Bug#889277: trac-privatetickets is empty

[Adrian Bunk]

Package: trac-privatetickets
Version: 2.0.3-3.1
Severity: grave

$ dpkg -L trac-privatetickets
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/trac-privatetickets
/usr/share/doc/trac-privatetickets/changelog.Debian.gz
/usr/share/doc/trac-privatetickets/README
/usr/share/doc/trac-privatetickets/buildinfo_all.gz
/usr/share/doc/trac-privatetickets/copyright
/usr/share/doc/trac-privatetickets/README.Debian
$

Bug#889272: jhead: heap buffer overflow while running jhead

[Joonun Jang]

Package: jhead
Version: 1:3.00-5
Severity: important
Tags: security

heap buffer overflow running jhead with "poc" option

Running 'jhead poc' with the attached file raises heap buffer overflow
which may allow a remote attacker to cause unspecified impact including 
denial-of-service attack
I expected the program to terminate without segfault, but the program crashes 
as follow

june@june:~/temp/report/jhead/00013658$ ../../binary/jhead-3.00/jhead ./poc
=
==10024==ERROR: AddressSanitizer: heap-buffer-overflow on address 
0x6020efff at pc 0x55570af5 bp 0x7ffef920 sp 0x7ffef918
READ of size 1 at 0x6020efff thread T0
#0 0x55570af4 in Get32s exif.c:337
#1 0x55570af4 in Get32u exif.c:365
#2 0x55570af4 in process_EXIF exif.c:1021
#3 0x55568506 in ReadJpegSections jpgfile.c:287
#4 0x55568a05 in ReadJpegSections jpgfile.c:126
#5 0x55568a05 in ReadJpegFile jpgfile.c:375
#6 0x55564af3 in ProcessFile jhead.c:896
#7 0x55562608 in main jhead.c:1729
#8 0x767bb2b0 in __libc_start_main 
(/lib/x86_64-linux-gnu/libc.so.6+0x202b0)
#9 0x55563a19 in _start 
(/home/june/temp/report/binary/jhead-3.00/jhead+0xfa19)

0x6020efff is located 0 bytes to the right of 15-byte region 
[0x6020eff0,0x6020efff)
allocated by thread T0 here:
#0 0x76effd28 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xc1d28)
#1 0x55567b36 in ReadJpegSections jpgfile.c:173

SUMMARY: AddressSanitizer: heap-buffer-overflow exif.c:337 in Get32s
Shadow bytes around the buggy address:
  0x0c047fff9da0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c047fff9db0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c047fff9dc0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c047fff9dd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c047fff9de0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x0c047fff9df0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa 00[07]
  0x0c047fff9e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c047fff9e10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c047fff9e20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c047fff9e30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c047fff9e40: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:   00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:   fa
  Heap right redzone:  fb
  Freed heap region:   fd
  Stack left redzone:  f1
  Stack mid redzone:   f2
  Stack right redzone: f3
  Stack partial redzone:   f4
  Stack after return:  f5
  Stack use after scope:   f8
  Global redzone:  f9
  Global init order:   f6
  Poisoned by user:f7
  Container overflow:  fc
  Array cookie:ac
  Intra object redzone:bb
  ASan internal:   fe
  Left alloca redzone: ca
  Right alloca redzone:cb
==10024==ABORTING

This bug was found with a fuzzer developed by 'SoftSec' group at KAIST

-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), 
(500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages jhead depends on:
ii  libc62.24-11+deb9u1
ii  libjpeg-turbo-progs  1:1.5.1-2

jhead recommends no packages.

Versions of packages jhead suggests:
ii  imagemagick  8:6.9.7.4+dfsg-11+deb9u4
ii  imagemagick-6.q16 [imagemagick]  8:6.9.7.4+dfsg-11+deb9u4

-- no debconf information

Bug#889273: plume-creator-dbg is empty

[Adrian Bunk]

Package: plume-creator-dbg
Version: 0.66+dfsg1-2
Severity: grave

$ dpkg -L plume-creator-dbg
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/plume-creator-dbg
/usr/share/doc/plume-creator-dbg/buildinfo_amd64.gz
/usr/share/doc/plume-creator-dbg/changelog.Debian.gz
/usr/share/doc/plume-creator-dbg/copyright
$

Bug#889275: sipwitch-cgi is empty

[Adrian Bunk]

Package: sipwitch-cgi
Version: 1.9.15-3
Severity: grave

$ dpkg -L sipwitch-cgi 
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/sipwitch-cgi
/usr/share/doc/sipwitch-cgi/AUTHORS
/usr/share/doc/sipwitch-cgi/NEWS.gz
/usr/share/doc/sipwitch-cgi/README.gz
/usr/share/doc/sipwitch-cgi/TODO
/usr/share/doc/sipwitch-cgi/buildinfo_amd64.gz
/usr/share/doc/sipwitch-cgi/changelog.Debian.amd64.gz
/usr/share/doc/sipwitch-cgi/changelog.Debian.gz
/usr/share/doc/sipwitch-cgi/changelog.gz
/usr/share/doc/sipwitch-cgi/copyright
$

Bug#889168: blender: symbol lookup error in libopencolorio.so

[Nil]

Yes, replacing debian-multimedia packages with testing versions works. I 
remove debian-multimedia from sources years ago and forgot about it. 
Maybe you should add this incompatible packages in conflict section?



On 03.02.2018 07:36, Adrian Bunk wrote:

On Sat, Feb 03, 2018 at 12:55:34AM +0300, Karelin Timofey wrote:

Package: blender
Version: 2.79+dfsg0-3+b2
Severity: grave
Justification: renders package unusable

Dear Maintainer, Blender=2.79+dfsg0-3+b2 did not start with this error:
"blender: symbol lookup error: /usr/lib/libOpenColorIO.so.1: undefined symbol: 
_ZN4YAML6detail9node_data12empty_scalarB5cxx11E".

Works for me.


...
Versions of packages blender depends on:
...
ii  libavcodec57  10:3.3.3-dmo3
ii  libavdevice57 10:3.3.1-dmo2
ii  libavformat57 10:3.3.3-dmo3
ii  libavutil55   10:3.3.3-dmo3
...
ii  libswscale4   10:3.3.3-dmo3
...

The packages from deb-multimedia.org are known to sometimes interact
badly with packages from Debian, in this case you have due to the
epoch an older version of the ffmpeg libraries installed than what
is in Debian.

What does
   dpkg -l | grep dmo
output, and does installing the Debian versions of these libraries
instead fix the problem?

It is also possible that your problem might be unrelated to that,
which version of the libyaml-cpp0.5v5 package do you have installed?

cu
Adrian

Bug#889267: O: golang-code.gitea-sdk - SDK implementation to interact with the Gitea API

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889269: liblld-4.0-dbg is empty

[Adrian Bunk]

Package: liblld-4.0-dbg
Version: 1:4.0.1-8
Severity: grave

$ dpkg -L liblld-4.0-dbg
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/liblld-4.0-dbg
/usr/share/doc/liblld-4.0-dbg/NEWS.Debian.gz
/usr/share/doc/liblld-4.0-dbg/changelog.Debian.gz
/usr/share/doc/liblld-4.0-dbg/copyright
$

Bug#889268: O: golang-code.gitea-git - Go module that provides git access through shell

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889265: golang-github-blevesearch-go-porterstemmer - Native Go implementation of the Porter Stemming algorithm

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889264: O: golang-github-blevesearch-segment - Go library for performing Unicode Text Segmentation

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889271: lua-sandbox-extensions-dev is empty

[Adrian Bunk]

Package: lua-sandbox-extensions-dev
Version: 0~git20161128-1
Severity: grave

$ dpkg -L lua-sandbox-extensions-dev
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/lua-sandbox-extensions-dev
/usr/share/doc/lua-sandbox-extensions-dev/README.md
/usr/share/doc/lua-sandbox-extensions-dev/changelog.Debian.gz
/usr/share/doc/lua-sandbox-extensions-dev/copyright
$

Bug#889263: O: golang-github-bsm-pool - simple connection pool library for Golang

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889266: O: golang-github-alicebob-miniredis - Pure Go Redis server for Go unittests

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889270: advancecomp: heap buffer overflow while running advzip

[Joonun Jang]

Package: advancecomp
Version: 2.0-1
Severity: important
Tags: security

heap buffer overflow running advzip with "-l poc" option

Running 'advzip -l poc' with the attached file raises heap buffer overflow
which may allow a remote attacker to cause unspecified impact including 
denial-of-service attack
I expected the program to terminate without segfault, but the program crashes 
as follow

june@june:~/temp/report/advzip/00030552$ ../../binary/advancecomp-2.0/advzip -l 
./poc
=
==9858==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6060effd 
at pc 0x76e9af7f bp 0x7fffd6c0 sp 0x7fffce70
READ of size 2020 at 0x6060effd thread T0
#0 0x76e9af7e  (/usr/lib/x86_64-linux-gnu/libasan.so.3+0x5cf7e)
#1 0x55579c2a in zip_entry::load_cent(unsigned char const*, unsigned 
int&) /home/june/temp/report/binary/advancecomp-2.0/zip.cc:722
#2 0x5557b56f in zip::open() 
/home/june/temp/report/binary/advancecomp-2.0/zip.cc:867
#3 0x5556e7a6 in list_single(std::__cxx11::basic_string const&, bool) 
/home/june/temp/report/binary/advancecomp-2.0/rezip.cc:122
#4 0x5556f8b2 in list_all(int, char**, bool) 
/home/june/temp/report/binary/advancecomp-2.0/rezip.cc:261
#5 0x5557214c in process(int, char**) 
/home/june/temp/report/binary/advancecomp-2.0/rezip.cc:613
#6 0x55572446 in main 
/home/june/temp/report/binary/advancecomp-2.0/rezip.cc:623
#7 0x760082b0 in __libc_start_main 
(/lib/x86_64-linux-gnu/libc.so.6+0x202b0)
#8 0x5556daf9 in _start 
(/home/june/temp/report/binary/advancecomp-2.0/advzip+0x19af9)

0x6060effd is located 0 bytes to the right of 61-byte region 
[0x6060efc0,0x6060effd)
allocated by thread T0 here:
#0 0x76effd28 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xc1d28)
#1 0x55583a4a in data_alloc(unsigned int) 
/home/june/temp/report/binary/advancecomp-2.0/data.cc:51
#2 0x55573af2 in cent_read(_IO_FILE*, unsigned int, unsigned char*&, 
unsigned int&) /home/june/temp/report/binary/advancecomp-2.0/zip.cc:113
#3 0x5557b3c5 in zip::open() 
/home/june/temp/report/binary/advancecomp-2.0/zip.cc:847
#4 0x5556e7a6 in list_single(std::__cxx11::basic_string const&, bool) 
/home/june/temp/report/binary/advancecomp-2.0/rezip.cc:122
#5 0x5556f8b2 in list_all(int, char**, bool) 
/home/june/temp/report/binary/advancecomp-2.0/rezip.cc:261
#6 0x5557214c in process(int, char**) 
/home/june/temp/report/binary/advancecomp-2.0/rezip.cc:613
#7 0x55572446 in main 
/home/june/temp/report/binary/advancecomp-2.0/rezip.cc:623
#8 0x760082b0 in __libc_start_main 
(/lib/x86_64-linux-gnu/libc.so.6+0x202b0)

SUMMARY: AddressSanitizer: heap-buffer-overflow 
(/usr/lib/x86_64-linux-gnu/libasan.so.3+0x5cf7e)
Shadow bytes around the buggy address:
  0x0c0c7fff9da0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0c7fff9db0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0c7fff9dc0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0c7fff9dd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0c7fff9de0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x0c0c7fff9df0: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00[05]
  0x0c0c7fff9e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0c7fff9e10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0c7fff9e20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0c7fff9e30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0c7fff9e40: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:   00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:   fa
  Heap right redzone:  fb
  Freed heap region:   fd
  Stack left redzone:  f1
  Stack mid redzone:   f2
  Stack right redzone: f3
  Stack partial redzone:   f4
  Stack after return:  f5
  Stack use after scope:   f8
  Global redzone:  f9
  Global init order:   f6
  Poisoned by user:f7
  Container overflow:  fc
  Array cookie:ac
  Intra object redzone:bb
  ASan internal:   fe
  Left alloca redzone: ca
  Right alloca redzone:cb
==9858==ABORTING

This bug was found with a fuzzer developed by 'SoftSec' group at KAIST

-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), 
(500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages advancecomp depends on:
ii  libc6   2.24-11+deb9u1
ii  libgcc1 

Bug#889260: O: golang-github-couchbase-moss - moss provides a fast key/value storage library for golang

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889261: O: golang-github-couchbase-ghistogram - simple int histogram for golang

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889262: O: golang-github-bsm-redeo - Framework for building redis-compatible TCP services

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889259: O: golang-github-cupcake-rdb - Redis RDB parser for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889258: O: golang-github-denisenkom-go-mssqldb - Microsoft SQL server driver written in go language

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889257: O: golang-github-edsrzf-mmap-go - portable mmap package for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889254: O: golang-github-facebookgo-httpdown - Gracefully shut down daemon without terminating connections

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889255: O: golang-github-facebookgo-grace - Graceful restart & zero downtime deploy for Go servers

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889256: O: golang-github-facebookgo-freeport - Go library to find a free TCP port for binding

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889248: O: golang-github-gogits-cron - Gogs cron library in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889252: O: golang-github-facebookgo-stats - defines a lightweight interface for collecting statistics

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889249: O: golang-github-gogits-chardet - Charset detector library for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889247: O: golang-github-go-macaron-bindata - in-memory static and template files for Macaron

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889250: O: golang-github-glendc-gopher-json - simple JSON encoder/decoder for Gopher-Lua

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889251: O: golang-github-facebookgo-subset - Check if a value is a subset of another

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889242: O: golang-github-go-macaron-toolbox - health check, pprof, profile and statistic services for Macaron

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889241: O: golang-github-gopherjs-gopherjs - Go to Javascript compiler

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889246: O: golang-github-go-macaron-cache - Cache management middleware for Macaron

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889243: O: golang-github-go-macaron-i18n - Internationalization and Localization of Macaron

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889240: O: golang-github-gorilla-pat - request router and dispatcher with a pat-like interface

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889244: O: golang-github-go-macaron-csrf - generate and validate csrf tokens for Macaron

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889239: O: golang-github-gorilla-securecookie - provides authenticated and encrypted cookie values

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889245: O: golang-github-go-macaron-captcha - Captcha service for Macaron

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889237: O: golang-github-go-xorm-builder - SQL builder for XORM written in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889238: O: golang-github-gorilla-sessions - save cookie and filesystem sessions and allow custom session backends

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889235: O: golang-github-issue9-identicon - generate an icon from identity information

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889236: O: golang-github-issue9-assert - Simple extension to test a series of assert functions

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889230: O: golang-github-leemcloughlin-gofarmhash - Implements Google's Farmhash in Golang

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889231: O: golang-github-kisielk-gotool - library of some utility functions provided by cmd/go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889228: O: golang-github-lunny-nodb - Nosql database with kv, list, hash, zset, bitmap, set

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889233: O: golang-github-joho-godotenv - Go port of Ruby's dotenv library

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889229: O: golang-github-lunny-log - Logging library with sqlite support for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889232: O: golang-github-juju-errors - Common juju errors and functions to annotate errors

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889234: O: golang-github-jaytaylor-html2text - Turns HTML into a plain-text equivalent

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889226: O: golang-github-mcuadros-go-version - version normalizer and comparison library for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889225: O: golang-github-mrjones-oauth - OAuth 1.0 Library for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889221: O: golang-github-neelance-astrewrite - Go tool to walk & rewrite AST

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889216: O: golang-github-ngaut-log - Provides a simple log wrapper for ngaut libraries

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889220: O: golang-github-neelance-sourcemap - Javascript source map reader and writer for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889219: O: golang-github-ngaut-deadline - deadline reader/writer

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889227: O: golang-github-markbates-goth - Multi-provider authentication for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889212: O: golang-github-pquerna-otp - Google Authenticator compatible one time passwords for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889217: O: golang-github-ngaut-pools - provides pools for resources

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889215: O: golang-github-ngaut-sync2 - Additional synchronization primitives extracted from Vitess

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889223: O: golang-github-msteinert-pam - Go wrapper module for the PAM API

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889224: gocr: heap buffer overflow while running gocr

[Joonun Jang]

Package: gocr
Version: 0.49-2+b1
Severity: important
Tags: security

heap buffer overflow running gocr with "poc" option

Running 'gocr poc' with the attached file raises heap buffer overflow
which may allow a remote attacker to cause unspecified impact including 
denial-of-service attack
I expected the program to terminate without segfault, but the program crashes 
as follow

june@june:~/temp/report/gocr/4223$ ../../binary/gocr-0.49/src/gocr poc
=
==5380==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6140ffc1 
at pc 0x5562c95f bp 0x7fff4da0 sp 0x7fff4d98
READ of size 1 at 0x6140ffc1 thread T0
#0 0x5562c95e in thresholding 
/home/june/temp/report/binary/gocr-0.49/src/otsu.c:255
#1 0x5558bf0c in pgm2asc 
/home/june/temp/report/binary/gocr-0.49/src/pgm2asc.c:2790
#2 0x5556a1d8 in main 
/home/june/temp/report/binary/gocr-0.49/src/gocr.c:368
#3 0x765972b0 in __libc_start_main 
(/lib/x86_64-linux-gnu/libc.so.6+0x202b0)
#4 0x55568149 in _start 
(/home/june/temp/report/binary/gocr-0.49/src/gocr+0x14149)

0x6140ffc1 is located 0 bytes to the right of 385-byte region 
[0x6140fe40,0x6140ffc1)
allocated by thread T0 here:
#0 0x76effd28 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xc1d28)
#1 0x55642c50 in readpgm 
/home/june/temp/report/binary/gocr-0.49/src/pnm.c:225
#2 0x55569e93 in read_picture 
/home/june/temp/report/binary/gocr-0.49/src/gocr.c:310
#3 0x5556a1ba in main 
/home/june/temp/report/binary/gocr-0.49/src/gocr.c:361
#4 0x765972b0 in __libc_start_main 
(/lib/x86_64-linux-gnu/libc.so.6+0x202b0)

SUMMARY: AddressSanitizer: heap-buffer-overflow 
/home/june/temp/report/binary/gocr-0.49/src/otsu.c:255 in thresholding
Shadow bytes around the buggy address:
  0x0c287fff9fa0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c287fff9fb0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c287fff9fc0: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x0c287fff9fd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c287fff9fe0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x0c287fff9ff0: 00 00 00 00 00 00 00 00[01]fa fa fa fa fa fa fa
  0x0c287fffa000: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c287fffa010: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c287fffa020: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c287fffa030: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c287fffa040: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:   00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:   fa
  Heap right redzone:  fb
  Freed heap region:   fd
  Stack left redzone:  f1
  Stack mid redzone:   f2
  Stack right redzone: f3
  Stack partial redzone:   f4
  Stack after return:  f5
  Stack use after scope:   f8
  Global redzone:  f9
  Global init order:   f6
  Poisoned by user:f7
  Container overflow:  fc
  Array cookie:ac
  Intra object redzone:bb
  ASan internal:   fe
  Left alloca redzone: ca
  Right alloca redzone:cb
==5380==ABORTING

This bug was found with a fuzzer developed by 'SoftSec' group at KAIST

-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), 
(500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gocr depends on:
ii  libc6  2.24-11+deb9u1

Versions of packages gocr recommends:
ii  bzip21.0.6-8.1
ii  fig2dev [transfig]   1:3.2.6a-2+deb9u1
ii  libjpeg-turbo-progs [libjpeg-progs]  1:1.5.1-2
ii  netpbm   2:10.0-15.3+b2
ii  transfig 1:3.2.6a-2+deb9u1

gocr suggests no packages.

-- no debconf information


poc
Description: Binary data

Bug#889218: O: golang-github-ngaut-go-zookeeper - Native ZooKeeper client for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#888950: brotli: Use dh_missing --fail-missing

[Tomasz Buchert]

On 31/01/18 21:37, Jeremy Bicha wrote:
> On Wed, Jan 31, 2018 at 5:56 PM, Tomasz Buchert  wrote:
> > Both bugs you reported will be fixed in the next upload.
>
> Thanks.
>
> By the way, your debian/changelog says you bumped the debhelper compat
> to 11, but that didn't happen in your git repo.
>
> Jeremy Bicha

Yeah, sorry.

I first bumped the compat level and update the changelog, but then
thought that maybe you actually really on the version 10.3 of
debhelper, so I reverted my change ... without reverting the
changelog.

Tomasz


signature.asc
Description: PGP signature

Bug#889214: O: golang-github-petar-gollrb - LLRB implementation of balanced binary search trees for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889213: O: golang-github-pingcap-check - rich testing extension for Go's testing package

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889208: O: golang-github-siddontang-go - Collection of siddontang libraries for Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889209: O: golang-github-sergi-go-diff - Diff, match and patch text in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889210: libdap-doc is empty

[Adrian Bunk]

Package: libdap-doc
Version: 3.18.2-2
Severity: grave

$ dpkg -L libdap-doc 
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/libdap-doc
/usr/share/doc/libdap-doc/changelog.Debian.gz
/usr/share/doc/libdap-doc/changelog.gz
/usr/share/doc/libdap-doc/copyright
/usr/share/doc/libdap-doc/readme.txt.gz
$ 


readme.txt.gz contains installation instructions
that shouldn't even be in the binary package.

The package in jessie contains 80 MB that seem to be missing.

Bug#889222: O: golang-github-nbutton23-zxcvbn-go - Strong password generator in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889211: O: golang-github-seiflotfy-cuckoofilter - Bloom filter replacement using cuckoo hashing

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889202: O: golang-github-steveyen-gtreap - gtreap is an immutable treap implementation in the Go Language

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889191: O: golang-gopkg-alexcesaro-quotedprintable.v3 - Implements quoted-printable and message header encoding in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889193: O: golang-strk.kbt-projects-go-libravatar - Simple Go library for serving federated avatars

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889198: O: golang-github-willf-bitset - Implements bitsets, a mapping between non-negative integers and boolean values

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889205: O: golang-github-siddontang-ledisdb - High-performance NoSQL database written in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889200: O: golang-github-unknwon-cae - PHP-like Compression and Archive Extensions in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889197: O: golang-github-yohcop-openid-go - OpenID 2.0 implementation in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889195: O: golang-github-unknwon-paginater - Helper module for custom pagination calculation

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889201: O: golang-github-twinj-uuid - RFC 4122 and DCE 1.1 compliant UUIDs in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889194: O: golang-gopkg-editorconfig-editorconfig-core-go.v1 - EditorConfig file parser and writer in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889192: O: golang-gopkg-jarcoal-httpmock.v1 - HTTP mocking for Golang

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889203: O: golang-github-ssor-bom - small Go library to clean bom from byte array or reader

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889207: O: golang-github-siddontang-goredis - Redis client implementation in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889204: O: golang-github-siddontang-rdb - Read Redis rdb files in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889196: O: golang-github-yuin-gopher-lua - virtual machine and compiler for Lua in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889199: O: golang-github-unknwon-i18n - Internationalization and Localization in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889206: O: golang-github-siddontang-go-snappy - Snappy compression format in Go

[Michael Lustfield]

Package: wnpp
Severity: normal

This package was added to Debian as a dependency of Gitea. I am no longer
working on Gitea and no longer have a reason to continue maintaining the
dependencies.

-- 
Michael Lustfield

Bug#889189: inventor-doc is empty

[Adrian Bunk]

Package: inventor-doc
Version: 2.1.5-10-21
Severity: grave

$ dpkg -L inventor-doc 
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/inventor-doc
/usr/share/doc/inventor-doc/changelog.Debian.gz
/usr/share/doc/inventor-doc/copyright
$ 

Bug#889190: libbitcoin0v5 is empty

[Adrian Bunk]

Package: libbitcoin0v5
Version: 2.11.0-1
Severity: grave


$ dpkg -L libbitcoin0v5
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/libbitcoin0v5
/usr/share/doc/libbitcoin0v5/AUTHORS
/usr/share/doc/libbitcoin0v5/NEWS.gz
/usr/share/doc/libbitcoin0v5/buildinfo_amd64.gz
/usr/share/doc/libbitcoin0v5/changelog.Debian.amd64.gz
/usr/share/doc/libbitcoin0v5/changelog.Debian.gz
/usr/share/doc/libbitcoin0v5/changelog.gz
/usr/share/doc/libbitcoin0v5/copyright
/usr/share/lintian
/usr/share/lintian/overrides
/usr/share/lintian/overrides/libbitcoin0v5
$

Bug#870987: Bug#814176: Bug#793492: Bug#814176: azureus: (Build-)Depends on OpenJDK 7

[Scott Kitterman]

On Thu, 31 Aug 2017 22:20:22 + Scott Kitterman  
wrote:
> 
> 
> On August 31, 2017 1:28:40 PM EDT, Emmanuel Bourg  wrote:
> >Le 27/08/2017 à 00:07, Scott Kitterman a écrit :
> >
> >> I would like to give Emmanuel time to respond to this.  I've tagged
> >the bug 
> >> moreinfo to hold on on processing it for the moment.  If Emmanuel
> >agrees to 
> >> the removal or we don't hear back in two weeks, then go ahead and
> >remove the 
> >> moreinfo tag and I'll process the removal then.
> >
> >I'm busy on another task for now but I plan to upload the current state
> >of the azureus repository when I'm done. The package builds fine, there
> >is still an issue with the embedded browser but downloading torrents
> >works.
> >
> >Emmanuel Bourg
> 
> Do you have an estimate for how long this will take?
> 
> Scott K

OK.  5 months without reply is enough.  I'll go ahead with this when I next 
process removals.

Scott K

Bug#889188: haskell-misfortune is empty

[Adrian Bunk]

Package: haskell-misfortune
Version: 0.1.1.2-5
Severity: grave

$ dpkg -L haskell-misfortune 
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/haskell-misfortune
/usr/share/doc/haskell-misfortune/buildinfo_amd64.gz
/usr/share/doc/haskell-misfortune/changelog.Debian.amd64.gz
/usr/share/doc/haskell-misfortune/changelog.Debian.gz
/usr/share/doc/haskell-misfortune/copyright
$ 

Bug#889187: e17-dbg is empty

[Adrian Bunk]

Package: e17-dbg
Version: 0.17.6-1.1+b1
Severity: grave

$ dpkg -L e17-dbg 
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/e17-dbg
/usr/share/doc/e17-dbg/NEWS.Debian.gz
/usr/share/doc/e17-dbg/changelog.Debian.amd64.gz
/usr/share/doc/e17-dbg/changelog.Debian.gz
/usr/share/doc/e17-dbg/changelog.gz
/usr/share/doc/e17-dbg/copyright
$



Debug information is in e17-dbgsym,
likely the fix is to drop e17-dbg.

Bug#889186: dvips-fontdata-n2bk is empty

[Adrian Bunk]

Package: dvips-fontdata-n2bk
Version: 0.0.2001.12.12-4
Severity: grave

$ dpkg -L dvips-fontdata-n2bk 
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/dvips-fontdata-n2bk
/usr/share/doc/dvips-fontdata-n2bk/README.Debian
/usr/share/doc/dvips-fontdata-n2bk/changelog.Debian.gz
/usr/share/doc/dvips-fontdata-n2bk/copyright
/usr/share/texmf
/usr/share/texmf/fonts
/usr/share/texmf/fonts/vf
/usr/share/texmf/fonts/vf/n2bk
$ 

Bug#889185: pps-tools: Please make build compatible with -Wl,--as-needed

[Steve Langasek]

Package: pps-tools
Version: 1.0.1-1
Severity: wishlist
Tags: patch
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu bionic ubuntu-patch

Dear Bernd,

The latest version of pps-tools has failed to build in Ubuntu, because one
of the programs uses libm but the Makefile passes -lm in a way that is
incompatible with -Wl,--as-needed, which is a default linker flag in Ubuntu.

The attached patch, which is more strictly correct, fixes the build failure
in Ubuntu.  Please consider applying it in Debian.

-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
Ubuntu Developerhttp://www.debian.org/
slanga...@ubuntu.com vor...@debian.org
diff -Nru pps-tools-1.0.1/debian/patches/linker-flag-order.patch 
pps-tools-1.0.1/debian/patches/linker-flag-order.patch
--- pps-tools-1.0.1/debian/patches/linker-flag-order.patch  1969-12-31 
16:00:00.0 -0800
+++ pps-tools-1.0.1/debian/patches/linker-flag-order.patch  2018-02-02 
21:50:06.0 -0800
@@ -0,0 +1,20 @@
+Description: fix linking under -Wl,--as-needed
+ Ubuntu's linker uses -Wl,--as-needed by default, which causes ppswatch
+ to fail to link because of the order of options on the commandline.  Add
+ -lm to LDLIBS instead of LDFLAGS, which will cause it to be passed in
+ the right order.
+Author: Steve Langasek 
+
+Index: pps-tools-1.0.1/Makefile
+===
+--- pps-tools-1.0.1.orig/Makefile
 pps-tools-1.0.1/Makefile
+@@ -3,7 +3,7 @@
+ CFLAGS += -Wall -O2 -D_GNU_SOURCE
+ CFLAGS += -ggdb
+ CFLAGS += -fPIC
+-LDFLAGS += -lm
++LDLIBS += -lm
+ 
+ # -- Actions section --
+ 
diff -Nru pps-tools-1.0.1/debian/patches/series 
pps-tools-1.0.1/debian/patches/series
--- pps-tools-1.0.1/debian/patches/series   1969-12-31 16:00:00.0 
-0800
+++ pps-tools-1.0.1/debian/patches/series   2018-02-02 21:42:30.0 
-0800
@@ -0,0 +1 @@
+linker-flag-order.patch

Bug#889184: cl-mcclim-doc is empty

[Adrian Bunk]

Package: cl-mcclim-doc
Version: 0.9.6.dfsg.cvs20100315-1
Severity: grave

$ dpkg -L cl-mcclim-doc
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/cl-mcclim-doc
/usr/share/doc/cl-mcclim-doc/README.Debian
/usr/share/doc/cl-mcclim-doc/changelog.Debian.gz
/usr/share/doc/cl-mcclim-doc/copyright
$ cat /usr/share/doc/cl-mcclim-doc/README.Debian
This used to be a McCLIM user manual.  As the copying conditions of the manual
are unclear, it was removed from this package.  If you'd like to resolve the
problem with the author of the manual, please try to do so!

The complete CLIM specification can be found at
http://common-lisp.net/project/mcclim/ .
$ 

Bug#889183: pyfai FTBFS: RuntimeError: Fail to generate 'check_calib' man documentation

[Adrian Bunk]

Source: pyfai
Version: 0.15.0+dfsg-1
Severity: serious

https://buildd.debian.org/status/package.php?p=pyfai=sid

...
I: pybuild base:184: 
PYTHONPATH=/<>/pyfai-0.15.0+dfsg/.pybuild/pythonX.Y_3.6/build 
xvfb-run -a --server-args="-screen 0 1024x768x24" python3.6 setup.py build_man
INFO:root:Generating grammar tables from /usr/lib/python3.6/lib2to3/Grammar.txt
INFO:root:Generating grammar tables from 
/usr/lib/python3.6/lib2to3/PatternGrammar.txt
INFO:pyFAI.setup:Use setuptools
running build_man
INFO:pyFAI.setup:Build man for entry-point target 'check_calib'
help2man: can't get `--help' info from /tmp/check_calib_59xexrun
Try `--no-discard-stderr' if option outputs to stderr
INFO:pyFAI.setup:b'Traceback (most recent call last):\n  File 
"/tmp/check_calib_59xexrun", line 2, in \nimport 
pyFAI.app.check_calib as app\n  File 
"/<>/pyfai-0.15.0+dfsg/.pybuild/pythonX.Y_3.6/build/pyFAI/__init__.py",
 line 56, in \nfrom .detectors import Detector\n  File 
"/<>/pyfai-0.15.0+dfsg/.pybuild/pythonX.Y_3.6/build/pyFAI/detectors.py",
 line 51, in \nfrom . import io\n  File 
"/<>/pyfai-0.15.0+dfsg/.pybuild/pythonX.Y_3.6/build/pyFAI/io.py", 
line 67, in \nfrom .utils import StringTypes, 
fully_qualified_name\n  File 
"/<>/pyfai-0.15.0+dfsg/.pybuild/pythonX.Y_3.6/build/pyFAI/utils/__init__.py",
 line 54, in \nfrom ..third_party import six\nModuleNotFoundError: 
No module named \'pyFAI.third_party\'\n'
INFO:pyFAI.setup:b'Traceback (most recent call last):\n  File 
"/tmp/check_calib_59xexrun", line 2, in \nimport 
pyFAI.app.check_calib as app\n  File 
"/<>/pyfai-0.15.0+dfsg/.pybuild/pythonX.Y_3.6/build/pyFAI/__init__.py",
 line 56, in \nfrom .detectors import Detector\n  File 
"/<>/pyfai-0.15.0+dfsg/.pybuild/pythonX.Y_3.6/build/pyFAI/detectors.py",
 line 51, in \nfrom . import io\n  File 
"/<>/pyfai-0.15.0+dfsg/.pybuild/pythonX.Y_3.6/build/pyFAI/io.py", 
line 67, in \nfrom .utils import StringTypes, 
fully_qualified_name\n  File 
"/<>/pyfai-0.15.0+dfsg/.pybuild/pythonX.Y_3.6/build/pyFAI/utils/__init__.py",
 line 54, in \nfrom ..third_party import six\nModuleNotFoundError: 
No module named \'pyFAI.third_party\'\n'
Traceback (most recent call last):
  File "setup.py", line 868, in 
setup_package()
  File "setup.py", line 865, in setup_package
setup(**setup_kwargs)
  File "/usr/lib/python3/dist-packages/setuptools/__init__.py", line 129, in 
setup
return distutils.core.setup(**attrs)
  File "/usr/lib/python3.6/distutils/core.py", line 148, in setup
dist.run_commands()
  File "/usr/lib/python3.6/distutils/dist.py", line 955, in run_commands
self.run_command(cmd)
  File "/usr/lib/python3.6/distutils/dist.py", line 974, in run_command
cmd_obj.run()
  File "setup.py", line 248, in run
raise RuntimeError("Fail to generate '%s' man documentation" % target_name)
RuntimeError: Fail to generate 'check_calib' man documentation
E: pybuild pybuild:283: build: plugin custom failed with: exit code=1: 
PYTHONPATH=/<>/pyfai-0.15.0+dfsg/.pybuild/pythonX.Y_3.6/build 
xvfb-run -a --server-args="-screen 0 1024x768x24" python3.6 setup.py build_man
dh_auto_build: pybuild --build -i python{version} -p 3.6 returned exit code 13
debian/rules:20: recipe for target 'override_dh_auto_build' failed
make[1]: *** [override_dh_auto_build] Error 25

Bug#785044: stardict: diff for NMU version 3.0.1-9.4

[Adrian Bunk]

Control: tags 785044 + patch
Control: tags 785044 + pending

Dear maintainer,

I've prepared an NMU for stardict (versioned as 3.0.1-9.4) and uploaded 
it to DELAYED/10. Please feel free to tell me if I should cancel it.

cu
Adrian

-- 

   "Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
   "Only a promise," Lao Er said.
   Pearl S. Buck - Dragon Seed

diff -Nru stardict-3.0.1/debian/changelog stardict-3.0.1/debian/changelog
--- stardict-3.0.1/debian/changelog	2016-11-29 21:43:05.0 +0200
+++ stardict-3.0.1/debian/changelog	2018-02-03 08:35:40.0 +0200
@@ -1,3 +1,11 @@
+stardict (3.0.1-9.4) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Update the build dependency from libestools2.0-dev
+to libestools-dev. (Closes: #785044)
+
+ -- Adrian Bunk   Sat, 03 Feb 2018 08:35:40 +0200
+
 stardict (3.0.1-9.3) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -Nru stardict-3.0.1/debian/control stardict-3.0.1/debian/control
--- stardict-3.0.1/debian/control	2016-11-29 21:43:05.0 +0200
+++ stardict-3.0.1/debian/control	2018-02-03 08:35:40.0 +0200
@@ -5,7 +5,7 @@
 Uploaders: Anthony Fok 
 Build-Depends:
  debhelper (>= 8), autoconf, automake (>= 1.10), autotools-dev, dh-autoreconf, intltool,
- libbonobo2-dev, libenchant-dev, libespeak-dev, libestools2.0-dev,
+ libbonobo2-dev, libenchant-dev, libespeak-dev, libestools-dev,
  libgconf2-dev, libgnomeui-dev, liborbit2-dev,
  libsigc++-2.0-dev (>= 2.0.18-2), libtool, libx11-dev, libxml-parser-perl,
  festival-dev, rarian-compat, sharutils, x11proto-core-dev, zlib1g-dev

Bug#889182: RM: tl-cpputils -- ROM; deprecated (now embedded into retdec)

[Yangfl]

Package: ftp.debian.org
Severity: normal

>From retdec authors: tl-cpputils repository [1] is now deprecated and
archived. The content of the repository was moved to the main retdec
repository [2].

[1] https://github.com/avast-tl/tl-cpputils
[2] https://github.com/avast-tl/retdec

Bug#889181: cacti changes for PHP7.2 and dep8 tests

[Nishanth Aravamudan]

Package: cacti
Version: 1.1.31+ds1-1
Severity: normal
Tags: patch
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu bionic ubuntu-patch

Dear Maintainer,


In Ubuntu, the attached patch was applied to achieve the following:

  * debian/patches/php72_count_bc_changes.patch: PHP7.2 has deprecated
count() of non-Countable objects.
  * debian/patches/update-cactisql.patch: Update cacti.sql for
readstring to community change.

Note that even with this change, the DEP8 tests fail on Ubuntu 18.04,
with:

Unexpected output in /var/log/cacti/cacti.log:
02/02/2018 16:40:07 - AUTOM8 ERROR: The Network ID: 1 is disabled. You must use 
the 'force' option to force it's execution.

Which I think might be because we need to pass force to some URL or
check a network enabled box in the script?


Thanks for considering the patch.

*** /tmp/tmp6E1xYI/cacti_1.1.31+ds1-1ubuntu1.debdiff
diff -Nru cacti-1.1.31+ds1/debian/patches/php72_count_bc_changes.patch 
cacti-1.1.31+ds1/debian/patches/php72_count_bc_changes.patch
--- cacti-1.1.31+ds1/debian/patches/php72_count_bc_changes.patch
1969-12-31 16:00:00.0 -0800
+++ cacti-1.1.31+ds1/debian/patches/php72_count_bc_changes.patch
2018-02-02 08:21:41.0 -0800
@@ -0,0 +1,106 @@
+Description: PHP7.2 has deprecated count() of non-Countable objects
+Author: Nishanth Aravamudan 
+Origin: upstream, 
https://github.com/Cacti/cacti/commit/202163bf7c8541f1b2827bdd62c584cc4d25124a.patch
+Bug: https://github.com/Cacti/cacti/issues/1040
+Last-Update: 2018-02-02
+
+--- cacti-1.1.31+ds1.orig/graphs_new.php
 cacti-1.1.31+ds1/graphs_new.php
+@@ -757,7 +757,7 @@ function graphs() {
+   $num_input_fields = 0;
+   $num_visible_fields = 0;
+ 
+-  if ($xml_array != false) {
++  if (sizeof($xml_array)) {
+   /* loop through once so we can find out 
how many input fields there are */
+   foreach ($xml_array['fields'] as 
$field_name => $field_array) {
+   if ($field_array['direction'] 
== 'input' || $field_array['direction'] == 'input-output') {
+--- cacti-1.1.31+ds1.orig/lib/api_automation.php
 cacti-1.1.31+ds1/lib/api_automation.php
+@@ -760,7 +760,7 @@ function display_new_graphs($rule, $url)
+* for a dropdown selection
+*/
+   $xml_array = get_data_query_array($rule['snmp_query_id']);
+-  if ($xml_array != false) {
++  if (sizeof($xml_array)) {
+   /* loop through once so we can find out how many input fields 
there are */
+   foreach ($xml_array['fields'] as $field_name => $field_array) {
+   if ($field_array['direction'] == 'input' || 
$field_array['direction'] == 'input-output') {
+@@ -1898,7 +1898,7 @@ function global_item_edit($rule_id, $rul
+   $xml_array = 
get_data_query_array($automation_rule['snmp_query_id']);
+   $fields = array();
+ 
+-  if (sizeof($xml_array['fields'])) {
++  if (sizeof($xml_array) && sizeof($xml_array['fields'])) {
+   foreach($xml_array['fields'] as $key => $value) {
+   # ... work on all input fields
+   if (isset($value['direction']) && 
($value['direction'] == 'input' || $value['direction'] == 'input-output')) {
+--- cacti-1.1.31+ds1.orig/lib/data_query.php
 cacti-1.1.31+ds1/lib/data_query.php
+@@ -27,7 +27,7 @@ function run_data_query($host_id, $snmp_
+ 
+   /* required for upgrading old versions of cacti */
+   if (!db_column_exists('host', 'poller_id')) {
+-  return;
++  return false;
+   }
+ 
+   /* don't run/rerun the query if the host is down, or disabled */
+@@ -205,7 +205,7 @@ function get_data_query_array($snmp_quer
+ 
+   if (!file_exists($xml_file_path)) {
+   query_debug_timer_offset('data_query', "Could not find 
data query XML file at '$xml_file_path'");
+-  return false;
++  return array();
+   }
+ 
+   query_debug_timer_offset('data_query', "Found data query XML 
file at '$xml_file_path'");
+@@ -1227,7 +1227,7 @@ function get_formatted_data_query_indexe
+   /* in case no unique index is available, fallback to first field in XML 
*/
+   if ($sort_cache['sort_field'] == ''){
+   $snmp_queries = get_data_query_array($data_query_id);
+-  if (isset($snmp_queries['index_order'])){
++  if (sizeof($snmp_queries) && 
isset($snmp_queries['index_order'])){
+   $i = explode(':', $snmp_queries['index_order']);
+   if (sizeof($i) > 0){
+   $sort_cache['sort_field'] = array_shift($i);
+@@ -1385,7 +1385,7 @@ function 

Bug#870633: ifenslave: Option bond-mode does not work

[bkw+1517636960]

Can somebody confirm that the workaround mentioned in the Ubuntu bug 
report is the approved way to do this?  If I'm reading that page 
correctly, I need to move my bond options out of the interfaces file and 
place them in /etc/modprobe.d/bonding.conf, like this:


"options bonding mode=active-backup miimon=100"

Is this correct?

Bug#854214:

[Piotr Kowalski]

Sex