Bug#944538: buster-pu: package ganeti-instance-debootstrap/0.16-6.1

2019-11-23 Thread Julien Cristau
On Mon, Nov 11, 2019 at 10:40:58AM -0500, Antoine Beaupre wrote: > diff -Nru ganeti-instance-debootstrap-0.16/debian/changelog > ganeti-instance-debootstrap-0.16/debian/changelog > --- ganeti-instance-debootstrap-0.16/debian/changelog 2018-06-20 > 06:57:18.0 -0400 > +++

Bug#944348: buster-pu: package schleuder/3.4.0-2+deb10u1

2019-11-23 Thread Julien Cristau
Control: tag -1 confirmed On Fri, Nov 08, 2019 at 10:57:51AM +, Georg Faerber wrote: > Schleuder in buster is affected by various problems, which I would like to fix > with this proposed update: > > - Schleuder fails to recognize keywords in mails with "protected headers" > and >

Bug#944099: CVE-2019-14433 / OSSA-2019-003: buster-pu: package nova/2:18.1.0-6 -> 18.1.0-6+deb10u1

2019-11-23 Thread Julien Cristau
Control: tag -1 moreinfo On Mon, Nov 04, 2019 at 11:53:52AM +0100, Thomas Goirand wrote: > We would like to update Nova in Buster for 2 reasons. First, there's > OSSA-2019-003 / CVE-2019-14433 which we would like to fix. Second, > in non-interactive mode, upgrading Nova can lead to some

Bug#942201: buster-pu: package samba/2:4.9.11+dfsg-1~deb10u1

2019-11-23 Thread Julien Cristau
Control: tag -1 moreinfo On Mon, Jul 08, 2019 at 10:23:49AM +0200, Mathieu Parent wrote: > samba (2:4.9.11+dfsg-1~deb10u1) unstable; urgency=medium "unstable" seems like the wrong target. > > [ Mathieu Parent ] > * New upstream release > - Bump ldb Build-Depends to 2:1.5.1+really1.4.7

Bug#931607: buster-pu: package samba/2:4.9.11+dfsg-1~deb10u1

2019-11-23 Thread Julien Cristau
Control: tag -1 moreinfo On Mon, Jul 08, 2019 at 10:23:49AM +0200, Mathieu Parent wrote: > ldb (2:1.5.1+really1.4.7-1~deb10u1) unstable; urgency=medium > > [ Salsa Pipeline ] > * Update salsa CI pipeline > > [ Mathieu Parent ] > * New upstream version 1.4.7 > - Update symbols (no

Bug#941803: debian-policy: dependencies on font packages

2019-11-22 Thread Julien Cristau
On Sat, Oct 05, 2019 at 09:44:25PM +0200, Stephen Kitt wrote: > Policy section 11.8.5, point 1 says > > > If one or more of the fonts so packaged are necessary for proper > > operation of the package with which they are associated the font > > package may be Recommended; if the fonts merely

Bug#945041: openfoam: severe build time regression

2019-11-18 Thread Julien Cristau
Source: openfoam Version: 1906+dfsg1-1 Severity: serious Hi, Looking at https://buildd.debian.org/status/logs.php?pkg=openfoam the build time for your package increased unreasonably in this version. Cheers, Julien

Bug#944351: Providing minor version somewhere in /etc/os-release in buster

2019-11-16 Thread Julien Cristau
On Thu, Nov 14, 2019 at 08:15:36PM +0100, Santiago Vila wrote: > On Thu, Nov 14, 2019 at 07:10:08PM +0100, Julien Cristau wrote: > > On Fri, Nov 08, 2019 at 01:17:20PM +0100, Santiago Vila wrote: > > > I received this bug from one of the ansible upstream authors:

Bug#944351: Providing minor version somewhere in /etc/os-release in buster

2019-11-14 Thread Julien Cristau
On Fri, Nov 08, 2019 at 01:17:20PM +0100, Santiago Vila wrote: > I received this bug from one of the ansible upstream authors: > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931197 > > asking to include information about minor version somewhere in > /etc/os-release. > What I'm missing

Bug#890330: missing some jessie d-i files in http://snapshot.debian.org/archive/debian/20170506T092656Z/dists/jessie/main/installer-amd64/

2019-11-13 Thread Julien Cristau
Control: tag -1 moreinfo On Tue, Feb 13, 2018 at 02:28:00PM +, Steve McIntyre wrote: > Package: snapshot.debian.org > Severity: normal > > Hi, > > Just had reports in debian-user that snapshot fallback for the 8.8.0 > jigdos is failing: > >

Bug#737359: snapshot.debian.org: please remove non-redistributable mediawiki versions

2019-11-13 Thread Julien Cristau
Control: tag -1 moreinfo On Sun, Feb 02, 2014 at 01:26:54AM +0100, Thorsten Glaser wrote: > Package: snapshot.debian.org > Severity: normal > > Hi, > > in response to the lintian post, please remove the following > versions (all files, source and binary) of src:mediawiki: > > *

Bug#944362: hgsubversion: incompatible with mercurial 5.2

2019-11-08 Thread Julien Cristau
Package: hgsubversion Version: 1.9.3+git20190419+6a6ce-1 Severity: grave Tags: bullseye sid The current version of hgsubversion in sid doesn't work with hg 5.2, as evidence by the autopkgtest failing. Specifically, the mercurial.repository module moved to mercurial.interfaces.repository.

Bug#944306: libmailutils6: unversioned files in shared lib package

2019-11-07 Thread Julien Cristau
Package: libmailutils6 Version: 1:3.7-2 Severity: important The libmailutils6 package contains these files: /usr/lib/x86_64-linux-gnu/mailutils /usr/lib/x86_64-linux-gnu/mailutils/editheader.so /usr/lib/x86_64-linux-gnu/mailutils/list.so /usr/lib/x86_64-linux-gnu/mailutils/moderator.so

Bug#944292: black: new upstream release (19.10b0)

2019-11-07 Thread Julien Cristau
Package: black Version: 19.3b0-1 Severity: wishlist X-Debbugs-Cc: sylves...@debian.org A new release is available: https://github.com/psf/black/releases/tag/19.10b0 [filing due to https://www.mercurial-scm.org/repo/hg/file/5.2/tests/hghave.py#l1001 requiring that version] Thanks, Julien

Bug#944186: dehydrated 0.3.1-3+deb9u3 flagged for acceptance

2019-11-05 Thread Julien Cristau
package release.debian.org tags 944186 = stretch pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian stretch. Thanks for your contribution! Upload details == Package: dehydrated Version:

Bug#941126: stretch-pu: package dehydrated/0.6.2-2+deb9u1

2019-11-04 Thread Julien Cristau
Control: tag -1 moreinfo On Wed, Sep 25, 2019 at 10:59:58AM +0200, Mattia Rizzolo wrote: > Package: release.debian.org > User: release.debian@packages.debian.org > Usertags: pu > Tags: stretch > > Hi SRM, > > It was brought to my attention that stretch's version of dehydrated has > a few

Bug#887831: jigdo-file: Jigdo .template file and resulting ISO are only verified by MD5

2019-10-22 Thread Julien Cristau
Control: severity -1 normal On Tue, Oct 22, 2019 at 03:29:54PM -0400, Antoine Beaupré wrote: > Control: severity 887831 grave > That is entirely unjustified afaict, and doesn't help your case. Cheers, Julien

Bug#912524: snapshot.debian.org is unreachable from (apparently) 18.128.0.0/9

2019-10-21 Thread Julien Cristau
On Fri, Nov 02, 2018 at 09:15:12AM +, Peter Palfrader wrote: > On Thu, 01 Nov 2018, Noah Meyerhans wrote: > > > It was pointed out on IRC that this is intentional, per > > https://salsa.debian.org/dsa-team/mirror/dsa-puppet/blob/master/modules/roles/manifests/snapshot_web.pp > > > > IMO

Bug#942217: nmu: libapache2-mod-security2_2.9.3-1

2019-10-15 Thread Julien Cristau
On Tue, Oct 15, 2019 at 13:15:22 +0200, Alberto Gonzalez Iniesta wrote: > On Sat, Oct 12, 2019 at 05:01:38PM +0200, Alberto Gonzalez Iniesta wrote: > > On Sat, Oct 12, 2019 at 03:57:14PM +0100, Adam D. Barratt wrote: > > > Control: tags -1 + moreinfo > > > > > > On Sat, 2019-10-12 at 15:16

Bug#929214: release.debian.org - Add package constraint for cloud images

2019-10-12 Thread Julien Cristau
On Thu, Jun 13, 2019 at 07:57:58PM +0200, Bastian Blank wrote: > Hi > > On Wed, Jun 12, 2019 at 08:01:08PM +0200, Bastian Blank wrote: > > On Wed, Jun 12, 2019 at 05:57:00PM +0200, Ivo De Decker wrote: > > > If you create such a package, having a binary per architecture as you > > > describe,

Bug#939890: buster-pu: package rpcbind/1.2.5-0.3+deb10u1

2019-10-12 Thread Julien Cristau
Control: tag -1 - moreinfo Control: tag -1 + confirmed On Thu, Oct 03, 2019 at 04:58:23PM -0700, Josue Ortega wrote: > Hi, > > I've included the recommended changes for the fix: > > rpcbind (1.2.5-0.3+deb10u1) buster; urgency=medium > > * Add 00-rmt-calls.patch (Closes: #939877): > + Add

Bug#939526: buster-pu: package inn2/2.6.3-1+deb10u1

2019-10-12 Thread Julien Cristau
Control: tag -1 - moreinfo Control: tag -1 + confirmed On Sun, Oct 06, 2019 at 01:34:19AM +0200, Marco d'Itri wrote: > Control: retitle -1 buster-pu: package inn2/2.6.3-1+deb10u2 > > Bug #931256 explains in detail why TLS is broken in inn2 in buster, due > to the policies of newer openssl

Bug#934206: buster-pu: package golang-github-docker-docker-credential-helpers/0.6.1-2+deb10u1

2019-10-12 Thread Julien Cristau
Control: tag -1 - moreinfo Control: tag -1 + confirmed On Thu, Aug 08, 2019 at 02:47:55PM +0700, Arnaud Rebillout wrote: > The debdiff attached brings in an upstream patch to fix > CVE-2019-1020014, hence closes #933801. > > This is my first contribution to Debian Stable, please check for >

Bug#940059: buster-pu: package publicsuffix/20190904.1802-0+deb10u1

2019-10-12 Thread Julien Cristau
Control: retitle -1 buster-pu: package publicsuffix/20190925.1705-0+deb10u1 Control: tag -1 confirmed On Wed, Sep 11, 2019 at 04:16:47PM -0400, Daniel Kahn Gillmor wrote: > Please consider an update to publicsuffix in debian buster. > Go ahead. Cheers, Julien

Bug#940476: buster-pu: package tmpreaper/1.6.14+deb10u1

2019-10-12 Thread Julien Cristau
Control: tag -1 confirmed On Mon, Sep 16, 2019 at 11:28:11AM +0200, Thijs Kinkhorst wrote: > diff -Nru tmpreaper-1.6.14/debian/changelog > tmpreaper-1.6.14+deb10u1/debian/changelog > --- tmpreaper-1.6.14/debian/changelog 2019-01-11 13:27:15.0 +0100 > +++

Bug#939354: buster-pu: package capistrano/3.11.0-3+deb10u1

2019-10-12 Thread Julien Cristau
Control: tag -1 confirmed On Tue, Sep 03, 2019 at 09:49:51PM +0100, Samuel Henrique wrote: > Capistrano is a widely used tool for deployments, one of the steps > of a deployment is to remove the old releases, this consists in removing > the last Nth releases' folders. > > Recently a bug has been

Bug#939313: buster-pu: package swi-prolog/8.0.2+dfsg-3

2019-10-12 Thread Julien Cristau
Control: tag -1 confirmed On Tue, Sep 03, 2019 at 01:51:42PM +0500, Lev Lamberov wrote: > SWI-Prolog upsteam migrated to HTTPS (from HTTP). Unfortunately, > because of that package installation of SWI-Prolog packages doesn't > work now (please, see #939257). I've prepared a backport of an >

Bug#939120: buster-pu: package ircd-hybrid/1:8.2.24+dfsg.1-1+deb10u1

2019-10-12 Thread Julien Cristau
Control: tag -1 confirmed On Sun, Sep 01, 2019 at 12:40:52PM +0100, Dominic Hargreaves wrote: > Package: release.debian.org > Severity: normal > Tags: buster > User: release.debian@packages.debian.org > Usertags: pu > > Per #932774, in its default configuration, ircd-hybrid does not start >

Bug#931607: buster-pu: package samba/2:4.9.11+dfsg-1~deb10u1

2019-10-12 Thread Julien Cristau
Control: clone -1 -2 Control: retitle -1 buster-pu: package ldb/2:1.5.1+really1.4.7-1~deb10u1 Control: block -2 with -1 On Mon, Jul 08, 2019 at 10:23:49AM +0200, Mathieu Parent wrote: > Package: release.debian.org > Severity: normal > Tags: buster > User: release.debian@packages.debian.org >

Bug#937009: [gregory.sz...@gmail.com: Python 3 Transition Plan / Calendar Versioning]

2019-10-10 Thread Julien Cristau
- Forwarded message from Gregory Szorc - Date: Tue, 8 Oct 2019 18:26:46 -0700 From: Gregory Szorc To: mercurial-packag...@mercurial-scm.org, mercurial-devel Subject: Python 3 Transition Plan / Calendar Versioning At the Mercurial 5.2 Sprint last weekend, we made a number of decisions

Bug#940034: libelogind0: replacing a core system library and conflicting against the default init considered harmful

2019-09-27 Thread Julien Cristau
On Fri, Sep 27, 2019 at 09:19:10AM -0400, Sam Hartman wrote: > I think it is fair to ask Julien as the bug submitter to engage here > either by coming up with new options that none of us have explored or by > coming up with specific problems. Alternatively it would be reasonable > for him to ask

Bug#940605: Bug#940632: nmu: mupdf_1.15.0+ds1-1+b1

2019-09-19 Thread Julien Cristau
Control: tag -1 + patch On Wed, Sep 18, 2019 at 12:01:04PM +0200, Julien Cristau wrote: > Control: severity 940605 serious > Control: retitle 940605 jbig2dec: ABI breakage without SONAME and package > name change > > On Wed, Sep 18, 2019 at 08:22:49AM +0200, Jonas Smedegaard wro

Bug#940605: Bug#940632: nmu: mupdf_1.15.0+ds1-1+b1

2019-09-18 Thread Julien Cristau
Control: severity 940605 serious Control: retitle 940605 jbig2dec: ABI breakage without SONAME and package name change On Wed, Sep 18, 2019 at 08:22:49AM +0200, Jonas Smedegaard wrote: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags:

Bug#940230: ircd-hybrid: use after free and crash

2019-09-14 Thread Julien Cristau
Package: ircd-hybrid Version: 1:8.2.24+dfsg.1-1 Severity: grave Hi, I just upgraded to buster and ircd keeps crashing. One case with a segfault in strcmp, other times with glibc aborts. Running with valgrind shows: ==4562== Invalid read of size 8 ==4562==at 0x127E10: dlinkDelete

Bug#940170: buster-pu: package trapperkeeper-webserver-jetty9-clojure/1.7.0-2+deb10u1

2019-09-13 Thread Julien Cristau
: #930562). + + -- Julien Cristau Fri, 13 Sep 2019 11:00:50 +0200 + trapperkeeper-webserver-jetty9-clojure (1.7.0-2) unstable; urgency=medium * Fix compatibility with Jetty 9.4 diff --git a/debian/patches/0005-maint-Disable-EndpointIdentification.patch b/debian/patches/0005-maint-Disable

Bug#940034: libelogind0: replacing a core system library and conflicting against the default init considered harmful

2019-09-11 Thread Julien Cristau
Package: libelogind0 Version: 241.3-1+debian1 Severity: serious I wrote this in #934132 but that is being ignored so I'll repeat here. I don't think it's reasonable to ship this package with C/R/P libsystemd0. I think it opens you (and, more importantly, users) up to issues like #934491. Even

Bug#939873: qla2xxx .. Async-gnlist failed

2019-09-09 Thread Julien Cristau
On Mon, Sep 9, 2019 at 17:51:02 +0100, Ben Hutchings wrote: > On Mon, 9 Sep 2019 16:29:07 + Peter Palfrader > wrote: > > Package: src:linux > > Version: 4.19.67-2 > > Severity: important > > > > The buster kernel, as well as the backports kernel > > (linux-image-5.2.0-0.bpo.2-amd64

Bug#939816: hgsubversion: incompatible with hg 5.1

2019-09-09 Thread Julien Cristau
Source: hgsubversion Version: 1.9.3-1 Severity: grave Tags: upstream sid bullseye Justification: renders package unusable Hi, hgsubversion needs an update for mercurial 5.1 https://ci.debian.net/data/autopkgtest/unstable/amd64/h/hgsubversion/2838693/log.gz The upstream repo seems to have some

Bug#939739: openipmi: fails to detect udev

2019-09-08 Thread Julien Cristau
Source: openipmi Version: 2.0.25-2.1 Severity: serious User: debian-ad...@lists.debian.org Usertags: needed-by-DSA-Team X-Debbugs-Cc: debian-ad...@lists.debian.org /etc/init.d/openipmi tries to detect udev by looking for /sbin/udev or /sbin/udevd, however neither of those exist anymore, and it's

Bug#934132: Unblock elogind 241.3-1+debian1 migration to bullseye

2019-09-03 Thread Julien Cristau
On Tue, Sep 3, 2019 at 15:29:49 +0100, Mark Hindley wrote: > On Wed, Aug 14, 2019 at 07:22:47PM +0100, Jonathan Wiltshire wrote: > > I think your summary is fine. However, this is not my area of expertise and > > I'm rather hoping Julien or Ansgar will chime in with an update. > > > > It

Bug#939323: haskell-serialise: huge build logs

2019-09-03 Thread Julien Cristau
Source: haskell-serialise Version: 0.2.1.0-3 Severity: serious root@arm-arm-01:~# ls -lh /home/buildd/logs/haskell-serialise_0.2.1.0-3_armhf-2019-09-02T09\:05\:13Z -rw-rw-r-- 1 buildd buildd 11G Sep 3 11:11 /home/buildd/logs/haskell-serialise_0.2.1.0-3_armhf-2019-09-02T09:05:13Z Most of it

Bug#935589: cdimage.debian.org: xserver-xorg-input-synaptics package missing in xfce-CD-1 iso

2019-09-03 Thread Julien Cristau
On Tue, Sep 3, 2019 at 10:32:11 +0200, Bjørn Mork wrote: > But you can't really expect users to look at xserver-xorg-input-libinput > at all. Why should they? There is no pointer to it from the "obsolete" > package. What kind of deprecation is that? Most users will probably > read the first

Bug#935589: cdimage.debian.org: xserver-xorg-input-synaptics package missing in xfce-CD-1 iso

2019-09-03 Thread Julien Cristau
On Mon, Sep 2, 2019 at 23:42:44 +0100, Steve McIntyre wrote: > control: reassign -1 task-xfce-desktop > > Hi Karthik, > > On Sat, Aug 24, 2019 at 04:10:53PM +0530, karthik wrote: > >Package: cdimage.debian.org > >Severity: normal > > > >Dear Maintainer, > > > >*** Reporter, please consider

Bug#939266: debootstrap fails to create a sid chroot with Error executing gpgv to check Release signature

2019-09-02 Thread Julien Cristau
On Mon, Sep 2, 2019 at 21:27:46 +0500, Pirate Praveen wrote: > How do I get this file? There is no such log in /var/log. There is no > logfile option I can find in manpage. > Look in /srv/chroot/debian-sid. Cheers, Julien

Bug#939266: debootstrap fails to create a sid chroot with Error executing gpgv to check Release signature

2019-09-02 Thread Julien Cristau
On Mon, Sep 2, 2019 at 21:13:13 +0500, Pirate Praveen wrote: > > > On Mon, Sep 2, 2019 at 9:36 PM, Julien Cristau wrote: > > Control: tags -1 unreproducible moreinfo > > > > On Mon, Sep 2, 2019 at 20:53:13 +0500, Pirate Praveen wrote: > > > > > Pa

Bug#939266: debootstrap fails to create a sid chroot with Error executing gpgv to check Release signature

2019-09-02 Thread Julien Cristau
Control: tags -1 unreproducible moreinfo On Mon, Sep 2, 2019 at 20:53:13 +0500, Pirate Praveen wrote: > Package: debootstrap > Version: 1.0.114, 1.0.115~bpo10+1 > Severity: important > > I think debootstrap should be able to create a sid chroot but fails with > this error, > > $ sudo

Bug#736564: Allow subcribing to debian-admin for Debian Developers

2019-08-20 Thread Julien Cristau
On Sat, Jan 25, 2014 at 12:56:54AM +0100, Martin Zobel-Helas wrote: > the DSA team would like to open the subscription to debian-admin to all > Debian Developers. This was decided during the last DSA sprint > (<20130621180752.ga12...@valiant.palfrader.org>). Subscription to this > list will be

Bug#935150: mercurial: FTBFS on mips and s390x (zstd-related test failures)

2019-08-20 Thread Julien Cristau
Package: mercurial Version: 5.1-1 Severity: serious Seeing similar-looking test failures on both big-endian archs: https://buildd.debian.org/status/fetch.php?pkg=mercurial=s390x=5.1-1=1565970181=0 https://buildd.debian.org/status/fetch.php?pkg=mercurial=mips=5.1-1=1565977820=0 Cheers, Julien

Bug#932296: qa.debian.org: getwatch filling up /tmp

2019-08-08 Thread Julien Cristau
On Wed, Jul 17, 2019 at 10:11:39PM +0200, Lucas Nussbaum wrote: > On 17/07/19 at 14:01 +0200, Julien Cristau wrote: > > something in udd seems to extract entire source packages to > > /tmp/getwatch.*. This fills up the disk. Please make it not do that. > > Hi, >

Bug#932296: qa.debian.org: getwatch filling up /tmp

2019-07-17 Thread Julien Cristau
Package: qa.debian.org Severity: important User: qa.debian@packages.debian.org Usertags: udd X-Debbugs-Cc: lu...@debian.org, debian-ad...@lists.debian.org Hi, something in udd seems to extract entire source packages to /tmp/getwatch.*. This fills up the disk. Please make it not do that.

Bug#928499: mirror listing update for mirror.schoemaker.systems

2019-07-16 Thread Julien Cristau
Hi, Thanks for mirroring Debian! On Mon, May 6, 2019 at 07:56:36 +, Quentin Schoemaker wrote: > Trace Url: > http://mirror.schoemaker.systems/debian/project/trace/mirror.schoemaker.systems > I notice you're using ftp.nl.debian.org as upstream. The only service we guarantee on

Bug#931566: Don't complain about suite changes (Acquire::AllowReleaseInfoChange::Suite should be "true")

2019-07-09 Thread Julien Cristau
On Tue, Jul 9, 2019 at 15:55:02 +0200, Christoph Berg wrote: > Re: David Kalnischkies 2019-07-09 <20190709133107.gvib2ibj6w36j447@crossbow> > > A Release file can declare that it will "soon" change its the value of > > a field to foo and apt clients can notify users about this so > > Fwiw, I

Bug#912784: stretch-pu: package davix/0.6.4-1.1+deb9u1

2019-07-08 Thread Julien Cristau
On Mon, Jul 8, 2019 at 11:54:18 +0200, Mattias Ellert wrote: > > Sorry for not getting back to you again sooner. > > > > The bug fix sounds OK. What's the d/rules change about? It's not > > mentioned in the changelog. > > > > + rm -rf debian/tmp/usr/share/doc/davix/html/.doctrees > > > >

Bug#931566: Don't complain about suite changes (Acquire::AllowReleaseInfoChange::Suite should be "true")

2019-07-08 Thread Julien Cristau
On Mon, Jul 8, 2019 at 11:41:55 +0200, Julian Andres Klode wrote: > On Mon, Jul 08, 2019 at 10:17:27AM +0200, Julien Cristau wrote: > > Control: severity -1 serious > > > > On Mon, Jul 08, 2019 at 09:11:48AM +0200, Christoph Berg wrote: > > > Control: tags

Bug#931566: Don't complain about suite changes (Acquire::AllowReleaseInfoChange::Suite should be "true")

2019-07-08 Thread Julien Cristau
Control: severity -1 serious On Mon, Jul 08, 2019 at 09:11:48AM +0200, Christoph Berg wrote: > Control: tags -1 buster sid > > Re: To Debian Bug Tracking System 2019-07-07 > <20190707183910.ga22...@msg.df7cb.de> > > Please consider setting Acquire::AllowReleaseInfoChange::Suite "true"; > >

Bug#927674: CVE-2019-3902

2019-05-28 Thread Julien Cristau
On Sun, May 26, 2019 at 09:07:11PM +0200, Moritz Mühlenhoff wrote: > On Sun, Apr 21, 2019 at 12:32:13AM +0200, Moritz Muehlenhoff wrote: > > Source: mercurial > > Version: 4.8.2-1 > > Severity: grave > > Tags: security > > > > See https://www.mercurial-scm.org/wiki/WhatsNew from 4.9: > > > >

Bug#929359: linux: instability on arm64 MP30-AR1 servers

2019-05-23 Thread Julien Cristau
Control: found -1 4.19.28-2 On Wed, May 22, 2019 at 11:58:15 +0200, Julien Cristau wrote: > Source: linux > Version: 4.9.168-1 > Severity: important > X-Debbugs-Cc: debian-...@lists.debian.org, debian-ad...@lists.debian.org > User: debian-ad...@lists.debian.org > Usertags:

Bug#929431: linux: openvswitch complains of over-mtu packets

2019-05-23 Thread Julien Cristau
Source: linux Version: 4.19.28-2~bpo9+1 Severity: important X-Debbugs-Cc: debian-ad...@lists.debian.org User: debian-ad...@lists.debian.org Usertags: needed-by-DSA-Team Hi, after upgrading conova-node01.debian.org to the stretch-backports kernel to see if #929359 was reproducible, it started

Bug#929366: linux-image-4.19.0-5-octeon: usercopy: Kernel memory overwrite attempt detected (in systemd-timedated)

2019-05-22 Thread Julien Cristau
Source: linux Version: 4.19.37-3 Severity: important X-Debbugs-Cc: debian-ad...@lists.debian.org, debian-m...@lists.debian.org, syst...@packages.debian.org User: debian-ad...@lists.debian.org Usertags: needed-by-DSA-Team Hi, from mips-sil-01.debian.org's syslog: May 22 11:57:53

Bug#929359: linux: instability on arm64 MP30-AR1 servers

2019-05-22 Thread Julien Cristau
Source: linux Version: 4.9.168-1 Severity: important X-Debbugs-Cc: debian-...@lists.debian.org, debian-ad...@lists.debian.org User: debian-ad...@lists.debian.org Usertags: needed-by-DSA-Team Hi, ever since the 9.9 point release conova-node01.debian.org and conova-node02.debian.org have been

Bug#928415: fixed in firefox-esr 60.6.2esr-1

2019-05-06 Thread Julien Cristau
On Mon, May 06, 2019 at 04:16:11AM +, Russell Ault wrote: > Thanks for the quick turn-around! Any idea when this will show up in Stable? > Watch https://lists.debian.org/debian-stable-announce/ in the next day or two. Cheers, Julien

Bug#928185: unblock: openjdk-11/11.0.3+7-4

2019-05-02 Thread Julien Cristau
Control: tag -1 moreinfo Hi Matthias, On Mon, Apr 29, 2019 at 06:12:36PM +0200, Matthias Klose wrote: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: unblock > > Please unblock openjdk-11/11.0.3+7-4. That's the quarterly security

Bug#926699: libc6-{i386,x32}: installing, removing, reinstalling in a --merged-usr system results in unmerged /lib{32,x32}

2019-04-23 Thread Julien Cristau
On Tue, Apr 09, 2019 at 12:27:45PM +0200, Andreas Beckmann wrote: > Package: libc6-x32,libc6-i386 > Version: 2.28-8 > Severity: serious > User: debian...@lists.debian.org > Usertags: piuparts > > Hi, > > during a test with piuparts in a --merged-usr environment I noticed that > installing,

Bug#920855: [debian-mysql] Bug#920855: mariadb-10.1: FTBFS on mips{, {, 64}el}: linker failures

2019-04-16 Thread Julien Cristau
On Tue, Apr 16, 2019 at 14:18:12 +0300, Otto Kekäläinen wrote: > We also already have this patch, do you Julien think it fixes the same > problem? > https://salsa.debian.org/mariadb-team/mariadb-10.1/blob/stretch/debian/patches/mips-compilation-failure-__bss_start-symbol-miss.patch > I've no

Bug#920854: [debian-mysql] Bug#920854: mariadb-10.1: FTBFS on s390x (test failure)

2019-04-16 Thread Julien Cristau
On Tue, Apr 16, 2019 at 01:55:31PM +0300, Otto Kekäläinen wrote: > > Justification: fails to build from source (but built successfully in the > > past) > > The mariadb-10.1 package on security.d.o doesn't build on s390x, one test > > fails: > > Unfortunately there are no public build logs of

Bug#926868: mozjs60: non262/extensions/clone-errors.js crashes on s390x

2019-04-15 Thread Julien Cristau
Control: tag -1 fixed-upstream On Thu, Apr 11, 2019 at 03:51:51PM +0200, Julien Cristau wrote: > I disabled non262/extensions/clone-errors.js on s390x in mozjs60 > 60.2.3-2.1 because it would SIGSEGV. > > gdb output follows, this is how far I've got. > > Cheers, > Julien &g

Bug#926868: mozjs60: non262/extensions/clone-errors.js crashes on s390x

2019-04-11 Thread Julien Cristau
Source: mozjs60 Severity: important Tags: upstream help I disabled non262/extensions/clone-errors.js on s390x in mozjs60 60.2.3-2.1 because it would SIGSEGV. gdb output follows, this is how far I've got. Cheers, Julien (sid_s390x-dchroot)jcristau@zelenka:~/mozjs60/js/src/tests$ gdb --batch -ex

Bug#926647: leveldb-sharp: ABI change in libleveldb 1.20

2019-04-08 Thread Julien Cristau
Source: leveldb-sharp Version: 1.9.1-1.1 Severity: serious Hi, as documented in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=83 libleveldb's ABI changed incompatibly in 1.20. The 1.20-2.1 NMU changed SONAME to reflect that, and leveldb-sharp 1.9.1-1.2 was patched to use the new SONAME.

Bug#926434: mirror listing update for debian.tu-bs.de

2019-04-05 Thread Julien Cristau
Hi Martin, On Fri, Apr 5, 2019 at 05:57:23 +, Martin Kubiak wrote: > Package: mirrors > Severity: minor > User: mirr...@packages.debian.org > Usertags: mirror-list > > Submission-Type: update > Site: debian.tu-bs.de > Type: leaf > Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386

Bug#914999: [libc6] Locking problems into libc6

2019-03-31 Thread Julien Cristau
Control: severity -1 important On Thu, Nov 29, 2018 at 01:58:47PM +0200, Roman Savochenko wrote: > Package: libc6 > Version: 2.24 > Severity: critical > This is not a critical bug (it's not even clear from the report at this point what the problem is, and it doesn't seem too widespread);

Bug#877773: leveldb: diff for NMU version 1.20-2.1

2019-03-31 Thread Julien Cristau
breakage in 1.20 (closes: #83) + + -- Julien Cristau Sun, 31 Mar 2019 12:19:04 +0200 + leveldb (1.20-2) unstable; urgency=medium * Don't run self-test parallel (closes: #717997). diff -Nru leveldb-1.20/debian/control leveldb-1.20/debian/control --- leveldb-1.20/debian/control 2017-12-28 15

Bug#798097: Restarting logind kills Xserver

2019-03-31 Thread Julien Cristau
On Thu, Mar 21, 2019 at 17:59:26 +0100, Michael Biebl wrote: > Julien, in case you are busy, I could offer to NMU. > WDYT? > No objection. (Just git cherry-pick -x the upstream change and add a changelog entry with the explanation.) Thanks, Julien

Bug#926036: net-retriever: missing support for Acquire-By-Hash

2019-03-30 Thread Julien Cristau
Package: net-retriever Version: 1.51 Severity: minor Tags: patch olasd tried to install his new laptop. He got hashsum mismatches. That made him sad. We don't want a sad olasd. Patch up at https://salsa.debian.org/jcristau/net-retriever/commit/2653045287c502399c31495e1dfd502e03efbc08 Cheers,

Bug#926035: net-retriever: missing support for InRelease

2019-03-30 Thread Julien Cristau
Package: net-retriever Version: 1.51 Severity: minor Tags: patch Hi, net-retriever downloads Release and Release.gpg instead of trying InRelease first. Patch up at https://salsa.debian.org/jcristau/net-retriever/commit/1237e465cc83a0832c365f8b9f67f98943229dd6 Cheers, Julien

Bug#892812: [libdrm-radeon1] Periodic UI freezes

2019-03-30 Thread Julien Cristau
Control: severity -1 important Hi, On Tue, Mar 13, 2018 at 11:02:18 +0100, Julien Vion wrote: > Package: libdrm-radeon1 > Version: 2.4.90 > Severity: serious > > --- Please enter the report below this line. --- > > I have been experiencing periodic general UI freezes since last reboot. > UI

Bug#892812: Fwd: Libdrm-radeon1 bug

2019-03-30 Thread Julien Cristau
Hi Andrew, On Sat, Mar 9, 2019 at 15:24:52 +, Andrew M.A. Cater wrote: > Julien, > you didn't actually send your message to the bug submitter. You may want to double check recipients of such messages :) Cheers, (another) Julien

Bug#866898: xorg: switching to a VT (with Ctrl-Alt-Fx) hangs entire system

2019-03-30 Thread Julien Cristau
Control: reassign -1 gnome-shell Control: severity -1 important On Sun, Jul 2, 2017 at 17:03:46 +0100, Matthew Vernon wrote: > Package: xorg > Version: 1:7.7+19 > Severity: serious > > Hi, > > Since upgrading to stretch, I can no longer switch to a VT - if I do > Ctrl-Alt-F1 the mouse pointer

Bug#905268: at-spi2-core: key repeat causes a blocked system

2019-03-30 Thread Julien Cristau
Control: tag -1 moreinfo Control: severity -1 important On Thu, Aug 2, 2018 at 14:39:07 +0200, Michael Becker wrote: > Hi Samuel, > > thanks for the fast response. > Unfortunately this problem does not occur regularly but only occasionally. > But if it happens, it happens for roughly half an

Bug#921732: NMU diff for hg-git 0.8.12-1.1

2019-03-13 Thread Julien Cristau
15:26:54.0 +0100 +++ hg-git-0.8.12/debian/changelog 2019-03-13 15:43:48.0 +0100 @@ -1,3 +1,10 @@ +hg-git (0.8.12-1.1) unstable; urgency=medium + + * Non-maintainer upload. + * Fix for compatibility with mercurial 4.9 (closes: #921732). + + -- Julien Cristau Wed, 13 Mar 2019

Bug#923538: ftp.debian.org: fasolo:/srv/ftp-master.d.o is growing too much

2019-03-01 Thread Julien Cristau
Package: ftp.debian.org Severity: serious User: debian-ad...@lists.debian.org Usertags: needed-by-DSA-Team X-Debbugs-Cc: debian-ad...@lists.debian.org Hi, [filing as serious in a somebody-needs-to-look-at-this-soon kind of way] fasolo:/srv/ftp-master.debian.org has been growing steadily since

Bug#923480: ftp.debian.org: cleanup old installer versions from sid

2019-02-28 Thread Julien Cristau
Package: ftp.debian.org Severity: normal X-Debbugs-Cc: jcris...@debian.org, k...@debian.org Hi, I noticed there's a bunch of d-i versions in the archive for sid: 20160101 20160106 20160516 20160516+b1 20160630 20161027 20161031 20170112 20170127 20170407 20170525 20170608 20170615 20170828

Bug#906258: stretch-pu: package yubico-piv-tool/1.4.2-2

2019-02-23 Thread Julien Cristau
On 2/23/19 7:56 PM, Nicolas Braud-Santoni wrote: > On Sat, Feb 23, 2019 at 02:27:04PM +0100, Nicolas Braud-Santoni wrote: >> On Fri, Feb 15, 2019 at 04:55:58PM +0100, Nicolas Braud-Santoni wrote: >>> On Wed, Feb 13, 2019 at 03:34:50PM +0100, Nicolas Braud-Santoni wrote: I assume I can't just

Bug#906258: stretch-pu: package yubico-piv-tool/1.4.2-2

2019-02-23 Thread Julien Cristau
On 2/15/19 4:55 PM, Nicolas Braud-Santoni wrote: > On Wed, Feb 13, 2019 at 03:34:50PM +0100, Nicolas Braud-Santoni wrote: >> I assume I can't just dput this, as it already exists in stable-new. >> Could you reject the existing package first, and I will reupload? > > Uploaded a new revision at the

Bug#921704: tortoisehg: uninstallable with mercurial 4.9

2019-02-18 Thread Julien Cristau
On Mon, Feb 18, 2019 at 11:07:59 -0800, Ludovico Cavedon wrote: > On Mon, Feb 18, 2019 at 10:58 AM Julien Cristau wrote: > > > > Thank you for the bug report. TortoiseHg 4.9 has not been released yet. > > > > > There's no need for the tags, and this wil

Bug#921704: tortoisehg: uninstallable with mercurial 4.9

2019-02-18 Thread Julien Cristau
Control: tag -1 - sid experimental On Sun, Feb 17, 2019 at 21:57:32 -0800, Ludovico Cavedon wrote: > package src:tortoisehg > tags 921704 + sid experimental > thanks > > Thank you for the bug report. TortoiseHg 4.9 has not been released yet. > There's no need for the tags, and this will affect

Bug#824495: Use of the Build-Conflicts field

2019-02-16 Thread Julien Cristau
On 2/16/19 7:08 AM, Scott Kitterman wrote: > On Friday, February 15, 2019 08:59:41 PM Sean Whitton wrote: >> Hello, >> >> Use of the Build-Conflicts field is currently mostly optional, but Ian >> Jackson and I have been working on text for Debian Policy that would >> require its use in certain

Bug#919977: security-tracker: https://security-tracker.debian.org/tracker/data/json returns stale data

2019-02-12 Thread Julien Cristau
On 2/12/19 7:18 AM, Salvatore Bonaccorso wrote: > Agreed on leaving the bug open until clearer what is going on? Ack. Cheers, Julien

Bug#913359: xkbcomp.pc requires libxkbfile-dev as dependency

2019-02-11 Thread Julien Cristau
-1,3 +1,9 @@ > +x11-xkb-utils (7.7+4+nmu1) unstable; urgency=low > + > + * NMU; add dependency to libxkbfile-dev. Thanks, Mike Gabriel. (Closes: > #913359) > + > + -- Judit Foglszinger Sun, 10 Feb 2019 20:24:51 +0600 > + > x11-xkb-utils (7.7+4) unstable; urgency=medium > &

Bug#922021: apt: weird symlinks from /var/lib/apt/lists/partial to files in /var/lib/apt/lists, and apt update errors

2019-02-11 Thread Julien Cristau
Package: apt Version: 1.8.0~rc2 Severity: normal Hi, for the past few weeks I've been having weird errors in apt update, related to symlinks in /var/lib/apt/lists/partial. E.g. right now I have: lrwxrwxrwx 1 root root 81 Jan 14 10:41

Bug#919977: security-tracker: https://security-tracker.debian.org/tracker/data/json returns stale data

2019-02-11 Thread Julien Cristau
On 2/10/19 5:24 PM, Salvatore Bonaccorso wrote: > Looks this is happening again (or similarly): > > curl -I https://security-tracker.debian.org/tracker/data/json > HTTP/2 200 > date: Sun, 10 Feb 2019 16:23:01 GMT > [...] > last-modified: Wed, 06 Feb 2019 10:18:16 GMT > cache-control: max-age=3600

Bug#921572: mercurial breaks hg-git autopkgtest: ProgrammingError: callcommand() cannot be used after commands are sent

2019-02-08 Thread Julien Cristau
Control: severity -1 serious Control: clone -1 -2 Control: reassign -1 mercurial 4.9-1 Control: retitle -1 mercurial: needs Breaks on hg-git <= 0.8.12-1 Control: reassign -2 hg-git 0.8.12-1 Control: retitle -2 hg-git: incompatible with mercurial 4.9 On 2/6/19 9:41 PM, Paul Gevers wrote: > With a

Bug#921704: tortoisehg: uninstallable with mercurial 4.9

2019-02-08 Thread Julien Cristau
Source: tortoisehg Version: 4.8.1-0.1 Severity: serious X-Debbugs-Cc: James Cowgill Hi, mercurial 4.9 is now in sid, so tortoisehg needs an update. Cheers, Julien

Bug#921532: evince: can't open a pdf from firefox (apparmor error)

2019-02-06 Thread Julien Cristau
On 2/6/19 4:54 PM, Simon McVittie wrote: > On Wed, 06 Feb 2019 at 16:20:32 +0100, Julien Cristau wrote: >> trying to open a pdf file from my local firefox installs fails, with a >> message like the below in the kernel log: >> >> [239440.060481] audit: type=1400 audit(1

Bug#921532: evince: can't open a pdf from firefox (apparmor error)

2019-02-06 Thread Julien Cristau
Package: evince Version: 3.30.2-3 Severity: important Hi, trying to open a pdf file from my local firefox installs fails, with a message like the below in the kernel log: [239440.060481] audit: type=1400 audit(1549462128.942:91): apparmor="DENIED" operation="file_mmap"

Bug#920977: Breaks loading of db backends in Trac

2019-02-05 Thread Julien Cristau
Control: severity -1 important On 2/2/19 11:00 AM, Julien Cristau wrote: > On 1/31/19 9:11 AM, Andras Korn wrote: >> Package: mercurial-common >> Version: 4.8.2-1 >> Severity: important >> >> Hi, >> >> as long as mercurial-common is installed, the post

Bug#921227: dnssec-trigger: crashes (SIGSEGV)

2019-02-03 Thread Julien Cristau
Package: dnssec-trigger Version: 0.17+repack-2 Severity: grave Justification: renders package unusable dnssec-trigger has been crashing for me the last few weeks. I'm not sure what triggers it. Just got around to getting a core file: Core was generated by `dnssec-triggerd -d'. Program

Bug#920977: Breaks loading of db backends in Trac

2019-02-02 Thread Julien Cristau
On 1/31/19 9:11 AM, Andras Korn wrote: > Package: mercurial-common > Version: 4.8.2-1 > Severity: important > > Hi, > > as long as mercurial-common is installed, the postgres and sqlite db backend > driver of Trac won't load: > > 2019-01-31 08:58:49,372 Trac[loader] ERROR: Skipping

Bug#921069: libxcb-dri3.so.0: added ABI without increasing -version-info

2019-02-02 Thread Julien Cristau
On 2/1/19 10:14 AM, Simon McVittie wrote: > libxcb-dri3 version 1.13 appears to have added new symbols without increasing > the minor ABI version in its -version-info. This will break anything that > compares libraries by their version info to decide which one is newer. > > The Steam Runtime uses

Bug#920855: mariadb-10.1: FTBFS on mips{,{,64}el}: linker failures

2019-01-29 Thread Julien Cristau
Source: mariadb-10.1 Version: 10.1.37-0+deb9u1 Severity: serious Justification: fails to build from source (but built successfully in the past) Control: affects -1 + release.debian.org security.debian.org Hi, The mariadb-10.1 on security.debian.org fails to build on all mipsen, with similar

Bug#920854: mariadb-10.1: FTBFS on s390x (test failure)

2019-01-29 Thread Julien Cristau
Source: mariadb-10.1 Version: 10.1.37-0+deb9u1 Severity: serious Justification: fails to build from source (but built successfully in the past) Control: affects -1 + release.debian.org security.debian.org The mariadb-10.1 package on security.d.o doesn't build on s390x, one test fails: >

<    1   2   3   4   5   6   7   8   9   10   >