Bug#987481: marked as done (unblock: virt-top/1.0.9-1.1)

[Debian Bug Tracking System]

Your message dated Mon, 26 Apr 2021 07:56:27 +0200
with message-id 
and subject line Re: Bug#987481: unblock: virt-top/1.0.9-1.1
has caused the Debian Bug report #987481,
regarding unblock: virt-top/1.0.9-1.1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987481: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987481
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package virt-top

This fixes RC bug #973188 which causes FTBFS, and a lintian error on
missing OCaml depednencies.

I was misuploading this package without --delay, then I reupload the
package into DELAYED/2 queue.

[ Reason ]
 - Fixes FTBFS bug (#973188), by removing --runtime-variant _pic from
   OCAMLCLIBS
 - Add missing dependencies

[ Impact ]
This package would be blocked from release if not accepted.

[ Tests ]
This package was failed to build.  If removing --runtime-variant _pic,
it could build but with Lintian error on missing OCaml dependencies.

Both fixes are added in order to build without Lintian error.

Also manually tested the package and used virt-manager to control the
VM, virt-top correctly reflected the status of the virtual machines.

[ Risks ]
There should be minimal risks by introducing this changeset.

unblock virt-top/1.0.9-1.1
diff -Nru virt-top-1.0.9/debian/changelog virt-top-1.0.9/debian/changelog
--- virt-top-1.0.9/debian/changelog 2019-08-25 22:27:13.0 +0800
+++ virt-top-1.0.9/debian/changelog 2021-04-24 19:57:06.0 +0800
@@ -1,3 +1,12 @@
+virt-top (1.0.9-1.1) unstable; urgency=medium
+
+  * Non-maintainer Upload
+  * debian/patches/ocamlclibs-no-runtime-variant.patch: Do not supply
+runtime-variant (Closes: #973188)
+  * debian/control: Fix missing dependencies
+
+ -- Yao Wei (魏銘廷)   Sat, 24 Apr 2021 19:57:06 +0800
+
 virt-top (1.0.9-1) unstable; urgency=medium
 
   * Team upload
diff -Nru virt-top-1.0.9/debian/control virt-top-1.0.9/debian/control
--- virt-top-1.0.9/debian/control   2019-08-25 22:27:13.0 +0800
+++ virt-top-1.0.9/debian/control   2021-04-24 19:57:06.0 +0800
@@ -20,7 +20,11 @@
 
 Package: virt-top
 Architecture: any
-Depends: ${misc:Depends}, ${shlibs:Depends}
+Depends: ocaml-base-nox | ocaml-base | ocaml-nox | ocaml,
+ libcurses-ocaml,
+ libgettext-ocaml,
+ libvirt-ocaml,
+ ${misc:Depends}, ${shlibs:Depends}
 Description: show stats of virtualized domains
  virt-top is a top-like utility for showing stats of virtualized domains. Many
  keys and command line options are the same as for ordinary top.
diff -Nru virt-top-1.0.9/debian/patches/ocamlclibs-no-runtime-variant.patch 
virt-top-1.0.9/debian/patches/ocamlclibs-no-runtime-variant.patch
--- virt-top-1.0.9/debian/patches/ocamlclibs-no-runtime-variant.patch   
1970-01-01 08:00:00.0 +0800
+++ virt-top-1.0.9/debian/patches/ocamlclibs-no-runtime-variant.patch   
2021-04-24 19:57:06.0 +0800
@@ -0,0 +1,21 @@
+From: =?utf-8?b?IllhbyBXZWkgKOmtj+mKmOW7tyki?= 
+Date: Sat, 24 Apr 2021 19:23:41 +0800
+Subject: Do not supply runtime-variant (Closes: #973188)
+
+---
+ src/Makefile.in | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/Makefile.in b/src/Makefile.in
+index a2ac09b..a2a8883 100644
+--- a/src/Makefile.in
 b/src/Makefile.in
+@@ -65,7 +65,7 @@ OBJS += main.cmo
+ XOBJS := $(OBJS:.cmo=.cmx)
+ 
+ OCAMLCFLAGS   := -g -warn-error CDEFLMPSUVYZX-3 -ccopt '@CFLAGS@'
+-OCAMLCLIBS:= -linkpkg -runtime-variant _pic -cclib '@LDFLAGS@'
++OCAMLCLIBS:= -linkpkg -cclib '@LDFLAGS@'
+ 
+ OCAMLOPTPACKAGES := $(OCAMLCPACKAGES)
+ OCAMLOPTFLAGS := $(OCAMLCFLAGS)
diff -Nru virt-top-1.0.9/debian/patches/series 
virt-top-1.0.9/debian/patches/series
--- virt-top-1.0.9/debian/patches/series2019-08-25 22:27:13.0 
+0800
+++ virt-top-1.0.9/debian/patches/series2021-04-24 19:57:06.0 
+0800
@@ -1,2 +1,3 @@
 10_add-opt-and-byte-compile-targets.patch
 libvirt-Handle-VIR_DOMAIN_PMSUSPENDED-state.patch
+ocamlclibs-no-runtime-variant.patch


signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
On 2021-04-24 21:08:19 +0800, Yao Wei wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: unblock
> 
> Please unblock package virt-top
> 
> This fixes RC bug #973188 which causes FTBFS, and a lintian error on
> missing OCaml depednencies.

Thank you for fixing an RC bug. 

Bug#987546: marked as done (unblock: node-redis/3.0.2+~cs5.18.1-3)

[Debian Bug Tracking System]

Your message dated Mon, 26 Apr 2021 05:49:53 +
with message-id 
and subject line unblock node-redis
has caused the Debian Bug report #987546,
regarding unblock: node-redis/3.0.2+~cs5.18.1-3
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987546: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987546
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package node-redis

[ Reason ]
node-redis is vulnearable to a Regex Denial of Service

[ Impact ]
Medium security risk

[ Tests ]
No change in tests. Both build & autopkgtest passed

[ Risks ]
Change is trivial: just a regex fix. node-redis has no reverse
dependencies for now, so no risk for other packages

[ Checklist ]
  [X] all changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in testing

[ Other info ]
Patch also includes:
 * uploaders list update: Leo is MIA
 * GitHub regex fix in debian/watch

unblock node-redis/3.0.2+~cs5.18.1-3
diff --git a/debian/changelog b/debian/changelog
index 4f546a6..f25dee1 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,14 @@
+node-redis (3.0.2+~cs5.18.1-3) UNRELEASED; urgency=medium
+
+  * Fix GitHub tags regex
+  * Uploaders: remove Leo Iannacone, thanks for your work!
+  * Fix potential ReDoS (Closes: CVE-2021-29469)
+
+ -- Yadd   Sun, 25 Apr 2021 13:54:43 +0200
+
 node-redis (3.0.2+~cs5.18.1-2) unstable; urgency=medium
 
+  [ Xavier Guimard ]
   * Add node-lodash-packages in test dependencies
 
  -- Xavier Guimard   Mon, 21 Dec 2020 06:13:22 +0100
diff --git a/debian/control b/debian/control
index 8fecf53..de2c694 100644
--- a/debian/control
+++ b/debian/control
@@ -1,6 +1,6 @@
 Source: node-redis
 Maintainer: Debian Javascript Maintainers 

-Uploaders: Leo Iannacone , Xavier Guimard 
+Uploaders: Yadd 
 Section: javascript
 Priority: optional
 Build-Depends: debhelper-compat (= 13)
diff --git a/debian/copyright b/debian/copyright
index 24794c5..b0ec804 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -21,7 +21,7 @@ License: Expat
 
 Files: debian/*
 Copyright: 2014 Leo Iannacone 
- 2019-2020 Xavier Guimard 
+ 2019-2020 Yadd 
 License: GPL-3
 
 Files: debian/tests/test_modules/intercept-stdout/*
diff --git a/debian/patches/CVE-2021-29469.patch 
b/debian/patches/CVE-2021-29469.patch
new file mode 100644
index 000..d074802
--- /dev/null
+++ b/debian/patches/CVE-2021-29469.patch
@@ -0,0 +1,19 @@
+Description: fix ReDoS
+Author: Leibale Eidelman 
+Origin: upstream, https://github.com/NodeRedis/node-redis/commit/2d11b6dc
+Bug: https://github.com/NodeRedis/node-redis/issues/1569
+Forwarded: not-needed
+Reviewed-By: Yadd 
+Last-Update: 2021-04-25
+
+--- a/lib/utils.js
 b/lib/utils.js
+@@ -127,7 +127,7 @@
+ reply_to_object: replyToObject,
+ print: print,
+ err_code: /^([A-Z]+)\s+(.+)$/,
+-monitor_regex: /^[0-9]{10,11}\.[0-9]+ \[[0-9]+ .+\]( ".+?")+$/,
++monitor_regex: /^[0-9]{10,11}\.[0-9]+ \[[0-9]+ .+\].*"$/,
+ clone: convenienceClone,
+ callback_or_emit: callbackOrEmit,
+ reply_in_order: replyInOrder
diff --git a/debian/patches/series b/debian/patches/series
index 73eead0..250556a 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,4 @@
 avoid-failing-test.diff
 disable-tests-failing-with-redis-5.6.diff
 remove-cross-spawn.patch
+CVE-2021-29469.patch
diff --git a/debian/watch b/debian/watch
index ebfa712..34f812e 100644
--- a/debian/watch
+++ b/debian/watch
@@ -1,7 +1,7 @@
 version=4
 
 opts=filenamemangle=s/.*\/v?([\d\.-]+)\.tar\.gz/node-redis-$1.tar.gz/ \
- https://github.com/NodeRedis/node_redis/tags .*/archive/v?\.?([\d\.]+).tar.gz 
group
+ https://github.com/NodeRedis/node_redis/tags 
.*/archive/.*/v?\.?([\d\.]+).tar.gz group
 
 opts="searchmode=plain,pgpmode=none,ctype=nodejs,component=redis-commands" \
  https://registry.npmjs.org/redis-commands 
https://registry.npmjs.org/redis-commands/-/redis-commands-(\d[\d\.]*)@ARCHIVE_EXT@
 checksum
--- End Message ---
--- Begin Message ---
Unblocked.--- End Message ---

Bug#987560: marked as done (unblock: clonezilla/3.35.2-3)

[Debian Bug Tracking System]

Your message dated Mon, 26 Apr 2021 05:43:17 +
with message-id 
and subject line unblock clonezilla
has caused the Debian Bug report #987560,
regarding unblock: clonezilla/3.35.2-3
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987560: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987560
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package clonezilla

fixed #987527

[ Reason ]
The package failed to install because of modifications
made under directory /opt at postinst time. As the files
under /opt were just a remainder of an obsolete version,
I could easily fix this misbehavior

[ Impact ]
Clonezilla's popcon score is more than 900

[ Tests ]
Installed successfully clonezilla in a fresh chroot.

[ Risks ]
The change is trivial (nothing installed under /opt during the package's
configuration)

[ Checklist ]
  [x ] all changes are documented in the d/changelog
  [x ] I reviewed all changes and I approve them
  [x ] attach debdiff against the package in testing

[ Other info ]
-
unblock clonezilla/3.35.2-3

-- System Information:
Debian Release: bullseye/sid
  APT prefers stable
  APT policy: (900, 'stable'), (499, 'testing'), (400, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-14-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not
set
Shell: /bin/sh linked to /usr/bin/dash
diff -Nru clonezilla-3.35.2/debian/changelog clonezilla-3.35.2/debian/changelog
--- clonezilla-3.35.2/debian/changelog  2020-03-11 17:57:09.0 +0100
+++ clonezilla-3.35.2/debian/changelog  2021-04-25 16:52:50.0 +0200
@@ -1,3 +1,12 @@
+clonezilla (3.35.2-3) unstable; urgency=medium
+
+  * removed postinst and postrm instructions which installed (or erased)
+files and directories under /opt/; this seems to be useless for current
+version of clonezilla, and it prevents it from being installed in
+Bullseye. Closes: #987527
+
+ -- Georges Khaznadar   Sun, 25 Apr 2021 16:52:50 +0200
+
 clonezilla (3.35.2-2) unstable; urgency=medium
 
   * modified the versioned dependency clonezilla -> drbl, which becomes
diff -Nru clonezilla-3.35.2/debian/postinst clonezilla-3.35.2/debian/postinst
--- clonezilla-3.35.2/debian/postinst   2018-05-20 16:40:15.0 +0200
+++ clonezilla-3.35.2/debian/postinst   2021-04-25 16:50:41.0 +0200
@@ -20,9 +20,8 @@
 
 case "$1" in
 configure)
-   ln -sf /usr/share/drbl /opt/
-   mkdir -p /opt/drbl/conf
-   ln -sf /etc/drbl/drbl.conf /opt/drbl/conf/
+   mkdir -p /usr/share/drbl/conf
+   ln -sf /etc/drbl/drbl.conf /usr/share/drbl/conf/
 ;;
 
 abort-upgrade|abort-remove|abort-deconfigure)
diff -Nru clonezilla-3.35.2/debian/postrm clonezilla-3.35.2/debian/postrm
--- clonezilla-3.35.2/debian/postrm 2018-05-20 16:40:15.0 +0200
+++ clonezilla-3.35.2/debian/postrm 2021-04-25 16:49:12.0 +0200
@@ -21,7 +21,6 @@
 
 case "$1" in
 purge|remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
-   rm -f /opt/drbl
rm -rf /usr/share/drbl/conf
 ;;
 
--- End Message ---
--- Begin Message ---
Unblocked.--- End Message ---

Bug#987550: marked as done (unblock: fricas/1.3.6-6)

[Debian Bug Tracking System]

Your message dated Mon, 26 Apr 2021 05:39:22 +
with message-id 
and subject line unblock fricas
has caused the Debian Bug report #987550,
regarding unblock: fricas/1.3.6-6
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987550: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987550
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package fricas

[ Reason ]
RC bug 987456 just filed and fixed, missing build depend resulted in
some packages being empty

[ Impact ]
Empty packages render graphical UI unusable

[ Tests ]
None.

[ Risks ]
None.

[ Checklist ]
  [X] all changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in testing

-
source debdiff fricas_1.3.6-5 to fricas_1.3.6-6
-
diff -Nru fricas-1.3.6/debian/changelog fricas-1.3.6/debian/changelog
--- fricas-1.3.6/debian/changelog   2021-02-13 01:48:46.0 +
+++ fricas-1.3.6/debian/changelog   2021-04-24 13:23:44.0 +
@@ -1,3 +1,11 @@
+fricas (1.3.6-6) unstable; urgency=high
+
+  * libx11-dev -> libxpm-dev in build depends
+  * Bug fix: "fricas-{graphics,hypertex} are empty", thanks to Adrian Bunk
+(Closes: #987456).
+
+ -- Camm Maguire   Sat, 24 Apr 2021 13:23:44 +
+
 fricas (1.3.6-5) unstable; urgency=medium
 
   * clean build-depends
diff -Nru fricas-1.3.6/debian/control fricas-1.3.6/debian/control
--- fricas-1.3.6/debian/control 2021-02-13 01:48:30.0 +
+++ fricas-1.3.6/debian/control 2021-04-24 13:22:47.0 +
@@ -5,7 +5,7 @@
 Rules-Requires-Root: no
 Homepage: http://fricas.sourceforge.net/
 Build-Depends-Indep: dh-elpa, sharutils
-Build-Depends: debhelper-compat ( = 13 ), gcl ( >= 2.6.12-99 ), libgmp3-dev, 
libreadline-dev, libx11-dev
+Build-Depends: debhelper-compat ( = 13 ), gcl ( >= 2.6.12-99 ), libgmp3-dev, 
libreadline-dev, libxpm-dev
 Standards-Version: 4.5.1
 
 Package: fricas
-

[ Other info ]
(Anything else the release team should know.)

unblock fricas/1.3.6-6

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-0.bpo.3-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_CPU_OUT_OF_SPEC
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect
--- End Message ---
--- Begin Message ---
Unblocked.--- End Message ---

Bug#987573: marked as done (unblock: jumpnbump/1.61-3.1)

[Debian Bug Tracking System]

Your message dated Mon, 26 Apr 2021 05:33:27 +
with message-id 
and subject line unblock jumpnbump
has caused the Debian Bug report #987573,
regarding unblock: jumpnbump/1.61-3.1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987573: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987573
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package jumpnbump

jumpnbump 1.61-3 and below crash when the player jumps and sound is enabled
(the default) on systems where type char is unsigned (e.g. arm* powerpc*). 
This is due to passing -1 to a parameter of type char wich then wraps to
255 causing an out of bounds array reference.

Unless the player knows this is a sound issue and knows how to disable sound
this renders the game unplayable on those architectures.

The fix for the issue is trivial and has been accepted upstream. It simply
consists of changing the parameter type from char to signed char.

unblock jumpnbump/1.61-3.1

-- System Information:
Debian Release: 10.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'oldoldstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-10-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
diff -Nru jumpnbump-1.61/debian/changelog jumpnbump-1.61/debian/changelog
--- jumpnbump-1.61/debian/changelog 2020-07-26 15:48:41.0 +0100
+++ jumpnbump-1.61/debian/changelog 2021-04-24 13:35:52.0 +0100
@@ -1,3 +1,11 @@
+jumpnbump (1.61-3.1) unstable; urgency=medium
+
+  * Non-maintainer upload with maintainers approval.
+  * Apply upstream fix to prevent crash on systems where char is unsigned.
+(Closes: 987333)
+
+ -- Peter Michael Green   Sat, 24 Apr 2021 13:35:52 +0100
+
 jumpnbump (1.61-3) unstable; urgency=medium
 
   * Backport post-release patch from upstream to add future gcc
diff -Nru jumpnbump-1.61/debian/patches/0018-Fix-char-signedness.patch 
jumpnbump-1.61/debian/patches/0018-Fix-char-signedness.patch
--- jumpnbump-1.61/debian/patches/0018-Fix-char-signedness.patch
1970-01-01 01:00:00.0 +0100
+++ jumpnbump-1.61/debian/patches/0018-Fix-char-signedness.patch
2021-04-24 13:29:18.0 +0100
@@ -0,0 +1,32 @@
+commit 8a6873baa395f16048c6865f7036650a3b2bbe76
+Author: Frank Birbacher 
+Date:   Sun Dec 27 12:59:33 2020 +
+
+Fix dj channel signedness
+
+diff --git a/dj.h b/dj.h
+index 07f4a32..985548b 100644
+--- a/dj.h
 b/dj.h
+@@ -115,7 +115,7 @@ extern void dj_mix(void);
+ extern char dj_set_num_sfx_channels(char num_channels);
+ extern void dj_set_sfx_volume(char volume);
+ extern char dj_get_sfx_volume(void);
+-extern void dj_play_sfx(unsigned char sfx_num, unsigned short freq, char 
volume, char panning, unsigned short delay, char channel);
++extern void dj_play_sfx(unsigned char sfx_num, unsigned short freq, char 
volume, char panning, unsigned short delay, signed char channel);
+ extern char dj_get_sfx_settings(unsigned char sfx_num, sfx_data *data);
+ extern char dj_set_sfx_settings(unsigned char sfx_num, sfx_data *data);
+ extern void dj_set_sfx_channel_volume(char channel_num, char volume);
+diff --git a/sdl/sound.c b/sdl/sound.c
+index ff1ee7e..4ea56af 100644
+--- a/sdl/sound.c
 b/sdl/sound.c
+@@ -357,7 +357,7 @@ void dj_set_sfx_volume(char volume)
+   SDL_UnlockAudio();
+ }
+ 
+-void dj_play_sfx(unsigned char sfx_num, unsigned short freq, char volume, 
char panning, unsigned short delay, char channel)
++void dj_play_sfx(unsigned char sfx_num, unsigned short freq, char volume, 
char panning, unsigned short delay, signed char channel)
+ {
+   int slot;
+ 
diff -Nru jumpnbump-1.61/debian/patches/series 
jumpnbump-1.61/debian/patches/series
--- jumpnbump-1.61/debian/patches/series2020-07-26 15:46:24.0 
+0100
+++ jumpnbump-1.61/debian/patches/series2021-04-24 13:30:09.0 
+0100
@@ -1,2 +1,3 @@
 0015-menu-use-Pillow-instead-of-ImageMagick-for-level-pre.patch
 0017-Add-future-gcc-default-fno-common-and-fix-code.patch
+0018-Fix-char-signedness.patch
--- End Message ---
--- Begin Message ---
Unblocked.--- End Message ---

Bug#987583: unblock: mgba/0.8.4+dfsg-2 (pre-approval)

[Ryan Tandy]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Hi,

I would like to upload mgba with the following changes:

- fix undefined references in libretro-mgba (breaks using it with 
  gnome-games-app; RC bug #986986);
- backport some targeted fixes specifically requested by upstream for 
  the version in bullseye.

This is a pre-approval request, so that I can easily drop any patches 
that might not be approved for bullseye.

Details about the changes:

>  * Add upstream patches to remove unused OpenGL code from the libretro core
>and fix its undefined references. (Closes: #986986)
>- debian/patches/CMake-Move-gl.c-and-gles2.c-to-FEATURE_SRC.patch
>- debian/patches/CMake-Move-BUILD_GL-flags-to-FEATURE_DEFINES.patch

- issue: mgba_libretro.so has undefined references which are not 
  satisfied when retro-runner loads it. I opened #986986 with severity: 
  important and Adrian Bunk recently bumped it to serious.
- impact: libretro-mgba cannot be used with gnome-games-app (it does 
  work with retroarch which provides the symbols by coincidence)
- the relevant opengl code is not used in the libretro build, so not 
  linking the library is intentional
- I proposed cherry-picking these commits, upstream reviewed and 
  approved
- I compared build logs with and without the patches:
  - checked that the libretro build dropped the expected sources and 
defines;
  - checked that the other modules don't show any unexpected changes in 
the log;
  - the dpkg-shlibdeps warning about unresolved symbols also went away.
- I verified the fix with gnome-games-app, and smoke tested retroarch as 
  well.

>  * Add upstream patch to fix PC alignment check when loading a save state.
>- debian/patches/GBA-Serialize-Fix-alignment-check-when-loading-state.patch

- upstream specifically requested this as an important fix
- issue: when loading a save state (equivalent to a VM snapshot), the 
  CPU mode (ARM/Thumb) is checked in the wrong place
- impact: if the saved state was in Thumb mode and at an odd offset, it 
  can incorrectly truncate the emulated CPU's PC to 4-byte alignment 
  (effectively setting it back by one instruction), causing undefined 
  behaviour depending on the code being executed
- with a little more context, the patch looks "obviously correct" as 
  executionMode is actually initialized based on cpsr just a few lines 
  later
  -- 
https://github.com/mgba-emu/mgba/blob/346f5dc0b53afa8ea1e11d8c94a0090b5d49abc9/src/gba/serialize.c#L157-L168
- original upstream report: https://github.com/libretro/mgba/issues/222

>  * Add upstream patch to fix crash when unloading a Game Boy ROM in a
>libretro frontend that doesn't implement the camera interface.
>- debian/patches/Libretro-Only-set-camera-peripheral-when-it-is-avail.patch

- upstream requested this, but noted it as less important
- issue: if libretro-mgba is loaded in a libretro frontend that doesn't 
  support the camera interface, it dereferences a NULL pointer when 
  unloading a Game Boy ROM.
- impact: gnome-games-app is an example of an affected frontend. After 
  playing a Game Boy game in gnome-games-app, retro-runner SEGVs when 
  closing it (observed in dmesg, gnome-games-app doesn't seem to raise a 
  user-visible error in this case). retroarch is not affected. I am not 
  aware of other frontends in Debian and I'm not sure what other 
  frontends exist in the wild.

>  * Add upstream patches to fix crashes identified by fuzz testing.

- the following are targeted fixes for issues identified by upstream via 
  fuzz testing, that can cause crashes when loading invalid files such 
  as ROM images or save states

>- debian/patches/Core-Fix-destroying-an-mVL-with-an-invalid-channel-c.patch

- upstream requested this as an important fix, leads to an invalid 
  free()

>- debian/patches/GB-MBC-Remove-unused-SRAM-size.patch

- upstream requested this as an important fix, leads to possible 
  out-of-bounds read/write because other code assumes the sramSize is a 
  multiple of 8KiB (0x2000) and could access outside the area allocated 
  for the smaller size

>- debian/patches/GB-MBC-Force-minimum-SRAM-size-on-rare-MBCs-that-alw.patch
>- debian/patches/GB-Video-Don-t-rendering-negative-batches.patch
>- debian/patches/GB-Video-Fix-deserializing-negative-LX-state.patch
>- debian/patches/GB-Video-Discard-SGB-packets-in-non-SGB-mVLs.patch

- upstream requested all of these, but noted them as less important than 
  the two above, these ones generally lead to null pointer dereferences

The package does not have automated tests yet, sorry. I have manually 
tested both packaged frontends (SDL and Qt) as well as the libretro core 
using both retroarch and gnome-games-app.

The full diff is attached. May I upload it to unstable?

Thank you,
Ryan
diff -Nru mgba-0.8.4+dfsg/debian/changelog mgba-0.8.4+dfsg/debian/changelog
--- mgba-0.8.4+dfsg/debian/changelog

Re: Bug#986565: unusable with current git

[Jonathan Nieder]

Hi,

>> On Wed, 21 Apr 2021 10:12:03 + Damyan Ivanov  wrote:

>>> Sigh. Now git reverted to using /usr/lib again, and git-flow is broken.

Why sigh?

Directories such as /usr/lib/git-core and /usr/libexec/git-core are
internal to git.  Other packages should not install to either
directory.  This is not a new thing: the standard way to contribute
new git subcommands has been to install them to $PATH from the start.

Version 2.31.0-1 of Debian's Git package changed an internal directory
from /usr/lib/git-core to /usr/libexec/git-core.  That caused problems
for people, so 2.31.1-1 reverted the change.  See
https://bugs.debian.org/985416 for more details, including

  these should install to /usr/bin/ instead.  The exact
location where git stores its commands is an implementation detail
that packages are not meant to rely on.

If I had known about these callers, then I would have filed some
preparatory bugs instead of making that change in 2.31.0-1.  The
change was in experimental for a long time before then, so one way to
prevent future such issues is to test against git from experimental.

If git-flow wants to depend on Git internals, contacting the git
package maintainers is appreciated.  That is especially true when the
internal details you're depending on are changing.

Thanks and hope that helps,
Jonathan

Bug#987579: unblock cross-toolchain-base-mipsen 15

[YunQiang Su]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock
X-Debbugs-Cc: debian-...@lists.debian.org

Please unblock cross-toolchain-base-mipsen 15.
It just rebuilds/syncs with the current glibc 2.31-11 and linux 5.10.28-1.

-- 
YunQiang Su

Bug#987578: unblock gcc-10-cross-mipsen 3+c5

[YunQiang Su]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock
X-Debbugs-Cc: debian-...@lists.debian.org

Please unblock gcc-10-cross-mipsen 3+c5.
It just rebuilds/syncs with the current gcc-10 10.2.1-6.

-- 
YunQiang Su

Bug#987043: nmu: 4 packages where adequate reports symbol-size-mismatch

[Andreas Beckmann]

Followup-For: Bug #987043

There is also one in non-free: 

  sift: symbol-size-mismatch /usr/bin/info_on_seqs => ErrorBuffer

nmu sift_4.0.3b-6 . ANY . unstable . -m "Rebuild to update symbol size for 
ErrorBuffer."

Andreas

Bug#987573: unblock: jumpnbump/1.61-3.1

[plugwash]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package jumpnbump

jumpnbump 1.61-3 and below crash when the player jumps and sound is enabled
(the default) on systems where type char is unsigned (e.g. arm* powerpc*). 
This is due to passing -1 to a parameter of type char wich then wraps to
255 causing an out of bounds array reference.

Unless the player knows this is a sound issue and knows how to disable sound
this renders the game unplayable on those architectures.

The fix for the issue is trivial and has been accepted upstream. It simply
consists of changing the parameter type from char to signed char.

unblock jumpnbump/1.61-3.1

-- System Information:
Debian Release: 10.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'oldoldstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-10-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
diff -Nru jumpnbump-1.61/debian/changelog jumpnbump-1.61/debian/changelog
--- jumpnbump-1.61/debian/changelog 2020-07-26 15:48:41.0 +0100
+++ jumpnbump-1.61/debian/changelog 2021-04-24 13:35:52.0 +0100
@@ -1,3 +1,11 @@
+jumpnbump (1.61-3.1) unstable; urgency=medium
+
+  * Non-maintainer upload with maintainers approval.
+  * Apply upstream fix to prevent crash on systems where char is unsigned.
+(Closes: 987333)
+
+ -- Peter Michael Green   Sat, 24 Apr 2021 13:35:52 +0100
+
 jumpnbump (1.61-3) unstable; urgency=medium
 
   * Backport post-release patch from upstream to add future gcc
diff -Nru jumpnbump-1.61/debian/patches/0018-Fix-char-signedness.patch 
jumpnbump-1.61/debian/patches/0018-Fix-char-signedness.patch
--- jumpnbump-1.61/debian/patches/0018-Fix-char-signedness.patch
1970-01-01 01:00:00.0 +0100
+++ jumpnbump-1.61/debian/patches/0018-Fix-char-signedness.patch
2021-04-24 13:29:18.0 +0100
@@ -0,0 +1,32 @@
+commit 8a6873baa395f16048c6865f7036650a3b2bbe76
+Author: Frank Birbacher 
+Date:   Sun Dec 27 12:59:33 2020 +
+
+Fix dj channel signedness
+
+diff --git a/dj.h b/dj.h
+index 07f4a32..985548b 100644
+--- a/dj.h
 b/dj.h
+@@ -115,7 +115,7 @@ extern void dj_mix(void);
+ extern char dj_set_num_sfx_channels(char num_channels);
+ extern void dj_set_sfx_volume(char volume);
+ extern char dj_get_sfx_volume(void);
+-extern void dj_play_sfx(unsigned char sfx_num, unsigned short freq, char 
volume, char panning, unsigned short delay, char channel);
++extern void dj_play_sfx(unsigned char sfx_num, unsigned short freq, char 
volume, char panning, unsigned short delay, signed char channel);
+ extern char dj_get_sfx_settings(unsigned char sfx_num, sfx_data *data);
+ extern char dj_set_sfx_settings(unsigned char sfx_num, sfx_data *data);
+ extern void dj_set_sfx_channel_volume(char channel_num, char volume);
+diff --git a/sdl/sound.c b/sdl/sound.c
+index ff1ee7e..4ea56af 100644
+--- a/sdl/sound.c
 b/sdl/sound.c
+@@ -357,7 +357,7 @@ void dj_set_sfx_volume(char volume)
+   SDL_UnlockAudio();
+ }
+ 
+-void dj_play_sfx(unsigned char sfx_num, unsigned short freq, char volume, 
char panning, unsigned short delay, char channel)
++void dj_play_sfx(unsigned char sfx_num, unsigned short freq, char volume, 
char panning, unsigned short delay, signed char channel)
+ {
+   int slot;
+ 
diff -Nru jumpnbump-1.61/debian/patches/series 
jumpnbump-1.61/debian/patches/series
--- jumpnbump-1.61/debian/patches/series2020-07-26 15:46:24.0 
+0100
+++ jumpnbump-1.61/debian/patches/series2021-04-24 13:30:09.0 
+0100
@@ -1,2 +1,3 @@
 0015-menu-use-Pillow-instead-of-ImageMagick-for-level-pre.patch
 0017-Add-future-gcc-default-fno-common-and-fix-code.patch
+0018-Fix-char-signedness.patch

Bug#987542: marked as done (unblock: gpsd/3.22-3)

[Debian Bug Tracking System]

Your message dated Sun, 25 Apr 2021 20:51:09 +0200
with message-id <6310d8aa-72ae-b60a-ab4d-b58cdc262...@debian.org>
and subject line Re: Bug#987542: unblock: gpsd/3.22-3
has caused the Debian Bug report #987542,
regarding unblock: gpsd/3.22-3
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987542: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987542
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package gpsd

Adding missing Breaks/Replaces and fixing a bit of mess in the symbols
files.


gpsd (3.22-3) unstable; urgency=medium

  * [c6838e37] Remove duplicate lines from symbol files.
Thanks to Matthias Klose (Closes: #985930)
  * [5c240253] Mark String::QString(QString const&)@Base as optional.
Required for backporting.
  * [2dfbaa07] Updating debian/control from debian/control.in
  * [c582b2aa] gpsd-tools: add missing Breaks+Replaces
gpsd-tools needs Breaks/Replaces for gpsd-clients (<< 3.20-10)
Thanks to Andreas Beckmann (Closes: #987208)

 -- Bernd Zeimetz   Sun, 25 Apr 2021 12:17:57 +0200


Full diff is attached.

Thanks,

Bernd



unblock gpsd/3.22-3


-- 
 Bernd ZeimetzDebian GNU/Linux Developer
 http://bzed.dehttp://www.debian.org
 GPG Fingerprint: ECA1 E3F2 8E11 2432 D485  DD95 EB36 171A 6FF9 435F
diff --git a/debian/changelog b/debian/changelog
index dfef5f900..f0b5369f7 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,16 @@
+gpsd (3.22-3) unstable; urgency=medium
+
+  * [c6838e37] Remove duplicate lines from symbol files.
+Thanks to Matthias Klose (Closes: #985930)
+  * [5c240253] Mark String::QString(QString const&)@Base as optional.
+Required for backporting.
+  * [2dfbaa07] Updating debian/control from debian/control.in
+  * [c582b2aa] gpsd-tools: add missing Breaks+Replaces
+gpsd-tools needs Breaks/Replaces for gpsd-clients (<< 3.20-10)
+Thanks to Andreas Beckmann (Closes: #987208)
+
+ -- Bernd Zeimetz   Sun, 25 Apr 2021 12:17:57 +0200
+
 gpsd (3.22-2) unstable; urgency=medium
 
   [ Bernd Zeimetz ]
diff --git a/debian/control b/debian/control
index 30665b4e2..a38b8c82f 100644
--- a/debian/control
+++ b/debian/control
@@ -63,8 +63,8 @@ Architecture: any
 Depends: ${shlibs:Depends}, ${misc:Depends},
  libgps28 (= ${binary:Version}),
 Suggests: gpsd
-Breaks: python-gps, gpsd (<< 3.20-9)
-Replaces: python-gps
+Breaks: python-gps, gpsd (<< 3.20-9), gpsd-clients (<< 3.20-10)
+Replaces: python-gps, gpsd-clients (<< 3.20-10)
 Description: Global Positioning System - tools
  The gpsd service daemon can monitor one or more GPS devices connected to
  a host computer, making all data on the location and movements of the
diff --git a/debian/control.in b/debian/control.in
index cb2df897d..7ff2aa444 100644
--- a/debian/control.in
+++ b/debian/control.in
@@ -63,8 +63,8 @@ Architecture: any
 Depends: ${shlibs:Depends}, ${misc:Depends},
  libgpsLIBGPSSONAME (= ${binary:Version}),
 Suggests: gpsd
-Breaks: python-gps, gpsd (<< 3.20-9)
-Replaces: python-gps
+Breaks: python-gps, gpsd (<< 3.20-9), gpsd-clients (<< 3.20-10)
+Replaces: python-gps, gpsd-clients (<< 3.20-10)
 Description: Global Positioning System - tools
  The gpsd service daemon can monitor one or more GPS devices connected to
  a host computer, making all data on the location and movements of the
diff --git a/debian/libgpsLIBGPSSONAME.symbols 
b/debian/libgpsLIBGPSSONAME.symbols
index 03ae8f936..3f66558b5 100644
--- a/debian/libgpsLIBGPSSONAME.symbols
+++ b/debian/libgpsLIBGPSSONAME.symbols
@@ -9,8 +9,6 @@ libgps.so.LIBGPSSONAME libgpsLIBGPSSONAME #MINVER#
  (c++)"gpsmm::stream(int)@Base" 3.3
  (c++)"gpsmm::waiting(int)@Base" 3.3
  (c++)"gpsmm::~gpsmm()@Base" 3.3
- (c++)"gpsmm::~gpsmm()@Base" 3.3
- (c++)"gpsmm::~gpsmm()@Base" 3.3
  (c++)"typeinfo for gpsmm@Base" 3.3
  (c++)"typeinfo name for gpsmm@Base" 3.3
  (c++)"vtable for gpsmm@Base" 3.3
diff --git a/debian/libqgpsmmLIBGPSSONAME.symbols 
b/debian/libqgpsmmLIBGPSSONAME.symbols
index 84edae24e..d3d51ab01 100644
--- a/debian/libqgpsmmLIBGPSSONAME.symbols
+++ b/debian/libqgpsmmLIBGPSSONAME.symbols
@@ -36,18 +36,12 @@ libQgpsmm.so.LIBGPSSONAME libqgpsmmLIBGPSSONAME #MINVER#
  (c++)"gpsmm::waiting(int)@Base" 3.3
  (c++)"gpsmm::clear_fix()@Base" 3.3
  (c++)"gpsmm::~gpsmm()@Base" 3.3
- (c++)"gpsmm::~gpsmm()@Base" 3.3
- (c++)"gpsmm::~gpsmm()@Base" 3.3
-#MISSING: 3.18# (c++|optional)"QDebug::~QDebug()@Base" 3.3
 #MISSING: 3.18# 

Bug#987543: marked as done (unblock: python-jenkinsapi/0.3.11-5)

[Debian Bug Tracking System]

Your message dated Sun, 25 Apr 2021 20:43:13 +0200
with message-id 
and subject line Re: Bug#987543: unblock: python-jenkinsapi/0.3.11-5
has caused the Debian Bug report #987543,
regarding unblock: python-jenkinsapi/0.3.11-5
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987543: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987543
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package python-jenkinsapi

[ Reason ]
Version in testing FTBFS, bug #986511

[ Impact ]
I guess the package goes away.

[ Tests ]
Build test only, really. Given the build failed because of a linter tool
(pylint), and my python experience, and the patch coming from Ubuntu, it
looks safe to me.

[ Risks ]
Leaf package really. Not sure -why- we have it, but alas.

[ Checklist ]
  [x] all changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in testing

[ Other info ]
Maintainer has sadly recently left Debian and orphaned the package.

Best,
Chris


unblock python-jenkinsapi/0.3.11-5


debdiff:

diff -Nru python-jenkinsapi-0.3.11/debian/changelog 
python-jenkinsapi-0.3.11/debian/changelog
--- python-jenkinsapi-0.3.11/debian/changelog   2020-10-28 03:19:59.0 
+
+++ python-jenkinsapi-0.3.11/debian/changelog   2021-04-24 23:29:27.0 
+
@@ -1,3 +1,12 @@
+python-jenkinsapi (0.3.11-5) unstable; urgency=medium
+
+  * QA upload.
+  * Orphan package, see #985165.
+  * Apply patch from Ubuntu to fix FTBFS. (Closes: #986511)
+Thanks: Logan Rosen 
+
+ -- Chris Hofstaedtler   Sat, 24 Apr 2021 23:29:27 +
+
 python-jenkinsapi (0.3.11-4) unstable; urgency=medium
 
   * Fix FTBS due to pylint/python3 changes (Closes: #971179)
diff -Nru python-jenkinsapi-0.3.11/debian/control 
python-jenkinsapi-0.3.11/debian/control
--- python-jenkinsapi-0.3.11/debian/control 2020-10-28 03:19:59.0 
+
+++ python-jenkinsapi-0.3.11/debian/control 2021-04-24 23:29:27.0 
+
@@ -1,13 +1,12 @@
 Source: python-jenkinsapi
 Section: python
 Priority: optional
-Maintainer: Al Stone 
+Maintainer: Debian QA Group 
 Build-Depends: debhelper (>= 12), python3-all-dev, python3-lxml, 
  python3-setuptools, python3-pytest, pylint3, dh-python, python3-pbr,
  python3-pylint-common
 Standards-Version: 4.5.0
 Homepage: http://pypi.python.org/pypi/jenkinsapi
-Vcs-Git: https://github.com/ahs3/python-jenkinsapi
 
 Package: python3-jenkinsapi
 Architecture: all
diff -Nru python-jenkinsapi-0.3.11/debian/patches/pylint-fixes.patch 
python-jenkinsapi-0.3.11/debian/patches/pylint-fixes.patch
--- python-jenkinsapi-0.3.11/debian/patches/pylint-fixes.patch  2020-10-28 
03:19:59.0 +
+++ python-jenkinsapi-0.3.11/debian/patches/pylint-fixes.patch  2021-04-24 
23:29:27.0 +
@@ -1,6 +1,5 @@
-diff -Naur a/jenkinsapi/credential.py b/jenkinsapi/credential.py
 a/jenkinsapi/credential.py 2020-02-16 16:46:46.767307926 -0700
-+++ b/jenkinsapi/credential.py 2020-10-27 21:03:49.025512695 -0600
+--- a/jenkinsapi/credential.py
 b/jenkinsapi/credential.py
 @@ -83,7 +83,7 @@
  
  def __init__(self, cred_dict):
@@ -70,9 +69,8 @@
  }
 -return super(AmazonWebServicesCredentials, 
self)._get_attributes_xml(data)
 +return super()._get_attributes_xml(data)
-diff -Naur a/jenkinsapi/credentials.py b/jenkinsapi/credentials.py
 a/jenkinsapi/credentials.py2020-02-16 16:46:46.767307926 -0700
-+++ b/jenkinsapi/credentials.py2020-10-27 21:04:33.021889279 -0600
+--- a/jenkinsapi/credentials.py
 b/jenkinsapi/credentials.py
 @@ -100,8 +100,8 @@
  except JenkinsAPIException as jae:
  raise JenkinsAPIException('Latest version of Credentials '
@@ -104,9 +102,8 @@
  self.poll()
  self.credentials = self._data['credentials']
  if description in self:
-diff -Naur a/jenkinsapi/fingerprint.py b/jenkinsapi/fingerprint.py
 a/jenkinsapi/fingerprint.py2020-02-16 16:46:46.767307926 -0700
-+++ b/jenkinsapi/fingerprint.py2020-10-27 20:59:57.595597808 -0600
+--- a/jenkinsapi/fingerprint.py
 b/jenkinsapi/fingerprint.py
 @@ -96,14 +96,14 @@
  def validate(self):
  try:
@@ -126,9 +123,8 @@
  return True
  
  def get_info(self):
-diff -Naur a/jenkinsapi/jenkinsbase.py b/jenkinsapi/jenkinsbase.py
 a/jenkinsapi/jenkinsbase.py2020-02-16 16:46:46.767307926 -0700
-+++ 

Processed: Re: Bug#987564: NMU: CVE-2020-25708 - Fix possible divide-by-zero.

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + moreinfo
Bug #987564 [release.debian.org] NMU: CVE-2020-25708 - Fix possible 
divide-by-zero.
Added tag(s) moreinfo.

-- 
987564: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987564
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#987564: NMU: CVE-2020-25708 - Fix possible divide-by-zero.

[Philip Wyett]

Control: tags -1 + moreinfo

On Sun, 2021-04-25 at 18:34 +0100, Philip Wyett wrote:
> Package: release.debian.org
> Severity: normal
> Tags: buster
> User: release.debian@packages.debian.org
> Usertags: pu
> 
> Hi,
> 
> Sorry, no bug associated here, was confused how to subject the mail. Guidance 
> for the future
> would
> be appreciated.
> 
> I would like to do an NMU for CVE-2020-25708[1].
> 
> This seems to have been waiting a while and is fixed already in bullseye/sid 
> and stretch. Because
> of this I feel it can just go into the next point release if approved.
> 
> This update has been done during and part of this weekends 
> bsp-2021-04-at-salzburg.
> 
> Note: I am not a DM or DD and this will require a sponsor to upload if 
> approved.
> 
> [1] https://security-tracker.debian.org/tracker/CVE-2020-25708
> 
> Regards
> 
> Phil
> 

Hi,

I have been asked to contact maintainer regarding this and a number of other 
bugs. Marking
'moreinfo' until I have spoken with the maintainer.

Regards

Phil

-- 
*** Playing the game for the games own sake. ***

WWW: https://kathenas.org

Twitter: @kathenasorg

Instagram: @kathenasorg

IRC: kathenas

GPG: 724AA9B52F024C8B


signature.asc
Description: This is a digitally signed message part

Bug#987556: marked as done (unblock: stopmotion/0.8.5-3)

[Debian Bug Tracking System]

Your message dated Sun, 25 Apr 2021 19:40:57 +0200
with message-id <881d403a-40a0-7a58-e1bd-3a11a1a13...@debian.org>
and subject line Re: Bug#987556: unblock: stopmotion/0.8.5-3
has caused the Debian Bug report #987556,
regarding unblock: stopmotion/0.8.5-3
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987556: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987556
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package stopmotion

[ Reason ]

Change '%s' to %s in stopmotion.mime

[ Impact ]

Minor security issue.

[ Tests ]

n/a

[ Risks ]

Leaf package. Changing '%s' to %s is the only substantive change.

[ Checklist ]
  [X] all changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in testing

unblock stopmotion/0.8.5-3



$ git diff debian/0.8.5-2..debian/0.8.5-3
diff --git a/debian/changelog b/debian/changelog
index af0fe4a..ecfbbd6 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,13 @@
+stopmotion (0.8.5-3) unstable; urgency=medium
+
+  * bump policy, no changes required
+  * bump to debhelper 13
+  * Fix day-of-week for changelog entry 0.pre3.4-1
+  * Add pithy comment to debian/watch
+  * stop quoting %s in mimecap entry (closes: #987415)
+
+ -- Barak A. Pearlmutter   Fri, 23 Apr 2021 20:56:40 +0100
+
 stopmotion (0.8.5-2) unstable; urgency=medium
 
   * hack around integer size mismatch to std::min() on 32-bit systems
@@ -466,7 +476,7 @@ stopmotion (0.pre3.4-1) unstable; urgency=low
 
   * Fixed a bug when removing scenes
 
- -- Bjoern Erik Nilsen   Tue, 25 Apr 2005 17:12:36 +0200
+ -- Bjoern Erik Nilsen   Mon, 25 Apr 2005 17:12:36 +0200
 
 stopmotion (0.pre3.3-1) unstable; urgency=low
 
diff --git a/debian/stopmotion.mime b/debian/stopmotion.mime
index 483de5a..dcba5d0 100644
--- a/debian/stopmotion.mime
+++ b/debian/stopmotion.mime
@@ -1 +1 @@
-application/x-stopmotion;  /usr/bin/stopmotion  -caption "Animation Creator" 
'%s';   nametemplate='%s.sto'; test=test "$DISPLAY" != ""; priority=9
+application/x-stopmotion;  /usr/bin/stopmotion  -caption "Animation Creator" 
%s;   nametemplate=%s.sto; test=test "$DISPLAY" != ""; priority=9
diff --git a/debian/control b/debian/control
index 3cc21c7..2c4a90c 100644
--- a/debian/control
+++ b/debian/control
@@ -4,14 +4,14 @@ Priority: optional
 Maintainer: Barak A. Pearlmutter 
 Uploaders: Mahyuddin Susanto ,
   Bjoern Erik Nilsen 
-Build-Depends: debhelper-compat (= 12),
+Build-Depends: debhelper-compat (= 13),
pkg-config,
qtbase5-dev, qttools5-dev-tools,
qtmultimedia5-dev,
libtar-dev,
libvorbis-dev,
libxml2-dev
-Standards-Version: 4.4.1
+Standards-Version: 4.5.1
 Rules-Requires-Root: no
 Homepage: http://linuxstopmotion.sourceforge.net
 Vcs-Git: https://salsa.debian.org/debian/stopmotion.git
diff --git a/debian/watch b/debian/watch
index 1b239b9..0b05a3b 100644
--- a/debian/watch
+++ b/debian/watch
@@ -2,3 +2,7 @@ version=4
 opts="mode=git, pgpmode=none" \
  https://git.code.sf.net/p/linuxstopmotion/code \
  refs/tags/v?([\d\.]+) debian uupdate
+
+## Would use
+##   refs/tags/v?@ANY_VERSION@
+## but that matches things like 0.8.6-RC1.
--- End Message ---
--- Begin Message ---
Hi Barak,

On 25-04-2021 18:00, Barak A. Pearlmutter wrote:
> The bump to debhelper 13 was in a commit from September, but it had no
> binary consequences so didn't seem worth an upload.
> Can revert it if you want, but if diffoscope is okay: excellent!

Well, it's the first time I offer a diffoscope diff as an option and I'm
slightly disappointed, although in hind sight, that was to be expected
(SOURCE_DATE_EPOCH is taken from the changelog, which has a new entry
and thus a new timestamp).

> I rebuilt -2 and -3 binary packages and ran diffoscope. Attached.
> Aside from the changelog and the mime file, all differences are just
> timestamps in directory metadata or in images rebuilt at build time.
> (Granted, there are a lot of .png files with build-time timestamps. If
> there's a diffoscope option to ignore all timestamp differences, I
> couldn't find it.)

I think for the purpose of this exercise, one would need to fake the new
changelog entries timestamp to match the previous timestamp (or vice
versa). I'll accept this for this time but will not offer it again
without more tweaking :(.

Paul



OpenPGP_signature
Description: 

Bug#987564: NMU: CVE-2020-25708 - Fix possible divide-by-zero.

[Philip Wyett]

Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu

Hi,

Sorry, no bug associated here, was confused how to subject the mail. Guidance 
for the future would
be appreciated.

I would like to do an NMU for CVE-2020-25708[1].

This seems to have been waiting a while and is fixed already in bullseye/sid 
and stretch. Because
of this I feel it can just go into the next point release if approved.

This update has been done during and part of this weekends 
bsp-2021-04-at-salzburg.

Note: I am not a DM or DD and this will require a sponsor to upload if approved.

[1] https://security-tracker.debian.org/tracker/CVE-2020-25708

Regards

Phil

-- 
*** Playing the game for the games own sake. ***

WWW: https://kathenas.org

Twitter: @kathenasorg

Instagram: @kathenasorg

IRC: kathenas

GPG: 724AA9B52F024C8B
diff -Nru libvncserver-0.9.11+dfsg/debian/changelog libvncserver-0.9.11+dfsg/debian/changelog
--- libvncserver-0.9.11+dfsg/debian/changelog	2020-08-28 22:40:37.0 +0100
+++ libvncserver-0.9.11+dfsg/debian/changelog	2021-04-25 17:01:53.0 +0100
@@ -1,3 +1,10 @@
+libvncserver (0.9.11+dfsg-1.3+deb10u5) buster; urgency=medium
+
+  * Non-maintainer upload.
+  * CVE-2020-25708: libvncserver: fix possible divide-by-zero.
+
+ -- Phil Wyett   Sun, 25 Apr 2021 17:01:53 +0100
+
 libvncserver (0.9.11+dfsg-1.3+deb10u4) buster; urgency=medium
 
   * CVE-2019-20839: libvncclient: bail out if unix socket name would overflow.
diff -Nru libvncserver-0.9.11+dfsg/debian/patches/CVE-2020-25708.patch libvncserver-0.9.11+dfsg/debian/patches/CVE-2020-25708.patch
--- libvncserver-0.9.11+dfsg/debian/patches/CVE-2020-25708.patch	1970-01-01 01:00:00.0 +0100
+++ libvncserver-0.9.11+dfsg/debian/patches/CVE-2020-25708.patch	2021-04-25 17:01:53.0 +0100
@@ -0,0 +1,14 @@
+Index: libvncserver-0.9.11+dfsg/libvncserver/rfbserver.c
+===
+--- libvncserver-0.9.11+dfsg.orig/libvncserver/rfbserver.c
 libvncserver-0.9.11+dfsg/libvncserver/rfbserver.c
+@@ -3294,6 +3294,9 @@ rfbSendRectEncodingRaw(rfbClientPtr cl,
+ char *fbptr = (cl->scaledScreen->frameBuffer + (cl->scaledScreen->paddedWidthInBytes * y)
++ (x * (cl->scaledScreen->bitsPerPixel / 8)));
+
++if(!h || !w)
++	return TRUE; /* nothing to send */
++
+ /* Flush the buffer to guarantee correct alignment for translateFn(). */
+ if (cl->ublen > 0) {
+ if (!rfbSendUpdateBuf(cl))
diff -Nru libvncserver-0.9.11+dfsg/debian/patches/series libvncserver-0.9.11+dfsg/debian/patches/series
--- libvncserver-0.9.11+dfsg/debian/patches/series	2020-08-28 22:40:19.0 +0100
+++ libvncserver-0.9.11+dfsg/debian/patches/series	2021-04-25 17:01:53.0 +0100
@@ -37,3 +37,4 @@
 CVE-2020-14401.patch
 CVE-2020-14402+14403+14404.patch
 CVE-2020-14405.patch
+CVE-2020-25708.patch


signature.asc
Description: This is a digitally signed message part

Bug#987551: marked as done (unblock: dipy/1.3.0-3)

[Debian Bug Tracking System]

Your message dated Sun, 25 Apr 2021 19:01:49 +0200
with message-id <8aaee7be-65e3-27ae-0a20-d8a54f4c5...@debian.org>
and subject line Re: Bug#987551: unblock: dipy/1.3.0-3
has caused the Debian Bug report #987551,
regarding unblock: dipy/1.3.0-3
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987551: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987551
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Good Day,

Please unblock package dipy

[ Reason ]
dipy 1.3.0-3 fixes the grave bug #987453, since python3-dipy-lib
is unusable otherwise, and lots of submodules are missing from
python3-dipy.  It also addresses the serious bug #987517.

[ Impact ]
Removal of dipy would affect a dozen of users per popcon report.
This is a leaf package, so wouldn't affect buildability nor
installability of other packages in the archive.

[ Tests ]
Automated tests I carried on were those of default Salsa CI.
I'm surprised blhc ended successfully, since resulting shared
objects are missing hardening, per lintian report.  autopkgtest
are notably superficial for the moment.

Tests I manually carried on are:
  * running dipy_fetch to download some resources, since these
tests are not done automatically in any way anymore;
  * testing a couple of commands, such as dipy_align_affine,
or dipy_info, using the result of the download;
  * importing some of the missing cython modules to check that
they are now usable, such as dipy.core.interpolation, or
dipy.denoise.shift_twist_convolution.

[ Risks ]
The change to fill properly the package python3-dipy-lib adds a
lot of new cython modules to dipy, which are most likely not
toroughly field tested in Debian context this late in the hard
freeze.  Lintian reports a lot of warnings, so the package is
perhaps not in the best shape of the archive.  This is a leaf
package, so has very little chance to affect others in the
archive.

[ Checklist ]
  [*] all changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
  [*] attach debdiff against the package in testing

[ Other info ]
Not being of the field of endeavour myself, my very few testings
may not be representative of normal usage.

unblock dipy/1.3.0-3

Have a nice day,  :)
-- 
Étienne Mollier 
Fingerprint:  8f91 b227 c7d6 f2b1 948c  8236 793c f67e 8f0d 11da
Sent from /dev/pts/3, please excuse my verbosity.
diff -Nru dipy-1.3.0/debian/changelog dipy-1.3.0/debian/changelog
--- dipy-1.3.0/debian/changelog 2021-01-20 11:52:53.0 +0100
+++ dipy-1.3.0/debian/changelog 2021-04-25 11:15:12.0 +0200
@@ -1,3 +1,14 @@
+dipy (1.3.0-3) unstable; urgency=medium
+
+  * Team upload.
+  * d/rules: prevent build time test suite from accessing network resources.
+Closes: #987517
+  * d/rules: install .so files in python3-dipy-lib; this makes several dipy
+modules, formerly missing, now usable.
+Closes: #987453
+
+ -- Étienne Mollier   Sun, 25 Apr 2021 11:15:12 
+0200
+
 dipy (1.3.0-2) unstable; urgency=medium
 
   * Team upload.
diff -Nru dipy-1.3.0/debian/rules dipy-1.3.0/debian/rules
--- dipy-1.3.0/debian/rules 2021-01-20 11:52:53.0 +0100
+++ dipy-1.3.0/debian/rules 2021-04-25 10:47:24.0 +0200
@@ -57,6 +57,8 @@
# cd build to prevent use of local/not-built source tree
 ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))
set -x ; \
+   export http_proxy=http://127.0.0.1:9/ ; \
+   export https_proxy=https://127.0.0.1:9/ ; \
for PYTHON in $(PY3VERS); do \
export PYTHONPATH=$$(pybuild --print build_dir --interpreter 
python$$PYTHON); \
echo "I: Running Dipy unittests using $$PYTHON"; \
@@ -69,12 +71,17 @@
done
 endif
 
-## remove .so libraries from main package, and call dh_numpy*
+## move .so libraries into -lib package, and call dh_numpy*
 ## while removing 2 if not present
 _dh_python%:
-   if [ -d debian/$(PACKAGE$*_NAME)/usr/lib ]; then \
-  find debian/$(PACKAGE$*_NAME)/usr/lib -name "*.so" -delete; \
-   fi
+   set -e \
+   ; test -d debian/$(PACKAGE$*_NAME)/usr/lib || exit 0 \
+   ; for lib in $$(find debian/$(PACKAGE$*_NAME)/usr/lib -name "*.so") \
+   ; dosdir=$$(dirname $$lib) \
+   ;   tdir=debian/$(PACKAGE$*_NAME)-lib/$${sdir#*$(PACKAGE$*_NAME)/} \
+   ;   mkdir -p "$${tdir}" \
+   ;   mv -v "$${lib}" "$${tdir}" \
+   ; done
[ -e /usr/bin/dh_numpy$(*:2=) ] && dh_numpy$(*:2=) 

Bug#987561: [pre-approval] unblock: fuse3/3.10.3-1

[GCS]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

[ Reason ]
While it's a new upstream release, it only contains a bugfix [1] and
correcting spelling mistakes.
The actual change is in lib/fuse.c and very small [2]. Other changes
are for the example and tests to keep those in sync.

[ Impact ]
Would provide a fixed and consistent working of fuse3.

[ Tests ]
Rebuilt all reverse dependencies and those are fine.

[ Risks ]
Contains an udeb and currently I don't know how to test it.

[ Checklist ]
  [x] all changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in testing

Thanks for considering,
Laszlo/GCS
[1] 
https://github.com/libfuse/libfuse/commit/bdd2d4110fbc6d2059eb699efad2cca4a7eacccb
[2] 
https://github.com/libfuse/libfuse/commit/bdd2d4110fbc6d2059eb699efad2cca4a7eacccb#diff-0a915c0d19eddb55a580a696b995dab0574ae0f7f04f9136c60d2f3c8a90ac39
diff -Nru --exclude html fuse3-3.10.2/AUTHORS fuse3-3.10.3/AUTHORS
--- fuse3-3.10.2/AUTHORS	2021-02-05 10:07:28.0 +0100
+++ fuse3-3.10.3/AUTHORS	2021-04-12 12:18:08.0 +0200
@@ -82,6 +82,7 @@
 HazelFZ 
 Heiko Becker 
 Hendrik Brueckner 
+Hookey 
 human 
 Ikey Doherty 
 itsdeepak 
@@ -163,6 +164,7 @@
 Tej Chajed 
 tenzap <46226844+ten...@users.noreply.github.com>
 therealnewo...@gmail.com 
+Tobias Nießen 
 Tomasz Kulasek <34129113+tkula...@users.noreply.github.com>
 Tom Callaway 
 Tom Callaway 
diff -Nru --exclude html fuse3-3.10.2/ChangeLog.rst fuse3-3.10.3/ChangeLog.rst
--- fuse3-3.10.2/ChangeLog.rst	2021-02-05 10:07:28.0 +0100
+++ fuse3-3.10.3/ChangeLog.rst	2021-04-12 12:18:08.0 +0200
@@ -1,3 +1,8 @@
+libfuse 3.10.3 (2021-04-12)
+===
+
+* Fix returning d_ino and d_type from readdir(3) in non-plus mode
+  
 libfuse 3.10.2 (2021-02-05)
 ===
 
diff -Nru --exclude html fuse3-3.10.2/debian/changelog fuse3-3.10.3/debian/changelog
--- fuse3-3.10.2/debian/changelog	2021-02-24 23:28:30.0 +0100
+++ fuse3-3.10.3/debian/changelog	2021-04-21 14:34:39.0 +0200
@@ -1,3 +1,12 @@
+fuse3 (3.10.3-1) unstable; urgency=medium
+
+  * New upstream release:
+- fix returning d_ino and d_type by readdir(3) in non-plus mode,
+- remove unused fuse_worker bufsize,
+- fix typos.
+
+ -- Laszlo Boszormenyi (GCS)   Wed, 21 Apr 2021 14:34:39 +0200
+
 fuse3 (3.10.2-2) unstable; urgency=medium
 
   * Mark libfuse3-dev as Multi-Arch same.
diff -Nru --exclude html fuse3-3.10.2/example/passthrough.c fuse3-3.10.3/example/passthrough.c
--- fuse3-3.10.2/example/passthrough.c	2021-02-05 10:07:28.0 +0100
+++ fuse3-3.10.3/example/passthrough.c	2021-04-12 12:18:08.0 +0200
@@ -55,6 +55,8 @@
 
 #include "passthrough_helpers.h"
 
+static int fill_dir_plus = 0;
+
 static void *xmp_init(struct fuse_conn_info *conn,
 		  struct fuse_config *cfg)
 {
@@ -132,7 +134,7 @@
 		memset(, 0, sizeof(st));
 		st.st_ino = de->d_ino;
 		st.st_mode = de->d_type << 12;
-		if (filler(buf, de->d_name, , 0, FUSE_FILL_DIR_PLUS))
+		if (filler(buf, de->d_name, , 0, fill_dir_plus))
 			break;
 	}
 
@@ -551,6 +553,18 @@
 
 int main(int argc, char *argv[])
 {
+	enum { MAX_ARGS = 10 };
+	int i,new_argc;
+	char *new_argv[MAX_ARGS];
+
 	umask(0);
-	return fuse_main(argc, argv, _oper, NULL);
+			/* Process the "--plus" option apart */
+	for (i=0, new_argc=0; (ist_mode;
+			if (f->conf.use_ino)
+e.attr.st_ino = statp->st_ino;
+		}
 		if (!f->conf.use_ino && f->conf.readdir_ino) {
 			e.attr.st_ino = (ino_t)
 lookup_nodeid(f, dh->nodeid, name);
diff -Nru --exclude html fuse3-3.10.2/lib/fuse_loop_mt.c fuse3-3.10.3/lib/fuse_loop_mt.c
--- fuse3-3.10.2/lib/fuse_loop_mt.c	2021-02-05 10:07:28.0 +0100
+++ fuse3-3.10.3/lib/fuse_loop_mt.c	2021-04-12 12:18:08.0 +0200
@@ -32,7 +32,6 @@
 	struct fuse_worker *prev;
 	struct fuse_worker *next;
 	pthread_t thread_id;
-	size_t bufsize;
 
 	// We need to include fuse_buf so that we can properly free
 	// it when a thread is terminated by pthread_cancel().
diff -Nru --exclude html fuse3-3.10.2/meson.build fuse3-3.10.3/meson.build
--- fuse3-3.10.2/meson.build	2021-02-05 10:07:28.0 +0100
+++ fuse3-3.10.3/meson.build	2021-04-12 12:18:08.0 +0200
@@ -1,4 +1,4 @@
-project('libfuse3', ['c'], version: '3.10.2',
+project('libfuse3', ['c'], version: '3.10.3',
 meson_version: '>= 0.42',
 default_options: [ 'buildtype=debugoptimized' ])
 
diff -Nru --exclude html fuse3-3.10.2/test/readdir_inode.c fuse3-3.10.3/test/readdir_inode.c
--- fuse3-3.10.2/test/readdir_inode.c	2021-02-05 10:07:28.0 +0100
+++ fuse3-3.10.3/test/readdir_inode.c	2021-04-12 12:18:08.0 +0200
@@ -1,7 +1,8 @@
 /*
- * Prints each directory entry and its inode as returned by 'readdir'.
+ * Prints each directory entry, its inode and d_type as returned by 'readdir'.
  * Skips '.' and '..' because readdir is not required to return 

Bug#987560: unblock: clonezilla/3.35.2-3

[Georges Khaznadar]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package clonezilla

fixed #987527

[ Reason ]
The package failed to install because of modifications
made under directory /opt at postinst time. As the files
under /opt were just a remainder of an obsolete version,
I could easily fix this misbehavior

[ Impact ]
Clonezilla's popcon score is more than 900

[ Tests ]
Installed successfully clonezilla in a fresh chroot.

[ Risks ]
The change is trivial (nothing installed under /opt during the package's
configuration)

[ Checklist ]
  [x ] all changes are documented in the d/changelog
  [x ] I reviewed all changes and I approve them
  [x ] attach debdiff against the package in testing

[ Other info ]
-
unblock clonezilla/3.35.2-3

-- System Information:
Debian Release: bullseye/sid
  APT prefers stable
  APT policy: (900, 'stable'), (499, 'testing'), (400, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-14-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not
set
Shell: /bin/sh linked to /usr/bin/dash
diff -Nru clonezilla-3.35.2/debian/changelog clonezilla-3.35.2/debian/changelog
--- clonezilla-3.35.2/debian/changelog  2020-03-11 17:57:09.0 +0100
+++ clonezilla-3.35.2/debian/changelog  2021-04-25 16:52:50.0 +0200
@@ -1,3 +1,12 @@
+clonezilla (3.35.2-3) unstable; urgency=medium
+
+  * removed postinst and postrm instructions which installed (or erased)
+files and directories under /opt/; this seems to be useless for current
+version of clonezilla, and it prevents it from being installed in
+Bullseye. Closes: #987527
+
+ -- Georges Khaznadar   Sun, 25 Apr 2021 16:52:50 +0200
+
 clonezilla (3.35.2-2) unstable; urgency=medium
 
   * modified the versioned dependency clonezilla -> drbl, which becomes
diff -Nru clonezilla-3.35.2/debian/postinst clonezilla-3.35.2/debian/postinst
--- clonezilla-3.35.2/debian/postinst   2018-05-20 16:40:15.0 +0200
+++ clonezilla-3.35.2/debian/postinst   2021-04-25 16:50:41.0 +0200
@@ -20,9 +20,8 @@
 
 case "$1" in
 configure)
-   ln -sf /usr/share/drbl /opt/
-   mkdir -p /opt/drbl/conf
-   ln -sf /etc/drbl/drbl.conf /opt/drbl/conf/
+   mkdir -p /usr/share/drbl/conf
+   ln -sf /etc/drbl/drbl.conf /usr/share/drbl/conf/
 ;;
 
 abort-upgrade|abort-remove|abort-deconfigure)
diff -Nru clonezilla-3.35.2/debian/postrm clonezilla-3.35.2/debian/postrm
--- clonezilla-3.35.2/debian/postrm 2018-05-20 16:40:15.0 +0200
+++ clonezilla-3.35.2/debian/postrm 2021-04-25 16:49:12.0 +0200
@@ -21,7 +21,6 @@
 
 case "$1" in
 purge|remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
-   rm -f /opt/drbl
rm -rf /usr/share/drbl/conf
 ;;
 

Bug#987551: unblock: dipy/1.3.0-3

[Étienne Mollier]

Hi Paul,

Per your request I attached a binary debdiff between
dipy_1.3.0-2_amd64.changes and dipy_1.3.0-3_amd64.changes:

debdiff tmp/dipy_1.3.0-2_amd64.changes \
debian/med-team/dipy_1.3.0-3_amd64.changes \
> dipy_1.3.0-2~3_amd64.debdiff

(Not sure where I could get a dipy_1.3.0-2_amd64.changes, so
 rebuilt one with dipy/1.3.0-2 source code in Testing build
 environment; builds should be reproducible, so hoping it is ok)

Thanks for your time looking into it!

Have a nice day,  :)
-- 
Étienne Mollier 
Fingerprint:  8f91 b227 c7d6 f2b1 948c  8236 793c f67e 8f0d 11da
Sent from /dev/pts/4, please excuse my verbosity.
[The following lists of changes regard files as different if they have
different names, permissions or owners.]

Files in second .changes but not in first
-
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/07/178c7c20dec865c7e0e128833c8cb009a88aca.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/09/b5ee022b5f3c0add360613f77499e2570b71a1.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/11/6b7ff34f2f95ad54d8bdcc266f349fce9d3ead.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/13/fd2d434de0ab3888b006eed677c08689836929.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/17/427d5560f14b85ae5a5b3c1247793fce9d8a03.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/1f/871c5ec3ca894a30cdf92cdea3b1a669ebcef0.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/24/f5138580e7b86313f27fe9e8bb66b35c6d4eeb.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/2c/a7e7d7d99a3294fb5f083e7d6ed52c4381cdf8.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/32/14d2fb0da91af1695ce03ea1654ad691573775.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/35/7b035428e8c4784c00730cc1b93e812fdca1cd.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/36/3bccee16328c11960a40760032dc3e1a05b352.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/45/dc252c13524d3814b5e5facd530d15f49de4eb.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/4b/63791ec8076fab719187e4860359efe838bde5.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/53/3699ee4abdd0f1c4882040b792e16a3c0d5c08.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/57/b39ded40f470bcfa1671b7480b26b5863ea1a2.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/5e/a6fbc88df71484e447b3cc4fda7fba6a4db0ea.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/75/1ccf01b844d227f0566265eb7f0025de5bc3c2.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/80/1613757af7119bda6fbe0e6a99e46088b7c8df.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/8f/0a2a850fa22d7d8c37db171319eac42a766f36.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/90/8c068acb2f4e5e10c9a586f2387df1ba11f862.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/97/a89b840e2df0046d5f4aee72e16aa22f787a62.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/a6/023522aaa76ba656b68f09cfc19b027a324385.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/a8/ff0ee6d6043f9fa2124f49b66d609cc2986a24.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/ae/c95d77db5534194a444b318d2225a112142ab7.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/b6/b4404bf1a50b2fdc0d3d579bed85630517f227.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/b8/7853b018e7ea2980f6011f49acca073ffd6db7.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/be/27cc805d84acd89aa67a7d52e32ab7719bbdae.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/c3/6a6b2f10560bb3c1327927d480e4017ee26fee.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/c7/376c4deb7b72c4896c72056f02386c310516ad.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/cd/16f55d45085ca1cd369483c5137e95aea4b558.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/cd/74b49b1a46ffdcf3683e8b8387ce0ca93d4187.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/e5/6957530de473d10c735b9cf2efa9ba496bf52d.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/e8/83a7e42a85f0d750c24c95decb966c2600a2e2.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/ef/8287941a6f0788636012232ef20f6e3a784d14.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/ef/9ae7350f593016c4c50b3f897427596189874d.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/f4/d495b35aa3ebc24679a0a32b19de5fa0f4e27e.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/f8/090777050ec576ba8beb42939c1b910c6a712f.debug
-rw-r--r--  root/root   
/usr/lib/debug/.dwz/x86_64-linux-gnu/python3-dipy-lib.debug
-rw-r--r--  root/root   
/usr/lib/python3/dist-packages/dipy/align/bundlemin.cpython-39-x86_64-linux-gnu.so
-rw-r--r--  root/root   
/usr/lib/python3/dist-packages/dipy/align/crosscorr.cpython-39-x86_64-linux-gnu.so
-rw-r--r--  root/root   
/usr/lib/python3/dist-packages/dipy/align/expectmax.cpython-39-x86_64-linux-gnu.so
-rw-r--r--  root/root   
/usr/lib/python3/dist-packages/dipy/align/parzenhist.cpython-39-x86_64-linux-gnu.so

Bug#987558: unblock: falkon/3.1.0+dfsg1-11

[Georges Khaznadar]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package falkon

[ Reason ]
I fixed two bugs: #987455, and after that #987490

[ Impact ]
falkon popcon's score is over 900

[ Tests ]
Manual test : rebuilt the package (gbp buildpackage --git-pbuilder); this
yielded only one non-dbg binary package, which I installed and tested
successfully.

[ Risks ]

this change is rather trivial : removed an empty binary package.

[ Checklist ]
  [x ] all changes are documented in the d/changelog
  [x ] I reviewed all changes and I approve them
  [x ] attach debdiff against the package in testing

[ Other info ]
-

unblock falkon/3.1.0+dfsg1-11

-- System Information:
Debian Release: bullseye/sid
  APT prefers stable
  APT policy: (900, 'stable'), (499, 'testing'), (400, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-14-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not
set
Shell: /bin/sh linked to /usr/bin/dash
diff -Nru falkon-3.1.0+dfsg1/debian/changelog 
falkon-3.1.0+dfsg1/debian/changelog
--- falkon-3.1.0+dfsg1/debian/changelog 2020-10-24 12:51:42.0 +0200
+++ falkon-3.1.0+dfsg1/debian/changelog 2021-04-25 17:02:14.0 +0200
@@ -1,3 +1,16 @@
+falkon (3.1.0+dfsg1-11) unstable; urgency=medium
+
+  * removed debian/falkon.install since for a single package there is no
+debian/tmp directory implied. Closes: #987490
+
+ -- Georges Khaznadar   Sun, 25 Apr 2021 17:02:14 +0200
+
+falkon (3.1.0+dfsg1-10) unstable; urgency=medium
+
+  * applied Reiner Herrmann's patch, thanks! Closes: #987455
+
+ -- Georges Khaznadar   Sat, 24 Apr 2021 15:41:47 +0200
+
 falkon (3.1.0+dfsg1-9) unstable; urgency=medium
 
   [ Dmitry Shachnev ]
diff -Nru falkon-3.1.0+dfsg1/debian/control falkon-3.1.0+dfsg1/debian/control
--- falkon-3.1.0+dfsg1/debian/control   2020-06-29 15:47:11.0 +0200
+++ falkon-3.1.0+dfsg1/debian/control   2021-04-24 15:40:28.0 +0200
@@ -41,7 +41,6 @@
 Conflicts: qupzilla (<< 3.0.0~)
 Replaces: qupzilla (<< 3.0.0~)
 Provides: www-browser
-Recommends: falkon-plugin-wallet
 Suggests: qtwebengine5-dev-tools
 Description: lightweight web browser based on Qt WebEngine
  Falkon is a new and very fast Qt Webengine browser. It aims to be a
@@ -52,30 +51,3 @@
  that, you can manage RSS feeds with an included RSS reader, block ads
  with a builtin AdBlock plugin, block Flash content with Click2Flash
  and edit the local CA Certificates database with an SSL Manager.
-
-Package: falkon-plugin-wallet
-Architecture: amd64 arm64 armhf i386 mipsel
-Depends: ${misc:Depends}, ${shlibs:Depends}
-Conflicts: qupzilla-plugin-wallet (<< 3.0.0~)
-Replaces: qupzilla-plugin-wallet (<< 3.0.0~)
-Description: adds password management to Falkon
- Falkon is a new and very fast Qt Webengine browser. It aims to be a
- lightweight web browser available through all major platforms.
- .
- This plugin allows one to let KWallet manage the saved passwords.
-
-Package: qupzilla
-Depends: falkon, ${misc:Depends}
-Architecture: amd64 arm64 armhf i386 mipsel
-Section: oldlibs
-Priority: optional
-Description: transitional package for qupzilla
- This is a transitional package. It can safely be removed.
-
-Package: qupzilla-plugin-kwallet
-Depends: falkon-plugin-wallet, ${misc:Depends}
-Architecture: amd64 arm64 armhf i386 mipsel
-Section: oldlibs
-Priority: optional
-Description: transitional package for qupzilla-plugin-kwallet
- This is a transitional package. It can safely be removed.
diff -Nru falkon-3.1.0+dfsg1/debian/falkon.install 
falkon-3.1.0+dfsg1/debian/falkon.install
--- falkon-3.1.0+dfsg1/debian/falkon.install2019-11-08 19:57:14.0 
+0100
+++ falkon-3.1.0+dfsg1/debian/falkon.install1970-01-01 01:00:00.0 
+0100
@@ -1,3 +0,0 @@
-usr/bin
-usr/lib/*-linux-gnu*/*
-usr/share
diff -Nru falkon-3.1.0+dfsg1/debian/rules falkon-3.1.0+dfsg1/debian/rules
--- falkon-3.1.0+dfsg1/debian/rules 2019-08-25 16:14:42.0 +0200
+++ falkon-3.1.0+dfsg1/debian/rules 2021-04-24 15:40:28.0 +0200
@@ -29,15 +29,3 @@
# remove eventually previously created symlinks
rm -f src/lib/data/html/jquery.js src/lib/data/html/jquery-ui.js
dh_auto_clean
-
-override_dh_install:
-   dh_install
-   # move some plugins to the separate package falkon-plugin-wallet
-   for f in KWalletPasswords.so GnomeKeyringPasswords.so; do \
- found=$$(find debian/falkon -name $$f); \
- if [ -n "$${found}" ]; then \
-   dest=$$(echo $${found} | sed 
's%debian/falkon%debian/falkon-plugin-wallet%'); \
-   mkdir -p $$(dirname $${dest}); \
-   mv $${found} $$(dirname $${dest}); \
- fi; \
-   done

Bug#987488: unblock: ircci/20210314-1

[Jan Wagner]

Hi there,

Am 25.04.21 um 09:35 schrieb Graham Inggs:

Control: retitle -1 unblock: ircii/20210314-1
Contro: tags -1 + moreinfo

Hi Jan

On Sat, 24 Apr 2021 at 16:21, Jan Wagner  wrote:

[ Risks ]
While the diffstat looks huge, a significant part is removed code.


This debdiff is unreviewable.  Please provide a filtered debdiff along
with the command used to filter it.

++ Bump Debhelper-compat to 13.

Bumping the debehlper compat level is not accepted at this stage of
the release [1].
Please revert this change.


security stated, that ircii might not qualify to be released with 
bullseye (see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987537#10).


I think I would leave it up to Daniel, who did the QA upload, if it's 
worth to work on this. If nobody is caring about ircii in bullseye, we 
should close this bug here.


With kind regards, Jan.

Processed: Re: Bug#987556: unblock: stopmotion/0.8.5-3

[Debian Bug Tracking System]

Processing control commands:

> tags -1 moreinfo
Bug #987556 [release.debian.org] unblock: stopmotion/0.8.5-3
Added tag(s) moreinfo.

-- 
987556: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987556
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#987556: unblock: stopmotion/0.8.5-3

[Paul Gevers]

Control: tags -1 moreinfo

Hi Barak,

On 25-04-2021 16:46, Barak A. Pearlmutter wrote:
> +  * bump to debhelper 13

This will need to be reverted. See our FAQ [1] section: "I bumped the
debhelper compat level, why is it rejected?" Alternatively, if nothing
else changes in the binary packages, you can provide a diffoscope diff
between a no-change rebuild of 0.8.5-2 and 0.8.5-3, showing that nothing
changed except for the mentioned lines. Note, we'll not engage in 'but
can't this be accepted anyways' discussions.

Paul

[1] https://release.debian.org/bullseye/FAQ.html



OpenPGP_signature
Description: OpenPGP digital signature

Bug#987556: unblock: stopmotion/0.8.5-3

[Barak A. Pearlmutter]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package stopmotion

[ Reason ]

Change '%s' to %s in stopmotion.mime

[ Impact ]

Minor security issue.

[ Tests ]

n/a

[ Risks ]

Leaf package. Changing '%s' to %s is the only substantive change.

[ Checklist ]
  [X] all changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in testing

unblock stopmotion/0.8.5-3



$ git diff debian/0.8.5-2..debian/0.8.5-3
diff --git a/debian/changelog b/debian/changelog
index af0fe4a..ecfbbd6 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,13 @@
+stopmotion (0.8.5-3) unstable; urgency=medium
+
+  * bump policy, no changes required
+  * bump to debhelper 13
+  * Fix day-of-week for changelog entry 0.pre3.4-1
+  * Add pithy comment to debian/watch
+  * stop quoting %s in mimecap entry (closes: #987415)
+
+ -- Barak A. Pearlmutter   Fri, 23 Apr 2021 20:56:40 +0100
+
 stopmotion (0.8.5-2) unstable; urgency=medium
 
   * hack around integer size mismatch to std::min() on 32-bit systems
@@ -466,7 +476,7 @@ stopmotion (0.pre3.4-1) unstable; urgency=low
 
   * Fixed a bug when removing scenes
 
- -- Bjoern Erik Nilsen   Tue, 25 Apr 2005 17:12:36 +0200
+ -- Bjoern Erik Nilsen   Mon, 25 Apr 2005 17:12:36 +0200
 
 stopmotion (0.pre3.3-1) unstable; urgency=low
 
diff --git a/debian/stopmotion.mime b/debian/stopmotion.mime
index 483de5a..dcba5d0 100644
--- a/debian/stopmotion.mime
+++ b/debian/stopmotion.mime
@@ -1 +1 @@
-application/x-stopmotion;  /usr/bin/stopmotion  -caption "Animation Creator" 
'%s';   nametemplate='%s.sto'; test=test "$DISPLAY" != ""; priority=9
+application/x-stopmotion;  /usr/bin/stopmotion  -caption "Animation Creator" 
%s;   nametemplate=%s.sto; test=test "$DISPLAY" != ""; priority=9
diff --git a/debian/control b/debian/control
index 3cc21c7..2c4a90c 100644
--- a/debian/control
+++ b/debian/control
@@ -4,14 +4,14 @@ Priority: optional
 Maintainer: Barak A. Pearlmutter 
 Uploaders: Mahyuddin Susanto ,
   Bjoern Erik Nilsen 
-Build-Depends: debhelper-compat (= 12),
+Build-Depends: debhelper-compat (= 13),
pkg-config,
qtbase5-dev, qttools5-dev-tools,
qtmultimedia5-dev,
libtar-dev,
libvorbis-dev,
libxml2-dev
-Standards-Version: 4.4.1
+Standards-Version: 4.5.1
 Rules-Requires-Root: no
 Homepage: http://linuxstopmotion.sourceforge.net
 Vcs-Git: https://salsa.debian.org/debian/stopmotion.git
diff --git a/debian/watch b/debian/watch
index 1b239b9..0b05a3b 100644
--- a/debian/watch
+++ b/debian/watch
@@ -2,3 +2,7 @@ version=4
 opts="mode=git, pgpmode=none" \
  https://git.code.sf.net/p/linuxstopmotion/code \
  refs/tags/v?([\d\.]+) debian uupdate
+
+## Would use
+##   refs/tags/v?@ANY_VERSION@
+## but that matches things like 0.8.6-RC1.

Bug#987551: unblock: dipy/1.3.0-3

[Étienne Mollier]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Good Day,

Please unblock package dipy

[ Reason ]
dipy 1.3.0-3 fixes the grave bug #987453, since python3-dipy-lib
is unusable otherwise, and lots of submodules are missing from
python3-dipy.  It also addresses the serious bug #987517.

[ Impact ]
Removal of dipy would affect a dozen of users per popcon report.
This is a leaf package, so wouldn't affect buildability nor
installability of other packages in the archive.

[ Tests ]
Automated tests I carried on were those of default Salsa CI.
I'm surprised blhc ended successfully, since resulting shared
objects are missing hardening, per lintian report.  autopkgtest
are notably superficial for the moment.

Tests I manually carried on are:
  * running dipy_fetch to download some resources, since these
tests are not done automatically in any way anymore;
  * testing a couple of commands, such as dipy_align_affine,
or dipy_info, using the result of the download;
  * importing some of the missing cython modules to check that
they are now usable, such as dipy.core.interpolation, or
dipy.denoise.shift_twist_convolution.

[ Risks ]
The change to fill properly the package python3-dipy-lib adds a
lot of new cython modules to dipy, which are most likely not
toroughly field tested in Debian context this late in the hard
freeze.  Lintian reports a lot of warnings, so the package is
perhaps not in the best shape of the archive.  This is a leaf
package, so has very little chance to affect others in the
archive.

[ Checklist ]
  [*] all changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
  [*] attach debdiff against the package in testing

[ Other info ]
Not being of the field of endeavour myself, my very few testings
may not be representative of normal usage.

unblock dipy/1.3.0-3

Have a nice day,  :)
-- 
Étienne Mollier 
Fingerprint:  8f91 b227 c7d6 f2b1 948c  8236 793c f67e 8f0d 11da
Sent from /dev/pts/3, please excuse my verbosity.
diff -Nru dipy-1.3.0/debian/changelog dipy-1.3.0/debian/changelog
--- dipy-1.3.0/debian/changelog 2021-01-20 11:52:53.0 +0100
+++ dipy-1.3.0/debian/changelog 2021-04-25 11:15:12.0 +0200
@@ -1,3 +1,14 @@
+dipy (1.3.0-3) unstable; urgency=medium
+
+  * Team upload.
+  * d/rules: prevent build time test suite from accessing network resources.
+Closes: #987517
+  * d/rules: install .so files in python3-dipy-lib; this makes several dipy
+modules, formerly missing, now usable.
+Closes: #987453
+
+ -- Étienne Mollier   Sun, 25 Apr 2021 11:15:12 
+0200
+
 dipy (1.3.0-2) unstable; urgency=medium
 
   * Team upload.
diff -Nru dipy-1.3.0/debian/rules dipy-1.3.0/debian/rules
--- dipy-1.3.0/debian/rules 2021-01-20 11:52:53.0 +0100
+++ dipy-1.3.0/debian/rules 2021-04-25 10:47:24.0 +0200
@@ -57,6 +57,8 @@
# cd build to prevent use of local/not-built source tree
 ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))
set -x ; \
+   export http_proxy=http://127.0.0.1:9/ ; \
+   export https_proxy=https://127.0.0.1:9/ ; \
for PYTHON in $(PY3VERS); do \
export PYTHONPATH=$$(pybuild --print build_dir --interpreter 
python$$PYTHON); \
echo "I: Running Dipy unittests using $$PYTHON"; \
@@ -69,12 +71,17 @@
done
 endif
 
-## remove .so libraries from main package, and call dh_numpy*
+## move .so libraries into -lib package, and call dh_numpy*
 ## while removing 2 if not present
 _dh_python%:
-   if [ -d debian/$(PACKAGE$*_NAME)/usr/lib ]; then \
-  find debian/$(PACKAGE$*_NAME)/usr/lib -name "*.so" -delete; \
-   fi
+   set -e \
+   ; test -d debian/$(PACKAGE$*_NAME)/usr/lib || exit 0 \
+   ; for lib in $$(find debian/$(PACKAGE$*_NAME)/usr/lib -name "*.so") \
+   ; dosdir=$$(dirname $$lib) \
+   ;   tdir=debian/$(PACKAGE$*_NAME)-lib/$${sdir#*$(PACKAGE$*_NAME)/} \
+   ;   mkdir -p "$${tdir}" \
+   ;   mv -v "$${lib}" "$${tdir}" \
+   ; done
[ -e /usr/bin/dh_numpy$(*:2=) ] && dh_numpy$(*:2=) 
-p$(PACKAGE$*_NAME)-lib || :
dh_python$*
 


signature.asc
Description: PGP signature

Bug#987550: unblock: fricas/1.3.6-6

[Camm Maguire]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package fricas

[ Reason ]
RC bug 987456 just filed and fixed, missing build depend resulted in
some packages being empty

[ Impact ]
Empty packages render graphical UI unusable

[ Tests ]
None.

[ Risks ]
None.

[ Checklist ]
  [X] all changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in testing

-
source debdiff fricas_1.3.6-5 to fricas_1.3.6-6
-
diff -Nru fricas-1.3.6/debian/changelog fricas-1.3.6/debian/changelog
--- fricas-1.3.6/debian/changelog   2021-02-13 01:48:46.0 +
+++ fricas-1.3.6/debian/changelog   2021-04-24 13:23:44.0 +
@@ -1,3 +1,11 @@
+fricas (1.3.6-6) unstable; urgency=high
+
+  * libx11-dev -> libxpm-dev in build depends
+  * Bug fix: "fricas-{graphics,hypertex} are empty", thanks to Adrian Bunk
+(Closes: #987456).
+
+ -- Camm Maguire   Sat, 24 Apr 2021 13:23:44 +
+
 fricas (1.3.6-5) unstable; urgency=medium
 
   * clean build-depends
diff -Nru fricas-1.3.6/debian/control fricas-1.3.6/debian/control
--- fricas-1.3.6/debian/control 2021-02-13 01:48:30.0 +
+++ fricas-1.3.6/debian/control 2021-04-24 13:22:47.0 +
@@ -5,7 +5,7 @@
 Rules-Requires-Root: no
 Homepage: http://fricas.sourceforge.net/
 Build-Depends-Indep: dh-elpa, sharutils
-Build-Depends: debhelper-compat ( = 13 ), gcl ( >= 2.6.12-99 ), libgmp3-dev, 
libreadline-dev, libx11-dev
+Build-Depends: debhelper-compat ( = 13 ), gcl ( >= 2.6.12-99 ), libgmp3-dev, 
libreadline-dev, libxpm-dev
 Standards-Version: 4.5.1
 
 Package: fricas
-

[ Other info ]
(Anything else the release team should know.)

unblock fricas/1.3.6-6

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-0.bpo.3-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_CPU_OUT_OF_SPEC
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect

Bug#987549: unblock: maxima/5.44.0-3

[Camm Maguire]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package maxima

[ Reason ]
RC bug 969410 just filed and fixed, enabling package install when
xemacs21 is installed.

[ Impact ]
Package will be uninstallable if xemacs21 is installed.

[ Tests ]
None.

[ Risks ]
None.  Change reverts to working implementation in 5.43 until xemacs21
supports the newer cl-lib.

[ Checklist ]
  [X] all changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in testing

-
source debdiff maxima_5.44.0-2.dsc to maxima_5.44.0-3.dsc
-
diff -Nru maxima-5.44.0/debian/changelog maxima-5.44.0/debian/changelog
--- maxima-5.44.0/debian/changelog  2020-08-29 18:16:49.0 +
+++ maxima-5.44.0/debian/changelog  2021-04-24 13:41:46.0 +
@@ -1,3 +1,11 @@
+maxima (5.44.0-3) unstable; urgency=high
+
+  * patch imaxima.el for xemacs21 compatibility
+  * Bug fix: "maxima-emacs 5.44 does not work with XEmacs", thanks to
+Agustin Martin (Closes: #969410).
+
+ -- Camm Maguire   Sat, 24 Apr 2021 13:41:46 +
+
 maxima (5.44.0-2) unstable; urgency=medium
 
   * emacs24 -> emacs-gtk in control dependencies
diff -Nru maxima-5.44.0/debian/patches/series 
maxima-5.44.0/debian/patches/series
--- maxima-5.44.0/debian/patches/series 2020-08-26 13:59:20.0 +
+++ maxima-5.44.0/debian/patches/series 2021-04-24 13:40:49.0 +
@@ -23,3 +23,4 @@
 sys-proclaim-fix
 # imaxima-iso-no-html-build
 pass_rtest8_101_104_on_68k2
+xemacs21-compatibility
diff -Nru maxima-5.44.0/debian/patches/xemacs21-compatibility 
maxima-5.44.0/debian/patches/xemacs21-compatibility
--- maxima-5.44.0/debian/patches/xemacs21-compatibility 1970-01-01 
00:00:00.0 +
+++ maxima-5.44.0/debian/patches/xemacs21-compatibility 2021-04-24 
13:40:49.0 +
@@ -0,0 +1,48 @@
+Description: 
+ TODO: Put a short summary on the line above and replace this paragraph
+ with a longer explanation of this change. Complete the meta-information
+ with other relevant fields (see below for details). To make it easier, the
+ information below has been extracted from the changelog. Adjust it or drop
+ it.
+ .
+ maxima (5.44.0-2) unstable; urgency=medium
+ .
+   * emacs24 -> emacs-gtk in control dependencies
+   * compat 13
+   * update lintian-overrides
+   * iconv -t UTF-8 on national encoding files
+Author: Camm Maguire 
+
+---
+The information above should follow the Patch Tagging Guidelines, please
+checkout http://dep.debian.net/deps/dep3/ to learn about the format. Here
+are templates for supplementary fields that you might want to add:
+
+Origin: , 
+Bug: 
+Bug-Debian: https://bugs.debian.org/
+Bug-Ubuntu: https://launchpad.net/bugs/
+Forwarded: 
+Reviewed-By: 
+Last-Update: 2021-04-24
+
+--- maxima-5.44.0.orig/interfaces/emacs/imaxima/imaxima.el
 maxima-5.44.0/interfaces/emacs/imaxima/imaxima.el
+@@ -80,7 +80,7 @@
+ (require 'advice)
+ 
+ (require 'comint)
+-(require 'cl-lib)
++(require 'cl);FIXME cl-lib, xemacs21 compatibility
+ 
+ ;; XEmacs stuff
+ 
+@@ -174,7 +174,7 @@ Unless optional argument INPLACE is non-
+   :group 'imaxima
+   :type (cons 'choice
+ (mapcar (lambda (type) (list 'const type))
+-(cl-remove-if-not 'imaxima-image-type-available-p
++(remove-if-not 'imaxima-image-type-available-p; FIXME 
cl-remove-if-not, xemacs21 compatibility
+imaxima-image-types
+ 
+ (defcustom imaxima-pt-size 11
-

[ Other info ]


unblock maxima/5.44.0-3

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-0.bpo.3-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_CPU_OUT_OF_SPEC
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect

Bug#987548: buster-pu: package node-redis/2.8.0-1+deb10u1

[Yadd]

Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu

[ Reason ]
rode-redis is vulnerable ro ReDoS (CVE-2021-29469

[ Impact ]
Medium risk

[ Tests ]
No

[ Risks ]
No risk, node-redis has no reverse dependencies and patch is trivial

[ Checklist ]
  [X] *all* changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in (old)stable
  [X] the issue is verified as fixed in unstable

[ Changes ]
Regex update

Cheers,
Yadd
diff --git a/debian/changelog b/debian/changelog
index e865de4..5994010 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+node-redis (2.8.0-1+deb10u1) unstable; urgency=medium
+
+  * Fix potential ReDoS (Closes: CVE-2021-29469)
+
+ -- Yadd   Sun, 25 Apr 2021 14:09:33 +0200
+
 node-redis (2.8.0-1) unstable; urgency=medium
 
   * Add components in gbp.conf and debian/watch (used for test only):
diff --git a/debian/patches/CVE-2021-29469.patch 
b/debian/patches/CVE-2021-29469.patch
new file mode 100644
index 000..d074802
--- /dev/null
+++ b/debian/patches/CVE-2021-29469.patch
@@ -0,0 +1,19 @@
+Description: fix ReDoS
+Author: Leibale Eidelman 
+Origin: upstream, https://github.com/NodeRedis/node-redis/commit/2d11b6dc
+Bug: https://github.com/NodeRedis/node-redis/issues/1569
+Forwarded: not-needed
+Reviewed-By: Yadd 
+Last-Update: 2021-04-25
+
+--- a/lib/utils.js
 b/lib/utils.js
+@@ -127,7 +127,7 @@
+ reply_to_object: replyToObject,
+ print: print,
+ err_code: /^([A-Z]+)\s+(.+)$/,
+-monitor_regex: /^[0-9]{10,11}\.[0-9]+ \[[0-9]+ .+\]( ".+?")+$/,
++monitor_regex: /^[0-9]{10,11}\.[0-9]+ \[[0-9]+ .+\].*"$/,
+ clone: convenienceClone,
+ callback_or_emit: callbackOrEmit,
+ reply_in_order: replyInOrder
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 000..1d28461
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1 @@
+CVE-2021-29469.patch

Bug#987546: unblock: node-redis/3.0.2+~cs5.18.1-3

[Yadd]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package node-redis

[ Reason ]
node-redis is vulnearable to a Regex Denial of Service

[ Impact ]
Medium security risk

[ Tests ]
No change in tests. Both build & autopkgtest passed

[ Risks ]
Change is trivial: just a regex fix. node-redis has no reverse
dependencies for now, so no risk for other packages

[ Checklist ]
  [X] all changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in testing

[ Other info ]
Patch also includes:
 * uploaders list update: Leo is MIA
 * GitHub regex fix in debian/watch

unblock node-redis/3.0.2+~cs5.18.1-3
diff --git a/debian/changelog b/debian/changelog
index 4f546a6..f25dee1 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,14 @@
+node-redis (3.0.2+~cs5.18.1-3) UNRELEASED; urgency=medium
+
+  * Fix GitHub tags regex
+  * Uploaders: remove Leo Iannacone, thanks for your work!
+  * Fix potential ReDoS (Closes: CVE-2021-29469)
+
+ -- Yadd   Sun, 25 Apr 2021 13:54:43 +0200
+
 node-redis (3.0.2+~cs5.18.1-2) unstable; urgency=medium
 
+  [ Xavier Guimard ]
   * Add node-lodash-packages in test dependencies
 
  -- Xavier Guimard   Mon, 21 Dec 2020 06:13:22 +0100
diff --git a/debian/control b/debian/control
index 8fecf53..de2c694 100644
--- a/debian/control
+++ b/debian/control
@@ -1,6 +1,6 @@
 Source: node-redis
 Maintainer: Debian Javascript Maintainers 

-Uploaders: Leo Iannacone , Xavier Guimard 
+Uploaders: Yadd 
 Section: javascript
 Priority: optional
 Build-Depends: debhelper-compat (= 13)
diff --git a/debian/copyright b/debian/copyright
index 24794c5..b0ec804 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -21,7 +21,7 @@ License: Expat
 
 Files: debian/*
 Copyright: 2014 Leo Iannacone 
- 2019-2020 Xavier Guimard 
+ 2019-2020 Yadd 
 License: GPL-3
 
 Files: debian/tests/test_modules/intercept-stdout/*
diff --git a/debian/patches/CVE-2021-29469.patch 
b/debian/patches/CVE-2021-29469.patch
new file mode 100644
index 000..d074802
--- /dev/null
+++ b/debian/patches/CVE-2021-29469.patch
@@ -0,0 +1,19 @@
+Description: fix ReDoS
+Author: Leibale Eidelman 
+Origin: upstream, https://github.com/NodeRedis/node-redis/commit/2d11b6dc
+Bug: https://github.com/NodeRedis/node-redis/issues/1569
+Forwarded: not-needed
+Reviewed-By: Yadd 
+Last-Update: 2021-04-25
+
+--- a/lib/utils.js
 b/lib/utils.js
+@@ -127,7 +127,7 @@
+ reply_to_object: replyToObject,
+ print: print,
+ err_code: /^([A-Z]+)\s+(.+)$/,
+-monitor_regex: /^[0-9]{10,11}\.[0-9]+ \[[0-9]+ .+\]( ".+?")+$/,
++monitor_regex: /^[0-9]{10,11}\.[0-9]+ \[[0-9]+ .+\].*"$/,
+ clone: convenienceClone,
+ callback_or_emit: callbackOrEmit,
+ reply_in_order: replyInOrder
diff --git a/debian/patches/series b/debian/patches/series
index 73eead0..250556a 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,4 @@
 avoid-failing-test.diff
 disable-tests-failing-with-redis-5.6.diff
 remove-cross-spawn.patch
+CVE-2021-29469.patch
diff --git a/debian/watch b/debian/watch
index ebfa712..34f812e 100644
--- a/debian/watch
+++ b/debian/watch
@@ -1,7 +1,7 @@
 version=4
 
 opts=filenamemangle=s/.*\/v?([\d\.-]+)\.tar\.gz/node-redis-$1.tar.gz/ \
- https://github.com/NodeRedis/node_redis/tags .*/archive/v?\.?([\d\.]+).tar.gz 
group
+ https://github.com/NodeRedis/node_redis/tags 
.*/archive/.*/v?\.?([\d\.]+).tar.gz group
 
 opts="searchmode=plain,pgpmode=none,ctype=nodejs,component=redis-commands" \
  https://registry.npmjs.org/redis-commands 
https://registry.npmjs.org/redis-commands/-/redis-commands-(\d[\d\.]*)@ARCHIVE_EXT@
 checksum

Re: Tentative summary of the AMD/ATI/NVidia issue

[Rebecca N. Palmer]

Cyril Brulebois wrote:

getting my hands on relevant hardware is in progress


Note that https://lists.debian.org/debian-boot/2021/04/msg00247.html 
implies the affected hardware is _not_ simply "all AMD/ATI or NVidia 
hardware".  Do we know of hardware that is reproducibly affected?


YunQiang Su wrote:

The problem is that:
the older version of GNOME, or Mate, can work with vesa driver,
while current GNOME cannot.


Do non-GNOME-based desktops work (either KDE, or one of the 
lightweight/for-old-hardware ones e.g. icewm), or is the problem further 
down the stack?


Though even if these do work, the performance penalty of using vesa may 
well be too large for this to be a good solution.

Bug#987543: unblock: python-jenkinsapi/0.3.11-5

[Chris Hofstaedtler]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package python-jenkinsapi

[ Reason ]
Version in testing FTBFS, bug #986511

[ Impact ]
I guess the package goes away.

[ Tests ]
Build test only, really. Given the build failed because of a linter tool
(pylint), and my python experience, and the patch coming from Ubuntu, it
looks safe to me.

[ Risks ]
Leaf package really. Not sure -why- we have it, but alas.

[ Checklist ]
  [x] all changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in testing

[ Other info ]
Maintainer has sadly recently left Debian and orphaned the package.

Best,
Chris


unblock python-jenkinsapi/0.3.11-5


debdiff:

diff -Nru python-jenkinsapi-0.3.11/debian/changelog 
python-jenkinsapi-0.3.11/debian/changelog
--- python-jenkinsapi-0.3.11/debian/changelog   2020-10-28 03:19:59.0 
+
+++ python-jenkinsapi-0.3.11/debian/changelog   2021-04-24 23:29:27.0 
+
@@ -1,3 +1,12 @@
+python-jenkinsapi (0.3.11-5) unstable; urgency=medium
+
+  * QA upload.
+  * Orphan package, see #985165.
+  * Apply patch from Ubuntu to fix FTBFS. (Closes: #986511)
+Thanks: Logan Rosen 
+
+ -- Chris Hofstaedtler   Sat, 24 Apr 2021 23:29:27 +
+
 python-jenkinsapi (0.3.11-4) unstable; urgency=medium
 
   * Fix FTBS due to pylint/python3 changes (Closes: #971179)
diff -Nru python-jenkinsapi-0.3.11/debian/control 
python-jenkinsapi-0.3.11/debian/control
--- python-jenkinsapi-0.3.11/debian/control 2020-10-28 03:19:59.0 
+
+++ python-jenkinsapi-0.3.11/debian/control 2021-04-24 23:29:27.0 
+
@@ -1,13 +1,12 @@
 Source: python-jenkinsapi
 Section: python
 Priority: optional
-Maintainer: Al Stone 
+Maintainer: Debian QA Group 
 Build-Depends: debhelper (>= 12), python3-all-dev, python3-lxml, 
  python3-setuptools, python3-pytest, pylint3, dh-python, python3-pbr,
  python3-pylint-common
 Standards-Version: 4.5.0
 Homepage: http://pypi.python.org/pypi/jenkinsapi
-Vcs-Git: https://github.com/ahs3/python-jenkinsapi
 
 Package: python3-jenkinsapi
 Architecture: all
diff -Nru python-jenkinsapi-0.3.11/debian/patches/pylint-fixes.patch 
python-jenkinsapi-0.3.11/debian/patches/pylint-fixes.patch
--- python-jenkinsapi-0.3.11/debian/patches/pylint-fixes.patch  2020-10-28 
03:19:59.0 +
+++ python-jenkinsapi-0.3.11/debian/patches/pylint-fixes.patch  2021-04-24 
23:29:27.0 +
@@ -1,6 +1,5 @@
-diff -Naur a/jenkinsapi/credential.py b/jenkinsapi/credential.py
 a/jenkinsapi/credential.py 2020-02-16 16:46:46.767307926 -0700
-+++ b/jenkinsapi/credential.py 2020-10-27 21:03:49.025512695 -0600
+--- a/jenkinsapi/credential.py
 b/jenkinsapi/credential.py
 @@ -83,7 +83,7 @@
  
  def __init__(self, cred_dict):
@@ -70,9 +69,8 @@
  }
 -return super(AmazonWebServicesCredentials, 
self)._get_attributes_xml(data)
 +return super()._get_attributes_xml(data)
-diff -Naur a/jenkinsapi/credentials.py b/jenkinsapi/credentials.py
 a/jenkinsapi/credentials.py2020-02-16 16:46:46.767307926 -0700
-+++ b/jenkinsapi/credentials.py2020-10-27 21:04:33.021889279 -0600
+--- a/jenkinsapi/credentials.py
 b/jenkinsapi/credentials.py
 @@ -100,8 +100,8 @@
  except JenkinsAPIException as jae:
  raise JenkinsAPIException('Latest version of Credentials '
@@ -104,9 +102,8 @@
  self.poll()
  self.credentials = self._data['credentials']
  if description in self:
-diff -Naur a/jenkinsapi/fingerprint.py b/jenkinsapi/fingerprint.py
 a/jenkinsapi/fingerprint.py2020-02-16 16:46:46.767307926 -0700
-+++ b/jenkinsapi/fingerprint.py2020-10-27 20:59:57.595597808 -0600
+--- a/jenkinsapi/fingerprint.py
 b/jenkinsapi/fingerprint.py
 @@ -96,14 +96,14 @@
  def validate(self):
  try:
@@ -126,9 +123,8 @@
  return True
  
  def get_info(self):
-diff -Naur a/jenkinsapi/jenkinsbase.py b/jenkinsapi/jenkinsbase.py
 a/jenkinsapi/jenkinsbase.py2020-02-16 16:46:46.767307926 -0700
-+++ b/jenkinsapi/jenkinsbase.py2020-10-27 20:58:54.431099252 -0600
+--- a/jenkinsapi/jenkinsbase.py
 b/jenkinsapi/jenkinsbase.py
 @@ -84,9 +84,9 @@
  response.raise_for_status()
  try:
@@ -141,9 +137,8 @@
  
  def pprint(self):
  """
-diff -Naur a/jenkinsapi/job.py b/jenkinsapi/job.py
 a/jenkinsapi/job.py2020-02-16 16:46:46.775307980 -0700
-+++ b/jenkinsapi/job.py2020-10-27 20:58:21.502844386 -0600
+--- a/jenkinsapi/job.py
 b/jenkinsapi/job.py
 @@ -89,7 +89,7 @@
  return branches
  
@@ -196,9 +191,8 @@
  
  def __delitem__(self, build_number):
  self.delete_build(build_number)
-diff -Naur a/jenkinsapi/node.py b/jenkinsapi/node.py
 a/jenkinsapi/node.py   2020-02-16 16:46:46.775307980 -0700
-+++ b/jenkinsapi/node.py   2020-10-27 

Bug#987542: unblock: gpsd/3.22-3

[Bernd Zeimetz]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package gpsd

Adding missing Breaks/Replaces and fixing a bit of mess in the symbols
files.


gpsd (3.22-3) unstable; urgency=medium

  * [c6838e37] Remove duplicate lines from symbol files.
Thanks to Matthias Klose (Closes: #985930)
  * [5c240253] Mark String::QString(QString const&)@Base as optional.
Required for backporting.
  * [2dfbaa07] Updating debian/control from debian/control.in
  * [c582b2aa] gpsd-tools: add missing Breaks+Replaces
gpsd-tools needs Breaks/Replaces for gpsd-clients (<< 3.20-10)
Thanks to Andreas Beckmann (Closes: #987208)

 -- Bernd Zeimetz   Sun, 25 Apr 2021 12:17:57 +0200


Full diff is attached.

Thanks,

Bernd



unblock gpsd/3.22-3


-- 
 Bernd ZeimetzDebian GNU/Linux Developer
 http://bzed.dehttp://www.debian.org
 GPG Fingerprint: ECA1 E3F2 8E11 2432 D485  DD95 EB36 171A 6FF9 435F
diff --git a/debian/changelog b/debian/changelog
index dfef5f900..f0b5369f7 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,16 @@
+gpsd (3.22-3) unstable; urgency=medium
+
+  * [c6838e37] Remove duplicate lines from symbol files.
+Thanks to Matthias Klose (Closes: #985930)
+  * [5c240253] Mark String::QString(QString const&)@Base as optional.
+Required for backporting.
+  * [2dfbaa07] Updating debian/control from debian/control.in
+  * [c582b2aa] gpsd-tools: add missing Breaks+Replaces
+gpsd-tools needs Breaks/Replaces for gpsd-clients (<< 3.20-10)
+Thanks to Andreas Beckmann (Closes: #987208)
+
+ -- Bernd Zeimetz   Sun, 25 Apr 2021 12:17:57 +0200
+
 gpsd (3.22-2) unstable; urgency=medium
 
   [ Bernd Zeimetz ]
diff --git a/debian/control b/debian/control
index 30665b4e2..a38b8c82f 100644
--- a/debian/control
+++ b/debian/control
@@ -63,8 +63,8 @@ Architecture: any
 Depends: ${shlibs:Depends}, ${misc:Depends},
  libgps28 (= ${binary:Version}),
 Suggests: gpsd
-Breaks: python-gps, gpsd (<< 3.20-9)
-Replaces: python-gps
+Breaks: python-gps, gpsd (<< 3.20-9), gpsd-clients (<< 3.20-10)
+Replaces: python-gps, gpsd-clients (<< 3.20-10)
 Description: Global Positioning System - tools
  The gpsd service daemon can monitor one or more GPS devices connected to
  a host computer, making all data on the location and movements of the
diff --git a/debian/control.in b/debian/control.in
index cb2df897d..7ff2aa444 100644
--- a/debian/control.in
+++ b/debian/control.in
@@ -63,8 +63,8 @@ Architecture: any
 Depends: ${shlibs:Depends}, ${misc:Depends},
  libgpsLIBGPSSONAME (= ${binary:Version}),
 Suggests: gpsd
-Breaks: python-gps, gpsd (<< 3.20-9)
-Replaces: python-gps
+Breaks: python-gps, gpsd (<< 3.20-9), gpsd-clients (<< 3.20-10)
+Replaces: python-gps, gpsd-clients (<< 3.20-10)
 Description: Global Positioning System - tools
  The gpsd service daemon can monitor one or more GPS devices connected to
  a host computer, making all data on the location and movements of the
diff --git a/debian/libgpsLIBGPSSONAME.symbols 
b/debian/libgpsLIBGPSSONAME.symbols
index 03ae8f936..3f66558b5 100644
--- a/debian/libgpsLIBGPSSONAME.symbols
+++ b/debian/libgpsLIBGPSSONAME.symbols
@@ -9,8 +9,6 @@ libgps.so.LIBGPSSONAME libgpsLIBGPSSONAME #MINVER#
  (c++)"gpsmm::stream(int)@Base" 3.3
  (c++)"gpsmm::waiting(int)@Base" 3.3
  (c++)"gpsmm::~gpsmm()@Base" 3.3
- (c++)"gpsmm::~gpsmm()@Base" 3.3
- (c++)"gpsmm::~gpsmm()@Base" 3.3
  (c++)"typeinfo for gpsmm@Base" 3.3
  (c++)"typeinfo name for gpsmm@Base" 3.3
  (c++)"vtable for gpsmm@Base" 3.3
diff --git a/debian/libqgpsmmLIBGPSSONAME.symbols 
b/debian/libqgpsmmLIBGPSSONAME.symbols
index 84edae24e..d3d51ab01 100644
--- a/debian/libqgpsmmLIBGPSSONAME.symbols
+++ b/debian/libqgpsmmLIBGPSSONAME.symbols
@@ -36,18 +36,12 @@ libQgpsmm.so.LIBGPSSONAME libqgpsmmLIBGPSSONAME #MINVER#
  (c++)"gpsmm::waiting(int)@Base" 3.3
  (c++)"gpsmm::clear_fix()@Base" 3.3
  (c++)"gpsmm::~gpsmm()@Base" 3.3
- (c++)"gpsmm::~gpsmm()@Base" 3.3
- (c++)"gpsmm::~gpsmm()@Base" 3.3
-#MISSING: 3.18# (c++|optional)"QDebug::~QDebug()@Base" 3.3
 #MISSING: 3.18# (c++|optional)"QDebug::~QDebug()@Base" 3.3
  (c++|optional)"QString::~QString()@Base" 3.3
- (c++|optional)"QString::~QString()@Base" 3.3
- (c++|optional)"QList::~QList()@Base" 3.5
  (c++|optional)"QList::~QList()@Base" 3.5
  (c++)"typeinfo for gpsmm@Base" 3.3
  (c++)"typeinfo name for gpsmm@Base" 3.3
  (c++)"vtable for gpsmm@Base" 3.3
-#MISSING: 3.18# (c++|optional)"QByteArray::~QByteArray()@Base" 3.3
 #MISSING: 3.18# (c++|optional)"QByteArray::~QByteArray()@Base" 3.3
  (c++)"shiftleft(unsigned char*, int, unsigned short)@Base" 3.12
 #MISSING: 3.17# (c++)"shm_get(int, bool, bool)@Base" 3.15
@@ -158,6 +152,5 @@ libQgpsmm.so.LIBGPSSONAME libqgpsmmLIBGPSSONAME #MINVER#
 #MISSING: 3.20# unix_to_iso8601@Base 3.3
  datum_code_string@Base 3.19
 #MISSING: 3.21.1~dev# nanowait(int, timespec*)@Base 3.21.1
- (c++)"QString::QString(QString const&)@Base" 

Processed: Re: Bug#987493: unblock: gutenprint/5.3.3-5

[Debian Bug Tracking System]

Processing control commands:

> tags -1 -moreinfo
Bug #987493 [release.debian.org] [pre-approval] unblock: gutenprint/5.3.3-5
Removed tag(s) moreinfo.

-- 
987493: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987493
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#987493: unblock: gutenprint/5.3.3-5

[Didier 'OdyX' Raboud]

Control: tags -1 -moreinfo

Le dimanche, 25 avril 2021, 11.37:23 h CEST Graham Inggs a écrit :
> On Sat, 24 Apr 2021 at 17:48, Didier 'OdyX' Raboud  wrote:
> > This is a pre-approval request for package package gutenprint.
> 
> Please go ahead and upload, and remove the moreinfo tag once the new
> version is available in unstable.

Hello Graham,

Thanks for your prompt ack and your work as release team member!

Uploaded, and built already for most archs.

-- 
OdyX

signature.asc
Description: This is a digitally signed message part.

Processed: unblock: ircii/20210314-1

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> tags 987488 + moreinfo
Bug #987488 [release.debian.org] unblock: ircii/20210314-1
Added tag(s) moreinfo.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
987488: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987488
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#987538: buster-pu: package node-end-of-stream/1.4.1-1+deb10u1

[Yadd]

Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: pkg-javascript-de...@lists.alioth.debian.org

[ Reason ]
node-end-of-stream test is RC-buggy. This little patch workaround this
bug which seems not related to node-end-of-stream itself

[ Impact ]
No impact, just fix test

[ Tests ]
No change except one ignored failure

[ Risks ]
No risks

[ Checklist ]
  [X] *all* changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in (old)stable
  [X] the issue is verified as fixed in unstable

[ Changes ]
Test wanted 8 successful checks. The patch requires only 7, so allows
one failure (function not launched probably due to a nodejs change)

Cheers,
Yadd
diff --git a/debian/changelog b/debian/changelog
index e08c7c7..4c026c2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+node-end-of-stream (1.4.1-1+deb10u1) buster; urgency=medium
+
+  * Team upload
+  * Workaround test bug (Closes: #987530)
+
+ -- Yadd   Sun, 25 Apr 2021 11:56:20 +0200
+
 node-end-of-stream (1.4.1-1) unstable; urgency=medium
 
   * New upstream version
diff --git a/debian/patches/01-fix-test.patch b/debian/patches/01-fix-test.patch
new file mode 100644
index 000..38a917e
--- /dev/null
+++ b/debian/patches/01-fix-test.patch
@@ -0,0 +1,22 @@
+Description: decrease min successful test to allow one error
+ Test wanted 8 (all) checks to be successful. It seems that nodejs changes
+ breaks last test (lines 67 to 81): eos(socket,...) isn't launched.
+ .
+ This bug seems not linked to end-of-stream itself but related to nodejs "net"
+ use in this test. So this patch is just a workaround, not a real fix.
+Author: Yadd 
+Bug-Debian: https://bugs.debian.org/987530
+Forwarded: not-needed
+Last-Update: 2021-04-25
+
+--- a/test.js
 b/test.js
+@@ -1,7 +1,7 @@
+ var assert = require('assert');
+ var eos = require('./index');
+ 
+-var expected = 8;
++var expected = 7;
+ var fs = require('fs');
+ var cp = require('child_process');
+ var net = require('net');
diff --git a/debian/patches/series b/debian/patches/series
index 6a9cea4..a9118e6 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1 +1,2 @@
 00-fix_test.diff
+01-fix-test.patch

Processed: Re: Bug#987493: unblock: gutenprint/5.3.3-5

[Debian Bug Tracking System]

Processing control commands:

> retitle -1 [pre-approval] unblock: gutenprint/5.3.3-5
Bug #987493 [release.debian.org] unblock: gutenprint/5.3.3-5
Changed Bug title to '[pre-approval] unblock: gutenprint/5.3.3-5' from 
'unblock: gutenprint/5.3.3-5'.
> tags -1 + moreinfo + confirmed
Bug #987493 [release.debian.org] [pre-approval] unblock: gutenprint/5.3.3-5
Added tag(s) moreinfo.
Bug #987493 [release.debian.org] [pre-approval] unblock: gutenprint/5.3.3-5
Added tag(s) confirmed.

-- 
987493: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987493
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#987493: unblock: gutenprint/5.3.3-5

[Graham Inggs]

Control: retitle -1 [pre-approval] unblock: gutenprint/5.3.3-5
Control: tags -1 + moreinfo + confirmed

Hi Didier

On Sat, 24 Apr 2021 at 17:48, Didier 'OdyX' Raboud  wrote:
> This is a pre-approval request for package package gutenprint.

Please go ahead and upload, and remove the moreinfo tag once the new
version is available in unstable.

Regards
Graham

Re: Tentative summary of the AMD/ATI/NVidia issue (was: Finding a tentative bullseye release date)

[Cyril Brulebois]

[ cc+=-x@ ]

Hi Lucas,

Thanks for your summary, I'm not sure about every single detail, but it
seems to be a good basis for discussion. I might point to it from our
errata page (I didn't have a specific bug report when I wrote the most
recent entries):
  https://www.debian.org/devel/debian-installer/errata

Lucas Nussbaum  (2021-04-24):
> Disclaimer: I read the "[AMD/ATI graphics] Missing firmware not declared
> / kernel modules not included in initrd" thread. While my understanding
> of the issue is not complete, I'm trying to summarize what I undertood
> so far in the hope that others can jump in and fill in the blanks or
> correct me.
> 
> 
> There are graphic cards whose in-kernel drivers require non-free
> firmwares. Typically AMD/ATI cards that require firmware-amd-graphics[1]
> to work with the radeon, amdgpu and r128 drivers; or NVIDIA cards that
> require firmware-misc-nonfree to work with the nouveau driver.
> 
> [1] https://packages.debian.org/unstable/firmware-amd-graphics
> 
> 
> With Debian 10, the behaviour was that the installation succeeded
> without installing firmware-* packages, and then, and the first boot, X
> would start in a "degraded" mode (using, for example, the vesa driver).
> The user would generally then install the firmware package (or, in the
> case of NVidia, switch to the proprietary drivers).
> 
> With Debian 11, the installation also succeeds, but then at first boot,
> X fails to work correctly. What happens here is unclear: reports vary
> between "black screen" (but does the system works if the user switches to
> console mode?), "garbled screen", "system crash" (but maybe the user did
> not notice that the system works in console mode).

What I briefly alluded to on IRC (#debian-boot) was something that would
be an A)+B) approach. C) doesn't seem reasonable to me.

> It looks like the three open paths for resolution are:
> 
> A) understand and restore the behaviour from Debian 10, that is, get X
> to work in a degraded mode after installation. How it worked with Debian
> 10 (and why it doesn't with Debian 11) is unknown.

Without checking with X people beforehand, what I imagined we could do
when running an installer that doesn't have non-free enabled could be
adding some X conf snippet to force a generic driver (a while ago, that
would have been fbdev/vesa, not sure about the current state, depending
on whether modesetting kicked in, etc.), to ensure one isn't left with a
black screen. This might involve setting kernel parameters instead or in
addition to that…

It could be accompanied by an information note in the installer (to make
sure the user knows about this degraded mode, and about ways to improve
the situation post-installation) and/or in the installation guide and/or
in the wiki.

https://xorg-team.pages.debian.net/xorg/ doesn't seem like it has had
many updates lately, but it might not be the worst place to have a “how
to undo the snippet things and get the real deal once firmwares are
installed”, or maybe “how to deal with firmwares” in general… that d-i
and the installation guide could point to.

(x.debian.net still exists and redirects there, so that's not a
complicated URL to remember/type if it gets displayed in a note.)

That being said, if an information note gets added in d-i, its content
needs to be checked with the X team, reviewed by the team whose name
has escaped me, and then translated into as many languages as possible.
It could be possible to cheat the translation status to alleviate this
requirement, and contemplate updating the relevant package in 11.1, but
I'm not sure we've ever done that.

On the other hand, docs on x.debian.net aren't translated, so maybe the
installation guide would be a better place in the end…

> B) In the installer, detect that firmware-amd-graphics or
> firmware-misc-nonfree should be installed, and either install it (?),
> or redirect the user to the unofficial installer that includes them.

That could be achieved for an installer that has non-free enabled,
provided the proposal by Ben gets implemented, then consumed on the d-i
side.

> C) Do nothing and document this in the release notes

As said above, I strongly recommend against this.

> The main blocking factor for progress seems to be that not enough
> people have both hardware that is not supported (laptops/desktops with
> AMD or NVidia graphic cards), and the knowledge and time to
> investigate this.

For the avoidance of doubt: I'm fine with working on these topics (and
getting my hands on relevant hardware is in progress), along with other
issues that seem to be potential blockers for the release. I just don't
expect everyone to agree on a (possibly dual) solution immediately, and
the relevant contributions (code, doc, translations) to be available in
the very next few days. Hence my reaction to a very close “tentative
release date” (fewer than 4 weeks).

For completeness, we also have this now:
  https://bugs.debian.org/987441


Cheers,
-- 
Cyril 

Re: Tentative summary of the AMD/ATI/NVidia issue (was: Finding a tentative bullseye release date)

[Holger Wansing]

Hi,

Lucas Nussbaum  wrote (Sat, 24 Apr 2021 11:30:03 +0200):
> With Debian 10, the behaviour was that the installation succeeded
> without installing firmware-* packages, and then, and the first boot, X
> would start in a "degraded" mode (using, for example, the vesa driver).
> The user would generally then install the firmware package (or, in the
> case of NVidia, switch to the proprietary drivers).
> 
> With Debian 11, the installation also succeeds, but then at first boot,
> X fails to work correctly. What happens here is unclear: reports vary
> between "black screen" (but does the system works if the user switches to
> console mode?), "garbled screen", "system crash" (but maybe the user did
> not notice that the system works in console mode).


Please note that YunQiang Su  has stated in another mail:
For us (mips port), it is a long history of problem.
The problem is that:
the older version of GNOME, or Mate, can work with vesa driver,
while current GNOME cannot.

Without amd/ati non-free firmware, radeon/amdgpu cannot work at all.
So on mips platform with AMDGPU (aka, Loongson-3),
it has nothing on display at all, even console.
The reason is that there are no vesa driver on MIPS.



-- 
Holger Wansing 
PGP-Fingerprint: 496A C6E8 1442 4B34 8508  3529 59F1 87CA 156E B076

Bug#986908: marked as done (unblock: snort 2.9.15.1-5)

[Debian Bug Tracking System]

Your message dated Sun, 25 Apr 2021 10:29:36 +0200
with message-id 

and subject line Re: Bug#986908: unblock: snort 2.9.15.1-5
has caused the Debian Bug report #986908,
regarding unblock: snort 2.9.15.1-5
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
986908: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986908
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Hello,

Could it be possible to unblock snort 2.9.15.1-5? 

[Reason]

This version fixes a RC bug (#984614) that generated a dpkg prompt when users
where upgrading from older versions. It also fixes three additional bugs:

- a bug that prevents Snort log files from being rotated properly (discovered
  during testing, not reported in BTS)
- a bug fixing issues when building the package (LP: #1906572)
- a bug fixing parsing of network packets (633066)

[ Impact ] 

There is minimal impact by the above changes.

[ Tests ]

Package upgrades/downgrades have been tested in several chroots and the 
bugs are confirmed as fixed.

[ Risks ]

[ Checklist ]
  [x] all changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in testing


[ Other info ]

Hopefully this request can be accepted! 

unblock snort/2.9.15.1-5


Best regards

Javier

$ debdiff snort_2.9.15.1-4_i386.deb snort_2.9.15.1-5_i386.deb
File lists identical (after any substitutions)

Control files: lines which differ (wdiff format)

Depends: snort-common-libraries (>= [-2.9.15.1-4),-] {+2.9.15.1-5),+} 
snort-rules-default (>= [-2.9.15.1-4),-] {+2.9.15.1-5),+} snort-common (>= 
[-2.9.15.1-4),-] {+2.9.15.1-5),+} debconf (>= 0.5) | debconf-2.0, rsyslog | 
system-log-daemon, logrotate, net-tools, lsb-base, libc6 (>= 2.30), libdaq2 (>= 
2.0.7), libdumbnet1 (>= 1.8), liblzma5 (>= 5.1.1alpha+20120614), 
libnetfilter-queue1, libnghttp2-14 (>= 1.5.0), libpcap0.8 (>= 1.0.0), libpcre3, 
libssl1.1 (>= 1.1.0), zlib1g (>= 1:1.1.4)
Version: [-2.9.15.1-4-] {+2.9.15.1-5+}

$ debdiff snort-common_2.9.15.1-4_all.deb snort-common_2.9.15.1-5_all.deb 
File lists identical (after any substitutions)

Control files: lines which differ (wdiff format)

Conflicts: snort (<< [-2.9.15.1-4)-] {+2.9.15.1-5)+}
Installed-Size: [-519-] {+522+}
Pre-Depends: adduser (>= [-3.11)-] {+3.11), dpkg (>= 1.17.14)+}
Version: [-2.9.15.1-4-] {+2.9.15.1-5+}

$ debdiff snort-rules-default_2.9.15.1-4_all.deb 
snort-rules-default_2.9.15.1-5_all.deb 
File lists identical (after any substitutions)

Control files: lines which differ (wdiff format)

Version: [-2.9.15.1-4-] {+2.9.15.1-5+}

$ debdiff snort-doc_2.9.15.1-4_all.deb snort-doc_2.9.15.1-5_all.deb
File lists identical (after any substitutions)

Control files: lines which differ (wdiff format)

Version: [-2.9.15.1-4-] {+2.9.15.1-5+}

$ debdiff snort-common-libraries_2.9.15.1-4_i386.deb  
snort-common-libraries_2.9.15.1-5_i386.deb 
[The following lists of changes regard files as different if they have
different names, permissions or owners.]

Files in second .deb but not in first
-
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/39/3558c32ca8d48f3de5673db0496869cb112938.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/40/e94d0baaefe540c618da94eb888f032c5a1f79.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/c6/49b10979e88a857a4e42b1f78b5c9352a094a3.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/c6/61fc7794c21ed0211a17cf762d1e62f9ff618f.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/cf/523d1c167cb54f099cce54ecd8ddc37ca53e09.debug

Files in first .deb but not in second
-
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/34/c8e8ca361a44fdaa05ca46235585f7342d8999.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/78/5f93750fd367fa5b29b45a8a31347224722498.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/d4/e19c810ddefba362805ecb2f24bfbd064c2367.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/ea/2ad91c60e90e48f59ed33e31b2be14b26f425e.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/ff/24c75759a1335e9247f00279ded2ea0fd03c8f.debug

Control files: lines which differ (wdiff format)

Build-Ids: 

Re: Tentative summary of the AMD/ATI/NVidia issue

[Lucas Nussbaum]

On 24/04/21 at 20:07 +0200, Moritz Mühlenhoff wrote:
> Du schriebst in gmane.linux.debian.devel.release:
> > Lucas Nussbaum writes:
> >> It looks like the three open paths for resolution are:
> >>
> >> A) understand and restore the behaviour from Debian 10, that is, get X
> >> to work in a degraded mode after installation. How it worked with Debian
> >> 10 (and why it doesn't with Debian 11) is unknown.
> >>
> >> B) In the installer, detect that firmware-amd-graphics or
> >> firmware-misc-nonfree should be installed, and either install it (?),
> >> or redirect the user to the unofficial installer that includes them.
> >>
> >> C) Do nothing and document this in the release notes
> >
> > There is at least also
> >
> > D) Install (non-free) firmware and include it in official install media.
> >
> > I don't think degraded operation (just vesa, no sound, no wifi, known
> > issues in microcode, ...) will continue to be an attractive option.
> > So maybe we should revisit whether we should just include firmware; I
> > wanted to suggest so at least for Bookworm.
> 
> +100
> 
> Let's postpone the tentative release date and use the time to create
> a separate non-free/firmware section which contains the various
> firmwares and amd64-microcode/intel-microcode and which gets included
> in our default installation media.
> 
> There can still be special images for use in virtualisation, containers
> and special hardware for those who care, but let's end this fallacy.
> 
> If the involved teams (FTP masters, d-i, debian-cd) feel they
> need some educated opinion from the rest of the project, then by all
> means let's settle this with a GR, but A-C are just wasted efforts
> or provide a horrible user experience for no benefit at all.

I am still unconvinced that the situation is worse with bullseye than it
was with buster. It would be great if more people with relevant hardware
could compare the status with both installers to understand if there's a
regression somewhere.

IF there's no regression compared to buster, I don't think that we
should delay the release to properly solve this at this point, but
rather work around the issue by improving the hints in the documentation
and the installer.

We have been in the current situation for years. I really fail to see
what is fundamentally different now.

Lucas

Bug#987352: marked as done (unblock: leaflet-markercluster/1.4.1~dfsg-10)

[Debian Bug Tracking System]

Your message dated Sun, 25 Apr 2021 10:25:45 +0200
with message-id 

and subject line Re: Bug#987352: unblock: leaflet-markercluster/1.4.1~dfsg-10
has caused the Debian Bug report #987352,
regarding unblock: leaflet-markercluster/1.4.1~dfsg-10
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987352: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987352
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Please unblock package leaflet-markercluster

[ Reason ]
leaflet-markercluster/1.4.1~dfsg-10 does not work at all for its main
purpose:

JavaScript code can be structured 3 different ways: a) for server-side
Node.js use, or for client-side browser either b) in old-style UMD form
or in new-style ESM form.

Officially upstream, Leaflet and leaflet-markercluster provides only
old-style UMD form, so that form is generally expected from users and
must work for the package to be considered in working shape.

Patches exist to also support new-style ESM form, while still supporting
old-style as well.

Leaflet in Debian includes such patches, and leaflet-markercluster since
1.4.1~dfsg-9 does as well but the patches used turns out to not work as
intended and broke old-style form.

leaflet-markercluster/1.4.1~dfsg-10 has switched to a different patch set
and has been tested to properly work in old-style UMD form.


[ Impact ]
leaflet-markercluster/1.4.1~dfsg-9 now in testing fails to work for the
official use in old-style UMD form.

Concretely within the realm of Debian itself, it seems that this will
affect the package wireshark (but seemingly for an arguably exotic use
requiring custom configuration to enable a Maxmind GeoIP dataset).

[ Tests ]
Tested that the map http://purism.biks.dk/world/staff/ (authored by me)
works.

[ Checklist ]
  [x] all changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in testing

unblock leaflet-markercluster/1.4.1~dfsg-10


-BEGIN PGP SIGNATURE-
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=GPQY
-END PGP SIGNATURE-
diff -Nru leaflet-markercluster-1.4.1~dfsg/debian/changelog 
leaflet-markercluster-1.4.1~dfsg/debian/changelog
--- leaflet-markercluster-1.4.1~dfsg/debian/changelog   2020-12-02 
22:08:03.0 +0100
+++ leaflet-markercluster-1.4.1~dfsg/debian/changelog   2021-04-21 
12:23:19.0 +0200
@@ -1,3 +1,13 @@
+leaflet-markercluster (1.4.1~dfsg-10) unstable; urgency=medium
+
+  * add patch cherry-picked from upstream pull request
+to avoid global L using Rollup plugin inject,
+and stop use earlier more invasive yet non-working patch;
+build-depend on node-rollup-plugin-inject;
+closes: bug#987128
+
+ -- Jonas Smedegaard   Wed, 21 Apr 2021 12:23:19 +0200
+
 leaflet-markercluster (1.4.1~dfsg-9) unstable; urgency=medium
 
   * use brotli compression suffix .brotli
diff -Nru leaflet-markercluster-1.4.1~dfsg/debian/control 
leaflet-markercluster-1.4.1~dfsg/debian/control
--- leaflet-markercluster-1.4.1~dfsg/debian/control 2020-12-02 
22:07:39.0 +0100
+++ leaflet-markercluster-1.4.1~dfsg/debian/control 2021-04-21 
11:46:33.0 +0200
@@ -8,6 +8,7 @@
 Build-Depends:
  brotli,
  debhelper-compat (= 12),
+ node-rollup-plugin-inject,
  node-rollup-plugin-json,
  pandoc ,
  pigz,
diff -Nru 
leaflet-markercluster-1.4.1~dfsg/debian/patches/0~020200121~60a6e18.patch 
leaflet-markercluster-1.4.1~dfsg/debian/patches/0~020200121~60a6e18.patch
--- leaflet-markercluster-1.4.1~dfsg/debian/patches/0~020200121~60a6e18.patch   
1970-01-01 01:00:00.0 +0100
+++ leaflet-markercluster-1.4.1~dfsg/debian/patches/0~020200121~60a6e18.patch   
2021-04-21 11:46:33.0 +0200
@@ 

Bug#987531: buster-pu: package opendmarc/1.3.2-6+deb10u2

[Utkarsh Gupta]

Package: release.debian.org
User: release.debian@packages.debian.org
Usertags: pu
User: debian-release@lists.debian.org
Usertags: bsp-2021-04-at-salzburg
X-Debbugs-Cc: t...@security.debian.org
Tags: buster
Severity: normal

Hello,

src:opendmarc has been affected by CVE-2020-12460, which is fixed in
sid, bullseye, and stretch. Therefore, I'd like for it to be fixed in
buster as well. And hence this pu update.

The debdiff is duly attached. Let me know if you need any more information. TIA!


- u


opendmarc-buster.debdiff
Description: Binary data

Bug#987510: marked as done (unblock: cqrlog/2.5.1-2)

[Debian Bug Tracking System]

Your message dated Sun, 25 Apr 2021 09:41:44 +0200
with message-id 

and subject line Re: Bug#987510: unblock: cqrlog/2.5.1-2
has caused the Debian Bug report #987510,
regarding unblock: cqrlog/2.5.1-2
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987510: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987510
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock
X-Debbugs-Cc: Debian Hamradio Maintainers 

Please unblock package cqrlog.

[ Reason ]
The new version fixes import of .adif files which is the standard
hamradio logbook interchange format. (#987032)

[ Impact ]
This logbook program wouldn't be able to read logbooks.

[ Tests ]
Manual testing by Federico Grau.

[ Risks ]
The change was tested and the patch is small.

[ Checklist ]
  [x] all changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in testing

unblock cqrlog/2.5.1-2

Thanks,
Christoph

No differences were encountered between the control files

diff -Nru cqrlog-2.5.1/debian/changelog cqrlog-2.5.1/debian/changelog
--- cqrlog-2.5.1/debian/changelog	2021-02-02 12:46:56.0 +0100
+++ cqrlog-2.5.1/debian/changelog	2021-04-17 20:23:46.0 +0200
@@ -1,3 +1,10 @@
+cqrlog (2.5.1-2) unstable; urgency=medium
+
+  * Team upload.
+  * Patch from upstream commits to fix ADIF import (Closes: #987032)
+
+ -- Federico Grau   Sat, 17 Apr 2021 14:23:46 -0400
+
 cqrlog (2.5.1-1) unstable; urgency=medium
 
   * New upstream version 2.5.1.
diff -Nru cqrlog-2.5.1/debian/patches/adif_import_regex_fix_2021-04-17.patch cqrlog-2.5.1/debian/patches/adif_import_regex_fix_2021-04-17.patch
--- cqrlog-2.5.1/debian/patches/adif_import_regex_fix_2021-04-17.patch	1970-01-01 01:00:00.0 +0100
+++ cqrlog-2.5.1/debian/patches/adif_import_regex_fix_2021-04-17.patch	2021-04-17 20:23:46.0 +0200
@@ -0,0 +1,27 @@
+Patch to fix Debian#987032: cqrlog: Importing ADIF-logs results in 0 byte logs - https://bugs.debian.org/987032
+Applies upstream commits:
+42d1ad402affd0af0f3087562c101fc34940ffc5
+Original_Author: Petr Hlozek 
+Date:   Sun Feb 7 07:19:57 2021 +0100
+
+fix: workaround for 'TRegExpr exec: empty input string' error in fpc compiler
+Author: donf...@casagrau.org
+diff --git a/src/fAdifImport.pas b/src/fAdifImport.pas
+index 2481086..934b158 100644
+--- a/src/fAdifImport.pas
 b/src/fAdifImport.pas
+@@ -420,8 +420,12 @@ begin
+ d.IOTA  := UpperCase(d.IOTA);
+ d.NAME  := Copy(d.NAME, 1 ,40);
+ d.QTH   := Copy(d.QTH, 1, 60);
+-d.DARC_DOK := ReplaceRegExpr('Ø', d.DARC_DOK, '0', True);
+-d.DARC_DOK := LeftStr(Uppercase(ReplaceRegExpr('[^a-zA-Z0-9]',d.DARC_DOK, '', True)), 12);
++//workaround for 'TRegExpr exec: empty input string' error in fpc compiler
++if (trim(d.DARC_DOK) <> '') then
++begin
++  d.DARC_DOK := ReplaceRegExpr('Ø', d.DARC_DOK, '0', True);
++  d.DARC_DOK := LeftStr(Uppercase(ReplaceRegExpr('[^a-zA-Z0-9]',d.DARC_DOK, '', True)), 12);
++end;
+ 
+ d.QSL_VIA := UpperCase(d.QSL_VIA);
+ if Pos('QSL VIA',d.QSL_VIA) > 0 then
diff -Nru cqrlog-2.5.1/debian/patches/series cqrlog-2.5.1/debian/patches/series
--- cqrlog-2.5.1/debian/patches/series	2021-02-02 12:46:56.0 +0100
+++ cqrlog-2.5.1/debian/patches/series	2021-04-17 20:23:46.0 +0200
@@ -1,2 +1,3 @@
 apparmor-fix.patch
 icon-patch
+adif_import_regex_fix_2021-04-17.patch
--- End Message ---
--- Begin Message ---
Unblocked.--- End Message ---

Bug#987506: marked as done (unblock: inventor/2.1.5-10-23.1)

[Debian Bug Tracking System]

Your message dated Sun, 25 Apr 2021 09:38:38 +0200
with message-id 

and subject line Re: Bug#987506: unblock: inventor/2.1.5-10-23.1
has caused the Debian Bug report #987506,
regarding unblock: inventor/2.1.5-10-23.1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
987506: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987506
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package inventor.
At the vBSP Salzburg I have uploaded an NMU to fix the empty
inventor-doc package. By accident I forgot to properly close the bug,
but have done so manually.

unblock inventor/2.1.5-10-23.1

debdiff below:

diff -Nru inventor-2.1.5-10/debian/changelog inventor-2.1.5-10/debian/changelog
--- inventor-2.1.5-10/debian/changelog  2020-10-20 02:15:34.0 +
+++ inventor-2.1.5-10/debian/changelog  2021-04-24 11:51:14.0 +
@@ -1,3 +1,11 @@
+inventor (2.1.5-10-23.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Remove arch-specific filter used when building the arch: all
+packages, hopefully fixing #889189.
+
+ -- Chris Hofstaedtler   Sat, 24 Apr 2021 11:51:14 +
+
 inventor (2.1.5-10-23) unstable; urgency=medium
 
   [ Steve Robbins ]
diff -Nru inventor-2.1.5-10/debian/rules inventor-2.1.5-10/debian/rules
--- inventor-2.1.5-10/debian/rules  2020-10-20 02:15:34.0 +
+++ inventor-2.1.5-10/debian/rules  2021-04-24 11:51:14.0 +
@@ -48,7 +48,10 @@
 # ensure that the uploader builds on a favoured architecture, e.g.
 # i386.
 #
-ifneq (,$(findstring $(DEB_BUILD_ARCH),i386 sparc powerpc mips mipsel))
+# NMU note: "all" is now built on an amd64 buildd. Lets just hope
+# ivman works on amd64; hardcoding a list of archs that are not used
+# to build "all" certainly does not help.
+ifneq (,$(findstring $(DEB_BUILD_ARCH),amd64 i386 sparc powerpc mips mipsel))
 export BUILDMAN=true
 endif
 
--- End Message ---
--- Begin Message ---
Unblocked.--- End Message ---

Processed: Re: Bug#987488: unblock: irssi/20210314-1

[Debian Bug Tracking System]

Processing control commands:

> retitle -1 unblock: ircii/20210314-1
Bug #987488 [release.debian.org] unblock: irssi/20210314-1
Changed Bug title to 'unblock: ircii/20210314-1' from 'unblock: 
irssi/20210314-1'.

-- 
987488: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987488
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#987529: buster-pu: package exactimage/1.0.2-1+deb10u1

[Sven Eckelmann]

Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
X-Debbugs-CC: Moritz Mühlenhoff 
X-Debbugs-CC: Adrian Bunk 
Usertags: pu

[ Reason ]
The upload of openexr 2.2.1-4.1+deb10u1 to Debian Buster broke the build for 
pre-C++-11 packages which include the openexr headers. The build breaks with 
things like:

In file included from /usr/include/c++/8/cstdint:35,
 from /usr/include/OpenEXR/ImfFrameBuffer.h:55,
 from /usr/include/OpenEXR/ImfInputFile.h:47,
 from codecs/openexr.cc:24:
/usr/include/c++/8/bits/c++0x_warning.h:32:2: error: #error This file 
requires compiler and library support for the ISO C++ 2011 standard. This 
support must be enabled with the -std=c++11 or -std=gnu++11 compiler options.
 #error This file requires compiler and library support \
  ^

The build system changes to switch from -std=gnu++98 to GCC-default from 
exactimage 1.0.2-8 was added to the Debian buster package to fix the FTBFS on 
buster.

[ Impact ]
Package fails to build under Debian Buster 10.6 (and newer)

[ Tests ]
The build was tested to verify that it actually builds now. Only minor tests 
were performed on the binaries to make sure that they don't immediately crash.

[ Risks ]
None known at the moment

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
  [*] attach debdiff against the package in stable
  [*] the issue is verified as fixed in unstable

[ Other info ]
See http://bugs.debian.org/968829 bug which was just recently re-opened for 
the regression in Debian Buster.

I have not yet uploaded the change to stable but will do this after I get an 
approval for the attached change.

Kind regards,
Svendiff -Nru exactimage-1.0.2/debian/changelog exactimage-1.0.2/debian/changelog
--- exactimage-1.0.2/debian/changelog	2019-02-03 17:49:58.0 +0100
+++ exactimage-1.0.2/debian/changelog	2021-04-25 07:57:10.0 +0200
@@ -1,3 +1,16 @@
+exactimage (1.0.2-1+deb10u1) buster; urgency=medium
+
+  * debian/rules:
+- Add -fpermissive to fix FTBFS due to missing C++11 "constexp"
+  * debian/patches:
+- Add adapt-for-nicer-per-file-_C-FLAGS-per-source-input-name.patch,
+  added-fpermissive-where-currently-necessary.patch,
+  if-we-can-not-easily-use-the-input-module-name-for-C-FLAS.patch,
+  Updated-per-file-C-FLAGS-to-likely-final-delimiter.patch,
+  Fix build with C++11 and OpenEXR 2.5.x (Closes: #968829)
+
+ -- Sven Eckelmann   Sun, 25 Apr 2021 07:57:10 +0200
+
 exactimage (1.0.2-1) unstable; urgency=medium
 
   * New Upstream Version
diff -Nru exactimage-1.0.2/debian/patches/adapt-for-nicer-per-file-_C-FLAGS-per-source-input-name.patch exactimage-1.0.2/debian/patches/adapt-for-nicer-per-file-_C-FLAGS-per-source-input-name.patch
--- exactimage-1.0.2/debian/patches/adapt-for-nicer-per-file-_C-FLAGS-per-source-input-name.patch	1970-01-01 01:00:00.0 +0100
+++ exactimage-1.0.2/debian/patches/adapt-for-nicer-per-file-_C-FLAGS-per-source-input-name.patch	2021-04-25 07:57:10.0 +0200
@@ -0,0 +1,38 @@
+From: rene 
+Date: Sun, 29 Sep 2019 19:42:13 +
+Subject: * adapt for nicer per file _C*FLAGS per source input name
+
+Bug-Debian: https://bugs.debian.org/968580
+Origin: upstream, https://svn.exactcode.de/exact-image/trunk@2349 cfa9e8bd-72fe-0310-85ed-f28a7036cb6a
+---
+ api/Makefile   | 2 +-
+ frontends/Makefile | 4 ++--
+ 2 files changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/api/Makefile b/api/Makefile
+index 243a27a..1240ab1 100644
+--- a/api/Makefile
 b/api/Makefile
+@@ -9,7 +9,7 @@ CPPFLAGS += $(BARDECODEINCS)
+ LDFLAGS += $(BARDECODELIBS)
+ endif
+ 
+-objdir/api/api.o_CXXFLAGS := -fpermissive
++$(X_MODULE)/api.cc_CXXFLAGS := -fpermissive
+ 
+ # we have an own install
+ _X_BUILD_IMPLICIT := $(_X_BUILD_IMPLICIT)
+diff --git a/frontends/Makefile b/frontends/Makefile
+index 875be16..3ebea5a 100644
+--- a/frontends/Makefile
 b/frontends/Makefile
+@@ -15,7 +15,7 @@ DEPS = $(image_BINARY) $(codecs_BINARY) $(bardecode_BINARY) $(X_OUTARCH)/utility
+ CPPFLAGS += -I utility
+ #LDFLAGS += -lGL -lGLU -lglut -L/usr/X11/lib64
+ 
+-objdir/frontends/bardecode.o_CXXFLAGS := -fpermissive
+-objdir/frontends/econvert.o_CXXFLAGS := -fpermissive
++$(X_MODULE)/bardecode.cc_CXXFLAGS := -fpermissive
++$(X_MODULE)/econvert.cc_CXXFLAGS := -fpermissive
+ 
+ include build/bottom.make
diff -Nru exactimage-1.0.2/debian/patches/added-fpermissive-where-currently-necessary.patch exactimage-1.0.2/debian/patches/added-fpermissive-where-currently-necessary.patch
--- exactimage-1.0.2/debian/patches/added-fpermissive-where-currently-necessary.patch	1970-01-01 01:00:00.0 +0100
+++ exactimage-1.0.2/debian/patches/added-fpermissive-where-currently-necessary.patch	2021-04-25 07:57:10.0 +0200
@@ -0,0 +1,48 @@
+From: rene 
+Date: Sun, 29 Sep 2019 19:22:47 +
+Subject: * added 

Bug#987488: unblock: irssi/20210314-1

[Graham Inggs]

Control: retitle -1 unblock: ircii/20210314-1
Contro: tags -1 + moreinfo

Hi Jan

On Sat, 24 Apr 2021 at 16:21, Jan Wagner  wrote:
> [ Risks ]
> While the diffstat looks huge, a significant part is removed code.

This debdiff is unreviewable.  Please provide a filtered debdiff along
with the command used to filter it.

++ Bump Debhelper-compat to 13.

Bumping the debehlper compat level is not accepted at this stage of
the release [1].
Please revert this change.

> unblock irssi/20210314-1

I'm assuming this is a typo and you meant ircii/20210314-1 here.

Regards
Graham


[1] https://release.debian.org/bullseye/freeze_policy.html