Source: pytest-repeat
Followup-For: Bug #1064891
X-Debbugs-Cc: la...@debian.org
Hi Chris,
I'd neglected to file a bugreport for this, so my mistake here: I'd provided
a merge request[1] to fix this same reproducibility issue.
The approach I took was slightly different, removing the PYBUILD_BEFOR
Followup-For: Bug #1064858
Control: forwarded -1
https://salsa.debian.org/debian-astro-team/astroplan/-/merge_requests/2
Merge request opened; it appears that there is one more reproducibiliy issue
remaining in the SVG output from matplotlib: the ID generation scheme for
some clipPath elements va
Package: python-astroplan-doc
Severity: wishlist
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps randomness
Dear Maintainer,
I'm an occasional volunteer contributor to the Reproducible Builds[1] project,
and noticed recently that the python-astroplan-doc package failed[2] a
Followup-For: Bug #1064575
On Mon, 26 Feb 2024 00:22:44 +, I wrote:
> On Sat, 24 Feb 2024 12:33:50 +, I wrote:
> > Part of the documentation rendering process - I have not determined exactly
> > what yet - adds an 'alt' attribute when it does not exist, and generates a
> > randomized hex s
Followup-For: Bug #1064575
On Sat, 24 Feb 2024 12:33:50 +, I wrote:
> Part of the documentation rendering process - I have not determined exactly
> what yet - adds an 'alt' attribute when it does not exist, and generates a
> randomized hex string to use as the value of the attribute. This cau
Package: bind9-doc
Version: 1:9.19.21-1
Severity: wishlist
Tags: patch upstream
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness
Dear Maintainer,
I'm an occasional volunteer contributor to the Reproducible Builds[1] project,
and noticed recently that the bind9-doc package fa
Followup-For: Bug #1064648
My apologies - I meant to include a link to the doc-generator comparison
function that lacks an equal-popularity sort tiebreaker. It can be found at:
https://sources.debian.org/src/allegro5/2%3A5.2.9.1%2Bdfsg-1/docs/scripts/scan_examples.c/#L59-L61
Source: allegro5
Version: 2:5.2.9.1+dfsg-1
Severity: wishlist
Tags: upstream
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps fileordering
Dear Maintainer,
I'm an occasional volunteer contributor to the Reproducible Builds[1] project,
and noticed recently that your package a
Followup-For: Bug #1064638
Control: forwarded -1
https://salsa.debian.org/debian-remote-team/python-x2go/-/merge_requests/3
Source: python-x2go
Version: 0.6.1.4-1
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: buildpath
Dear Maintainer,
I'm an occasional volunteer contributor with the Reproducible Builds[1]
project, and noticed recently that the python-x2go-doc package faile
On Wed, 21 Feb 2024 at 15:52, Zygmunt Krynicki wrote:
>
>
> > Wiadomość napisana przez James Addison w dniu
> > 21.02.2024, o godz. 15:49:
> >
> > Source: snapd
> > Version: 2.61.1-1
> > Severity: wishlist
> >
> > ... [snip] ...
> >
On Sun, 25 Feb 2024 at 08:07, Sean Whitton wrote:
> ...
> On Sun 25 Feb 2024 at 08:44am +01, Holger Wansing wrote:
> > ...
> > Am 24. Februar 2024 20:15:41 MEZ schrieb James Addison
> > :
> >>
> >>(this may relate closely to #915583)
> >>
>
Followup-For: Bug #1064607
Control: tags -1 patch
Control: forwarded -1
https://salsa.debian.org/science-team/python-vispy/-/merge_requests/2
Source: python-vispy
Version: 0.14.1-2
Severity: important
Dear Maintainer,
In the debian/rules build instructions for python-vispy-doc, the make step[1]
that builds the package documentation (by using a Makefile in the 'doc' dir) is
followed by another command, separated by a semicolon:
HOME=
Package: debian-policy
Version: 4.6.2.1
Severity: normal
X-Debbugs-Cc: spwhit...@spwhitton.name, hwans...@mailbox.org,
debian-...@lists.debian.org
(this may relate closely to #915583)
Some of the web resources referenced by the online[1] copy of the Debian policy
manual seem to return HTTP 404 r
Package: python-pyswarms-doc
Severity: wishlist
Tags: patch upstream
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness
Dear Maintainer,
I'm an occasional volunteer contributor to the Reproducible Builds[1]
project, and recently noticed that your package failed an automated te
Followup-For: Bug #1036828
X-Debbugs-Cc: k...@debian.org
On Sat, 24 Feb 2024 11:01:31 +, I wrote:
> Should this bug be closed? (the logic to skip the experimental/sid firmware
> image build during non-testing builds is in place for both bookworm and
> trixie)
Nope, it looks like I've misund
Followup-For: Bug #1036828
X-Debbugs-Cc: k...@debian.org
Hi Cyril,
Should this bug be closed? (the logic to skip the experimental/sid firmware
image build during non-testing builds is in place for both bookworm and trixie)
Regards,
James
Source: python-fudge
Version: 1.1.1-2
Severity: wishlist
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps
Dear Maintainer,
I'm an occasional volunteer contributor with the Reproducible Builds[1]
project, and noticed that the python-fudge package failed an automated
reproduci
Package: python-flask-limiter-doc
Followup-For: Bug #1064519
Control: forwarded -1
https://salsa.debian.org/python-team/packages/flask-limiter/-/merge_requests/2
Package: python-flask-limiter-doc
Version: 3.5.1-1
Severity: wishlist
Tags: patch
Dear Maintainer,
I'm an occasional volunteer contributor to the Reproducible Builds[1] project,
and recently noticed that python-flask-limiter-docs package failed to build
reproducibly during automated reproducible
Package: lists.debian.org
Severity: important
Dear Maintainer,
Some recent discussion from the Debian mailing lists appears to be missing
from the mailing list search engine[1] indices.
For example:
* Searching for 'Debian'[2] in the debian-devel mailing list, results sorted
by date, curr
Followup-For: Bug #1064404
Control: forwarded -1 https://salsa.debian.org/debian/snapd/-/merge_requests/7
Control: tags -1 patch
Control: submitter -1 reproducible-bui...@lists.alioth.debian.org
Control: user reproducible-bui...@lists.alioth.debian.org
Control: usertag -1 timezone
Source: snapd
Version: 2.61.1-1
Severity: wishlist
Dear Maintainer,
I'm an occasional volunteer with the Reproducible Builds[1] project, and
recently noticed that the snapd package failed automated reproducible build
testing[2] on Debian.
One cause of non-reproducibility for the package appears
Followup-For: Bug #1028125
X-Debbugs-Cc: r...@debian.org
Control: reassign -1 file
Control: affects -1 lintian
This filetype ambiguity seems to be reported by the 'file' command that
lintian invokes[1] to identify the file type for source files that it scans.
[1] -
https://sources.debian.org/src
Followup-For: Bug #1058959
X-Debbugs-Cc: alexandre.deti...@gmail.com
Control: tags -1 pending
Followup-For: Bug #1029555
X-Debbugs-Cc: rol...@debian.org
Control: close -1 lintian/2.117.0
Resolved in lintian 2.117.0 as uploaded to unstable (and has migrated to
testing / trixie).
Refs:
-
https://salsa.debian.org/lintian/lintian/-/commit/2d5c8528f490edb1339fd0a65b3e503c32b2c366
-
http
Followup-For: Bug #1042955
Control: forwarded -1 https://github.com/sqlalchemyorg/zzzeeksphinx/issues/23
Source: qtbase-opensource-src-gles
Followup-For: Bug #1064054
Control: found -1 5.12.2+dfsg-1
Control: tags -1 patch
diff --git a/src/gui/util/qktxhandler.cpp b/src/gui/util/qktxhandler.cpp
index 0d98e97453..6a79e55109 100644
--- a/src/gui/util/qktxhandler.cpp
+++ b/src/gui/util/qktxhandler.cpp
@@
Source: qtbase-opensource-src
Followup-For: Bug #1064053
Control: found -1
Control: found -1 5.12.2+dfsg-1
Replying to set the earliest version affected from the advisory blogpost[1],
and to (re)attach the patch from the duplicate bugreport.
[1]
https://www.qt.io/blog/security-advisory-potentia
Followup-For: Bug #1064052
Control: fixed -1 6.6.2+dfsg-1
Source: qtbase-opensource-src
Followup-For: Bug #1064056
Control: forcemerge 1064053 -1
Duplicate of #1064053; force merging this bugreport into that one.
Source: qtbase-opensource-src
Version: 5.15.10+dfsg-6
Severity: normal
Tags: patch security
Dear Maintainer,
Security advisory CVE-2024-25580, a buffer overflow affecting KTX image
handling in QT, has been announced[1], and the announcement includes patches
for various versions of QT including th
Package: thunderbird
Followup-For: Bug #1051551
X-Debbugs-Cc: alx.manpa...@gmail.com, c.schoen...@t-online.de
On Sat, 09 Sep 2023 19:16:32 +0200, Alex wrote:
> Since some recent version, every time I delete a mail, the list scrolls
> up a few messages, and I need to manually scroll down again, eve
Package: libpython3.12-dev
Version: 3.12.1-2
Severity: minor
Tags: upstream newcomer
Dear Maintainer,
Some of the C code contained within the headerfiles from libpython3.12-dev
appears not to be compliant with C90 standards (examples: [1][2]).
This contributed to a build failure[3] for the onboa
Source: lomiri-ui-toolkit
Followup-For: Bug #1060761
X-Debbugs-Cc: sunwea...@debian.org, mity...@debian.org
Hi Mike, Dmitry,
Is the second patch here (to disable the failing unit test) likely to be
uploaded to unstable in the nearish future?
I'm eager to see the results of some build reproducibi
Package: gitlab-cli
Version: 1:4.3.0-1
Severity: important
X-Debbugs-Cc: j...@jp-hosting.net
Dear Maintainer,
The manual page for the python-gitlab CLI utility in the gitlab-cli binary
package contains a Python stacktrace within the 'description' section, instead
of the expected help content:
Followup-For: Bug #1026381
X-Debbugs-Cc: la...@debian.org, reproducible-b...@lists.alioth.debian.org
Control: block -1 1057432
Control: close -1
Based on recent reproducible build testing history[1] of this package, and for
Debian versions after the fix for #1057432 became available (excludes both
Followup-For: Bug #1010279
X-Debbugs-Cc: la...@debian.org, reproducible-b...@lists.alioth.debian.org
Control: block -1 1056291
Control: close -1
Based on recent reproducible build testing history[1] of this package, and for
Debian versions after the fix for #1056291 became available (excludes both
Followup-For: Bug #1058959
Control: forwarded -1
https://salsa.debian.org/science-team/python-quantities/-/merge_requests/1
Followup-For: Bug #1063724
Control: forwarded -1 https://trac.osgeo.org/postgis/ticket/5666
Package: postgresql-16-postgis-3-scripts
Version: 3.4.1+dfsg-1
Severity: wishlist
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps
Dear Maintainer,
I'm an occasional volunteer with the Reproducible Builds[1] project, and
noticed recently that the postgresql-16-postgis-3-scri
Hi Étienne,
On Fri, 9 Feb 2024 at 20:54, Étienne Mollier wrote:
> James Addison, on 2024-02-09:
> > When Sphinx builds documentation, by default it will emit a Python repr() of
> > the manager_config argument, causing the hostname of the build host to be
> > included.
>
included.
.
We can solve that by instructing the Sphinx autodoc extension to retain the
textual representation of argument lists as they are found in the source
code, instead of evaluated and repr'd equivalents.
Author: James Addison
---
Bug-Debian: https://bugs.debian.org/1063542
--
Package: python-parsl-doc
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: hostname
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
Dear Maintainer,
I'm an occasional volunteer with the Reproducible Builds[1] project, and
recently noticed that the
Source: stellarium
Followup-For: Bug #1060802
X-Debbugs-Cc: tom...@debian.org, mity...@debian.org
> stellarium 23.4-1 added a new build-dependency on qtwebengine5-dev, which
> prevents it from building on some release architectures (and all non-release
> ones).
Would 'qtwebengine5-dev | libqt5web
Followup-For: Bug #1061630
Control: forwarded -1
https://salsa.debian.org/vim-team/vim-debian/-/merge_requests/15
Control: tags -1 patch
Package: vim-runtime
Version: 2:9.1.0016-1
Severity: minor
Dear Maintainer,
This is a cosmetic issue that affects syntax highlighting of DEB822-format
apt source-list files.
Directory paths within these files can contain substrings that are incorrectly
matched by some of the deb822sources.vim sy
Followup-For: Bug #1059805
X-Debbugs-Cc: r...@debian.org, t...@libreoffice.org
PS: Reminded by a thread[1] on the RB mailing lists about potential issues
with SOURCE_DATE_EPOCH reader code, and from reading the relevant strtoul(3)
manual: the patch I provided lacks error-checking, and should be up
Source: ksh93u+m
Severity: wishlist
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness
Dear Maintainer,
I'm an occasional volunteer with the Reproducible Builds[1] project, and
noticed recently that the ksh93u+m Debian package failed build reproducibility
testing[2] on amd64.
Source: geophar
Followup-For: Bug #1059576
X-Debbugs-Cc: georges.khazna...@orange.fr
Ok, thanks Georges.
Please note: there is a possible bug with reprotest reported on Salsa CI[1]
that means that reprotest does not vary the timezone between its comparison
builds.
If you begin seeing reprotest f
Followup-For: Bug #1059631
X-Debbugs-Cc: mity...@debian.org
On Wed, 10 Jan 2024 00:01:40 +0300, Dmitry wrote:
> On Tue, Jan 09, 2024 at 06:40:35PM +0000, James Addison wrote:
> [ ... snip ... ]
> > My sense is that with the patch here and also the patch from #1059592
> > app
Followup-For: Bug #1059631
X-Debbugs-Cc: mity...@debian.org
Hi Dmitry - could you recommend whether there's anything I should do next for
this bug?
As context: the patch was accepted upstream, but with modifications that make
it cleaner for Qt6.6 albeit in a non-5.15.x compatible way. I realize
Followup-For: Bug #1059805
X-Debbugs-Cc: r...@debian.org, t...@libreoffice.org
On Thu, 4 Jan 2024 19:40:09, I wrote:
> Please note: I haven't tested the patch yet, hence not adding a
> 'patch' tag to this bug yet - I'm building libreoffice locally after
> installing the patched+compiled clucene pa
Followup-For: Bug #819914
X-Debbugs-Cc: p...@passoire.fr
Control: forwarded -1 https://github.com/ImageMagick/ImageMagick/pull/1496
Control: tags -1 fixed-upstream
Control: fixed -1 imagemagick/8:6.9.11.24+dfsg-1
Control: close -1
Handling of SOURCE_DATE_EPOCH has been implemented by upstream, and
Followup-For: Bug #859572
X-Debbugs-Cc: solo-debianb...@goeswhere.com,
bugs-debian-20170...@james-ross.co.uk
Control: reassign -1 libxml2
Control: affects -1 libxslt1.1 xsltproc
Control: forwarded -1 https://gitlab.gnome.org/GNOME/libxslt/-/issues/37
Control: tags -1 fixed-upstream
Control: fixed
Package: libreoffice-writer
Followup-For: Bug #974220
X-Debbugs-Cc: filh...@gmail.com, mariojos...@yahoo.com.br
Hi Claudio, Mario,
Do either of you have security software called warsaw installed, for example
to support internet banking?
There is an open bug[1] in the LibreOffice bugtracker since
On Wed, 3 Jan 2024 at 20:32, James Addison wrote:
>
> (with apologies for forgetting to cc Rene on my previous message)
>
> On Wed, 3 Jan 2024 at 19:45, James Addison wrote:
> >
> > On Wed, 3 Jan 2024 at 16:59, Thorsten Behrens wrote:
> > >
> > > So
Source: debian-installer
Version: 20230607+deb12u4
Severity: wishlist
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org, rclo...@rclobus.nl,
alpernebiya...@gmail.com
Dear Maintainer / Hi Cyril,
I'm an occasional contrib
(with apologies for forgetting to cc Rene on my previous message)
On Wed, 3 Jan 2024 at 19:45, James Addison wrote:
>
> On Wed, 3 Jan 2024 at 16:59, Thorsten Behrens wrote:
> >
> > Source: clucene-core
> > Followup-For: Bug #1059805
> > X-Debbugs-Cc: r...@de
On Wed, 3 Jan 2024 at 16:59, Thorsten Behrens wrote:
>
> Source: clucene-core
> Followup-For: Bug #1059805
> X-Debbugs-Cc: r...@debian.org, t...@libreoffice.org
>
> James Addison wrote:
> > And so a question: could the fix be achieved by changing the default
> > v
Source: clucene-core
Followup-For: Bug #1059805
X-Debbugs-Cc: r...@debian.org, thorsten.behr...@allotropia.de
On Mon, 1 Jan 2024 18:24:19 +0100, Rene wrote:
> LibreOffice created a patch to clucene to make their help pages
> reproducible. Maybe we should include it here? (libreoffice in Debian
> u
Followup-For: Bug #1059917
I've reported the Makefile-dependency-graph issue upstream at:
https://github.com/Guake/guake/issues/2219
Source: guake
Version: 3.10-1
Severity: normal
User: reproducible-bui...@lists.alioth.debian.org
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
Dear Maintainer,
I'm an occasional volunteer for the Reproducible Builds[0] project,
and recently noticed that the quake package failed to build
Followup-For: Bug #1059631
Control: tags -1 fixed-upstream
> Control: forwarded -1 https://codereview.qt-project.org/c/qt/qttools/+/527972
This fix has been merged upstream; I've also offered what I think is a further
cleanup[1], but it does not affect the behaviour of the code (only readability
Package: qhelpgenerator-qt5
Followup-For: Bug #1059592
Control: tags -1 fixed-upstream
Please note: it appears that a fix[1] that addresses this same problem is
already included in v6.5.0 of qttools.git upstream.
[1] - https://codereview.qt-project.org/c/qt/qttools/+/416699
Package: qhelpgenerator-qt5
Followup-For: Bug #1059631
X-Debbugs-Cc: mity...@debian.org
Control: forwarded -1 https://codereview.qt-project.org/c/qt/qttools/+/527972
Hi Dmitry,
On Sat, 30 Dec 2023 22:50:47, Dmitry wrote:
> Thank you for the patch!
>
> Any chance you can forward it to upstream Qt?
fact that
only the main.cpp code site was confirmed affected.
Description: helpgenerator: clear UTC offset to zero when reading
SOURCE_DATE_EPOCH value
Author: James Addison
Bug-Debian: https://bugs.debian.org/1059631
---
qttools-opensource-src-5.15.10.orig/src/assistant/help
Package: qhelpgenerator-qt5
Followup-For: Bug #1059631
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
On Fri, 29 Dec 2023 15:30:58, I wrote:
> Inspecting the patch from #875847 and the values that appear in the diffoscope
> output from the build logs: the SOURCE_DATE_EPOCH value of the bu
Package: qhelpgenerator-qt5
Version: 5.15.2-3
Severity: wishlist
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timezone
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
Dear Maintainer,
Looking at some recent Reproducible Build[1] test results[2] for the Debian
openorienteeri
Followup-For: Bug #1059592
Description: helpgenerator: populate FileAttributeSetTable in sorted attribute
ID order.
Author: James Addison
Bug-Debian: https://bugs.debian.org/1059592
---
qttools-opensource-src-5.15.10.orig/src/assistant/qhelpgenerator/helpgenerator.cpp
+++
qttools-opensource
Package: qhelpgenerator-qt5
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
Dear Maintainer,
I'm an occasional contributor to Debian's reproducible builds, and noticed
a recent reproducib
Source: geophar
Version: 18.10+dfsg1-1
Severity: wishlist
Tags: patch
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
Control: user -1 reproducible-bui...@lists.alioth.debian.org
Dear Maintainer,
I'm an occasional volunteer to the Reproducible Builds[0] project and
noticed that your packa
Source: paraview
Followup-For: Bug #983584
X-Debbugs-Cc: vagr...@reproducible-builds.org,
reproducible-b...@lists.alioth.debian.org
Control: fixed -1 paraview/5.11.0~rc1+dfsg-1
Control: close -1
The patch provided has been included into the Debian package; however note
also that the third party l
Source: python-django-health-check
Followup-For: Bug #1026381
X-Debbugs-Cc: la...@debian.org, reproducible-b...@lists.alioth.debian.org
I believe that this bug should disappear on build hosts that are using
dh-python version 6.20231204 or greater, where a fix for bug #1057432 means
that files with
Source: python-iso8601
Followup-For: Bug #1010279
X-Debbugs-Cc: la...@debian.org, reproducible-b...@lists.alioth.debian.org
>From some recent build results, it seems there is a '.hypothesis' directory
that is also created within the project's directory at build-time, so it would
also be worth filt
Source: strace
Followup-For: Bug #896016
X-Debbugs-Cc: la...@debian.org, reproducible-b...@lists.alioth.debian.org
Control: fixed -1 strace/4.26-0.1
Control: close -1
Source: strace
Followup-For: Bug #896016
X-Debbugs-Cc: la...@debian.org, reproducible-b...@lists.alioth.debian.org
Looking at the Reproducible Builds build history[1] for strace on Debian,
all _successful_ builds I see between Y2019 and today, across all four
architectures listed (amd64, arm64, ar
Followup-For: Bug #1027988
Control: forwarded -1
https://gitlab.com/ubports/development/core/click/-/issues/6
Followup-For: Bug #738575
X-Debbugs-Cc: raykinsell...@gmail.com
On Thu, 16 Nov 2023 12:47:40 +, James wrote:
> I've been thinking more about how to improve the chances that the
> package could be accepted into Debian -- my suggestion would be to
> rebuild it and upload it to the mentors[1] por
Followup-For: Bug #1034867
Control: fixed -1 smplayer/23.6.0+ds0-1
Control: close -1
On Sat, 09 Dec 2023 22:18:12 + I wrote:
> On Tue, 14 Nov 2023 20:31:38 + I wrote:
> > The separate issue of mplayer breakage when using an invalid wid parameter
> > in
> > combination with the nokeepaspec
Source: burp
Followup-For: Bug #1057880
X-Debbugs-Cc: kapo...@melix.org
Thank you, Jérémy.
Source: burp
Followup-For: Bug #1057880
X-Debbugs-Cc: z...@debian.org, broo...@debian.org
Dear Maintainer,
Attached is a patch that includes the changes applied by Ubuntu[1] to remove
the problematic unit test version check from their source package.
For visibility, on cc are Shengjing Zhu (as t
Source: burp
Version: 3.1.4-3
Severity: serious
Tags: ftbfs
Justification: fails to build from source (but built successfully in the past)
X-Debbugs-Cc: j...@jp-hosting.net
Dear Maintainer,
The unit tests for 'burp' perform a version check[1] on zlib to decide[2]
between a choice of zip-related a
Package: smplayer
Followup-For: Bug #1034867
On Tue, 14 Nov 2023 20:31:38 + I wrote:
> The separate issue of mplayer breakage when using an invalid wid parameter in
> combination with the nokeepaspect option still seems replicable to me using
> mplayer at version 1.5+svn38423-2+b1 -- a version
Followup-For: Bug #1054290
Sorry, I made an important mistake in my phrasing about these two packages:
> * mupen64plus-core - this appears unaffected in Debian; it declares a
>build-time dependency on libminizip-dev, and the build system uses this
>when available. I've verified that by
Followup-For: Bug #1054290
Updates on some other codebases where minizip appears vendored in Debian source
packages:
* gdal - the fix for minizip is included in upstream version 3.8.0 and a
packaged version of that release has been accepted into Debian unstable.
* mupen64plus-core - this
On Thu, 16 Nov 2023 at 09:57, Ray Kinsella wrote:
>
> On Wed, 15 Nov 2023 at 22:30, James Addison wrote:
>>
>> On Wed, 15 Nov 2023 at 21:57, Ray Kinsella wrote:
> [...]
> I spent a not insignificant amount of time devising this solution, to get
> "Debian Support
Followup-For: Bug #1035392
Control: close -1
(closing; I'll likely re-attempt an install on the same hardware with a more
recent release of Debian in future, for comparison purposes)
how widely-adopted they were. It was the
energy-efficiency focus of them that gathered my interest in the first
place, FWIW.
> On Wed, 15 Nov 2023 at 12:27, James Addison wrote:
>>
>> Followup-For: Bug #738575
>> X-Debbugs-Cc: raykinsell...@gmail.com
>>
>>
Followup-For: Bug #738575
X-Debbugs-Cc: raykinsell...@gmail.com
If I understand correctly, then Ray's libx1000 library[1] provides a way to
work around this in software. It uses some LD_PRELOAD magic, and from what I
remember, it's worth being careful when using that approach.
I opened an RFP[2]
Followup-For: Bug #959046
Control: submitter -1 ja...@reciperadar.com
Package: wnpp
Followup-For: Bug #1022923
Control: submitter -1 ja...@reciperadar.com
Source: smplayer
Followup-For: Bug #1034867
Using smplayer 23.6.0+ds0-1 with mplayer does now play video under Wayland as
expected; thank you!
The separate issue of mplayer breakage when using an invalid wid parameter in
combination with the nokeepaspect option still seems replicable to me using
Source: zlib
Followup-For: Bug #1054290
I now think that patching vendored minizip code in libxlsxwriter would not help
because it specifies the 'USE_SYSTEM_MINIZIP' define at build-time[1] in
combination with a build-time dependency[2] on 'libminizip-dev' to link to the
required library functions
Package: libgtk-3-0
Followup-For: Bug #1034289
Please note: inkscape upstream currently plans to workaround this issue by
disabling the GTK XIM input method when it is detected as selected in the
user's environment settings. That change is currently planned[1] to be
included in the v1.3.1 release
Source: zlib
Followup-For: Bug #1054290
X-Debbugs-Cc: david.dooling+deb...@docker.com, car...@debian.org, Debian
Security Team
On Fri, 03 Nov 2023 14:26:54 +, I wrote:
> A few packages referenced 'quazip' - a fork of minizip. Of those, only
> 1 (one) appears to support 64-bit zip files, and
Source: zlib
Followup-For: Bug #1054290
X-Debbugs-Cc: david.dooling+deb...@docker.com, car...@debian.org, Debian
Security Team
On Tue, 31 Oct 2023 13:13:00 -0500, David wrote:
> Thanks for that analysis, James.
...
> nodejs-18.13.0+dfsg1:
> The Node.js source code includes a copy of the zlib sou
Source: firmware-nonfree
Followup-For: Bug #1035505
X-Debbugs-Cc: didi.deb...@cknow.org, 1029...@bugs.debian.org, k...@debian.org
Control: forwarded -1
https://salsa.debian.org/kernel-team/firmware-nonfree/-/merge_requests/65
Control: tags -1 patch
Please find an updated attempt to handle spaces
Source: zlib
Followup-For: Bug #1054290
X-Debbugs-Cc: car...@debian.org, Debian Security Team
After reading the minizip/zip.c code[1], I think that the vulnerable function
is exposed for external linkage by any of the 'zipOpenNewFile*' functions.
Given that, I code-searched[2] for 'zipOpenFile'
101 - 200 of 523 matches
Mail list logo
