Bug#942633: gitlab: Experimental gitlab requires gitshell 9.3.0 but only 9.1.0 is packaged

On 22/Oct - 19:18, Pirate Praveen wrote: > This is building fine on my system. So uploaded binary included as work > around. Note that I see a newer version of gitlb available: root@weboob ~ # apt-cache policy gitlab gitlab: Installed: 12.1.14-1 Candidate: 12.1.14-1 Version table:

Bug#942876: openjdk-11-jre-dcevm: Doesn't start up anymore after updating openjdk-11-jre

Package: openjdk-11-jre-dcevm Version: 11.0.3+1-1 Severity: grave Justification: renders package unusable java -dvecm can't be executed anymore: java -dcevm java: relocation error: /usr/lib/jvm/java-11-openjdk-amd64/lib/libjava.so: symbol JVM_InitializeFromArchive version SUNWprivate_1.1 not

Bug#942875: debootstrap does not overwrite existing files even if adviced to do

Package: debootstrap Version: 1.0.116 Severity: serious Tags: d-i -- System Information: Debian Release: bullseye/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 5.2.0-3-amd64 (SMP w/1 CPU core) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8

Bug#942725: interimap: please support name to appear in log lines

On Mon, 21 Oct 2019 at 00:26:58 +0200, Jonas Smedegaard wrote: > I syncronize multiple accounts into subdirs below ~/Maildir and track > them as a whole using a single notmuch database. AFAIK notmuch doesn't speak IMAP so unfortunately that approach breaks layering. I'm unsure how well IMAP

Bug#942396: nsis: increase NSIS_MAX_STRLEN to 8192

Looking at your suggested diff: https://sourceforge.net/p/nsis/feature-requests/552/ If you really to decide to go that route with separate package: how about adding an extra branch in Source/build.cpp: If environment variable NSISSTUBSDIR was not set at all, then check for existence of the

Bug#933964: milkytracker: CVE-2019-14464 CVE-2019-14496 CVE-2019-14497

Hi! On 22/10/2019 15:03, Utkarsh Gupta wrote: Hey, I have prepared an NMU for Sid. I'd be happy to upload if you are busy to do so. Given that it is fixed for oldoldstable already, I plan on uploading it in a couple of days :) Please let me know if I shouldn't or something. Do you have a

Bug#917829: python-intbitset: FTBFS when built with dpkg-buildpackage -A

severity 917829 serious thanks On Tue, 22 Oct 2019, Sandro Tosi wrote: > not sure how, but i just rebuild this package and it builds just fine, Please try "dpkg-buildpackage -A" which is what I reported, not plain "dpkg-buildpackage". This package has propagated to testing today without a good

Bug#942873: build failing on Debian buster at kmk_builtin_append out/obj/VBoxGlobal/qtrcc/VirtualBox2_x4.gen.cpp

Package: virtualbox Severity: wishlist X-Debbugs-CC: whonix-de...@whonix.org Fetched the source package from sid. Trying to compile on buster. kmk_builtin_append -n "/home/user/sourcesother/vbox/virtualbox-6.0.14-dfsg/out/obj/VBoxGlobal/gen/qtrcc/VirtualBox2_x4.gen.o.dep" ""

Bug#887831: jigdo-file: Jigdo .template file and resulting ISO are only verified by MD5

On Sat 2018-01-20 13:06:06 +0100, Thomas Schmitt wrote: > as described in > https://lists.debian.org/debian-cd/2018/01/msg00021.html > jigdo-file verifies the .template file and the resulting ISO image only > by MD5 checksums which stem from the .jigdo file. Apparently, the MD5 sums are only

Bug#942245: Ibus doesn't offer french-latin9 keymap

On 2019-10-17 15:26, Osamu Aoki wrote: As pointed out by Gunnar, ibus upstream started to include XKB layouts into it recently. Well, no. simple.xml has been there since 2012. I saw Antoine forcing to use xim by setting GTK_IM_MODULE environment variable to xim instead of ibus. I now know

Bug#942126: gvfs-fuse: /run/user/ID/gvfs/ empty after upgrade

Package: gvfs-fuse Version: 1.42.1-1 Followup-For: Bug #942126 Ok, I confirm that replacing fuse with fuse3, as reported by Bert, make gvfs-fuse works as expected, with /run/user/ID/gvfs/ populated again. So please, consider to tighten gvfs-fuse dependencies on fuse3. And, just to clarify, my

Bug#942872: kate: Kate tabs have no close button

Package: kate Version: 4:19.08.2-1 Severity: normal Dear Maintainer, * What led up to the situation? current upgrade (at 22 Oct 2019) * What exactly did you do (or not do) that was effective (or ineffective)? Open file from command line, nautilus or in-app file open

Bug#941993: cheese works with current openSUSE

Today I have tested the same webcam also with cheese but on openSUSE Leap 15.1 - and look there it works without any problems. Probably some of the libraries of Debian 10 are causing the issue. In order to give you the possibility to find out about it I have attached all packages installed

Bug#942861: linux-image-amd64: missing-copyright-file /usr/share/doc/linux-image-amd64/copyright

On Tue, 2019-10-22 at 16:07 +0200, Thorsten Glaser wrote: > Package: linux-image-amd64 > Version: 5.3.7-1 > Severity: serious > Justification: Policy 12.5 > > adequate reports the file is missing, and is right. The directory is there, > but not a symbolic link and empty. > > tglase@tglase-nb:~ $

Bug#941093: ping!

Dear release team, On Mon, Oct 21, 2019 at 09:38:39AM -0300, Lisandro Damián Nicanor Pérez Meyer wrote: > On 19/10/20 08:55, Paul Gevers wrote: > > I think we are ready for this. Please go ahead. > > Thanks! Dmitry started it yesterday. I have uploaded all of Qt yesterday, but some

Bug#942871: prometheus-mongodb-exporter: segfaults with mongodb 4.2

Package: prometheus-mongodb-exporter Version: 1.0.0+git20180522.e755a44-1 Severity: important Tags: patch Dear maintainer: On a replica set where mongodb 4.0 and prometheus-mongodb-exporter used to work ok, an upgrade to mongodb 4.2 makes prometheus-mongodb-exporter to crash as soon as a request

Bug#927155: synaptic: Idiotic dependencies after the upgrade to 0.84.6

Package: synaptic Followup-For: Bug #927155 I think it is time to close this bug. After all, it was not synaptic to blame but zenity. I opened the real bug report on zenity, in #942362. Thank you -- System Information: Debian Release: bullseye/sid APT prefers testing APT policy: (990,

Bug#942870: r-base: does not respect nodoc build profile in DEB_BUILD_OPTIONS

Source: r-base Version: 3.6.1-6 Severity: normal Tags: patch Hi, src:r-base does not appear to respect the "nodoc" profile in DEB_BUILD_OPTIONS. This is a separate issue to src:r-base not respecting nocheck which was filed as #942867. A patch is attached that somewhat-brutally fixes this and

Bug#942867: r-base: does not respect nocheck build profile in DEB_BUILD_OPTIONS

Hi Chris, On 22 October 2019 at 15:46, Chris Lamb wrote: | Source: r-base | Version: 3.6.1-6 | Severity: normal | Tags: patch | | Hi, | | src:r-base does not appear to respect the "nocheck" profile in | DEB_BUILD_OPTIONS. Whilst there appears to be code that intends to do | exactly this, ie.:

Bug#941793: nmu: libimobiledevice_1.2.1~git20181030.92c5462-1

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, 2019-10-20 at 21:33 +0200, Paul Gevers wrote: > Sorry for taking so long, but I have the feeling that the binNMU isn't > appropriate. I take the silence from the other team members to mean > something similar. To be honest, I'm a bit

Bug#937293: [Piuparts-devel] Bug#937293: piuparts: Python2 removal in sid/bullseye

Hi Holger, On Fri, Aug 30, 2019 at 09:53:09AM +, Holger Levsen wrote: > On Fri, Aug 30, 2019 at 07:31:05AM +, Matthias Klose wrote: > > Package: src:piuparts > > Your package either build-depends, depends on Python2, or uses Python2 > > in the autopkg tests. Please stop using Python2,

Bug#942869: valadoc: README's content is "See README.md" but README.md is absent

Package: valadoc Version: 0.42.5-1 Severity: normal $ cat /usr/share/doc/valadoc/README See README.md $ ls /usr/share/doc/valadoc/ changelog.Debian.gz changelog.gz copyright NEWS.gz README THANKS -- System Information: Debian Release: 10.0 APT prefers stable APT policy: (991,

Bug#938837: xapp: Python2 removal in sid/bullseye

Control: tag -1 + pending Hi Norbert, On Wed, Oct 16, 2019 at 08:19:11AM +0900, Norbert Preining wrote: > Thanks for the patch, we have already code that gets rid of Py2 in the > experimental branch, where we do it a bit different (patching the source > code not to build Py2 gir). In this way we

Bug#942868: vim-gtk3: Fail to load GTK+3 theme

Package: vim-gtk3 Version: 2:8.1.2136-1 Severity: normal Dear Maintainer, The current GTK+ 3 GUI of Vim does not respect my GTK+3 theme settings. In ``$HOME/.config/gtk-3.0/settings.ini'' I set gtk-application-prefer-dark-theme = true However, when I try to open GVim the theme appear to be

Bug#942867: r-base: does not respect nocheck build profile in DEB_BUILD_OPTIONS

Source: r-base Version: 3.6.1-6 Severity: normal Tags: patch Hi, src:r-base does not appear to respect the "nocheck" profile in DEB_BUILD_OPTIONS. Whilst there appears to be code that intends to do exactly this, ie.: build-arch: make-arch ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))

Bug#942809: Why embed ts-node in node-typescript?

Quoting Xavier (2019-10-22 14:45:50) > Le Mardi, Octobre 22, 2019 14:07 CEST, Jonas Smedegaard a > écrit: > > Quoting Xavier (2019-10-22 13:23:28) > > > Personnaly I think that we should enable test anywhere it is > > > possible to provide quality packages. That's why I prefer > > > embedding

Bug#942817: after re-considerations

Ok after reconsideration Here's my new chain of thought * Scenario #1: Simply comment out the IPV6 line by default as follow: server { listen 80 default_server; #listen [::]:80 default_server; I don't expect much impact in the behaviour change. It will only affect users expecting to have

Bug#942825: dphys-swapfile: Avoid fallocate on f2fs, fix detection of fallocate command.

Hi Axel Yes I think we should try that. If fallocate is not recommended at all, we could just entirely get rid of the if clause? This would simplify things, i.e. we wouldn't need the whitelist. Best regards Cyrill On Tue, Oct 22, 2019 at 4:25 PM Axel Beckert wrote: > Control: fixed -1

Bug#942706: swig needs an update for python 3.8

now uploaded to delayed. I saw in #928375 a plan to update to 4.0.1. The fix is already included upstream.

Bug#942866: /usr/bin/getconf: getconf(1) should mention sysconf

Package: libc-bin Version: 2.29-2 Severity: normal File: /usr/bin/getconf Tags: patch To reproduce, and actual output: mariner:~> man -k sysconf sysconf (3) - get configuration information at run time mariner:~> Expected output: mariner:~> man -k sysconf sysconf (3) - get

Bug#942825: dphys-swapfile: Avoid fallocate on f2fs, fix detection of fallocate command.

Control: fixed -1 20100506-5 Hi Cyrill, Cyrill Helg wrote: > Package: dphys-swapfile > Version: 20100506-5 [...] > please update the part of detecting fallocate as the exit code of > the type command causes the script to stop if fallocate is not > found. fallocate is no more used since

Bug#942865: cffi 1.13 needed to support Python 3.8

Package: src:python-cffi Version: 1.12.3-1 Severity: important Tags: sid bullseye patch User: debian-pyt...@lists.debian.org Usertags: python3.8 An update to 1.13 is needed to support Python 3.8. Example packaging at https://launchpad.net/ubuntu/+source/python-cffi/1.13.0-0ubuntu1

Bug#942864: llvm-toolchain-9: FTBFS on i386: tries to ld -r amd64 code

Source: llvm-toolchain-9 Version: 1:9.0.0-1 Severity: serious Justification: FTBFS on release arch, built before Tags: ftbfs https://buildd.debian.org/status/fetch.php?pkg=llvm-toolchain-9=i386=1%3A9.0.0-1=1571581925=0 Disentangling the parallel build, we get: […] cd

Bug#863960: Leftovers break Git repos on new installation after purge (401 Unauthorized)

Control: found -1 12.1.14-1+fto10+1 Hello, Apparently, this bug still exists in version 12.1.14-1+fto10+1 of gitlab. It also leads to another bug: if you purge and reinstall gitlab without removing the leftovers in between, your new gitlab instance will have problems accessing the unterlying

Bug#942863: gitaly: /usr/lib/tmpfiles.d/gitaly.conf with hardcoded username

Package: gitaly Version: 1.53.3+debian-1~bpo10+1 Severity: important Hello, during package configuration, Gitlab asks for a system user to be used for the local Gitlab installation. Unfortunately, `/usr/lib/tmpfiles.d/gitaly.conf` still has the username `gitlab` hardcoded, so it's broken if you

Bug#942862: RFP: pantalaimon -- An end-to-end encryption aware Matrix reverse proxy daemon.

Package: wnpp Severity: wishlist * Package name: pantalaimon Version : 0.3 Upstream Author : The Matrix.org Team * URL : https://github.com/matrix-org/pantalaimon * License : Apache-2.0 Programming Lang: Python Description : An end-to-end encryption

Bug#933964: milkytracker: CVE-2019-14464 CVE-2019-14496 CVE-2019-14497

Hey, I have prepared an NMU for Sid. I'd be happy to upload if you are busy to do so. Given that it is fixed for oldoldstable already, I plan on uploading it in a couple of days :) Please let me know if I shouldn't or something. Best, Utkarsh

Bug#942861: linux-image-amd64: missing-copyright-file /usr/share/doc/linux-image-amd64/copyright

Package: linux-image-amd64 Version: 5.3.7-1 Severity: serious Justification: Policy 12.5 adequate reports the file is missing, and is right. The directory is there, but not a symbolic link and empty. tglase@tglase-nb:~ $ ll -d /usr/share/doc/linux-image-amd64 drwxr-xr-x 2 root root 4096 Oct 22

Bug#942633: gitlab: Experimental gitlab requires gitshell 9.3.0 but only 9.1.0 is packaged

On Tue, 22 Oct 2019 18:36:20 +0530 Pirate Praveen wrote:> It seems 1.58.0+dfsg-1 build failed > > https://buildd.debian.org/status/fetch.php?pkg=gitaly=amd64=1.58.0%2Bdfsg-1=1571598656=0 > This is building fine on my system. So uploaded binary included as work around.

Bug#942821: openjdk-11-jre: openjdk-11 new stable update breaks system hibernation

On Tue, Oct 22, 2019 at 05:22:37AM +0300, siyia wrote: > Package: openjdk-11-jre > Version: 11.0.4+11-1~deb10u1 > Severity: important > > Dear Maintainer, > > *** Reporter, please consider answering these questions, where appropriate *** > >Hello updating the following packages: > >

Bug#942858: Doesn't support Python 3.8: SystemError: bad call flags

Hi Andrey, On Tue, Oct 22, 2019 at 3:03 PM Andrey Rahmatullin wrote: > Importing leveldb in Python 3.8 will fail: > > Traceback (most recent call last): > File "test/test.py", line 11, in setUp > import leveldb as _leveldb > SystemError: bad call flags > > This doesn't break the package

Bug#942860: phonon: no functional current backend

Package: phonon Version: 4:4.10.3-2 Severity: important Dear Maintainer, currently (since some weeks) there is no working (like doing something (not null)) current (like 4.10) backend available for phonon within testing. And even the path to 4:4.9.1-2 is blocked https://bugs.debian.org/cgi-

Bug#942859: uucp: Very slow to start due to closing 1 million FDs

Package: uucp Version: 1.07-24 Severity: normal In an environment where ulimit -n is 1048576 (as is, for instance, the case for Docker and most likely other environments that don't have ulimit/rlimits set by something like systemd-system), most UUCP programs (including even uulog) try to close

Bug#942633: gitlab: Experimental gitlab requires gitshell 9.3.0 but only 9.1.0 is packaged

On Tue, Oct 22, 2019 at 14:54, Romain Bignon wrote: Hi, On 21/Oct - 21:21, Pirate Praveen wrote: > At least for Romain that seems to be the problem. > > ii gitaly 1.47.3+debian-1 > > $ apt policy gitaly > gitaly: > Installed: 1.53.3+debian-1~bpo10+1 > Candidate:

Bug#942858: Doesn't support Python 3.8: SystemError: bad call flags

Package: python3-leveldb Version: 0~svn68-3+b3 Severity: important User: debian-pyt...@lists.debian.org Usertags: python3.8 Importing leveldb in Python 3.8 will fail: Traceback (most recent call last): File "test/test.py", line 11, in setUp import leveldb as _leveldb SystemError: bad call

Bug#942633: gitlab: Experimental gitlab requires gitshell 9.3.0 but only 9.1.0 is packaged

Hi, On 21/Oct - 21:21, Pirate Praveen wrote: > > At least for Romain that seems to be the problem. > > > > ii gitaly 1.47.3+debian-1 > > > > $ apt policy gitaly > > gitaly: > > Installed: 1.53.3+debian-1~bpo10+1 > > Candidate: 1.53.3+debian-1~bpo10+1 > > Version table: > > ***

Bug#936046: python3-pyqt5: does not depends on matching qtbase-abi

> A transition is in progress right now. Some packages will be uninstallable > until the release team rebuilds them. Hopefully that will happen later this > week. > > Please follow the transition bug (https://bugs.debian.org/941093) to track > its state. Thanks for the info! signature.asc

Bug#942857: developers-reference: updates on debian.org mail handling updates

package: developers-reference severity: wishlist - Forwarded message from "Adam D. Barratt" - Date: Tue, 22 Oct 2019 05:59:08 +0100 From: "Adam D. Barratt" To: debian-devel-annou...@lists.debian.org Subject: debian.org mail handling updates Message-ID:

Bug#936046: python3-pyqt5: does not depends on matching qtbase-abi

> So at this point you just have to wait. Im also waiting ... amd is not easy. Josep Andreu

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

Le Mardi, Octobre 22, 2019 14:07 CEST, Jonas Smedegaard a écrit: > Quoting Xavier (2019-10-22 13:23:28) > > Le Mardi, Octobre 22, 2019 12:03 CEST, Jonas Smedegaard a > > écrit: > > > Quoting Xavier (2019-10-22 11:32:19) > > > > Le Mardi, Octobre 22, 2019 11:15 CEST, Jonas Smedegaard > > > >

Bug#936046: python3-pyqt5: does not depends on matching qtbase-abi

Hi Gregor, On Tue, Oct 22, 2019 at 02:18:56PM +0200, Gregor Riepl wrote: > python3-pyqt5 5.12.3+dfsg-2 has now landed in unstable. This effectively > renders it uninstallable due to the dependency on qtbase-abi-5-11-3, for which > no provider is available in sid. > > When can we expect the

Bug#942856: avw.lv2 replaced by ams.lv2

Package: avw.lv2 Version: 0.1.6~dfsg0-1+b4 and others avw.lv2 has been replaced by ams.lv2 a fews years ago. See this message by the author: https://bugs.launchpad.net/ubuntu/+source/avw.lv2/+bug/1591701 The sources are here: https://github.com/blablack/ams-lv2 Hope that helps. Cheers --

Bug#942855: RFS: yaz/5.27.2-1 -- utilities for YAZ Z39.50 toolkit

Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for my package "yaz" * Package name: yaz Version : 5.27.2-1 Upstream Author : Adam Dickmeiss * URL : https://www.indexdata.com/resources/software/yaz/ * License :

Bug#936046: python3-pyqt5: does not depends on matching qtbase-abi

Hi Dmitry, > That happens because I did not bump the build-dependency on Qt, so the > buildds picked up Qt from unstable (and not from experimental) when building > PyQt5. > > My plan is to upload PyQt 5.12 to unstable in the next few days, and upload > Qt 5.12 to unstable after 5.12.5 is

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

Quoting Xavier (2019-10-22 13:23:28) > Le Mardi, Octobre 22, 2019 12:03 CEST, Jonas Smedegaard a > écrit: > > Quoting Xavier (2019-10-22 11:32:19) > > > Le Mardi, Octobre 22, 2019 11:15 CEST, Jonas Smedegaard > > > a écrit: > > > > Quoting Xavier (2019-10-22 10:01:11) > > > > > Le Mardi,

Bug#942854: virtualbox: Guest additions ISO image fails to download

Package: virtualbox Version: 6.0.14-dfsg-1 Severity: normal Dear Maintainer, I have now repeatedly (on several days) tried to download the latest Windows Guest Additions ISO file (by clicking "Devices - Insert Guest Additions CD image"). Every time, the download seems to complete but then

Bug#502065: Disproportionate use of RAM on big GPX files

I looked into the RAM usage with large .gpx files and the problem is libxml2. A test file with 840K points (115.0 MiB file size) used 848.6 MiB of heap in libxml2 and only 45 MiB of heap for everything else (on i686; all figures exclude allocation overhead). gpscorrelate's internal requirements

Bug#942853: ITP: python-mitogen - Python library for writing distributed self-replicating programs

Package: wnpp Severity: wishlist Owner: Emmanuel Arias X-Debbugs-CC: python-modules-t...@lists.alioth.debian.org Dear, * Package name: python-mitogen Version : 0.2.8 Upstream Author : David Wilson * URL : https://github.com/dw/mitogen/ * License :

Bug#921770: mutt: Unable to open attachments: Permission denied

That issue is related to apparmor package > Does "grep -R mutt /etc/apparmor.d/" return anything? root@marcelo:~# grep -R mutt /etc/apparmor.d/ /etc/apparmor.d/abstractions/wayland: owner /run/user/*/{mesa,mutter,sdl,wayland-cursor,weston,xwayland}-shared-* rw, /etc/apparmor.d/abstractions/X:

Bug#942852: perl-modules-5.30: cpan writes configuration under .local/share/.cpan instead of .cpan

Package: perl-modules-5.30 Version: 5.30.0-8 Severity: normal When I run "cpan" after purging my configuration, the new configuration is written under the .local/share/.cpan directory, instead of .cpan as documented in the CPAN(3perl) man page. -- System Information: Debian Release: bullseye/sid

Bug#942809: [Pkg-javascript-devel] Bug#942809: Why embed ts-node in node-typescript?

Quoting Pirate Praveen (2019-10-22 13:12:50) > > > On Tue, Oct 22, 2019 at 11:26, Jonas Smedegaard wrote: > >> javascript packages are treated differently from other languages. > >> ruby packages get cleared in days or maximum weeks. > > > > Some JavaScript packages get cleared within hours.

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

Le Mardi, Octobre 22, 2019 12:03 CEST, Jonas Smedegaard a écrit: > Quoting Xavier (2019-10-22 11:32:19) > > Le Mardi, Octobre 22, 2019 11:15 CEST, Jonas Smedegaard a > > écrit: > > > Quoting Xavier (2019-10-22 10:01:11) > > > > Le Mardi, Octobre 22, 2019 09:10 CEST, Julien Puydt > > > > a

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

On Tue, Oct 22, 2019 at 11:26, Jonas Smedegaard wrote: javascript packages are treated differently from other languages. ruby packages get cleared in days or maximum weeks. Some JavaScript packages get cleared within hours. You shared your experience, I have seen your packages getting

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

On Tue, Oct 22, 2019 at 11:15, Jonas Smedegaard wrote: Please do *not* hide code from ftpmasters by embedding it in other packages - that is foul play, and you risk getting banned from Debian! - put together packages that belong together; I am not sure here, but wouldn't it be fine to

Bug#942851: perl-modules-5.30: CPAN.pm is insecure by default, no warnings

Package: perl-modules-5.30 Version: 5.30.0-8 Severity: grave Tags: security Justification: user security hole I've just found that CPAN.pm does not check signatures by default: 'check_sigs' => q[0], Moreover, it downloads files using http, not https. The combination of both issues makes it

Bug#942443: [debian-mysql] Bug#942443: mysql-5.7: Security fixes from the October 2019 CPU

CVE list for this: CVE-2019-2910 CVE-2019-2911 CVE-2019-2914 CVE-2019-2922 CVE-2019-2923 CVE-2019-2924 CVE-2019-2938 CVE-2019-2946 CVE-2019-2948 CVE-2019-2960 CVE-2019-2969 CVE-2019-2974 CVE-2019-2993 CVE-2019-5443 We haven't been doing good at keeping this updated for the last releases (the

Bug#942850: Build diamond-aligner on any

Package: src:diamond-aligner Version: 0.9.26+dfsg-1 -- Dear maintainer, with some basic changes I could enable diamond-aligner to built on ppc64el. It actually builds on powerpc, ppc64, i386 and I thought we could enable it to build on "any". What do you think of that ? Here is a merge request :

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

Quoting Xavier (2019-10-22 11:32:19) > Le Mardi, Octobre 22, 2019 11:15 CEST, Jonas Smedegaard a > écrit: > > Quoting Xavier (2019-10-22 10:01:11) > > > Le Mardi, Octobre 22, 2019 09:10 CEST, Julien Puydt > > > a écrit: > > > > If you want to have ts-node, why not package it properly, with a

Bug#942849: Bluez Service Crash just after Register Advertisement

Package: Bluez Version: 5.48 I am writing an application which communicates to Bluez over dbus APIs. I have a wilink 8 bluetooth 4.2 Low energy chip on my board. I am using example-advertisement and exmaple-gatt-server from test folder of the project as a reference to write my applicaiton.

Bug#942848: designate: please make the build reproducible

Source: designate Version: 1:9.0.0-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: environment X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0] we noticed that designate could not be

Bug#941626: Bug#942464: buster-pu: package haveged/1.9.1-7

On 2019-10-22 10:47, Cyril Brulebois wrote: Adam D. Barratt (2019-10-17): On Wed, 2019-10-16 at 22:10 +0200, Nicolas Braud-Santoni wrote: > The proposed fix is exactly the same thing as was uploaded as > haveged/1.9.1-8: simply updating the AppArmor profile. Please > find the debdiff enclosed.

Bug#942847: cloudkitty: please make the build reproducible

Source: cloudkitty Version: 11.0.0-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: environment X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0] we noticed that cloudkitty could not be

Bug#920994: rocksdb linux only

Control: tags -1 + patch This debdiff suggest making the rocksdb plugin linux only. Mattias diff -Nru mariadb-10.3-10.3.18/debian/rules mariadb-10.3-10.3.18/debian/rules --- mariadb-10.3-10.3.18/debian/rules 2019-08-06 02:56:47.0 + +++ mariadb-10.3-10.3.18/debian/rules

Bug#941626: Bug#942464: buster-pu: package haveged/1.9.1-7

Adam D. Barratt (2019-10-17): > On Wed, 2019-10-16 at 22:10 +0200, Nicolas Braud-Santoni wrote: > > The proposed fix is exactly the same thing as was uploaded as > > haveged/1.9.1-8: simply updating the AppArmor profile. Please > > find the debdiff enclosed. > > Please go ahead. FTAOD: No

Bug#942396: nsis: increase NSIS_MAX_STRLEN to 8192

Well, if you prefer to handle that as one new separate package, that's fine with me of course. Personally I would favour severe/security concerns (e.g. the mentioned potential PATH variable corruption) over soft issues (e.g. installer size / upstream consistency), and hence would always enable

Bug#942846: ITP: jupyter-sphinx -- Enables running code embedded in Sphinx documentation

Package: wnpp Severity: wishlist Owner: Alexandre Marie * Package name: jupyter-sphinx Version : 0.2.1 Upstream Author : Jupyter Development Team * URL : https://github.com/jupyter/jupyter-sphinx * License : BSD 3-Clause "New" or "Revised" License

Bug#942768: [Pkg-pascal-devel] Bug#942768: lcl-units-2.0: file conflict with lazarus-src-2.0 (versin 2.0.2+dfsg-5)

Hey Abou, I was firstly upgrading from version 2.0.2+dfsg-4, however, even when I afterwards completely removed all lazarus*|lcl* packages and re-installed them, the conflict appeared. My understanding is that the two packages lcl-units-2.0 and lazarus-src-2.0 both contains the same file,

Bug#942795: libsoxr: Building with "nocheck" results in a broken soxr.pc pkg-config file

Package: src:libsoxr Followup-For: Bug #942795 Hi! Attaching a debdiff for your convenience :). Adrian -- .''`. John Paul Adrian Glaubitz : :' : Debian Developer - glaub...@debian.org `. `' Freie Universitaet Berlin - glaub...@physik.fu-berlin.de `-GPG: 62FF 8A75 84E0 2956 9546

Bug#942593: b2backend: fails with "can only concatenate str (not "bytes") to str"

Package: duplicity Version: 0.8.04-2 Followup-For: Bug #942593 Thanks Alexander. I will test the new version when it is available. Just in case anyone is interested, my proposed patch did not work properly. The following temporary patch is working for me: +++ b2backend.py2019-10-20

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

Le Mardi, Octobre 22, 2019 11:15 CEST, Jonas Smedegaard a écrit: > Quoting Xavier (2019-10-22 10:01:11) > > Le Mardi, Octobre 22, 2019 09:10 CEST, Julien Puydt > > a écrit: > > > If you want to have ts-node, why not package it properly, with a RFP > > > or ITP? > > > > > > I don't see the

Bug#942832: [Pkg-gtkpod-devel] Bug#942832: usbmuxd freezes when connecting iPhone6 while locked

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, 2019-10-22 at 03:14 -0500, Diego Escalante Urrelo wrote: > Forgot to add that when logging in into my GNOME session, if my iPhone > is connected, I experience a long freeze too. I thought it was mtp or > gvfs-gphoto2, but it's probably

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

Quoting Pirate Praveen (2019-10-22 10:55:55) > > > On Tue, Oct 22, 2019 at 10:26, Julien Puydt > wrote: > > Le mardi 22 octobre 2019 à 10:01 +0200, Xavier a écrit : > >> Le Mardi, Octobre 22, 2019 09:10 CEST, Julien Puydt < > >> julien.pu...@laposte.net > a

Bug#942590: mmdebstrap: Please support YAML configuration input file as alternative

Hi, Quoting Benjamin Drung (2019-10-18 18:24:53) > I like to use mmdebstrap to produce a golden live image. This includes > calling several custom hooks. My current command line call for the > proof-of-concept is already more than 1000 characters long. That makes > memorizing the full command

Bug#942845: ITP: breseq -- Find mutations relative to reference sequences

Package: wnpp Severity: wishlist * Package name: breseq Version : 0.34.0 Upstream Authors: 2010-2019 Jeffrey Barrick 2010-2019 Jordan Borges 2010-2019 Geoffrey Colburn 2010-2019 Alex Hu 2010-2019

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

Quoting Xavier (2019-10-22 10:01:11) > Le Mardi, Octobre 22, 2019 09:10 CEST, Julien Puydt > a écrit: > > If you want to have ts-node, why not package it properly, with a RFP > > or ITP? > > > > I don't see the point into packaging those together... > > > > JP > > It was an attempt to avoid

Bug#942843: libdebbugs-perl: fixed_date not set

Package: libdebbugs-perl Severity: wishlist Dear Maintainer, When querying bug status, the field fixed_date is not set. We would like to use it for statistical reasons. (Similar for found_date, but less important.) Furthermore, there doesn't seem to exist a data field telling when a bug has

Bug#942844: apt-cacher-ng: ArchLinux mirror list contains only https servers

Package: apt-cacher-ng Version: 3.2-2 Severity: normal Dear Maintainer, the list of ArchLinux mirrors was broken in https://salsa.debian.org/blade/apt-cacher-ng/commit/730b248471091b98c7363e40157953a4d81f89d5 After this commit, the list contains only https servers, which makes it useless,

Bug#942593: b2backend: fails with "can only concatenate str (not "bytes") to str"

tags 942593 + upstream forwarded https://bugs.launchpad.net/duplicity/+bug/1843995 thanks On Fri, 18 Oct 2019 17:50:58 +0100, Graham Cobb writes: >Attempt 1 failed. TypeError: can only concatenate str (not "bytes") to str as far as i can tell that bug was reported to upstream (see url above) and

Bug#942842: ITP: smoldyn -- spatial stochastic simulator for chemical reaction networks

Package: wnpp Severity: wishlist * Package name: smoldyn Version : 2.61 Upstream Authors: 2003-2019 Steve Andrews * URL : http://www.smoldyn.org/ * License : GPL-3 Description : spatial stochastic simulator for chemical reaction networks This is a

Bug#933644: icedtea-web: fails to select values in drop-down menus

Le 22/10/2019 à 10:30, MAG4 Piemonte a écrit : > Dear Maintainer, > this is the log of the bug: > > 2019/10/22 10:22:47:674 Exception in thread "AWT-EventQueue-1" > 2019/10/22 10:22:47:675 java.lang.NullPointerException > 2019/10/22 10:22:47:676 at >

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

Le mardi 22 octobre 2019 à 14:25 +0530, Pirate Praveen a écrit : > I don't think that is right characterization. NEW queue is not same > for all packages, javascript packages are treated differently from > other languages. ruby packages get cleared in days or maximum weeks. > Also ftp masters

Bug#942840: stretch-pu: package rustc 1.34.2+dfsg1-1~deb9u1

Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu This is a backport of buster's rustc, needed for Firefox ESR 68. It will be bootstrapped using the upstream binaries as the stage0 compiler, we can disable those and use the

Bug#942839: stretch-pu: package rust-cbindgen 0.8.7-1~deb9u1

Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu This is a backport of cbindgen from buster to stretch. It embeds a few build-deps, since they are statically linked anyway I didn't think it made sense to package all these

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

On Tue, Oct 22, 2019 at 10:26, Julien Puydt wrote: Le mardi 22 octobre 2019 à 10:01 +0200, Xavier a écrit : Le Mardi, Octobre 22, 2019 09:10 CEST, Julien Puydt < julien.pu...@laposte.net > a écrit: > If you want to have ts-node, why not package it

Bug#576744: gpscorrelate -r -n -v ignores '-n' and deletes all geodata in exif

Fixed in upstream git.

Bug#942837: live-task-recommended, not live-task-standard, should depend on firmware-ath9k-htc

Package: src:live-tasks Version: 11.0.1 Severity: normal Tags: patch Live Systems Maintainers, #934522 - live-task-recommended: add WiFi firmware from main: firmware-ath9k-htc: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934522 firmware-ath9k-htc was added as a dependency for

Bug#942838: stretch-pu: package nodejs-mozilla 8.11.1~dfsg-2~deb9u1

Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Hi, This is a backport of nodejs 8.11.1 from stretch-backports into stretch proper, to be used by the upcoming Firefox ESR 68, package under its own name to avoid problems in

Bug#942836: snd_hda_intel: No response from codec, resetting bus

Package: src:linux Version: 5.3.7-1 Severity: important Kernel log says "snd_hda_intel :00:1f.3: No response from codec, resetting bus: last cmd=0x20270500" Audio playback doesn't work, pavucontrol reports that headphone are plugged in even though they aren't. The bug didn't appear before

Bug#942834: live-task-recommended should not depend on iputils-ping or less

Package: src:live-tasks Version: 11.0.1 Severity: normal Tags: patch Live Systems Maintainers, live-task-recommended depends on several packages, including: * iputils-ping * less Since both of these are Priority: important, they should be removed from the dependency. Untested patch below.

Bug#620754: Bug #620754: dkms should depend on kernel gcc version

Although this is a report long time ago, I would like to clarify the situation: src:linux produces a bunch of image and headers packages, as well as some called linux-compiler-gcc-8-x86, but these packages contain the major version of GCC as well as the architecture names which could be a burden

<    1   2   3   >