Bug#863584: CVE-2017-2824

Control: retitle zabbix: CVE-2017-2824 CVE-2017-2825 On Sun, May 28, 2017 at 10:42:47PM +0200, Moritz Muehlenhoff wrote: > Source: zabbix > Severity: grave > Tags: security > > Please see > http://www.talosintelligence.com/reports/TALOS-2017-0325/ >

Bug#863583: CVE-2017-7473

On Sun, May 28, 2017 at 10:40:37PM +0200, Moritz Muehlenhoff wrote: > Package: ansible > Severity: important > Tags: security > > This was only reported in Red Hat bugzilla and further information > is scarce: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7473 Additional info: This

Bug#863600: python3-twisted: cannot cancel a DelayedCall (fixed in upstream)

Package: python3-twisted Version: 16.6.0-2 Severity: important Dear Maintainer, Under stretch (and sid twisted=17.1.0), it is not possible to cancel a DelayedCall in python3: p.cancel() File "/usr/lib/python3/dist-packages/twisted/internet/base.py", line 96, in cancel self._str =

Bug#863599: python-autobahn: twisted WebSocketResource don't work against twisted 16.6.0 (upstream bug #701)

Package: python-autobahn Version: 0.14.1+dfsg1-2 Severity: important Dear Maintainer, Under stretch, when using autobahn.twisted.resource.WebSocketResource no onMessage is received. This is a known upstream issue https://github.com/crossbario/autobahn-python/issues/701 Several commits has

Bug#863598: meson: Please include converter tools

Package: meson Version: 0.40.1-1 Severity: wishlist According to http://mesonbuild.com/Porting-from-autotools.html "Meson comes with a helper script ac_converter" Neither of the two scripts in the tools/ directory are provided in the Debian binary package. Please change this. It could be a

Bug#863597: mkwinpeimg --iso tries to use mkisofs which is no longer present

Package: wimtools Version: 1.11.0-1 mkwinpeimg --iso tries to invoke mkisofs, which is not provided by any package. As per the wiki[0], the package mkisofs is no longer available in debian and the preferred replacement is xorriso. Both xorriso and genisoimage have command-line compatibility

Bug#863519: unblock blockdiag/1.5.3+dfsg-2

Hi, 2017-05-28 21:50 GMT+09:00 Jonathan Wiltshire : > On Sun, May 28, 2017 at 08:51:27AM +0900, Kouhei Maeda wrote: >> + * Bumps version debian/compat to 9. >> +- Fixes package-uses-deprecated-debhelper-compat-version. > > This isn't OK, please remove it. This means that

Bug#863385: cloud.debian.org: Latest stretch AMI (ami-772ab761) fails to launch successfully into VPCs

On Fri, 26 May 2017 at 20:52 Ross Vandegrift wrote: > On Fri, May 26, 2017 at 09:15:35AM +0700, Andy Sizer wrote: > > I tried to launch in instance from the latest stretch ami > > (ami-772ab761 i.e. us-east-1) into a VPC. It failed - more > > specifically networking.service

Bug#863596: mytop can't installed

Package: mytop Version: 1.9.1-4 Severity: grave -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, with the last mariadb upgrade I get: ~ > apt-get install mytop Paketlisten werden gelesen... Fertig Abhängigkeitsbaum wird aufgebaut. Statusinformationen werden eingelesen Fertig Einige

Bug#863595: gnome-control-center: Can't save configuration if 'Use this connection only for resource on its network' is checked

Package: gnome-control-center Version: 1:3.22.2-1 Severity: normal Dear Maintainer, Manually configuring a network interface and checking the option 'Use this connection only for resources on its network' doesn't allow to save it, the Apply button is grayed out. nm-connection-editor works

Bug#862057: Fwd: Bug#862057: udev: If more than one NIC the system is booting longer

On Mon, 8 May 2017 12:03:16 +0200 a a wrote: > Hi. > The error message is systremd-udevd : swq 598 > `/devices/pci:00/:00:08.0/net/eth1` > is taking a long time. After this i have the one normal interface like eth0 > and the other have renameX. This is in Vbox

Bug#863364: RFA: pydocstyle -- Python docstring style checker (PEP-257 conventions)

Control: retitle -1 ITA: pydocstyle -- Python docstring style checker Control: owner -1 ! On Thu, May 25, 2017 at 09:11:16PM +0200, Daniel Stender wrote: > Package: wnpp > Severity: normal > > I request an adopter for the pydocstyle package [1]. I will adopt this package. -- ChangZhuo Chen

Bug#819811: ITP: leiningen -- simple build system for Clojure

All, We are getting very close! I have completed packaging for the three outstanding blocking bugs: - #862233: use maven 3.5.0 and upgrade to pomegranate 0.4.0-alpha1 https://anonscm.debian.org/cgit/pkg-clojure/pomegranate-clojure.git/ -- this one is complicated, wanted a few more eyes

Bug#863579: www.debian.org: include wiki team in /intro/organization

That sounds like a great idea :) On Mon, May 29, 2017 at 08:23:30AM +0800, Paul Wise wrote: > On Sun, 2017-05-28 at 22:35 +0200, Laura Arjona Reina wrote: > > > It would be nice to include the wiki team members in > > /intro/organization, as well as the mail contact. > > That seems reasonable.

Bug#846548: marked as pending

* Julien Cristau (jcris...@debian.org) wrote: > On Mon, May 22, 2017 at 03:42:57 +, Eric Dorland wrote: > > > tag 846548 pending > > thanks > > > > Hello, > > > > Bug #846548 reported by you has been fixed in the Git repository. You can > > see the changelog below, and you can check the

Bug#863267: [Python-modules-team] Bug#863267: Miscalculates MigrationHistory dependencies between multiple django apps - regression from 1.8

On 2017-05-26 19:05, Neil Williams wrote: > No. This is django making the wrong decision about problems it has > previously supported when trying to include bug fixes for other > problems. It is a regression in django 1.10 Feel free to argue this point in

Bug#863513: [Reportbug-maint] Bug#863513: Bug#863513: Bug#863513: reportbug: No GUI; only '--ui=text'

On Sun, May 28, 2017 at 4:06 PM, Nis Martensen wrote: > On Sat, 27 May 2017 22:32:49 -0400 Sandro Tosi wrote: >> do you know of a way to create a menu entry only if the needed >> dependencies are installed? > > One could put the desktop file (and possibly

Bug#863594: veusz-helpers: duplicates .../veusz/resources symlink

Package: veusz-helpers Version: 1.21.1-1+b1 Severity: grave Justification: renders package unusable (veusz becomes uninstallable) The recent binNMU of veusz-helpers for sip-api-11.3 somehow made it duplicate the /usr/lib/python2.7/dist-packages/veusz/resources symlink from the main veusz package.

Bug#863579: www.debian.org: include wiki team in /intro/organization

On Sun, 2017-05-28 at 22:35 +0200, Laura Arjona Reina wrote: > It would be nice to include the wiki team members in > /intro/organization, as well as the mail contact. That seems reasonable. > [Neither] https://wiki.debian.org/DebianWiki/Contact nor > https://wiki.debian.org/Teams/DebianWiki

Bug#860950: steam: crashes at startup

> Can you provide more information about your system and how to > reproduce this? Others have tried and failed, so there must be more > to it. Try backing up .steam somewhere else so it tries to start > fresh. I just tried on a different x86_64 machine and it works for me there too. However on

Bug#863593: ITP: golang-github-chai2010-gettext-go -- GNU gettext for Go

X-Debbugs-CC: debian-de...@lists.debian.org, pkg-go-maintain...@lists.alioth.debian.org Package: wnpp Severity: wishlist Owner: Tim Potter * Package name: golang-github-chai2010-gettext-go Version : 0.0~git20160711.0.c6fed77-1 Upstream Author : chai2010 * URL

Bug#823110: cups-filters: Versioned dependency on imagemagick makes using graphicsmagick harder

Package: cups-filters Version: 1.11.6-3 Followup-For: Bug #823110 I second this, and push it further. cups-filters depends on imagemagik for "convert" alone, and it's used only in: /var/lib/cups/filter/imagetobrf /var/lib/cups/filter/texttobrf Both usage of convert are absolutely trivial,

Bug#858924: gnome-calendar: Segfault in gcal_manager_create_event when adding event

On Sat, Apr 22, 2017 at 06:46:34PM -0500, Jason Crain wrote: > On Tue, Mar 28, 2017 at 01:36:45PM -0400, Daniel Gnoutcheff wrote: > > 1. Click on an empty day to add a new event > > 2. Click "Edit Details..." > > 3. Click "Done" > > > > Result: gnome-calendar segfaults. > > This crash is fixed

Bug#863578: Initial upload to experimental should probably still merge history

Sean Whitton writes: > For the first upload of policy 4.0.0.x to unstable, I'm suggesting > --deliberately-not-fast-forward so that the history is a linear > descendent of the upload you made to experimental today. With > --overwrite, instead, the parent of HEAD would

Bug#863592: UDD should use https for links

Package: qa.debian.org Severity: minor User: qa.debian@packages.debian.org Usertags: udd I noticed that the links to the bugs from UDD bugs searches are http and not https. >From a quick grep through the sources there seem to be more places where https could be used instead of http.

Bug#863578: Initial upload to experimental should probably still merge history

On Sun, May 28, 2017 at 03:12:11PM -0700, Russ Allbery wrote: > Oh, okay, I think I understand. And then, when uploading to unstable, it > would then work? Or would I need --overwrite on the upload to unstable? In the context of uploads that are new to a suite, it is best to think of

Bug#863578: Initial upload to experimental should probably still merge history

Sean Whitton writes: > On Sun, May 28, 2017 at 02:59:16PM -0700, Russ Allbery wrote: >> Does that merge the dgit history of the package from the unstable >> branch into the history in the way that dgit-maint-native implies is >> supposed to happen? Or by "be a

Bug#863578: Initial upload to experimental should probably still merge history

On Sun, May 28, 2017 at 02:59:16PM -0700, Russ Allbery wrote: > > This is already possible: have your git history be a descendent of > > unstable, and use --deliberately-not-fast-forward instead of > > --overwrite. Documentation of this is waiting in #856402. > > Ah, yes, I presume that would

Bug#863591: Mention --build-products-dir in dgit-maint-gbp(7)

Package: dgit Version: 3.10 Severity: minor On Sun, May 28, 2017 at 02:47:30PM -0700, Russ Allbery wrote: > Could you mention --build-products-dir in dgit-maint-gbp, since this > is a very common setting? I agree with Russ -- as he wrote in another message, gbp users very often have build

Bug#863578: Initial upload to experimental should probably still merge history

Sean Whitton writes: > This is already possible: have your git history be a descendent of > unstable, and use --deliberately-not-fast-forward instead of > --overwrite. Documentation of this is waiting in #856402. Ah, yes, I presume that would work. Does that merge

Bug#863578: Initial upload to experimental should probably still merge history

On Sun, May 28, 2017 at 01:34:04PM -0700, Russ Allbery wrote: > If a package that hasn't been using dgit is uploaded using dgit to > experimental, when it hasn't been uploaded to experimental before, > one cannot use the --overwrite option and merge previous dgit history. > Presumably (I haven't

Bug#863582: Allow configurable build directory

Control: forcemerge 857316 -1 Sean Whitton writes: > I believe that Ian's intention is that the build tool should be > configured to put build products somewhere else, and then dgit should be > told where they are using --build-products-dir. I.e. you have >

Bug#862992: systemd: avoid attempt to re-create /etc/mtab by systemd-tmpfiles-setup.service

Hi, Maximilian Stein (2017-05-28): > I tried it again and apparently, /etc/mtab was actually created by > FAI, not by debootstrap, sorry for the confusion. Ah, this would explain. :) > But maybe it would be an idea to create it by debootstrap to avoid its > creation on the

Bug#863582: Allow configurable build directory

On Sun, May 28, 2017 at 01:38:30PM -0700, Russ Allbery wrote: > I use git-buildpackage for all of my package building, and one reason why > is that I deeply dislike the default Debian behavior of cluttering the > parent directory with random package build files. git-buildpackage has > always

Bug#792552: [pkg-cryptsetup-devel] Bug#792552: still doesn't continue shutdown process

On Sunday 28 May 2017 21:26:53 Guilhem Moulin wrote: > Hi Pali, > > On Thu, 25 May 2017 at 18:23:00 +0200, Pali Rohár wrote: > > Same problem there. I have up-to-date Debian Stretch with > > LUKS-encrypted rootfs and system hangup on every shutdown or > > reboot. > > > > I debugged this problem

Bug#863590: unblock: libsndfile/1.0.27-3

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package libsndfile this upload backports fixes for a number of security-related bugs (CVE-2017-7742, CVE-2017-8361 CVE-2017-8362 CVE-2017-8363 CVE-2017-8365) from upstream.

Bug#860763: imagemagick: /etc/imagemagick-6/policy.xml useless limits settings

Package: imagemagick-6-common Version: 8:6.9.7.4+dfsg-9 Followup-For: Bug #860763 I agree with the original reporter here. The policy includes arbitrary limits which cannot easily be modified by invoking the commands. If we want to ensure the "resource" limits do not get exceeded in order to

Bug#863589: fpc: Please adjust fp-units-gfx.install.in for linux-m68k

Source: fpc Version: 3.0.0+dfsg-11 Severity: normal Tags: patch User: debian-...@lists.debian.org Usertags: m68k Hello! I just bootstrapped fpc for m68k. In order for the build to work the next time the buildds are building it, the debian/fp-units-gfx.install.in needs to be adjusted so that

Bug#863367: [Pkg-openssl-devel] Bug#863367: libecryptfs-dev: unable to install because of unmet dependency

On Sat, May 27, 2017 at 04:31:46PM +0200, Kurt Roeckx wrote: > In general, I disagree that we should declare a conflict at both > sides of the conflict and that the package manager should be able > to deal with a conflict on just one side. It's not a conflict that > involves version numbers. The

Bug#863588: unblock: wicd/1.7.4+tb2-4 (documentation and translation only)

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package wicd, it only contains documentation fixes, translation bug fixes and one new translation: * I oversaw in the previous upload that there was still an outdated,

Bug#863587: redshift: Can't get location because no response from API

Package: redshift Version: 1.9.1-4 Severity: important Dear Maintainer, I tried to use Redshift and it asked for package `geoclue` for providing location. I installed it and launched redshift again (through console) and it tried to use geoclue to find location - without success. The only way to

Bug#863216: ITP: emacs-ivy -- a generic completion frontend for Emacs

Hello Nicholas, On Sun, May 28, 2017 at 02:27:04PM -0400, Nicholas D Steeves wrote: > Test colir-color-parse condition: > (void-function colir-color-parse) >FAILED 1/16 colir-color-parse > ... > dh_elpa_test: emacs -batch -Q -l package --eval (add-to-list > 'package-directory-list

Bug#863586: CVE-2017-4965 CVE-2017-4966 CVE-2017-4967

Package: rabbitmq-server Severity: grave Tags: security Please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-4965 https://security-tracker.debian.org/tracker/CVE-2017-4966 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-4967 Cheers, Moritz

Bug#863585: bugs.debian.org: View of usertags on bug summary page

Package: bugs.debian.org Severity: wishlist Hello, It would be great if we could see usertags set on a bug on the bug summary page. For debian-policy, for example, the only way to find out the process stage that a bug has reached[1] is to visit , which is

Bug#863584: CVE-2017-2824

Source: zabbix Severity: grave Tags: security Please see http://www.talosintelligence.com/reports/TALOS-2017-0325/ http://www.talosintelligence.com/reports/TALOS-2017-0326/ Cheers, Moritz

Bug#863583: CVE-2017-7473

Package: ansible Severity: important Tags: security This was only reported in Red Hat bugzilla and further information is scarce: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7473 Cheers, Moritz

Bug#863582: Allow configurable build directory

Package: dgit Version: 3.10 Severity: wishlist I use git-buildpackage for all of my package building, and one reason why is that I deeply dislike the default Debian behavior of cluttering the parent directory with random package build files. git-buildpackage has always supported configuring a

Bug#863578: Initial upload to experimental should probably still merge history

Package: dgit Version: 3.10 Severity: wishlist If a package that hasn't been using dgit is uploaded using dgit to experimental, when it hasn't been uploaded to experimental before, one cannot use the --overwrite option and merge previous dgit history. Presumably (I haven't gotten that far yet)

Bug#863579: www.debian.org: include wiki team in /intro/organization

Package: www.debian.org Severity: normal It would be nice to include the wiki team members in /intro/organization, as well as the mail contact. Nor https://wiki.debian.org/DebianWiki/Contact nor https://wiki.debian.org/Teams/DebianWiki list people names, so people in the wiki team should say if

Bug#863581: RM: resteasy/3.1.0-1

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: rm Please remove resteasy from stretch. It's affected by a number of security issues and has no rev deps in stretch (dogtail-pki is only in sid at this point). This can be straigtened out for

Bug#863580: cloud.debian.org: Vagrant boxes randomly fail to come up when additional networks are configured

Package: cloud.debian.org Severity: important Dear Maintainer, When additional networks are configured in Vagrantfile, this can result in Vagrant boxes randomly failing while bringing them up. Issue occurs both with debian/jessie64 and debian/contrib-jessie64. Reproduction steps: 1. Install

Bug#863577: include translation teams in /intro/organization

package:www.debian.org It would be nice to include the translation teams in the webpage www.debian.org/intro/organization The user support mailing lists are done using some script, it can serve as inspiration for l10n-language teams. -- Laura Arjona Reina https://wiki.debian.org/LauraArjona

Bug#863576: Perl error on --overwrite --new

Package: dgit Version: 3.10 Severity: minor I'm uploading a native package (debian-policy) using dgit that has never used dgit before, and I'm uploading the package to experimental. This isn't really anticipated by dgit-maint-native, so I went down a path of trying to use the command there,

Bug#863575: unblock: node-concat-stream/1.5.1-2

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package node-concat-stream Node-concat-stream is vunerable to Uninitialized Memory Exposure (CWE-201). This was reported in bug https://bugs.debian.org/cgi-

Bug#863574: smemstat command crashes on ARM based machine (part 2)

Package: smemstat Version: 0.01.10-2 Severity: important When I run smemstat command with root user I'm getting "Segmentation fault" error, while everything works fine when I run it with any regular user. I'm running Debian Jessie 8.8 on armel architecture. This issue seems related with

Bug#862992: systemd: avoid attempt to re-create /etc/mtab by systemd-tmpfiles-setup.service

Hi, I tried it again and apparently, /etc/mtab was actually created by FAI, not by debootstrap, sorry for the confusion. But maybe it would be an idea to create it by debootstrap to avoid its creation on the first boot? Best, Maximilian signature.asc Description: OpenPGP digital signature

Bug#863518: nftables: "workstation" example breaks alternate keyboard layout in gdm

Control: severity -1 normal On 28 May 2017 at 00:54, Harlan Lieberman-Berg wrote: > > Bizarrely, the quite simple "workstation" example causes the language picker > in > gdm3 to disappear and the default layout to switch back to qwerty. As far as > I > can tell this

Bug#863513: [Reportbug-maint] Bug#863513: Bug#863513: reportbug: No GUI; only '--ui=text'

On Sat, 27 May 2017 22:32:49 -0400 Sandro Tosi wrote: > do you know of a way to create a menu entry only if the needed > dependencies are installed? One could put the desktop file (and possibly the code for the GTK UI) into a separate package, which would depend on the required

Bug#863573: unblock: diamond/4.0.515-4

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package diamond This upload improves (even if only slightly, as a proper solution is still being worked on by upstream) the stop/restart time of diamond, by setting the

Bug#863572: ITP: wallpaperdownloader -- Download, manage and change your favorite wallpapers from the Internet

Package: wnpp Severity: wishlist Owner: =?utf-8?b?RWxveSBHYXJjw61hIEFsbWFkw6lu?= * Package name: wallpaperdownloader Version : 2.7 Upstream Author : Eloy García Almadén * URL :

Bug#838177: [os-prober] Version 1.75 has the same bug

Package: os-prober Version: 1.75 No correct initrd line for Arch Linux with microcodes installed. --- System information. --- Architecture: Kernel: Linux 4.9.0-3-amd64 Debian Release: 9.0 500 unstable mirror3.mirror.garr.it 500 unstable ftp.de.debian.org --- Package information. --- Depends

Bug#863499: [Pkg-xfce-devel] Bug#863499: Trash: sort the files/folders by "time of deletion"

On Sat, 2017-05-27 at 21:56 +0200, Christian Buhtz wrote: > while viewing the content of the Trash there is no way to sort the files and > folders by there deletetion date/time. So I have no way to find the last > deleted files. What about sorting by modification date? Regards, -- Yves-Alexis

Bug#792552: [pkg-cryptsetup-devel] Bug#792552: still doesn't continue shutdown process

Hi Pali, On Thu, 25 May 2017 at 18:23:00 +0200, Pali Rohár wrote: > Same problem there. I have up-to-date Debian Stretch with LUKS-encrypted > rootfs and system hangup on every shutdown or reboot. > > I debugged this problem and found out that after this log message > > [] Stopping

Bug#863442: pan window to large

Back again :) 1) starting pan --verbose 2) playing with the "View -> Body Pane -> Monospace font" option 3) output: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name news.pan.NZB was not provided by any .service files (pan:8729): Gtk-CRITICAL **: gtk_box_gadget_distribute:

Bug#861536: runit-init: Cannot reboot or shutdown after installing (or removing) the package.

Hi, > runit-init: Cannot reboot or shutdown after installing (or removing) the > package. See also: https://bugs.debian.org/863539 https://bugs.debian.org/863541 https://bugs.debian.org/863542 https://bugs.debian.org/863543 Regards, -- ,''`. : :' : Chris Lamb

Bug#863442: pan window to large

Hi Dominique, Thank you for feedback. Changed several times the "View -> Body Pane -> Monospace font" value (sorry my UI is in French), not precisely understanding what you expected me to do there :) : As I did 2-3 times, the windows expanded far to the right, as explained in the 1st report

Bug#861536: runit-init: Cannot reboot or shutdown after installing (or removing) the package.

Hi there-- On Sun 2017-05-28 19:54:33 +0200, Ivo De Decker wrote: > On Sun, May 28, 2017 at 02:39:00PM +0200, Jan Niehusmann wrote: >> May I suggest only removing runit-init from the runit source package, if >> the bug can't be fixed in time for the stretch release? > > Sure. That just needs

Bug#863571: RFS: openldap/2.4.44+dfsg-5

Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor to upload a security fix (remote crash) to openldap. The fix is targeted for stretch and the release team has pre-approved the unblock in #863569. I have uploaded the source package to mentors:

Bug#863565: default install of 'sudo'

Philipp Kern (2017-05-28): > On 28.05.2017 19:03, Geert Stappers wrote: > > Please install 'sudo' default. > > > > Explaining why it is not installed, is also fine. > > Don't we install it already when the root password is unset? (I.e. I > think then you end up with a setup

Bug#721430: @stilor

> > : host al-ip4-mx-vip2.prodigy.net[144.160.235.144] said: 553 > 5.3.0 alph162 DNSBL:ATTRBL 521< 82.161.218.215 >_is_blocked.For assistance > forward this email to abuse_...@abuse-att.net (in reply to MAIL FROM > command) > So Stilor didn't get my e-mail.

Bug#861536: runit-init: Cannot reboot or shutdown after installing (or removing) the package.

Hi, On Sun, May 28, 2017 at 07:54:33PM +0200, Ivo De Decker wrote: > On Sun, May 28, 2017 at 02:39:00PM +0200, Jan Niehusmann wrote: > > May I suggest only removing runit-init from the runit source package, if > > the bug can't be fixed in time for the stretch release? > > Sure. That just needs

Bug#863569: (pre-approval) unblock: openldap/2.4.44+dfsg-5

Control: tags -1 confirmed moreinfo Hi, On Sun, May 28, 2017 at 11:24:00AM -0700, Ryan Tandy wrote: > I would like to upload a late-breaking security fix to openldap: > > * debian/patches/ITS-8655-paged-results-double-free.patch: Fix a double free > in the MDB backend on a search

Bug#690763: marked as done (installation-guide: sudo and no password for root user situation)

Control: reopen -1 ow...@bugs.debian.org (Debian Bug Tracking System) wrote: > Your message dated Sat, 27 May 2017 16:16:01 +0200 > with message-id <20170527161601.6274648e.bapti...@mailoo.org> > and subject line Re: installation-guide: sudo and no password for root user > situation > has

Bug#863570: mb2md fails on mboxes from bugs.debian.org

Package: mb2md Version: 3.20-8 Severity: normal I pulled an mbox for debian bug #861536 from this URL: https://bugs.debian.org/cgi-bin/bugreport.cgi?mbox=yes;bug=861536;mboxmaint=yes Then i ran mb2md on it to try to turn the mbox into a maildir. however, it produced a single file in the

Bug#863216: ITP: emacs-ivy -- a generic completion frontend for Emacs

Hi Sean, On Tue, May 23, 2017 at 08:22:19PM +0100, Sean Whitton wrote: > > While upstream's git repo is called 'swiper', it's clear that the > overarching project has been renamed to 'ivy' -- see the releases > page.[1] > > Filing this RFP and immediately converting to an ITP for Nicholas, who

Bug#863569: (pre-approval) unblock: openldap/2.4.44+dfsg-5

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Dear release team, I would like to upload a late-breaking security fix to openldap: * debian/patches/ITS-8655-paged-results-double-free.patch: Fix a double free in the MDB backend

Bug#548853: module-init-tools: depmod.conf manpage corruption

Version: 1:2.0.0-36 Hi, > module-init-tools: depmod.conf manpage corruption This was fixed in 1:2.0.0-36: * Prevent undefined behaviour in memcpy parameter overlap; docbook-to-man can insert random characters into the output. e.g. it will sometimes generate an "I" instead of a

Bug#863568: cfengine3: Please migrate to openssl1.1 in Buster

Package: cfengine3 Version: 3.9.1-4.2 Severity: important Tags: sid buster User: pkg-openssl-de...@lists.alioth.debian.org Usertags: openssl-1.1-trans Please migrate to libssl-dev in the Buster cycle. Sebastian

Bug#852293: kde-l10n-de: Version to old missing translations

Package: kde-l10n-sl Version: 4:16.04.3-1 Followup-For: Bug #852293 Dear Maintainers, we have less than three weeks before Stretch release and this bug is still not fixed. The translations were pulled at start of July 2016, the applications (for example) were pulled months later. It might not

Bug#863565: default install of 'sudo'

On 28.05.2017 19:03, Geert Stappers wrote: > Please install 'sudo' default. > > Explaining why it is not installed, is also fine. Don't we install it already when the root password is unset? (I.e. I think then you end up with a setup where the primary user is allowed to sudo to root.) Kind

Bug#861536: runit-init: Cannot reboot or shutdown after installing (or removing) the package.

Hi, On Sun, May 28, 2017 at 02:39:00PM +0200, Jan Niehusmann wrote: > May I suggest only removing runit-init from the runit source package, if > the bug can't be fixed in time for the stretch release? Sure. That just needs someone to upload such an NMU very soon. I suggested this already at the

Bug#863567: rmail: unable to install because of unmet dependency

Package: rmail Severity: normal rmail is currently uninstallable on Stretch: # apt-get -o Debug::pkgProblemResolver=1 install rmail Reading package lists... Done Building dependency tree Reading state information... Done Starting pkgProblemResolver with broken count: 2 Starting 2

Bug#863566: libgraphicsmagick1-dev: Linking different versions of libjpeg (62 and 8) causes failure to load JPEG files

Package: libgraphicsmagick1-dev Version: 1.3.20-3+rpi1 Severity: important Dear Maintainer, When linking anything against this package, the linker complains that /usr/bin/ld: warning: libjpeg.so.8, needed by /usr/lib/libGraphicsMagick.so, may conflict with libjpeg.so.62 and indeed, the

Bug#863565: default install of 'sudo'

Package: debian-installer Severity: wishlist Please install 'sudo' default. Explaining why it is not installed, is also fine. Groeten Geert Stappers -- Leven en laten leven

Bug#863186: [ftpmas...@ftp-master.debian.org: Processing of dcut._ametzler_debian_org_.1495989962.26313.commands]

- Forwarded message from Debian FTP Masters - Date: Sun, 28 May 2017 16:59:01 + From: Debian FTP Masters To: ametz...@debian.org Subject: Processing of dcut._ametzler_debian_org_.1495989962.26313.commands Message-Id:

Bug#863564: libgraphicsmagick++1-dev: Missing dependency on required libwebp-dev

Package: libgraphicsmagick++1-dev Version: 1.3.25-8 Severity: important Dear Maintainer, After the package is installed, $ GraphicsMagick++-config --ldflags --libs mentions -lwebp as its dependencies. However, it is not automatically installed as part of the dependencies, making compilations

Bug#863186: libtasn1-6: diff for NMU version 4.10-1.1

On 2017-05-25 Salvatore Bonaccorso wrote: > Control: tags 863186 + pending > Dear maintainer, > I've prepared an NMU for libtasn1-6 (versioned as 4.10-1.1) and > uploaded it to DELAYED/5. Please feel free to tell me if I > should delay it longer (or reschedule to earlier, or

Bug#863563: double free with Paged Results control and pagesize 0

Package: slapd Version: 2.4.44+dfsg-4 Severity: important Tags: security fixed-upstream Control: forwarded -1 http://www.openldap.org/its/?findid=8655 Control: found -1 2.4.40+dfsg-1+deb8u2 Control: found -1 2.4.31-2+deb7u2 Karsten Heymann discovered that a user with access to search the

Bug#859227: mixmaster: ssl 1.1 support

Control: tags -1 + patch The attached patch moves the code over to using the openssl 1.1 api. It is entirely renames / accessors. Chris. diff --git a/mixmaster-3.0.0/Src/crypto.c b/mixmaster-3.0.0/Src/crypto.c index 1025b6d..e860a67 100644 --- a/mixmaster-3.0.0/Src/crypto.c +++

Bug#863562: jessie-pu: package libonig/5.9.5-3.2

Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 I have the release 5.9.5-3.2+deb8u1 with fixes for the CVE's: CVE-2017-9224 CVE-2017-9226 CVE-2017-9227 CVE-2017-9228

Bug#863561: network-manager: won't connect after gnome-keyring-dialog

Package: network-manager Version: 1.6.2-3 Severity: normal Dear Maintainer, i got a problem using networkmanager together with gnome-keyring. * What led up to the situation? - Trying to connect to wifi using the networkmanager-applet while gnome-keyring is still closed (e.g. after booting)

Bug#721430: crosstool-ng, Debian Maintainer and/or PR 352

On Mon, May 22, 2017 at 09:11:14PM +, Chris Packham wrote: > On 23/05/17 09:05, Geert Stappers wrote: > > > > I have a git clone of https://github.com/cpackham/crosstool-ng.git > > found the patch for the PR. > > > > I'll join it with my work from yesterday. > > > > And we have to find a

Bug#863560: network-manager-gnome: NetworkManager Applet does not hide unmanaged virtual interfaces

Package: network-manager-gnome Version: 1.4.6-1 Severity: normal Dear maintainer, NetworkManager Applet shows useless entries of unmanaged interfaces. In my case it is virtual interfaces from vmwware workstation. # nmcli d DEVICETYPE STATE CONNECTION wlp1s0wifi

Bug#858931: isakmpd: Patch

Control: tags -1 + patch The attached patch moves the code over to using the appropriate accessors for OpenSSL 1.1 in most cases. I have disabled 40-bit DES, and not ported that code, as the crypto is comically useless in the modern world. Chris. diff --git

Bug#780706: java.lang.SecurityException: Invalid signature file digest for Manifest main attributes

Control: tag -1 help Hi, Arduino packaging now builds for 1.8.2. Get the source code for it through debcheckout arduino However there is Java error and that is reason why the Debian Java packaging team is in the CC. The complete error 8<---8< $ arduino Picked up

Bug#862155: need upgrade of mate-desktop and caja to fix desktop background

Am 28.05.2017 um 16:59 schrieb Vlad Orlov: > Reassigning the bug to metapackage since fixing it requires upgrading > of both mate-desktop (to 1.16.2) and Caja (to 1.16.3). Also merged all > the duplicate reports since they're all about the same regression. > Yes, an upgrade would be most

Bug#862155: need upgrade of mate-desktop and caja to fix desktop background

Reassigning the bug to metapackage since fixing it requires upgrading of both mate-desktop (to 1.16.2) and Caja (to 1.16.3). Also merged all the duplicate reports since they're all about the same regression. Actually, it's recommended to upgrade Caja to the latest 1.16.x version which is

Bug#863559: unblock: libgnupg-interface-perl/0.52-9

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package libgnupg-interface-perl libgnupg-interface-perl version 0.52-9 is an improvement for stretch over 0.52-5 (currently in testing). In particular, it: * fixes an

Bug#863442: pan window to large

On vendredi 26 mai 2017 23:48:42 CEST you wrote: > The origin seems to be a post in a debian newgroup, the > linux.debian.ports.hurd contains a post titled "Still Failing: g-i- > installation_debian_sid_daily_hurd_lxde/353". I found the article you mention but pan 0.141 displays it correctly.

Bug#863477: redis-server: Systemd unit namespace setup can fail on ancient/strange kernels

Marc Ballarin wrote: > I guess the proper thing here, would simply be to document this in the > release notes. Perhaps in a general form, as there might be more > packages affected[1] and more users might run ancient or strange kernels > for whatever reason (Hosting environments, bad ARM

  1   2   >