
Added tag(s) patch.

-- 
739810: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739810
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#739810: gst-plugins-good0.10: FTBFS: XML parser errors

2014-03-14 Thread Hideki Yamane
control: tags -1 +fixed-upstream +patch

Hi,

 I've prepared patch for this bug as attached.
 Please consider to apply it. Thanks.

-- 
Hideki Yamane 
diff -Nru gst-plugins-good0.10-0.10.31/debian/changelog gst-plugins-good0.10-0.10.31/debian/changelog
--- gst-plugins-good0.10-0.10.31/debian/changelog	2013-11-23 05:20:30.0 +0900
+++ gst-plugins-good0.10-0.10.31/debian/changelog	2014-03-14 22:36:40.0 +0900
@@ -1,3 +1,13 @@
+gst-plugins-good0.10 (0.10.31-3+nmu3) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * debian/patches
+- add bug#739810.patch
+  + Fix FTBFS, patch taken from upstream bugzilla (Closes: #739810)
+Thanks to Marcin Juszkiewicz  for the info.
+
+ -- Hideki Yamane   Fri, 14 Mar 2014 22:36:41 +0900
+
 gst-plugins-good0.10 (0.10.31-3+nmu2) UNRELEASED; urgency=low
 
   [Balint Reczey]
diff -Nru gst-plugins-good0.10-0.10.31/debian/patches/bug#739810.patch gst-plugins-good0.10-0.10.31/debian/patches/bug#739810.patch
--- gst-plugins-good0.10-0.10.31/debian/patches/bug#739810.patch	1970-01-01 09:00:00.0 +0900
+++ gst-plugins-good0.10-0.10.31/debian/patches/bug#739810.patch	2014-03-14 22:31:46.0 +0900
@@ -0,0 +1,53 @@
+From 2d489753eb7fe7571ac93b38a319bc59c7451d38 Mon Sep 17 00:00:00 2001
+From: Sebastian Rasmussen 
+Date: Tue, 11 Feb 2014 01:53:26 +0100
+Subject: [PATCH] docs: Rebalance docbook tags in comments
+
+Fixes https://bugzilla.gnome.org/show_bug.cgi?id=724085
+---
+ gst/audiofx/audiocheblimit.c | 4 ++--
+ gst/udp/gstudpsrc.c  | 4 ++--
+ 2 files changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/gst/audiofx/audiocheblimit.c b/gst/audiofx/audiocheblimit.c
+index 549a9d2..7568d6a 100644
+--- a/gst/audiofx/audiocheblimit.c
 b/gst/audiofx/audiocheblimit.c
+@@ -46,12 +46,12 @@
+  * be at most this value. A lower ripple value will allow a faster rolloff.
+  *
+  * As a special case, a Chebyshev type 1 filter with no ripple is a Butterworth filter.
+- * 
++ * 
+  * 
+  * Be warned that a too large number of poles can produce noise. The most poles are possible with
+  * a cutoff frequency at a quarter of the sampling rate.
+  * 
+- * 
++ * 
+  * 
+  * Example launch line
+  * |[
+diff --git a/gst/udp/gstudpsrc.c b/gst/udp/gstudpsrc.c
+index c2cbd92..7dffef8 100644
+--- a/gst/udp/gstudpsrc.c
 b/gst/udp/gstudpsrc.c
+@@ -78,14 +78,14 @@
+  * 
+  * The message is typically used to detect that no UDP arrives in the receiver
+  * because it is blocked by a firewall.
+- * 
++ *
+  * 
+  * A custom file descriptor can be configured with the
+  * #GstUDPSrc:sockfd property. The socket will be closed when setting the
+  * element to READY by default. This behaviour can be
+  * overriden with the #GstUDPSrc:closefd property, in which case the application
+  * is responsible for closing the file descriptor.
+- *
++ * 
+  * 
+  * Examples
+  * |[
+-- 
+1.8.5.3
diff -Nru gst-plugins-good0.10-0.10.31/debian/patches/series gst-plugins-good0.10-0.10.31/debian/patches/series
--- gst-plugins-good0.10-0.10.31/debian/patches/series	2013-11-23 05:23:59.0 +0900
+++ gst-plugins-good0.10-0.10.31/debian/patches/series	2014-03-14 22:32:13.0 +0900
@@ -2,3 +2,4 @@
 01_v4l2_calls.patch
 02_gstv4l2bufferpool.patch
 99_ltmain_as-needed.patch
+bug#739810.patch


Bug#741610: Lock screen does not allow to enter password

2014-03-14 Thread dAgeCKo

Package: gdm
Version: 3.8.4-6
Severity: grave
Debian: Testing amd64
Regression: No
gnome-shell: 3.8.4-5+b1
gnome-session: 3.8.4-3

Sometimes, the lock screen does not allow to enter the password while a 
session is currently running. It completely disallows the current 
session to be recovered.
Trying to restart gdm does not help. And the only way I could find was 
to reboot my computer.

This could lead to data corruption (ie I had to make my backup again).

I found no relevant information in the various logs.

The bug seems to appear seldom and hazardously.


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741568: lack of symbol versioning and gnutls mismatch results in problem

2014-03-14 Thread Daniel Kahn Gillmor
On 03/14/2014 06:29 AM, Alessandro Ghedini wrote:
> "Avoid making git unredistributable" doesn't sound that silly to me (having
> these kind of problems in the first place kind of is though).
> 
> There's also the chance that switching to libgnutls28 would break packages 
> that
> directly or indirectly depend on libgnutls26 (that is, the inverse of the
> libapache2-mod-gnutls problem).

i'm hoping we can drop libgnutls26 entirely before jessie releases, so i
don't think this will be an issue.

>> If libcurl-gnutls really has licensing concerns about moving to
>> libgnutls28, and that causing problems for GPLv2 code that links against
>> this version of libcurl, one possibility is to introduce
>> libcurl4-gnutls28 -- there are already 3 TLS-library flavors of libcur,
>> what is one more? :P
> 
> That's not going to happen. If anything libgnutls-dev and libgnutls28-dev 
> can't
> be installed at the same time, and just because curl's packaging is already a
> mess doesn't mean it's ok to make it even more messier.

This wasn't a serious suggestion, which i tried to indicate with the :P

sorry that it wasn't clearer.

> On the bright side, I was looking into reducing the libcurl flavors to just 
> the
> libnss one, but that's not yet possible, as long as #726116 doesn't get fixed.

that would be an interesting approach.

>> There is no good reason i can see for libapache2-mod-gnutls to prefer
>> the older version with less robust algorithm availability and weaker
>> configuration options.
> 
> Well, "making it work, i.e. fix #741557, and avoid having it removed from
> testing" sounds like a pretty good reason to me. Granted, it's really not that
> much of a good solution, but it would hopefully be only temporary.

"making it work" for a security-oriented tool should *not* mean
"sacrificing the only believed-to-be-secure ciphersuites and protocol
versions just for the sake of shipping code".  I don't think mod-gnutls
should be removed from testing, but i'd rather that it be removed from
testing than force building against libgnutls26.

Clint, another option is for you to rebuild libmsv against
libcurl4-nss-dev until the libcurl4-gnutls mishegas is sorted out.  the
irony here is that libmsv doesn't actually use TLS for its outbound
connections at all, so the choice of what to use here isn't actually
relevant :/  for the sake of libmsv, i'd be happy to build against a
libcurl4-no-tls-dev package!  (Alessandro, i'm not actually suggesting
this a serious suggestion for libcurl; it's just an observation about
the frustrating pointlessness of all this wrangling).

--dkg



signature.asc
Description: OpenPGP digital signature


Processed: Re: Bug#741568: lack of symbol versioning and gnutls mismatch results in problem

2014-03-14 Thread Debian Bug Tracking System
Processing control commands:

> clone 741568 -2
Bug #741568 [libcurl4-gnutls-dev] lack of symbol versioning and gnutls mismatch 
results in problem
Bug 741568 cloned as bug 741607
741607 was not blocked by any bugs.
741607 was blocking: 741557
Added blocking bug(s) of 741607: 741557
> reassign -2 gmp
Bug #741607 [libcurl4-gnutls-dev] lack of symbol versioning and gnutls mismatch 
results in problem
Bug reassigned from package 'libcurl4-gnutls-dev' to 'gmp'.
No longer marked as found in versions curl/7.35.0-1.
Ignoring request to alter fixed versions of bug #741607 to the same values 
previously set
> retitle -2 please merge GMP's upstream licensing changes
Bug #741607 [gmp] lack of symbol versioning and gnutls mismatch results in 
problem
Changed Bug title to 'please merge GMP's upstream licensing changes' from 'lack 
of symbol versioning and gnutls mismatch results in problem'

-- 
741568: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741568
741607: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741607
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741568: lack of symbol versioning and gnutls mismatch results in problem

2014-03-14 Thread Daniel Kahn Gillmor
Control: clone 741568 -2
Control: reassign -2 gmp
Control: retitle -2 please merge GMP's upstream licensing changes

On 03/14/2014 06:29 AM, Alessandro Ghedini wrote:
> On Thu, Mar 13, 2014 at 10:42:23PM -0400, Daniel Kahn Gillmor wrote:
>> On 03/13/2014 09:44 PM, Clint Adams wrote:
>>> On Fri, Mar 14, 2014 at 01:11:16AM +0100, Alessandro Ghedini wrote:
 Well, nope. libgnutls28 still links against libgmp10 which is still LGPL3+.
 Unless I'm missing something that would make git (GPL2only) 
 unredistributable.
 So no, that's not actually possible (again, unless I'm missing something).
>>>
>>> As far as I'm concerned, git should change its license irrespective of any
>>> gmp compromise.
>>
>> i'd love to see git sort out more sensible licensing too, but libgmp
>> *is* actually in the process of a transition to dual-licensed LGPL3+ and
>> GPL2+:
> 
> As I said in my email, I'm already aware of this, but as long as that hasn't
> reached Debian we still have to deal with the problem. You may ask the gmp
> maintainer to merge those changes in Debian though. That would help.

Consider this an ask to the GMP maintainers.

It would be great if GMP's upstream licensing change could be
merged/reflected in the debian packaging, since there are a chain of
outstanding licensing issues that the shift will neatly resolve.

Many many thanks to GMP for making these licensing changes, compromise
though they may be, for the sake of the redistributability of many
critical pieces of the free software ecosystem.

--dkg



signature.asc
Description: OpenPGP digital signature


Bug#740345: [Pkg-systemd-maintainers] Bug#740345: Bug#740345: Bug#740345: systemd: configuration/arch-any files under /usr/lib/

2014-03-14 Thread Michael Stapelberg
Hi Michael,

Michael Biebl  writes:
> I don't think we necessarily need the distinction between directories in
> /usr/lib/ holding architecture-indep only data or a mixture, and with
> the current proposal  #740345 would still be a valid bug, though with
> non-RC severity (as it would violate a should directive).
>
> But I guess it would then be one of those cases where we simply tag the
> bug as wontfix. That directory is sort-of API and we shouldn't change it
> downstream, imho.
Agreed. Thanks for taking care of this.

-- 
Best regards,
Michael


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#738401: marked as done (postgresql-pljava: FTBFS: dpkg-source: error: postgresql-pljava-1.4.3/debian/control doesn't list any binary package)

2014-03-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Mar 2014 13:00:07 +
with message-id 
and subject line Bug#731518: fixed in postgresql-pljava 1.4.3-3
has caused the Debian Bug report #731518,
regarding postgresql-pljava: FTBFS: dpkg-source: error: 
postgresql-pljava-1.4.3/debian/control doesn't list any binary package
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
731518: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731518
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: postgresql-pljava
Version: 1.4.3-2
Severity: serious
Tags: jessie sid
User: debian...@lists.debian.org
Usertags: qa-ftbfs-20140208 qa-ftbfs
Justification: FTBFS on amd64

Hi,

During a rebuild of all packages in sid, your package failed to build on
amd64.

Relevant part (hopefully):
>  fakeroot debian/rules clean
> (set -e; \
>   VERSIONS=`pg_buildext supported-versions /«PKGBUILDDIR»`; \
>   grep-dctrl -vP PGVERSION debian/control.in > debian/control.pgxs_tmp; \
>   for v in $VERSIONS; do \
>   grep-dctrl -P PGVERSION debian/control.in | sed -e 
> "s:PGVERSION:$v:" >> debian/control.pgxs_tmp; \
>   done; \
>   mv debian/control.pgxs_tmp debian/control) || (rm -f 
> debian/control.pgxs_tmp; exit 1)
> dh_testdir
> dh_testroot
> rm -rf build build-?.? build-stamp
> dh_clean
>  dpkg-source -b postgresql-pljava-1.4.3
> dpkg-source: error: postgresql-pljava-1.4.3/debian/control doesn't list any 
> binary package
> dpkg-buildpackage: error: dpkg-source -b postgresql-pljava-1.4.3 gave error 
> exit status 255
> 
> Build finished at 20140209-0206

The full build log is available from:
   
http://aws-logs.debian.net/ftbfs-logs/2014/02/08/postgresql-pljava_1.4.3-2_unstable.log

A list of current common problems and possible solutions is available at
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!

About the archive rebuild: The rebuild was done on EC2 VM instances from
Amazon Web Services, using a clean, minimal and up-to-date chroot. Every
failed build was retried once to eliminate random failures.
--- End Message ---
--- Begin Message ---
Source: postgresql-pljava
Source-Version: 1.4.3-3

We believe that the bug you reported is fixed in the latest version of
postgresql-pljava, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 731...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Peter Eisentraut  (supplier of updated postgresql-pljava 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Thu, 13 Mar 2014 00:16:40 -0400
Source: postgresql-pljava
Binary: postgresql-9.3-pljava-gcj
Architecture: source i386
Version: 1.4.3-3
Distribution: unstable
Urgency: low
Maintainer: Peter Eisentraut 
Changed-By: Peter Eisentraut 
Description: 
 postgresql-9.3-pljava-gcj - Java procedural language for PostgreSQL 9.3
Closes: 731518
Changes: 
 postgresql-pljava (1.4.3-3) unstable; urgency=low
 .
   * Build for PostgreSQL 9.3 (closes: #731518)
Checksums-Sha1: 
 85c5ad6ca91c07048501b0903ff747f38d959460 1418 postgresql-pljava_1.4.3-3.dsc
 eb29dcc9e40abc49cffaed8e825cb1c858901a8c 6044 
postgresql-pljava_1.4.3-3.debian.tar.xz
 6fa2113834542a5b6e469307b76119bf1ab02b87 284668 
postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb
Checksums-Sha256: 
 2fa26de68f60f40f7df20845a45742020a100c2e2fc09e435270503188c1142b 1418 
postgresql-pljava_1.4.3-3.dsc
 11d59eac06588abdb7e1a028ba704c4162af43d306139955b595f91f32fc796d 6044 
postgresql-pljava_1.4.3-3.debian.tar.xz
 98cda49d7e30315bd84c70b0bf25f8f2165f4ada8120a4ed8c09fe18020f4bba 284668 
postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb
Files: 
 a1e53a4034b2de5b0780a6e325a72570 1418 database optional 
postgresql-pljava_1.4.3-3.dsc
 c888bd400bf6263c401686c81ea872b0 6044 database optional 
postgresql-pljava_1.4.3-3.debian.tar.xz
 fb5475f00c6bdf0c45540bebc37bbdea 284668 database optional 
postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.15 (GNU/Linux)

iEYEARECAAYFAlMhM1gACgkQTTx8oVVPtMbfTgCfbrjp111sLpBiRkurHV7mOagt
dV0AoMOTlpnOmSFLksg0Q56qb7yG0WkG
=kbO4
-END PGP SI

Bug#731518: marked as done (FTBFS, postgresql-9.1 not supported any more; please move to 9.3)

2014-03-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Mar 2014 13:00:07 +
with message-id 
and subject line Bug#731518: fixed in postgresql-pljava 1.4.3-3
has caused the Debian Bug report #731518,
regarding FTBFS, postgresql-9.1 not supported any more; please move to 9.3
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
731518: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731518
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: postgresql-pljava
Version: 1.4.3-2
Severity: important
User: pkg-postgresql-pub...@lists.alioth.debian.org
Usertags: migration-93

For wheezy we support PostgreSQL 9.3, and want to drop postgresql-9.1.
Can you please build a -9.3 extension (only)?

Thanks,

Martin
-- 
Martin Pitt| http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)


signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: postgresql-pljava
Source-Version: 1.4.3-3

We believe that the bug you reported is fixed in the latest version of
postgresql-pljava, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 731...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Peter Eisentraut  (supplier of updated postgresql-pljava 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Thu, 13 Mar 2014 00:16:40 -0400
Source: postgresql-pljava
Binary: postgresql-9.3-pljava-gcj
Architecture: source i386
Version: 1.4.3-3
Distribution: unstable
Urgency: low
Maintainer: Peter Eisentraut 
Changed-By: Peter Eisentraut 
Description: 
 postgresql-9.3-pljava-gcj - Java procedural language for PostgreSQL 9.3
Closes: 731518
Changes: 
 postgresql-pljava (1.4.3-3) unstable; urgency=low
 .
   * Build for PostgreSQL 9.3 (closes: #731518)
Checksums-Sha1: 
 85c5ad6ca91c07048501b0903ff747f38d959460 1418 postgresql-pljava_1.4.3-3.dsc
 eb29dcc9e40abc49cffaed8e825cb1c858901a8c 6044 
postgresql-pljava_1.4.3-3.debian.tar.xz
 6fa2113834542a5b6e469307b76119bf1ab02b87 284668 
postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb
Checksums-Sha256: 
 2fa26de68f60f40f7df20845a45742020a100c2e2fc09e435270503188c1142b 1418 
postgresql-pljava_1.4.3-3.dsc
 11d59eac06588abdb7e1a028ba704c4162af43d306139955b595f91f32fc796d 6044 
postgresql-pljava_1.4.3-3.debian.tar.xz
 98cda49d7e30315bd84c70b0bf25f8f2165f4ada8120a4ed8c09fe18020f4bba 284668 
postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb
Files: 
 a1e53a4034b2de5b0780a6e325a72570 1418 database optional 
postgresql-pljava_1.4.3-3.dsc
 c888bd400bf6263c401686c81ea872b0 6044 database optional 
postgresql-pljava_1.4.3-3.debian.tar.xz
 fb5475f00c6bdf0c45540bebc37bbdea 284668 database optional 
postgresql-9.3-pljava-gcj_1.4.3-3_i386.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.15 (GNU/Linux)

iEYEARECAAYFAlMhM1gACgkQTTx8oVVPtMbfTgCfbrjp111sLpBiRkurHV7mOagt
dV0AoMOTlpnOmSFLksg0Q56qb7yG0WkG
=kbO4
-END PGP SIGNATURE End Message ---


Bug#741604: libspring-java: Multiple security issues

2014-03-14 Thread Moritz Muehlenhoff
Package: libspring-java
Severity: grave
Tags: security
Justification: user security hole

http://www.gopivotal.com/security/cve-2014-0054
http://www.gopivotal.com/security/cve-2014-1904

I'm not sure whether these are worth a DSA?

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741603: missing license in debian/copyright

2014-03-14 Thread Thorsten Alteholz

Package: ompl
Version: 0.14.1-1
Severity: serious
User: alteh...@debian.org
Usertags: ftp
X-Debbugs-CC: ftpmas...@ftp-master.debian.org
thanks

Dear Maintainer,

please add the missing licenses of
 ompl-0.14.1-Source\doc\css\bootstrap-responsive.css
 ompl-0.14.1-Source\doc\css\bootstrap.css
 ompl-0.14.1-Source\doc\js\bootstrap.js
 ompl-0.14.1-Source\doc\js\gen_validatorv31.js
 ompl-0.14.1-Source\doc\js\jquery.js
 ompl-0.14.1-Source\doc\php\captcha_code_file.php
 ompl-0.14.1-Source\py-bindings\py_boost_function.hpp
 ompl-0.14.1-Source\src\external\omplext_odeint\boost\*
 ompl-0.14.1-Source\tests\*
to debian/copyright.

Thanks!
  Thorsten


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741602: virtualbox: CVE-2014-0981 CVE-2014-0982 CVE-2014-0983

2014-03-14 Thread Moritz Muehlenhoff
Package: virtualbox
Severity: grave
Tags: security
Justification: user security hole

Hi,
please see 
http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741600: 389-ds-base: CVE-2014-0132

2014-03-14 Thread Moritz Muehlenhoff
Package: 389-ds-base
Severity: grave
Tags: security
Justification: user security hole

Hi,
please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0132 for 
details.

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#740491: same problem, different solution

2014-03-14 Thread Robin Wood
The two previous suggestions didn't fix it for me so I removed
rpcbind, nfs-common and nfs-kernel-server then reinstalled them one at
a time. That worked foe me.

Robin


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741599: missing license in debian/copyright

2014-03-14 Thread Thorsten Alteholz

Package: geographiclib
Version: 1.34-1
Severity: serious
User: alteh...@debian.org
Usertags: ftp
X-Debbugs-CC: ftpmas...@ftp-master.debian.org
thanks

Dear Maintainer,

please add the missing expat license of dozens of files to 
debian/copyright.


Thanks!
  Thorsten


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#740673: apt-cdrom ident started requesting to insert cd even if cd is already mounted

2014-03-14 Thread Cyril Brulebois
Cyril Brulebois  (2014-03-13):
> Important note on interactivity:
> 
> I've noticed the “apt-cdrom add” we have in apt-setup has a final
> “< /dev/null” to explicitly disable interactivity. I've tried patching
> all “apt-cdrom ident” calls to include that redirection as well, which
> affects the following files:
>   generators/40cdrom
>   generators/41cdset
>   load-install-cd
> 
> I've generated an ISO with the updated udebs, and the default install
> went through without any hangs. I've also verified half-way through
> that packages available in the ISO were seen this way in /target by
> apt, meaning only the missing packages were downloaded from the
> configurer network mirror.
> 
> Initially, I wasn't too happy about patching apt-setup this late, but
> the code deduplication commit points out that “apt-cdrom add” and
> “apt-cdrom ident” are quite close, so maybe we should just release with
> a patched apt-setup, disabling interactivity for all “apt-cdrom
> {add,ident}” calls, and see how well it goes.
> 
> 
> Do (apt/d-i) folks think this is crazy, or worth a try?

So this commit landed in apt 0.9.16, uploaded today:
| commit b374004b8ffebe393c5fd5e8056f7a99849c0ebd
| Author: David Kalnischkies 
| Date:   Mon Mar 10 00:09:56 2014 +0100
| 
| apt-cdrom ident shouldn't be interactive
| 
| Commit 62dcbf84 changed the code of ident to look more like the code for
| add on my suggestion. This made ident interactive as it starts with a
| unmount, press enter, mount cycle. The first two are skipped now.
| This fixes d-i/apt-setup which is using it to get ID as well as label.
| 
| Closes: 740673

Given it's bundled with a lot more changes, I don't feel like having apt
rushed into testing, so I'll probably push the “< /dev/null” bits to
apt-setup so as to disable interactivity from the caller, and get that
into testing urgently.

Mraw,
KiBi.


signature.asc
Description: Digital signature


Bug#740345: [Pkg-systemd-maintainers] Bug#740345: Bug#740345: Bug#740345: systemd: configuration/arch-any files under /usr/lib/

2014-03-14 Thread Michael Biebl
Am 11.03.2014 11:02, schrieb Michael Stapelberg:
> Hi Michael,
> 
> Michael Biebl  writes:
>> See the discussion in
>> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741304
>>
>> Tollef, Michael S., we should consider seconding Joeyh's proposal to get
>> this into the next debian-policy revision.
> Thanks for pointing out that bug. I agree with the proposal. How do we
> officially second this? Is seconding how policy changes work?

I wasn't entirely sure about the current process, so I looked around a
bit and found [0]. This proposal [1] already has three seconds (Russ,
Jakub and Julien), so that should already be sufficient. Obviously,
additional seconds don't hurt and I consider to do so myself.

I don't think we necessarily need the distinction between directories in
/usr/lib/ holding architecture-indep only data or a mixture, and with
the current proposal  #740345 would still be a valid bug, though with
non-RC severity (as it would violate a should directive).

But I guess it would then be one of those cases where we simply tag the
bug as wontfix. That directory is sort-of API and we shouldn't change it
downstream, imho.

Michael

[0] https://wiki.debian.org/PolicyChangesProcess
[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741304

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#741568: lack of symbol versioning and gnutls mismatch results in problem

2014-03-14 Thread Alessandro Ghedini
On Thu, Mar 13, 2014 at 10:42:23PM -0400, Daniel Kahn Gillmor wrote:
> On 03/13/2014 09:44 PM, Clint Adams wrote:
> > On Fri, Mar 14, 2014 at 01:11:16AM +0100, Alessandro Ghedini wrote:
> >> Well, nope. libgnutls28 still links against libgmp10 which is still LGPL3+.
> >> Unless I'm missing something that would make git (GPL2only) 
> >> unredistributable.
> >> So no, that's not actually possible (again, unless I'm missing something).
> > 
> > As far as I'm concerned, git should change its license irrespective of any
> > gmp compromise.
> 
> i'd love to see git sort out more sensible licensing too, but libgmp
> *is* actually in the process of a transition to dual-licensed LGPL3+ and
> GPL2+:

As I said in my email, I'm already aware of this, but as long as that hasn't
reached Debian we still have to deal with the problem. You may ask the gmp
maintainer to merge those changes in Debian though. That would help.

> This should suffice for git, afaict.  GMPLib hasn't rolled a release
> that includes this change yet, but they do apparently plan a release in
> "early 2014".  I'd love to see gnutls26 just go away in debian when this
> transition happens, but it seems silly to block on it.

"Avoid making git unredistributable" doesn't sound that silly to me (having
these kind of problems in the first place kind of is though).

There's also the chance that switching to libgnutls28 would break packages that
directly or indirectly depend on libgnutls26 (that is, the inverse of the
libapache2-mod-gnutls problem).

> If libcurl-gnutls really has licensing concerns about moving to
> libgnutls28, and that causing problems for GPLv2 code that links against
> this version of libcurl, one possibility is to introduce
> libcurl4-gnutls28 -- there are already 3 TLS-library flavors of libcur,
> what is one more? :P

That's not going to happen. If anything libgnutls-dev and libgnutls28-dev can't
be installed at the same time, and just because curl's packaging is already a
mess doesn't mean it's ok to make it even more messier.

On the bright side, I was looking into reducing the libcurl flavors to just the
libnss one, but that's not yet possible, as long as #726116 doesn't get fixed.

> >> Also, I don't see how this is a critical bug in curl. If your concern is
> >> libapache2-mod-gnutls why not just switch it back to libgnutls26?
> > 
> > That's a question for the libapache2-mod-gnutls maintainer.
> 
> GnuTLS 2.12.x (SONAME 26) is not supported by upstream any longer (has
> not been for years) and GnuTLS 3.x (SONAME 28) has significant
> improvements in terms of protocol version and algorithm availability
> (e.g. AES-GCM, the only known cipher mode that resists all known attacks
> is not available in 2.12.x) and useful configuration options (e.g.
> priority string improvements).
> 
> There is no good reason i can see for libapache2-mod-gnutls to prefer
> the older version with less robust algorithm availability and weaker
> configuration options.

Well, "making it work, i.e. fix #741557, and avoid having it removed from
testing" sounds like a pretty good reason to me. Granted, it's really not that
much of a good solution, but it would hopefully be only temporary.

Cheers

-- 
perl -E '$_=q;$/= @{[@_]};and s;\S+;;eg;say~~reverse'


signature.asc
Description: Digital signature


Bug#740673: marked as done (apt-cdrom ident started requesting to insert cd even if cd is already mounted)

2014-03-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Mar 2014 09:50:02 +
with message-id 
and subject line Bug#740673: fixed in apt 0.9.16
has caused the Debian Bug report #740673,
regarding apt-cdrom ident started requesting to insert cd even if cd is already 
mounted
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
740673: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=740673
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: apt
Version: 0.9.15.5
Severity: important
Tags: d-i
User: debian-h...@lists.debian.org
Usertags: hurd
Control: found -1 0.9.15.2
Control: notfound -1 0.9.15.1

On hurd, "apt-cdrom ident" started requesting to insert cdrom even if cdrom is
already mounted.
That breaks debian-installer given it's called by load-install-cd.
Recent debian-installer builds get stuck at "Configuring apt - Scanning the
CD-ROM".
See https://bugs.debian.org/728153


root@hurd01:~# df /dev/hd2
Filesystem 1K-blocks   Used Available Use% Mounted on
/dev/hd2  660026 660026 0 100% /media/cdrom0
root@hurd01:~# apt-cdrom ident
Using CD-ROM mount point /media/cdrom/
Unmounting CD-ROM
Waiting for disc...
Please insert a Disc in the drive and press enter   <<
Mounting CD-ROM...
Identifying.. [478550b67bb0515eb3936a92b05b79be-2]
Stored label: 
Unmounting CD-ROM...
root@hurd01:~# dpkg -i libapt-pkg4.12_0.9.15.1_hurd-i386.deb 
dpkg: warning: downgrading libapt-pkg4.12:hurd-i386 from 0.9.15.5 to 0.9.15.1
(Reading database ... 130961 files and directories currently installed.)
Preparing to unpack .../libapt-pkg4.12_0.9.15.1_hurd-i386.deb ...
Unpacking libapt-pkg4.12:hurd-i386 (0.9.15.1) over (0.9.15.5) ...
Setting up libapt-pkg4.12:hurd-i386 (0.9.15.1) ...
Processing triggers for libc-bin (2.18-3) ...
root@hurd01:~# apt-cdrom ident
Using CD-ROM mount point /media/cdrom/
Mounting CD-ROM
Identifying.. [478550b67bb0515eb3936a92b05b79be-2]
Stored label: 
Unmounting CD-ROM...

-- System Information:
Debian Release: jessie/sid
  APT prefers unreleased
  APT policy: (500, 'unreleased'), (500, 'unstable'), (1, 'experimental')
Architecture: hurd-i386 (i686-AT386)

Kernel: GNU-Mach 1.4-486-dbg/Hurd-0.5
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages apt depends on:
ii  debian-archive-keyring  2012.4
ii  gnupg   1.4.16-1.1
ii  libapt-pkg4.12  0.9.15.5
ii  libc0.3 2.18-3
ii  libgcc1 1:4.8.2-16
ii  libstdc++6  4.8.2-16

apt recommends no packages.

Versions of packages apt suggests:
pn  apt-doc 
ii  aptitude0.6.10-1
ii  dpkg-dev1.17.6
ii  python-apt  0.9.3.1
ii  xz-utils5.1.1alpha+20120614-2

-- no debconf information
--- End Message ---
--- Begin Message ---
Source: apt
Source-Version: 0.9.16

We believe that the bug you reported is fixed in the latest version of
apt, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 740...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Vogt  (supplier of updated apt package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Fri, 14 Mar 2014 09:45:05 +0100
Source: apt
Binary: apt libapt-pkg4.12 libapt-inst1.5 apt-doc libapt-pkg-dev libapt-pkg-doc 
apt-utils apt-transport-https
Architecture: source all amd64
Version: 0.9.16
Distribution: unstable
Urgency: medium
Maintainer: APT Development Team 
Changed-By: Michael Vogt 
Description: 
 apt- commandline package manager
 apt-doc- documentation for APT
 apt-transport-https - https download transport for APT
 apt-utils  - package management related utility programs
 libapt-inst1.5 - deb package format runtime library
 libapt-pkg-dev - development files for APT's libapt-pkg and libapt-inst
 libapt-pkg-doc - documentation for APT development
 libapt-pkg4.12 - package management runtime library
Closes: 661537 740673 740843 741056
Changes: 
 apt (0.9.16) unstable; urgency=medium
 .
   [ Michael Vogt ]
   * add hashsum support in apt-helper download-file and
 add more tests
 .
   [ Trần Ngọc Quân ]
   * l10n: vi.po (624t): Update Vietnamese translation
 .
   [ Dav

Processed: found 741303 in 1:0.97.0-beta.1-1

2014-03-14 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> found 741303 1:0.97.0-beta.1-1
Bug #741303 [libfeel++1] libfeel++1: libfeelpp.so.1.0.0 links with both 
GPL-licensed and GPL-incompatible libraries
Marked as found in versions feel++/1:0.97.0-beta.1-1.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
741303: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741303
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#740730: marked as done (fcitx-mozc: input method doesn't load with GTK2 frontend)

2014-03-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Mar 2014 17:41:05 +0900
with message-id <20140314084105.gb5...@camelia.2ion.de>
and subject line Re: Bug#740730: fcitx-mozc: input method doesn't load with 
GTK2 frontend
has caused the Debian Bug report #740730,
regarding fcitx-mozc: input method doesn't load with GTK2 frontend
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
740730: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=740730
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: fcitx-mozc
Version: 1.13.1651.102-2
Severity: grave
Justification: renders package unusable

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

Upgraded fcitx-mozc along with mozc-server and dependencies from 1.12.1599.102
to 1.13.1651.102-2. However, the problem was already present in
1.13.1651.102-1.

   * What was the outcome of this action?

The input method was expected to become active.

   * What outcome did you expect instead?

The input didn't activate at all.

Furthermore, the problem appears only with the GTK2 front-end. The GTK3, Qt4,
Qt5 front-ends work flawlessly. Also, in GTK2 the input method is not
registered at all as it doesn't appear in the context menu on GTK2 text entries
(right click -> Input Methods lists only "Simple" and "None" with "Simple"
selected as the default).

I think that the severity setting is justified because core productivity
applications like Iceweasel still rely on GTK2.



-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.13-5.dmz.2-liquorix-amd64 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages fcitx-mozc depends on:
ii  fcitx-bin   1:4.2.8.3-2+b1
ii  fcitx-data  1:4.2.8.3-2
ii  fcitx-modules   1:4.2.8.3-2+b1
ii  libc6   2.18-4
ii  libprotobuf82.5.0-9
ii  libstdc++6  4.8.2-16
ii  mozc-data   1.12.1599.102-1
ii  mozc-server 1.13.1651.102-2
ii  tegaki-zinnia-japanese  0.3-1

Versions of packages fcitx-mozc recommends:
ii  fcitx   1:4.2.8.3-2
ii  mozc-utils-gui  1.13.1651.102-2

fcitx-mozc suggests no packages.

-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 1.13.1651.102-2

The bug was resolved in the related package fcitx-frontend-gtk2 with version
1:4.2.8.3-3.--- End Message ---


Bug#735809: obnam: FTBFS: Tests failed

2014-03-14 Thread Lars Wirzenius
On Fri, Jan 17, 2014 at 08:12:28PM +0100, David Suárez wrote:
> > FAILURE: test_lgetxattr (vfs_local_tests.XAttrTests)
> > Traceback (most recent call last):
> >   File "./obnamlib/vfs_local_tests.py", line 74, in test_lgetxattr
> > self.assertEqual(_obnam.lgetxattr(self.filename, "user.hello"), "world")
> > AssertionError: 95 != 'world'
> > 
> > FAILURE: test_lsetxattr (vfs_local_tests.XAttrTests)
> > Traceback (most recent call last):
> >   File "./obnamlib/vfs_local_tests.py", line 69, in test_lsetxattr
> > ["user.hello", "user.key"])
> > AssertionError: Lists differ: [''] != ['user.hello', 'user.key']

Right, this is because the filesystem used by the builds for $TMPDIR
doesn't support user xattrs. I've fixed the code to skip these tests
in that circumstance.

Thank you for reporting this!

-- 
http://www.cafepress.com/trunktees -- geeky funny T-shirts
http://gtdfh.branchable.com/ -- GTD for hackers


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#737596: mysql-5.5: CVE-2014-0001: command-line tool buffer overflow via long server version string

2014-03-14 Thread Salvatore Bonaccorso
Control: clone 737596 -1
Control: reassign -1 src:mysql-5.6
Control: retitle -1 mysql-5.6: CVE-2014-0001: command-line tool buffer overflow 
via long server version string

Hi,

On Tue, Feb 04, 2014 at 06:51:50AM +0100, Salvatore Bonaccorso wrote:
> Source: mysql-5.5
> Severity: important
> Tags: security upstream
> 
> Hi,
> 
> the following vulnerability was published for mysql-5.5.
> 
> CVE-2014-0001[0]:
> command-line tool buffer overflow via long server version string
> 
> If you fix the vulnerability please also make sure to include the
> CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
> 
> For further information see:
> 
> [0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0001
> http://security-tracker.debian.org/tracker/CVE-2014-0001
> [1] http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64
> [2] https://bugzilla.redhat.com/show_bug.cgi?id=1054592
> 
> Please adjust the affected versions in the BTS as needed.

The same seems to apply to mysql-5.6 at first glance. Cloning the
original bugreport to make a copy for the mysql-5.6 source package.

Regards,
Salvatore


signature.asc
Description: Digital signature


Processed: Re: Bug#737596: mysql-5.5: CVE-2014-0001: command-line tool buffer overflow via long server version string

2014-03-14 Thread Debian Bug Tracking System
Processing control commands:

> clone 737596 -1
Bug #737596 [src:mysql-5.5] mysql-5.5: CVE-2014-0001: command-line tool buffer 
overflow via long server version string
Bug 737596 cloned as bug 741590
> reassign -1 src:mysql-5.6
Bug #741590 [src:mysql-5.5] mysql-5.5: CVE-2014-0001: command-line tool buffer 
overflow via long server version string
Bug reassigned from package 'src:mysql-5.5' to 'src:mysql-5.6'.
No longer marked as found in versions mysql-5.5/5.5.20-1.
Ignoring request to alter fixed versions of bug #741590 to the same values 
previously set
> retitle -1 mysql-5.6: CVE-2014-0001: command-line tool buffer overflow via 
> long server version string
Bug #741590 [src:mysql-5.6] mysql-5.5: CVE-2014-0001: command-line tool buffer 
overflow via long server version string
Changed Bug title to 'mysql-5.6: CVE-2014-0001: command-line tool buffer 
overflow via long server version string' from 'mysql-5.5: CVE-2014-0001: 
command-line tool buffer overflow via long server version string'

-- 
737596: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737596
741590: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741590
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#741585: libexplain51-dbg and libexplain30-dbg: error when trying to install together

2014-03-14 Thread Ralf Treinen
Package: libexplain30-dbg,libexplain51-dbg
Version: libexplain30-dbg/0.52.D002-1
Version: libexplain51-dbg/1.4.D001-1
Severity: serious
User: trei...@debian.org
Usertags: edos-file-overwrite

Date: 2014-03-14
Architecture: amd64
Distribution: sid

Hi,

automatic installation tests of packages that share a file and at the
same time do not conflict by their package dependency relationships has
detected the following problem:


Selecting previously unselected package libperl4-corelibs-perl.
(Reading database ... 10943 files and directories currently installed.)
Preparing to unpack .../libperl4-corelibs-perl_0.003-1_all.deb ...
Unpacking libperl4-corelibs-perl (0.003-1) ...
Selecting previously unselected package lsof.
Preparing to unpack .../lsof_4.86+dfsg-1_amd64.deb ...
Unpacking lsof (4.86+dfsg-1) ...
Selecting previously unselected package libexplain30.
Preparing to unpack .../libexplain30_0.52.D002-1_amd64.deb ...
Unpacking libexplain30 (0.52.D002-1) ...
Selecting previously unselected package libexplain51.
Preparing to unpack .../libexplain51_1.4.D001-1_amd64.deb ...
Unpacking libexplain51 (1.4.D001-1) ...
Selecting previously unselected package libexplain30-dbg.
Preparing to unpack .../libexplain30-dbg_0.52.D002-1_amd64.deb ...
Unpacking libexplain30-dbg (0.52.D002-1) ...
Selecting previously unselected package libexplain51-dbg.
Preparing to unpack .../libexplain51-dbg_1.4.D001-1_amd64.deb ...
Unpacking libexplain51-dbg (1.4.D001-1) ...
dpkg: error processing archive 
/var/cache/apt/archives/libexplain51-dbg_1.4.D001-1_amd64.deb (--unpack):
 trying to overwrite '/usr/lib/debug/usr/bin/explain', which is also in package 
libexplain30-dbg 0.52.D002-1
dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)
Processing triggers for man-db (2.6.6-1) ...
Errors were encountered while processing:
 /var/cache/apt/archives/libexplain51-dbg_1.4.D001-1_amd64.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)


This is a serious bug as it makes installation fail, and violates
sections 7.6.1 and 10.1 of the policy. An optimal solution would
consist in only one of the packages installing that file, and renaming
or removing the file in the other package. Depending on the
circumstances you might also consider Replace relations or file
diversions. If the conflicting situation cannot be resolved then, as a
last resort, the two packages have to declare a mutual
Conflict. Please take into account that Replaces, Conflicts and
diversions should only be used when packages provide different
implementations for the same functionality.

Here is a list of files that are known to be shared by both packages
(according to the Contents file for sid/amd64, which may be
slightly out of sync):

  /usr/lib/debug/usr/bin/explain

This bug has been filed against both packages. If you, the maintainers of
the two packages in question, have agreed on which of the packages will
resolve the problem please reassign the bug to that package. You may then
also register in the BTS that the other package is affected by the bug.

-Ralf.

PS: for more information about the detection of file overwrite errors
of this kind see http://edos.debian.net/file-overwrites/.


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org