Package: nfs-common
Version: 1:2.6.1-2
Dear maintainers of nfs-common,
could you please move the three Python scripts included in nfs-common to
a separate -extras package?
Currently nfs-common Depends on `python3` and, on lean/containerized
client systems, it is the only package that
Package: ntpsec
Version: 1.2.1+dfsg1-7+b1
When package ntp is installed (from long history), the ntp daemon is
started by this /etc/init.d/ntp which uses user ntp:ntp. So all
auxiliary directories and files are owned by ntp:ntp.
When ntpsec starts to start the same daemon with ntpsec:ntpsec
Version: 3.19-9
On 6/24/22 13:39, Peter Pentchev wrote:
If this is the case, could you just request a binNMU?
Hm, that's actually an interesting idea... I'll look into it, and,
in that case, sorry for bothering you! :) So yeah, I will look into
it and probably close this bug accordingly.
I
Hi,
On 2022/6/26 03:30, Thomas Schmitt wrote:
Complexity-wise this replaces a slow O(n) algorithm by a faster O(n) and
an additional O(n * log(n)) run. At some size of Debian the slow speed
of the linear loop will be compensated by the sorting complexity.
But there is still room: A sort of
Hi,
Zhang Boyang wrote:
> Theoretically if both file is already sorted, we can use the `-m' option
I like this idea. Just in case Debian grows to a million packages.
But i understand that i would need two separate files for sorting.
grep ' ./pool/' file1
fgrep -v ' ./pool/' file2
sort -k
Control: severity -1 important
On 2022-06-26 11:26:50 +0100, Luís Infante da Câmara wrote:
> Source: libvmod-re2
> Version: 2.0.0-1
> Severity: serious
> Tags: ftbfs
> Justification: fails to build from source
>
> Dear Maintainer,
>
> This source package fails to build in Debian on all
Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian@packages.debian.org
Usertags: pu
Hi,
in oder to fix some more CVEs in the proprietary NVIDIA driver, let's
update the version in stable to a new upstream release. This is a
rebuild of the package from sid with
On Wed, Jun 22, 2022 at 12:47:34PM +0200, Michael Biebl wrote:
>
>Am 22.06.22 um 11:49 schrieb Julien Cristau:
>> On Wed, Jun 22, 2022 at 10:50:48AM +0200, Michael Biebl wrote:
>
>> > Marking as RC, as it causes a FTBFS
>> >
>> Not using -Wl,--fatal-warnings might be a workaround for systemd
Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian@packages.debian.org
Usertags: pu
Let's update nvidia-graphics-drivers-tesla-470 in stable (which is being
introduced via -pu) to a new upstream release to fix some more CVEs.
This is a rebuild of the package in
Hey Lucas,
I expect the the output from rt-test-dependencies in this case is a
false lead. I believe this is actually caused by the update of OpenSSL
to 3.0 causing one of the tests to fail. I filed a bug for this
yesterday: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1013730 .
Today I
Package: lintian
Version: 2.115.1
Severity: normal
X-Debbugs-Cc: ex...@packages.debian.org
Hello,
lintian has recently started throwing errors like this for when run on
exim4_..._amd64.changes (source + binary upload):
--
Warning in processable
Package: lintian
Version: 2.115.1
Severity: normal
P: exim4-base: experimental-to-unstable-without-comment
[usr/share/doc/exim4-base/changelog.Debian.gz:1]
(sid)ametzler@argenau:/tmp/EXIM4/exim-4.96$ dpkg-parsechangelog --file
debian/exim4-base/usr/share/doc/exim4-base/changelog.Debian.gz
Control: tags 1012825 -patch
Control: clone 1012789 -1
Control: reassign -1 libtk-img
Control: retitle -1 libtk-img: add _TIFFsetString to its internal tiff library
Control: tags -1 +patch
On Sat, Jun 25, 2022 at 5:07 PM Petter Reinholdtsen wrote:
> While it might sound sensible on the surface,
Package: wnpp
Severity: wishlist
Owner: ChangZhuo Chen (陳昌倬)
X-Debbugs-Cc: debian-de...@lists.debian.org
* Package name: golang-github-gonvenience-bunt
Version : v1.3.4
Upstream Author : The Homeport Team
* URL : https://github.com/gonvenience/bunt
* License :
Package: varnish-modules
Version: 0.20.2-1
Followup-For: Bug #1013827
Post-build tests fail on armel and armhf on Debian. See
https://buildd.debian.org/status/package.php?p=varnish-modules
--
Stig
Ben, et al,
BH> I wrote a script to check for short signatures (and other unexpected
BH> things) in detached signature files:
BH>
https://salsa.debian.org/kernel-team/kernel-team/-/blob/master/scripts/benh/check-sig-params
DL> I tried running your script, but it generates an error (see below).
Source: salt
Version: 3004.1+dfsg-2
Severity: grave
Tags: security upstream
X-Debbugs-Cc: car...@debian.org, Debian Security Team
Hi,
The following vulnerability was published for salt.
CVE-2022-22967[0]:
| An issue was discovered in SaltStack Salt in versions before 3002.9,
| 3003.5, 3004.2.
Control: merge 1013877 1013878
On Sun, Jun 26, 2022 at 2:18 PM László Böszörményi (GCS)
wrote:
> See the attached patch, basically it's a one liner. Sergei just needs
> to add it to the libtk-img package source.
Then it's just one bug, sorry for the duplication. As soon as Sergei
uploads this
Same here. Looks related to maven-resource-plugins / maven-filtering and
#1013582 and #1013586
signature.asc
Description: This is a digitally signed message part
Source: rust-reqwest
Version: 0.9.19-5
Severity: normal
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
t-reqwest is finally installable. Yay!
Unfortunately, the feature rustls-tls has disappeared.
Please re-enable support for feature rustls-tls, needed by packages I am
preparing for Debian.
On Sat, 25 Jun 2022 00:49:15 +0200, Evangelos Ribeiro Tzaras
said:
[...]
> - Drop the javascript bindings for olm (libjs-olm). The only reverse
> dependency of libjs-olm is libjs-matrix-sdk which itself has no
> reverse dependencies.
FWIW, libjs-matrix-js-sdk upstream is looking into
On Jun 26, 2022, at 1:59 AM, Sergio Gelato wrote:
>
>> The display connection that both xscreensaver and xscreensaver-systemd have
>> open will close with SIGPIPE.
>
> This does not match my observations. xscreensaver does appear to have a
> connection to the X server, but
Package: webext-keepassxc-browser
Version: 1.8.0+repack1-2
Severity: serious
Hi!
This version seems to fail load on chromium 103.0.5060.53-1, with the
following warnings and errors shown on the extensions settings page:
(W) Unrecognized manifest key 'applications'.
(W) Manifest version 2 is
Control: severity -1 important
Control: tag -1 - sid bookworm
I've temporarily disabled the autopkgtest on ppc64el.
Andreas
Jamie Zawinski :
> xscreensaver does not use the MIT SCREEN-SAVER server extension
> because it is a flaky, unreliable piece of shit that tends to cause
> the sever to crash.
Is it still the case after 7 years?
Also, the workaround given by the submitter no longer works, I use this
instead:
$
Package: libpyside2-py3-5.15
Version: 5.15.2-2
Severity: serious
Justification: breaks reverse dependencies.
Control: affects -1 freecad
Dear Maintainers,
freecad, on a sid machine fails to start with:
freecad
freecad: error while loading shared libraries:
Control: reopen 1010595
Control: forwarded 1010595
https://github.com/xtensor-stack/xsimd/issues/756
Control: block 1013568 by 1010595 1012437
A number of upgrades including scipy got interrupted by the upgrade of
xsimd to v8. We're working through the transition now. scipy needs a
working
Ben, et al,
On Mon, 13 Jun 2022 18:23:18 +0200 Ben Hutchings wrote:
> Since the truncated signatures are in the source packages, this is a
> problem introduced by the code signing service and will need to be
> fixed there.
Assuming that the code-signing service uses the kernel's
Package: chrony
Version: 4.2-2
Hi,
thank you for maintaining chrony in Debian.
When configuring NTS and using letsencrypt, I'd like to have the
certificates owned by root:ssl-cert with directory permissions set to
0750 and file permissions set to 0640.
For every other daemon used so far, that
I believe this is related to a bug in maven-filtering or maven-resources-
plugin. According to
https://issues.apache.org/jira/browse/MRESOURCES-237
the behavior how symlinks are handled has changed between version 2.7 and 3.0.x
of maven-resources-plugin. This is apparently fixed in
Package: wnpp
Severity: wishlist
Owner: ChangZhuo Chen (陳昌倬)
X-Debbugs-Cc: debian-de...@lists.debian.org
* Package name: golang-github-gonvenience-neat
Version : v1.3.11
Upstream Author : 2019 The Homeport Team
* URL : https://github.com/gonvenience/neat
* License
Am Sonntag, dem 26.06.2022 um 14:11 +0200 schrieb Guillem Jover:
> Package: webext-keepassxc-browser
> Version: 1.8.0+repack1-2
> Severity: serious
>
> Hi!
>
> This version seems to fail load on chromium 103.0.5060.53-1, with the
> following warnings and errors shown on the extensions settings
Hello,
Patrick suggested I chime in here, as the Digikam maintainer.
On Sat, 25 Jun 2022 23:42:47 +0200 Sebastian Ramacher
wrote:
> On 2022-06-25 20:45:37 +0200, Patrick Franz wrote:
> > Hi Sebastian,
> >
> > Am Samstag, 25. Juni 2022, 20:30:32 CEST schrieb Sebastian Ramacher:
> > [...]
> >
Hi Daniel,
Le 2022-06-26 17:45, Daniel Baumann a écrit :
> Package: chrony
> Version: 4.2-2
>
> Hi,
>
> thank you for maintaining chrony in Debian.
You're welcome! :-)
> When configuring NTS and using letsencrypt, I'd like to have the
> certificates owned by root:ssl-cert with directory
Control: tags -1 + confirmed
On Sun, 2022-06-19 at 19:27 +0200, William Desportes wrote:
> Some users have 500 errors when using some queries.
> Previous versions of Debian where not affected.
>
Please go ahead.
Regards,
Adam
Control: tag -1 patch
Here is a possible patch. Not tested, though.
Upstream author decided to disable FFmpeg plugin with the new version of the
library. Perhaps, we have to do the same.
https://sourceforge.net/p/libquicktime/git/ci/974ad1489bb1d7d1ebc94f301508702f8ac2083b/
---
Hi!
On Fri, 2022-06-17 at 16:04:27 +0200, Christian Göttsche wrote:
> With LTO being considered to be enabled by default [1] can this please
> also get another deliberation.
If you want to see this enabled by default, please bring it up again
on debian-devel. AFAIR last time there was push back.
Hi!
On Tue, 2022-06-14 at 01:26:02 +0200, Axel Beckert wrote:
> Guillem Jover wrote:
> > So the problematic --fail-on default change never got actually reverted
> > as the patch applied in commit 3758bfafd5dd742c327f2312dac8e3a71b1f036e
> > omitted the relevant part that would make it work. :(
>
Control: tags -1 pending
Hi,
With a recent upload of bind9 the autopkgtest of bind9 fails in
testing on amd64 and armhf when that autopkgtest is run with the
binary packages of bind9 from unstable. It passes when run with only
packages from testing. In tabular form:
I have had a brief look
Control: tags -1 pending
Hi,
With a recent upload of bind9 the autopkgtest of bind9 fails in
testing on amd64 and armhf when that autopkgtest is run with the
binary packages of bind9 from unstable. It passes when run with only
packages from testing. In tabular form:
I have had a brief look
Dear Andreas,
On 19-06-2022 18:54, Adam D Barratt wrote:
The upload referenced by this bug report has been flagged for acceptance into
the proposed-updates queue for Debian buster.
Thanks for your contribution!
Upload details
==
Package: nvidia-graphics-drivers-legacy-390xx
Source: rpmlint
Version: 2.3.0+ds1-0.1
Severity: serious
X-Debbugs-CC: Boyuan Yang
User: debian...@lists.debian.org
Usertags: regression
Dear maintainer(s), Boyuan,
With a recent upload of rpmlint the autopkgtest of rpmlint fails in
testing when that autopkgtest is run with the binary
Source: gmp-ecm, sagemath
Control: found -1 gmp-ecm/7.0.5+ds-1
Control: found -1 sagemath/9.5-4
Severity: serious
Tags: sid bookworm
User: debian...@lists.debian.org
Usertags: breaks needs-update
Dear maintainer(s),
With a recent upload of gmp-ecm the autopkgtest of sagemath fails in
testing
Package: ftp.debian.org
Severity: normal
The foptions package (binary: r-cran-foptions) is no longer on
CRAN and can be removed from unstable as well. It had two dependencies
(fasianoptions, fexoticoptions) which were already removed in #1013234 and
#1013235.
If needed, old versions remain at
reopen 1013869
thanks.
the (to me, at least) relatively cryptic changelog entry
Sorry if the changelog wasn't clear. I was building a stack of patches
with the expectation that some of them would be removed later.
reqwest upstream offers several options for tls.
native-tls/default-tls
Control: tags -1 + confirmed
On Thu, 2022-06-23 at 11:33 +0100, Luca Boccassi wrote:
> A low-severity CVE has been published for dbus-broker, and it affects
> bullseye. In accordance with the Security Team, it does not warrant a
> DSA, so we would like to fix it via p-u instead. The fix is a
Control: tags -1 + confirmed
On Tue, 2022-06-21 at 10:55 +0100, Simon McVittie wrote:
> Backport two out-of-bounds reads, one of which has a CVE ID,
> presumably
> because it could be an exploitable vulnerability for games that are
> willing to load untrusted graphics data.
>
> The security team
On Tue, 2022-06-14 at 19:24 +0200, Andreas Metzler wrote:
> On 2022-05-29 Andreas Metzler wrote:
> [...]
> > as requested in #1011246 I would like fix miscalculation of SHA384
> > in
> > the SSA accelarated implementation.
> > It is a one-line change and was part of the 3.7.3 release.
> [...]
>
Control: tags -1 + confirmed
On Sun, 2022-05-29 at 12:23 +0200, David Prévot wrote:
> I’d like to address CVE-2022-24828 that has been tagged as no-dsa.
> Some
> people may also wish to see #989315 fixed (it was reported twice),
> and
> the fix is trivial, so I’m proposing a fix for it too.
>
Control: tags -1 + confirmed
On Mon, 2022-05-30 at 21:04 +0200, Felix Geyer wrote:
> Docker uses containerd to manage containers but fails to setup the
> proper
> dependencies in the systemd service.
> https://bugs.debian.org/989490
>
> [ Impact ]
> On system shutdown Docker often is unable to
Why is this happened?
I-ve trying to make an account, to add some supported hardware, than I
was blocked.
Not cool.
Quoting Peter Michael Green (2022-06-26 19:01:04)
> To enable rustls support with native or manual roots two crates which
> are not in Debian, tokio-rustls and hyper-rustls. For tokio-rustls
> Alexander Kjäll prepared a package, which I have just sponsored into
> NEW. I don't see any evidence
On Jun 26, 2022, at 5:43 AM, Sergio Gelato wrote:
>
>> Huh. Well, xscreensaver-systemd calls XOpenDisplay specifically to make this
>> happen
>
> I see that there is code to that effect in version 6.04 (it seems to have
> first appeared in 6.00, although I see no mention of it on the What's
Hello,
In version 2.27.2+dfsg-1, I removed the problematic classes but another
error shows up (see below). I wonder if this is a gradle issue or
something else, I'm not investigating further for the moment.
Relevant part (hopefully):
dh_auto_build -- jar javadoc
mkdir -p
The underlying issue here is likely
https://bugreports.qt.io/browse/QTBUG-91558
Control: tags -1 - moreinfo
Can you please review the last debdiff?
On Mon, Jun 20, 2022 at 05:31:16PM -0700, Sean Whitton wrote:
> BEGIN BALLOT
>
> Using its powers under constitution 6.1.5, the Technical Committee
> issues the following advice:
>
> 1. It is not a bug of any severity for a package with a non-native
> version number to use a native
Control: tags -1 confirmed
On 2022-06-26 12:11:16 -0500, Steven Robbins wrote:
> Hello,
>
> Patrick suggested I chime in here, as the Digikam maintainer.
>
>
> On Sat, 25 Jun 2022 23:42:47 +0200 Sebastian Ramacher
> wrote:
> > On 2022-06-25 20:45:37 +0200, Patrick Franz wrote:
> > > Hi
On 26/06/2022 18:40, Jonas Smedegaard wrote:
Quoting Peter Michael Green (2022-06-26 19:01:04)
To enable rustls support with native or manual roots two crates which
are not in Debian, tokio-rustls and hyper-rustls. For tokio-rustls
Alexander Kjäll prepared a package, which I have just
Source: findutils
Version: 4.9.0-3
Severity: important
Tags: patch
findutils' copyright file misses at least the following licenses:
LGPL-2.1+,
BSD-4-clause (UC -> 3-clause), and
ISC
Please find a d/copyright file attached that contains the missing licensesFormat:
Package: src:linux
Version: 5.18.5-1
Severity: important
Dear linux maintainers,
Not sure if this should be filed against firmware-realtek, and sorry if
that is the case. I have a WiFi USB dongle that doesn't work on linux
5.18, but it does work on 5.15.
You can see this error in the logs below
Source: qtbase-opensource-src
Version: 5.15.4+dfsg-3
Severity: wishlist
X-Debbugs-Cc: shtetl...@gmail.com
Dear Maintainer,
KDE team maintains important patchset over official Qt that has a lot of bug
fixes especially for the Wayland session use case.
May be you can switch upstream directly to
Package: wnpp
Severity: wishlist
Owner: Guilherme de Paula Xavier Segundo
X-Debbugs-Cc: debian-de...@lists.debian.org, guilherme@gmail.com
* Package name: cfn-lint
Version : 0.61.1
Upstream Author : Amazon.com, Inc. or its affiliates
* URL :
Source: bind9
Version: 1:9.18.1-1
Severity: serious
Control: close -1 1:9.18.3-1
Tags: sid bookworm
User: release.debian@packages.debian.org
Usertags: out-of-sync
Control: block -1 by 1012059
Dear maintainer(s),
The Release Team considers packages that are out-of-sync between testing
and
>> xscreensaver does not use the MIT SCREEN-SAVER server extension
>> because it is a flaky, unreliable piece of shit that tends to cause
>> the sever to crash.
>
> Is it still the case after 7 years?
I suppose somewhere in the multiverse there is a world where the
MIT-SCREEN-SAVER extension is
On Fri, 2022-06-10 at 21:51 +, Alberto Garcia wrote:
> On Fri, Jun 10, 2022 at 02:25:28PM -0500,
> tmcconnell...@gmail.com wrote:
> > I had a better idea, and piped it to the attached file and let it
> > run
> > until the CPU usage went down. Currently my CPU is between 9 - 15 %
> > Sorry for
Package: totem
Version: 42.0-1
Severity: normal
Dear Maintainer,
Totem worked fine in the past, but now when trying to DVD with totem I
get the
following error message:
Missing plugin: gstreamer|1.0|totem|Source DVD|urisource-dvd
However, all gstreamer packages are installed,
On Sat, 2022-06-25 at 22:09:12 +0200, Salvatore Bonaccorso wrote:
> In fact I think this regression can be included as fix in the upcoming
> point releases if SRM agree, and so avoid an out of order dpkg update
> again to fix this rather edge-case regression (and instread batch it
> with other
Hello,
is it fixed in recent Debian packages or is it still leaking data?
If yes, shouldn't this bug have higher severity?
Thank you
--
David Heidelberg
Consultant Software Engineer
Matrix: @okias:matrix.org
[László Böszörményi]
> You are right that removing public symbols from a library interface
> is an ABI break and requires a SONAME change. Per coding standards
> function names starting with underscore are part of the private API
> and a) not to be used outside of the library, b) if used
Package: qqwing
Version: 1.3.4-1.1+b1
Severity: important
Tags: upstream
X-Debbugs-Cc: krzpyrk...@gmail.com
Dear Maintainer,
qqwing solver gets stuck in an infinite loop caused by casting return
value of getchar() from int to char. The comparison c == EOF is never
going to be true on systems
Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian@packages.debian.org
Usertags: pu
[ Reason ]
Fix possible buffer overflow when decrypting forged jwe with invalid iv or
cypherkey
[ Impact ]
program might crash or execute arbitrary code
[ Checklist ]
[x]
I don't know myself which xsimd test is which in order to implement the
scalar test division discussed in upstream Issue#756. For sure upstream
will know.
While we're resolving that, one simple thing we could do temporarily for
the packaging is to restrict the CI tests to only run on the
On Thu, 23 Jun 2022 04:06:10 + Debian FTP Masters
wrote:
> Source: zfs-linux
> Source-Version: 2.1.5-1
> Done: Mo Zhou
>
> We believe that the bug you reported is fixed in the latest version of
> zfs-linux, which is due to be installed in the Debian FTP archive.
For those of you who are
Control: severity -1 serious
Quoting Peter Michael Green (2022-06-26 23:40:37)
>
> On 26/06/2022 18:40, Jonas Smedegaard wrote:
> > Quoting Peter Michael Green (2022-06-26 19:01:04)
> >> To enable rustls support with native or manual roots two crates which
> >> are not in Debian, tokio-rustls
Package: vlc
Version: 3.0.17.4-4
Severity: normal
I'm seeing only a few frames per second with -4 on 1080p H264 video.
After downgrading to -3, it's back to ~60 FPS.
This is the last part of the output of -4. The VA-API stuff seems relevant
somehow since the changelog says that was disabled in
On 27/06/2022 01:15, Jonas Smedegaard wrote:
Thanks for clarifying.
I consider it a *horrific* bug that an interface is explicitly
advertised as available, linking against it succeeds, yet it is
non-functional.
In my opinion this renders the whole package unsuitable for release, and
I hereby
Package: wnpp
Severity: normal
Control: affects -1 src:t-code
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
I intend to orphan the t-code package.
The package decription is:
This package is provides tc2. the T-Code input environment for emacsen,
which enables you to input Japanese
Package: wnpp
Severity: normal
Control: affects -1 src:sigscheme
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
I intend to orphan the sigscheme package.
The package decription is:
SigScheme is a Scheme interpreter, which targets embedded programs.
SigScheme is used as extension engine for
On Mon, Jun 20, 2022 at 05:31:16PM -0700, Sean Whitton wrote:
> Hello,
>
> I hereby call for votes on the following resolution:
>
> BEGIN BALLOT
>
> Using its powers under constitution 6.1.5, the Technical Committee
> issues the following advice:
>
> 1. It is not a bug of any severity for a
Control: tags 1012847 + fixed
Upload is done, it is in process now.
Package: sponsorship-requests
Severity: normal
X-Debbugs-Cc: debian-report...@frederikheld.de
Dear Mentors,
I am looking for a sponsor for my package "bosch_career":
* Package name: bosch_career
Version: 1.0.1
* URL: https://github.com/frederikheld/bosch_career
* License: GNU GPLv3
* VCS:
82 matches
Mail list logo