Bug#891891: libglib-object-introspection-perl: Unnecessary dependencies?

[intrigeri]

Control: tag -1 + pending

Hi,

Jeremy Bicha:
> Please verify whether libglib-object-introspection-perl needs a
> runtime dependency on libextutils-pkgconfig-perl and
> libextutils-depends-perl. I suspect those are only needed as Build
> Depends.

Indeed, my analysis and tests confirm this. Good catch, thanks!

I've tracked down the root cause of us having these dependencies in
Debian and reported https://bugzilla.gnome.org/show_bug.cgi?id=793979.

I've removed these dependencies in Vcs-Git.

Can this wait for the next upload (which could be anytime between now
and in 6 months) or do you have a specific reason to want to see this
fixed in the archive sooner?

Cheers,
-- 
intrigeri

Bug#845439: [Vmdebootstrap-devel] Bug#845439: [PATCH] Don???t enforce (U)EFI on arm64

[Lars Wirzenius]

On Fri, 2018-03-02 at 08:24 +0100, Michael Stapelberg wrote:
> vmdb2

Debian has no shortage of image building tools. We even had a talk at
the 2015 Debconf about this. Back then we had 11 tools. Now we have at
least two more: vmdb2 and debos. I don't have a complete list, but
it'd be nice if someone collected one on wiki.debian.org.

I am clearly biased towards vmdb2, having written it. I won't say it's
the best one, not having used most of the others, so any such claim by
me would be pure hubris, supported only by my enormous ego. I'm often
stupid, but not that stupid.


signature.asc
Description: This is a digitally signed message part

Bug#885704: liblept5 negatively plays with paths in /tmp when opening TIFFs

[Santiago R.R.]

On Thu, 22 Feb 2018 22:26:13 -0800 Jeff Breidenbach  wrote:
> This is the patch I used for Leptonica 1.74. It should work fine for
> earlier versions.
> Upstream used a different approach for addressing the problem in version
> 1.75.

Hi Jeff,

I have been unable to reproduce the issue in earlier versions. Do you
have any clue about other conditions to reproduce it:

TMPDIR=/var/tmp tesseract /tmp/ANY/PATH/XFig-LaTeX-together.jpg - -
Error in pixGenerateHalftoneMask: pix too small: w = 71, h = 100
 

  

  Oveyloyxng Text
  Ovevluymg Text
  Ovenaywng Tex‘

Thanks,

 -- Santiago


signature.asc
Description: PGP signature

Bug#845439: [Vmdebootstrap-devel] Bug#845439: [PATCH] Don???t enforce (U)EFI on arm64

[Michael Stapelberg]

vmdb2

On Thu, Mar 1, 2018 at 3:29 PM, Domenico Andreoli  wrote:

> On Thu, Mar 01, 2018 at 01:55:54PM +0200, Lars Wirzenius wrote:
> > On Thu, 2018-03-01 at 12:39 +0100, Guido Günther wrote:
> > > On Sun, Aug 20, 2017 at 11:02:13PM +0200, Petter Reinholdtsen wrote:
> > > > Note, this is one of two vmdebootstrap issues blocking the creating
> > > > of Debian Stretch based images for Raspberry Pi 3 using only packages
> > > > in Debian, see https://wiki.debian.org/RaspberryPi3 >.
> > > >
> > > > It would be great if it could be possible to create RPi images
> > > > using only vmdebootstrap and a list of options. :)
> > >
> > > Dear maintainers, any objections to an NMU?
> >
> > Yes. Please don't. Please spend that effort switching away from
> > vmdebootstrap.
>
> ok, in favour of what else?
>
>
> --
> 3B10 0CA1 8674 ACBA B4FE  FCD2 CE5B CF17 9960 DE13
>



-- 
Best regards,
Michael

Bug#891168: miniupnpd po update

[Yangfl]

Control: tags -1 moreinfo

Hi,

Thanks for your translation! I've merged your po. However, as
miniupnpd disabling old options and the refactor of init script, some
strings need updating.

The newest version can be found at
https://salsa.debian.org/miniupnp-team/miniupnpd/blob/debian-sid/debian/po/templates.pot

Bug#887785: javacc-maven-plugin and build-rdeps FTBFS with jtb 1.4.12-1

[Tiago Daitx]

This is caused by a groupId change in 1.4.12-1 where it was changed
from "edu.ucla.cs.compilers" [1] to "edu.purdue.cs" [2].

Please see bug #891893 [3] for more information.

Regards,
Tiago

[1] 
https://anonscm.debian.org/cgit/collab-maint/jtb.git/tree/debian/pom.xml?id=cffddde94d57ef60f7415f8c8d400a75ba4c0f30
[2] 
https://anonscm.debian.org/cgit/collab-maint/jtb.git/tree/pom.xml?id=19bafc71af2bdb92a0abe47b01a0aa8504945cab
[3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891893

Bug#891895: ITP: node-neo-async -- faster replacement for Async

[Pirate Praveen]

Package: wnpp
Severity: wishlist
Owner: Pirate Praveen 
X-Debbugs-CC: debian-de...@lists.debian.org
Control: block 843951 by -1

* Package name: node-neo-async
  Version : 2.5.0
  Upstream Author : Suguru Motegi
* URL : https://github.com/suguru03/neo-async
* License : Expat
  Programming Lang: JavaScript
  Description : faster replacement for Async

 Neo-Async is thought to be used as a drop-in replacement for Async, it
almosti
 fully covers its functionality and runs faster.
 .
 Async is a utility module which provides straight-forward, powerful
 functions for working with asynchronous Javascript. Although originally
 designed for use with Node, it can also be used directly in the
 browser.
 .
 Node.js is an event-based server-side JavaScript engine.

Last upstream update of node-async was in 2014-05-08 and it is still at
version 0.8 where as current upstream release is 2.6.0. Since its build
dependency chain has google closure compiler (for lodash-es), it is hard
to update to newer releases. Some modules like webpack and
compression-webpack-plugin, which were depending on async has switched
to neo-async already.



signature.asc
Description: OpenPGP digital signature

Bug#890584: even link-local

[miniupnp]

Le 26.02.2018 à 01:28, Adam Borowski a écrit :
>> Since upgrading from 1.2.20130907-4.1 to 1.5.20161216-2 this week (as a
>> result of the updated package hitting testing) I'm getting lots of
>> messages of the form:
>>
>> Feb 16 09:36:14 eris minissdpd[15233]: peer a.b.c.d:60644 is not from a LAN
> This includes the gateway (both IPv4 and IPv6), making upnp not functional.
>
> It's especially wrong for:
> peer [fe80::]:47432 is not from a LAN
>
> fe80::/10 addresses are link-local, scope:link, and no non-misconfigured
> router will ever forward such packets -- thus you know that they're either
> genuinely local or have been specifically made to look this by something
> that _is_ local.
>
> I haven't touched minisspdp's config in any way, and the above happens even
> when there's only one interface configured.
>
It can happen if minissdpd is run with -6 option to enable IPv6 but the
network interface to listen to is not specified correctly by name (eth0).
Please check what command line arguments are used.
It should be something like
minissdpd -6 -i eth0
NOT
minissdpd -6 -i 192.168.1.0

Regards,

Thomas Bernard

Bug#891894: golang-golang-x-sys: redefinition of 'SyscallNoError' when building with gccgo 8

[Shengjing Zhu]

Source: golang-golang-x-sys
Version: 0.0~git20180126.0.ff2a66f-1
Severity: important
Tags: upstream

Dear Maintainer,

It failed to build with gccgo 8
https://buildd.debian.org/status/fetch.php?pkg=elvish=ppc64el=0.11%2Bds1-4=1519965549=0

It's been fixed in 
https://github.com/golang/sys/commit/37707fdb30a5b38865cfb95e5aab41707daec7fd

Bug#891893: jtb: groupId change in jtb-1.4.12-1 causes other packages to FTBFS

[Tiago Daitx]

patch attached

On Fri, Mar 2, 2018 at 2:43 AM, Tiago Stürmer Daitx
 wrote:
> Package: jtb
> Version: 1.4.12-1
> Severity: important
>
> Dear Maintainer,
>
> As per bug #887785 various packages were affected by jtb-1.4.12-1. I
> tracked the issue down to a groupId change after the pom was updated
> from upstream.
>
> The pom.xml groupId changed from "edu.ucla.cs.compilers" (original
> pom.xml [1]) to "edu.purdue.cs" (new pom.xml [2]).
>
> Adding a relocation to debian/jtb.poms fixes the FTBFS in the affected
> packages (tested on surefire, javacc-maven-plugin, hawtbuf, avro-java,
> and activemq-protobuf).
>
> Please see the attached debdiff for a suggested fix. You might want to
> change the relocate version.
>
> Regards,
> Tiago
>
> [1] 
> https://anonscm.debian.org/cgit/collab-maint/jtb.git/tree/debian/pom.xml?id=cffddde94d57ef60f7415f8c8d400a75ba4c0f30
> [2] 
> https://anonscm.debian.org/cgit/collab-maint/jtb.git/tree/pom.xml?id=19bafc71af2bdb92a0abe47b01a0aa8504945cab
>
> -- System Information:
> Debian Release: buster/sid
>   APT prefers bionic
>   APT policy: (500, 'bionic'), (400, 'bionic-proposed')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
>
> Kernel: Linux 4.13.0-32-generic (SMP w/8 CPU cores)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8), 
> LANGUAGE=en_US (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
>
> Versions of packages jtb depends on:
> ii  default-jre [java8-runtime] 2:1.8-59ubuntu1
> pn  jarwrapper  
> ii  openjdk-10-jre [java9-runtime]  10~32-0ubuntu1
> ii  openjdk-8-jre [java8-runtime]   8u151-b12-1
> ii  openjdk-9-jre [java9-runtime]   9.0.1+11-1
>
> jtb recommends no packages.
>
> jtb suggests no packages.



-- 
Tiago Stürmer Daitx
Software Engineer
tiago.da...@canonical.com

PGP Key: 4096R/F5B213BE (hkp://keyserver.ubuntu.com)
Fingerprint = 45D0 FE5A 8109 1E91 866E  8CA4 1931 8D5E F5B2 13BE
diff -Nru jtb-1.4.12/debian/changelog jtb-1.4.12/debian/changelog
--- jtb-1.4.12/debian/changelog	2018-01-08 01:18:07.0 -0200
+++ jtb-1.4.12/debian/changelog	2018-03-02 01:13:00.0 -0300
@@ -1,3 +1,10 @@
+jtb (1.4.12-1ubuntu1~01) UNRELEASED; urgency=medium
+
+  * Relocate edu.ucla.cs.compilers:jtb:debian:
+- fix a few packages FTBFS due to groupId change. (Closes: #887785).
+
+ -- Tiago Stürmer Daitx   Fri, 02 Mar 2018 04:13:00 +
+
 jtb (1.4.12-1) unstable; urgency=medium
 
   [ Markus Koschany ]
diff -Nru jtb-1.4.12/debian/jtb.poms jtb-1.4.12/debian/jtb.poms
--- jtb-1.4.12/debian/jtb.poms	2018-01-07 16:46:40.0 -0200
+++ jtb-1.4.12/debian/jtb.poms	2018-03-02 01:12:38.0 -0300
@@ -1 +1 @@
-debian/pom.xml
+debian/pom.xml --relocate=edu.ucla.cs.compilers:jtb:debian

Bug#891893: jtb: groupId change in jtb-1.4.12-1 causes other packages to FTBFS

[Tiago Stürmer Daitx]

Package: jtb
Version: 1.4.12-1
Severity: important

Dear Maintainer,

As per bug #887785 various packages were affected by jtb-1.4.12-1. I
tracked the issue down to a groupId change after the pom was updated
from upstream.

The pom.xml groupId changed from "edu.ucla.cs.compilers" (original
pom.xml [1]) to "edu.purdue.cs" (new pom.xml [2]).

Adding a relocation to debian/jtb.poms fixes the FTBFS in the affected
packages (tested on surefire, javacc-maven-plugin, hawtbuf, avro-java,
and activemq-protobuf).

Please see the attached debdiff for a suggested fix. You might want to
change the relocate version.

Regards,
Tiago

[1] 
https://anonscm.debian.org/cgit/collab-maint/jtb.git/tree/debian/pom.xml?id=cffddde94d57ef60f7415f8c8d400a75ba4c0f30
[2] 
https://anonscm.debian.org/cgit/collab-maint/jtb.git/tree/pom.xml?id=19bafc71af2bdb92a0abe47b01a0aa8504945cab

-- System Information:
Debian Release: buster/sid
  APT prefers bionic
  APT policy: (500, 'bionic'), (400, 'bionic-proposed')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-32-generic (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8), LANGUAGE=en_US 
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages jtb depends on:
ii  default-jre [java8-runtime] 2:1.8-59ubuntu1
pn  jarwrapper  
ii  openjdk-10-jre [java9-runtime]  10~32-0ubuntu1
ii  openjdk-8-jre [java8-runtime]   8u151-b12-1
ii  openjdk-9-jre [java9-runtime]   9.0.1+11-1

jtb recommends no packages.

jtb suggests no packages.

Bug#891892: lintian: False positive: statically-linked-binary despite the Build-Depends on golang-go

[Arnaud Rebillout]

Package: lintian
Version: 2.5.67~bpo9+1
Severity: normal

Dear Maintainer,

Package concerned (should be pushed in Debian experimental soon)

https://salsa.debian.org/elboulangero-guest/golang-gogottrpc

Build the package with

gbp clone https://salsa.debian.org/elboulangero-guest/golang-gogottrpc.git
cd golang-gogottrpc
gbp buildpackage --git-pbuilder --git-dist=sid

Then run lintian

lintian ../golang-gogottrpc*changes
E: gogottrpc: statically-linked-binary usr/bin/protoc-gen-gogottrpc
W: gogottrpc: binary-without-manpage usr/bin/protoc-gen-gogottrpc

The statically-linked-binary warninf shouldn't be there, as the field
Build-Depends contains:

golang-go (>= 2:1.9~) | golang-1.9-go

Best regards,

  Arnaud

-- System Information:
Debian Release: 9.3
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-6-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages lintian depends on:
ii  binutils  2.28-5
ii  bzip2 1.0.6-8.1
ii  diffstat  1.61-1+b1
ii  dpkg  1.18.24
ii  file  1:5.30-1+deb9u1
ii  gettext   0.19.8.1-2
ii  intltool-debian   0.35.0+20060710.4
ii  libapt-pkg-perl   0.1.32
ii  libarchive-zip-perl   1.59-1
ii  libclass-accessor-perl0.34-1
ii  libclone-perl 0.38-2+b1
ii  libdpkg-perl  1.18.24
ii  libemail-valid-perl   1.202-1
ii  libfile-basedir-perl  0.07-1
ii  libipc-run-perl   0.94-1
ii  liblist-moreutils-perl0.416-1+b1
ii  libparse-debianchangelog-perl 1.2.0-12
ii  libperl5.24 [libdigest-sha-perl]  5.24.1-3+deb9u2
ii  libtext-levenshtein-perl  0.13-1
ii  libtimedate-perl  2.3000-2
ii  liburi-perl   1.71-1
ii  libxml-simple-perl2.22-1
ii  libyaml-libyaml-perl  0.63-2
ii  man-db2.7.6.1-2
ii  patchutils0.3.4-2
ii  perl  5.24.1-3+deb9u2
ii  t1utils   1.39-2
ii  xz-utils  5.2.2-1.2+b1

Versions of packages lintian recommends:
ii  libperlio-gzip-perl  0.19-1+b2

Versions of packages lintian suggests:
ii  binutils-multiarch 2.28-5
ii  dpkg-dev   1.18.24
ii  libhtml-parser-perl3.72-3
pn  libtext-template-perl  

-- no debconf information

Bug#891891: libglib-object-introspection-perl: Unnecessary dependencies?

[Jeremy Bicha]

Package: libglib-object-introspection-perl
Version: 0.044-1
X-Debbugs-CC: intrig...@debian.org

Please verify whether libglib-object-introspection-perl needs a
runtime dependency on libextutils-pkgconfig-perl and
libextutils-depends-perl. I suspect those are only needed as Build
Depends.


Thanks,
Jeremy Bicha

Bug#891773: [PATCH] ieee1275: Fix crash in of_path_of_nvme when of_path is empty

[Eric Snowberg]

> On Mar 1, 2018, at 3:34 PM, John Paul Adrian Glaubitz 
>  wrote:
> 
> The of_path_of_nvme function (commit 2391d57, ieee1275: add nvme
> support within ofpath) introduced a functional regression:
> 
> On systems which are not based on Open Firmware but have at
> least one NVME device, find_obppath will return NULL and thus
> trying to append the disk name to of_path will result in a
> crash.
> 
> The proper behavior of of_path_of_nvme is, however, to just
> return NULL in such cases, like other users of find_obppath,
> such as of_path_of_scsi.
> 
> Signed-off-by: John Paul Adrian Glaubitz 
> ---
> grub-core/osdep/linux/ofpath.c | 5 -
> 1 file changed, 4 insertions(+), 1 deletion(-)
> 
> diff --git a/grub-core/osdep/linux/ofpath.c b/grub-core/osdep/linux/ofpath.c
> index 1c30e7233..61806212e 100644
> --- a/grub-core/osdep/linux/ofpath.c
> +++ b/grub-core/osdep/linux/ofpath.c
> @@ -389,8 +389,11 @@ of_path_of_nvme(const char *sys_devname 
> __attribute__((unused)),
> }
> 
>   of_path = find_obppath (sysfs_path);
> +
> +  if (of_path)
> +strcat (of_path, disk);
> +
>   free (sysfs_path);
> -  strcat (of_path, disk);
>   return of_path;
> }
> 
> -- 
> 2.16.2

Reviewed-by: Eric Snowberg 

Bug#891890: ITP: zfs-linux-git -- zfsonlinux packaging tracking git master

[Antonio Russo]

Package: wnpp
Severity: wishlist
X-Debbugs-CC: debian-de...@lists.debian.org

--- Please fill out the fields below. ---

   Package name: zfs-linux-git
Version: 0.8~
Upstream Author: Brian Behlendorf 
URL: http://www.zfsonlinux.org/
License: CDDL
Description:
 ZFS is an advanced file system and volume manager which was originally
 developed for Solaris. It provides a number of advanced features like
 snapshots, clones, live integrity checksums, deduplication, compression,
 encryption, and much more. The port to the Linux kernel includes a
 functional and stable SPA, DMU, ZVOL and ZFS Posix Layer (ZPL).
 .
 This package is a very close fork of the existing zfs-linux package
 already in Debian, but aims to track git master and the ntrim2-next
 patch set adding trim support by Tim Chase.
 .
 BEWARE: THIS VERSION OF ZFS IS EXPERIMENTAL. IT MAY EAT YOUR DATA.



Just like the parallel packaging of wine-unstable and wine, I have
packaged [1] a -git version of zfs (and spl). Actually, the version is
a rebase of a PR [2] by Tim Chase [3] to add trim/unmap support to ZFS.
This appears to be getting close to a mainline inclusion, and there has
gathered much interest. The git mainline already includes encrypted
datasets.

I am proposing adding this package to the experimental repository (as
it definitely does not meet the quality and stability requirements for
any Debian release). The exposure of these experimental features to
the broader Debian community provides a better test-bed for the
zfsonlinux mainline (and for this ntrim2-next PR especially). This
testing improves the quality of the released version, protecting
Debian users not as willing to test out the newest features
filesystems.

Moreover, because the packaging is---and will remain, to the best of my
ability---close to the released-version ZFS packaging, changes
migrating into the release version from master that require adaptations
to the Debian packaging will have already been addressed (by myself).
This should alleviate some of the demands on the already overburdened
maintainers of zfs-linux.

There are a few considerations I'd like to highlight:

1. The packages should be difficult to accidentally pull in, but
still satisfy any dependencies by third-party packages for zfs. I've
done this by changing the name, and adding both a Conflict: and
Provides: dependency on the original zfs-linux package name.

2. ZFS and SPL are relatively tightly coupled software. I have
opted for a tight release schedule, where both the ZFS and SPL
commit hashes are tracked for both ZFS and SPL packaging. This
avoids strange bugs with out-of-date SPL versions, but will
require re-releasing SPL versions for every ZFS release.

This can be adjusted if it is decided that it is important.

3. I'm tracking a not-yet-mainlined patch set, and its role is
expected to become more stable once that patch set is mainlined.
The package name anticipates this outcome.

[1] https://github.com/aerusso/pkg-zfsonlinux-git
[2] https://github.com/dweeezil/zfs/tree/ntrim2-next
[3] https://github.com/dweeezil

Bug#891889: ballz-data license is listed incorrectly

[Julie Marchant]

Package: ballz-data
Version: 1.0.3-1

I have investigated the GitLab repository of B.A.L.L.Z. (packages:
ballz, ballz-data) and found that the license of the ballz-data package
is incorrectly indicated. The GitLab repository is here:

https://gitlab.com/ballz/ballz/

And the COPYING file states the following:

"All source under the src directory is licensed under the BSD license except
the source under the src/dumb directory which is licensed under the Dumb
license."

As you can see, the license notice is specifically for the source code,
*not* the data. No license is given for the data. As such, ballz-data
should be moved to non-free, and ballz should be moved to contrib,
unless one of the following is done:

1. The author of the game is contacted, requested to provide a license
for the data, and does so; or

2. Someone replaces everything in ballz-data with a DFSG version.

Bug#891888: Use system libraries

[Yangfl]

Source: goxel
Tags: patch
Severity: wishlist

Hi,

As libinih-dev is now available, please consider using system
libraries instead of bundled ones.
diff --git a/SConstruct b/SConstruct
index aa053fd..7f7bc48 100644
--- a/SConstruct
+++ b/SConstruct
@@ -82,7 +82,6 @@ if target_os == 'darwin':
 env.Append(FRAMEWORKS=['OpenGL', 'Cocoa'])
 env.Append(LIBS=['m', 'z', 'argp', 'glfw3', 'objc'])
 
-env.Append(CPPPATH=['ext_src/uthash'])
 env.Append(CPPPATH=['ext_src/stb'])
 env.Append(CPPPATH=['ext_src/noc'])
 
@@ -93,8 +92,7 @@ sources += glob.glob('ext_src/imgui/*.cpp')
 env.Append(CPPPATH=['ext_src/imgui'])
 env.Append(CXXFLAGS='-DIMGUI_INCLUDE_IMGUI_USER_INL')
 
-sources += glob.glob('ext_src/inih/*.c')
-env.Append(CPPPATH=['ext_src/inih'])
+env.Append(LIBS='inih')
 env.Append(CFLAGS='-DINI_HANDLER_LINENO=1')
 
 if target_os == 'posix':

Bug#891886: linux-image-4.14.0-2-amd64: Enable CONFIG_GPIO_MOCKUP=m

[Matthias Urlichs]

Package: src:linux
Version: 4.14+89
Severity: wishlist

I'm writing a program that uses GPIO pins. I am unable to test that program
on Debian systems. Surprise, most servers don't have GPIO pins, and even if
they do I can't just tell the operator to please connect a bunch of them so
that I can control the inputs I require for my tests.

Thus: Please enable CONFIG_GPIO_MOCKUP=m.

Bug#891887: ITP: python-certbot-dns-digitalocean -- DigitalOcean DNS plugin for Certbot

[Harlan Lieberman-Berg]

Package: wnpp
Severity: wishlist
Owner: Harlan Lieberman-Berg 

* Package name: python-certbot-dns-digitalocean
  Version : 0.22.0
  Upstream Author : Certbot Project 
* URL : https://certbot.eff.org
* License : Apache-2.0
  Programming Lang: Python
  Description : a certbot plugin for validations through DigitalOcean

  This will be maintained by the Debian Let's Encrypt Team inside the
  certbot subteam.

Bug#891084: /usr/bin/slabtop: USE column reports either 100 or 0 percent only

[Frank Chung]

Dear Maintainer,

It appears this issue has been addressed upstream:
https://gitlab.com/procps-ng/procps/commit/23ba442c886f6250d1068a82fb7d0fc544acfd63

If suitable in your opinion, please tag as fixed-upstream. Thanks.

Regards,
Frank

Bug#890495: [pkg-golang-devel] Bug#890495: golang-1.8: FTBFS on ppc64el

[Michael Hudson-Doyle]

On 2 March 2018 at 06:49, Frédéric Bonnard  wrote:

> On Thu, 15 Feb 2018 23:21:41 +1300, Michael Hudson-Doyle <
> michael.hud...@canonical.com> wrote:
> > ​Ah I wondered what that upload was about :-) Thanks for the patches. I
> > can't help wondering if the correct fix is not to remove Go 1.8 from
> > unstable instead though. It will only be supported until 1.10 comes out
> in
> > at most a few weeks and long out of support by the time buster is
> released.
> > Is there any reason you need 1.8 specifically?
>
> Hi again Michael,
> just to be sure as you seem to be the good person on both side : Debian
> import freeze for Ubuntu Bionic is today (which I thought would be not
> so early) and will 1.8.3-2ubuntu1 remain for bionic ? (it built on
> ppc64el)
> I just wanted to be sure the failing 1.8.5 won't be propagated.
>

The correct thing to do for Go 1.8 in bionic is to remove it. I should get
onto that...

Cheers,
mwh

Bug#891885: RFP: libpdl-ccs-perl -- Perl CPAN PDL::CCS module

[Sergey Kolychev]

Package: wnpp
Severity: wishlist

Bug#891884: urlwatch: missing recommends/suggests

[Paul Wise]

Package: urlwatch
Version: 2.8-2

urlwatch 2.8-2 dropped lynx, vobject and html2text from the Recommends
and Suggests but lynx is the default for the html2txt plugin, html2text
is one of the backups for the html2txt plugin and vobject is required
for the ical2txt plugin.

Please grep the source for all python imports and calls to external
tools via the subprocess module and add the results to Depends,
Recommends or Suggests as appropriate.

For the plugins where there are multiple alternatives you can add them
to the fields like this, in the order upstream prefers them in.

Field: lynx | html2txt | foo | bar

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


signature.asc
Description: This is a digitally signed message part

Bug#891883: vino: stop installing Telepathy service file now that Telepathy is disabled

[Simon McVittie]

Package: vino
Version: 3.22.0-3
Severity: minor
Tags: upstream

Telepathy integration is now disabled in vino, but it still installs
/usr/share/dbus-1/services/org.freedesktop.Telepathy.Client.Vino.service
which matches the pattern of a Telepathy client, resulting in:

Mar 02 01:20:04 espresso systemd[2636]: Started Telepathy Mission Control 
service.
Mar 02 01:20:04 espresso org.freedesktop.Telepathy.Client.Vino[2655]: Unknown 
option --tube
Mar 02 01:20:04 espresso org.freedesktop.Telepathy.Client.Vino[2655]: Run 
'vino-server --help' to see a full list of available command line options
Mar 02 01:20:04 espresso dbus-daemon[2655]: [session uid=1000 pid=2655] 
Activated service 'org.freedesktop.Telepathy.Client.Vino' failed: Process 
org.freedesktop.Telepathy.Client.Vino exited with status 1

This file should presumably only be installed when Telepathy integration
is enabled and the --tube option exists.

smcv

Bug#888663: libtemplate-perl: FTBFS with debhelper/11.1

[gregor herrmann]

On Sun, 28 Jan 2018 11:25:10 -0800, Benj. Mako Hill wrote:

> 
> > In the concrete case, it is appears to be relaitively simple to
> > convert libtemplate-perl to use override targets rather than the
> > deprecated manual sequence control parameters.  I have attached
> > a patch for this.
> Thanks for the patch! I'll test this and upload it if it looks
> alright.

Any news?
Is there something where the Debian Perl Group can help?


Cheers,
gregor

-- 
 .''`.  https://info.comodo.priv.at -- Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
   `-   NP: Nick Drake: Which Will


signature.asc
Description: Digital Signature

Bug#891882: enigmail 2.0~beta1 runs unsandboxed code (pepmda) from the Internet without prompting the user

[Daniel Kahn Gillmor]

Package: enigmail
Version: 2:2.0~beta1-1
Severity: normal

enigmail 2.0 downloads pepmda from the internet by default, even for
users who have not opted into using pep.  This includes the following
files, which either duplicate code already in debian, or which we
don't have source for in debian:

  3589171  28708 -rwxr-xr-x   1 tst  tst  29394216 Feb 25 14:48 
pepmda/bin/pep-json-server
  3589180  4 -rw-r--r--   1 tst  tst  1206 Feb 25 14:49 
pepmda/release.json
  3589178  18816 -rw-r--r--   1 tst  tst  19267584 Feb 25 14:48 
pepmda/share/pEp/system.db
  3589169  4 -rw-r--r--   1 tst  tst  1150 Feb 25 14:49 
pepmda/share/pEp/html/json-test.ico
  3589177  4 -rw-r--r--   1 tst  tst  2991 Feb 25 14:49 
pepmda/share/pEp/html/index.html
  3572660 20 -rw-r--r--   1 tst  tst 18104 Feb 25 14:49 
pepmda/share/pEp/html/interactive.js
  3589188 84 -rw-r--r--   1 tst  tst 85589 Feb 25 14:49 
pepmda/share/pEp/html/jquery-2.2.0.min.js
  3534200   4292 -rwxr-xr-x   1 tst  tst   4393056 Feb 25 14:48 
pepmda/lib/libetpan.so.17
  3589184304 -rw-r--r--   1 tst  tst308360 Feb 25 14:48 
pepmda/lib/libevent-2.0.so.5
  3589182596 -rwxr-xr-x   1 tst  tst610128 Feb 25 14:48 
pepmda/lib/libpEpEngine.so
  3572662   1796 -rw-r--r--   1 tst  tst   1835928 Feb 25 14:48 
pepmda/lib/libstdc++.so.6
  3589170 84 -rw-r--r--   1 tst  tst 85112 Feb 25 14:48 
pepmda/lib/libgpg-error.so.0
  3589189284 -rw-r--r--   1 tst  tst289192 Feb 25 14:48 
pepmda/lib/libgpgme.so.11
  3589185   1064 -rw-r--r--   1 tst  tst   1088904 Feb 25 14:48 
pepmda/lib/libsqlite3.so.0
  3589183196 -rw-r--r--   1 tst  tst198432 Feb 25 14:48 
pepmda/lib/libboost_thread.so.1.62.0
  3589174108 -rw-r--r--   1 tst  tst108816 Feb 25 14:48 
pepmda/lib/libz.so.1
  3589186 80 -rw-r--r--   1 tst  tst 81560 Feb 25 14:48 
pepmda/lib/libassuan.so.0
  3589172608 -rw-r--r--   1 tst  tst618832 Feb 25 14:48 
pepmda/lib/libboost_program_options.so.1.62.0
  3589179 96 -rw-r--r--   1 tst  tst 97392 Feb 25 14:48 
pepmda/lib/libgcc_s.so.1
  3589181116 -rw-r--r--   1 tst  tst116672 Feb 25 14:48 
pepmda/lib/libboost_filesystem.so.1.62.0
  3589173 24 -rw-r--r--   1 tst  tst 22288 Feb 25 14:48 
pepmda/lib/libuuid.so.1
  3589187 20 -rw-r--r--   1 tst  tst 18520 Feb 25 14:48 
pepmda/lib/libboost_system.so.1.62.0


I don't think it is appropriate for a package in debian; users can't
ensure that these packages are kept up-to-date (or that they meet
debian standards), and they don't necessarily have the free software
guarantees that they might expect, even if pep as distributed today is
entirely free software.

in particular, they are fetched by package/installPep.jsm, which pulls
the info about the p≡p library from
https://www.enigmail.net/service/getPepDownload.svc, which looks like
it permits the controller of https://www.enigmail.net/ to serve
arbitrary data (the fingerprints of the files to download are not
embedded in the enigmail source).

(there are other nagging technical details too, such as this profile
not working in a multiarch scenario, but those are secondary to the
software freedom and arbitrary code execution concerns above)

This appears to remain the situation in subsequent betas of enigmail,
so i'm going to raise the concern upstream.

I do not think this enigmail should make it into debian unstable with
this behavior.  While i'm trying to figure out a satisfactory solution
with upstream, i'll most likely try to patch this part out if i can
figure out how to do so cleanly.

   --dkg

-- System Information:
Debian Release: buster/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing'), (500, 'oldstable'), 
(200, 'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages enigmail depends on:
ii  gnupg2.2.5-1
ii  gnupg-agent  2.2.5-1
ii  gnupg2   2.2.5-1
ii  gpg-agent [gnupg-agent]  2.2.5-1
ii  icedove  1:52.4.0-1
ii  thunderbird  1:52.6.0-1+b1

Versions of packages enigmail recommends:
ii  pinentry-gnome3 [pinentry-x11]  1.1.0-1
ii  pinentry-gtk2 [pinentry-x11]1.1.0-1
ii  pinentry-qt [pinentry-x11]  1.1.0-1

enigmail suggests no packages.

-- no debconf information

Bug#891703: DB user isn't read from setting_local (mailman3-suite.py in /etc)

[Markus Gschwendt]

I'm not sure if this is the same bug.

I get following in the logs:

```
Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-
packages/django/core/handlers/exception.py", line 41, in inner
response = get_response(request)
  File "/usr/lib/python2.7/dist-packages/django/core/handlers/base.py", 
line 249, in _legacy_get_response
response = self._get_response(request)
  File "/usr/lib/python2.7/dist-packages/django/core/handlers/base.py", 
line 187, in _get_response
response = self.process_exception_by_middleware(e, request)
  File "/usr/lib/python2.7/dist-packages/django/core/handlers/base.py", 
line 185, in _get_response
response = wrapped_callback(request, *callback_args,
**callback_kwargs)
  File "/usr/lib/python2.7/dist-packages/django/views/generic/base.py", 
line 68, in view
return self.dispatch(request, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/django/utils/decorators.py",
line 67, in _wrapper
return bound_func(*args, **kwargs)
  File "/usr/lib/python2.7/dist-
packages/django/views/decorators/debug.py", line 76, in
sensitive_post_parameters_wrapper
return view(request, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/django/utils/decorators.py",
line 63, in bound_func
return func.__get__(self, type(self))(*args2, **kwargs2)
  File "/usr/lib/python2.7/dist-packages/allauth/account/views.py",
line 137, in dispatch
return super(LoginView, self).dispatch(request, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/allauth/account/views.py",
line 80, in dispatch
**kwargs)
  File "/usr/lib/python2.7/dist-packages/django/views/generic/base.py", 
line 88, in dispatch
return handler(request, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/allauth/account/views.py",
line 103, in post
response = self.form_valid(form)
  File "/usr/lib/python2.7/dist-packages/allauth/account/views.py",
line 150, in form_valid
return form.login(self.request, redirect_url=success_url)
  File "/usr/lib/python2.7/dist-packages/allauth/account/forms.py",
line 197, in login
redirect_url=redirect_url)
  File "/usr/lib/python2.7/dist-packages/allauth/account/utils.py",
line 146, in perform_login
send_email_confirmation(request, user, signup=signup)
  File "/usr/lib/python2.7/dist-packages/allauth/account/utils.py",
line 323, in send_email_confirmation
confirm=True)
  File "/usr/lib/python2.7/dist-packages/allauth/account/managers.py",
line 15, in add_email
user=user, email__iexact=email, defaults={"email": email}
  File "/usr/lib/python2.7/dist-packages/django/db/models/manager.py",
line 85, in manager_method
return getattr(self.get_queryset(), name)(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/django/db/models/query.py",
line 466, in get_or_create
return self._create_object_from_params(lookup, params)
  File "/usr/lib/python2.7/dist-packages/django/db/models/query.py",
line 498, in _create_object_from_params
obj = self.create(**params)
  File "/usr/lib/python2.7/dist-packages/django/db/models/query.py",
line 394, in create
obj.save(force_insert=True, using=self.db)
  File "/usr/lib/python2.7/dist-packages/django/db/models/base.py",
line 808, in save
force_update=force_update, update_fields=update_fields)
  File "/usr/lib/python2.7/dist-packages/django/db/models/base.py",
line 838, in save_base
updated = self._save_table(raw, cls, force_insert, force_update,
using, update_fields)
  File "/usr/lib/python2.7/dist-packages/django/db/models/base.py",
line 924, in _save_table
result = self._do_insert(cls._base_manager, using, fields,
update_pk, raw)
  File "/usr/lib/python2.7/dist-packages/django/db/models/base.py",
line 963, in _do_insert
using=using, raw=raw)
  File "/usr/lib/python2.7/dist-packages/django/db/models/manager.py",
line 85, in manager_method
return getattr(self.get_queryset(), name)(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/django/db/models/query.py",
line 1076, in _insert
return query.get_compiler(using=using).execute_sql(return_id)
  File "/usr/lib/python2.7/dist-
packages/django/db/models/sql/compiler.py", line 1112, in execute_sql
cursor.execute(sql, params)
  File "/usr/lib/python2.7/dist-packages/django/db/backends/utils.py",
line 64, in execute
return self.cursor.execute(sql, params)
  File "/usr/lib/python2.7/dist-packages/django/db/utils.py", line 94,
in __exit__
six.reraise(dj_exc_type, dj_exc_value, traceback)
  File "/usr/lib/python2.7/dist-packages/django/db/backends/utils.py",
line 64, in execute
return self.cursor.execute(sql, params)
  File "/usr/lib/python2.7/dist-
packages/django/db/backends/sqlite3/base.py", line 328, in execute
return Database.Cursor.execute(self, query, params)
OperationalError: attempt to write a readonly database
```

after changing the owner of the database the error disappears:

chown www-data:www-data /var/lib/mailman3/web/mailman3suite.db.db

as a sidenote:
there are 2 .db 

Bug#891881: mailman3-suite: On system using exim (no postfix install) the list create script tries to create postfix aliases

[Markus Gschwendt]

Package: mailman3
Version: 3.1.1
System: debian stretch-backports

This is a system with exim4 as local mailserver
On creating a new mailinglist i get following error in the logs:

```
File "/usr/lib/python3.5/wsgiref/handlers.py", line 137, in run
self.result = application(self.environ, self.start_response)
  File "/usr/lib/python3/dist-
packages/mailman/database/transaction.py", line 50, in wrapper
rtn = function(*args, **kws)
  File "/usr/lib/python3/dist-packages/mailman/rest/wsgiapp.py", line
214, in __call__
return super().__call__(environ, start_response)
  File "falcon/api.py", line 215, in falcon.api.API.__call__
(falcon/api.c:2571)
  File "falcon/api.py", line 189, in falcon.api.API.__call__
(falcon/api.c:2190)
  File "/usr/lib/python3/dist-packages/mailman/rest/lists.py", line
245, in on_post
mlist = create_list(**validator(request))
  File "/usr/lib/python3/dist-packages/mailman/app/lifecycle.py", line
100, in create_list
call_name(config.mta.incoming).create(mlist)
  File "/usr/lib/python3/dist-packages/mailman/mta/postfix.py", line
66, in create
self.regenerate()
  File "/usr/lib/python3/dist-packages/mailman/mta/postfix.py", line
103, in regenerate
raise RuntimeError(NL.join(errors))
RuntimeError: command failure: /usr/sbin/postmap
/var/lib/mailman3/data/postfix_lmtp, 127, Key has expired
command failure: /usr/sbin/postmap
/var/lib/mailman3/data/postfix_domains, 127, Key has expired
Mar 01 21:34:02 2018 (11537) 127.0.0.1 - - "POST /3.0/lists HTTP/1.1"
500 59
```

This means that it tries to create postfix aliases but postfix is not
installed. /usr/sbin/postmap does not exist.

A workaround is to create that file (empty) with execute permissions.
A proper fix would be that
/usr/lib/python3/dist-packages/mailman/mta/postfix.py
will not be called in the first place.

Bug#869184: dpkg: source uploads including _amd64.buildinfo cause problems

[Guillem Jover]

On Thu, 2018-03-01 at 15:22:30 +, Holger Levsen wrote:
> On Wed, Jan 24, 2018 at 04:05:39PM +0100, Salvatore Bonaccorso wrote:
> > Any news regarding this proposal from Ansgar? We were biten now
> > several times already by this (e.g. php update, curl via
> > security.d.o).
> 
> Guilem, what's your stance on this bug?

I think it should be fixed. I've just not come up with something that
would seem a generic/clean way to do that. :(

> We (reproducible builds) really dont want "our" tools (=.buildinfo files)
> to cause grief to other teams in Debian, and especially not on a regular
> basis... so as a first step to fix this, I'd like to collect opinions
> how to best fix this issue here.

The problem got introduced when I proposed changing the filename
format, and dropping the annoying timestamp. I also though there was
talk at some point initially about DAK renaming those files to cope
with possible multiple uploads if the conflicting names?

Renaming the arch buildinfo to _source.buildinfo seems wrong, and even
then I'm not sure how to cleanly transfer that knowledge from
dpkg-buildpackage to dpkg-genbuildinfo.

I guess, the ideal solution would be to qualify the buildinfo file
with the builder user and hostname, because that in a way denotes the
build environment. But that seems like too much leakage. As in:

  pkgfoo_1.0.0-1_mips64el_username@hostname.buildinfo

Perhaps just using the maintainer email address might be enough though,
the one from the -m option or from the changelog, which AFAIR buildds
do set? But this seems like it can produce quite ugly filenames:

  
pkgfoo_1.0.0-1_mips64el_buildd_mipsel-mipsel-sil...@buildd.debian.org.buildinfo

not to mention that both of these "break" the conventional pattern, which
is still used by things like the debian/files parser and injector.

Perhaps the simplest and more correct might be to name it using
something like source+amd64 as the arch name, which seems like a
dubious arch, but at least is accurate and might be trivial to
implement, taking care of not ending up with such fake arch in
unexpected places…

Thanks,
Guillem

Bug#891880: roundcubemail: no option in dbconfig for a remote mysql database setup

[stven jones]

Package: roundcubemail
Version: roundcube
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

no option to config roundcube for a remote database, this is then compounded by,
no locatable documentation to config manually, std doc methods do not succeed. 
It appears something somewhere is over-riding attempts to manually edit.

   * What exactly did you do (or not do) that was effective (or
 ineffective)?
Attempted manual editing of config files in /etc/roundcube in desperation
   * What was the outcome of this action?
no change web ui still reports no db connection
   * What outcome did you expect instead?
hould work.

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-6-amd64 (SMP w/1 CPU core)
Locale: LANG=en_NZ.UTF-8, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_NZ:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Bug#891879: gnome-chess: No 3D graphics

[Pelle Hjek]

Package: gnome-chess
Version: 1:3.26.0-3
Severity: normal

Dear Maintainer,

The description of the gnome-chess package is "chess game with 3D graphics,"
however the 3D graphics are nowhere to be found.



-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 4.14.0-3-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages gnome-chess depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.26.1-3
ii  hoichess 0.21.0-2
ii  libc62.26-6
ii  libcairo21.15.10-1
ii  libglib2.0-0 2.54.3-2
ii  libgtk-3-0   3.22.28-1
ii  librsvg2-2   2.40.20-2

Versions of packages gnome-chess recommends:
ii  yelp  3.26.0-2

Versions of packages gnome-chess suggests:
pn  bbchess
pn  crafty 
ii  fairymax   5.0b-1
ii  fruit  2.1.dfsg-7
ii  glaurung   2.2-2+b2
ii  gnuchess   6.2.5-1
ii  phalanx22+d051004-14
ii  sjeng  11.2-8+b3
ii  stockfish  8-3
pn  toga2  

-- no debconf information

Bug#891849: Cron errors, permission denied: '/var/log/mailman3/mailman-suite.log'

[Markus Gschwendt]

i tried to fix this with

chown list:list /var/log/mailman3/mailman-suite.log

but then other parts break:

```
Traceback (most recent call last):
  File "manage.py", line 10, in 
execute_from_command_line(sys.argv)
  File "/usr/lib/python2.7/dist-
packages/django/core/management/__init__.py", line 364, in
execute_from_command_line
utility.execute()
  File "/usr/lib/python2.7/dist-
packages/django/core/management/__init__.py", line 338, in execute
django.setup()
  File "/usr/lib/python2.7/dist-packages/django/__init__.py", line 22,
in setup
configure_logging(settings.LOGGING_CONFIG, settings.LOGGING)
  File "/usr/lib/python2.7/dist-packages/django/utils/log.py", line 75,
in configure_logging
logging_config_func(logging_settings)
  File "/usr/lib/python2.7/logging/config.py", line 794, in dictConfig
dictConfigClass(config).configure()
  File "/usr/lib/python2.7/logging/config.py", line 576, in configure
'%r: %s' % (name, e))
ValueError: Unable to configure handler 'file': [Errno 13] Permission
denied: '/var/log/mailman3/mailman-suite.log'
```

I think that 2 different users try to write to that logfile.

A workaround (i don't like) is to give o+rw permission to that file.

Mainlman 3.1.1 from stretch-backports

Bug#714454: status, homepage update

[Thorsten Glaser]

On Thu, 1 Mar 2018, Thorsten Glaser wrote:

> how’s the status?

Hm, swami 2.0.0 (2010-10-25) is in Debian, so, even though
2.1.0 (2014-04-25) is available (heh…) we at least have a
soundfont editor.

//mirabilos
-- 
[16:04:33] bkix: "veni vidi violini"
[16:04:45] bkix: "ich kam, sah und vergeigte"...

Bug#891435: dpkg-genbuildinfo: does not arch qualify Installed-Build-Depends

[Guillem Jover]

Control: forcemerge -1 873138

On Sun, 2018-02-25 at 16:18:25 +0100, Helmut Grohne wrote:
> Package: dpkg-dev
> Version: 1.18.11
> File: /usr/bin/dpkg-genbuildinfo
> User: reproducible-bui...@lists.alioth.debian.org
> Usertags: toolchain
> X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org

> When building packages with foreign architecture packages installed, the
> recorded Installed-Build-Depends are imprecise. dpkg-genbuildinfo only
> records which packages are installed, not for which architecture. For
> native builds, one can install M-A:foreign packages from foreign
> architectures (unusual), but for cross builds this is very relevant. In
> fact, the produced .buildinfo files are unsuitable for reproducing a
> cross build environment. dpkg-genbuildinfo should add an architecture
> qualification whenever a binary package is not from the native
> architecture.

As mentioned at the time on IRC, this needs some rework of the
Dpkg::Deps modules and surrounding code, at the time that was too
intrusive, but now is a good time for this kind of change. I'll start
flushing out the changes I've got, plus some from josch I think?

In any casem merging the dupes. :)

Thanks,
Guillem

Bug#891878: RFS: urlwatch/2.8-2

[Maxime Werlen]

Package: sponsorship-requests
Severity: normal
X-Debbugs-CC: p...@debian.org

Dear mentors,

I am looking for a sponsor for my package "urlwatch"

 * Package name: urlwatch
   Version : 2.8-2
   Upstream Author : Thomas Perl
 * URL : https://thp.io/2008/urlwatch/
 * License : BSD-3-clause
   Section : web

It builds those binary packages:
  urlwatch   - tool for monitoring webpages for updates

To access further information about this package, please visit the
following URL:
  https://mentors.debian.net/package/urlwatch

Alternatively, one can download the package with dget using this command:
  dget -x 
https://mentors.debian.net/debian/pool/main/u/urlwatch/urlwatch_2.8-2.dsc

More information about urlwatch can be obtained from
https://github.com/thp/urlwatch.

Changes since the last upload:

urlwatch (2.8-2) unstable; urgency=medium

  * Changed dependency on keyring to recommends (Closes: #891456)
  * Fixed autopkgtests
  * Fixed typo in patch headers

Regards,

Maxime Werlen

Bug#891456: urlwatch: urlwatch pulls in dbus, making it unusable on servers

[Maxime Werlen]

owner: max...@werlen.fr

I've made some tests with python3-keyring as a recommended dependency and
seems to be working fine.
I will soon upload a new release 2.8-2 with this modification.

Thanks for your report.

Regards,

Maxime

2018-02-25 18:47 GMT+01:00 Axel Beckert :

> Package: urlwatch
> Version: 2.7-1
>
> With the switch from 1.15-4 to 2.7-1, urlwatch pulls in dbus as a hard
> dependency via python3-keyring and python3-secretstorage.
>
> Is the hard dependency on python3-keyring really necessary? Does
> urlwatch no more work without GNOME Keyring or KWallet? That really
> makes it unusable on servers.
>
> So please downgrade the hard dependency on python3-keyring to Recommends
> if possible in some way.
>
> -- System Information:
> Debian Release: buster/sid
>   APT prefers unstable
>   APT policy: (990, 'unstable'), (600, 'testing'), (500,
> 'unstable-debug'), (500, 'buildd-unstable'), (110, 'experimental'), (1,
> 'experimental-debug'), (1, 'buildd-experimental')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 4.14.0-3-amd64 (SMP w/8 CPU cores)
> Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C.UTF-8
> (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: sysvinit (via /sbin/init)
> LSM: AppArmor: enabled
>
> Versions of packages urlwatch depends on:
> ii  python3  3.6.4-1
> ii  python3-appdirs  1.4.3-1
> ii  python3-keyring  10.6.0-1
> ii  python3-minidb   2.0.2-1
> ii  python3-pycodestyle  2.3.1-2
> ii  python3-requests 2.18.4-2
> ii  python3-yaml 3.12-1+b1
>
> Versions of packages urlwatch recommends:
> ii  lynx 2.8.9dev16-3
> pn  python-utidylib  
> pn  python-vobject   
>
> Versions of packages urlwatch suggests:
> pn  html2text  
>
> -- no debconf information
>

Bug#891877: synaptic: Please recommend (or depend on) libgtk3-perl

[Jeremy Bicha]

Package: synaptic
Version: 0.84.3
Severity: important

Test Case

1. From Debian GNOME Testing/Unstable or Ubuntu 18.04, make sure that
you have debconf 1.5.66 (or higher) installed. Your default display
manager should be gdm3. lightdm should not be installed.
2. Open Synaptic. Install lightdm

What happens
--
Synaptic appears to freeze on the Applying Changes screen at Preparing packages…

But if you click Details, you'll see that it's trying to ask a debconf
question which does work if you think of opening Details and answering
the question of which display manager should be default.

Suggested Fix
===
Synaptic recommends libgtk2-perl. That should be switched to libgtk3-perl.

Given the usability problem found in the test case and given how
popular it is for people to avoid installing recommends, I think it
would be helpful to bump the Recommends to a Depends here too to
prevent people from making things harder on themselves.

References
=
Switching from libgtk2-perl to libgtk3-perl is recommended at the bottom of
https://salsa.debian.org/pkg-debconf/debconf/commit/0250616b

Thanks,
Jeremy Bicha

Bug#714454: status, homepage update

[Thorsten Glaser]

Hi,

how’s the status?

The new homepage http://polyphone-soundfonts.com/en/
lists an 1.9 release.

bye,
//mirabilos
-- 
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-235
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg

*

**Besuchen Sie uns auf der EuroCIS!**
27. Februar bis 01. März 2018, Messe Düsseldorf / **Halle 10,** ** Stand
F15**
Leading Trade Fair for Retail Technology
[www.tarent.de/eurocis](http://www.tarent.de/eurocis)

Wir empfehlen unsere Vorträge

?Preisbeobachtung, Händlermonitoring, Plagiaterkennung: Ihre
Wettbewerbsvorteile?
am 27. Februar, 14:00 Uhr im EuroCIS Forum / Halle 10, Stand F04

?Internet of Things ? Der Handel im Wandel?
am 01. März, 11:30 Uhr im Omnichannel Forum / Halle 10, Stand A70

*

**Visit us at EuroCIS!** 27th February to 1st March, 2018, Messe
Düsseldorf
/ **Hall 10,** ** Booth F15**
Leading Trade Fair for Retail Technology
[www.tarent.de/eurocis](http://www.tarent.de/eurocis)

We recommend our presentations

?Your view on prices, retailers and plagiarism: Competitive advantages
with
monitoring apps?
on 27th February, 2 pm at EuroCIS Forum / Hall 10, Booth F04

?Internet of Things ? Retailing in a Changing World?
on 1st March, 11:30 am at Omnichannel Forum / Hall 10, Booth A70

*

Bug#890904: diffoscope does not show classes.dex diff

[Chris Lamb]

tags 890904 + pending
thanks

Thanks for the report and updating us on the links. I've fixed
this in Git, now pending upload:

  
https://anonscm.debian.org/git/reproducible/diffoscope.git/commit/?id=b692cbd610341532f3d9f69dcff0decde8cfcb9b


Best wishes,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-

Bug#845439: [Vmdebootstrap-devel] Bug#845439: [PATCH] Don???t enforce (U)EFI on arm64

[Domenico Andreoli]

On Thu, Mar 01, 2018 at 01:55:54PM +0200, Lars Wirzenius wrote:
> On Thu, 2018-03-01 at 12:39 +0100, Guido Günther wrote:
> > On Sun, Aug 20, 2017 at 11:02:13PM +0200, Petter Reinholdtsen wrote:
> > > Note, this is one of two vmdebootstrap issues blocking the creating
> > > of Debian Stretch based images for Raspberry Pi 3 using only packages
> > > in Debian, see https://wiki.debian.org/RaspberryPi3 >.
> > > 
> > > It would be great if it could be possible to create RPi images
> > > using only vmdebootstrap and a list of options. :)
> > 
> > Dear maintainers, any objections to an NMU?
> 
> Yes. Please don't. Please spend that effort switching away from
> vmdebootstrap.

ok, in favour of what else?


-- 
3B10 0CA1 8674 ACBA B4FE  FCD2 CE5B CF17 9960 DE13

Bug#891876: transition: poco

[Jochen Sprickerhof]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Hi release team,

I would like to transition poco to the new version. The changes where
rather small, so I don't expect any problems.

Cheers Jochen

Ben file:

title = "poco";
is_affected = .depends ~ 
/\b(libpococrypto50|libpocodata50|libpocodatamysql50|libpocodataodbc50|libpocodatasqlite50|libpocofoundation50|libpocojson50|libpocomongodb50|libpoconet50|libpoconetssl50|libpocoredis50|libpocoutil50|libpocoxml50|libpocozip50)\b/
 | .depends ~ 
/\b(libpococrypto51|libpocodata51|libpocodatamysql51|libpocodataodbc51|libpocodatasqlite51|libpocofoundation51|libpocojson51|libpocomongodb51|libpoconet51|libpoconetssl51|libpocoredis51|libpocoutil51|libpocoxml51|libpocozip51)\b/;
is_good = .depends ~ 
/\b(libpococrypto51|libpocodata51|libpocodatamysql51|libpocodataodbc51|libpocodatasqlite51|libpocofoundation51|libpocojson51|libpocomongodb51|libpoconet51|libpoconetssl51|libpocoredis51|libpocoutil51|libpocoxml51|libpocozip51)\b/;
is_bad = .depends ~ 
/\b(libpococrypto50|libpocodata50|libpocodatamysql50|libpocodataodbc50|libpocodatasqlite50|libpocofoundation50|libpocojson50|libpocomongodb50|libpoconet50|libpoconetssl50|libpocoredis50|libpocoutil50|libpocoxml50|libpocozip50)\b/;


-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: armhf (armv7l)

Kernel: Linux 4.14.0-3-armmp (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), 
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Bug#891773: [PATCH v3] ieee1275: Fix crash in of_path_of_nvme when of_path is empty

[John Paul Adrian Glaubitz]

Hi!

As suggested by James Clarke earlier on this mailing list today, I
have modified of_path_of_nvme such that it behaves the same way as
of_path_of_scsi and just returns NULL when the call to find_obppath
returns NULL.

This makes much more sense than what my previous patch did as we
don't want of_path_of_nvme to return anything but NULL when not
run on a system not based on Open Firmware.

Thanks,
Adrian

Bug#891773: [PATCH] ieee1275: Fix crash in of_path_of_nvme when of_path is empty

[John Paul Adrian Glaubitz]

The of_path_of_nvme function (commit 2391d57, ieee1275: add nvme
support within ofpath) introduced a functional regression:

On systems which are not based on Open Firmware but have at
least one NVME device, find_obppath will return NULL and thus
trying to append the disk name to of_path will result in a
crash.

The proper behavior of of_path_of_nvme is, however, to just
return NULL in such cases, like other users of find_obppath,
such as of_path_of_scsi.

Signed-off-by: John Paul Adrian Glaubitz 
---
 grub-core/osdep/linux/ofpath.c | 5 -
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/grub-core/osdep/linux/ofpath.c b/grub-core/osdep/linux/ofpath.c
index 1c30e7233..61806212e 100644
--- a/grub-core/osdep/linux/ofpath.c
+++ b/grub-core/osdep/linux/ofpath.c
@@ -389,8 +389,11 @@ of_path_of_nvme(const char *sys_devname 
__attribute__((unused)),
 }
 
   of_path = find_obppath (sysfs_path);
+
+  if (of_path)
+strcat (of_path, disk);
+
   free (sysfs_path);
-  strcat (of_path, disk);
   return of_path;
 }
 
-- 
2.16.2

Bug#889791: virtualbox: PulseAudio-related segmentation fault from PowerShell beeps

[Kevin Locke]

found 889791 5.2.8-dfsg-1
forwarded 889791 https://www.virtualbox.org/ticket/17580
thanks

On Thu, 2018-03-01 at 21:51 +, Gianfranco Costamagna wrote:
>> With 5.2.8 I was unable to reproduce the issue with the "Intel HD
>> Audio" audio controller, but it still occurred with the "ICH AC97"
>> audio controller.  Backtrace with 5.2.8-dfsg-1:
> 
> please report it upstream, and link the ticket here!
> https://www.virtualbox.org/wiki/Bugtracker

Sure thing.  I've reported it as https://www.virtualbox.org/ticket/17580
I'll let you know how it goes.

Thanks!
Kevin

P.S.  Thanks for the very fast fix for bug #891860!

Bug#888389: Bug#888391: lynx: RUBOUT deletes character in FRONT of the cursor instead of BEHIND

[Andreas]

On Thu, 1 Mar 2018 10:20:28 -0500 (EST), Thomas Dickey wrote:


| > "default" happens to be the default value, but it is a setting that is 
| > saved in .lynxrc, so once changed, it persists. 
|
| I agree. But after a fresh install the Bash-like-Bindings are not default, 
| are they? If not, in my opinion that should be changed. 
|
| That would also close this bug report (well design flaw in my opinion). No 
| re-write of vim's code necessary at all in this case. 

a fresh install will never modify your "~/.lynxrc" file, since it is not 
part of the package. 

(reinstalling vim doesn't alter your .vimrc or .viminfo files, either) 


I know. 

Let's assume a *fresh* *installation* of vi(m), may be as part of a fresh 
Linux installation. There will be no .vimrc or .viminfo I understand. But 
it should write a /etc/lynx/lynx.cfg . I suppose the maintainer could 
change this file by adding 


lineedit_mode=Bash-like Bindings

there. Thus every fresh install would create the behavour of deleteing the 
character after the cursor when hitting DEL. If a user doesn't like this, 
for what ever reason, he could change this in the ~/.lynxrc .


In the end, only changing the /etc/lynx/lynx.cfg would take care of this 
(IMO) design flaw.

--
Andreas

Random thoughts
https://news-commentaries.blogspot.com/

Bug#891875: ITP: pluto-find-orb -- Orbit determination from observations

[Steffen Moeller]

Package: wnpp
Severity: wishlist
Owner: Steffen Moeller 

* Package name: pluto-find-orb
  Upstream Author : Bill J. Gray
* URL : https://www.projectpluto.com/find_orb.htm
* License : GPL
  Programming Lang: C++
  Description : Orbit determination from observations

The package is team maintained at 
https://salsa.debian.org/debian-astro-team/pluto-find-orb.

Bug#891195: [Pkg-clamav-devel] Bug#891195: Please switch to pcre2

[Sebastian Andrzej Siewior]

On 2018-02-23 11:30:34 [+0100], Laurent Bigonville wrote:
> Hi,
> 
> It seems that clamav support both (old) pcre and (new) pcre2
> 
> Any reasons why clamav is still depending on this old version? Shouldn't
> it be switched to the new one?

I wanted to reply earler but didn't make it…
So clamav is using pcre and I wasn't aware of pcre2 until now. So if the
plan is a transition and pcre2 is working like pcre but is newer then
yes, I have no problem with switching to it.
I will try to test things first :)

> Kind regards,
> 
> Laurent Bigonville

Sebastian

Bug#891750: fixed in comet-ms 2017014-1

[Gianfranco Costamagna]

control: reopen -1
control: notfixed -1 2017014-1

https://launchpad.net/ubuntu/+source/comet-ms/2017014-1/+build/14412235
failing again...

line
g++ -g -O3 -Wall -Wextra -Wno-char-subscripts -D_LARGEFILE_SOURCE 
-D_FILE_OFFSET_BITS=64 -D__LINUX__ -I/usr/include/libmstoolkit -lpthread 
-lmstoolkitlite Comet.o Threading.o CometInterfaces.o CometSearch.o 
CometPreprocess.o CometPostAnalysis.o CometMassSpecUtils.o CometWriteOut.o 
CometWriteSqt.o CometWritePepXML.o CometWritePercolator.o CometWriteTxt.o 
CometSearchManager.o   -o comet-ms


should become 
g++ -g -O3 -Wall -Wextra -Wno-char-subscripts -D_LARGEFILE_SOURCE 
-D_FILE_OFFSET_BITS=64 -D__LINUX__ -I/usr/include/libmstoolkit Comet.o 
Threading.o CometInterfaces.o CometSearch.o CometPreprocess.o 
CometPostAnalysis.o CometMassSpecUtils.o CometWriteOut.o CometWriteSqt.o 
CometWritePepXML.o CometWritePercolator.o CometWriteTxt.o CometSearchManager.o 
-lpthread -lmstoolkitlite  -o comet-ms

probably you should drop debian/Makefile and debian/rules hack?
cp -vf debian/Makefile debian/build
cp -vf Comet.cpp debian/build
cp -vf CometSearch/*.[ch]* debian/build

thanks!

G.

> 
> We believe that the bug you reported is fixed in the latest version of
> comet-ms, which is due to be installed in the Debian FTP archive.
> 
> A summary of the changes between this version and the previous one is
> attached.
> 
> Thank you for reporting the bug, which will now be closed.  If you
> have further comments please address them to 891...@bugs.debian.org,
> and the maintainer will reopen the bug report if appropriate.
> 
> Debian distribution maintenance software
> pp.
> Filippo Rusconi  (supplier of updated comet-ms package)
> 
> (This message was generated automatically at their request; if you
> believe that there is a problem with it please contact the archive
> administrators by mailing ftpmas...@ftp-master.debian.org)
> 
> 
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> Format: 1.8
> Date: Thu, 01 Mar 2018 11:37:59 +0100
> Source: comet-ms
> Binary: comet-ms
> Architecture: source amd64
> Version: 2017014-1
> Distribution: unstable
> Urgency: medium
> Maintainer: The Debichem Group 
> Changed-By: Filippo Rusconi 
> Description:
>  comet-ms   - Tandem mass spectrometry (MS/MS) search engine
> Closes: 891750
> Changes:
>  comet-ms (2017014-1) unstable; urgency=medium
>  .
>* New upstream version.
>  .
>* Updated the patch that modifies the two Makefile_s such that
>  libmstoolkitlite is used from the Debian package. Tested the comet-ms
>  binary ok.
>  .
>* Fix problem with library linking in the Makefile. Thanks to Gianfranco
>  Costamagna  for reporting that bug
>  (Closes: #891750).
> Checksums-Sha1:
>  927ad9069a6a8ca04f8fd4ad8ebba635e45b6ee0 2053 comet-ms_2017014-1.dsc
>  2d1aceb99b7cf644b583867afeba402beb96a581 1168205 comet-ms_2017014.orig.tar.gz
>  8d8889af74b291821bce8a4b522c8b8d864d3159 5864 
> comet-ms_2017014-1.debian.tar.xz
>  b3156da28ee1546dbafee5e1c69133f8744bf0a4 1008804 
> comet-ms-dbgsym_2017014-1_amd64.deb
>  80b29d993525b3a4f49c863bf4c743fc1a1b014e 6200 
> comet-ms_2017014-1_amd64.buildinfo
>  15cd09e7a6edb17e11cecc18398a0e072b77e6e5 841816 comet-ms_2017014-1_amd64.deb
> Checksums-Sha256:
>  4c40b11f1fd62c91cc84a8f38b10ecc9d2b880b8d58e5aab3e1c3ab2c9070a8a 2053 
> comet-ms_2017014-1.dsc
>  214a0bc53358ebd07a473ab98e9bcfb47903dc756faa006aaf8c63a29e548428 1168205 
> comet-ms_2017014.orig.tar.gz



signature.asc
Description: OpenPGP digital signature

Bug#891867: diffoscope: improve .changes diffs

[Chris Lamb]

Helmut Grohne wrote:

> > Why not .strip() them all instead, out of interest?
> 
> Feel free to do so. I just felt that changing the type from str to
> List(str) would be non-trivial

(.strip() has a prototype of "str" → "str" so I am confused about all these
references to "[str]".)


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-

Bug#891872: transition: curl

[Alessandro Ghedini]

On Thu, Mar 01, 2018 at 09:31:20PM +, Alessandro Ghedini wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: transition
> 
> Hello,
> 
> I'd like to request a transition for curl in order to unblock the migration
> to OpenSSL 1.1 (#871056). This is necessary due to the fact that the curl ABI
> exposes a structure inherited from libssl itself, which was changed in the 1.1
> update (see #844018 for more information).
> 
> It is for the most part a clean ABI bump, however a few packages that build
> depend on both libcurl and libssl will need source uploads so they can also
> migrate to OpenSSL 1.1. The following packages were identified as part of the
> discussion in #858398:
> 
> * hhvm: #858927 (sid-only)
> * lastpass-cli: #858991 
> * libapache2-mod-auth-cas: 858992
> * netsurf: #859230
> * xmltooling: #859831
> * zurl: #859841

To be clear, these are the packages that are affected by the ABI change, they
don't just build depend on both libcurl and libssl.

Cheers


signature.asc
Description: PGP signature

Bug#889791: virtualbox: PulseAudio-related segmentation fault from PowerShell beeps

[Gianfranco Costamagna]

Hello,


>Sure.  I assume you meant 5.2.8.  Let me know if you really want me to
>find a copy of 5.1.8 to test.


nah, 5.2.8!
>With 5.2.8 I was unable to reproduce the issue with the "Intel HD
>Audio" audio controller, but it still occurred with the "ICH AC97"
>audio controller.  Backtrace with 5.2.8-dfsg-1:


please report it upstream, and link the ticket here!
https://www.virtualbox.org/wiki/Bugtracker

thanks!

G.

Bug#887583: [Pkg-javascript-devel] Bug#887583: Bug#887583: libjs-fetch FTBFS with mocha 4.0.1-3

[Adrian Bunk]

On Mon, Jan 22, 2018 at 12:20:35PM +0530, Pirate Praveen wrote:
> On ഞായര്‍ 21 ജനുവരി 2018 11:08 വൈകു, Pirate Praveen wrote:
> > My logs were from before mocha 4 is uploaded to unstable. Now we need to 
> > fix the tests for mocha 4 (this bug), as well as chai 4 (the other bug I 
> > reported).
> > 
> 
> mocha.{css,js,min.js} files were missing from mocha binary package (they
> were only in libjs-mocha). But even after adding them I see other
> errors. mocha changes are pushed to alioth.
>...

The new mocha seems to have problems, and should be fixed.

Many other packages are affected by the #887586 build hang.

I have seen another dozen node-* packages that started to FTBFS 
recently, some/all/none of them might be related to the new mocha.
libjs-fetch was just one of the first packages where I saw problems
but I stopped reporting bugs as long as even #887586 is not resolved
to avoid creating many duplicates.

cu
Adrian

-- 

   "Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
   "Only a promise," Lao Er said.
   Pearl S. Buck - Dragon Seed

Bug#891867: diffoscope: improve .changes diffs

[Chris Lamb]

Mattia Rizzolo wrote:

> > > +other.deb822.get_as_string('Checksums-Sha256') + "\n",
> > 
> > Why not .strip() them all instead, out of interest?
> 
> Because deb822.get_as_string() returns a single string containing all of
> 'Checksums-Sha256' (in this case) with the \n embedded in that string.

Ah, I see:

  '\n 75308f81588e44097465180b3572e3469d70c34fccd3ba14978d8a76d4036c7f 688 
source_1.dsc\n ce8b1507e6cc936c6252 […]

[…]

> So to .str() them all [..]

Assuming you mean .strip() ..  Okay, why don't we .rstrip()? That would at
least normalise the suffix without screwing up the suffix? I'm probably
missing something :)


Best wishes,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-

Bug#891874: ITP: pluto-sat-code -- prediction of orbits of earth satellites

[Steffen Moeller]

Package: wnpp
Severity: wishlist
Owner: Steffen Moeller 

* Package name: pluto-sat-code
  Upstream Author : Bill J. Gray
* URL : https://github.com/Bill-Gray/sat_code
* License : GPL
  Programming Lang: C++
  Description : prediction of orbits of earth satellites

The package is team maintained at 
https://salsa.debian.org/debian-astro-team/pluto-sat-code.

Bug#891867: diffoscope: improve .changes diffs

[Helmut Grohne]

Control: tags -1 - patch

On Thu, Mar 01, 2018 at 09:00:27PM +, Chris Lamb wrote:
> Why not .strip() them all instead, out of interest?

Feel free to do so. I just felt that changing the type from str to
List(str) would be non-trivial and I couldn't immediately figure out
whether that works as intended. It would have the additional benefit of
also removing the indentation. When removing the first line you get the
very same problem with indentation rather than newline. Diff these
against one another:

"line1\n line2\n line3"
"line1\n line2"
"line2\n line3"

So yeah, we need a better solution here.

Helmut

Bug#858398: Proposed (lib)curl switch to openssl 1.1

[Alessandro Ghedini]

On Sat, Feb 24, 2018 at 12:50:41PM +, Alessandro Ghedini wrote:
> On Wed, Feb 21, 2018 at 11:14:24AM -0800, Steve Langasek wrote:
> > Hi again,
> > 
> > On Tue, Feb 20, 2018 at 06:16:34PM -0800, Steve Langasek wrote:
> > > So, despite Julien's valid objection that core library conflicts cause
> > > dist-upgrades to be more brittle, I think the right answer here is:
> > 
> > > - keep all sonames as-is.
> > > - rename libcurl3 to libcurl4.
> > > - leave the package names of the other variants as-is.
> > > - *if* libcurl-gnutls.so.4 and libcurl-nss.so.4 sonames are known to exist
> > >   elsewhere outside the Debian ecosystem, fix the symbol versions for
> > >   libcurl3-gnutls and libcurl3-nss to use symbol aliases, so that 
> > > CURL_FOO_4
> > >   is used as the preferred name and CURL_FOO_3 is for compatibility only.
> > >   (This is only worth doing if this increases binary compatibility;
> > >   otherwise it's better to maintain bidirectional binary compatibility for
> > >   Debian-built binaries.)
> > > - change the symbol versions for libcurl4 to CURL_OPENSSL_4.
> > 
> > > I would be willing to prepare a patch that implements this.
> > 
> > I've done this now and raised an MP:
> > 
> >   https://salsa.debian.org/debian/curl/merge_requests/3
> > 
> > (I'm assuming there is no point in CURL_FOO_4 symbol version for
> > libcurl-gnutls and libcurl-nss, because these sonames come from a
> > Debian-specific patch and therefore there's no upstream binary compatibility
> > to be concerned about.)
> > 
> > Thoughts on this?
> > 
> > In terms of ABI changes, this appears to be a strict subset of what
> > Alessandro had proposed and would be binary-compatible for libcurl.so.4; so
> > at minimum, we will probably adopt this change in Ubuntu and proceed with
> > the transition ASAP there, even if Debian later decides to change the ABI
> > for gnutls and nss variants also.
> 
> I'm fine with going ahead with just the libcurl3 -> libcurl4 transition for
> now.
> 
> Julien: is this something that the Release Team would be ok with? As Steve
> pinted out before, libcurl3 has significantly lower usage than lubcurl3-gnutls
> so impact should be somewhat more limited.
> 
> I'd like to go ahead and upload Steve's patch to experimental (which means NEW
> queue) soon, and then request the transition.

Quick update, with a slight delay I went ahead and uploaded Steve's changes to
experimental as curl 7.58.0-3, which got accepted in record time, so I also
requested the transition https://bugs.debian.org/891872

Thanks a lot to everyone involved for the help with this.

Cheers


signature.asc
Description: PGP signature

Bug#891873: libidn2: help bootstrapping by reducing Build-Depends

[Helmut Grohne]

Source: libidn2
Version: 2.0.4-1.1
Tags: patch
User: helm...@debian.org
Usertags: rebootstrap

Hi libidn2 maintainers,

I'd like to ask you for another favour. Can we remove the whole gtkdoc
stack from Build-Depends? e.g. dblatex is presently unsatisfiable for
cross and it won't be any easier for native bootstraps.

The good thing is that we can do entirely without build profiles. Just
move the whole caboodle to Build-Depends-Indep! Of course we must be
careful then. We must configure without --enable-gtk-doc and notably, we
must not run gtkdocize. The attached patch does all of that and thus
speeds up arch-only builds. Please consider applying it.

Helmut
diff --minimal -Nru libidn2-2.0.4/debian/changelog 
libidn2-2.0.4/debian/changelog
--- libidn2-2.0.4/debian/changelog  2017-11-23 12:11:41.0 +0100
+++ libidn2-2.0.4/debian/changelog  2018-03-01 22:12:01.0 +0100
@@ -1,3 +1,10 @@
+libidn2 (2.0.4-1.2) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Move some Build-Depends to Build-Depends-Indep. (Closes: #-1)
+
+ -- Helmut Grohne   Thu, 01 Mar 2018 22:12:01 +0100
+
 libidn2 (2.0.4-1.1) unstable; urgency=medium
 
   * Non-maintainer upload.
diff --minimal -Nru libidn2-2.0.4/debian/control libidn2-2.0.4/debian/control
--- libidn2-2.0.4/debian/control2017-11-23 12:11:41.0 +0100
+++ libidn2-2.0.4/debian/control2018-03-01 22:08:40.0 +0100
@@ -10,6 +10,7 @@
libunistring-dev,
pkg-config,
ruby-ronn,
+Build-Depends-Indep:
texinfo,
texlive,
gtk-doc-tools,
diff --minimal -Nru libidn2-2.0.4/debian/rules libidn2-2.0.4/debian/rules
--- libidn2-2.0.4/debian/rules  2017-11-23 12:11:41.0 +0100
+++ libidn2-2.0.4/debian/rules  2018-03-01 22:11:58.0 +0100
@@ -1,21 +1,31 @@
 #! /usr/bin/make -f
 
 export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+DOPACKAGES = $(shell dh_listpackages)
 
 %:
dh $@ --parallel --with autoreconf --fail-missing 
-O--dbgsym-migration="libidn2-0-dbg (<< 2.0.2-1~)" -X.la
 
+ifneq ($(filter libidn2-doc,$(DOPACKAGES)),)
+# run gtkdocize in addition to autoreconf
 override_dh_autoreconf:
dh_autoreconf debian/autogen.sh
+endif
+
+CONFIGURE_FLAGS = \
+   --enable-ld-version-script \
+   --disable-rpath \
+   --with-packager=Debian \
+   --with-packager-bug-reports=https://bugs.debian.org/ \
+   --with-packager-version="$(DEB_VERSION)"
+ifneq ($(filter libidn2-doc,$(DOPACKAGES)),)
+CONFIGURE_FLAGS += --enable-gtk-doc --enable-gtk-doc-pdf
+else
+CONFIGURE_FLAGS += --disable-gtk-doc --disable-gtk-doc-pdf
+endif
 
 override_dh_auto_configure:
-   dh_auto_configure -- \
-   --enable-ld-version-script \
-   --disable-rpath \
-   --enable-gtk-doc --enable-gtk-doc-pdf \
-   --with-packager=Debian \
-   --with-packager-bug-reports=https://bugs.debian.org/ \
-   --with-packager-version="$(DEB_VERSION)"
+   dh_auto_configure -- $(CONFIGURE_FLAGS)
 
 # Texinfo PDF manual is not built by 'make' but removed by 'make clean'.
 override_dh_auto_build:

Bug#887760: graywolf: diff for NMU version 0.1.4+20170307gite1bf319-2.1

[Adrian Bunk]

Control: tags 887760 + pending

Dear maintainer,

I've prepared an NMU for graywolf (versioned as 
0.1.4+20170307gite1bf319-2.1) and uploaded it to DELAYED/5.
Please feel free to tell me if I should cancel it.

cu
Adrian

-- 

   "Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
   "Only a promise," Lao Er said.
   Pearl S. Buck - Dragon Seed

diff -Nru graywolf-0.1.4+20170307gite1bf319/debian/changelog graywolf-0.1.4+20170307gite1bf319/debian/changelog
--- graywolf-0.1.4+20170307gite1bf319/debian/changelog	2017-03-08 10:45:52.0 +0200
+++ graywolf-0.1.4+20170307gite1bf319/debian/changelog	2018-03-01 23:32:40.0 +0200
@@ -1,3 +1,11 @@
+graywolf (0.1.4+20170307gite1bf319-2.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Add upstream fix for FTBFS with glibc 2.26,
+thanks to Juhani Numminen. (Closes: #887760)
+
+ -- Adrian Bunk   Thu, 01 Mar 2018 23:32:40 +0200
+
 graywolf (0.1.4+20170307gite1bf319-2) unstable; urgency=medium
 
   * debian/copyright:
diff -Nru graywolf-0.1.4+20170307gite1bf319/debian/patches/0001-cfree-has-been-removed-from-glibc-2.26.patch graywolf-0.1.4+20170307gite1bf319/debian/patches/0001-cfree-has-been-removed-from-glibc-2.26.patch
--- graywolf-0.1.4+20170307gite1bf319/debian/patches/0001-cfree-has-been-removed-from-glibc-2.26.patch	1970-01-01 02:00:00.0 +0200
+++ graywolf-0.1.4+20170307gite1bf319/debian/patches/0001-cfree-has-been-removed-from-glibc-2.26.patch	2018-03-01 23:08:31.0 +0200
@@ -0,0 +1,25 @@
+From 23c6f4adb38f3314ef55139929e4295aac4c72b3 Mon Sep 17 00:00:00 2001
+From: KokaKiwi 
+Date: Thu, 16 Nov 2017 17:48:06 +0100
+Subject: cfree has been removed from glibc 2.26
+
+---
+ src/Ylib/okmalloc.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/Ylib/okmalloc.c b/src/Ylib/okmalloc.c
+index 10f7a33..8a5ef68 100644
+--- a/src/Ylib/okmalloc.c
 b/src/Ylib/okmalloc.c
+@@ -901,7 +901,7 @@ VOIDPTR ptr;
+ VOID Ysafe_cfree(ptr)
+ VOIDPTR ptr;
+ {
+-cfree(ptr);
++free(ptr);
+ return;
+ }
+ 
+-- 
+2.11.0
+
diff -Nru graywolf-0.1.4+20170307gite1bf319/debian/patches/series graywolf-0.1.4+20170307gite1bf319/debian/patches/series
--- graywolf-0.1.4+20170307gite1bf319/debian/patches/series	2017-03-08 10:45:52.0 +0200
+++ graywolf-0.1.4+20170307gite1bf319/debian/patches/series	2018-03-01 23:32:40.0 +0200
@@ -2,3 +2,4 @@
 02_dont_create_link.patch
 04_install_directory_multiarch.patch
 0004-Fixes-some-spelling-errors.patch
+0001-cfree-has-been-removed-from-glibc-2.26.patch

Bug#891872: transition: curl

[Alessandro Ghedini]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Hello,

I'd like to request a transition for curl in order to unblock the migration
to OpenSSL 1.1 (#871056). This is necessary due to the fact that the curl ABI
exposes a structure inherited from libssl itself, which was changed in the 1.1
update (see #844018 for more information).

It is for the most part a clean ABI bump, however a few packages that build
depend on both libcurl and libssl will need source uploads so they can also
migrate to OpenSSL 1.1. The following packages were identified as part of the
discussion in #858398:

* hhvm: #858927 (sid-only)
* lastpass-cli: #858991 
* libapache2-mod-auth-cas: 858992
* netsurf: #859230
* xmltooling: #859831
* zurl: #859841

The updated curl package (7.58.0-3) has been uploaded and accepted in
experimental. The full changeset (from Steve Langasek) can be found at:
https://salsa.debian.org/debian/curl/merge_requests/3/diffs

The auto-generated tracker (which looks correct) is:
https://release.debian.org/transitions/html/auto-curl.html

Let me know if you need more information.

Thanks

-- System Information:
Debian Release: buster/sid
  APT prefers buildd-unstable
  APT policy: (500, 'buildd-unstable'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.15.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)


signature.asc
Description: PGP signature

Bug#891871: simbody: Update simbody to version 3.6.0

[Jose Luis Rivero]

Source: simbody
Version: Update simbody to version 3.6.0
Severity: wishlist

The new 3.6 version of Simbody has been released. It would be great to
have it available in Debian

Bug#891867: diffoscope: improve .changes diffs

[Mattia Rizzolo]

On Thu, Mar 01, 2018 at 09:00:27PM +, Chris Lamb wrote:
> >  differences.append(Difference.from_text(
> > -self.deb822.get_as_string('Checksums-Sha256'),
> > -other.deb822.get_as_string('Checksums-Sha256'),
> > +self.deb822.get_as_string('Checksums-Sha256') + "\n",
> > +other.deb822.get_as_string('Checksums-Sha256') + "\n",
> 
> Why not .strip() them all instead, out of interest?

Because deb822.get_as_string() returns a single string containing all of
'Checksums-Sha256' (in this case) with the \n embedded in that string.
So to .str() them all you'd need to instead do a .splitlines() of
deb822.get_as_string() and then add something clever to Difference to
handle the array instead of a text.

I am not a fan of "randomly" adding \n either, but for sure it is the
simplest way to make the diff behaviour here saner.

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature

Bug#891870: kgb: a filter on status would be useful for pipeline events

[Enrico Zini]

Package: kgb
Severity: wishlist

Hello,

when activating KGB for pipeline events, this is what happens on IRC
when CI is configured for a project:

21:45 -KGB-2:#debian-newmaint- Jonathan McDowell (via Jonathan McDowell) master 
e123720 nm.debian.org 
  process/ops.py * Log when a removal process is switched to an 
emeritus one * 
  
https://salsa.debian.org/nm-team/nm.debian.org/commit/e1237206a1c20eb03e2ef8df54aaf53e8844661f
21:45 -KGB-2:#debian-newmaint- Jonathan McDowell builds Debian New Member 
Process / nm.debian.org * Build #8774 
  (tests) stage: test, status: created
21:45 -KGB-2:#debian-newmaint- Jonathan McDowell nm.debian.org 2583 * Pipeline 
#2583 finished in no time. Status: 
  pending
21:45 -KGB-2:#debian-newmaint- Jonathan McDowell builds Debian New Member 
Process / nm.debian.org * Build #8774 
  (tests) stage: test, status: running. Duration: 3 seconds
21:45 -KGB-2:#debian-newmaint- Jonathan McDowell nm.debian.org 2583 * Pipeline 
#2583 finished in no time. Status: 
  running
21:49 -KGB-2:#debian-newmaint- Jonathan McDowell nm.debian.org 2583 * Pipeline 
#2583 finished in no time. Status: 
  success
21:49 -KGB-2:#debian-newmaint- Jonathan McDowell builds Debian New Member 
Process / nm.debian.org * Build #8774 
  (tests) stage: test, status: success. Duration: no time

This is generating quite a bit of traffic for each push, and ideally,
only the success/failed status of the pipeline is interesting in this
case.

Would it be possible to have an option in the KGB URL to specify a
whitelist of pipeline status values to be sent?


Enrico


-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.14.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_IE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages kgb depends on:
ii  libc6   2.26-6
ii  libgcc1 1:8-20180218-1
ii  libstdc++6  8-20180218-1

kgb recommends no packages.

kgb suggests no packages.

Bug#890878: RFS: company-irony

[Nicholas D Steeves]

On Thu, Mar 01, 2018 at 11:15:45AM +0100, Alberto Luaces wrote:
> Nicholas D Steeves writes:
> 
> [...]
> 
> >
> Thanks for the tips!

You're welcome!

> > debian/copyright:
[...]
> 
> I went the route of adding the email address, but of course it can be
> changed at any time.

Looks good.

> > debian/gbp.conf:
[...]
> Ok, I pushed a "upstream" branch and all of its tags, so gbp should not
> choke this time. 

Looks good.

> > debian/watch:
[...]
> I think I managed to get one working, from reading other packages and
> the uscan manpage.

Looks good.  For future reference, you can test a watch file with:
uscan -v --no-download

This package also has some lint that needs to be taken care of.  It's
a good idea to run lintian after building a package, and you should
configure whatever builder you're using to do this automatically.

W: company-irony source: out-of-date-standards-version 4.1.1 (current is 4.1.3)
I: company-irony source: testsuite-autopkgtest-missing
W: elpa-company-irony: new-package-should-close-itp-bug
I: elpa-company-irony: extended-description-is-probably-too-short

Out-of-date-standards-version is a Warning that should be addressed,
and additionally must be addressed for NEW packages.  Periodically,
when you update your package you'll see this pop up.  Once you've done
the work to make sure a package is policy-compliant you can use the
following checklist to keep it up to date:
https://www.debian.org/doc/packaging-manuals/upgrading-checklist.txt

On this topic, in the next phase of review I'll check if your package
installs and functions properly, and also if it is compliant with
Policy 4.1.3.
https://www.debian.org/doc/debian-policy/

New-package-should-close-itp-bug Warning will need to be addressed
before someone will sponsor the upload.

Extended-description-is-probably-too-short is Informational, but in
this case I think it should be addressed.  At a minimum add "for the
C, C++ and Objective-C languages" (README.md notes this), and please
also read these sections 3.4, 3.4.1, and 3.4.2.  It's worth developing
a strong habit towards this as early as possible, and I will confess
that I need to work on better descriptions for some of my packages. ;-)
https://www.debian.org/doc/debian-policy/#the-description-of-a-package


Have fun!
Nicholas


signature.asc
Description: PGP signature

Bug#891867: diffoscope: improve .changes diffs

[Chris Lamb]

Hi Helmut!

Thanks for the report with patch :)

> --- a/diffoscope/comparators/debian.py
> +++ b/diffoscope/comparators/debian.py
> @@ -142,16 +142,16 @@
>  # Compare Files as string
>  if self.deb822.get('Files'):
>  differences.append(Difference.from_text(
> -self.deb822.get_as_string('Files'),
> -other.deb822.get_as_string('Files'),
> +self.deb822.get_as_string('Files') + "\n",
> +other.deb822.get_as_string('Files') + "\n",
>  self.path,
>  other.path,
>  source='Files',
>  ))
>  else:
>  differences.append(Difference.from_text(
> -self.deb822.get_as_string('Checksums-Sha256'),
> -other.deb822.get_as_string('Checksums-Sha256'),
> +self.deb822.get_as_string('Checksums-Sha256') + "\n",
> +other.deb822.get_as_string('Checksums-Sha256') + "\n",

Why not .strip() them all instead, out of interest?

> Hi awesome reproducible team!

Aw, you know how to flatter us!


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-

Bug#891869: krb5: CVE-2018-5729 CVE-2018-5730

[Salvatore Bonaccorso]

Source: krb5
Version: 1.7dfsg~beta1-1
Severity: important
Tags: patch security upstream

Hi,

the following vulnerabilities were published for krb5.

CVE-2018-5729[0]:
|In MIT krb5 1.6 or later, an authenticated kadmin user with permission
|to add principals to an LDAP Kerberos database can cause a null
|dereference in kadmind, or circumvent a DN container check, by
|supplying tagged data intended to be internal to the database module.
|Thanks to Sharwan Ram and Pooja Anil for discovering the potential
|null dereference.

CVE-2018-5730[1]:
|In MIT krb5 1.6 or later, an authenticated kadmin user with permission
|to add principals to an LDAP Kerberos database can circumvent a DN
|containership check by supplying both a "linkdn" and "containerdn"
|database argument, or by supplying a DN string which is a left
|extension of a container DN string but is not hierarchically within
|the container DN.

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see (but not much, most information is only in
the upstream commit):

[0] https://security-tracker.debian.org/tracker/CVE-2018-5729
[1] https://security-tracker.debian.org/tracker/CVE-2018-5730

Regards,
Salvatore

Bug#891868: cracklib2: move from DEB_STAGE to DEB_BUILD_PROFILES

[Helmut Grohne]

Source: cracklib2
Version: 2.9.2-5
Severity: wishlist
Tags: patch
User: helm...@debian.org
Usertags: rebootstrap

Hi Jan,

cracklib2 still uses the rather old DEB_STAGE method for supporting
architecture bootstraps without an early python. Usage of DEB_STAGE has
a number limitations and DEB_BUILD_PROFILES are now a relatively mature
replacement. In particular the new technique extends the metadata to
allow profile-dependent dependencies, expressing which packages will be
built and combining multiple profiles.

Thus the attached patch moves cracklib2 over to using the nopython
profile. It retains backwards-compatibility with DEB_STAGE, but I have
no clue how long we should keep that. I won't mind if you drop support
for DEB_STAGE immediately in favour of DEB_BUILD_PROFILES.

While at it, I took the liberty to add support for
DEB_BUILD_OPTIONS=nocheck and for allowing pseudo-cross builds (where
you can run host tools).

There is not much urgency attached to this change. DEB_STAGE works. It
would be nice to get this change into buster though.

Helmut
diff --minimal -Nru cracklib2-2.9.2/debian/changelog 
cracklib2-2.9.2/debian/changelog
--- cracklib2-2.9.2/debian/changelog2017-05-27 11:41:18.0 +0200
+++ cracklib2-2.9.2/debian/changelog2018-03-01 21:00:31.0 +0100
@@ -1,3 +1,10 @@
+cracklib2 (2.9.2-5.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Support nopython build profile. (Closes: #-1)
+
+ -- Helmut Grohne   Thu, 01 Mar 2018 21:00:31 +0100
+
 cracklib2 (2.9.2-5) unstable; urgency=medium
 
   * Add Breaks: cracklib-runtime (<< 2.9.2-4) to libcrack2 to configure
diff --minimal -Nru cracklib2-2.9.2/debian/control 
cracklib2-2.9.2/debian/control
--- cracklib2-2.9.2/debian/control  2017-05-27 11:06:18.0 +0200
+++ cracklib2-2.9.2/debian/control  2018-03-01 20:52:15.0 +0100
@@ -14,10 +14,10 @@
docbook-xml,
dpkg-dev (>= 1.16.1~),
libtool,
-   python-all-dev (>= 2.6.6-3~),
-   python-setuptools,
-   python3-all-dev (>= 3.1.3-2~),
-   python3-setuptools
+   python-all-dev (>= 2.6.6-3~) ,
+   python-setuptools ,
+   python3-all-dev (>= 3.1.3-2~) ,
+   python3-setuptools 
 Homepage: http://sourceforge.net/projects/cracklib
 Vcs-Git: https://anonscm.debian.org/git/pkg-cracklib/pkg-cracklib.git
 Vcs-Browser: https://anonscm.debian.org/gitweb/?p=pkg-cracklib/pkg-cracklib.git
@@ -90,6 +90,7 @@
  ${shlibs:Depends}
 Provides: ${python:Provides}
 Conflicts: python-crack
+Build-Profiles: 
 Description: Python bindings for password checker library cracklib2
  This package provides Python bindings for cracklib. It contains a
  pythonic interface to cracklib's functions and some Python
@@ -108,6 +109,7 @@
  ${python3:Depends},
  ${shlibs:Depends}
 Provides: ${python3:Provides}
+Build-Profiles: 
 Description: Python3 bindings for password checker library cracklib2
  This package provides Python bindings for cracklib. It contains a
  pythonic interface to cracklib's functions and some Python
diff --minimal -Nru cracklib2-2.9.2/debian/rules cracklib2-2.9.2/debian/rules
--- cracklib2-2.9.2/debian/rules2016-08-25 17:22:00.0 +0200
+++ cracklib2-2.9.2/debian/rules2018-03-01 21:00:29.0 +0100
@@ -10,14 +10,17 @@
 DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
 DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
 
-ifneq ($(DEB_STAGE),stage1)
+# backwards compatibility
+ifeq ($(DEB_STAGE),stage1)
+DEB_BUILD_PROFILES += stage1
+endif
+
+ifeq ($(filter nopython,$(DEB_BUILD_PROFILES)),)
 PYVERS := $(shell pyversions -vs)
 PY3VERS := $(shell py3versions -vs)
-else
-NOPYTHON_OPTIONS = -Npython-cracklib -Npython3-cracklib
 endif
 
-ifeq ($(DEB_HOST_GNU_TYPE),$(DEB_BUILD_GNU_TYPE))
+ifeq ($(filter cross,$(DEB_BUILD_PROFILES)),)
 CRACKLIB_PACKER=$(CURDIR)/debian/buildtmp/base/util/cracklib-packer
 else
 CRACKLIB_PACKER=/usr/sbin/cracklib-packer
@@ -48,7 +51,7 @@
 
 override_dh_auto_build:
$(MAKE) -C $(CURDIR)/debian/buildtmp/base
-ifneq ($(DEB_STAGE),stage1)
+ifeq ($(filter nopython,$(DEB_BUILD_PROFILES)),)
ln -s $(CURDIR)/debian/crack.py $(CURDIR)/python; \
for i in $(PYVERS) $(PY3VERS); do \
cd $(CURDIR)/debian/buildtmp/python$$i; \
@@ -60,9 +63,9 @@
docbook2html -o debian/doc --nochunks debian/libcrack2.xml
docbook2html -o debian/doc --nochunks debian/cracklib-runtime.xml
 
+ifeq ($(filter nocheck,$(DEB_BUILD_OPTIONS))$(filter 
nopython,$(DEB_BUILD_PROFILES)),)
 override_dh_auto_test:
mkdir $(CURDIR)/debian/tmp
-ifneq ($(DEB_STAGE),stage1)
$(CRACKLIB_PACKER) $(CURDIR)/debian/tmp/cracklib_dict < \
 $(CURDIR)/dicts/cracklib-small
for i in $(PYVERS) $(PY3VERS); do \
@@ -120,7 +123,7 @@
  

Bug#891867: diffoscope: improve .changes diffs

[Helmut Grohne]

Package: diffoscope
Version: 91
Severity: wishlist
Tags: patch

Hi awesome reproducible team!

I'm working on adding more build profiles and diffoscope + reproducible
builds turn out to be an awesome tool in validating that my profiles
only drop packages and never change package contents. :)

Now I've run into a strange corner case with diffing .changes files. If
the last entry in a Checksums-Sha256 field is removed, new last entry is
removed and added. For example:

├── Files
│ @@ -1,12 +1,8 @@
│  
│   a6434caf7853f0e84013e6004b934351 10496 debug optional 
cracklib-runtime-dbgsym_2.9.2-5.1_amd64.deb
│   93d547da959c0080bb45cc05d354539f 148972 admin optional 
cracklib-runtime_2.9.2-5.1_amd64.deb
│ - 608dbc69affb8158f7f203e3c83e5595 11084 libs optional 
cracklib2_2.9.2-5.1_amd64.buildinfo
│ + 1941a0fd2dbf8b3df8536caab1895993 9042 libs optional 
cracklib2_2.9.2-5.1_amd64.buildinfo
│   b2010c8e3498d469ae3b5bf5e5469da1 21416 debug optional 
libcrack2-dbgsym_2.9.2-5.1_amd64.deb
│   f099f5629a8b0cad9e5fba5ded9f88d9 32052 libdevel extra 
libcrack2-dev_2.9.2-5.1_amd64.deb
│   e3b100bcf99561c965cc5da8ef58e206 120108 debian-installer optional 
libcrack2-udeb_2.9.2-5.1_amd64.udeb
│ - e04c3f5f14a2c8eb2022ba8eb1d5d915 54788 libs optional 
libcrack2_2.9.2-5.1_amd64.deb
│ - 85fa278ff743cf93ead1075664df42f2 12880 debug optional 
python-cracklib-dbgsym_2.9.2-5.1_amd64.deb
│ - 674e3f26f4301f5c253fddb0366a3832 23392 python optional 
python-cracklib_2.9.2-5.1_amd64.deb
│ - c1bceeb542a7dbed7d2989fd93bba60b 14160 debug optional 
python3-cracklib-dbgsym_2.9.2-5.1_amd64.deb
│ - b9868203bdda021286129428b5eb3e55 23424 python optional 
python3-cracklib_2.9.2-5.1_amd64.deb
│ + e04c3f5f14a2c8eb2022ba8eb1d5d915 54788 libs optional 
libcrack2_2.9.2-5.1_amd64.deb

The DotChangesFile comaprator performs a super call into DebControlFile,
which pulls the Checksums-Sha256 field out of the parsed deb822 file. In
doing so it strips the trailing newline and this what makes for the
difference above. I propose working around the issue with the following
patch:

--- a/diffoscope/comparators/debian.py
+++ b/diffoscope/comparators/debian.py
@@ -142,16 +142,16 @@
 # Compare Files as string
 if self.deb822.get('Files'):
 differences.append(Difference.from_text(
-self.deb822.get_as_string('Files'),
-other.deb822.get_as_string('Files'),
+self.deb822.get_as_string('Files') + "\n",
+other.deb822.get_as_string('Files') + "\n",
 self.path,
 other.path,
 source='Files',
 ))
 else:
 differences.append(Difference.from_text(
-self.deb822.get_as_string('Checksums-Sha256'),
-other.deb822.get_as_string('Checksums-Sha256'),
+self.deb822.get_as_string('Checksums-Sha256') + "\n",
+other.deb822.get_as_string('Checksums-Sha256') + "\n",
 self.path,
 other.path,
 source='Checksums-Sha256',

Many thanks to Mattia Rizzolo for pointing precisely at the relevant
source code.

Helmut

Bug#891866: Please don't mix units within the same sentance

[積丹尼 Dan Jacobson]

Package: aptitude
Version: 0.8.10-6
Severity: wishlist

Which are clearer?

Need to get 3,159 kB/131 MB of archives. After unpacking 195 MB will be freed.
Need to get 3.159/131 MB of archives. After unpacking 195 MB will be freed.

Need to get 316 cents out of 131 dollars.
Need to get 3.16/131 dollars.

Yes, discussed before.

Bug#891865: src:python-cffi: please ship a python-cffi-doc package

[Daniel Kahn Gillmor]

Package: src:python-cffi
Version: 1.11.5-1
Severity: wishlist

cffi has nice docs, nicely formatted.  It'd be great to be able to
ship them in debian so that developers could have a local version that
matches the version they have installed, and wouldn't have to rely on
being online to read readthedocs.io.

if they're already available in debian, i don't know how to get them.

  --dkg

-- System Information:
Debian Release: buster/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing'), (500, 'oldstable'), 
(200, 'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Bug#802710: Fwd: [MuseScore] Embeds Qt5's private headers without putting them in a namespace

[Thorsten Glaser]

Things are getting fixed upstream.--- Begin Message ---
Comment by ericfontainejazz:

Please see https://github.com/musescore/MuseScore/pull/3498 [1] which removes 
that private header entirely.  That might fix this bug as well.

Cross-linking to that PR's issue: #269845: may crash before splash screen on 
2.1, 2.2, or master with Qt 5.10 due to diverged copy-and-pasted 
QPaintEnginePrivate header file [2]

—
You are receiving this because you are subscribed on this thread. View it on 
MuseScore [3] or unsubscribe from this thread [4].


[1] https://github.com/musescore/MuseScore/pull/3498
[2] https://musescore.org/en/node/269845
[3] https://musescore.org/en/comment/822285#comment-822285
[4] https://musescore.org/settings/subscriptions

--- End Message ---
--- Begin Message ---
Comment by lasconic:

The PR above is merged. No more private headers.

—
You are receiving this because you are subscribed on this thread. View it on 
MuseScore [1] or unsubscribe from this thread [2].


[1] https://musescore.org/en/comment/822514#comment-822514
[2] https://musescore.org/settings/subscriptions

--- End Message ---

Bug#891864: ITP: xfce4-sntray-plugin -- StatusNotifier plugin for XFCE, MATE, Budgie and Vala Panel

[Mike Gabriel]

Package: wnpp
Severity: wishlist
Owner: Mike Gabriel 

* Package name: xfce4-sntray-plugin
  Version : 0.4.8
  Upstream Author : Konstantin Pugin 
* URL : https://github.com/rilian-la-te/xfce4-sntray-plugin
* License : GPL-3+
  Programming Lang: Vala
  Description : StatusNotifier plugin for XFCE, MATE, Budgie and Vala Panel

 Plugin for XFCE, MATE, Budgie and Vala Panel to show StatusNotifierItems
 (also known as AppIndicators). Based on ValaPanel`s StatusNotifier and
 xfce4-snw-plugin by equiem.

Bug#891836: systemd: systemctl start/stop/restart valid-template@invalid-instance doesn't cause errors

[Felipe Sateler]

On Thu, Mar 1, 2018 at 2:46 PM, Michael Biebl  wrote:
> Control: tags -1 moreinfo unreproducible
>
> Am 01.03.2018 um 16:00 schrieb Martin von Wittich:
>> Hi Michael,
>>
>> On Thu, 1 Mar 2018 15:10:26 +0100 Michael Biebl  wrote:
>>> I can't reproduce this, neither on v237 nor on v232:
>>>
>>> # systemctl stop postgresql@does-not-exist
>>> Failed to stop postgresql@does-not-exist.service: Unit
>>> postgresql@does-not-exist.service not loaded.
>>>
>>> # systemctl start postgresql@does-not-exist
>>> Failed to start postgresql@does-not-exist.service: Unit
>>> postgresql@does-not-exist.service not found.
>>>
>>> # systemctl restart postgresql@does-not-exist
>>> Failed to restart postgresql@does-not-exist.service: Unit
>>> postgresql@does-not-exist.service not found.
>>
>> Do you have a postgresql template installed (should be the case when you
>> have a postgresql-9.{4,6} (jessie/stretch) server package installed)? If
>> not, try another template, maybe getty (I hope that's available on every
>> system, would make reproducing this a lot easier):
>
> Hm, right. I completely missed the part about "valid-template", and no,
> I didn't have postgresql@.service.
>
> But I'm not sure if what you are seeing is actually a bug. A templated
> service does not necessarily need a representation on disk. It is very
> much possible, that you simply want to pass a command flag to a daemon
> for example.
>
> So systemd will happily start/stop/restart such a noop in your case. The
> only case where it fails is, on a reload, because there wasn't actually
> a process running which could be reloaded.
>
> Sounds a bit strange but is imho consistent.
>

I think the problem is postgres has:

# -: ignore startup failure (recovery might take arbitrarily long)
# the actual pg_ctl timeout is configured in pg_ctl.conf
ExecStart=-/usr/bin/pg_ctlcluster --skip-systemctl-redirect %i start

If postgres would report the error back to systemd, it would at least
tell you that.

getty@.service suffers from the same issue. Other units do not:

% sudo systemctl start systemd-nspawn@does-not-exist
Job for systemd-nspawn@does-not-exist.service failed because the
control process exited with error code.
See "systemctl status systemd-nspawn@does-not-exist.service" and
"journalctl -xe" for details.

-- 

Saludos,
Felipe Sateler

Bug#891863: build binutils-for-host for the target architecture

[Helmut Grohne]

Source: binutils
Version: 2.30-5
Severity: normal
Tags: patch
User: helm...@debian.org
Usertags: rebootstrap

When building cross binutils for a single target (by setting the TARGET
environment variable or writing to debian/target), one needs the
binutils-for-host package for the TARGET architecture. Thus such
targeted build should emit emit binutils-for-host:$DEB_TARGET_ARCH
rather than binutils-for-host:$DEB_HOST_ARCH. (For non-targeted builds
there is no difference.) Please consider applying the attached patch.

Helmut
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+binutils (2.30-5.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Build binutils-for-host for TARGET. (Closes: #-1)
+
+ -- Helmut Grohne   Thu, 01 Mar 2018 20:03:17 +0100
+
 binutils (2.30-5) unstable; urgency=medium
 
   * Update, taken from the 2.30 branch 20180215.
--- a/debian/rules
+++ b/debian/rules
@@ -209,9 +209,11 @@
   DPKG_TARGET_VARS := $(shell dpkg-architecture -f -t$(TARGET))
   DEB_TARGET_MULTIARCH = $(call vafilt,$(DPKG_TARGET_VARS),DEB_HOST_MULTIARCH)
   DEB_TARGET_ARCH  = $(call vafilt,$(DPKG_TARGET_VARS),DEB_HOST_ARCH)
+  for_target   = dpkg-architecture -f -t$(TARGET) -c
 else
   DEB_TARGET_MULTIARCH = $(DEB_HOST_MULTIARCH)
   DEB_TARGET_ARCH  = $(DEB_HOST_ARCH)
+  for_target   =
 endif
 
 ifneq (,$(TARGET))
@@ -1422,8 +1424,9 @@
ln -sf $(p_com) $(d_hst)/$(PF)/share/doc/$(p_hst)
 
rm -f debian/substvars
-   dpkg-gencontrol -P$(d_hst) -p$(p_hst) \
-   -Vbinutils:native=$(p_nat) -Vbinutils:minver=$(min_ver)
+   $(for_target) dpkg-gencontrol -P$(d_hst) -p$(p_hst) \
+   -Vbinutils:native=$(if $(TARGET),$(p_cross),$(p_nat)) \
+   -Vbinutils:minver=$(min_ver)
 
chown -R root:root $(d_hst)
chmod -R go=rX $(d_hst)

Bug#891862: TAG: Qt5.10.1 -- cross-platform C++ application framework

[Raphael Grimm]

Package: wnpp
Severity: RFP
Version: 5.10.1

Qt is a cross-platform C++ application framework. Qt's primary feature 
is its

 rich set of widgets that provide standard GUI functionality.

 This package sets Qt 5 to be the default Qt version to be used when using
 development binaries like qmake. It provides a default configuration for
 qtchooser, but does not prevent alternative Qt installations from 
being used.



URL: http://qt-project.org/
License: LGPL 2.1
Source: git clone https://code.qt.io/qt/qt5.git&; cd qt5 && git checkout 
5.10


smime.p7s
Description: S/MIME Cryptographic Signature

Bug#891861: fonts-freefont: debian/copyright does not contain upstream licence

[Thorsten Glaser]

Package: fonts-freefont-ttf
Version: 20120503-7
Severity: serious
Justification: Policy 12.5

The “Licensing” paragraph of the upstream README file contains
the licence grant; in particular, it contains a GPL Font Exception,
but also differs in wording from what’s contained in d/copyright
(which also lacks the font exception).

-- System Information:
Debian Release: buster/sid
  APT prefers unreleased
  APT policy: (500, 'unreleased'), (500, 'buildd-unstable'), (500, 'unstable')
Architecture: x32 (x86_64)
Foreign Architectures: i386, amd64

Kernel: Linux 4.15.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)

-- no debconf information

Bug#890968: network-manager-openvpn: does not save private key

[Starchy Grant]

Package: network-manager-openvpn
Version: 1.8.0-2
Followup-For: Bug #890968

I'm finding the same behavior, but additionally the "User certificate" field is 
overwritten withe value from the "CA certificate" field. This is happening with 
multiple VPN defintions, and happens whether they were created before upgrading 
packages, newly imported from a .ovpn file, or defined manually through the UI. 
The issues recurs if I delete the definition and recreate it.

Openvpn on the command line is working fine, but network-manager-openvpn is 
currently unuseable for me.


-- System Information:
Debian Release: kali-rolling
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-kali3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages network-manager-openvpn depends on:
ii  adduser  3.117
ii  libc62.26-6
ii  libglib2.0-0 2.54.3-2
ii  libnm0   1.10.4-1+b1
ii  network-manager  1.10.4-1+b1
ii  openvpn  2.4.4-2

network-manager-openvpn recommends no packages.

network-manager-openvpn suggests no packages.

-- no debconf information

Bug#889791: virtualbox: PulseAudio-related segmentation fault from PowerShell beeps

[Kevin Locke]

On Thu, 2018-03-01 at 12:16 +0100, Gianfranco Costamagna wrote:
> On Tue, 06 Feb 2018 16:29:09 -0700 Kevin Locke  wrote:
>> When running a Windows 7 guest using the PulseAudio host audio driver
>> and either "ICH AC97" or "Intel HD Audio" audio controller, running
>> PowerShell and causing repeated beeping (e.g. by invoking ^G repeatedly)
>> will cause VirtualBox to crash with SIGSEGV.  I was able to reproduce
>> the issue using the Microsoft-provided "IE8 on Win7 (x86)" VM image[1]
>> but was unable to reproduce it from terminal beeps using a Linux image.
> 
> Can you please try 5.1.8?

Sure.  I assume you meant 5.2.8.  Let me know if you really want me to
find a copy of 5.1.8 to test.

With 5.2.8 I was unable to reproduce the issue with the "Intel HD
Audio" audio controller, but it still occurred with the "ICH AC97"
audio controller.  Backtrace with 5.2.8-dfsg-1:

Program terminated with signal SIGSEGV, Segmentation fault.
#0  pa_threaded_mainloop_signal (m=0x191, wait_for_accept=0)
at pulse/thread-mainloop.c:196
[Current thread is 1 (Thread 0x7f42056b1700 (LWP 3814))]
#0  0x7f420c181bde in pa_threaded_mainloop_signal (m=0x191, 
wait_for_accept=0) at pulse/thread-mainloop.c:196
#1  0x7f420c178a95 in pa_stream_simple_ack_callback 
(pd=pd@entry=0x7f41f80017f0, command=command@entry=2, tag=tag@entry=22001, 
t=t@entry=0x7f41f80028d0, userdata=userdata@entry=0x7f41f800d920) at 
pulse/stream.c:2258
#2  0x7f4206adc621 in run_action (pd=0x7f41f80017f0, r=0x7f41f800c8a0, 
command=2, ts=0x7f41f80028d0) at pulsecore/pdispatch.c:288
#3  0x7f4206adc99b in pa_pdispatch_run (pd=0x7f41f80017f0, 
packet=packet@entry=0x7f41e40f9800, ancil_data=ancil_data@entry=0x7f41f8000e88, 
userdata=userdata@entry=0x7f42290b0890) at pulsecore/pdispatch.c:341
#4  0x7f420c15e36e in pstream_packet_callback (p=, 
packet=0x7f41e40f9800, ancil_data=0x7f41f8000e88, userdata=0x7f42290b0890)
at pulse/context.c:349
#5  0x7f4206adf5ef in do_read (p=p@entry=0x7f41f8000bf0, 
re=re@entry=0x7f41f8000db8) at pulsecore/pstream.c:1012
#6  0x7f4206ae20ab in do_pstream_read_write (p=0x7f41f8000bf0)
at pulsecore/pstream.c:248
#7  0x7f420c1734dd in dispatch_defer (m=0x7f42290b06e0)
at pulse/mainloop.c:680
#8  0x7f420c1734dd in pa_mainloop_dispatch (m=m@entry=0x7f42290b06e0)
at pulse/mainloop.c:889
#9  0x7f420c17370e in pa_mainloop_iterate (m=0x7f42290b06e0, 
block=, retval=0x0) at pulse/mainloop.c:929
#10 0x7f420c173790 in pa_mainloop_run (m=0x7f42290b06e0, 
retval=retval@entry=0x0) at pulse/mainloop.c:944
#11 0x7f420c1815f9 in thread (userdata=0x7f42290b06a0)
at pulse/thread-mainloop.c:100
#12 0x7f4206af2c58 in internal_thread_func (userdata=0x7f42290b2eb0)
at pulsecore/thread-posix.c:81
#13 0x7f428e5c951a in start_thread (arg=0x7f42056b1700)
at pthread_create.c:465
#14 0x7f428e0fd3ef in clone ()
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thanks for following-up!  Let me know if there is any additional
information I can provide.

Cheers,
Kevin

Bug#891860: virtualbox: Failed to preset unit: virtualbox-guest-utils.service

[Kevin Locke]

Package: virtualbox
Version: 5.2.8-dfsg-1
Severity: minor

Dear Maintainer,

During package installation, virtualbox, virtualbox-qt, and
virtualbox-source (and possibly other packages) print the following
error message if the virtualbox-guest-utils package is not installed
(and not being installed):

Failed to preset unit: Unit file virtualbox-guest-utils.service does not 
exist.
/usr/bin/deb-systemd-helper: error: systemctl preset failed on
virtualbox-guest-utils.service: No such file or directory

Presumably the issue is that deb-systemd-helper should only be called
for virtualbox-guest-utils.service from the virtualbox-guest-utils
maintainer scripts, but is instead being called for all binary packages
from the same source package.

Thanks,
Kevin

P.S.  Full log from upgrading to 5.2.8-dfsg-1 on my system:

-8<--
Performing actions...
Reading changelogs... Done
(Reading database ... 307708 files and directories currently installed.)
Preparing to unpack .../0-virtualbox-dbgsym_5.2.8-dfsg-1_amd64.deb ...
Unpacking virtualbox-dbgsym (5.2.8-dfsg-1) over (5.2.6-dfsg-5) ...
Preparing to unpack .../1-virtualbox-qt-dbgsym_5.2.8-dfsg-1_amd64.deb
...
Unpacking virtualbox-qt-dbgsym (5.2.8-dfsg-1) over (5.2.6-dfsg-5) ...
Preparing to unpack .../2-virtualbox-qt_5.2.8-dfsg-1_amd64.deb ...
Unpacking virtualbox-qt (5.2.8-dfsg-1) over (5.2.6-dfsg-5) ...
Preparing to unpack .../3-virtualbox-source_5.2.8-dfsg-1_all.deb ...
Unpacking virtualbox-source (5.2.8-dfsg-1) over (5.2.6-dfsg-5) ...
Preparing to unpack .../4-virtualbox_5.2.8-dfsg-1_amd64.deb ...
Unpacking virtualbox (5.2.8-dfsg-1) over (5.2.6-dfsg-5) ...
Setting up virtualbox-source (5.2.8-dfsg-1) ...
Failed to preset unit: Unit file virtualbox-guest-utils.service does not
exist.
/usr/bin/deb-systemd-helper: error: systemctl preset failed on
virtualbox-guest-utils.service: No such file or directory
Setting up virtualbox (5.2.8-dfsg-1) ...
Failed to preset unit: Unit file virtualbox-guest-utils.service does not
exist.
/usr/bin/deb-systemd-helper: error: systemctl preset failed on
virtualbox-guest-utils.service: No such file or directory
vboxweb.service is a disabled or a static unit not running, not starting
it.
Setting up virtualbox-dbgsym (5.2.8-dfsg-1) ...
Processing triggers for systemd (237-3) ...
Processing triggers for man-db (2.8.1-1) ...
Processing triggers for shared-mime-info (1.9-2) ...
Processing triggers for hicolor-icon-theme (0.17-1) ...
Setting up virtualbox-qt (5.2.8-dfsg-1) ...
Failed to preset unit: Unit file virtualbox-guest-utils.service does not
exist.
/usr/bin/deb-systemd-helper: error: systemctl preset failed on
virtualbox-guest-utils.service: No such file or directory
Setting up virtualbox-qt-dbgsym (5.2.8-dfsg-1) ...
-8<--


-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 
'testing-debug'), (500, 'unstable'), (101, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.15.7-kevinoid1 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), 
LANGUAGE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages virtualbox depends on:
ii  adduser   3.117
ii  iproute2  4.15.0-2
ii  libc6 2.26-6
ii  libcurl3-gnutls   7.58.0-2
ii  libdevmapper1.02.12:1.02.145-4.1
ii  libgcc1   1:8-20180218-1
ii  libgsoap-2.8.60   2.8.60-2
ii  libpng16-16   1.6.34-1
ii  libpython3.6  3.6.4-4
ii  libsdl1.2debian   1.2.15+dfsg2-0.1
ii  libssl1.1 1.1.0g-2
ii  libstdc++68-20180218-1
ii  libvncserver1 0.9.11+dfsg-1
ii  libx11-6  2:1.6.4-3
ii  libxcursor1   1:1.1.15-1
ii  libxext6  2:1.3.3-1+b2
ii  libxml2   2.9.4+dfsg1-6.1
ii  libxmu6   2:1.1.2-2
ii  libxt61:1.1.5-1
ii  procps2:3.3.12-4
ii  python3   3.6.4-1
ii  python3.6 3.6.4-4
ii  virtualbox-modules-4.15.1-kevinoid1 [virtualbox-modu  5.2.8-dfsg-1+4.15.7-1
ii  

Bug#891855: fonts-monoid: installs no less than 4000 font files!

[Fabian Greffrath]

Am Donnerstag, den 01.03.2018, 17:36 +0100 schrieb Fabian Greffrath:
> etc. Another alternative would be to split the packages up by groups
> of variants, or whatever.

I think I have a better idea: In e.g. the Libreoffice font chooser the
fonts represent themselves as
 - Monoid
 - Monoid HalfLoose
 - Monoid HalfTight
 - Monoid Loose
 - Monoid Tight
 - Monoisome
 - Monoisome HalfLoose
 - Monoisome HalfTight
 - Monoisome Loose
 - Monoisome Tight
i.e. they are grouped by their tracking.

It will probably make sense to split the package up in the same way, so
we'd be down to "just a few hundred" font files per package.

Needless to say, probably, but I am a DD and also part of the Debian
fonts team and I'd love to help discuss and implement a proper solution
for the package split-up!

Cheers,

 - Fabian


signature.asc
Description: This is a digitally signed message part

Bug#890495: [pkg-golang-devel] Bug#890495: golang-1.8: FTBFS on ppc64el

[Frédéric Bonnard]

On Thu, 15 Feb 2018 23:21:41 +1300, Michael Hudson-Doyle 
 wrote:
> ​Ah I wondered what that upload was about :-) Thanks for the patches. I
> can't help wondering if the correct fix is not to remove Go 1.8 from
> unstable instead though. It will only be supported until 1.10 comes out in
> at most a few weeks and long out of support by the time buster is released.
> Is there any reason you need 1.8 specifically?

Hi again Michael,
just to be sure as you seem to be the good person on both side : Debian
import freeze for Ubuntu Bionic is today (which I thought would be not
so early) and will 1.8.3-2ubuntu1 remain for bionic ? (it built on
ppc64el)
I just wanted to be sure the failing 1.8.5 won't be propagated.

F.


pgpT5eHMRjusl.pgp
Description: PGP signature

Bug#887399: (no subject)

[Jeremy Gillula]

Hi there! Jeremy from the Certbot team here.

It's been over a month since this bug was submitted. Is there any advice
from the Release Team on what we should do? We'd really like to get
these fixes into stable.

Thanks so much!




signature.asc
Description: OpenPGP digital signature

Bug#891859: RFP: webext-umatrix -- A point-and-click privacy-enhancing in-browser firewall

[Daniel Kahn Gillmor]

Package: wnpp
Severity: wishlist

* Package name: webext-umatrix
  Version : 1.3.2
  Upstream Author : Raymond Hill
* URL : https://addons.mozilla.org/en-US/firefox/addon/umatrix/
* License : GPL-3
  Programming Lang: javascript
  Description : browser plugin to block requests and reduce data leakage


A point-and-click matrix-based firewall for your browser, with many
privacy-enhancing tools.

uMatrix put you in full control of where your browser is allowed to
connect, what type of data it is allowed to download, and what it is
allowed to execute. Nobody else decides for you: You choose. You are
in full control of your privacy.

uMatrix is for advanced users, but aims for ease of use.

Bug#891836: systemd: systemctl start/stop/restart valid-template@invalid-instance doesn't cause errors

[Michael Biebl]

Control: tags -1 moreinfo unreproducible

Am 01.03.2018 um 16:00 schrieb Martin von Wittich:
> Hi Michael,
> 
> On Thu, 1 Mar 2018 15:10:26 +0100 Michael Biebl  wrote:
>> I can't reproduce this, neither on v237 nor on v232:
>>
>> # systemctl stop postgresql@does-not-exist
>> Failed to stop postgresql@does-not-exist.service: Unit
>> postgresql@does-not-exist.service not loaded.
>>
>> # systemctl start postgresql@does-not-exist
>> Failed to start postgresql@does-not-exist.service: Unit
>> postgresql@does-not-exist.service not found.
>>
>> # systemctl restart postgresql@does-not-exist
>> Failed to restart postgresql@does-not-exist.service: Unit
>> postgresql@does-not-exist.service not found.
> 
> Do you have a postgresql template installed (should be the case when you
> have a postgresql-9.{4,6} (jessie/stretch) server package installed)? If
> not, try another template, maybe getty (I hope that's available on every
> system, would make reproducing this a lot easier):

Hm, right. I completely missed the part about "valid-template", and no,
I didn't have postgresql@.service.

But I'm not sure if what you are seeing is actually a bug. A templated
service does not necessarily need a representation on disk. It is very
much possible, that you simply want to pass a command flag to a daemon
for example.

So systemd will happily start/stop/restart such a noop in your case. The
only case where it fails is, on a reload, because there wasn't actually
a process running which could be reloaded.

Sounds a bit strange but is imho consistent.






-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature

Bug#891835: gnome-photos: "gnome-photos" crashed, received signal SIGSEGV, Segmentation fault"

[Sudarshan Kakoty]

Creating a new user, and launching the app there doesn't make the app crash.

By producing backtrace by "thread apply all bt full" reported that the
gnome-photos couldn't access .cache and .config folders. (Now I remember
messing with ./configure --prefix=$$HOME/foo few months before)

Besides my online-accounts are causing some conflict with local photos and
so and so..

However, *setting correct file permissions and removing some local photos
fixed the issue completely.*

Thanks for your assistance! :-)

Bug#891858: offset negative related ( i think )

[Jeffrin Thalakkottoor]

Package: libinput10
Version: 1.10.0-1


hello,
 negative offsets found related to libinput in syslog

$sudo cat /var/log/syslog  | grep bug | grep libinput
Mar  1 20:39:17 debian org.gnome.Shell.desktop[1207]: libinput error:
client bug: timer event1 keyboard: offset negative (-378ms)
Mar  1 20:39:17 debian org.gnome.Shell.desktop[1207]: libinput error:
client bug: timer event1 keyboard: offset negative (-169ms)
Mar  1 20:39:17 debian org.gnome.Shell.desktop[1207]: libinput error:
client bug: timer event1 keyboard: offset negative (-181ms)
Mar  1 21:40:01 debian org.gnome.Shell.desktop[1207]: libinput error:
client bug: timer event1 keyboard: offset negative (-547ms)

$uname -a
Linux debian 4.9.0-4-amd64 #1 SMP Debian 4.9.65-3 (2017-12-03) x86_64
GNU/Linux
$

$cat /etc/issue
Debian GNU/Linux buster/sid \n \l

(libc6:amd64 2.26-6   amd64
GNU C Library: Shared libraries )




--
software engineer
rajagiri school of engineering and  technology

Bug#891792: libmlt6: SIGSEGV in mlt_properties_lock causes crash in Flowblade

[Nathaniel Morck Beaver]

You are quite right. I thought I had removed all the deb-multimedia 
packages, but it seems I missed some.


Please feel free to close the bug.

P.S. For posterity, here is how to find some packages that might be left 
over from deb-multimedia:


$ apt-show-versions | grep 'newer than version in archive'

and here is how I "downgraded" this one to the current Debian stretch 
version:


$ sudo apt-get install libmlt-data/stretch

On 03/01/2018 08:58 AM, Patrick Matthäi wrote:


Am 28.02.2018 um 22:08 schrieb Nathaniel Morck Beaver:

Versions of packages libmlt6 recommends:
ii  libmlt-data  1:0.9.6-dmo1


This isn't a version of Debian and it is pretty outdated

Bug#891773: [PATCH] ieee1275: Fix crash in of_path_of_nvme when of_path is empty

[John Paul Adrian Glaubitz]

On 03/01/2018 05:59 PM, James Clarke wrote:

Whitespace issues aside, should it not be returning NULL if of_path is
NULL, like the other users of find_obppath, such as of_path_of_scsi?


Hmm. Good point.


This should restore the behaviour from before of_path_of_nvme was added,
as grub_util_devname_to_ofpath would have previously returned NULL due
to the unknown type?


Right. I'll wait for some comments from Daniel and Eric first though.

Adrian

--
 .''`.  John Paul Adrian Glaubitz
: :' :  Debian Developer - glaub...@debian.org
`. `'   Freie Universitaet Berlin - glaub...@physik.fu-berlin.de
  `-GPG: 62FF 8A75 84E0 2956 9546  0006 7426 3B37 F5B5 F913

Bug#891857: busybox: Special case for /32 subnets not working as expected

[Yuval Freund]

Package: busybox
Severity: normal

Dear Maintainer,

Many of our customers would like to use the debian installer in order to set up 
their own VMs. Our DHCP servers currently offer addresses with /32 subnets, and 
we've come to realize that the debian installer does not properly configure the 
default route.

A fix for /32 has already been implemented in an earlier version of busybox, 
but it doesn't seem to work as expected, because the interface isn't defined 
while adding the relevant route.

Here's a suggested fix, which would probably also clear up what I mean:

##

--- tree/debian/tree/busybox-udeb/etc/udhcpc/default.script 2018-03-01 
15:45:33.0 +0100
+++ tree/debian/tree/busybox-udeb/etc/udhcpc/default.script_proposed
2018-03-01 15:47:37.259206527 +0100
@@ -68,7 +68,7 @@

# special case for /32 subnets, use onlink when adding routes
[ ".$subnet" = .255.255.255.255 ] \
-&& onlink=onlink || onlink=
+&& onlink="dev $interface onlink" || onlink=
for r in "$router"; do
ip -4 route add default via "$r" $onlink
done

##

We would appreciate it if you could patch all current/relevant versions to use 
this fix.

Thank you!

Yuval Freund, ProfitBricks GmbH

Bug#891773: [PATCH] ieee1275: Fix crash in of_path_of_nvme when of_path is empty

[James Clarke]

On Thu, Mar 01, 2018 at 05:00:28PM +0100, John Paul Adrian Glaubitz wrote:
> The of_path_of_nvme function (commit 2391d57, ieee1275: add nvme
> support within ofpath) introduced a functional regression:
>
> On systems which are not based on Open Firmware but have at
> least one NVME device, find_obppath will return an empty path
> and appending the disk name to of_path will therefore result
> in a crash. Thus, when of_path is empty, just return the
> disk name in of_path_of_nvme.
>
> Signed-off-by: John Paul Adrian Glaubitz 
> ---
>  grub-core/osdep/linux/ofpath.c | 7 ++-
>  1 file changed, 6 insertions(+), 1 deletion(-)
>
> diff --git a/grub-core/osdep/linux/ofpath.c b/grub-core/osdep/linux/ofpath.c
> index 1c30e7233..daf0f 100644
> --- a/grub-core/osdep/linux/ofpath.c
> +++ b/grub-core/osdep/linux/ofpath.c
> @@ -389,8 +389,13 @@ of_path_of_nvme(const char *sys_devname 
> __attribute__((unused)),
>  }
>  
>of_path = find_obppath (sysfs_path);
> +
> +  if(of_path)
> +strcat (of_path, disk);
> +  else
> +of_path = strdup(disk);
> +

Whitespace issues aside, should it not be returning NULL if of_path is
NULL, like the other users of find_obppath, such as of_path_of_scsi?
This should restore the behaviour from before of_path_of_nvme was added,
as grub_util_devname_to_ofpath would have previously returned NULL due
to the unknown type?

James

>free (sysfs_path);
> -  strcat (of_path, disk);
>return of_path;
>  }
>  
> -- 
> 2.16.2

Bug#891856: ITP: pluto-lunar -- routines for predictions of positions in solar system

[Steffen Moeller]

Package: wnpp
Severity: wishlist
Owner: Steffen Moeller 

* Package name: pluto-lunar
  Upstream Author : Bill J. Gray
* URL : https://github.com/Bill-Gray/lunar
* License : GPL
  Programming Lang: C++
  Description : routines for predictions of positions in solar system

The package is to be team-maintained at 
https://salsa.debian.org/debian-astro-team/pluto-lunar.

Bug#883384: RFS: deepin-deb-installer/1.2.1-1 [ITP]

[Gianfranco Costamagna]

control: owner -1 !
control: tags -1 moreinfo

same dman directory, same reviews as previous packages needs fixing, lintian is 
complaining a lot
http://debomatic-amd64.debian.net/distribution#unstable/deepin-deb-installer/1.2.1-1/lintian


-> 0001-Enable-CMake-Debug.patch

this need to be upstreamed, and probably renamed, "remove-gcc-optimizations" or 
something like that, since it removes the
default O3 optimization level.

G.



signature.asc
Description: OpenPGP digital signature

Bug#891855: fonts-monoid: installs no less than 4000 font files!

[Fabian Greffrath]

Package: fonts-monoid
Version: 0.61-1
Severity: wishlist

Hi there,

thank you very much for maintaining this very interesting font in
Debian. However,

$ dpkg -L fonts-monoid | grep \.ttf | wc -l
4000

WTF is that?! This is exactly 800 different font variants per style
(Bold, Italic, Regular, Retina and Monoisone Regular).

Also, I find more than 400 MB installed size for a font package rather
unbearable:

$ apt-cache show fonts-monoid | grep Size
Installed-Size: 441617
Size: 2013832

I really don't think it is necessary to include *all* font variants
and combinations thereof in the Debian package. If you e.g. visit the
Monoid homepage at https://larsenwork.com/monoid/ and click the
"Download" button, you receive a nice ZIP file which contains 4 files
with only the base variants for each style.

I strongly suggest to split the package up into at least a
fonts-monoid package which includes the four base variants as well as
fonts-monoisome and fonts-monoid-extra, which includes all the other
variants. Or, maybe even better, split it up into more -extra
packages, e.g. fonts-monoid-regular-extra, fonts-monoid-italic-extra,
etc. Another alternative would be to split the packages up by groups
of variants, or whatever. However, the packages need a big fat warning
regarding their installed size and the sheer number of installe dfont
files.

Thank you!

 - Fabian


-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 'experimental'), 
(500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), 
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-- no debconf information

Bug#883379: RFS: deepin-voice-recorder/1.3.6-1 [ITP]

[Gianfranco Costamagna]

control: owner -1 !
control: tags -1 moreinfo

grep DOCDIR . -R
./deepin-voice-recorder.pro:isEmpty(DOCDIR):DOCDIR=/usr/share/dman/deepin-voice-recorder
./deepin-voice-recorder.pro:manual.path = $$INSTROOT$$DOCDIR


Why is the package installing stuff in /usr/share/dman? nothing in the archive 
uses such directory.

I'm reluctant to sponsor it, unless you provide some good explanation, and post 
a patch to upstream.
(BTW the patch 0001 looks useless, please forward upstream).

The other std-version, debhelper bump, and so on still apply
also lintian
I: deepin-voice-recorder: desktop-entry-lacks-keywords-entry 
usr/share/applications/deepin-voice-recorder.desktop


Other stuff LGTM.



signature.asc
Description: OpenPGP digital signature

Bug#879681: A bit of help with RADVD please...

[Geert Stappers]

Updating the bugreport.
(two persons are getting this email throug BCC)

On Thu, Mar 01, 2018 at 04:04:34PM +, ###  wrote:
> From: ### , Sent: Thursday, March 1, 2018 8:02:04 AM
> 
> > 
> > Hi,
> > 
> > 
> > My name is ###  .  I'm a network engineer in #.
> > 
> > 
> > I was wondering if you could help me with RADVD on debian 9 since I saw 
> > your bug report here:
> > 
> > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879681
> > 
> > 
> > My apt install radvd completed without error, but I get the same
> > error message listed in the bug report.
> > 
> > 
> > Could you please give me a bit more detail on how to implement the
> > override and or how to install from the 1:2.16-3 version
> > 
> > 
> > Thanks!
> > 
> > ###
> > 
> > 
> > I tried this:
> > 
> > 07:55root@zfrr1 /etc ? cat /etc/systemd/system/radvd.service.d/override.conf
> > cat: /etc/systemd/system/radvd.service.d/override.conf: No such file or 
> > directory
> > 07:55root@zfrr1 /etc ?
> > 
> > 
> >  - and I'm not experience with installing 1:2.16-3 from  source - but would 
> > like to learn.
> > 
> > 
> > ~~~
> > 
> > 
> > 
> > 07:53root@zfrr1 /etc ? apt install radvd
> > Reading package lists... Done
> > Building dependency tree
> > Reading state information... Done
> > radvd is already the newest version (1:2.15-2).
> > The following package was automatically installed and is no longer required:
> >   linux-image-4.9.0-4-amd64
> > Use 'apt autoremove' to remove it.
> > 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
> > 07:53root@zfrr1 /etc ? service radvd start
> > Job for radvd.service failed because the control process exited with error 
> > code.
> > See "systemctl status radvd.service" and "journalctl -xe" for details.
> > 07:53root@zfrr1 /etc ? systemctl status radvd.service
> > ?$B!| radvd.service - Router advertisement daemon for IPv6
> >Loaded: loaded (/lib/systemd/system/radvd.service; disabled; vendor 
> > preset: enabled)
> >Active: failed (Result: exit-code) since Thu 2018-03-01 07:53:35 PST; 
> > 16s ago
> >  Docs: man:radvd(8)
> >   Process: 9896 ExecStartPre=/usr/sbin/radvd --logmethod stderr_clean 
> > --configtest (code=exited, status=1/FAILURE)
> > 
> > Mar 01 07:53:34 zfrr1 systemd[1]: Starting Router advertisement daemon for 
> > IPv6...
> > Mar 01 07:53:35 zfrr1 radvd[9896]: /etc/radvd.conf:1 error: syntax error, 
> > unexpected STRING, expecting T_INTERFACE
> > Mar 01 07:53:35 zfrr1 radvd[9896]: exiting, failed to read config file
> > Mar 01 07:53:35 zfrr1 systemd[1]: radvd.service: Control process exited, 
> > code=exited status=1
> > Mar 01 07:53:35 zfrr1 systemd[1]: Failed to start Router advertisement 
> > daemon for IPv6.
> > Mar 01 07:53:35 zfrr1 systemd[1]: radvd.service: Unit entered failed state.
> > Mar 01 07:53:35 zfrr1 systemd[1]: radvd.service: Failed with result 
> > 'exit-code'.
> > 07:53root@zfrr1 /etc ?
> > 
> here is my config file:
> 
> 08:03root@zfrr1 /etc ? more radvd.conf
> nterface enp3s0
> {
>   AdvSendAdvert on;
>   prefix 2607:ff10:face:f1::/64
>   {
>   };
> };
> 08:03root@zfrr1 /etc ? ip link
> 1: lo:  mtu 65536 qdisc noqueue state UNKNOWN mode 
> DEFAULT group default qlen 1
> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> 2: enp2s0:  mtu 1500 qdisc pfifo_fast 
> state DOWN mode DEFAULT group default qlen 1000
> link/ether 00:01:2e:78:9c:2c brd ff:ff:ff:ff:ff:ff
> 3: enp3s0:  mtu 1500 qdisc pfifo_fast state 
> UP mode DEFAULT group default qlen 1000
> link/ether 00:01:2e:78:9c:2d brd ff:ff:ff:ff:ff:ff
> 08:03root@zfrr1 /etc ?
> 

So this is about an error in 2.15 which is fixed 2.16.

I think I should an upload to Strech backports.

When in a hurry do 

   wget http://stappers.it/do303/debian/unstable/main/$(dpkg 
--print-architecture)/radvd.scr
   cat radvd.scr
   sh radvd.scr
   # verify checksums and consider the `sudo dpkg -i radvd*.deb`


So no training how to install from source.

Please avoid private messages for non private issues.


Cheers
Geert Stappers
DD

P.S.
Thanks for the reminder the open bugreport


signature.asc
Description: Digital signature

Bug#891773: Related bug #871229 (but it didn't break my system))

[John Paul Adrian Glaubitz]

On 03/01/2018 05:15 PM, Diederik de Haas wrote:

No more segfaults :-)


Alright. Attaching an updated patch for sparc64 support for Colin.

Adrian

--
 .''`.  John Paul Adrian Glaubitz
: :' :  Debian Developer - glaub...@debian.org
`. `'   Freie Universitaet Berlin - glaub...@physik.fu-berlin.de
  `-GPG: 62FF 8A75 84E0 2956 9546  0006 7426 3B37 F5B5 F913
>From 48ab5733b350bb96ae3c3b1513093f8a847be9e9 Mon Sep 17 00:00:00 2001
From: Eric Snowberg 
Date: Thu, 22 Feb 2018 10:03:46 +
Subject: Add support for modern sparc64 hardware

Origin: other, https://github.com/esnowberg/grub2-sparc/tree/sparc-next-v4
Bug-Debian: https://bugs.debian.org/854568
Last-Update: 2018-03-01

Patch-Name: sparc64-support.patch
---
 grub-core/Makefile.core.def|1 +
 grub-core/boot/sparc64/ieee1275/boot.S |   10 +
 grub-core/commands/ls.c|2 +
 grub-core/commands/nativedisk.c|1 +
 grub-core/disk/ieee1275/obdisk.c   | 1079 
 grub-core/disk/ieee1275/ofdisk.c   |   30 +-
 grub-core/kern/ieee1275/cmain.c|3 +
 grub-core/kern/ieee1275/ieee1275.c |  199 +
 grub-core/kern/ieee1275/init.c |   36 +-
 grub-core/kern/ieee1275/openfw.c   |   27 +
 grub-core/kern/parser.c|1 -
 grub-core/kern/sparc64/ieee1275/ieee1275.c |   53 ++
 grub-core/osdep/linux/blocklist.c  |5 +
 grub-core/osdep/linux/ofpath.c |  194 -
 include/grub/disk.h|1 +
 include/grub/ieee1275/ieee1275.h   |   27 +
 include/grub/ieee1275/obdisk.h |   25 +
 include/grub/sparc64/ieee1275/ieee1275.h   |2 +
 util/grub-install.c|1 +
 util/ieee1275/grub-ofpathname.c|4 +-
 util/setup.c   |   87 ++-
 21 files changed, 1733 insertions(+), 55 deletions(-)
 create mode 100644 grub-core/disk/ieee1275/obdisk.c
 create mode 100644 include/grub/ieee1275/obdisk.h

Index: grub2-2.02+dfsg1/grub-core/Makefile.core.def
===
--- grub2-2.02+dfsg1.orig/grub-core/Makefile.core.def
+++ grub2-2.02+dfsg1/grub-core/Makefile.core.def
@@ -270,6 +270,7 @@ kernel = {
   sparc64_ieee1275 = kern/sparc64/cache.S;
   sparc64_ieee1275 = kern/sparc64/dl.c;
   sparc64_ieee1275 = kern/sparc64/ieee1275/ieee1275.c;
+  sparc64_ieee1275 = disk/ieee1275/obdisk.c;
 
   arm = kern/arm/dl.c;
   arm = kern/arm/dl_helper.c;
Index: grub2-2.02+dfsg1/grub-core/boot/sparc64/ieee1275/boot.S
===
--- grub2-2.02+dfsg1.orig/grub-core/boot/sparc64/ieee1275/boot.S
+++ grub2-2.02+dfsg1/grub-core/boot/sparc64/ieee1275/boot.S
@@ -69,6 +69,10 @@ prom_seek_name:		.asciz "seek"
 prom_read_name:		.asciz "read"
 prom_exit_name:		.asciz "exit"
 grub_name:		.asciz "GRUB "
+#ifdef CDBOOT
+prom_close_name:	.asciz "close"
+#endif
+
 #define GRUB_NAME_LEN	5
 
 	.align	4
@@ -213,6 +217,12 @@ bootpath_known:
 	call	prom_call_3_1_o1
 #ifdef CDBOOT
 	 LDUW_ABS(kernel_size, 0x00, %o3)
+
+	GET_ABS(prom_close_name, %o0)
+	mov	1, %g1
+	mov	0, %o5
+	call	prom_call
+	 mov	BOOTDEV_REG, %o1
 #else
 	 mov	512, %o3
 #endif
Index: grub2-2.02+dfsg1/grub-core/commands/ls.c
===
--- grub2-2.02+dfsg1.orig/grub-core/commands/ls.c
+++ grub2-2.02+dfsg1/grub-core/commands/ls.c
@@ -201,6 +201,8 @@ grub_ls_list_files (char *dirname, int l
   if (grub_errno == GRUB_ERR_UNKNOWN_FS)
 	grub_errno = GRUB_ERR_NONE;
 
+  grub_device_close (dev);
+  dev = NULL;
   grub_normal_print_device_info (device_name);
 }
   else if (fs)
Index: grub2-2.02+dfsg1/grub-core/commands/nativedisk.c
===
--- grub2-2.02+dfsg1.orig/grub-core/commands/nativedisk.c
+++ grub2-2.02+dfsg1/grub-core/commands/nativedisk.c
@@ -66,6 +66,7 @@ get_uuid (const char *name, char **uuid,
   /* Firmware disks.  */
 case GRUB_DISK_DEVICE_BIOSDISK_ID:
 case GRUB_DISK_DEVICE_OFDISK_ID:
+case GRUB_DISK_DEVICE_OBDISK_ID:
 case GRUB_DISK_DEVICE_EFIDISK_ID:
 case GRUB_DISK_DEVICE_NAND_ID:
 case GRUB_DISK_DEVICE_ARCDISK_ID:
Index: grub2-2.02+dfsg1/grub-core/disk/ieee1275/obdisk.c
===
--- /dev/null
+++ grub2-2.02+dfsg1/grub-core/disk/ieee1275/obdisk.c
@@ -0,0 +1,1079 @@
+/* obdisk.c - Open Boot disk access.  */
+/*
+ *  GRUB  --  GRand Unified Bootloader
+ *  Copyright (C) 2017 Free Software Foundation, Inc.
+ *
+ *  GRUB is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  GRUB is distributed in the hope that it will be 

Bug#891615: Upstream's thoughts

[Lennart Sorensen]

I found this:

https://bugs.freedesktop.org/show_bug.cgi?id=66722

Seems to indicate they have no intention of supporting python3 since
they believe it can be used from python3 in a different way already.

So semms they think the answer in python3 is to use GObject Introspection
(GIR)

-- 
Len Sorensen

Bug#891854: stretch-pu: package openssh/1:7.4p1-10+deb9u3

[Colin Watson]

Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu

I'd like to fix openssh CVE-2017-15906 in stretch.  A debdiff follows.
It's somewhat difficult to test because you first have to reconfigure
the Subsystem line in /etc/ssh/sshd_config to add the -R option to
sftp-server, and then you have to construct a somewhat weird request,
but I managed to do it locally.

The security team said that they'd rather this go into a stable update
since it's not really urgent enough for a DSA, so would this be
possible?

diff -Nru openssh-7.4p1/debian/.git-dpm openssh-7.4p1/debian/.git-dpm
--- openssh-7.4p1/debian/.git-dpm   2017-11-18 09:35:43.0 +
+++ openssh-7.4p1/debian/.git-dpm   2018-03-01 12:36:07.0 +
@@ -1,6 +1,6 @@
 # see git-dpm(1) from git-dpm package
-39d60bbd309be74d337685c2da524233652513f4
-39d60bbd309be74d337685c2da524233652513f4
+8fdc9f49b3be477744bd5b2da3083121752d3422
+8fdc9f49b3be477744bd5b2da3083121752d3422
 971a7653746a6972b907dfe0ce139c06e4a6f482
 971a7653746a6972b907dfe0ce139c06e4a6f482
 openssh_7.4p1.orig.tar.gz
diff -Nru openssh-7.4p1/debian/changelog openssh-7.4p1/debian/changelog
--- openssh-7.4p1/debian/changelog  2017-11-18 09:37:22.0 +
+++ openssh-7.4p1/debian/changelog  2018-03-01 15:17:53.0 +
@@ -1,3 +1,11 @@
+openssh (1:7.4p1-10+deb9u3) stretch; urgency=medium
+
+  * CVE-2017-15906: sftp-server(8): In read-only mode, sftp-server was
+incorrectly permitting creation of zero-length files. Reported by Michal
+Zalewski.
+
+ -- Colin Watson   Thu, 01 Mar 2018 15:17:53 +
+
 openssh (1:7.4p1-10+deb9u2) stretch; urgency=medium
 
   * Test configuration before starting or reloading sshd under systemd
diff -Nru openssh-7.4p1/debian/patches/CVE-2017-15906.patch 
openssh-7.4p1/debian/patches/CVE-2017-15906.patch
--- openssh-7.4p1/debian/patches/CVE-2017-15906.patch   1970-01-01 
01:00:00.0 +0100
+++ openssh-7.4p1/debian/patches/CVE-2017-15906.patch   2018-03-01 
12:36:07.0 +
@@ -0,0 +1,39 @@
+From 8fdc9f49b3be477744bd5b2da3083121752d3422 Mon Sep 17 00:00:00 2001
+From: "d...@openbsd.org" 
+Date: Tue, 4 Apr 2017 00:24:56 +
+Subject: upstream commit
+
+disallow creation (of empty files) in read-only mode;
+reported by Michal Zalewski, feedback & ok deraadt@
+
+Upstream-ID: 5d9c8f2fa8511d4ecf95322994ffe73e9283899b
+
+Origin: 
https://anongit.mindrot.org/openssh.git/commit/?id=4d827f0d75a53d3952288ab882efbddea7ffadfe
+Last-Update: 2018-03-01
+
+Patch-Name: CVE-2017-15906.patch
+---
+ sftp-server.c | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/sftp-server.c b/sftp-server.c
+index 3619cdfc..df0fb506 100644
+--- a/sftp-server.c
 b/sftp-server.c
+@@ -1,4 +1,4 @@
+-/* $OpenBSD: sftp-server.c,v 1.110 2016/09/12 01:22:38 deraadt Exp $ */
++/* $OpenBSD: sftp-server.c,v 1.111 2017/04/04 00:24:56 djm Exp $ */
+ /*
+  * Copyright (c) 2000-2004 Markus Friedl.  All rights reserved.
+  *
+@@ -691,8 +691,8 @@ process_open(u_int32_t id)
+   logit("open \"%s\" flags %s mode 0%o",
+   name, string_from_portable(pflags), mode);
+   if (readonly &&
+-  ((flags & O_ACCMODE) == O_WRONLY ||
+-  (flags & O_ACCMODE) == O_RDWR)) {
++  ((flags & O_ACCMODE) != O_RDONLY ||
++  (flags & (O_CREAT|O_TRUNC)) != 0)) {
+   verbose("Refusing open request in read-only mode");
+   status = SSH2_FX_PERMISSION_DENIED;
+   } else {
diff -Nru openssh-7.4p1/debian/patches/series 
openssh-7.4p1/debian/patches/series
--- openssh-7.4p1/debian/patches/series 2017-11-18 09:35:43.0 +
+++ openssh-7.4p1/debian/patches/series 2018-03-01 12:36:07.0 +
@@ -37,3 +37,4 @@
 fix-incoming-compression-statistics.patch
 winscp-dhgex-compat.patch
 dash-dash-before-hostname.patch
+CVE-2017-15906.patch

Thanks,

-- 
Colin Watson   [cjwat...@debian.org]

Bug#891773: Related bug #871229 (but it didn't break my system))

[Diederik de Haas]

On donderdag 1 maart 2018 17:02:28 CET John Paul Adrian Glaubitz wrote:
> I have updated the packages with the patch I just came up with:
> > https://people.debian.org/~glaubitz/grub-891773/
> 
> Can you retry?

No more segfaults :-)


signature.asc
Description: This is a digitally signed message part.

Bug#891852: ITP: pluto-jpl-eph -- command line handling of JPL ephemeres data

[Steffen Möller]

Package: wnpp
Severity: wishlist
Owner: Steffen Moeller 

* Package name    : pluto-jpl-eph
  Upstream Author : Bill Gray
* URL : https://github.com/Bill-Gray/jpl_eph
* License : GPL-2
  Programming Lang: C++
  Description : command line handling of JPL ephemeres data

The package is prepared on 
https://salsa.debian.org/debian-astro-team/pluto-jpl-eph

Bug#891773: Related bug #871229 (but it didn't break my system))

[John Paul Adrian Glaubitz]

On 03/01/2018 03:22 PM, Diederik de Haas wrote:

So it didn't seem to have fixed the issue, but maybe some additional info.
If you need other info or want me to run other (debugging) commands, let me 
know.
Preferably with detailed instructions as I just learned today how to do the 
'bt' command.


I have updated the packages with the patch I just came up with:


https://people.debian.org/~glaubitz/grub-891773/


Can you retry?

Adrian

--
 .''`.  John Paul Adrian Glaubitz
: :' :  Debian Developer - glaub...@debian.org
`. `'   Freie Universitaet Berlin - glaub...@physik.fu-berlin.de
  `-GPG: 62FF 8A75 84E0 2956 9546  0006 7426 3B37 F5B5 F913