Bug#802618: Bug #802618

2015-10-26 Thread mario_luppi

 Hi Julien.
Problem solved. Thank you.
So from now is not possible to use X without systemd?

.mario


Connetti gratis il mondo con la nuova indoona:  hai la chat, le 
chiamate, le video chiamate e persino le chiamate di gruppo.

E chiami gratis anche i numeri fissi e mobili nel mondo!
Scarica subito l’app Vai su https://www.indoona.com/



Bug#803101: virtualbox-guest-x11: segmentation fault in vboxvideo_drv.so

2015-10-26 Thread ale
Package: virtualbox-guest-x11
Version: 5.0.6-dfsg-1
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

installing debian testing in a VM run by virtualbox

   * What exactly did you do (or not do) that was effective (or
 ineffective)?

installing first virtualbox and Xorg and then upgrading to testing or first 
upgrading to testing and then installing the packages both lead to no X11 
starting.

i can run xorg on stable (before upgrading)

   * What was the outcome of this action?

startx fails

   * What outcome did you expect instead?

startx starts X

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: stretch/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages virtualbox-guest-x11 depends on:
ii  libc6  2.19-22
ii  libnotify-bin  0.7.6-2
ii  libx11-6   2:1.6.3-1
ii  libxcomposite1 1:0.4.4-1
ii  libxdamage11:1.1.4-2+b1
ii  libxext6   2:1.3.3-1
ii  libxfixes3 1:5.0.1-2+b2
ii  libxmu62:1.1.2-1
ii  libxt6 1:1.1.4-1+b1
ii  virtualbox-guest-utils 5.0.6-dfsg-1
ii  xserver-xorg-core [xorg-video-abi-19]  2:1.17.2-3

virtualbox-guest-x11 recommends no packages.

virtualbox-guest-x11 suggests no packages.

-- no debconf information



Bug#803100: wordpress: Patch cs33359_reliable_shortcode missaplies on hunk

2015-10-26 Thread Salvatore Bonaccorso
Source: wordpress
Version: 4.1+dfsg-1+deb8u5
Severity: important

Hi

The jessie-security upload has cs59_reliable_shortcode patch
missapplying one hunk:

https://sources.debian.net/src/wordpress/4.1%2Bdfsg-1%2Bdeb8u5/debian/patches/cs33359_reliable_shortcode/#L28

The code is applied inbetween of a comment.

Regards,
Salvatore



Bug#803083: CVE-2015-2695 in libgssapi-krb5-2, SPNEGO context aliasing

2015-10-26 Thread Sam Hartman
Do I need to do anything here?
I have availability this evening and Wednesday evening.



Bug#803102: RM: php-propel-runtime/experimental -- ROM; Not used any more

2015-10-26 Thread David Prévot
Package: ftp.debian.org
Severity: normal

Hi,

php-propel-runtime has just been removed from unstable (#802980), but it
can also go away from experimental for the same reasons.

Regards

David


signature.asc
Description: PGP signature


Bug#781938: RFS: vid.stab/0.98b-1

2015-10-26 Thread Andreas Cadhalpun
Hi,

On 26.10.2015 13:15, Felipe Sateler wrote:
> I see that Andreas Cadhalpun (in CC) expressed interest in this
> package and apparently already forwarded that patch upstream. Andreas,
> did you ever get a response on that?

No, unfortunately not. That's why I didn't pursue this any further,
as I assumed that upstream is not active anymore. Am I wrong about that?

Best regards,
Andreas



Bug#803095: flask-sqlalchemy: please update flask-sqlalchemy

2015-10-26 Thread Daniel Stender
Source: flask-sqlalchemy
Severity: wishlist
Control: block 800684 by -1

Please update flask-sqlalchemy, packaging of Privacyidea needs >= 2.0.

Thanks,
DS

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)



Bug#802912: nmu: openmw_0.36.1-1

2015-10-26 Thread Emilio Pozuelo Monfort
On 26/10/15 18:30, Scott Howard wrote:
> On Mon, Oct 26, 2015 at 5:12 AM, Emilio Pozuelo Monfort
>  wrote:
>> On 25/10/15 02:27, Scott Howard wrote:
>>> Package: release.debian.org
>>> Severity: normal
>>> User: release.debian@packages.debian.org
>>> Usertags: binnmu
>>>
>>> nmu openmw_0.36.1-1 . ANY . unstable . -m "rebuild against new libbullet"
>>>
>>> The maintainer (Bret Curtis) is busy but asked me to request this binNMU
>>>
>>> Game crashes because it was compiled against an old libbullet. More info:
>>> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=801914
>>> https://forum.openmw.org/viewtopic.php?f=2=3053
>>
>> Sounds like you need a library transition.
>>
>> Emilio
> 
> Yes, but the discussion on the libbullet transition went another way:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=790988#35

As you can see in that bug report, there already was a bullet transition for the
GCC 5 / libstdc++6 breaks.

The problem is that openmw 0.36.1-1+b2 was built against bullet 2.83.5+dfsg-2,
but upgrading bullet to 2.83.6+dfsg-1 breaks openmw. That means bullet broke the
ABI and needs a transition.

Cheers,
Emilio



Bug#803096: python-bcrypt: please update python-bcrypt

2015-10-26 Thread Daniel Stender
Source: python-bcrypt
Severity: wishlist
Control: block 800684 by -1

Please update python-bcrypt, we need >= 1.1.0 for Privacyidea.

Thanks,
DS

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)



Bug#685878: [Pkg-netatalk-devel] Bug#685878: Another year has passed, still no netatalk3

2015-10-26 Thread Bernd Zeimetz

On 10/26/2015 01:12 PM, Adrian Knoth wrote:
> Looks like we're talking about ~10 FIXMEs in debian/copyrights. This is
> http://bugs.debian.org/751121.

Did you check if they apply to netatalk 3.1.7?
On the first quick look the problem files are gone.

-- 
 Bernd ZeimetzDebian GNU/Linux Developer
 http://bzed.dehttp://www.debian.org
 GPG Fingerprint: ECA1 E3F2 8E11 2432 D485  DD95 EB36 171A 6FF9 435F



Bug#801809: dh-exec: fix for multiple arch filters

2015-10-26 Thread Paul Gevers
Hi Gergely,

On 19-10-15 21:56, Paul Gevers wrote:
> Success...

Any chance that you are going to release a new version soon? I am
holding back my upload to get this fixed.

Paul



signature.asc
Description: OpenPGP digital signature


Bug#803083: CVE-2015-2695 in libgssapi-krb5-2, SPNEGO context aliasing

2015-10-26 Thread Sam Hartman
Also, do you want to fix the not a DD problem?



Bug#803103: RM: php-guzzlehttp-command/experimental -- ROM; Not used anymore, NPOASR

2015-10-26 Thread David Prévot
Package: ftp.debian.org
Severity: normal

Hi,

php-guzzlehttp-command has just been removed from unstable (#802983),
but it can also go away from experimental for the same reasons.

Regards

David


signature.asc
Description: PGP signature


Bug#802670: apt-cacher-ng debconf setup is a confusing and misleading mess

2015-10-26 Thread Eduard Bloch
Hallo,
* Allison Ryan Lortie [Fri, Oct 23 2015, 06:47:03AM]:
> hi,
> 
> On Thu, Oct 22, 2015, at 13:45, Eduard Bloch wrote:
> > README.Debian tells you such details. Did you care to read it?
> 
> No.  Of course not.  Did you expect me to?

PEBCAK detected...

> > > Alternatively, this whole debconf indirection could be scrapped.  I'm
> > > not exactly sure what value it brings here anyway.
> > 
> > And replaced with what exactly? Please tell me something new, which does
> > not modify the conffile.
> 
> Why do you install files in /etc at all if you expect the admin not to
> modify them?
> 
> If this is your goal, you should put them in /usr/share and update the

No, this is not my goal. I allow the user to add configuration in the
typical conf.d directory style. And I expect an expert admin to know how
this thing works and others to go and RTFM. Or even start READING the
file before hacking on it. It tells you in the first block:

# NOTE: command line switches and other configuration files matching the same
# file naming scheme (*.conf) can override values from this file.

> -c option on the commandline to point to that location instead.  Then
> you could symlink from this /usr/share directory to a file or two in
> /etc that I am actually allowed to modify.

This is not an answer to my previous question, it's just the typical way
to rellocate the playground. How do you integrate manual changing with
debconf in a way that is not confusing someone? And no, saying "I don't
need debconf so let's scrap this shit" is not a solution.

> If I see something in /etc then I more or less assume that I'm allowed
> to configure it.  I'm willing to deal with the keep/replace questions
> from dpkg when they come.

There is no problem with that method. I's just probably not always the
most sensible way.

> Putting a file in /etc and then effectively ignoring its contents is
> just weird... Doing so without even a warning that this is the case is
> only going to cause people to assume that your package is buggy.  See

People not reading easily available information but knowing about
reportbug... what a great mixture. The "fix" I have in mind is adding a
more visible header:

# THERE ARE OTHER CONFIG FILES THAT ALSO CHANGE THE VALUES YOU SEE HERE
# GO CHECK THEM FIRST!!!

Regards,
Eduard.



Bug#802917: do not migrate denyhosts to testing: who will do security support?

2015-10-26 Thread Jan-Pascal van Best
Hi Helmut,

Thanks for showing some care for this package. The main reason for me to
want to support denyhosts was the possibility of the synchronisation
server. I have since written a (AGPL licensed) replacement for the
original, closed source, server, starting from Anne Bezemer's suggestion
in Debian bug#622697.

I may consider offering to do the security support for denyhosts for at
least the stretch support period, but I'm not sure what that would mean
exactly. Is the main work in following CNEs for the package and fixing
them for Debian (and preferably upstream as well)?

Another possibility might be to work with fail2ban upstream to also
support my, or another, synchronisation server, but I'm not sure if they
would be willing to accept patches to that effect.

>  * Your upload reintroduces security bug #692229.
You're right. I checked whether all Debian patches had been implemented
upstream, must have missed this one.

>  * Due to the removal of denyhosts from Debian, the following bugs were
>closed by the ftp masters:
>
>#395565 #436417 #497485 #514024 #529089 #546772 #597956 #567209 #611756
>#622697 #643031 #720130 #729322 #731963
>
>Please evaluate which of them need to be reopened or failing that
>reopen all of them.
Of course, I was planning to do that.

Jan-Pascal



Bug#803092: RFP: python-cookies -- RFC 6265-compliant HTTP cookie parser and renderer in Python

2015-10-26 Thread Daniel Stender
Package: wnpp
Severity: wishlist
Control: block 800684 by -1

* Package name: python-cookies
  Version : 2.2.1
  Upstream Author : Sasha Hart 
* URL : https://gitlab.com/sashahart/cookies
* License : Expat
  Programming Lang: Python
  Description : RFC 6265-compliant HTTP cookie parser and renderer in Python

cookies.py is a Python module for working with HTTP cookies:
parsing and rendering ‘Cookie:’ request headers and ‘Set-Cookie:’
response headers, and exposing a convenient API for creating and
modifying cookies. It can be used as a replacement of Python’s
Cookie.py (aka http.cookies).

This is a requirement for Privacyidea.



Bug#803087: Acknowledgement (hangs often after upgrade to 4.2.0. last time: BUG: unable to handle kernel NULL pointer dereference at 0000000000000040)

2015-10-26 Thread Yaroslav Halchenko
FWIW: did it again:  pressed Ctrl-Win-c while in evince leading to

Oct 26 14:57:01 hopa kernel: [ 3561.805553] gnome-shell[2221]: segfault at 18 
ip 7f288a494c22 sp 7ffd7e8f48f0 error 4 in 
libatspi.so.0.0.1[7f288a47e000+31000]
Oct 26 14:57:03 hopa gnome-shell[8344]: GNOME Shell started at Mon Oct 26 2015 
14:57:02 GMT-0400 (EDT)

which I have of stretch state -- so will upgrade now

$> acpolicy libatspi2.0-0   
libatspi2.0-0:
  Installed: 2.18.0-1
  Candidate: 2.18.0-1
  Version table:
 2.18.1-1 0
600 http://http.debian.net/debian/ sid/main amd64 Packages
 *** 2.18.0-1 0
900 http://http.debian.net/debian/ stretch/main amd64 Packages
100 /var/lib/dpkg/status

That in turn resulted in resetting the resolution (I am scared to try to reset
it back atm ;) )  upgraded the library and will reboot to see/report if
Ctrl-Win-c in evince keeps crashing gnome-shell.  But at least that is how I
ended up in a state whenever changing resolution later resulted in a complete
stall.

-- 
Yaroslav O. Halchenko
Center for Open Neuroscience http://centerforopenneuroscience.org
Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755
Phone: +1 (603) 646-9834   Fax: +1 (603) 646-1419
WWW:   http://www.linkedin.com/in/yarik



Bug#800574: backport to sid/stable? (was RE: libc6: lock elision hazard on Intel Broadwell and Skylake)

2015-10-26 Thread Carlos Alberto Lopez Perez
On 26/10/15 20:13, Carlos Alberto Lopez Perez wrote:
> On 23/10/15 22:10, Henrique de Moraes Holschuh wrote:
>> On Fri, Oct 23, 2015, at 11:13, Carlos Alberto Lopez Perez wrote:
>>> I was having trouble (crashes with the NVIDIA proprietary driver) on a
>>> Debian system with an i7-5775C and libc6=2.19-18+deb8u1 (stable)
>>
>> This is very very likely to be braindamage on the NVIDIA driver, though.
>>
>> Are you sure that driver is not doing something as idiotic as unlocking
>> an already unlocked mutex ?
>>
>> The proper fix in that case is _always_ to fix whatever is broken,
>> because eventually it will run on something that has working hardware
>> lock elision... and crash.
>>
> 
> I can't know, since I don't have access to the source code of the
> driver, neither the debug symbols are available, so any attempt to get a
> meaningful backtrace was hopeless.
> 
> At first I also thought it was the driver doing something wrong, but
> then I found several reports of people with the same cryptic backtrace
> than me saying that this was because of the TSX-NI bug of recent Intel
> CPUs [1].
> 
> And effectively, after upgrading glibc to this one that disables TSX-NI
> for broadwell it suddenly works as expected...
> 
> So this seems to suggest that effectively TSX-NI is buggy on this CPU.
> 
> In any case... Do you know of any program or test that I can run to
> check if TSX-NI (both HLE and RTM) is working as it should or is still
> buggy on this CPU? That way we can verify better if the problem is in
> the CPU or in the driver.
> 

I'm re-reading your explanation [2] about programs crashing with SIGSEV
in __lll_unlock_elision when TSX is enabled to be caused by the program
itself trying to unlock an already unlocked lock. That would explain
everything, and will point indeed to a bug in the NVIDIA driver rather
than in the CPU.

Also, this specific model of CPU (i7-5775C) for what I have been reading
seems to have fixed TSX-NI support. At least the ark page of Intel still
advertises it [3]. In any case I'm still interested in testing this to
be 100% sure. If you know about any test program that I can run, please
let me know about it.

Cheers
--

[2] https://bugzilla.kernel.org/show_bug.cgi?id=103351#c86
[3]
http://ark.intel.com/products/88040/Intel-Core-i7-5775C-Processor-6M-Cache-up-to-3_70-GHz



signature.asc
Description: OpenPGP digital signature


Bug#649287: tomahawk-player -- multi-source social media player

2015-10-26 Thread Stefan Ahlers
Hi,

I'm one of the maintainer of the tomahawk PPA for ubuntu 
(https://launchpad.net/~tomahawk).

Tomahawk 0.8.4 is stable. I would be very happy if someone could help me to 
bring tomahawk to debian.

At the moment tomahawk-player is blocked by:
 * #766594 (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=766594) 
 * #648668 (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=648668)

Tomahawk does not depend on qtweetlib any longer and so it is not blocked by 
#700028 
(https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700028)

Kindly regards,

Stefan Ahlers
https://launchpad.net/~justin-time



Bug#803094: qgis-plugin-grass: Backports supports QGIS 2.8 on amd64 but not unstable

2015-10-26 Thread Tyson Whitehead
Package: qgis-plugin-grass
Version: 2.4.0-1+b1
Severity: normal

It seems the amd64 grass plugin is available for QGIS 2.8 in backports

https://packages.debian.org/jessie-backports/qgis-plugin-grass

while unstable is stuck with the old 2.4 QGIS version

https://packages.debian.org/sid/qgis-plugin-grass

Thanks!  -Tyson

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'unstable'), 
(500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)



Bug#802618: Bug #802618

2015-10-26 Thread Julien Cristau
On Mon, Oct 26, 2015 at 19:00:50 +0100, mario_lu...@tiscali.it wrote:

>  Hi Julien,
> because as i wrote in my first/triple post i have not installed systemd,
> and if i try to "just install" the system tries to install it so i thought,
> that the only way for me to try the solution of Andreas is to do what i did.
> I'll be happy to try other test and pass any technical information within,
> the limits of my knowledge.

You need to install libpam-systemd properly.  That means including its
dependencies.

Cheers,
Julien


signature.asc
Description: PGP signature


Bug#798601: Bug Analyzation

2015-10-26 Thread Roelof Berg
I wonder what might be the best way, to test my fix for MIPS. Esp. I 
wonder how the Debian build server operates. I would normally assume a 
cross-compile - but the tests seem to be executed on a real MIPS. Might 
it be emulated ?


On 28.09.2015 22:53, Roelof Berg wrote:

I assume, the software is ok but the test automation is not.
Regards, Roelof




Bug#803104: yelp: FTBFS: Segmentation fault

2015-10-26 Thread Michael Biebl
Control: forwarded -1 https://bugzilla.gnome.org/show_bug.cgi?id=757061
Am 26.10.2015 um 22:50 schrieb Chris Lamb:
> Source: yelp
> Version: 3.18.1-1
> Severity: serious
> Justification: fails to build from source
> User: reproducible-bui...@lists.alioth.debian.org
> Usertags: ftbfs
> X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
> 
> Dear Maintainer,
> 
> yelp fails to build from source in unstable/amd64. (Whilst it segfaults,
> I think this actually is due to the lack of an $DISPLAY - see the
> warnings. Perhaps something like xvfb is needed?)

Hi Chris, we are aware of the issue. See also the upstream bug report.

A possible workaround which we tossed around on #debian-gnome is indeed
to run the build under X:


Index: debian/control
===
--- debian/control  (Revision 46808)
+++ debian/control  (Arbeitskopie)
@@ -29,6 +29,8 @@
libwebkit2gtk-4.0-dev (>= 2.7.1),
libsqlite3-dev,
yelp-xsl (>= 3.12.0),
+   xvfb,
+   xauth
 Vcs-Svn: svn://anonscm.debian.org/pkg-gnome/desktop/unstable/yelp
 Vcs-Browser:
https://anonscm.debian.org/viewvc/pkg-gnome/desktop/unstable/yelp
 Homepage: https://wiki.gnome.org/Apps/Yelp
Index: debian/control.in
===
--- debian/control.in   (Revision 46808)
+++ debian/control.in   (Arbeitskopie)
@@ -25,6 +25,8 @@
libwebkit2gtk-4.0-dev (>= 2.7.1),
libsqlite3-dev,
yelp-xsl (>= 3.12.0),
+   xvfb,
+   xauth
 Vcs-Svn: svn://anonscm.debian.org/pkg-gnome/desktop/unstable/yelp
 Vcs-Browser:
https://anonscm.debian.org/viewvc/pkg-gnome/desktop/unstable/yelp
 Homepage: https://wiki.gnome.org/Apps/Yelp
Index: debian/rules
===
--- debian/rules(Revision 46808)
+++ debian/rules(Arbeitskopie)
@@ -8,6 +8,9 @@

 DEB_DH_MAKESHLIBS_ARGS_ALL += -X/usr/lib/yelp/ -V -- -c4

+# workaround for https://bugzilla.gnome.org/show_bug.cgi?id=757061
+DEB_MAKE_ENVVARS = xvfb-run
+
 LDFLAGS += -Wl,-z,defs -Wl,-O1 -Wl,--as-needed


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#685878: [Pkg-netatalk-devel] Bug#685878: Another year has passed, still no netatalk3

2015-10-26 Thread Jonas Smedegaard
Quoting Bernd Zeimetz (2015-10-26 22:31:56)
> On 10/26/2015 09:37 PM, Jonas Smedegaard wrote:
>
>> Thanks for your kind interest in this issue.
>> 
>> I apologize for misunderstanding in what way you wanted to help
>> here.
>
> No worries.
> So far I was not able to find any pointer to an upstream bug report 
> regarding the copyright issue, nor was I able to find an upstream bug 
> report.

I believe that is because noone in the Netatalk team has found time yet
to report the issue upstream.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


signature.asc
Description: signature


Bug#778720: Testing

2015-10-26 Thread Santiago Garcia Mantinan
> I'll report back as soon as I have it testing for some days (for good news)
> or earlier if the results are not good :-(

Well, it's been running for three full days now without any problem, so I
guess we can say good catch James and thank you both :-)

Just in case somebody needs it and while you don't integrate this into a new
package I have moved the old binaries to the old--disable-atomic directory
and uploaded my jessie compiled binaries of current debian-security version
patched with your patch at:
https://people.debian.org/~manty/bind9_mips/new-earlyclobber/

Again thanks for caring, hope to see this in next stable update or security
build as well as unstable.

Regards.
-- 
Manty/BestiaTester -> http://manty.net



Bug#781938: RFS: vid.stab/0.98b-1

2015-10-26 Thread Andreas Cadhalpun
On 26.10.2015 23:00, Felipe Sateler wrote:
> On 26 October 2015 at 18:34, Andreas Cadhalpun
>  wrote:
>> On 26.10.2015 13:15, Felipe Sateler wrote:
>>> I see that Andreas Cadhalpun (in CC) expressed interest in this
>>> package and apparently already forwarded that patch upstream. Andreas,
>>> did you ever get a response on that?
>>
>> No, unfortunately not. That's why I didn't pursue this any further,
>> as I assumed that upstream is not active anymore. Am I wrong about that?
> 
> The last commit in github[1] is from May. So not really active, no.
> But that doesn't mean we shouldn't provide the package (as long as
> there is a willing maintainer).

Yes, it just means that one can't expect any help from upstream.

Regarding Vincent's packaging:

 * d/control:
- 'Priority: optional' not extra
- packages should be 'Multi-Arch: same'
 * d/copyright: misses copyright of 'Alexey Osipov'

The tests could be run e.g. with:
cd tests; cmake .; make all; ./tests

However, the return code is wrong [2].

Best regards,
Andreas


2: 
https://bugs.debian.org/cgi-bin/bugreport.cgi?att=2;filename=0002-tests-return-0-upon-success.patch;bug=781938;msg=20



Bug#803109: gcc-5: If compiled with gcc-5, GnuPG classic cannot import certain public keys

2015-10-26 Thread Christian Pietsch
Package: gcc-5
Version: 5.2.1-22
Severity: normal
Tags: upstream

Dear Maintainer,

I noticed that on Debian testing, I cannot import a certain public key into
gnupg-1.4.19 that I can import on Debian stable. This is how the bug is
triggered:

$ gpg --recv-key 67F41449
gpg: requesting key 67F41449 from hkp server keys.gnupg.net
gpg: DBG: armor-keys-failed (KEY 0x67F41449 BEGIN
) ->0
gpg: DBG: armor-keys-failed (KEY 0x67F41449 END
) ->0
gpg: assuming bad signature from key 67F41449 due to an unknown critical bit
gpg: assuming bad signature from key 67F41449 due to an unknown critical bit
gpg: key 67F41449: no valid user IDs
gpg: this may be caused by a missing self-signature
gpg: Total number processed: 1
gpg:   w/o user IDs: 1
$ gpg --list-key 67F41449
gpg: error reading key: public key not found

When I compiled vanilla versions of recent GnuPG classic releases, noting 
changed.
Only after I did `./configure CC=gcc-4.9`, the key could be imported:

$ gpg --recv-key 67F41449
gpg: requesting key 67F41449 from hkp server keys.gnupg.net
gpg: DBG: armor-keys-failed (KEY 0x67F41449 BEGIN
) ->0
gpg: DBG: armor-keys-failed (KEY 0x67F41449 END
) ->0
gpg: key 67F41449: public key "Xxx Yyy " imported
gpg: Total number processed: 1
gpg:   imported: 1  (RSA: 1)
$ gpg --list-key 67F41449 >/dev/null && echo works
works

GnuPG's test suite currently does not catch this bug, i.e. `make check`
succeeds in any case.

-- System Information:
Debian Release: stretch/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gcc-5 depends on:
ii  binutils  2.25.1-7
ii  cpp-5 5.2.1-22
ii  gcc-5-base5.2.1-22
ii  libc6 2.19-22
ii  libcc1-0  5.2.1-22
ii  libgcc-5-dev  5.2.1-22
ii  libgcc1   1:5.2.1-22
ii  libgmp10  2:6.0.0+dfsg-7
ii  libisl13  0.14-2
ii  libmpc3   1.0.3-1
ii  libmpfr4  3.1.3-1
ii  libstdc++65.2.1-22
ii  zlib1g1:1.2.8.dfsg-2+b1

Versions of packages gcc-5 recommends:
ii  libc6-dev  2.19-22

Versions of packages gcc-5 suggests:
pn  gcc-5-doc 
pn  gcc-5-locales 
pn  gcc-5-multilib
pn  libasan2-dbg  
pn  libatomic1-dbg
pn  libcilkrts5-dbg   
pn  libgcc1-dbg   
pn  libgomp1-dbg  
pn  libitm1-dbg   
pn  liblsan0-dbg  
pn  libmpx0-dbg   
pn  libquadmath0-dbg  
pn  libtsan0-dbg  
pn  libubsan0-dbg 

-- no debconf information



Bug#801998: RFP: libgroovycsv-groovy-java - simple CSV parsing library for groovy

2015-10-26 Thread Emmanuel Bourg
groovycsv is now in NEW. This package was an easy one and took
~45 minutes to create.

Emmanuel Bourg



Bug#803072: [Pkg-lxqt-devel] Bug#803072: qlipper: FTBFS: error: ambiguous overload for 'operator<<' (operand types are 'QDataStream' and 'int')

2015-10-26 Thread Alf Gaida
Hi Chris,

thanks for the report, the issue will be fixed with the next upload.
Dunno if upstream reacting in a timely manner - if not, the needed
patch is in git anyways.

Cheers,
-- 
Alf Gaida
BDBF C688 EFAD BA89 5A9F  464B CD28 0A0B 4D72 827C


pgpxt1_8Q_Ngv.pgp
Description: Digitale Signatur von OpenPGP


Bug#798500: Drush version in Debian package

2015-10-26 Thread Jan Pobořil
> Pretty much. Upstream has basically rewrote the whole distribution
> mechanism to depend on Composer, which made it very hard to package new
> versions, as composer isn't itself packaged in Debian (or wasn't, last i
> checked):
>
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714118
>
> I have therefore orphaned the package:
>
> https://bugs.debian.org/798500


So am I understand correctly that Composer package will be in repository
soon?


> I do not use drush anymore, either. You are welcome, of course, to take
> over the package! :)


I am just blind user of apt-get.

But it will be much more possible to find somebody if there will be some
guide how to pack Composer packages to deb clearly.

Including solution for other dependencies what are only in Composer’s
repository and how to make packages „system-global” not „user-global” (most
„global” option Composer knows).


Bug#691199: ksh

2015-10-26 Thread Nicholas Bamber

block 790118 by 691199 764401
thanks


The text of #790118 asks that the ksh package run 'add-shell /bin/ksh' 
after install, and reverses it after removal. In of itself this is 
reasonable, Debian has two implementations of ksh (both of which are 
currently orphaned). Both use the update-alternatives system. So it 
needs to do something more refined. So both ksh and mksh need to 
cooperate to make this happen. They should follow the same standards.


Hence I am blocking this bug on both packages being maintained. More 
generally I think the following should happen:


1. The ksh package needs to be renamed to ksh93 and provide 'ksh' as a 
virtual package.


2. mksh also should provide 'ksh' as a virtual package.

3. It seems mksh does not update the man pages via update-alternatives.

4. The above mentioned cooperation on add-shell/remove-shell. I think 
this would be in the postinst running add-shell /bin/ksh and in the 
postrm checking if /bin/ksh still exists and if not running remove-shell 
/bin/ksh.




Bug#803083: CVE-2015-2695 in libgssapi-krb5-2, SPNEGO context aliasing

2015-10-26 Thread Benjamin Kaduk
On Mon, 26 Oct 2015, Salvatore Bonaccorso wrote:

> On Mon, 26 Oct 2015 14:26:44 -0400 (EDT) Benjamin Kaduk  wrote:
> > Package: libgssapi-krb5-2
> > Version: 1.8.3+dfsg-4squeeze7
> > Tags: security fixed-upstream
> >
> > A partially constructed GSS security context can access a pointer as the
> > wrong type, generally causing a program crash.  Fixed upstream at
> > https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d

Hi Salvatore,

As I am only a DM, not a DD, should I send you just source debdiffs for
jessie and wheezy?

Thanks,

Ben



Bug#801994: hosts stuck in refresh

2015-10-26 Thread Stefan Bühler
Hi,

On Mon, 26 Oct 2015 17:51:25 +0100
Patrick Matthäi  wrote:

> Am 16.10.2015 um 20:23 schrieb Stefan Bühler:
> > Package: apt-dater
> > Version: 1.0.2+git20150804-1
> > 
> > Hi,
> > 
> > every host I refresh stays in refresh forever, until i force close
> > apt-dater and restart. after a restart it seems to have the correct
> > package states.
> > 
> > On the server I saw "/usr/bin/perl /usr/bin/apt-dater-host refresh"
> > running at first, and then it finished.
> >   
> 
> What processes are running on the machine where you have invoked
> apt-dater itself? Do you have got this problem everytime?
> 

It have this problem at home, at work, everytime, not a single refresh
succeeds. Although I usually use "aptitude" as DPKGTOOL I just tried
one host with "apt-get", but it doesn't change anything.

When I start the refresh I see this for every host:

/bin/sh /usr/lib/x86_64-linux-gnu/apt-dater/cmd
 \_ /usr/bin/ssh -t -n -o BatchMode=yes -o ConnectTimeout=5 -l root $hostname 
apt-dater-host refresh

After a while they finish, but nothing happens in the apt-dater ui.
Please note that these processes do not appear as children of apt-dater
in "ps aufx".

I ran one of the ssh commands directly, and the remote end isn't happy
about the "-t" flag (first output line: "Pseudo-terminal will not be
allocated because stdin is not a terminal."). Apart from that the
output looks fine afaict. To get rid of the "-t" flag I need to
explicitly set opt-cmd-flags="" (which doesn't fix the problem either).

I tracked the end of one refresh with strace, and it successfully read
the status from a pipe, wrote it into ".stat.new" file, closed it, renamed it 
into
".stat", and unlocked and closed the ".stat.lck" file.
During all that and after the unlock inotify triggers events in the
second thread, and it seems to try to wakeup the first thread:

(5 is the [eventfd] of the second thread it seems, 7 is inotify, 3 and 6 are 
[eventfd]s too)

[pid 24033] flock(26, LOCK_UN)  = 0
[pid 24033] close(26)   = 0
[pid 24033] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 24033] brk(0x1b21000)  = 0x1b21000
[pid 24033] poll([{fd=3, events=POLLIN}], 1, 0) = 1 ([{fd=3, revents=POLLIN}])
[pid 24033] select(1, [0], NULL, NULL, {0, 20} 

First thread just ignored the POLLIN event on fd 3... wtf?

[pid 24034] <... poll resumed> )= 0 (Timeout)
[pid 24034] read(5, 0x7f18aa20cd00, 16) = -1 EAGAIN (Resource temporarily 
unavailable)
[pid 24034] write(5, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 24034] read(7, "\2\0\0\0\2\0\0\0\0\0\0\0 \0\0\0"..., 4096) = 240
[pid 24034] write(3, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 24034] write(5, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 24034] write(5, "\1\0\0\0\0\0\0\0", 8) = 8
[pid 24034] poll([{fd=5, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) 
= 1 ([{fd=5, revents=POLLIN}])
[pid 24034] poll([{fd=5, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) 
= 1 ([{fd=5, revents=POLLIN}])
[pid 24034] read(5, "\3\0\0\0\0\0\0\0", 16) = 8
[pid 24034] poll([{fd=5, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 

[pid 24033] <... select resumed> )  = 0 (Timeout)
[pid 24033] rt_sigaction(SIGTSTP, {SIG_IGN, [], SA_RESTORER|SA_RESTART, 
0x7f18afb5d8d0}, {0x7f18aed9d4c0, [], SA_RESTORER|SA_RESTART, 0x7f18afb5d8d0}, 
8) = 0
[pid 24033] select(1, [0], NULL, NULL, {0, 0}) = 0 (Timeout)
[pid 24033] select(1, [0], NULL, NULL, {0, 0}) = 0 (Timeout)
[pid 24033] rt_sigaction(SIGTSTP, {0x7f18aed9d4c0, [], SA_RESTORER|SA_RESTART, 
0x7f18afb5d8d0}, NULL, 8) = 0
[pid 24033] poll([{fd=3, events=POLLIN}], 1, 0) = 1 ([{fd=3, revents=POLLIN}])

First thread really didn't want to handle it, now it finally does.

[pid 24033] read(3, "\4\0\0\0\0\0\0\0", 16) = 8
[pid 24033] poll([{fd=3, events=POLLIN}], 1, 0) = 0 (Timeout)
[pid 24033] read(3, 0x7ffd85173f30, 16) = -1 EAGAIN (Resource temporarily 
unavailable)
[pid 24033] select(1, [0], NULL, NULL, {0, 20}) = 0 (Timeout)

It looks like the first thread tries to handle multiple event loops at
the same time.. select, poll, ... WTF?

Anyway, I hope this helps.

regards,
Stefan


pgpVzucnGyCjA.pgp
Description: OpenPGP digital signature


Bug#803083: CVE-2015-2695 in libgssapi-krb5-2, SPNEGO context aliasing

2015-10-26 Thread Benjamin Kaduk
On Mon, 26 Oct 2015, Sam Hartman wrote:

> Do I need to do anything here?

Maybe, maybe not.

I am working on debdiffs for jessie and wheezy.  If I remember correctly,
those need to get reviewed by the security team and then uploaded to the
security queue.  It may make more sense for you to do the uploads than
Salvatore, depending on how the timing works out.

-Ben



Bug#685878: [Pkg-netatalk-devel] Bug#685878: Another year has passed, still no netatalk3

2015-10-26 Thread Bernd Zeimetz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256



On 10/26/2015 09:37 PM, Jonas Smedegaard wrote:

> Thanks for your kind interest in this issue.
> 
> I apologize for misunderstanding in what way you wanted to help
> here.

No worries.
So far I was not able to find any pointer to an upstream bug report
regarding the copyright issue, nor was I able to find an upstream bug
report.

If you are unwilling to maintain the package, please give at least
pointers to the appropriate information. The current state of netatalk
in Debian is not acceptable.


- -- 
 Bernd ZeimetzDebian GNU/Linux Developer
 http://bzed.dehttp://www.debian.org
 GPG Fingerprint: ECA1 E3F2 8E11 2432 D485  DD95 EB36 171A 6FF9 435F
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=OWVi
-END PGP SIGNATURE-



Bug#802682: updated the patch with some more improvements to the example

2015-10-26 Thread Daniel Pocock

I've updated the patch file again, the latest version is attached

This is based on feedback from Simon Josefsson for the RTC Quick Start Guide
https://github.com/opentelecoms-org/RTCQuickstartGuide/issues/1

>From 4bf44b8f2c99e8be23b666f01fe6e1ce979c864f Mon Sep 17 00:00:00 2001
From: Daniel Pocock 
Date: Thu, 22 Oct 2015 17:40:05 +0200
Subject: [PATCH] Add DNS records for TURN over UDP to example zone file

---
 en-US/11_network-services.xml | 18 +-
 1 file changed, 13 insertions(+), 5 deletions(-)

diff --git a/en-US/11_network-services.xml b/en-US/11_network-services.xml
index eed3323..381268f 100644
--- a/en-US/11_network-services.xml
+++ b/en-US/11_network-services.xml
@@ -3097,13 +3097,21 @@ TLS_CACERT  /etc/ssl/certs/ca-certificates.crt
 server1IN A  198.51.100.19
 server1IN    2001:DB8:1000:2000::19
 
-; some convenient CNAMEs
-turn-serverIN CNAME  server1
-sip-proxy  IN CNAME  server1
-xmpp-gwIN CNAME  server1
+; IPv4 only for TURN for now, some clients are buggy with IPv6
+turn-serverIN A  198.51.100.19
 
-; DNS SRV for STUN / TURN
+; IPv4 and IPv6 addresses for SIP
+sip-proxy  IN A  198.51.100.19
+sip-proxy  IN    2001:DB8:1000:2000::19
+
+; IPv4 and IPv6 addresses for XMPP
+xmpp-gwIN A  198.51.100.19
+xmpp-gwIN    2001:DB8:1000:2000::19
+
+; DNS SRV and NAPTR for STUN / TURN
 _stun._udp  IN SRV0 1 3467 turn-server.falcot.com.
+_turn._udp  IN SRV0 1 3467 turn-server.falcot.com.
+@   IN NAPTR  10 0 "s" "RELAY:turn.udp" "" _turn._udp.falcot.com.
 
 ; DNS SRV and NAPTR records for SIP
 _sips._tcp  IN SRV0 1 5061 sip-proxy.falcot.com.
-- 
2.1.4



Bug#802976: Should this package be removed?

2015-10-26 Thread Moritz Mühlenhoff
On Sun, Oct 25, 2015 at 07:51:20PM +0100, Thibaut Girka wrote:
> On Sun, Oct 25, 2015 at 07:41:29PM +0100, Moritz Muehlenhoff wrote:
> > Package: bluemindo
> > Severity: serious
> > 
> > - Dead upstream (the current 0.3 release is from 2009)
> 
> A new major version is on the way and should be released soon.
>
> > - Relies on gstreamer 0.10 which is scheduled for removal
> 
> This won't be the case anymore with the new release.

You should update https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=785833
with that information!

Cheers,
Moritz



Bug#687251: I confirm this bug also in 3.16.1-1

2015-10-26 Thread Luca Lav
Hi
i have the same issue in the  3.16.1-1
Start yelp search something, sometime happen when you open a result
sometime after a second search.
The CPu use an entire cose so on my PC Monitor show 25%, top show 100%.
Closing yelp windows leave the process running , after some time i can
hear the fan start so i have to kill the pocess.
Best Regards 
Luca



Bug#797926: transition: openssl: remove SSLv3 methods

2015-10-26 Thread Emilio Pozuelo Monfort
On 24/10/15 11:22, Kurt Roeckx wrote:
> On Wed, Sep 16, 2015 at 10:17:10PM +0100, Jonathan Wiltshire wrote:
>> On Wed, Sep 09, 2015 at 12:25:16PM +0200, Kurt Roeckx wrote:
>>> On Thu, Sep 03, 2015 at 10:36:33PM +0100, Jonathan Wiltshire wrote:
> So do I start with an soname change and upload that to
> experimental?

 Yes please.
>>>
>>> So that has passed the new queue now.  Please let me know when I
>>> can start this in unstable.
>>
>> Looking at the tracker there are (as I suspected) quite a number of
>> collisions with the ongoing g++ work. We'll try and arrange a slot when
>> things are calmer.
> 
> So any idea when you'll have time for this?

Possibly after the perl one, if the libstdc++ one allows for this (I need to
check). This is in my radar.

Cheers,
Emilio



Bug#802002: RFP: libgraxxia-groovy-java - wrappers for doing Mathematics in Groovy

2015-10-26 Thread Emmanuel Bourg
graxxia is now in NEW, it took me 1 hour to package it. I packaged the
latest version available in the Github repository (commit 85b386e), this
version doesn't match the jar released in Maven Central under the
version 1.0.1 because the repository is missing the Bars class. I
suspect the Git repository is between the versions 0.9 and 1.0, so I
used the version 1.0~20150714 for the package.

Emmanuel Bourg



Bug#803111: ITP: python-flask-rdf -- Flask decorator to output RDF using content negotiation

2015-10-26 Thread Iain R. Learmonth
Package: wnpp
Severity: wishlist
Owner: "Iain R. Learmonth" 

* Package name: python-flask-rdf
  Version : 0.1.7
  Upstream Author : Walter Huf
* URL : https://pypi.python.org/pypi/flask_rdf/0.1.7
* License : BSD-2-clause
  Programming Lang: Python
  Description : Flask decorator to output RDF using content negotiation

Apply the @flask_rdf decorator to a view function and return an rdflib
Graph object. Flask_rdf will automatically format it into an RDF output
format, depending on what the request’s Accept header says. If the view
function returns something besides an rdflib graph, it will be passed
through without modification.

Custom formats can be registered easily. After registering the new
serializer with rdflib’s plugin support, use the decide_format method to
register a new mimetype request to use the new formatter.



Bug#802896: nautilus: Icons are to big...

2015-10-26 Thread gpe
Package: nautilus
Version: 3.18.0-2+b1
Followup-For: Bug #802896

Dear Maintainer,

Icons are too big at the normal level and the minimum doesn't allow
small icons.
Thanks to restore previous settings.

BR

-- System Information:
Debian Release: stretch/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages nautilus depends on:
ii  desktop-file-utils 0.22-1
ii  gsettings-desktop-schemas  3.18.0-1
ii  gvfs   1.26.1.1-1
ii  libatk1.0-02.18.0-1
ii  libc6  2.19-22
ii  libcairo-gobject2  1.14.2-2
ii  libcairo2  1.14.2-2
ii  libexempi3 2.2.2-2+b1
ii  libexif12  0.6.21-2
ii  libgail-3-03.18.2-1
ii  libgdk-pixbuf2.0-0 2.32.1-1
ii  libglib2.0-0   2.46.1-1
ii  libglib2.0-data2.46.1-1
ii  libgnome-desktop-3-12  3.18.1-1
ii  libgtk-3-0 3.18.2-1
ii  libnautilus-extension1a3.18.0-2+b1
ii  libpango-1.0-0 1.38.1-1
ii  libpangocairo-1.0-01.38.1-1
ii  libselinux12.3-2+b1
ii  libtracker-sparql-1.0-01.6.0-1
ii  libx11-6   2:1.6.3-1
ii  libxml22.9.2+zdfsg1-4
ii  nautilus-data  3.18.0-2
ii  shared-mime-info   1.5-2

Versions of packages nautilus recommends:
ii  gnome-icon-theme-symbolic  3.12.0-1
ii  gnome-sushi3.18.0-1
ii  gvfs-backends  1.26.1.1-1
ii  librsvg2-common2.40.11-1

Versions of packages nautilus suggests:
ii  acroread [pdf-viewer]  9.5.5-dmo2
ii  brasero3.12.1-1
ii  eog3.18.0-1+b1
ii  evince [pdf-viewer]3.18.0-1
ii  totem  3.18.1-1+b1
ii  tracker1.6.0-1
ii  vlc [mp3-decoder]  1:2.2.1-dmo11
ii  vlc-nox [mp3-decoder]  1:2.2.1-dmo11
ii  xdg-user-dirs  0.15-2

-- no debconf information



Bug#797517: Fwd: suggestions for rubber Debian packaging.

2015-10-26 Thread Preuße
On 24.10.2015 01:47, Nicolas Boulenguez wrote:

Hi Nicolas,

Thanks for contribution!

> Regarding the Debian packaging at https://freeshell.de/~hille42/rubber/ 
> (Hilmar):
> 
> The recommended way to ask for review is via mentors.debian.org.
> 
As it was just a question regarding your patches I thought it would be a good
idea to contact you directly.

> Dget does not seem to work on your site,
> 
Works for me:

hille@sid:~/t1 $ dget https://freeshell.de/~hille42/rubber/rubber_1.3-1.dsc
dget: retrieving https://freeshell.de/~hille42/rubber/rubber_1.3-1.dsc
  % Total% Received % Xferd  Average Speed   TimeTime Time  Current
 Dload  Upload   Total   SpentLeft  Speed
100  1260  100  12600 0   1653  0 --:--:-- --:--:-- --:--:--  1653
dget: retrieving https://freeshell.de/~hille42/rubber/rubber_1.3.orig.tar.xz
  % Total% Received % Xferd  Average Speed   TimeTime Time  Current
 Dload  Upload   Total   SpentLeft  Speed
100 87128  100 871280 0   284k  0 --:--:-- --:--:-- --:--:--  285k
dget: retrieving https://freeshell.de/~hille42/rubber/rubber_1.3-1.debian.tar.xz
  % Total% Received % Xferd  Average Speed   TimeTime Time  Current
 Dload  Upload   Total   SpentLeft  Speed
100 10652  100 106520 0  26603  0 --:--:-- --:--:-- --:--:-- 26563
rubber_1.3-1.dsc:
dscverify: rubber_1.3-1.dsc failed signature check:

> and this discussion should be public as all work inside Debian.
> 
Is https://bugs.debian.org/797517 publicly enough?

> debian/changelog may be less verbose: if a patch is dropped with a new
> upstream release, anyone can guess that it has become obsolete. You
> should only document there changes affecting the Debian packaging.
> 
Agreed. Applied your patches, which correct this.

> The right way to drop a patch is to remove it from debian/patch/series
> and remove the actual patch file from the debian/patches directory.
> 
As my code is in SVN I removed the patches now.

> Patches should be documented by a header as described at
> http://dep.debian.net/deps/dep3/. For example:
> 
Applied.

> control: why split Build-Depends and Build-Depends-Indep? This has no effect
> other than confusing the reader.
> 
I took over debian/rules from the previous maintainer and didn't care much about
if it could confuse possible readers. A task for the future.

Your patch, which replaces debian/rules I didn't apply as it brings me another 3
lintian errors.

Now running lintian...
E: rubber: python-script-but-no-python-dep usr/bin/rubber
E: rubber: python-script-but-no-python-dep usr/bin/rubber-info
E: rubber: python-script-but-no-python-dep usr/bin/rubber-pipe
Finished running lintian.

Could be a bug in lintian as the Debian package has a dep on python.

Hilmar
-- 
http://www.hilmar-preusse.de.vu/   #206401 http://counter.li.org



Bug#803105: libxml2: unknown directive 'active-noawait'

2015-10-26 Thread Rainer Dorsch
Package: libxml2
Version: 2.7.8.dfsg-2+squeeze12
Severity: normal


Hello,

the recent libxml2 squeeze-lts upgrade fails here with

keyweb:~# apt-get install -f
Reading package lists... Done
Building dependency tree   
Reading state information... Done
Correcting dependencies... Done
The following packages were automatically installed and are no longer required:
  libtasn1-3-dev libgpg-error-dev libgcrypt11-dev libgnutls-dev libidn11-dev
Use 'apt-get autoremove' to remove them.
The following extra packages will be installed:
  libxml2
Recommended packages:
  xml-core
The following packages will be upgraded:
  libxml2
1 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.
2 not fully installed or removed.
Need to get 0 B/813 kB of archives.
After this operation, 241 kB of additional disk space will be used.
Do you want to continue [Y/n]? 
(Reading database ... 76027 files and directories currently installed.)
Preparing to replace libxml2 2.7.8.dfsg-2+squeeze12 (using 
.../libxml2_2.7.8.dfsg-2+squeeze13_i386.deb) ...
dpkg: error processing 
/var/cache/apt/archives/libxml2_2.7.8.dfsg-2+squeeze13_i386.deb (--unpack):
 triggers ci file contains unknown directive `activate-noawait'
configured to not write apport reports
  Errors were encountered while processing:
 /var/cache/apt/archives/libxml2_2.7.8.dfsg-2+squeeze13_i386.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)
keyweb:~#

Rainer


-- System Information:
Debian Release: 6.0.10
  APT prefers squeeze-lts
  APT policy: (500, 'squeeze-lts'), (500, 'oldoldstable-updates'), (500, 
'oldoldstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.18-028stab101.1 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages libxml2 depends on:
ii  libc6   2.11.3-4+deb6u7  Embedded GNU C Library: Shared lib
ii  zlib1g  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages libxml2 recommends:
pn  xml-core   (no description available)

libxml2 suggests no packages.

-- no debconf information



Bug#781938: RFS: vid.stab/0.98b-1

2015-10-26 Thread Felipe Sateler
On 26 October 2015 at 18:34, Andreas Cadhalpun
 wrote:
> Hi,
>
> On 26.10.2015 13:15, Felipe Sateler wrote:
>> I see that Andreas Cadhalpun (in CC) expressed interest in this
>> package and apparently already forwarded that patch upstream. Andreas,
>> did you ever get a response on that?
>
> No, unfortunately not. That's why I didn't pursue this any further,
> as I assumed that upstream is not active anymore. Am I wrong about that?

The last commit in github[1] is from May. So not really active, no.
But that doesn't mean we shouldn't provide the package (as long as
there is a willing maintainer).

[1] https://github.com/georgmartius/vid.stab




-- 

Saludos,
Felipe Sateler



Bug#803104: yelp: FTBFS: Segmentation fault

2015-10-26 Thread Michael Biebl
Am 26.10.2015 um 23:12 schrieb Michael Biebl:
> Control: forwarded -1 https://bugzilla.gnome.org/show_bug.cgi?id=757061
> Am 26.10.2015 um 22:50 schrieb Chris Lamb:
>> Source: yelp
>> Version: 3.18.1-1
>> Severity: serious
>> Justification: fails to build from source
>> User: reproducible-bui...@lists.alioth.debian.org
>> Usertags: ftbfs
>> X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
>>
>> Dear Maintainer,
>>
>> yelp fails to build from source in unstable/amd64. (Whilst it segfaults,
>> I think this actually is due to the lack of an $DISPLAY - see the
>> warnings. Perhaps something like xvfb is needed?)
> 
> Hi Chris, we are aware of the issue. See also the upstream bug report.
> 
> A possible workaround which we tossed around on #debian-gnome is indeed
> to run the build under X:

Needless to say, that this workaround is pretty ugly.
An alternative could be to disable the gtk-doc build (temporarily) and
ship the upstream provided doc files.
That in turn would mean, the package fails to build twice in a row (as
clean will remove the pre-generated docs).

Anyway, let's see if upstream has an idea.

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#789077: ruby2.2 transition: about to switch the default in unstable

2015-10-26 Thread Emilio Pozuelo Monfort
On 25/10/15 16:08, Christian Hofstaedtler wrote:
> * Emilio Pozuelo Monfort  [151023 00:03]:
>> Thanks, and no rush. Just wanted to make sure this didn't fall under the 
>> cracks.
> 
> Yeah, super sorry that this took so long.
> 
> Here are my results, rgd. the packages still listed on the ruby2.2
> transition tracker (all on amd64):

Thanks for the update. Can you open bug reports (if they don't exist yet) and
make them block this one?

Thanks,
Emilio



Bug#802735: nodejs: add autopkgtests

2015-10-26 Thread dann frazier
On Fri, Oct 23, 2015 at 09:14:54AM +0200, Jérémy Lal wrote:
> 2015-10-23 2:32 GMT+02:00 dann frazier :
> 
> > Source: nodejs
> > Version: 4.0.0~dfsg-2
> > Severity: wishlist
> > Tags: patch
> >
> > Attached is a patch to add a couple simple autopkgtests to nodejs.
> >
> 
> Hello,
> beside a very simple test like
> nodejs -e "console.log('test');"

The attached patch should do that.

> i don't see the point of testing further since hundreds of tests are
> already run
> during package build.

I could also wrap those tests up to run against the host binary - is
that something you'd be interested in including?

fyi, my goal is to be able to run tests against an existing binary
package to make sure there are no issues due to an ancillary software
update (e.g. kernel).

diff -urpN nodejs-4.2.1~dfsg.orig/debian/control nodejs-4.2.1~dfsg/debian/control
--- nodejs-4.2.1~dfsg.orig/debian/control	2015-10-12 14:37:48.0 -0600
+++ nodejs-4.2.1~dfsg/debian/control	2015-10-26 15:49:51.084771900 -0600
@@ -25,6 +25,7 @@ Standards-Version: 3.9.6
 Homepage: http://nodejs.org/
 Vcs-Browser: http://anonscm.debian.org/gitweb/?p=collab-maint/nodejs.git
 Vcs-Git: git://anonscm.debian.org/collab-maint/nodejs.git
+Testsuite: autopkgtest
 
 Package: nodejs-dev
 Section: devel
diff -urpN nodejs-4.2.1~dfsg.orig/debian/tests/control nodejs-4.2.1~dfsg/debian/tests/control
--- nodejs-4.2.1~dfsg.orig/debian/tests/control	1969-12-31 17:00:00.0 -0700
+++ nodejs-4.2.1~dfsg/debian/tests/control	2015-10-26 16:03:30.630280903 -0600
@@ -0,0 +1,2 @@
+Test-Command: /usr/bin/nodejs -e "console.log(\"test\");"
+Depends: nodejs


Bug#802735: nodejs: add autopkgtests

2015-10-26 Thread Jérémy Lal
2015-10-26 23:22 GMT+01:00 dann frazier :

> On Fri, Oct 23, 2015 at 09:14:54AM +0200, Jérémy Lal wrote:
> > 2015-10-23 2:32 GMT+02:00 dann frazier :
> >
> > > Source: nodejs
> > > Version: 4.0.0~dfsg-2
> > > Severity: wishlist
> > > Tags: patch
> > >
> > > Attached is a patch to add a couple simple autopkgtests to nodejs.
> > >
> >
> > Hello,
> > beside a very simple test like
> > nodejs -e "console.log('test');"
>
> The attached patch should do that.
>
> > i don't see the point of testing further since hundreds of tests are
> > already run
> > during package build.
>
> I could also wrap those tests up to run against the host binary - is
> that something you'd be interested in including?
>
> fyi, my goal is to be able to run tests against an existing binary
> package to make sure there are no issues due to an ancillary software
> update (e.g. kernel).
>
>
Don't bother. It is true that autopkgtests have different use cases than
tests done
during build. I'll apply your patch as is.

Thank you,

Jérémy


Bug#803104: yelp: FTBFS: Segmentation fault

2015-10-26 Thread Michael Biebl
Am 27.10.2015 um 00:26 schrieb Simon McVittie:
> On 26/10/15 21:50, Chris Lamb wrote:
>>   (process:14998): Gtk-CRITICAL **: gtk_icon_theme_get_for_screen:
>>   assertion 'GDK_IS_SCREEN (screen)' failed
>>   
>>   ** (process:14998): WARNING **: Unable to connect to dbus: Cannot
>>   autolaunch D-Bus without X11 $DISPLAY
>>   Segmentation fault
> 
> If the segfault was caused by attempting to connect to a D-Bus session
> bus (and some part of yelp not having error handling for the inability
> to do so), you could wrap the build in dbus-run-session(1) instead of
> needing an X11 display.

I tried dbus-run-session. While the dbus warning went away, the segfault
still happened. So it really seems to require X for some reason.


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#794410: Info received (Continued Issue)

2015-10-26 Thread Vincenzo Lombardo
Additional info:
I have tried this with the realtek drivers loaded off additional media and
using two other mirrors and it still hangs in the same place.

On Mon, Oct 26, 2015 at 3:42 PM, Debian Bug Tracking System <
ow...@bugs.debian.org> wrote:

> Thank you for the additional information you have supplied regarding
> this Bug report.
>
> This is an automatically generated reply to let you know your message
> has been received.
>
> Your message is being forwarded to the package maintainers and other
> interested parties for their attention; they will reply in due course.
>
> Your message has been sent to the package maintainer(s):
>  Debian Install System Team 
>
> If you wish to submit further information on this problem, please
> send it to 794...@bugs.debian.org.
>
> Please do not send mail to ow...@bugs.debian.org unless you wish
> to report a problem with the Bug-tracking system.
>
> --
> 794410: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794410
> Debian Bug Tracking System
> Contact ow...@bugs.debian.org with problems
>



-- 
Thank You,
Vincenzo J Lombardo

"I reject your reality and substitute my own." - Adam Savage, *The
Mythbusters*


Bug#803113: repro: Fails to start after install: "Failed to open configuration database"

2015-10-26 Thread James Valleroy
Package: repro
Version: 1:1.10.0-1
Severity: important

Dear Maintainer,

   * What led up to the situation?

I installed the repro package.

   * What exactly did you do (or not do) that was effective (or
ineffective)?

$ sudo apt install repro

   * What was the outcome of this action?

repro is not running.

$ sudo systemctl status repro.service -l
● repro.service - LSB: repro SIP Server
   Loaded: loaded (/etc/init.d/repro)
   Active: active (exited) since Mon 2015-10-26 19:51:40 EDT; 6min ago
 Docs: man:systemd-sysv-generator(8)

Oct 26 19:51:41 debian repro[3713]: REPRO:APP | 140335355619136 |
BerkeleyDb.cxx:151 | Could not open database .//repro_user.db: Permission
denied
Oct 26 19:51:41 debian repro[3713]: REPRO:APP | 140335355619136 |
ReproRunner.cxx:973 | Failed to open configuration database

The install log is attached. There was no log file in /var/log/repro.

   * What outcome did you expect instead?

After installing repro, it should be started, as the README.Debian says.



-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages repro depends on:
ii  adduser3.113+nmu3
ii  libc-ares2 1.10.0-2
ii  libc6  2.19-22
ii  libdb5.3++ 5.3.28-11
ii  libfreeradius-client2  1.1.6-7
ii  libgcc11:5.2.1-22
ii  libmysqlclient18   5.6.25-4
ii  libpq5 9.4.5-1
ii  libpython2.7   2.7.10-5
ii  libresiprocate-1.101:1.10.0-1
ii  libssl1.0.01.0.2d-1
ii  libstdc++6 5.2.1-22
ii  openssl1.0.2d-1

Versions of packages repro recommends:
ii  apache2-utils  2.4.17-1
ii  resiprocate-turn-server [turn-server]  1:1.10.0-1

Versions of packages repro suggests:
pn  jscommunicator-web-phone  

-- no debconf information

jvalleroy@debian:~$ sudo apt install repro
[sudo] password for jvalleroy: 
Reading package lists... Done
Building dependency tree   
Reading state information... Done
The following extra packages will be installed:
  resiprocate-turn-server
Suggested packages:
  jscommunicator-web-phone sip-router xmpp-server
Recommended packages:
  turn-server stun-server
The following NEW packages will be installed:
  repro resiprocate-turn-server
0 upgraded, 2 newly installed, 0 to remove and 72 not upgraded.
Need to get 0 B/769 kB of archives.
After this operation, 2,562 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
Selecting previously unselected package repro.
(Reading database ... 224716 files and directories currently installed.)
Preparing to unpack .../repro_1%3a1.10.0-1_amd64.deb ...
Unpacking repro (1:1.10.0-1) ...
Selecting previously unselected package resiprocate-turn-server.
Preparing to unpack .../resiprocate-turn-server_1%3a1.10.0-1_amd64.deb ...
Unpacking resiprocate-turn-server (1:1.10.0-1) ...
Processing triggers for systemd (227-2) ...
Processing triggers for man-db (2.7.4-1) ...
Setting up repro (1:1.10.0-1) ...
Adding group `repro' (GID 135) ...
Done.
Adding system user `repro' (UID 130) ...
Adding new user `repro' (UID 130) with group `repro' ...
Not creating home directory `/var/lib/repro'.
Generating DH parameters, 2048 bit long safe prime, generator 2
This is going to take a long time
...
...(I removed these lines)
...
Setting up resiprocate-turn-server (1:1.10.0-1) ...
Adding group `return' (GID 136) ...
Done.
Adding system user `return' (UID 131) ...
Adding new user `return' (UID 131) with group `return' ...
Not creating home directory `/'.
Generating DH parameters, 2048 bit long safe prime, generator 2
This is going to take a long time
...
...(I removed these lines)
...
Processing triggers for systemd (227-2) ...
Processing triggers for libc-bin (2.19-22) ...
[master dedeb83] committing changes in /etc after apt run
 Author: James Valleroy 
 37 files changed, 1624 insertions(+), 5 deletions(-)##.] 
 create mode 100755 init.d/repro
 create mode 100755 init.d/resiprocate-turn-server
 create mode 100644 logrotate.d/repro
 create mode 100644 logrotate.d/resiprocate-turn-server
 create mode 12 rc0.d/K01repro
 create mode 12 rc0.d/K01resiprocate-turn-server
 create mode 12 rc1.d/K01repro
 create mode 12 rc1.d/K01resiprocate-turn-server
 create mode 12 rc2.d/S02repro
 create mode 12 rc2.d/S02resiprocate-turn-server
 create mode 12 rc3.d/S02repro
 create mode 12 rc3.d/S02resiprocate-turn-server
 create mode 12 rc4.d/S02repro
 create mode 12 rc4.d/S02resiprocate-turn-server
 create mode 12 rc5.d/S02repro
 create mode 12 

Bug#803106: lintian: Please warn about use of deprecated githubredir.debian.net in debian/watch files

2015-10-26 Thread Chris Lamb
Package: lintian
Version: 2.5.38
Severity: wishlist
Tags: patch

Hi,

A patch is attached that adds support for warning about using the
deprecated (and now offline?) githubredir.debian.net scraper in
debian/watch files.


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-
commit 75bbb02a367409d5a66be300ef7db09ce0d10e89
Author: Chris Lamb 
Date:   Mon Oct 26 22:04:08 2015 +

Warn if debian/watch uses deprecated githubredir.debian.net scraper

Signed-off-by: Chris Lamb 

diff --git a/checks/watch-file.desc b/checks/watch-file.desc
index 1b66da7..1ae2a8a 100644
--- a/checks/watch-file.desc
+++ b/checks/watch-file.desc
@@ -116,6 +116,19 @@ Info: The watch file specifies a SourceForge page or 
download server
  project and tar-name with the name of the tarball
  distributed within that project.  Adjust the filename regex as necessary.
 
+Tag: debian-watch-file-uses-deprecated-githubredir
+Severity: important
+Certainty: certain
+Ref: https://lists.debian.org/debian-devel-announce/2014/10/msg0.html
+Info: The watch file specifies a githubredir.debia.net URL, which is deprecated
+ Instead, use direct links to the tags page:
+ .
+  version=3
+  https://github.com/user/project/tags .*/(.*)\.tar\.gz
+ .
+ replacing user and project with the Github
+ username and project respectfully.
+
 Tag: debian-watch-file-specifies-wrong-upstream-version
 Severity: normal
 Certainty: certain
diff --git a/checks/watch-file.pm b/checks/watch-file.pm
index 46ab633..737c25b 100644
--- a/checks/watch-file.pm
+++ b/checks/watch-file.pm
@@ -122,6 +122,10 @@ sub run {
 if (m,\b\Qhttp://pypi.python.org/\E,) {
 tag 'debian-watch-file-accesses-pypi-over-http', "line $.";
 }
+if (m%githubredir\.debian\.net%) {
+tag 'debian-watch-file-uses-deprecated-githubredir',
+  "line $.";
+}
 
 if (
 m{ (?:https?|ftp)://
diff --git a/t/tests/watch-file-general/debian/debian/watch 
b/t/tests/watch-file-general/debian/debian/watch
index 71b4717..e322710 100644
--- a/t/tests/watch-file-general/debian/debian/watch
+++ b/t/tests/watch-file-general/debian/debian/watch
@@ -26,4 +26,7 @@ http://pypi.python.org/foo scripts\.([\d.]+)\.tar\.gz debian 
uupdate
 # Unsupported PyPI URL.
 https://pypi.python.org/packages/source/p/pip/ pip-(\S+)\.tar\.gz
 
-# without any pgpsigurlmangle
\ No newline at end of file
+# Deprecated githubredir
+http://githubredir.debian.net/github/username/project /(.*).tar.gz
+
+# without any pgpsigurlmangle
diff --git a/t/tests/watch-file-general/desc b/t/tests/watch-file-general/desc
index 64d09c9..0e7a20e 100644
--- a/t/tests/watch-file-general/desc
+++ b/t/tests/watch-file-general/desc
@@ -15,5 +15,6 @@ Test-For:
  debian-watch-file-unknown-version
  debian-watch-file-unsupported-pypi-url
  debian-watch-file-uses-deprecated-sf-redirector-method
+ debian-watch-file-uses-deprecated-githubredir
  debian-watch-may-check-gpg-signature
 References: Debian Bug#510398
diff --git a/t/tests/watch-file-general/tags b/t/tests/watch-file-general/tags
index a80f45b..1c54f22 100644
--- a/t/tests/watch-file-general/tags
+++ b/t/tests/watch-file-general/tags
@@ -1,4 +1,5 @@
 E: watch-file-general source: debian-watch-file-unsupported-pypi-url line 27
+E: watch-file-general source: debian-watch-file-uses-deprecated-githubredir 
line 30
 I: watch-file-general source: debian-watch-file-accesses-pypi-over-http line 24
 I: watch-file-general source: 
debian-watch-file-should-dversionmangle-not-uversionmangle line 5
 P: watch-file-general source: debian-watch-may-check-gpg-signature
@@ -8,6 +9,7 @@ W: watch-file-general source: 
debian-watch-file-should-mangle-version line 12
 W: watch-file-general source: debian-watch-file-should-mangle-version line 14
 W: watch-file-general source: debian-watch-file-should-mangle-version line 15
 W: watch-file-general source: debian-watch-file-should-mangle-version line 27
+W: watch-file-general source: debian-watch-file-should-mangle-version line 30
 W: watch-file-general source: debian-watch-file-should-use-sf-redirector line 
12
 W: watch-file-general source: debian-watch-file-should-use-sf-redirector line 
14
 W: watch-file-general source: debian-watch-file-should-use-sf-redirector line 
15


Bug#784070: is it maybe possible to settle dislikings and fix this bug?

2015-10-26 Thread Francesco Poli
On Tue, 6 Oct 2015 00:01:18 +0200 Francesco Poli wrote:

[...]
> Michael, I am not sure I understand what happened: I don't see any
> recent NMUs for package mdadm, hence I cannot see how d-i developers
> could "throw your work away".
> 
> Anyway, the last resort strategy to address your disagreement with the
> d-i developers could be referring it to the technical committee, as
> Paul seems to suggest...
> But, before doing so, I would try hard to talk to the d-i developers
> and solve the disagreement in the most amicable way.

Michael, could you please clarify?
What are going to do in order to solve this unfortunate "conflict"?

[...]
> > > In short, I don't maintain mdadm anymore, so there's no reason to
> > > ask me about it.
[...]
> 
> Michael, I really hope you reconsider this decision, because we really
> need a good and active mdadm package maintainer.
> 
> Otherwise, if you are absolutely unwilling to continue maintaining the
> mdadm Debian package (as I said, I hope you reconsider!), then I think
> you should officially search for someone willing to adopt the package...

Michael, please reply.

I really hope you change your mind and begin to maintain the mdadm
Debian package again. But, if you don't and you are absolutely
unwilling to touch mdadm again, then you should formally state your
decision and search for someone to adopt the package.

Please let me know, this package needs some love!
Thanks for any help you may provide.


-- 
 http://www.inventati.org/frx/
 There's not a second to spare! To the laboratory!
. Francesco Poli .
 GnuPG key fpr == CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE


pgp5G2YYjeNV4.pgp
Description: PGP signature


Bug#803110: ruby-pgplot: diff for NMU version 0.1.9-1.1

2015-10-26 Thread Wookey
Package: ruby-pgplot
Version: 0.1.9-1
Severity: normal
Tags: patch pending

Dear maintainer,

I've prepared an NMU for ruby-pgplot (versioned as 0.1.9-1.1) and
uploaded it to DELAYED/07. Please feel free to tell me if I
should delay it longer.

The NMU is to deal with building the package on more than the current
x86 arches only:
https://buildd.debian.org/status/package.php?p=ruby-pgplot=sid
The package FTBFS on any arch other than linux-amd64 and linux-i386,
because it was set to build the main package only on those arches, but
the -dbg package on any arch. The result on any arch apart from those
two was failing in the dh_installdocs step. That was fixed by an
||true in the rules file.

But a better fix is to enable builds on all architectures as there is
nothing arch-specific in this package so far as I can tell? I left the
|| true in as it's more robust, but you may feel that it's not
necessary.

patch attached

Regards.
Wookey
-- 
Principal hats:  Linaro, Debian, Wookware, ARM
http://wookware.org/
diff -Nru ruby-pgplot-0.1.9/debian/changelog ruby-pgplot-0.1.9/debian/changelog
--- ruby-pgplot-0.1.9/debian/changelog	2014-08-28 18:47:53.0 +0100
+++ ruby-pgplot-0.1.9/debian/changelog	2015-10-26 21:39:35.0 +
@@ -1,3 +1,11 @@
+ruby-pgplot (0.1.9-1.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Build main and -dbg packages on same set of arches (fixes 
+non-x86 FTBFS)
+
+ -- Wookey   Mon, 26 Oct 2015 21:27:37 +
+
 ruby-pgplot (0.1.9-1) unstable; urgency=medium
 
   * Imported Upstream version 0.1.9
diff -Nru ruby-pgplot-0.1.9/debian/control ruby-pgplot-0.1.9/debian/control
--- ruby-pgplot-0.1.9/debian/control	2014-08-28 18:47:52.0 +0100
+++ ruby-pgplot-0.1.9/debian/control	2015-10-26 21:34:48.0 +
@@ -21,7 +21,7 @@
 Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-ruby-extras/ruby-pgplot.git;a=summary
 
 Package: ruby-pgplot
-Architecture: linux-amd64 linux-i386
+Architecture: any
 XB-Ruby-Versions: ${ruby:Versions}
 Depends: ${shlibs:Depends}, ${misc:Depends}, ruby-narray
 Description: Ruby interface to the PGPLOT graphics library
diff -Nru ruby-pgplot-0.1.9/debian/rules ruby-pgplot-0.1.9/debian/rules
--- ruby-pgplot-0.1.9/debian/rules	2014-08-28 18:47:48.0 +0100
+++ ruby-pgplot-0.1.9/debian/rules	2015-10-26 21:27:25.0 +
@@ -9,7 +9,7 @@
 override_dh_installdocs:
 	dh_installdocs
 	( cd $(CURDIR)/debian/ruby-pgplot/usr/share/doc/ruby-pgplot/doc && \
-	  rm -fr Makefile *.rb *.sh )
+	  rm -fr Makefile *.rb *.sh || true )
 
 override_dh_strip:
 	dh_strip --dbg-package=ruby-pgplot-dbg


signature.asc
Description: Digital signature


Bug#636272: restund in debian

2015-10-26 Thread Simon Josefsson
I have prepared a Debian package for the latest 0.4.14 release of
"libre", and have uploaded it to Debian Mentors:

  http://mentors.debian.net/package/libre

For reference, upstream homepage and ITP bug links:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=636272
  http://www.creytiv.com/re.html

Please review the package, I want it to be in perfect condition!
Anything that appears sub-optimal is something I want to learn about.

As you can see, the build system is ad-hoc, which is always a challenge
for shared libraries.  I'm not certain the way the soname, symbol list,
and everything around the shared library part is kosher.

A temporary git repository for the packaging exists.  I plan to move
this to alioth before proper upload to Debian, hoping to make this a
pkg-voip team maintained package.

  https://github.com/jas4711/libre-dpkg

/Simon


signature.asc
Description: PGP signature


Bug#802926: linux-image-4.2.0-1-amd64: KVM hangs with 100% cpu on 4.2

2015-10-26 Thread Ben Hutchings
It seems that real mode virtualisation on Nehalem has regressed in 4.2:

On Sun, 2015-10-25 at 10:08 +0100, Stefan Fritsch wrote:
[...]
> I cannot use KVM with 4.2, qemu loops with 100% CPU during seabios
> initialization. Booting with the latest linux-image-4.1.0-2-amd64 fixes
> the issue.
[...]
> kvm tracing shows:
> 
> ...
>  qemu-system-x86-3219  [007]   1090.728418: kvm_set_irq: gsi 12 level 0 
> source 0
>  qemu-system-x86-3219  [007]   1090.728418: kvm_pic_set_irq: chip 1 pin 4 
> (edge|masked)
>  qemu-system-x86-3219  [007]   1090.728419: kvm_ioapic_set_irq: pin 12 
> dst 0 vec=0 (Fixed|physical|edge|masked)
>  qemu-system-x86-3219  [007]   1090.728419: kvm_set_irq: gsi 1 level 0 
> source 0
>  qemu-system-x86-3219  [007]   1090.728420: kvm_pic_set_irq: chip 0 pin 1 
> (edge|masked)
>  qemu-system-x86-3219  [007]   1090.728420: kvm_ioapic_set_irq: pin 1 dst 
> 0 vec=0 (Fixed|physical|edge|masked)
>  qemu-system-x86-3219  [007]   1090.728420: kvm_set_irq: gsi 12 level 0 
> source 0
>  qemu-system-x86-3219  [007]   1090.728421: kvm_pic_set_irq: chip 1 pin 4 
> (edge|masked)
>  qemu-system-x86-3219  [007]   1090.728421: kvm_ioapic_set_irq: pin 12 
> dst 0 vec=0 (Fixed|physical|edge|masked)
>  qemu-system-x86-3219  [007]   1090.728723: kvm_set_irq: gsi 0 level 0 
> source 0
>  qemu-system-x86-3219  [007]   1090.728724: kvm_pic_set_irq: chip 0 pin 0 
> (edge)
>  qemu-system-x86-3219  [007]   1090.728725: kvm_ioapic_set_irq: pin 2 dst 
> 0 vec=0 (Fixed|physical|edge|masked)
>  qemu-system-x86-3219  [007]   1090.728725: kvm_set_irq: gsi 0 level 0 
> source 0
>  qemu-system-x86-3219  [007]   1090.728725: kvm_pic_set_irq: chip 0 pin 0 
> (edge)
>  qemu-system-x86-3219  [007]   1090.728725: kvm_ioapic_set_irq: pin 2 dst 
> 0 vec=0 (Fixed|physical|edge|masked)
>  qemu-system-x86-3219  [007]   1090.728726: kvm_set_irq: gsi 0 level 0 
> source 0
>  qemu-system-x86-3219  [007]   1090.728726: kvm_pic_set_irq: chip 0 pin 0 
> (edge)
>  qemu-system-x86-3219  [007]   1090.728726: kvm_ioapic_set_irq: pin 2 dst 
> 0 vec=0 (Fixed|physical|edge|masked)
>  qemu-system-x86-3221  [000] d...  1090.729926: kvm_write_tsc_offset: vcpu=0 
> prev=18446740943986499809 next=18446740943986499809
>  qemu-system-x86-3221  [000]   1090.729927: kvm_track_tsc: vcpu_id 0 
> masterclock 1 offsetmatched 0 nr_online 1 hostclock tsc
>  qemu-system-x86-3221  [000]   1090.730004: kvm_update_master_clock: 
> masterclock 1 hostclock tsc offsetmatched 1
>  qemu-system-x86-3221  [000] d...  1090.730010: kvm_entry: vcpu 0
>  qemu-system-x86-3221  [000]   1090.730013: kvm_emulate_insn: 
> :fff0:ea 5b e0 00 f0 (real)
>  qemu-system-x86-3221  [000] d...  1090.730016: kvm_entry: vcpu 0
>  qemu-system-x86-3221  [000] d...  1090.730017: kvm_exit: reason 
> EPT_VIOLATION rip 0xe05b info 81 0
>  qemu-system-x86-3221  [000]   1090.730018: kvm_page_fault: address 
> feffc000 error_code 81
>  qemu-system-x86-3221  [000] d...  1090.730032: kvm_entry: vcpu 0
>  qemu-system-x86-3221  [000] d...  1090.730034: kvm_exit: reason 
> EXCEPTION_NMI rip 0xe05b info 0 8b08
>  qemu-system-x86-3221  [000]   1090.730035: kvm_inj_exception: #DF (0x0)
>  qemu-system-x86-3221  [000] d...  1090.730040: kvm_entry: vcpu 0
>  qemu-system-x86-3221  [000] d...  1090.730041: kvm_exit: reason 
> EXCEPTION_NMI rip 0xfea5 info 0 8b08
>  qemu-system-x86-3221  [000]   1090.730041: kvm_inj_exception: #DF (0x0)
>  qemu-system-x86-3221  [000] d...  1090.730043: kvm_entry: vcpu 0
> ...
[...]
> I am rather surprised that there is no bug report about this yet, so I
> guess it only happens on some hardware. Mine is a Core i7-860.

Ben.

-- 
Ben Hutchings
Beware of bugs in the above code;
I have only proved it correct, not tried it. - Donald Knuth

signature.asc
Description: This is a digitally signed message part


Bug#801427: remember to ask for password

2015-10-26 Thread 積丹尼 Dan Jacobson
Can't you guys somehow find a way to ask the patient if he would like to abort 
ealier than when you have him already on the operating table, with his chest 
open?
And then asking him to sew up his chest by himself?



Bug#794410: Continued Issue

2015-10-26 Thread Vincenzo Lombardo
I have the same issue. Install off USB.
Currently hung on 12%
Select and Install Software
Running dpkg

I also selected to not import the Realtek Driver.


PC Specs:
Model: Acer Aspire ES1-512-C12D
CPU: Intel Celeron N2840
Ram: 2GB DDR3 L
Graphics: Built in Intel Chip
HDD: 320GB Sata Drive




-- 
Thank You,
Vincenzo J Lombardo

"I reject your reality and substitute my own." - Adam Savage, *The
Mythbusters*


Bug#496930: ITP: dvc -- Emacs front-end to distributed version control systems

2015-10-26 Thread Ben Finney
On 09-Aug-2010, Daniel Dehennin wrote:
> No, the upstream does not fix the issue and the software is in
> hard-sleep mode, main developers seems busy but apply some patch
> sent to them.

Upstream development  has resumed in
recent months, with what appear to be some improvements and bug fixes
committed to the VCS.

Are you still interested in collaborating with upstream to get this
package into Debian?

-- 
 \   “You can stand tall without standing on someone. You can be a |
  `\ victor without having victims.” —Harriet Woods, 1927–2007 |
_o__)  |
Ben Finney 


signature.asc
Description: PGP signature


Bug#803108: libcgal-qt5-dev: fails to upgrade from 'jessie' - trying to overwrite /usr/include/CGAL/Qt/PolygonWithHolesGraphicsItem.h

2015-10-26 Thread Andreas Beckmann
Package: libcgal-qt5-dev
Version: 4.7-2
Severity: serious
User: debian...@lists.debian.org
Usertags: piuparts

Hi,

during a test with piuparts I noticed your package fails to upgrade from
'jessie'.
It installed fine in 'jessie', then the upgrade to 'stretch' fails
because it tries to overwrite other packages files without declaring a
Breaks+Replaces relation.

See policy 7.6 at
https://www.debian.org/doc/debian-policy/ch-relationships.html#s-replaces

>From the attached log (scroll to the bottom...):

  Selecting previously unselected package libcgal-qt5-dev:amd64.
  Preparing to unpack .../libcgal-qt5-dev_4.7-2_amd64.deb ...
  Unpacking libcgal-qt5-dev:amd64 (4.7-2) ...
  dpkg: error processing archive 
/var/cache/apt/archives/libcgal-qt5-dev_4.7-2_amd64.deb (--unpack):
   trying to overwrite '/usr/include/CGAL/Qt/PolygonWithHolesGraphicsItem.h', 
which is also in package libcgal-qt4-dev 4.5-2
  dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)
  Processing triggers for fontconfig (2.11.0-6.3) ...
  Processing triggers for libc-bin (2.19-18+deb8u1) ...
  Errors were encountered while processing:
   /var/cache/apt/archives/libcgal-qt5-dev_4.7-2_amd64.deb


cheers,

Andreas


libcgal-qt4-dev=4.5-2_libcgal-qt5-dev=4.7-2.log.gz
Description: application/gzip


Bug#803104: yelp: FTBFS: Segmentation fault

2015-10-26 Thread Simon McVittie
On 26/10/15 21:50, Chris Lamb wrote:
>   (process:14998): Gtk-CRITICAL **: gtk_icon_theme_get_for_screen:
>   assertion 'GDK_IS_SCREEN (screen)' failed
>   
>   ** (process:14998): WARNING **: Unable to connect to dbus: Cannot
>   autolaunch D-Bus without X11 $DISPLAY
>   Segmentation fault

If the segfault was caused by attempting to connect to a D-Bus session
bus (and some part of yelp not having error handling for the inability
to do so), you could wrap the build in dbus-run-session(1) instead of
needing an X11 display.

S



Bug#781938: RFS: vid.stab/0.98b-1

2015-10-26 Thread Rogério Brito
Hi.

On Oct 26 2015, Felipe Sateler wrote:
> I'm adding the ITP (and all participants) back to CC to let them know
> about your work.

Please, go ahead. I'm way too busy right now to maintain this package at
this moment.


Thanks,

-- 
Rogério Brito : rbrito@{ime.usp.br,gmail.com} : GPG key 4096R/BCFC
http://cynic.cc/blog/ : github.com/rbrito : profiles.google.com/rbrito
DebianQA: http://qa.debian.org/developer.php?login=rbrito%40ime.usp.br



Bug#803111: ITP: python-flask-rdf -- Flask decorator to output RDF using content negotiation

2015-10-26 Thread Iain R. Learmonth
Control: tags -1 + pending

Hi,

I've uploaded version 0.1.7-1 to NEW.

Git tag for uploaded package:
http://anonscm.debian.org/cgit/collab-maint/python-flask-rdf.git/tag/?h=debian/0.1.7-1

NEW package:
https://ftp-master.debian.org/new/python-flask-rdf_0.1.7-1.html

Thanks,
Iain.

-- 


signature.asc
Description: PGP signature


Bug#801992: rsvg-convert issue?

2015-10-26 Thread Hongzheng Wang
The icon files under /usr/share/iceweasel/browser/chrome/icons/default are
wrong.  Is it possible rsvg-convert has something wrong when being used to
generate them?

Thanks.


Bug#803117: [Python-modules-team] Bug#803117: celery: non-free documentation (CC-BY-NC-SA-3.0)

2015-10-26 Thread Brian May
Dmitry Smirnov  writes:

> "docs/copyright.rst" clearly states that the documentation is licensed as 
> non-DFSG CC-BY-NC-SA-3.0:

Also ./LICENSE contains:


Documentation License
=

The documentation portion of Celery (the rendered contents of the
"docs" directory of a software distribution or checkout) is supplied
under the Creative Commons Attribution-Noncommercial-Share Alike 3.0
United States License as described by
http://creativecommons.org/licenses/by-nc-sa/3.0/us/


Sounds like we might have to repackage the source to drop the entire
docs directory and remove the python-celery-doc package :-(
-- 
Brian May 



Bug#803117: celery: non-free documentation (CC-BY-NC-SA-3.0)

2015-10-26 Thread Dmitry Smirnov
Source: celery
Version: 3.1.18-3
Severity: serious

"docs/copyright.rst" clearly states that the documentation is licensed as 
non-DFSG CC-BY-NC-SA-3.0:


This material may be copied or distributed only
subject to the terms and conditions set forth in the `Creative Commons
Attribution-Noncommercial-Share Alike 3.0 United States License
`_.  You must
give the original author credit.  You may not use this work for
commercial purposes.


Please investigate.

-- 
Regards,
 Dmitry Smirnov
 GPG key : 4096R/53968D1B

---

The more false we destroy the more room there will be for the true.
 -- Robert G. Ingersoll, 1902


signature.asc
Description: This is a digitally signed message part.


Bug#802770: [libwxgtk3.0-0] dependency on SDL half enabled (rule vs control)

2015-10-26 Thread Olly Betts
On Fri, Oct 23, 2015 at 01:32:23PM +0200, gregory hainaut wrote:
> It is typically enabled on Archlinux but not in Debian. I searched in
> the Debian's rule file the option to disable it so Archlinux can do
> the same.  However I found that SDL is kind of enabled but libsdl
> isn't pulled by the control file. So the configure script just disable
> it.

Thanks for spotting this and reporting it.  Looks like it has been this
way since before packaging was in a VCS.

> Is it done on purpose?

I doubt it - I can't see any reason why this would be done, and many
people have worked on the package over the years, so it seems much more
plausible that it's just people not seeing the whole picture.

> Do you want to disable or enable it? Personally I'm in favor to
> disable it because it was never enabled on Debian and it is painful to
> upgrade to SDL2.

The actual result is that we have it disabled in Debian, and appear to
have had for a long time, and I don't recall any requests to enable it
(and presumably if there were before my involvement it wouldn't be
half-enabled still).  So I'd say we just drop passing --enable-sdl to
configure.

I'll include it in the next upload.

Cheers,
Olly



Bug#801992: rsvg-convert issue?

2015-10-26 Thread Mike Hommey
On Tue, Oct 27, 2015 at 02:00:37PM +0900, Mike Hommey wrote:
> reassign 801992 librsvg2-bin
> thanks
> 
> On Mon, Oct 26, 2015 at 07:46:25PM -0700, Hongzheng Wang wrote:
> > The icon files under /usr/share/iceweasel/browser/chrome/icons/default are
> > wrong.  Is it possible rsvg-convert has something wrong when being used to
> > generate them?
> 
> Indeed, it's rsvg-convert's fault.
> 
> STR:
> - Download
>   
> http://anonscm.debian.org/cgit/pkg-mozilla/iceweasel.git/plain/debian/branding/iceweasel_icon.svg
> - Run: rsvg-convert -w 48 -h 48 -o default48.png iceweasel_icon.svg
> 
> With librsvg2-bin 2.40.11-1, this appears to crop the image, while with
> 2.40.10-1, it scaled it.

Bisected to
https://bugzilla.gnome.org/show_bug.cgi?id=520654

Mike



Bug#803115: flash-kernel: please provide an option to disable creation of backup files

2015-10-26 Thread Eric Cooper
Package: flash-kernel
Version: 3.46
Severity: wishlist

I'd like an option (configurable in /etc/default/flash-kernel ideally)
to prevent flash-kernel from creating .bak files for uImage, uInitrd,
and dtb, in order to same space on my system.  I'm willing to live
dangerously and keep a serial and JTAG cable handy :-)



Bug#803117: celery: non-free documentation (CC-BY-NC-SA-3.0)

2015-10-26 Thread Dmitry Smirnov
On Tuesday 27 October 2015 16:36:15 Brian May wrote:
> Sounds like we might have to repackage the source to drop the entire
> docs directory and remove the python-celery-doc package :-(

It might be helpful to bring upstream's attention to the matter...

-- 
Regards,
 Dmitry Smirnov.


signature.asc
Description: This is a digitally signed message part.


Bug#801992: rsvg-convert issue?

2015-10-26 Thread Mike Hommey
reassign 801992 librsvg2-bin
thanks

On Mon, Oct 26, 2015 at 07:46:25PM -0700, Hongzheng Wang wrote:
> The icon files under /usr/share/iceweasel/browser/chrome/icons/default are
> wrong.  Is it possible rsvg-convert has something wrong when being used to
> generate them?

Indeed, it's rsvg-convert's fault.

STR:
- Download
  
http://anonscm.debian.org/cgit/pkg-mozilla/iceweasel.git/plain/debian/branding/iceweasel_icon.svg
- Run: rsvg-convert -w 48 -h 48 -o default48.png iceweasel_icon.svg

With librsvg2-bin 2.40.11-1, this appears to crop the image, while with
2.40.10-1, it scaled it.

Mike



Bug#802118: [pkg-opensc-maint] Bug#802118: libengine-pkcs11-openssl: Functions to set static global data may cause memory leak.

2015-10-26 Thread Persmule
Dear Maintainer,

I have filed a patch for set_init_args (thus the bugs related to these
four functions are fixed completely) to upstream on github, which has
been merged into its master branch 6 hours ago.

Please check.

On Sun, 18 Oct 2015 17:31:08 -0400 Eric Dorland  wrote:
> * persmule (persm...@gmail.com) wrote:
> > Package: libengine-pkcs11-openssl
> > Version: 0.1.8-5
> > Severity: grave
> > Tags: security
> > Justification: user security hole
> >
> > Dear Maintainer,
> >
> > Functions in src/engine_pkcs11.c to set static global data (set_module,
> > set_pin, get_pin and set_init_args) do not free memories pointed by the
> > corresponding pointers before assigning them to newly allocated
> > memories, which
> > may cause memory leaks if they are called more than once.
> >
> > The bugs related to set_module, set_pin and get_pin are fixed on
> > upstream, but
> > the one of set_init_args is not.
>
> Agreed that these are valid memory leaks but what's the security
> implication? This doesn't seem obviously exploitable.
>
> --
> Eric Dorland 
> 43CF 1228 F726 FD5B 474C E962 C256 FBD5 0022 1E93




signature.asc
Description: OpenPGP digital signature


Bug#788631: /sbin/mkfs.minix: mkfs.minix hang/infinite loop

2015-10-26 Thread Joshua Hudson
Bug is FIXED in util-linux 2.27



Bug#803116: biomaj: references to non-existent license "CeCILL-A"

2015-10-26 Thread Dmitry Smirnov
Source: biomaj
Version: 1.2.3-6
Severity: minor

Many files refer to non-existent CeCILL-A license as follows:

This software is governed by the CeCILL-A license

However I could not find such license anywhere including 
http://www.cecill.info/licences.en.html

Please clarify.

Also "debian/copyright" could be improved to refer to CeCILL-2.0 license 
properly instead of just "CeCILL" which is currently used as a short license 
name. Versions of CeCILL licenses can be found in the bottom of the license 
text.

Thanks.

-- 
Regards,
 Dmitry Smirnov
 GPG key : 4096R/53968D1B


signature.asc
Description: This is a digitally signed message part.


Bug#792913: closed by Ben Hutchings <b...@decadent.org.uk> (Re: (no subject))

2015-10-26 Thread Gmails

UH..are you dumb as nails?
"Suggest porting Fedora 22's
latest ATI drivers. They are open source and work without issue."

FLGRX may indeed work, once wifi is brought online, however, wifi was not 
connectable as nonfree drivers are not by default installed.

On Sat, 10 Oct 2015 21:15:08 +
ow...@bugs.debian.org (Debian Bug Tracking System) wrote:

> This is an automatic notification regarding your Bug report
> which was filed against the src:linux package:
> 
> #792913: Package: linux-image-4.0.0-2-amd64
> 
> It has been closed by Ben Hutchings .
> 
> Their explanation is attached below along with your original report.
> If this explanation is unsatisfactory and you have not received a
> better one in a separate message then please contact Ben Hutchings 
>  by
> replying to this email.
> 
> 
> -- 
> 792913: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=792913
> Debian Bug Tracking System
> Contact ow...@bugs.debian.org with problems



Bug#803088: CVE-2015-2697 in libkrb5-3: invalid string processing

2015-10-26 Thread Benjamin Kaduk
Package: libkrb5-3
Version: 1.8.3+dgsg-4squeeze7
Tags: security fixed-upstream

The build_principal_va() function uses strdup() on the supplied realm; in
the TGS-REQ processing the KDC does this on an untrusted piece of data
from the network, causing a mismatch between the length accessed and the
length allocated, which could cause the KDC process to crash.

Fixed in
https://github.com/krb5/krb5/commit/f0c094a1b745d91ef2f9a4eae2149aac026a5789

-Ben



Bug#801427: remember to ask for password

2015-10-26 Thread Paul Gevers
Hi Dan,

On 26-10-15 17:01, 積丹尼 Dan Jacobson wrote:
>> "PG" == Paul Gevers  writes:
> PG> Apparently the user isn't picked up correctly somewhere and instead it
> PG> tries with root user. This should be relatively easy to find.
> 
> Find ... by you guys, not me I hope you mean.

Yes, sorry for being unclear (and indeed, I already found the issue).

> PG> One additional question:...
> The 'first' question I hope was not aimed at me, because that is all above
> my head.

What I meant was, apart from the explanation for the bug, that was above
that comment I had a question (which you answered earlier). Maybe that
wording in English makes less sense than in my mother tongue.

But, I was thinking about your PS:
On 26-10-15 01:56, 積丹尼 Dan Jacobson wrote:
> P.S., do check first if mysql is running! Not all of us start it at boot!

I have heard that request before, but I don't really see what you want
to gain with that knowledge that isn't already part of the current
checking and error handling. Could you elaborate on how you envision
that this would help? E.g. what is the use case and expected behavior.

Paul



signature.asc
Description: OpenPGP digital signature


Bug#803089: emacs24-nox: Disabling blink-cursor-mode does not stop the !*#$%& blinking

2015-10-26 Thread cloos
Package: emacs24-nox
Version: 24.5+1-3
Severity: normal

(Reporting on a different amd64 sid machine than where I saw it)

With version 24.5+1-3 disabling blink-cursor-mode does not disable the
damned blinking, which for me makes it unusable.

It works correctly on the sid box I'm writing this on, which still has
24.5+1-2, so it appears to be a regression in 24.5+1-3.

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)



Bug#803083: CVE-2015-2695 in libgssapi-krb5-2, SPNEGO context aliasing

2015-10-26 Thread Salvatore Bonaccorso
On Mon, 26 Oct 2015 14:26:44 -0400 (EDT) Benjamin Kaduk  wrote:
> Package: libgssapi-krb5-2
> Version: 1.8.3+dfsg-4squeeze7
> Tags: security fixed-upstream
> 
> A partially constructed GSS security context can access a pointer as the
> wrong type, generally causing a program crash.  Fixed upstream at
> https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d
> 
> -Ben
> 
> 



Bug#803091: responses: please update responses

2015-10-26 Thread Daniel Stender
Source: responses
Version: 0.3.0-1
Severity: wishlist
Control: block 800684 by -1

Please update responses, we need >= 0.4.0 for the packaging of
Privacyidea.

Thanks,
DS

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)



Bug#801427: remember to ask for password

2015-10-26 Thread 積丹尼 Dan Jacobson
>> P.S., do check first if mysql is running! Not all of us start it at boot!

PG> I have heard that request before, but I don't really see what you want
PG> to gain with that knowledge that isn't already part of the current
PG> checking and error handling. Could you elaborate on how you envision
PG> that this would help? E.g. what is the use case and expected behavior.

All I know is:
Since I only use mysql once a month or so, I via systemd, disabled it
from starting at boot.

Now when I do my daily aptitude full-upgrade, maybe once every few years
some package (phpmyadmin in this case) needs to do some mysql operations
to upgrade itself.

Well that package should not assume all users are running mysql all the
time, and only find out too late in its upgrade procedure, causing
things to get stuck in an non-ideal state, causing much work...

Instead it should first check, and if it finds mysql not running it
should say
"Mysql is not running. Please start it and hit RET, or type "a" to
abort." etc.



Bug#803063: [libapache2-mod-fastcgi] missing libtool-bin build depend

2015-10-26 Thread Riccardo Magliocchetti

Package: libapache2-mod-fastcgi
Version: 2.4.7~0910052141
Severity: important

--- Please enter the report below this line. ---

debuild does not work because of missing libtool, installing libtool-bin fixed 
the build for me:


make[1]: Entering directory 
'/home/rm/src/libapache-mod-fastcgi-2.4.7~0910052141/build-tmp/20'
libtool --tag=CC --mode=compile arm-linux-gnueabihf-gcc -std=gnu99  -pthread 
-g -O2 -fstack-protector-strong -Wformat -Werror=format-security -Wall 
-DLINUX -D_REENTRANT -D_GNU_SOURCE -D_LARGEFILE64_SOURCE   -D_FORTIFY_SOURCE=2 
-I/usr/include/apache2 -DLINUX -D_REENTRANT -D_GNU_SOURCE -D_LARGEFILE64_SOURCE 
-I/usr/include/apr-1.0  -I/usr/include/apache2 -I. -I/usr/include/apr-1.0 
-I/usr/include -prefer-pic -c mod_fastcgi.c && touch mod_fastcgi.slo

/bin/bash: libtool: command not found
/usr/share/apache2/build/rules.mk:212: recipe for target 'mod_fastcgi.slo' 
failed



--- System information. ---
Architecture: amd64
Kernel:   Linux 4.2.0-1-amd64

Debian Release: stretch/sid
  500 unstableftp.de.debian.org
1 experimentalftp.de.debian.org

--- Package information. ---
Package's Depends field is empty.

Package's Recommends field is empty.

Package's Suggests field is empty.
--
Riccardo Magliocchetti
@rmistaken

http://menodizero.it



Bug#803062: please ship python{,3}-shiboken packages

2015-10-26 Thread Matthias Klose

Package: src:shiboken
Version: 1.2.2-2

Forwarded from a Ubuntu report:

It appears that the Ubuntu packages for shiboken don't include an importable 
"shiboken" module. This is necessary for some libraries using PySide, to quote 
https://shiboken.readthedocs.org/en/latest/shibokenmodule.html:


"""
This Python module can be used to access internal information related to our 
binding technology. Access to this internal information is required to e.g.: 
integrate PySide with Qt based programs that offer Python scripting like Maya™ 
or just for debug purposes.

"""

it indeed builds a shiboken.so for all python versions, but it is not shipped.



Bug#803065: plasma-workspace: Re-introduce support for qrcode in klipper

2015-10-26 Thread Salvo Tomaselli
Package: plasma-workspace
Version: 4:5.4.2-1
Severity: normal

Dear Maintainer,

please see https://bugs.kde.org/show_bug.cgi?id=354391

Apparently it is a distribution problem if support for this 
is missing.

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.4a (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages plasma-workspace depends on:
ii  dbus-x111.10.0-3
ii  frameworkintegration5.15.0-1+b1
ii  gdb 7.10-1
ii  kactivities 5.15.0-1
ii  kde-cli-tools   4:5.4.2-1
ii  kded5   5.15.0-1
ii  kinit   5.15.0-1
ii  kio 5.15.0-1
ii  libc6   2.19-22
ii  libcln6 1.3.4-1
ii  libdbusmenu-qt5-2   0.9.3+15.10.20150604-1
ii  libgcc1 1:5.2.1-22
ii  libgps213.11-3
ii  libice6 2:1.0.9-1+b1
ii  libkf5activities5   5.15.0-1
ii  libkf5auth5 5.15.0-1
ii  libkf5baloo55.15.0+-1
ii  libkf5bookmarks55.15.0-1
ii  libkf5completion5   5.15.0-1
ii  libkf5configcore5   5.15.0-1
ii  libkf5configgui55.15.0-1
ii  libkf5configwidgets55.15.0-1
ii  libkf5coreaddons5   5.15.0-1
ii  libkf5crash55.15.0-1
ii  libkf5dbusaddons5   5.15.0-1
ii  libkf5declarative5  5.15.0-1
ii  libkf5globalaccel-bin   5.15.0-1
ii  libkf5globalaccel5  5.15.0-1
ii  libkf5guiaddons55.15.0-1
ii  libkf5i18n5 5.15.0-1
ii  libkf5iconthemes5   5.15.0-1
ii  libkf5idletime5 5.15.0-1
ii  libkf5itemviews55.15.0-1
ii  libkf5jobwidgets5   5.15.0-1
ii  libkf5js5   5.15.0-1
ii  libkf5jsembed5  5.15.0-1
ii  libkf5kdelibs4support5  5.15.0-1
ii  libkf5kiocore5  5.15.0-1
ii  libkf5kiofilewidgets5   5.15.0-1
ii  libkf5kiowidgets5   5.15.0-1
ii  libkf5networkmanagerqt6 5.15.0-1
ii  libkf5newstuff5 5.15.0-1
ii  libkf5notifications55.15.0-1
ii  libkf5notifyconfig5 5.15.0-1
ii  libkf5package5  5.15.0-1
ii  libkf5plasma5   5.15.0-1
ii  libkf5plasmaquick5  5.15.0-1
ii  libkf5quickaddons5  5.15.0-1
ii  libkf5runner5   5.15.0-1
ii  libkf5screen6   4:5.4.2-1
ii  libkf5service-bin   5.15.0+-1
ii  libkf5service5  5.15.0+-1
ii  libkf5solid55.15.0-1
ii  libkf5su5   5.15.0-1
ii  libkf5texteditor5   5.15.0-1
ii  libkf5textwidgets5  5.15.0-1
ii  libkf5wallet-bin5.15.0-1
ii  libkf5wallet5   5.15.0-1
ii  libkf5waylandclient54:5.4.2-1
ii  libkf5waylandserver54:5.4.2-1
ii  libkf5webkit5   5.15.0-1
ii  libkf5widgetsaddons55.15.0-1
ii  libkf5windowsystem5 5.15.0-1
ii  libkf5xmlgui5   5.15.0-1
ii  libkf5xmlrpcclient5 5.15.0-1
ii  libksgrd7   4:5.4.2-1
ii  libkworkspace5-54:5.4.2-1
ii  libpam0g1.1.8-3.1
ii  libphonon4qt5-4 4:4.8.3-2
ii  libplasma-geolocation-interface54:5.4.2-1
ii  libprocesscore7 4:5.4.2-1
ii  libprocessui7   4:5.4.2-1
ii  libqalculate5v5 0.9.7-9.1
ii  libqt5core5a5.5.1+dfsg-4
ii  libqt5dbus5 5.5.1+dfsg-4
ii  libqt5gui5  5.5.1+dfsg-4
ii  libqt5network5  5.5.1+dfsg-4
ii  libqt5qml5  5.5.1-3
ii  libqt5quick55.5.1-3
ii  libqt5script5   5.5.1+dfsg-2
ii  libqt5sql5  5.5.1+dfsg-4
ii  libqt5webkit5   5.5.1+dfsg-2
ii  libqt5widgets5  5.5.1+dfsg-4
ii  libqt5x11extras55.5.1-2
ii  libqt5xml5  5.5.1+dfsg-4
ii  libsm6  2:1.2.2-1+b1
ii  libstdc++6  5.2.1-22
ii  

Bug#803066: tryton-server: problem with init scripts and "$DAEMON_OPTS" as set in /etc/default/tryton-server

2015-10-26 Thread Raphaël Hertzog
Source: tryton-server
Version: 3.6.3-2
Severity: important

I'm not quite sure how this happened but I just upgraded from 3.4 to 3.6
on a wheezy server and /etc/default/tryton-server contained this:
DAEMON_OPTS=" --config ${CONFIGFILE} --logconf ${LOGCONF} --cron"

Note the initial space. With the init script provided in the package,
this DAEMON_OPTS does not work at all... the init script and
start-stop-daemon both ensure that the initial space is kept around.
The init scripts does it due to having quotes around "$DAEMON_OPTS" in
the start-stop-daemon invocation.

And the result is this failure:
trytond: error: unrecognized arguments:  --config /etc/tryton/trytond.conf 
--logconf /etc/tryton/trytond_log.conf --cron

Worse than everything, you only see that error when you strace the init
script because it's all hidden with the --background option.

This does not affect systemd users but all your backports for wheezy users
are likely broken. I suggest gettind rid of the initial space and of the
double quotes in the init script.

Cheers,

-- System Information:
Debian Release: stretch/sid
  APT prefers squeeze-lts
  APT policy: (500, 'squeeze-lts'), (500, 'oldoldstable'), (500, 'unstable'), 
(500, 'testing'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)



Bug#801435: dgit: avoiding/fixing "Source-only uploads to NEW are not allowed"

2015-10-26 Thread Ian Jackson
Johannes Schauer writes ("Bug#801435: dgit: avoiding/fixing "Source-only 
uploads to NEW are not allowed""):
> What do I do after I did `dgit push` and got a reject because binary-NEW
> doesn't allow source-only uploads?

Bump the package version.

Ian.



Bug#803064: fte: please make the build reproducible

2015-10-26 Thread Reiner Herrmann
Source: fte
Version: 0.50.2b6-6
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that fte could not be built reproducibly.
The created tarball with example files is not sorted.

The attached patch fixes this by telling tar to sort the files.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds

diff --git a/debian/rules b/debian/rules
index 6232948..e6a63de 100755
--- a/debian/rules
+++ b/debian/rules
@@ -26,7 +26,7 @@ override_dh_auto_clean:
 override_dh_install-indep:
 	cd config; $(CURDIR)/src/cfte main.fte $(CURDIR)/debian/fte/etc/fte/system.fterc
 	chmod -R go=rX config
-	tar cf $(CURDIR)/debian/fte-docs/usr/share/doc/fte/config-example.tar config
+	tar --sort=name -cf $(CURDIR)/debian/fte-docs/usr/share/doc/fte/config-example.tar config
 	gzip -9n $(CURDIR)/debian/fte-docs/usr/share/doc/fte/config-example.tar
 
 	dh_install -i


signature.asc
Description: OpenPGP digital signature


Bug#719601: RFS: datatables.js -- jQuery plug-in that makes nice tables from different data sources

2015-10-26 Thread Andreas Tille
Hi Sascha,

On Mon, Oct 26, 2015 at 11:09:22AM +, Sascha Steinbiss wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Hi all,
> 
> this package is now in collab-maint:
> https://anonscm.debian.org/cgit/collab-maint/datatables.js.git
> 
> Andreas, could you please take a look for sponsoring -- thanks!

Uploaded.
 
> I was going to just remove the 'old'
> collab-maint/jquery-datatables.git. Is this OK or would you rather
> have the (really unrelated) history in this repo preserved?

Just save your time for more productive things. ;-)

Kind regards

 Andreas.

-- 
http://fam-tille.de



Bug#803016: libxml2: Upgrade fails with "triggers ci file contains unknown directive `activate-noawait'"

2015-10-26 Thread Michael Abmayer

for me, amd64-Packages work fine, i386-Packages not.

i386-Packages have a trigger-file in /DEBIAN, containing the trigger 
"activate-noawait ldconfig", amd64-packages miss this file.


dpkg is of version 1.15.12 (i386), which seems to miss support for this kind of 
trigger.


My Workaround: I unpacked the package, commented the trigger out, repacked the 
package and was able to install it. Afterwards I ran ldconfig manually, just to 
be safe.


Michael Abmayer



Bug#781938: RFS: vid.stab/0.98b-1

2015-10-26 Thread Felipe Sateler
On 26 October 2015 at 02:00, Vincent Pinon  wrote:
>> - You might want to keep the epoch so that people installing those
>> packages can upgrade to this version when it lands in debian.
> I also think that we should start with a clear base in Debian,
> so I reset the changelog (wiping the dmo & ubuntu-ppa mix, but keeping 
> copyright)...
>
>> - Please use the alioth list as the maintainer (check any other team
>> package [eg, csound] for the name and address). In general please read
>> the guidelines in the wiki[1]
> Sorry, fixed, and read again the ref page :)
>
>> - Please drop the builddeb override, xz is the default.
> done
>
>> - On i386, we need to disable sse, as it is not guaranteed to be
>> available on all hosts. I think it can be loaded at runtime by using
>> the hardware capabilities feature of glibc linker:
>>- Compile the package twice, once with and once without sse.
>>- Ship the non-sse version in /usr/lib/i386-linux-gnu/
>>- Ship the sse version in /usr/lib/i386-linux-gnu/sse2
>>- Then ld.so will choose the appropriate version at runtime (see
>> the ld.so manpage for details).
> Hum, a bit beyond my packaging knowledge...
> Do you have an example?

It is a bit convoluted. Maybe we could start by force-disabling SSE on
i386 and then later add a second sse version?

>
>> - debian/copyright needs dates updated (2010-2014 for the upstream part).
> Done
>
> All these changes in forced-upload again:
> https://mentors.debian.net/package/vid.stab
>
>> - You might want to forward the patch upstream.
> Right, I will do it

I see that Andreas Cadhalpun (in CC) expressed interest in this
package and apparently already forwarded that patch upstream. Andreas,
did you ever get a response on that?

I'm adding the ITP (and all participants) back to CC to let them know
about your work.

-- 

Saludos,
Felipe Sateler



Bug#802648: [Aptitude-devel] Bug#802648: aptitude: definite loop when searching "youk" in "youtube-dl" package info page

2015-10-26 Thread Axel Beckert
Control: notfound -1 aptitude/0.6.11
Control: found -1 aptitude/0.6.11-1

Hi,

Manuel A. Fernandez Montecelo wrote:
> I think that it's partly due to the incremental search feature
> (according to the backtrace), feature about which there are more
> complaints in the BTS (but I haven't checked if they are related or
> not).

That explains why I wasn't able to reproduce it most of the time. I
always have incremental search disabled. I consider it quite annoying,
at least in this case.

Which makes me wonder why I was able to reproduce it at least once...

Regards, Axel
-- 
 ,''`.  |  Axel Beckert , http://people.debian.org/~abe/
: :' :  |  Debian Developer, ftp.ch.debian.org Admin
`. `'   |  4096R: 2517 B724 C5F6 CA99 5329  6E61 2FF9 CD59 6126 16B5
  `-|  1024D: F067 EA27 26B9 C3FC 1486  202E C09E 1D89 9593 0EDE



Bug#803060: elc files in emacs24-common are older than .el.gz in emacs24-el

2015-10-26 Thread Yuri D'Elia
Package: emacs24-common
Version: 24.5+1-3
Severity: normal

I have (setq load-prefer-newer t) in my emacs config.

With the latest update, I started to have issues at startup (recursive loads of
jka-compr.el.gz), which didn't happen before.

It turns out, elc files in emacs24-common seem to be older than the repacked 
emacs24-el files:

-rw-r--r-- 1 root root  7045 Oct 24 22:43 jka-compr.el.gz
-rw-r--r-- 1 root root 12501 Oct 24 22:14 jka-compr.elc

I circumvented the issue on my system by touching elc files, but this should
warrant an update of the package.



Bug#803061: calendarserver: please make the build reproducible

2015-10-26 Thread Esa Peuha
Source: calendarserver
Version: 5.2.2+dfsg-2
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that calendarserver could not be built reproducibly.

The problem is that support/version.py expects that the output from
"svnversion -n" is in English, but it may be in any language depending
on the locale of the build environment. Here is a patch that sets
LC_ALL=C for the call to svnversion to fix it.

 [1]: https://wiki.debian.org/ReproducibleBuilds
--- support/version.py.orig	2014-10-21 07:31:12.0 +0300
+++ support/version.py	2015-10-26 15:42:28.191081976 +0200
@@ -40,7 +40,7 @@
 source_root = dirname(dirname(__file__))
 
 for branch in branches:
-svn_revision = subprocess.check_output(["svnversion", "-n", source_root, branch])
+svn_revision = subprocess.check_output(["LC_ALL=C", "svnversion", "-n", source_root, branch], shell=True)
 
 if "S" in svn_revision:
 continue


Bug#803051: [Reproducible-builds] Bug#803051: cpl-plugin-naco: please make the build reproducible

2015-10-26 Thread Reiner Herrmann
> Whilst working on the "reproducible builds" effort [0], we noticed that
> cpl-plugin-naco could not be built reproducibly.
> 
> The attached patch removes randomness from the build system. Once
> applied, cpl-plugin-naco can be built reproducibly using our
> reproducible
> toolchain.

Several other cpl-plugin-* packages [1] are also affected by the same
problem and can be fixed with the same patch.
Please apply it there too.

[1]: 
https://codesearch.debian.net/results/recipes%20%3D%20cpl.Recipe.list()/page_0


signature.asc
Description: Digital signature


Bug#321144: mtr-tiny: Fails to fall back on IPv4 when IPv6 is unavailable

2015-10-26 Thread Alexandre Pereira Nunes
Package: mtr
Version: 0.85-3
Followup-For: Bug #321144

With the attached patch, the mtr compiled for IPv6 support fallbacks to IPv4
resolution when IPV6 isn't available on the host machine (the kernel lacks
IPv6 or have it disabled).

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.3 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)

Versions of packages mtr depends on:
ii  libatk1.0-0  2.18.0-1
ii  libc62.19-22
ii  libcairo21.14.2-2
ii  libfontconfig1   2.11.0-6.3
ii  libfreetype6 2.6-2
ii  libgdk-pixbuf2.0-0   2.32.1-1
ii  libglib2.0-0 2.46.1-1
ii  libgtk2.0-0  2.24.28-1
ii  libncurses5  6.0+20150810-1
ii  libpango-1.0-0   1.38.0-3
ii  libpangocairo-1.0-0  1.38.0-3
ii  libpangoft2-1.0-01.38.0-3
ii  libtinfo56.0+20150810-1

mtr recommends no packages.

mtr suggests no packages.

-- no debconf information
diff -pru mtr-0.85/dns.c mtr-0.85-new/dns.c
--- mtr-0.85/dns.c	2013-06-26 05:25:56.0 -0300
+++ mtr-0.85-new/dns.c	2015-10-26 12:07:49.843979465 -0200
@@ -532,7 +532,6 @@ void dns_open(void)
 fprintf(stderr,
 "Unable to allocate IPv6 socket for nameserver communication: %s\n",
 	strerror(errno));
-exit(-1);
   }
 #endif
   option = 1;
@@ -543,7 +542,7 @@ void dns_open(void)
 exit(-1);
   }
 #ifdef ENABLE_IPV6
-  if (setsockopt(resfd6,SOL_SOCKET,SO_BROADCAST,(char *),sizeof(option))) {
+  if (resfd6 != -1 && setsockopt(resfd6,SOL_SOCKET,SO_BROADCAST,(char *),sizeof(option))) {
 fprintf(stderr,
 "Unable to setsockopt() on IPv6 nameserver communication socket: %s\n",
 	strerror(errno));
@@ -936,7 +935,7 @@ void dorequest(char *s,int type,word id)
   for (i = 0;i < NSCOUNT6;i++) {
 if (!NSSOCKADDR6(i))
   continue;
-if (NSSOCKADDR6(i)->sin6_family == AF_INET6)
+if (NSSOCKADDR6(i)->sin6_family == AF_INET6 && resfd6 != -1)
   (void)sendto(resfd6,buf,r,0,(struct sockaddr *) NSSOCKADDR6(i),
 		   sizeof(struct sockaddr_in6));
   }
Somente em mtr-0.85: dns.o
Somente em mtr-0.85: getopt1.o
Somente em mtr-0.85: getopt.o
diff -pru mtr-0.85/gtk.c mtr-0.85-new/gtk.c
--- mtr-0.85/gtk.c	2013-04-29 15:22:05.0 -0300
+++ mtr-0.85-new/gtk.c	2015-10-26 12:48:57.651852406 -0200
@@ -609,14 +609,17 @@ gboolean gtk_dns_data6(UNUSED GIOChannel
 void gtk_loop(void) 
 {
   GIOChannel *net_iochannel, *dns_iochannel;
-
+  int fd = -1;
   gtk_add_ping_timeout ();
   
   net_iochannel = g_io_channel_unix_new(net_waitfd());
   g_io_add_watch(net_iochannel, G_IO_IN, gtk_net_data, NULL);
 #ifdef ENABLE_IPV6
-  dns_iochannel = g_io_channel_unix_new(dns_waitfd6());
-  g_io_add_watch(dns_iochannel, G_IO_IN, gtk_dns_data6, NULL);
+  fd = dns_waitfd6();
+  if (fd != -1) {
+ dns_iochannel = g_io_channel_unix_new(fd);
+ g_io_add_watch(dns_iochannel, G_IO_IN, gtk_dns_data6, NULL);
+  }
 #endif
   dns_iochannel = g_io_channel_unix_new(dns_waitfd());
   g_io_add_watch(dns_iochannel, G_IO_IN, gtk_dns_data, NULL);
diff -pru mtr-0.85/select.c mtr-0.85-new/select.c
--- mtr-0.85/select.c	2013-04-29 15:22:05.0 -0300
+++ mtr-0.85-new/select.c	2015-10-26 12:59:22.511668698 -0200
@@ -82,17 +82,19 @@ void select_loop(void) {
 #ifdef ENABLE_IPV6
 if (dns) {
   dnsfd6 = dns_waitfd6();
-  FD_SET(dnsfd6, );
-  if(dnsfd6 >= maxfd) maxfd = dnsfd6 + 1;
+  if (dnsfd6 != -1) {
+  FD_SET(dnsfd6, );
+  if(dnsfd6 >= maxfd) maxfd = dnsfd6 + 1;
+  }
 } else
-  dnsfd6 = 0;
+  dnsfd6 = -1;
 #endif
 if (dns) {
   dnsfd = dns_waitfd();
   FD_SET(dnsfd, );
   if(dnsfd >= maxfd) maxfd = dnsfd + 1;
 } else
-  dnsfd = 0;
+  dnsfd = -1;
 
 netfd = net_waitfd();
 FD_SET(netfd, );


Bug#803055: gcj-5-jre-headless: update-alternatives priority is too low: 105 instead of 1050

2015-10-26 Thread Vincent Lefevre
Package: gcj-5-jre-headless
Version: 5.2.1-22
Severity: normal

One has the following update-alternatives priorities:

xvii:~> update-alternatives --display java
[...]
/usr/bin/gij-4.6 - priority 1046
/usr/bin/gij-4.7 - priority 1047
/usr/bin/gij-4.8 - priority 1048
/usr/bin/gij-4.9 - priority 1049
/usr/bin/gij-5 - priority 105
[...]

105 for the latest version is too low. I suppose that it should be
1050 and the problem is due to out-of-date code in debian/rules.defs,
which assumes that BASE_VERSION has 2 components:

  java_priority = 10$(subst .,,$(BASE_VERSION))

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.0.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages gcj-5-jre-headless depends on:
ii  gcc-5-base 5.2.1-22
ii  gcj-5-jre-lib  5.2.1-22
ii  libc6  2.19-22
ii  libgcc11:5.2.1-22
ii  libgcj16   5.2.1-22
ii  zlib1g 1:1.2.8.dfsg-2+b1

gcj-5-jre-headless recommends no packages.

Versions of packages gcj-5-jre-headless suggests:
ii  fastjar   2:0.98-6
pn  gcj-5-jdk 
ii  libgcj16-awt  5.2.1-22

-- no debconf information



Bug#803043: mod_perl2 / Apache segfaults after upgrading from Wheezy to Jessie

2015-10-26 Thread Patrick Matthäi

Hi again,

this happened while I checked out a svn repository:

root@git:/tmp/apache# gdb /usr/sbin/apache2 -c core
GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 


This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
.
Find the GDB manual and other documentation resources online at:
.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/sbin/apache2...Reading symbols from 
/usr/lib/debug//usr/sbin/apache2...done.

done.

warning: core file may not match specified executable file.
[New LWP 8295]
[New LWP 8298]
[New LWP 8302]
[New LWP 8322]
[New LWP 8304]
[New LWP 8305]
[New LWP 8311]
[New LWP 8308]
[New LWP 8300]
[New LWP 8314]
[New LWP 8299]
[New LWP 8317]
[New LWP 8340]
[New LWP 8319]
[New LWP 8330]
[New LWP 8325]
[New LWP 8328]
[New LWP 8337]
[New LWP 8346]
[New LWP 8347]
[New LWP 8348]
[New LWP 8349]
[New LWP 8343]
[New LWP 8350]
[New LWP 8333]
[New LWP 8335]
[New LWP 8301]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/sbin/apache2 -k start'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x7f5918853add in read () at ../sysdeps/unix/syscall-template.S:81
81  ../sysdeps/unix/syscall-template.S: Datei oder Verzeichnis nicht 
gefunden.

(gdb) bt
#0  0x7f5918853add in read () at ../sysdeps/unix/syscall-template.S:81
#1  0x7f59193b59c7 in read (__nbytes=1, __buf=0x7fffad821e83, 
__fd=) at /usr/include/x86_64-linux-gnu/bits/unistd.h:44

#2  ap_mpm_podx_check (pod=) at mpm_unix.c:535
#3  0x7f5911a7fb34 in child_main (child_num_arg=0) at worker.c:1341
#4  0x7f5911a826c5 in make_child (s=0x7f59195afde0, slot=0) at 
worker.c:1427
#5  0x7f5911a82745 in startup_children (number_to_start=2) at 
worker.c:1452
#6  0x7f5911a8325e in worker_run (_pconf=0x7f59195d7028, 
plog=0x7f59195ab028, s=0x7f59195afde0) at worker.c:1811
#7  0x7f591938ee7e in ap_run_mpm (pconf=0x7f59195d7028, 
plog=0x7f59195ab028, s=0x7f59195afde0) at mpm_common.c:94

#8  0x7f59193883c3 in main (argc=3, argv=0x7fffad8222a8) at main.c:777
(gdb) bt full
#0  0x7f5918853add in read () at ../sysdeps/unix/syscall-template.S:81
No locals.
#1  0x7f59193b59c7 in read (__nbytes=1, __buf=0x7fffad821e83, 
__fd=) at /usr/include/x86_64-linux-gnu/bits/unistd.h:44

No locals.
#2  ap_mpm_podx_check (pod=) at mpm_unix.c:535
c = 25 '\031'
fd = 5
rc = 
#3  0x7f5911a7fb34 in child_main (child_num_arg=0) at worker.c:1341
threads = 0x7f591aa11910
ts = 0x7f5919529110
thread_attr = 0x7f5919529130
start_thread_id = 0x7f5919529190
#4  0x7f5911a826c5 in make_child (s=0x7f59195afde0, slot=0) at 
worker.c:1427

No locals.
#5  0x7f5911a82745 in startup_children (number_to_start=2) at 
worker.c:1452

i = 0
#6  0x7f5911a8325e in worker_run (_pconf=0x7f59195d7028, 
plog=0x7f59195ab028, s=0x7f59195afde0) at worker.c:1811

rv = -512
#7  0x7f591938ee7e in ap_run_mpm (pconf=0x7f59195d7028, 
plog=0x7f59195ab028, s=0x7f59195afde0) at mpm_common.c:94

pHook = 
n = 0
rv = -1
#8  0x7f59193883c3 in main (argc=3, argv=0x7fffad8222a8) at main.c:777
c = 0 '\000'
error = 0xfe00 address 0xfe00>

process = 0x7f59195e0118
pconf = 0x7f59195d7028
plog = 0x7f59195ab028
ptemp = 0x7f59195ad028
pcommands = 0x7f59195b5028
opt = 0x7f59195b5118
mod = 0x7f59195ec1c0 
opt_arg = 0x7f59195e0028 "(@^\031Y\177"
signal_server = 0xfe00
(gdb)

[Mon Oct 26 13:14:58.134998 2015] [core:notice] [pid 8291:tid 
140020654380928] AH00051: child pid 8295 exit signal Segmentation fault 
(11), possible coredump in /tmp/apache


And as I said it was enough here on this server to activate the perl 
module. Perl itself is not used.


--
/*
Mit freundlichem Gruß / With kind regards,
 Patrick Matthäi
 GNU/Linux Debian Developer

  Blog: http://www.linux-dev.org/
E-Mail: pmatth...@debian.org
patr...@linux-dev.org
*/



Bug#802088: openpyxl Git repository lagging way behind

2015-10-26 Thread Yaroslav Halchenko

On Mon, 26 Oct 2015, Andreas Tille wrote:

> Hi,

> since python-skbio is in danger of beeing removed due to

>   802088: openpyxl: FTBFS: /bin/sh: 1: python3.5: not found

> I intended to have a look into openpyxl.  I noticed that the packaging
> Git is lagging *way* behind the current package.

actually it wasn't way behind but default branch was pointing to older
packaging ... adjusted to point to debian and pushed the latest tag

> Did you moved the repository and forgot to update Vcs-Git or did you
> forget to push?

somewhat both ;)

> (for sure I'd be even more happy if you simply fix the bug :-P)

if you could help -- I would be grateful ;)

-- 
Yaroslav O. Halchenko
Center for Open Neuroscience http://centerforopenneuroscience.org
Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755
Phone: +1 (603) 646-9834   Fax: +1 (603) 646-1419
WWW:   http://www.linkedin.com/in/yarik



Bug#801316: netcf: ncftool fails when 'source-directory' directive is used in /etc/network/interfaces

2015-10-26 Thread Sergey Belyashov
Hi,
I think, roots of problem are in augeas project. It parses config files and
does not understand 'source-directory' instruction.
I have created bug about it:
https://github.com/hercules-team/augeas/issues/306

2015-10-24 5:28 GMT+03:00 Serge Hallyn :

> Hi,
>
> There is a new netcf package version 0.2.8-1, but looking at the code
> I don't expect that to help.
>
> I think the source-directory directive is simply un-implemented.  So
> someone would have to write the patch to src/drv_debian.c to implement
> it.
>


<    1   2   3   >