Bug#732842: pu: package libotr/3.2.1-1
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: pu As discussed on #725779 in more details, the OTRv1 protocol has serious security issues. Clients supporting it (in addition to more recent, safer versions of the protocol) are subject to protocol downgrade attacks. This is why I have proposed to drop support for OTRv1 in libotr in Wheezy. As the discussion on the aforementioned bug indicates, the maintainer agrees and the lead upstream developer confirms it is totally fine. I have therefore backported the relevant bits of the upstream commit that does just the same in libotr 4.x (currently in testing/sid). The resulting package was successfully tested with pidgin-otr on Wheezy, and inter-operates correctly with sid's pidgin-otr and irssi-otr 1.0.0~alpha2-1~bpo70+1. FTR, testing/sid has libotr 4.x that is not affected by these issues. May I upload libotr 3.2.1-1+deb7u1 to stable? diff -Nru libotr-3.2.1/debian/changelog libotr-3.2.1/debian/changelog --- libotr-3.2.1/debian/changelog 2012-08-07 12:25:12.0 +0200 +++ libotr-3.2.1/debian/changelog 2013-12-22 12:06:00.0 +0100 @@ -1,3 +1,10 @@ +libotr (3.2.1-1+deb7u1) stable; urgency=medium + + * Non-maintainer upload with maintainer's agreement. + * Disable insecure OTRv1 protocol (Closes: #725779) + + -- intrigeri intrig...@debian.org Sun, 22 Dec 2013 11:35:06 +0100 + libotr (3.2.1-1) unstable; urgency=high * Fix potential buffer overflow in base64 routines (Closes: #684121) diff -Nru libotr-3.2.1/debian/patches/disable_otr_v1.patch libotr-3.2.1/debian/patches/disable_otr_v1.patch --- libotr-3.2.1/debian/patches/disable_otr_v1.patch 1970-01-01 01:00:00.0 +0100 +++ libotr-3.2.1/debian/patches/disable_otr_v1.patch 2013-12-22 11:34:40.0 +0100 @@ -0,0 +1,39 @@ +Author: Rob Smits rdfsm...@cs.uwaterloo.ca +Date: Sun Jun 3 22:38:05 2012 -0400 +Subject: Disable OTRv1 protocol. +Origin: http://sourceforge.net/p/otr/libotr/ci/7ffba65fa42052795523924279bc94e7c80fb0f7/ +Bug: http://bugs.debian.org/725779 +Forwarded: not-needed +Reviewed-by: intrigeri intrig...@debian.org +Last-Update: Sun Dec 22 11:30:00 2013 +0100 +Applied-Upstream: 4.0.0 + +diff --git a/src/proto.h b/src/proto.h +index d7b0ae6..e96e2f2 100644 +--- a/src/proto.h b/src/proto.h +@@ -45,20 +45,17 @@ typedef unsigned int OtrlPolicy; + + #define OTRL_POLICY_VERSION_MASK (OTRL_POLICY_ALLOW_V1 | OTRL_POLICY_ALLOW_V2) + +-/* For v1 compatibility */ ++/* Analogous to v1 policies */ + #define OTRL_POLICY_NEVER 0x00 + #define OTRL_POLICY_OPPORTUNISTIC \ +- ( OTRL_POLICY_ALLOW_V1 | \ +- OTRL_POLICY_ALLOW_V2 | \ ++ ( OTRL_POLICY_ALLOW_V2 | \ + OTRL_POLICY_SEND_WHITESPACE_TAG | \ + OTRL_POLICY_WHITESPACE_START_AKE | \ + OTRL_POLICY_ERROR_START_AKE ) + #define OTRL_POLICY_MANUAL \ +- ( OTRL_POLICY_ALLOW_V1 | \ +- OTRL_POLICY_ALLOW_V2 ) ++ ( OTRL_POLICY_ALLOW_V2 ) + #define OTRL_POLICY_ALWAYS \ +- ( OTRL_POLICY_ALLOW_V1 | \ +- OTRL_POLICY_ALLOW_V2 | \ ++ ( OTRL_POLICY_ALLOW_V2 | \ + OTRL_POLICY_REQUIRE_ENCRYPTION | \ + OTRL_POLICY_WHITESPACE_START_AKE | \ + OTRL_POLICY_ERROR_START_AKE ) diff -Nru libotr-3.2.1/debian/patches/series libotr-3.2.1/debian/patches/series --- libotr-3.2.1/debian/patches/series 1970-01-01 01:00:00.0 +0100 +++ libotr-3.2.1/debian/patches/series 2013-12-22 11:34:40.0 +0100 @@ -0,0 +1 @@ +disable_otr_v1.patch
Bug#732843: nmu: gromacs_4.6.5-1
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu nmu gromacs_4.6.5-1 . amd64 . -m Rebuild without custom DEB_BUILD_OPTIONS set (#732400). -- System Information: Debian Release: 7.1 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core) Locale: LANG=POSIX, LC_CTYPE=de_DE.ISO-8859-15@euro (charmap=ISO-8859-15) Shell: /bin/sh linked to /bin/dash -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131222120117.ga4...@raptor.chemicalconnection.dyndns.org
Re: permission to do a vips upload to proposed-updates (bug 714984)
On 2013-12-21 14:49, Adam D. Barratt wrote: On 2013-12-20 22:02, Jay Berkenbilt wrote: Adam D. Barratt a...@adam-barratt.org.uk wrote: Before giving a final ack, please could you provide a source debdiff of the package you're proposing to upload, preferably versioned as 7.28.5-1 +deb7u1? Attached. Thanks! Please go ahead; thanks. For the record, this was uploaded and I've just flagged it for acceptance in to p-u. One request: for future updates, please open a suitably-tagged bug report against release.debian.org (e.g. via reportbug). Regards, Adam -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/33cc09004dd4cc861aaa12bea93c6...@mail.adsl.funky-badger.org
Processed: Re: Bug#730764: pu: package ctdb/1.12+git20120201-4
Processing control commands: tags -1 + pending Bug #730764 [release.debian.org] pu: package ctdb/1.12+git20120201-4 Added tag(s) pending. -- 730764: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730764 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/handler.s.b730764.138771575518263.transcr...@bugs.debian.org
Bug#730764: pu: package ctdb/1.12+git20120201-4
Control: tags -1 + pending On 2013-12-04 20:35, Adam D. Barratt wrote: On Fri, 2013-11-29 at 12:23 +0100, Mathieu Parent wrote: 2013/11/29 Cyril Brulebois k...@debian.org: (...) If that's not the case, please adjust found/fixed version in the BTS. done. This was fixed in 2.3 (or maybe before). Please go ahead. For the record, this was uploaded and I've just flagged it for acceptance in to p-u. Regards, Adam -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/177631abdf5e18641ff7747a584b3...@mail.adsl.funky-badger.org
NEW changes in stable-new
Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_i386.changes ACCEPT Processing changes file: ctdb_1.12+git20120201-4_i386.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_amd64.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_armel.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_armhf.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_i386.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_ia64.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_kfreebsd-amd64.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_kfreebsd-i386.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_mips.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_mipsel.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_powerpc.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_s390.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_s390x.changes ACCEPT Processing changes file: curl_7.26.0-1+wheezy7_sparc.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_amd64.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_armel.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_armhf.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_i386.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_ia64.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_kfreebsd-amd64.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_kfreebsd-i386.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_mips.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_mipsel.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_powerpc.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_s390.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_s390x.changes ACCEPT Processing changes file: gnupg_1.4.12-7+deb7u3_sparc.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_amd64.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_armel.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_armhf.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_i386.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_ia64.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_kfreebsd-amd64.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_kfreebsd-i386.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_mips.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_mipsel.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_powerpc.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_s390.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_s390x.changes ACCEPT Processing changes file: mysql-5.5_5.5.33+dfsg-0+wheezy1_sparc.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_i386.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_amd64.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_armel.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_armhf.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_ia64.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_kfreebsd-amd64.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_kfreebsd-i386.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_mips.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_mipsel.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_powerpc.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_s390.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_s390x.changes ACCEPT Processing changes file: nspr_4.9.2-1+deb7u1_sparc.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_amd64.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_armel.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_armhf.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_i386.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_ia64.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_kfreebsd-amd64.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_kfreebsd-i386.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_mips.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_mipsel.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_powerpc.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_s390.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_s390x.changes ACCEPT Processing changes file: pixman_0.26.0-4+deb7u1_sparc.changes ACCEPT Processing changes file: vips_7.28.5-1+deb7u1_amd64.changes ACCEPT Processing changes file:
Bug#727233: marked as done (release.debian.org: a link to wanna-build.txt would be nice)
Your message dated Sun, 22 Dec 2013 14:31:24 +0100 with message-id 52b6e9ac.9020...@thykier.net and subject line Re: Bug#727233: release.debian.org: a link to wanna-build.txt would be nice has caused the Debian Bug report #727233, regarding release.debian.org: a link to wanna-build.txt would be nice to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 727233: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=727233 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ---BeginMessage--- Package: release.debian.org Severity: wishlist User: release.debian@packages.debian.org Usertags: tools Coin, Everything is in the title. Btw, release.debian.org is really a helpful portal :-). Regards. -- Marc Dequènes (Duck) pgpBiLGCPVT0N.pgp Description: PGP Digital Signature ---End Message--- ---BeginMessage--- On 2013-10-23 18:00, Marc Dequènes (Duck) wrote: Package: release.debian.org Severity: wishlist User: release.debian@packages.debian.org Usertags: tools Coin, Everything is in the title. Btw, release.debian.org is really a helpful portal :-). Regards. Added to the index page under Useful links, thanks for the suggestion. ~Niels---End Message---
NEW changes in stable-new
Processing changes file: xorg-server_1.12.4-6+deb7u2_amd64.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_armel.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_armhf.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_i386.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_ia64.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_kfreebsd-amd64.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_kfreebsd-i386.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_mips.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_mipsel.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_powerpc.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_s390.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_s390x.changes ACCEPT Processing changes file: xorg-server_1.12.4-6+deb7u2_sparc.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vujnl-lv...@franck.debian.org
NEW changes in oldstable-new
Processing changes file: gimp_2.6.10-1+squeeze4_amd64.changes ACCEPT Processing changes file: gimp_2.6.10-1+squeeze4_armel.changes ACCEPT Processing changes file: gimp_2.6.10-1+squeeze4_i386.changes ACCEPT Processing changes file: gimp_2.6.10-1+squeeze4_ia64.changes ACCEPT Processing changes file: gimp_2.6.10-1+squeeze4_kfreebsd-amd64.changes ACCEPT Processing changes file: gimp_2.6.10-1+squeeze4_kfreebsd-i386.changes ACCEPT Processing changes file: gimp_2.6.10-1+squeeze4_mips.changes ACCEPT Processing changes file: gimp_2.6.10-1+squeeze4_mipsel.changes ACCEPT Processing changes file: gimp_2.6.10-1+squeeze4_powerpc.changes ACCEPT Processing changes file: gimp_2.6.10-1+squeeze4_s390.changes ACCEPT Processing changes file: gimp_2.6.10-1+squeeze4_sparc.changes ACCEPT Processing changes file: gnupg_1.4.10-4+squeeze4_amd64.changes ACCEPT Processing changes file: gnupg_1.4.10-4+squeeze4_armel.changes ACCEPT Processing changes file: gnupg_1.4.10-4+squeeze4_i386.changes ACCEPT Processing changes file: gnupg_1.4.10-4+squeeze4_ia64.changes ACCEPT Processing changes file: gnupg_1.4.10-4+squeeze4_kfreebsd-amd64.changes ACCEPT Processing changes file: gnupg_1.4.10-4+squeeze4_kfreebsd-i386.changes ACCEPT Processing changes file: gnupg_1.4.10-4+squeeze4_mips.changes ACCEPT Processing changes file: gnupg_1.4.10-4+squeeze4_mipsel.changes ACCEPT Processing changes file: gnupg_1.4.10-4+squeeze4_powerpc.changes ACCEPT Processing changes file: gnupg_1.4.10-4+squeeze4_s390.changes ACCEPT Processing changes file: gnupg_1.4.10-4+squeeze4_sparc.changes ACCEPT Processing changes file: libtar_1.2.11-6+deb6u1_amd64.changes ACCEPT Processing changes file: libtar_1.2.11-6+deb6u1_armel.changes ACCEPT Processing changes file: libtar_1.2.11-6+deb6u1_i386.changes ACCEPT Processing changes file: libtar_1.2.11-6+deb6u1_ia64.changes ACCEPT Processing changes file: libtar_1.2.11-6+deb6u1_kfreebsd-amd64.changes ACCEPT Processing changes file: libtar_1.2.11-6+deb6u1_kfreebsd-i386.changes ACCEPT Processing changes file: libtar_1.2.11-6+deb6u1_mips.changes ACCEPT Processing changes file: libtar_1.2.11-6+deb6u1_mipsel.changes ACCEPT Processing changes file: libtar_1.2.11-6+deb6u1_powerpc.changes ACCEPT Processing changes file: libtar_1.2.11-6+deb6u1_s390.changes ACCEPT Processing changes file: libtar_1.2.11-6+deb6u1_sparc.changes ACCEPT Processing changes file: pixman_0.16.4-1+deb6u1_amd64.changes ACCEPT Processing changes file: pixman_0.16.4-1+deb6u1_armel.changes ACCEPT Processing changes file: pixman_0.16.4-1+deb6u1_i386.changes ACCEPT Processing changes file: pixman_0.16.4-1+deb6u1_ia64.changes ACCEPT Processing changes file: pixman_0.16.4-1+deb6u1_kfreebsd-amd64.changes ACCEPT Processing changes file: pixman_0.16.4-1+deb6u1_kfreebsd-i386.changes ACCEPT Processing changes file: pixman_0.16.4-1+deb6u1_mips.changes ACCEPT Processing changes file: pixman_0.16.4-1+deb6u1_mipsel.changes ACCEPT Processing changes file: pixman_0.16.4-1+deb6u1_powerpc.changes ACCEPT Processing changes file: pixman_0.16.4-1+deb6u1_s390.changes ACCEPT Processing changes file: pixman_0.16.4-1+deb6u1_sparc.changes ACCEPT Processing changes file: samba_3.5.6~dfsg-3squeeze11_amd64.changes ACCEPT Processing changes file: samba_3.5.6~dfsg-3squeeze11_armel.changes ACCEPT Processing changes file: samba_3.5.6~dfsg-3squeeze11_i386.changes ACCEPT Processing changes file: samba_3.5.6~dfsg-3squeeze11_ia64.changes ACCEPT Processing changes file: samba_3.5.6~dfsg-3squeeze11_kfreebsd-amd64.changes ACCEPT Processing changes file: samba_3.5.6~dfsg-3squeeze11_kfreebsd-i386.changes ACCEPT Processing changes file: samba_3.5.6~dfsg-3squeeze11_mips.changes ACCEPT Processing changes file: samba_3.5.6~dfsg-3squeeze11_mipsel.changes ACCEPT Processing changes file: samba_3.5.6~dfsg-3squeeze11_powerpc.changes ACCEPT Processing changes file: samba_3.5.6~dfsg-3squeeze11_s390.changes ACCEPT Processing changes file: samba_3.5.6~dfsg-3squeeze11_sparc.changes ACCEPT Processing changes file: xorg-server_1.7.7-18_amd64.changes ACCEPT Processing changes file: xorg-server_1.7.7-18_armel.changes ACCEPT Processing changes file: xorg-server_1.7.7-18_i386.changes ACCEPT Processing changes file: xorg-server_1.7.7-18_ia64.changes ACCEPT Processing changes file: xorg-server_1.7.7-18_kfreebsd-amd64.changes ACCEPT Processing changes file: xorg-server_1.7.7-18_kfreebsd-i386.changes ACCEPT Processing changes file: xorg-server_1.7.7-18_mips.changes ACCEPT Processing changes file: xorg-server_1.7.7-18_mipsel.changes ACCEPT Processing changes file: xorg-server_1.7.7-18_powerpc.changes ACCEPT Processing changes file: xorg-server_1.7.7-18_s390.changes ACCEPT Processing changes file: xorg-server_1.7.7-18_sparc.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive:
Bug#731261: transition: Qt5 switching qreal == double for all platforms
On Fri, Dec 20, 2013 at 00:57:06 -0300, Lisandro Damián Nicanor Pérez Meyer wrote: Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition As explained before, we are requesting a slot for this transition. Is the qtwebkit arm ftbfs fixed yet? Cheers, Julien signature.asc Description: Digital signature
NEW changes in stable-new
Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_kfreebsd-amd64.changes ACCEPT Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_powerpc.changes ACCEPT Processing changes file: ctdb_1.12+git20120201-4_amd64.changes ACCEPT Processing changes file: ctdb_1.12+git20120201-4_powerpc.changes ACCEPT Processing changes file: ctdb_1.12+git20120201-4_s390.changes ACCEPT Processing changes file: vips_7.28.5-1+deb7u1_i386.changes ACCEPT Processing changes file: vips_7.28.5-1+deb7u1_kfreebsd-amd64.changes ACCEPT Processing changes file: vips_7.28.5-1+deb7u1_kfreebsd-i386.changes ACCEPT Processing changes file: vips_7.28.5-1+deb7u1_powerpc.changes ACCEPT Processing changes file: vips_7.28.5-1+deb7u1_s390x.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vultk-0004gg...@franck.debian.org
NEW changes in stable-new
Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_amd64.changes ACCEPT Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_kfreebsd-i386.changes ACCEPT Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_s390.changes ACCEPT Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_s390x.changes ACCEPT Processing changes file: ctdb_1.12+git20120201-4_kfreebsd-amd64.changes ACCEPT Processing changes file: ctdb_1.12+git20120201-4_s390x.changes ACCEPT Processing changes file: ctdb_1.12+git20120201-4_sparc.changes ACCEPT Processing changes file: vips_7.28.5-1+deb7u1_s390.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vulii-0007hk...@franck.debian.org
NEW changes in stable-new
Processing changes file: ctdb_1.12+git20120201-4_kfreebsd-i386.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vulwi-0001pw...@franck.debian.org
Bug#732842: pu: package libotr/3.2.1-1
intrigeri intrig...@debian.org (2013-12-22):
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: pu
As discussed on #725779 in more details, the OTRv1 protocol has
serious security issues. Clients supporting it (in addition to more
recent, safer versions of the protocol) are subject to protocol
downgrade attacks.
This is why I have proposed to drop support for OTRv1 in libotr in
Wheezy.
This makes me wonder whether there are some packages only supporting
OTRv1 in wheezy. If there are, I suspect they want to get a serious bug
since they won't work at all anymore. Could then be fixed by trying to
make them support something less broken that OTRv1.
(AFAICT, clients might be hardcoding OTRL_POLICY_ALLOW_V1 instead of
using the OTRL_POLICY_{OPPORTUNISTIC,MANUAL,ALWAYS}?)
As the discussion on the aforementioned bug indicates, the maintainer
agrees and the lead upstream developer confirms it is totally fine.
I have therefore backported the relevant bits of the upstream commit
that does just the same in libotr 4.x (currently in testing/sid). The
resulting package was successfully tested with pidgin-otr on Wheezy,
and inter-operates correctly with sid's pidgin-otr and irssi-otr
1.0.0~alpha2-1~bpo70+1.
I think I like the reasoning and the tests very much.
FTR, testing/sid has libotr 4.x that is not affected by these issues.
The BTS wants to be taught that.
May I upload libotr 3.2.1-1+deb7u1 to stable?
Looks fine to me.
Mraw,
KiBi.
signature.asc
Description: Digital signature
Bug#732843: marked as done (nmu: gromacs_4.6.5-1)
Your message dated Sun, 22 Dec 2013 17:53:54 +0100 with message-id 20131222165354.ge2...@mraw.org and subject line Re: Bug#732843: nmu: gromacs_4.6.5-1 has caused the Debian Bug report #732843, regarding nmu: gromacs_4.6.5-1 to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 732843: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732843 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ---BeginMessage--- Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu nmu gromacs_4.6.5-1 . amd64 . -m Rebuild without custom DEB_BUILD_OPTIONS set (#732400). -- System Information: Debian Release: 7.1 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core) Locale: LANG=POSIX, LC_CTYPE=de_DE.ISO-8859-15@euro (charmap=ISO-8859-15) Shell: /bin/sh linked to /bin/dash ---End Message--- ---BeginMessage--- Michael Banck mba...@debian.org (2013-12-22): Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu nmu gromacs_4.6.5-1 . amd64 . -m Rebuild without custom DEB_BUILD_OPTIONS set (#732400). Done, thanks. Mraw, KiBi. signature.asc Description: Digital signature ---End Message---
NEW changes in stable-new
Processing changes file: vips_7.28.5-1+deb7u1_sparc.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vumbf-0004ic...@franck.debian.org
NEW changes in stable-new
Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_sparc.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vumpl-0007df...@franck.debian.org
Bug#732842: pu: package libotr/3.2.1-1
Hi, Cyril Brulebois wrote (22 Dec 2013 16:51:49 GMT) : intrigeri intrig...@debian.org (2013-12-22): This is why I have proposed to drop support for OTRv1 in libotr in Wheezy. This makes me wonder whether there are some packages only supporting OTRv1 in wheezy. If there are, I suspect they want to get a serious bug since they won't work at all anymore. I kinda doubt there's any such thing in the archive, as libotr 4.x clients (that only support OTRv2 and later) have been around for a while already, so users of clients that only support OTRv1 would have noticed the breakage already. Maybe even maintainers would have noticed :) FTR, testing/sid has libotr 4.x that is not affected by these issues. The BTS wants to be taught that. Done. May I upload libotr 3.2.1-1+deb7u1 to stable? Looks fine to me. Thanks, uploaded. Cheers, -- intrigeri | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/8561qgq00a@boum.org
NEW changes in stable-new
Processing changes file: vips_7.28.5-1+deb7u1_armhf.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vumeg-0001un...@franck.debian.org
NEW changes in stable-new
Processing changes file: ctdb_1.12+git20120201-4_armhf.changes ACCEPT Processing changes file: vips_7.28.5-1+deb7u1_mipsel.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vumsn-0004cx...@franck.debian.org
Bug#731512: pu: package eglibc/2.13-38+deb7u1
Hi, On Fri, Dec 06, 2013 at 09:21:44PM +, Adam D. Barratt wrote: Hi, On Fri, 2013-12-06 at 08:56 +0100, Aurelien Jarno wrote: First of all I have to say I am a bit uncomfortable opening such a bug report with a not so small changelog so close to the 7.3 release. I have been problem to found time doing it, and it also took me longer than expected due to the accumulated (security) things to fix since the release of Wheezy. I would therefore understand you don't want to review it now or you prefer to delay this for 7.4 Thanks for the comprehensive explanation of the patches. As mentioned on IRC, given the timing I think looking at this for 7.4 would be best. Now that 7.3 is out, would it be possible to have a look at this? Thanks, Aurelien -- Aurelien Jarno GPG: 1024D/F1BCDB73 aurel...@aurel32.net http://www.aurel32.net -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131222174800.gb5...@hall.aurel32.net
NEW changes in stable-new
Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_armhf.changes ACCEPT Processing changes file: vips_7.28.5-1+deb7u1_armel.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vun7k-0007c7...@franck.debian.org
NEW changes in stable-new
Processing changes file: ctdb_1.12+git20120201-4_mipsel.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vunal-0005jk...@franck.debian.org
NEW changes in stable-new
Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_mipsel.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vunos-0008w1...@franck.debian.org
Bug#731512: pu: package eglibc/2.13-38+deb7u1
On Sun, Dec 22, 2013 at 18:48:00 +0100, Aurelien Jarno wrote: Hi, On Fri, Dec 06, 2013 at 09:21:44PM +, Adam D. Barratt wrote: Hi, On Fri, 2013-12-06 at 08:56 +0100, Aurelien Jarno wrote: First of all I have to say I am a bit uncomfortable opening such a bug report with a not so small changelog so close to the 7.3 release. I have been problem to found time doing it, and it also took me longer than expected due to the accumulated (security) things to fix since the release of Wheezy. I would therefore understand you don't want to review it now or you prefer to delay this for 7.4 Thanks for the comprehensive explanation of the patches. As mentioned on IRC, given the timing I think looking at this for 7.4 would be best. Now that 7.3 is out, would it be possible to have a look at this? Looks reasonable to me. Cheers, Julien signature.asc Description: Digital signature
Bug#731261: transition: Qt5 switching qreal == double for all platforms
On Sunday 22 December 2013 16:24:28 Julien Cristau wrote: On Fri, Dec 20, 2013 at 00:57:06 -0300, Lisandro Damián Nicanor Pérez Meyer wrote: Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition As explained before, we are requesting a slot for this transition. Is the qtwebkit arm ftbfs fixed yet? The patch that Dmitry pointed out in the bug against 5.1.1 (#731979, CCed) doesn't seems to apply. I've pushed 5.2.0 three days ago to experimental and it has built on amd64 and i386, but armhf hasn't started building even qtbase... **But** Dmitry is right wrt the bison's versions: 5.1.1 built on amd64 and i386 but not in armhf because bison changed version during that period. Now qtwebkit 5.2.0 built on amd64 and i386 with the new bison, so my guess is that it will build on armhf. Note that we only need amd64, i386 and armhf for the transition to happen, because qt 5' webkit never built on other archs [1] [0] https://buildd.debian.org/status/package.php?p=qtwebkit-opensource-srcsuite=experimental [1] https://buildd.debian.org/status/package.php?p=qtwebkit-opensource-srcsuite=sid Kinds regards, Lisandro. -- $ make war make: *** No rule to make target `war'. Stop. Try `love' instead David Gravereaux Lisandro Damián Nicanor Pérez Meyer http://perezmeyer.com.ar/ http://perezmeyer.blogspot.com/ signature.asc Description: This is a digitally signed message part.
NEW changes in stable-new
Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_armel.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vuowp-00018f...@franck.debian.org
Bug#731261: transition: Qt5 switching qreal == double for all platforms
On Sun, 22 Dec 2013 16:09:38 -0300, Lisandro Damián Nicanor Pérez Meyer wrote: The patch that Dmitry pointed out in the bug against 5.1.1 (#731979, CCed) doesn't seems to apply. I have now committed a bit different version (that works) to Git. -- Dmitry Shachnev signature.asc Description: OpenPGP digital signature
NEW changes in stable-new
Processing changes file: ctdb_1.12+git20120201-4_armel.changes ACCEPT Processing changes file: vips_7.28.5-1+deb7u1_mips.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vuokv-0003wc...@franck.debian.org
NEW changes in stable-new
Processing changes file: asterisk_1.8.13.1~dfsg-3+deb7u2_mips.changes ACCEPT Processing changes file: ctdb_1.12+git20120201-4_mips.changes ACCEPT -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1vuqrb-0004qy...@franck.debian.org
Bug#732957: transition: exiv2
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition debian-release, Request a slot for a libexiv2-12 - libexiv2-13 transition to unstable. libexiv2-13 has been uploaded to experimental. libexiv2-12 Significant Reverse Depends: libgexiv2-1 kphotoalbum ufraw gimp-ufraw libstreamanalyzer0 shotwell rawstudio python-pyexiv2 pinot nepomuk-core-runtime merkaartor luminance-hdr libkexiv2-11 libextractor3 krename kphotoalbum kde-runtime hugin-tools hugin gwenview gthumb gpscorrelate-gui gpscorrelate gnome-commander gnome-color-manager gimp-lensfun libgexiv2-2 geeqie ffdiaporama libexiv2-dev libexiv2-dbg exiv2 entangle darktable krita Ben file: title = exiv2; is_affected = .depends ~ libexiv2-12 | .depends ~ libexiv2-13; is_good = .depends ~ libexiv2-13; is_bad = .depends ~ libexiv2-12; -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.11-2-amd64 (SMP w/2 CPU cores) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131223031435.23904.78945.report...@acer.purcell.id.au
