Bug#952375: [Pkg-javascript-devel] Bug#952375: node-jsonld: FTBFS: Module not found: Error: Can't resolve 'rdf-canonize' in '/<>/lib'

2020-02-24 Thread Xavier
Control: tags -1 moreinfo Le 23/02/2020 à 15:06, Lucas Nussbaum a écrit : > Source: node-jsonld > Version: 1.6.2-2 > Severity: serious > Justification: FTBFS on amd64 > Tags: bullseye sid ftbfs > Usertags: ftbfs-20200222 ftbfs-bullseye > > Hi, > > During a rebuild of all packages in sid, your pa

Bug#952457: node-regenerator-transform depends on @babel/preset-env which is not available

2020-02-24 Thread Xavier Guimard
Package: node-regenerator-transform Version: 0.14.1-2 Severity: important package.json mention a preset to @babel/preset-env which is not available. This affects node-crc build. -- System Information: Architecture: amd64 (x86_64) Kernel: Linux 5.4.0-3-amd64 Versions of packages node-regenerator

Bug#951110: ITP: cyrus-timezones -- Timezone information for the Cyrus IMAP Server

2020-02-24 Thread Xavier
Le Lundi, Février 24, 2020 07:07 CET, Paul Wise a écrit: > On Tue, 11 Feb 2020 10:30:00 +0100 Xavier Guimard wrote: > > > cyrus-timezones provides timezone information for the Cyrus IMAP Server. > > By use of the vzic timezone compiler it compiles VTIMEZONEs based on the > &

Bug#952388: python3-fake-factory: New version of Faker for quite a while

2020-02-23 Thread Vincent-Xavier JUMEL
ry depends on: ii python3 3.7.5-3 ii python3-dateutil 2.7.3-3 ii python3-six 1.14.0-2 python3-fake-factory recommends no packages. python3-fake-factory suggests no packages. -- no debconf information -- Vincent-Xavier JUMEL Id: https://keybase.io/vincentxavier https://blog.the

Bug#952358: [Pkg-javascript-devel] Bug#952358: node-builtin-modules: FTBFS: ReferenceError: describe is not defined

2020-02-23 Thread Xavier
Hi Easy to fix: mocha no more accepts "describe" in a "describe" loop. Just to replace it by "it" Regards, Xavier Le 23 février 2020 14:49:28 GMT+01:00, Lucas Nussbaum a écrit : >Source: node-builtin-modules >Version: 3.0.0-1 >Severity: serious >Jus

Bug#951862: node-fetch should be renamed node-node-fetch to avoid confusion with libjs-fetch

2020-02-22 Thread Xavier Guimard
Package: node-fetch Version: 1.7.3-1 Severity: normal Hi, all is in the title ;-)

Bug#951562: RM: validator.js -- ROM; Unmaintained

2020-02-17 Thread Xavier Guimard
Package: ftp.debian.org Severity: normal Hi, validator.js is unmaintained (locked in unstable for a while). Dak reports no dependency. Then I think it is safe to remove it from Debian. Cheers, Xavier

Bug#888926: Looks fixed

2020-02-17 Thread Xavier
Hi @praveen, this looks fixed

Bug#951110: ITP: cyrus-timezones -- Timezone information for the Cyrus IMAP Server

2020-02-16 Thread Xavier
Hi, please follow also this discussion: (https://github.com/cyrusimap/cyrus-timezones/pull/6): > elliefm: > I looked deeper into it, and did find and fix one bug in Cyrus, and > added a workaround for libical misbehaving(?) -- details in the issue > I linked earlier. The original issue I thought

Bug#951285: RM: html2canvas -- ROM; Unmaintained

2020-02-13 Thread Xavier Guimard
== 0 ! - dak report shows no reverse build deps Cheers, Xavier

Bug#951247: [Pkg-javascript-devel] Bug#951247: html2canvas: build-depends on removed package libjs-mocha

2020-02-13 Thread Xavier
Le 13/02/2020 à 09:11, Ralf Treinen a écrit : > Source: html2canvas > Version: 0.5.0~beta4+ds1-2 > Severity: serious > User: trei...@debian.org > Usertags: edos-uninstallable > > Hi, > > html2canvas build-depends on libjs-mocha which only exists in > old{old}stable. > > -Ralf. Hi, html2canvas

Bug#951110: ITP: cyrus-timezones -- Timezone information for the Cyrus IMAP Server

2020-02-11 Thread Xavier Guimard
Package: wnpp Severity: wishlist Owner: Xavier Guimard * Package name: cyrus-timezones Version : 0.0~git20190710.1a0107a Upstream Author : Cyrus-Imapd maintainers <https://github.com/cyrusimap> * URL : https://github.com/cyrusimap/cyrus-timezones * L

Bug#940708: [Pkg-javascript-devel] Component database

2020-02-10 Thread Xavier
Le 10/02/2020 à 15:13, Jonas Smedegaard a écrit : > Hi Xavier, > > Quoting Xavier (2020-02-10 15:06:00) >> I wrote a little feature in lintian that will build a component >> database (https://salsa.debian.org/lintian/lintian/commit/36469e3), >> released in lintian 2.5

Bug#947758: buster-pu: package node-handlebars/3:4.1.0-1+deb10u1

2020-02-07 Thread Xavier
Le 07/02/2020 à 20:16, Adam D. Barratt a écrit : > On Sat, 2020-01-25 at 20:40 +, Adam D. Barratt wrote: >> Control: tags -1 + confirmed >> >> On Mon, 2019-12-30 at 07:51 +0100, Xavier Guimard wrote: >>> node-handlebars is vulnearable to prototype

Bug#950850: [Pkg-javascript-devel] Bug#950850: dependency on `mocha' is not required

2020-02-07 Thread Xavier
match' module, `mocha' is only > present in `devDependencies'). > > `mocha' package needs many related packages to install, I think > removing dependency on `mocha' is more preferable. Hi, this bug is fixed in Debian unstable & testing. I'll try to push a fix to next buster point release Cheers, Xavier

Bug#950854: buster-pu: package node-anymatch/2.0.0-1+deb10u1

2020-02-07 Thread Xavier Guimard
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu Hi, too many dependencies are required in Buster to install anymatch. This little fix reduce them, build/test & autopkgtest are OK. Cheers, Xavier diff --git a/debian/changel

Bug#950821: RFP: peertube -- decentralized federated video platform

2020-02-06 Thread Xavier
hanks to P2P > (BitTorrent) in the web browser via WebTorrent. Hi, I can help for the node.js part (means replacing `yarn install`) Cheers, Xavier

Bug#860939: [Pkg-javascript-devel] Remove unmaintained package

2020-02-06 Thread Xavier
Le 14/08/2019 à 11:28, Xavier a écrit : > Le 14/08/2019 à 07:37, Xavier a écrit : >> Le 09/08/2019 à 07:22, Xavier a écrit : >>> Le 08/08/2019 à 18:25, Xavier a écrit : >>>> Le 08/08/2019 à 09:31, Xavier a écrit : >>>>> Le 08/08/2019 à 08:09, Xavier a é

Bug#950827: RM: node-simplesmtp -- ROM; Orphaned & unmaintained

2020-02-06 Thread Xavier Guimard
Package: ftp.debian.org Severity: normal Hi, I propose to remove node-simplesmtp: * it looks orphaned upstream (last commit 2015-02-16) * it is deprecated in favor of "smtp-server" [1] * enabling tests shows that library is buggy * popcon rank ~ 14 * dak reports shows no reverse build de

Bug#934141: [Pkg-javascript-devel] Bug#934141: jsbeautifier and node-js-beautify should use alternatives

2020-02-06 Thread Xavier
Le 07/08/2019 à 19:13, Xavier a écrit : > Le 07/08/2019 à 14:56, Xavier Guimard a écrit : >> Package: jsbeautifier >> Version: 1.6.4-7 >> Severity: normal >> >> Hi all, >> >> both jsbeautifier and node-js-beautify come from the same upstream >> so

Bug#950092: Build & test fail both

2020-02-05 Thread Xavier
Hi, build & test fail for node-base64url. At least this has to be fixed: --- a/debian/patches/2001_shared_types.patch +++ b/debian/patches/2001_shared_types.patch @@ -13,7 +13,7 @@ This patch header follows DEP-3: http://dep.debian.net/deps/dep3/ +"target": "es5", +"types": ["node"], +

Bug#950773: buster-pu: package node-dot-prop/4.1.1-1+deb10u1

2020-02-05 Thread Xavier Guimard
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu Hi, node-dot-prop is vulnerable to a prototype pollution. This upstream patch fixes the problem. Cheers, Xavier diff --git a/debian/changelog b/debian/changelog index 84868fc

Bug#950733: node-terser: Fail to build

2020-02-05 Thread Xavier Guimard
+ | Fetch source files | +------+ Local sources - /home/xavier/dev/debian/src/pkg-js/packages/node-terser_4.1.2-4.dsc exists in /home/xavier/dev/debian/src/pkg-js/packages; copying to chroot I: NOTICE: Log

Bug#821097: closed by Debian FTP Masters (reply to Laszlo Boszormenyi (GCS) ) (Bug#821097: fixed in nanopb 0.4.1-1)

2020-02-04 Thread Xavier Bestel
Great, thanks a lot Laszlo ! Have a nice day, Xav

Bug#950658: RM: node-xmpp -- ROM; outdated and replaced upstream

2020-02-04 Thread Xavier Guimard
Package: ftp.debian.org Severity: normal Tags: security According to https://bugs.debian.org/872473 this package is outdated and replaced upstream by a new project

Bug#950657: node-eslint-plugin-flowtype: needed files not built

2020-02-04 Thread Xavier Guimard
Package: node-eslint-plugin-flowtype Version: 2.25.0-1 Severity: serious Package is unusable since files are not built during build

Bug#950568: node-copy-webpack-plugin FTBFS: test failures

2020-02-04 Thread Xavier Guimard
Package: node-copy-webpack-plugin Version: 4.3.0-6 Followup-For: Bug #950568 This package depends on webpack-log which is not packaged.

Bug#950654: FTBFS: node-eslint-plugin-html seems unusable without eslint

2020-02-04 Thread Xavier Guimard
Package: node-eslint-plugin-html Version: 3.2.1-1 Severity: serious This package seems unusable without eslint. See https://ci.debian.net/data/autopkgtest/unstable/amd64/n/node-eslint-plugin-html/3801441/log.gz

Bug#950549: [Pkg-javascript-devel] Bug#950549: node-requirejs-text: package.json occupies the location supposed for node-requirejs

2020-02-03 Thread Xavier
Control: severity -1 serious Le 03/02/2020 à 14:19, mer...@debian.org a écrit : > Package: node-requirejs-text > Version: 2.3.6-1 > Affects: node-requirejs node-grunt-contrib-requirejs > > Hello, > > node-requirejs-text installs its package.json to > /usr/share/nodejs/requirejs, where the packag

Bug#950532: node-websocket-stream: Library seems buggy with our node-duplexify & node-readable-stream

2020-02-03 Thread Xavier Guimard
Package: node-websocket-stream Version: 5.4.0-1 Severity: important Hi, this module seems buggy with our libraries. It should be modified to work with updated libraries: PACKAGE : DEB-VERSION => WORKING-VERSION duplexify :4.1.1=> 3.7.1 readable-stream :3.4.0=>

Bug#950151: Fwd: transition: pkg-js-tools

2020-01-31 Thread Xavier
Le 31/01/2020 à 14:18, Paul Gevers a écrit : > Hi yadd, > > On 29-01-2020 20:23, Xavier wrote: >>> SELECT distinct package.name FROM package JOIN content ON content.pid = >>> package.id WHERE architecture = 'i386' AND filename LIKE >>> './

Bug#950151: Fwd: transition: pkg-js-tools

2020-01-29 Thread Xavier
Le 29/01/2020 à 20:04, Helmut Grohne a écrit : > Hi Xavier, > > On Wed, Jan 29, 2020 at 06:54:36PM +0100, Xavier wrote: >> FYI, I opened a transition BTS to fix bad install to i386 arch >> (DEB_HOST_MULTIARCH problem) > > If you tell me about a bug report, please

Bug#950151: transition: pkg-js-tools

2020-01-29 Thread Xavier
Le 29/01/2020 à 15:43, Xavier Guimard a écrit : > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: transition > > Hi all, > > pkg-js-tools provides a Node.js auto installer (debhelper plugin) used > by JS Team. &

Bug#950151: transition: pkg-js-tools

2020-01-29 Thread Xavier Guimard
ckages are those which: * are arch-dependent * and depends on pkg-js-tools * and were rebuilt after pkg-js-tools 0.9.0 release (0.8 in experimental) Cheers, Xavier [1]: https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/i386/node-request-promise.html Ben file (try): title = &qu

Bug#950089: [Pkg-javascript-devel] Bug#950089: node-chrome-trace-event FTBFS: error TS2300: Duplicate identifier 'IteratorResult'

2020-01-28 Thread Xavier
Le 28/01/2020 à 22:31, Adrian Bunk a écrit : > Source: node-chrome-trace-event > Version: 1.0.0-1 > Severity: serious > Tags: ftbfs bullseye sid > > https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/node-chrome-trace-event.html > > ... >debian/rules override_dh_auto_build > m

Bug#910917: RFA: apache2 -- Apache HTTP Server

2020-01-27 Thread Xavier
Control: retitle -1 RFH: apache2 - Apache HTTP Server Hi, I'm going to transform it to RFH because I've limited talents in C language. Cheers, Xavier Le 27 janvier 2020 19:06:43 GMT+01:00, Sudip Mukherjee a écrit : >Hi, > >On Wed, Nov 28, 2018 at 09:47:34AM +0100, X

Bug#949874: RM: node-tilelive-vector -- ROM; Unmaintained and future missing dependency

2020-01-26 Thread Xavier Guimard
Package: ftp.debian.org Severity: normal Hi, node-tilelive-vector depends on node-mapnik which is going to be removed. Cheers, Xavier

Bug#949873: RM: node-tilelive-mapnik -- ROM; Unmaintained and future missing dependency

2020-01-26 Thread Xavier Guimard
Package: ftp.debian.org Severity: normal Hi, node-tilelive-mapnik depends on node-mapnik which is going to be removed. Cheers, Xavier

Bug#949872: RM: node-tilelive-bridge -- ROM; Unmaintained and future missing dependency

2020-01-26 Thread Xavier Guimard
Package: ftp.debian.org Severity: normal Hi, node-tilelive-bridge depends on node-mapnik which is going to be removed. Cheers, Xavier

Bug#949871: RM: node-mapnik -- ROM; Incompatible with Node.js 12

2020-01-26 Thread Xavier Guimard
Package: ftp.debian.org Severity: normal Hi, node-mapnik 3.7.x is incompatible with Node.js ≥ 12 and it seems that mapnik itself can't be upgraded, then we can't upgrade node-mapnik to 4.x. This package is used only by node-tilelive-* package which seem unmaintained also. Cheers, Xavier

Bug#949789: libcdb-file-perl FTCBFS: computes a build architecture ARCHLIB

2020-01-24 Thread Xavier
YPE to find the place to install arch-dependent Node.js packages. Do we have to replace DEB_HOST_GNU_TYPE by DEB_HOST_MULTIARCH ? (Then a duplication of this bug could be nice) Cheers, Xavier

Bug#949702: buster-pu: package lemonldap-ng/2.0.2+ds-7+deb10u3

2020-01-23 Thread Xavier Guimard
endpoints - When 2FA is used, the grantSession plugin does not filter successful connections - OIDC relying party restriction introduced in 2.0.0 does not work when a previous federation was granted in the same session Cheers, Xavier diff --git a/debian/NEWS b/debian/NEWS index 454e18b

Bug#949615: [Pkg-javascript-devel] Bug#949615: node-lodash: lodash does not export runInContext()

2020-01-22 Thread Xavier
Le 22/01/2020 à 21:16, Xavier Guimard a écrit : > Package: node-lodash > Version: 4.17.15+dfsg-1 > Severity: important > > Hi, > > our lodash does not export while npm registry one export it. This > affects node-grunt-legacy-util upgrade. To reproduce this, try > node-

Bug#949615: node-lodash: lodash does not export runInContext()

2020-01-22 Thread Xavier Guimard
:1971963) [DEP0016] DeprecationWarning: 'root' is deprecated, use 'global' Running "nodeunit:util" (nodeunit) task Fatal error: require(...).runInContext is not a function Then install lodash from np registry in node_modules and relauch test, it works. Cheers, Xavier

Bug#949580: Exclude Makefile from auto install if not explicitely set in debian/nodejs/files

2020-01-22 Thread Xavier
Control: tags -1 + confirmed Le 22/01/2020 à 12:03, Chris Lamb a écrit : > Source: node-ws > Version: 7.2.1-2 > Severity: wishlist > Tags: patch > User: reproducible-bui...@lists.alioth.debian.org > Usertags: buildpath > X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org > > Hi, > > Whilst

Bug#949277: Provide an option to specify build-needed restriction to autopkgtest

2020-01-21 Thread Xavier
Le 21/01/2020 à 13:51, Xavier a écrit : > Hi, > > autopkgtest must test installed files, not generated ones, so rebuild > for test is not a good idea I think. The problem with node-levn is that > "make test" requires "make build". I fixed node-levn in salsa. Co

Bug#949277: Provide an option to specify build-needed restriction to autopkgtest

2020-01-21 Thread Xavier
e timestamp, so that Makefile may detect that generated files don't need to be rebuilt. This requires a simple change in pkg-js-autopkgtest. Let's test that ! Cheers, Xavier

Bug#949297:

2020-01-19 Thread Alexandre-Xavier Labonté-Lamoureux
Same for MATE, there is no menu bar and no preference menu.

Bug#949183: merkaartor: Package gone but there are newer version

2020-01-17 Thread Vincent-Xavier JUMEL
i libstdc++6 9.2.1-23 ii zlib1g 1:1.2.11.dfsg-1+b1 merkaartor recommends no packages. Versions of packages merkaartor suggests: pn spatialite-bin -- no debconf information -- Vincent-Xavier JUMEL Id: https://keybase.io/vincentxavier https://blog.thetys-retz

Bug#949121: buster-pu: package node-kind-of/6.0.2+dfsg-1+deb10u1

2020-01-16 Thread Xavier Guimard
. Cheers, Xavier diff --git a/debian/changelog b/debian/changelog index f69a6ac..93d28bf 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +node-kind-of (6.0.2+dfsg-1+deb10u1) buster; urgency=medium + + * Team upload + * fix type checking vul in ctorName (Closes: #948095, CVE

Bug#921717: RFH: cyrus-imapd -- Cyrus mail system - IMAP support

2020-01-10 Thread Xavier
Le 10/01/2020 à 20:32, Mike Gabriel a écrit : > Hi Xavier, > > On Tue, 17 Dec 2019 02:39:47 +0100 Xavier wrote: >> Control: retitle -1 RFH: cyrus-imapd -- Cyrus mail system - IMAP support >> >> Hi, >> >> I took over the maintenance of cyrus-imapd. Howeve

Bug#890253: jest ready but needs babel 7

2020-01-05 Thread Xavier
e prettier and jest. Cheers, Xavier

Bug#947867: [Pkg-javascript-devel] Bug#947867: RM: src:libjs-i18next -- ROM; Duplicate of node-i18next

2020-01-03 Thread Xavier
Le 02/01/2020 à 17:24, Nicolas Mora a écrit : > I agree but we should merge both packages content then, the package > libjs-i18next provides UMD format. Not needed: libjs-i18next from src:node-i18next provides UMD files while libjs-i18next from src:libjs-i18next just use index.js file. That's why

Bug#947422: [Pkg-javascript-devel] Bug#947422: Bug#947422: node-babel depends on itself for build, then updating core-js is blocked

2020-01-03 Thread Xavier
Le 02/01/2020 à 09:56, Xavier a écrit : > Le 02/01/2020 à 08:18, Xavier a écrit : >> Hi, >> >> I tried to embed core-js@2.6.x in node-babel-runtime. I pushed my work >> into a new "unstable" branch. >> >> @praveen, could you review ? >> >&

Bug#947422: [Pkg-javascript-devel] Bug#947422: node-babel depends on itself for build, then updating core-js is blocked

2020-01-02 Thread Xavier
Le 02/01/2020 à 08:18, Xavier a écrit : > Hi, > > I tried to embed core-js@2.6.x in node-babel-runtime. I pushed my work > into a new "unstable" branch. > > @praveen, could you review ? > > Cheers, > Xavier Bad, babel-runtime/core-js/ dir is no more generated...

Bug#947422: node-babel depends on itself for build, then updating core-js is blocked

2020-01-01 Thread Xavier
Hi, I tried to embed core-js@2.6.x in node-babel-runtime. I pushed my work into a new "unstable" branch. @praveen, could you review ? Cheers, Xavier

Bug#947867: RM: src:libjs-i18next -- ROM; Duplicate of node-i18next

2019-12-31 Thread Xavier Guimard
Package: ftp.debian.org Severity: normal Hi, binary libjs-i18next is provided by: * src: node-i18next * src: libjs-i18next The first is up-to-date and provide both browser and node libraries, not the second. So I propose to remove src:libjs-i18next from our archive. Cheers, Xavier

Bug#947760: [Pkg-javascript-devel] Bug#947760: Bug#947760: why ?

2019-12-30 Thread Xavier
Le 30/12/2019 à 10:58, Pirate Praveen a écrit : > > > On തി, Dec 30, 2019 at 10:48, Xavier wrote: >> Hi, >> >> See node-es6-iterator debian/tests/control, 'yarnpkg install' fails >> without npm. You should add npm as recommended dependency at least >

Bug#947760: [Pkg-javascript-devel] Bug#947760: why ?

2019-12-30 Thread Xavier
Hi, See node-es6-iterator debian/tests/control, 'yarnpkg install' fails without npm. You should add npm as recommended dependency at least Le 30 décembre 2019 09:39:06 GMT+01:00, Paolo Greppi a écrit : >Hi Xavier, I did this on sid: > >sudo apt install yarnpkg >sudo ap

Bug#947760: yarnpkg should depends on npm

2019-12-30 Thread Xavier Guimard
Package: yarnpkg Version: 1.19.1-1 Severity: important Hi, yarnpkg does not depends on npm but this package is required to use it

Bug#947758: buster-pu: package node-handlebars/3:4.1.0-1+deb10u1

2019-12-29 Thread Xavier Guimard
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu Hi, node-handlebars is vulnearable to prototype pollution (CVE-2019-19919). This patch is exactly the one of upstream. Cheers, Xavier diff --git a/debian/changelog b/debian

Bug#938766: uwsgi: Python2 removal in sid/bullseye

2019-12-28 Thread Xavier
Hi, it looks like a duplicate of https://bugs.debian.org/935767 which provides a patch. Cheers, Xavier

Bug#947422: node-babel depends on itself for build, then updating core-js is blocked

2019-12-26 Thread Xavier Guimard
Source: node-babel Severity: important Hi, node-babel depends on itself during build. Then when I try to update it with node-core-js ≥3, I got this: Error: Cannot find module 'core-js/library/fn/get-iterator' at Function.Module._resolveFilename (internal/modules/cjs/loader.js:636:15) at

Bug#947125: buster-pu: package cyrus-imapd/3.0.8-6+deb10u4

2019-12-23 Thread Xavier
Le 22/12/2019 à 17:32, Adam D. Barratt a écrit : > On Sat, 2019-12-21 at 19:44 +0100, Xavier wrote: >> Le 21/12/2019 à 16:18, Adam D. Barratt a écrit : >>> Control: tags -1 + moreinfo >>> >>> On Sat, 2019-12-21 at 14:43 +0100, Xavier Guimard wrote: > [...] &g

Bug#947172: buster-pu: package npm/5.8.0+ds6-4+deb10u1

2019-12-22 Thread Xavier Guimard
-normalize-package-bin package) used by these fixes. After discussion with security team, these CVEs will be tagged as no-dsa. Cheers, Xavier diff --git a/debian/changelog b/debian/changelog index 85e9028..d7b986f 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +npm (5.8.0+ds6-4

Bug#947127: [Pkg-javascript-devel] Bug#947127: npm: CVE-2019-16775 CVE-2019-16776 CVE-2019-16777

2019-12-22 Thread Xavier
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16777 > > Please adjust the affected versions in the BTS as needed. > > Regards, > Salvatore After discussion with security team, these vulnerability are tagged as no-dsa. Then I'll propose an update for next point release. Cheers, Xavier

Bug#947125: buster-pu: package cyrus-imapd/3.0.8-6+deb10u4

2019-12-21 Thread Xavier
Le 21/12/2019 à 16:18, Adam D. Barratt a écrit : > Control: tags -1 + moreinfo > > On Sat, 2019-12-21 at 14:43 +0100, Xavier Guimard wrote: >> cyrus-imapd has a RC bug. This little patch tested by reporters fixes >> the problem. > > Fun timing, given +deb10u3 only

Bug#947125: buster-pu: package cyrus-imapd/3.0.8-6+deb10u4

2019-12-21 Thread Xavier Guimard
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu Hi, cyrus-imapd has a RC bug. This little patch tested by reporters fixes the problem. Cheers, Xavier diff --git a/debian/changelog b/debian/changelog index 391230f..c96adf9

Bug#947118: [Pkg-javascript-devel] Bug#947118: node-on-headers: autopkgtest started failing and then times out

2019-12-21 Thread Xavier
Le 21/12/2019 à 12:04, Utkarsh Gupta a écrit : > Hiya, > > On Sat, Dec 21, 2019 at 3:51 PM Paul Gevers > wrote: > > Your package has an autopkgtest, great. However, I noticed that without > any change from your side it started failing, and while doing so also >

Bug#947118: node-on-headers: autopkgtest started failing and then times out

2019-12-21 Thread Xavier
Hi, I updated node-supertest, this will fix most of node-* packages referenced in https://ci.debian.net/status/slow/ Cheers, Xavier

Bug#947042: [Pkg-javascript-devel] Bug#947042: node-express isn't compatible with node-path-to-regexp ≥ 6

2019-12-19 Thread Xavier
Le 19/12/2019 à 21:01, Xavier Guimard a écrit : > Package: node-express > Version: 4.17.1-1 > Severity: important > Tags: upstream > Forwarded: https://github.com/expressjs/express/issues/4136 > > Hi, > > node-express is not compatible with recent node-path-to

Bug#947042: node-express isn't compatible with node-path-to-regexp ≥ 6

2019-12-19 Thread Xavier Guimard
Package: node-express Version: 4.17.1-1 Severity: important Tags: upstream Forwarded: https://github.com/expressjs/express/issues/4136 Hi, node-express is not compatible with recent node-path-to-regex. This affects node-superagent tests and renders part of express unusable. The fix is simple but

Bug#946997: /usr/sbin/sshd: sshd doesn't restart after dying

2019-12-19 Thread Xavier Bestel
Package: openssh-server Version: 1:7.9p1-10+deb10u1 Severity: normal File: /usr/sbin/sshd Hi, When sshd dies, it doesn't restart which makes the machine unreachable. E.g. try "sudo killall sshd", and voilà you can't use a headless machine anymore. Could this be fixed ? Thanks, Xav --

Bug#850420: Please install bash and zsh completion files

2019-12-18 Thread Xavier
Partial fix: bash completion installed in version 1.3.2-1

Bug#938766: uwsgi: Python2 removal in sid/bullseye

2019-12-17 Thread Xavier
Hi, uwsgi is going to be removed from testing. Can someone fix this issue ? Cheers, Xaavier

Bug#921717: RFH: cyrus-imapd -- Cyrus mail system - IMAP support

2019-12-16 Thread Xavier
Control: retitle -1 RFH: cyrus-imapd -- Cyrus mail system - IMAP support Hi, I took over the maintenance of cyrus-imapd. However, I'd like some help to maintain it. Cheers, Xavier

Bug#890253: [Pkg-javascript-devel] node-jest

2019-12-14 Thread Xavier
Le 14/12/2019 à 19:10, Xavier a écrit : > Hi, > > I updated node-jest. Build is OK, TODO: remove or rebuild > debian/build_modules compiled files (see lintian output) TODO also: embed or package missing node modules (prompt,...)

Bug#890253: node-jest

2019-12-14 Thread Xavier
Hi, I updated node-jest. Build is OK, TODO: remove or rebuild debian/build_modules compiled files (see lintian output)

Bug#882467: node-typescript-types: should provide virtual packages for each /type package, versioned

2019-12-10 Thread Xavier
Hi, I posted a PR [1] to auto provide virtual packages using pkg-js-tools. Cheers, Xavier [1]: https://salsa.debian.org/js-team/typescript-types/merge_requests/1

Bug#946360: yeroth-erp-alert-3-0: Missing yeroth-erp-alert-3-0

2019-12-07 Thread Xavier NOUMBISSI NOUNDOU, Ph.D. (ABD)
rd program within Debian stable (https://github.com/xnoumbissinoundou/yeroth-erp-alert-3.0) * What outcome did you expect instead? Have a Debian mentor Xavier NOUMBISSI NOUNDOU, Ph.D. (ABD), Waterloo, ON, 2011 -- System Information: Debian Release: 10.0 APT prefers stable

Bug#940975: jQuery may not need two different packages

2019-12-07 Thread Xavier
Hi, I prepared node-jquery 3.4.1. Do you think it's time to add Breaks/Provides/Replaces libjs-jquery ? Cheers, Xavier

Bug#914821: libio-pty-perl: New upstream version - 1.12

2019-12-05 Thread Xavier
o wants to do the takeover? Felix, Xavier? I can as well. Hi, I'm going to takeover

Bug#946199: akonadi-backend-postgresql: akonadictl fails to start with postgresql backend

2019-12-05 Thread Vincent-Xavier JUMEL
Package: akonadi-backend-postgresql Version: 4:19.08.3-1 Severity: grave Justification: renders package unusable Dear Maintainer, * What led up to the situation? akonadi-backend-postgresql upgrade * What exactly did you do (or not do) that was effective (or ineffective)? resta

Bug#914821: libio-pty-perl: New upstream version - 1.12

2019-12-04 Thread Xavier
Hi, This new version is required by Lintian, would you accept an NMU to update libio-pty-perl? Felix Lechner (Lintian maintainer) prepared it. Also if you want, package maintainance can be taken under Pkg-Perl umbrella. Cheers, Xavier

Bug#911972: greenbone-security-assistant Default-Start contains no runlevels

2019-12-03 Thread charles xavier
On Tue, 19 Nov 2019 01:28:10 +0100 wrote: > My current work-around is to manually stop the GSA service and > its dependencies, after they get restarted each time. A more severe > workaround is to use systemctl masking: > > % sudo systemctl mask greenbone-security-assistant > > However, this preve

Bug#945122: buster-pu: package cyrus-imapd/3.0.8-6+deb10u2

2019-11-19 Thread Xavier Guimard
connection. However, this little patch fixes the problem. Cheers, Xavier diff --git a/debian/changelog b/debian/changelog index 8023011..b011c8f 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +cyrus-imapd (3.0.8-6+deb10u2) buster; urgency=high + + * Fix privilege escalation on

Bug#911972: greenbone-security-assistant Default-Start contains no runlevels

2019-11-18 Thread charles xavier
My system is also affected. Running debian 10.2, with greenbone-security-assistant 7.0.3+dfsg.1-1.   I get the following error, with enable or disable actions: % sudo systemctl disable greenbone-security-assistant Synchronizing state of greenbone-security-assistant.service with SysV service scr

Bug#110172: La taille de votre boîte aux lettres zimbra a atteint 471,29 Mo, soit plus de 90% de votre quota.

2019-11-04 Thread Xavier Moulin
La taille de votre boîte aux lettres zimbra a atteint 471,29 Mo, soit plus de 90% de votre quota. Veuillez supprimer certains messages pour éviter de dépasser votre quota. Vous devez valider votre compte dans les 24 heures. Si vous ne validez pas votre compte dans les 24 heures, vous ne pourrez

Bug#642082: La taille de votre boîte aux lettres zimbra a atteint 471,29 Mo, soit plus de 90% de votre quota.

2019-11-04 Thread Xavier Moulin
La taille de votre boîte aux lettres zimbra a atteint 471,29 Mo, soit plus de 90% de votre quota. Veuillez supprimer certains messages pour éviter de dépasser votre quota. Vous devez valider votre compte dans les 24 heures. Si vous ne validez pas votre compte dans les 24 heures, vous ne pourrez

Bug#110172: La taille de votre boîte aux lettres zimbra a atteint 471,29 Mo, soit plus de 90% de votre quota.

2019-11-04 Thread Xavier Moulin
La taille de votre boîte aux lettres zimbra a atteint 471,29 Mo, soit plus de 90% de votre quota. Veuillez supprimer certains messages pour éviter de dépasser votre quota. Vous devez valider votre compte dans les 24 heures. Si vous ne validez pas votre compte dans les 24 heures, vous ne pourrez

Bug#642082: La taille de votre boîte aux lettres zimbra a atteint 471,29 Mo, soit plus de 90% de votre quota.

2019-11-04 Thread Xavier Moulin
La taille de votre boîte aux lettres zimbra a atteint 471,29 Mo, soit plus de 90% de votre quota. Veuillez supprimer certains messages pour éviter de dépasser votre quota. Vous devez valider votre compte dans les 24 heures. Si vous ne validez pas votre compte dans les 24 heures, vous ne pourrez

Bug#110172: La taille de votre boîte aux lettres zimbra a atteint 471,29 Mo, soit plus de 90% de votre quota.

2019-11-04 Thread Xavier Moulin
La taille de votre boîte aux lettres zimbra a atteint 471,29 Mo, soit plus de 90% de votre quota. Veuillez supprimer certains messages pour éviter de dépasser votre quota. Vous devez valider votre compte dans les 24 heures. Si vous ne validez pas votre compte dans les 24 heures, vous ne pourrez

Bug#943526: [Pkg-javascript-devel] Bug#943526: node-tslib: directory vs. symlink conflict: /usr/share/nodejs/tslib

2019-10-29 Thread Xavier
Control: reassign -1 node-typescript Le 29/10/2019 à 08:29, Julien Puydt a écrit : > Le mardi 29 octobre 2019 à 07:49 +0100, Xavier a écrit : >> Hi JS team, >> >> why did node-typescript have such link ? >> >> /usr/share/nodejs/tslib -> typescript/

Bug#943526: node-tslib: directory vs. symlink conflict: /usr/share/nodejs/tslib

2019-10-28 Thread Xavier
Hi JS team, why did node-typescript have such link ? /usr/share/nodejs/tslib -> typescript/lib This creates this conflict.

Bug#943389: [Pkg-javascript-devel] Bug#943389: Bug#943389: node-lodash: source package does not contain upstream source

2019-10-24 Thread Xavier
Le 24 octobre 2019 19:12:22 GMT+02:00, Pirate Praveen a écrit : > > >On Thu, Oct 24, 2019 at 19:05, Jonas Smedegaard wrote: >> Quoting Pirate Praveen (2019-10-24 18:42:17) >>> On Thu, Oct 24, 2019 at 16:19, Jonas Smedegaard >> > wrote: >>> > Quoting Pirate Praveen (2019

Bug#935845: [Pkg-javascript-devel] Bug#935845: Bug#935845: not an RC bug; fix is easy: upgrade embedded lodash.cli

2019-10-24 Thread Xavier
Le 23 octobre 2019 22:07:55 GMT+02:00, Jonas Smedegaard a écrit : >Quoting Paolo Greppi (2019-10-23 21:18:37) >> First, I tripped on this one while testing yarnpkg 1.19.1 from >experimental. >> For the record, this is how I found that node-lodash was the culprit: >> >> node --trace-deprecatio

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

2019-10-22 Thread Xavier
Le Mardi, Octobre 22, 2019 14:07 CEST, Jonas Smedegaard a écrit: > Quoting Xavier (2019-10-22 13:23:28) > > Le Mardi, Octobre 22, 2019 12:03 CEST, Jonas Smedegaard a > > écrit: > > > Quoting Xavier (2019-10-22 11:32:19) > > > > Le Mardi, Octobre 2

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

2019-10-22 Thread Xavier
Le Mardi, Octobre 22, 2019 12:03 CEST, Jonas Smedegaard a écrit: > Quoting Xavier (2019-10-22 11:32:19) > > Le Mardi, Octobre 22, 2019 11:15 CEST, Jonas Smedegaard a > > écrit: > > > Quoting Xavier (2019-10-22 10:01:11) > > > > Le Mardi, Octobre 22, 2019

Bug#942809: [Pkg-javascript-devel] Bug#942809: Bug#942809: Why embed ts-node in node-typescript?

2019-10-22 Thread Xavier
Le Mardi, Octobre 22, 2019 11:15 CEST, Jonas Smedegaard a écrit: > Quoting Xavier (2019-10-22 10:01:11) > > Le Mardi, Octobre 22, 2019 09:10 CEST, Julien Puydt > > a écrit: > > > If you want to have ts-node, why not package it properly, with a RFP > > > or

Bug#942809: [Pkg-javascript-devel] Bug#942809: Why embed ts-node in node-typescript?

2019-10-22 Thread Xavier
Le Mardi, Octobre 22, 2019 09:10 CEST, Julien Puydt a écrit: > If you want to have ts-node, why not package it properly, with a RFP or > ITP? > > I don't see the point into packaging those together... > > JP It was an attempt to avoid waiting 6 or 7 months in the NEW queue with a 50% chance of

<    2   3   4   5   6   7   8   9   10   11   >