Bug#919349: pyvo: Please remove python-astropy-helpers build dependency

2019-01-14 Thread Ole Streicher
Source: pyvo Version: 0.9.2-1 Severity: serious Dear maintainer, python-astropy-helpers (the Python 2 package) is going away soon. Therefore, please remove it as build dependency from pyvo. I is probably anyway unused and just forgotten to remove, right? Cheers Ole

Bug#919348: xfce4-screensaver: Accidental upload to unstable while fixing bug #919151

2019-01-14 Thread Jonathan Carter
Package: xfce4-screensaver Version: 0.1.3-1 Severity: important While fixing #919151, I uploaded this package to unstable when it was meant to go to experimental. This package is still beta and security-wise, we don't consider it quite ready yet to support in a stable release. So we're filing

Bug#919332: casparcg-server: FTBFS in sid (cannot find -lpthreads)

2019-01-14 Thread Petter Reinholdtsen
[Santiago Vila] > I tried to build this package in sid but it failed: Thank you for the heads up. > but the error message suggests a missing build-dependency. I agree, but libpthread is part of glibc, so it can not be that one. Perhaps libc6-dev is the missing one? Seem unlikely, given it is

Bug#919347: matrix-synapse: Logs everything to /var/log/messages by default

2019-01-14 Thread Kurt Roeckx
Package: matrix-synpase Hi, It seems that at least version 0.34.0-3~bpo9+2 logs everything to /var/log/messages, and also to /var/log/matrix-synapse/homeserver.log /var/log/messages is currently a 1.3 GB file, containing data for about 1 day. /var/log/matrix-synapse/homeserver.log on the other

Bug#919346: ruby-data-migrate: Missing tasks/databases.rake file

2019-01-14 Thread 李健秋
Package: ruby-data-migrate Version: 3.2.2-1 Severity: important Dear Ruby team, Just noticed that the `tasks/databases.rake` are exist in the source package, but doesn't get installed in the binary package. So that I got following errors: ``` root@obs-api:/#

Bug#784479: [kde4libs] Qt4's WebKit removal

2019-01-14 Thread Pino Toscano
In data lunedì 14 gennaio 2019 22:28:46 CET, Adrian Bunk ha scritto: > What is actually the overall plan for KDE4 in buster now? kdelibs 4.x will stay in buster. Period. Dropping stuff just for the sake of removal is a no-go, especially when done from people who have NO IDEA about Qt/KDE

Bug#919345: RM: alpine [kfreebsd-amd64 kfreebsd-i386] -- ROM; Old cruft package existing on non-released architectures only

2019-01-14 Thread Andreas Tille
Package: ftp.debian.org Severity: normal Hi, according to $ rmadison alpine | grep "unstable " alpine | 2.20+dfsg1-2| unstable | source, kfreebsd-amd64, kfreebsd-i386 alpine | 2.21+dfsg1-1.1 | unstable | source, amd64, arm64, armel, armhf, hurd-i386, i386,

Bug#784479: [kde4libs] Qt4's WebKit removal

2019-01-14 Thread Pino Toscano
In data lunedì 14 gennaio 2019 12:22:52 CET, Scott Kitterman ha scritto: > On Thu, 01 Nov 2018 14:04:12 -0300 Lisandro > =?ISO-8859-1?Q?Dami=E1n_Nicanor_P=E9rez?= Meyer wrote: > > On Wed, 17 Oct 2018 15:57:25 +0200 Ivo De Decker wrote: > > > Hi, > > > > > > On Fri, Nov 24, 2017 at 04:59:58PM

Bug#919344: adequate reports obsolete-conffile in openssh-client

2019-01-14 Thread shirish शिरीष
Package: openssh-client Version: 1:7.9p1-5 Severity: normal Usertags: obsolete-conffile adequate Dear Maintainer, Thank you for maintaining openssh. So much of our modern world depends on it. While updating today, adequate informs me about this - $ adequate openssh-client openssh-client:

Bug#919162: lintian.d.o apears to report many failures twice

2019-01-14 Thread Niels Thykier
Chris Lamb: > [Adding ni...@thykier.net to CC] > > Hi Ian, > >> It seems that lintian.d.o lists some (all?) failures in a binary >> package twice. > […] >> * usr/bin/grub-editenv >> * usr/bin/grub-editenv > […] > >> I failed to find the raw reports anywhere so I can't see if these are >>

Bug#919256: dnssec-trigger: Failed to upgrade: installed dnssec-trigger package post-installation script subprocess returned error exit status 1

2019-01-14 Thread Diane Trout
On Tue, 2019-01-15 at 00:08 +0100, Florian Schlichting wrote: > > Before thinking about cleanup, I'd start by making sure that fresh > installs don't re-create problems. At the moment, purging dnssec- > trigger > leaves two keypairs in /etc; and when I rm them manually, and again > install

Bug#919258: Tried purge and reinstall

2019-01-14 Thread BOGENPARADIES Richard
To make shure the problem is not caused by my installation, I purged gnome-games, than restarted the computer and reinstalled gnome-games. The behaviour of mahjongg did not change at all! Even the best lists are there, which I expected to loose through the purge. Richard

Bug#919343: tdom FTCBFS: hard codes the wrong pkg-config

2019-01-14 Thread Helmut Grohne
Source: tdom Version: 0.9.1-1 Tags: patch upstream User: helm...@debian.org Usertags: rebootstrap tdom fails to cross build from source, because and autoconf macro hard codes the build architecture pkg-config. In principle, one should be using PKG_PROG_PKG_CONFIG or even PKG_CHECK_MODULES here,

Bug#919316: bugs.debian.org: DoS with libravatar.cgi and version.cgi

2019-01-14 Thread Don Armstrong
On Mon, 14 Jan 2019, Julien Cristau wrote: > the last few days our two bugs web hosts have been struggling. We've > got apache set up with RLimitNPROC 256, which means once www-data has > that many processes fork() dies with EAGAIN. > > In the case of version.cgi that means perl forking to run

Bug#919341: libtool-bin: amd64 /usr/bin/libtool is a zero byte file

2019-01-14 Thread Cyril Brulebois
Cyril Brulebois (2019-01-15): > I'm attaching individual patches addressing these, along with a ready to > use (except for “dch -r”) source debdiff. A quick upload and further > assessment would likely be a good idea. Oops, forgot to mention → MR available if that's easier:

Bug#907072: lintian: verify AppStream metainfo metadata_license matches debian/copyright

2019-01-14 Thread Daniel Kahn Gillmor
On Mon 2019-01-14 23:50:47 +, Chris Lamb wrote: > Chris Lamb wrote: > >> > The gnupg2 source package version 2.2.9-1 has this mismatch because i >> > was sloppy. >> >> So, debian/copyright contains: >> >>Files: debian/org.gnupg.scdaemon.metainfo.xml >>Copyright: 2017 Daniel Kahn

Bug#919341: libtool-bin: amd64 /usr/bin/libtool is a zero byte file

2019-01-14 Thread Cyril Brulebois
Control: severity -1 grave Control: tag -1 patch Cyril Brulebois (2019-01-15): > For some reasons, libtool and its manpage (from the libtool-bin binary) > are “sanitized” in binary-indep, which might explain why it's only > showing up on the maintainer build which was likely using “-b”. > > > $

Bug#919342: darktable: Segfault when moving drawn mask

2019-01-14 Thread Charlie Hagedorn
Package: darktable Version: 2.6.0-1 Severity: important Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? Upgraded via apt-get dist-upgrade this morning. Darktable worked great prior to the upgrade, and has for

Bug#825383: /usr/share/hplip/doctor.py: hp-doctor will not accept sudo password and there is no root account

2019-01-14 Thread Brendon Higgins
On Saturday, 5 January 2019 1:49:47 PM EST Brian Potkin wrote: > On Fri 04 Jan 2019 at 11:58:53 -0500, Brendon Higgins wrote: > > hp-plugin, too. Do you have your upstream bug number handy? I'd like to > > follow progress (if any). > > It is referenced as a duplicate in the forwarded bug report.

Bug#919341: libtool-bin: amd64 /usr/bin/libtool is a zero byte file

2019-01-14 Thread Cyril Brulebois
Hi James, James McCoy (2019-01-14): > The amd64 package, the only one not built on a buildd, contains a > zero-byte /usr/bin/libtool. This makes it completely non-functional. For some reasons, libtool and its manpage (from the libtool-bin binary) are “sanitized” in binary-indep, which might

Bug#903201: cinnamon: CVE-2018-13054: privilege escalation in cinnamon-settings-users.py GUI

2019-01-14 Thread Andres Salomon
On Mon, Jan 14, 2019 at 5:39 PM, Andres Salomon wrote It's not a critical bug (cinnamon-settings-users continues running), it just can't update the file. That needs to be fixed upstream if it's not already, by changing ownership or deleting the old file before dropping privileges. I've

Bug#919341: libtool-bin: amd64 /usr/bin/libtool is a zero byte file

2019-01-14 Thread James McCoy
Package: libtool-bin Version: 2.4.6-7 Severity: serious File: /usr/bin/libtool The amd64 package, the only one not built on a buildd, contains a zero-byte /usr/bin/libtool. This makes it completely non-functional. $ dpkg-deb -c libtool-bin_2.4.6-7_amd64.deb drwxr-xr-x root/root 0

Bug#919340: fenix-plugins: FTBFS: configure.ac:36: error: possibly undefined macro: AC_CHECK_FT2

2019-01-14 Thread Andreas Beckmann
Source: fenix-plugins Version: 0.0.20070803-7 Severity: serious Tags: sid buster Justification: fails to build from source (but built successfully in the past) Hi, fenix-plugins cannot be rebuilt any longer in a current pbuilder sid environment: debian/rules build dh build --with autoreconf

Bug#907337: WIP packaging VCS

2019-01-14 Thread Antoine Beaupré
Control: tags -1 +pending +patch On 2018-08-26 15:27:49, David Bremner wrote: > In case someone is interested, there is some beginnings of packaging at > >https://salsa.debian.org/bremner/dateparser.git > > it is not currently in a state suitable for the archive, but it might be > a place to

Bug#919339: radicale: uwsgi config tries chdir to non-existing directory

2019-01-14 Thread Jonas Smedegaard
Quoting James Valleroy (2019-01-15 02:18:37) > Package: radicale > Version: 2.1.11-2 > Severity: normal > > I enabled the radicale config for uwsgi, and then restarted uwsgi, > which failed to start. > > # cat /var/log/uwsgi/app/radicale.log > Mon Jan 14 20:03:06 2019 - *** Starting uWSGI

Bug#704089: tzdata config script prevents non-interactive (re)configuration

2019-01-14 Thread Adam Bolte
Package: tzdata Version: 2018i-0+deb9u1 Followup-For: Bug #704089 Dear Maintainer, This is still a problem 4 years later, and I unexpectedly found myself spending time to track it down when doing configuration management. Can we please get the above patch applied *before* the Buster soft-freeze

Bug#919324: CVE-2018-20450 CVE-2018-20452

2019-01-14 Thread Dirk Eddelbuettel
On 14 January 2019 at 20:45, Evan Miller wrote: | Oddly, all four issues (#34, #35, #36, #37) seem to have disappeared from GitHub. I don’t know if the original reporter intended to close them, or what. That is ... weird. | I have an email copy of #34 but do not have access to the PoC files.

Bug#903201: cinnamon: CVE-2018-13054: privilege escalation in cinnamon-settings-users.py GUI

2019-01-14 Thread Andres Salomon
Hi, Is there a reason why this hasn't been fixed in stretch yet? The upstream commit is here: https://github.com/linuxmint/Cinnamon/commit/66e54f43f179fdf041a3e5232178a9910963cfb5 https://github.com/linuxmint/Cinnamon/commit/66e54f43f179fdf041a3e5232178a9910963cfb5.patch It applies to the

Bug#919324: CVE-2018-20450 CVE-2018-20452

2019-01-14 Thread Evan Miller
Oddly, all four issues (#34, #35, #36, #37) seem to have disappeared from GitHub. I don’t know if the original reporter intended to close them, or what. I have an email copy of #34 but do not have access to the PoC files. So without the cooperation of the reporter (Zhao Liang, Huawei Weiran

Bug#919339: radicale: uwsgi config tries chdir to non-existing directory

2019-01-14 Thread James Valleroy
Package: radicale Version: 2.1.11-2 Severity: normal I enabled the radicale config for uwsgi, and then restarted uwsgi, which failed to start. # cat /var/log/uwsgi/app/radicale.log Mon Jan 14 20:03:06 2019 - *** Starting uWSGI 2.0.17.1-debian (64bit) on [Mon Jan 14 20:03:06 2019] *** Mon Jan

Bug#879084: 879084: more info, and three possible fixes

2019-01-14 Thread Raphaël Halimi
Hi, I stumbled upon this bug with another plugin (check_rpc). I don't think it's related to #863399 at all. After enabling debug in icinga.cfg, the error message states: Can't locate utils.pm in @INC (you may need to install the utils module) (@INC contains: /usr/lib/icinga [...]). The problem

Bug#919296: git-daemon-run: fails with 'warning: git-daemon: unable to open supervise/ok: file does not exist'

2019-01-14 Thread Celejar
On Mon, 14 Jan 2019 16:27:18 -0800 Jonathan Nieder wrote: > # missing Depends > severity 919296 serious > quit > > Celejar wrote: > >> Celejar wrote: > > >>> Any attempt to manage the daemon (e.g., 'sv stat git-daemon', as per > >>> README.debian) fails with: > >>> > >>> warning: git-daemon:

Bug#919337: RM: jd -- ROM; dead upstream, not work (crash) and fork is coming

2019-01-14 Thread Hideki Yamane
package: ftp.debian.org severity: wishlist Hi, Please remove jd package that I maintain. - It doesn't work now and upstream is no longer maintained - Fork project is coming [1], I'll package it (They intend to change the name but not decide yet). [1]

Bug#919338: postgresql-11: [INTL:pt] Updated Portuguese translation - debconf messages

2019-01-14 Thread Américo Monteiro
Package: postgresql-11 Version: 11.1-2 Tags: l10n, patch Severity: wishlist Updated Portuguese translation for postgresql-11's debconf messages Translator: Américo Monteiro Feel free to use it. For translation updates please contact 'Last Translator' -- Melhores cumprimentos/Best regards,

Bug#919138: wpasupplicant: Fails to connect to some Wifi networks on version 2:2.7-3

2019-01-14 Thread Different55
On Monday, January 14, 2019 10:37 AM, Ben Greear wrote: > What is the model number of your home AP? > > Thanks, > Ben It is a Comtrend VR-3033

Bug#919336: dump1090-mutability: [INTL:pt] Updated Portuguese translation - debconf messages

2019-01-14 Thread Américo Monteiro
Package: dump1090-mutability Version: 1.15_20180310.4a16df3+dfsg-5 Tags: l10n, patch Severity: wishlist Updated Portuguese translation for dump1090-mutability's debconf messages Translator: Américo Monteiro Feel free to use it. For translation updates please contact 'Last Translator' --

Bug#919296: git-daemon-run: fails with 'warning: git-daemon: unable to open supervise/ok: file does not exist'

2019-01-14 Thread Jonathan Nieder
# missing Depends severity 919296 serious quit Celejar wrote: >> Celejar wrote: >>> Any attempt to manage the daemon (e.g., 'sv stat git-daemon', as per >>> README.debian) fails with: >>> >>> warning: git-daemon: unable to open supervise/ok: file does not exist [...] > ii runit

Bug#904152: Request: Rename "ubuntu-archive-keyring" package to "ubuntu-keyring" for consistency with Ubuntu

2019-01-14 Thread Jeremy Bicha
Hideki, I believe you need a transitional package so that people with the old package install will get upgraded to the new version. Thanks, Jeremy Bicha

Bug#919324: CVE-2018-20450 CVE-2018-20452

2019-01-14 Thread Dirk Eddelbuettel
Hi Evan, On 14 January 2019 at 19:03, Evan Miller wrote: | Hi Dirk, | | You are correct - these are issues with the underlying C library, the GitHub issues you referenced. I have not researched them specifically, but I recently fixed two issues (#36 and #37) that are possibly related: | |

Bug#919296: git-daemon-run: fails with 'warning: git-daemon: unable to open supervise/ok: file does not exist'

2019-01-14 Thread Celejar
On Mon, 14 Jan 2019 13:26:37 -0800 Jonathan Nieder wrote: > Hi again, > > Celejar wrote: > > Severity: grave > > > > Any attempt to manage the daemon (e.g., 'sv stat git-daemon', as per > > README.debian) fails with: > > > > warning: git-daemon: unable to open supervise/ok: file does not exist

Bug#919335: mpifort (3.1.3-9) infinite loop on hurd reading from stdin

2019-01-14 Thread Boud Roukema
hi again I forgot to state evidence that this is a GNU/Hurd bug: On an amd64 machine running Debian/stretch GNU/Linux, mpifort runs this test program as expected. $ cat hurd_fortran_minimal.f90 program openmpi_hurd_bug i_myid = 178 print*,'i_myid = ',i_myid,' Please type in an integer and

Bug#914565: libcap-ng 0.7.9-2

2019-01-14 Thread Dino Hüllmann
Hi, I can confirm that the patched package has solved the problem and the bug no longer occurs. Thanks to all involved, Dino

Bug#919332: casparcg-server: FTBFS in sid (cannot find -lpthreads)

2019-01-14 Thread Santiago Vila
Sorry, I don't really know if it's a missing build-depends or not, so I might better put the full build log here: https://people.debian.org/~sanvila/build-logs/casparcg-server/ Thanks.

Bug#900354: lintian: warn against guarding adduser/addgroup calls

2019-01-14 Thread Chris Lamb
Chris Lamb wrote: > > >> <@weasel> "guarding adduser calls considered harmful" > > > > > > … regardless of --system or? oh, some concrete examples of "good" and > > > "bad" would be really helpful here in ensuring we implement exactly > > > what you after if you could spend a couple of seconds

Bug#909510: please add a lintian note to inform/warn about python in the shebang (instead of python2/python2.7)

2019-01-14 Thread Chris Lamb
Adrian Bunk wrote: > > There is discussion upstream about updating PEP 394 to recommend > > soft-linking > > python to python3 on newer distributions. Not a good idea from my point of > > view, but it would be better if we remove the usage of python as a shebang > > in > > our packages.

Bug#907072: lintian: verify AppStream metainfo metadata_license matches debian/copyright

2019-01-14 Thread Chris Lamb
Chris Lamb wrote: > > The gnupg2 source package version 2.2.9-1 has this mismatch because i > > was sloppy. > > So, debian/copyright contains: > >Files: debian/org.gnupg.scdaemon.metainfo.xml >Copyright: 2017 Daniel Kahn Gillmor >Comment: This file is licensed permissively for the

Bug#909267: library-not-linked-against-libc: downgrade from error

2019-01-14 Thread Chris Lamb
Chris Lamb wrote: > > > I wonder if we would get all of the utility out of the tag if instead it > > > looked for shared libraries with no NEEDED metadata. I think it's only > > > catching libraries that aren't linked with anything else, so maybe just > > > check for that explicitly? > > > >

Bug#919335: mpifort (3.1.3-9) infinite loop on hurd reading from stdin

2019-01-14 Thread Boud Roukema
Source: openmpi Version: 3.1.3-9 Severity: important SUMMARY: mpifort (openmpi 3.1.3-9) infinite loop on hurd while reading from stdin DESCRIPTION: On GNU/Hurd, a few-line fortran program that reads an integer from stdin and outputs it to stdout, and has no calls to mpi, runs as expected when

Bug#919334: kde-standard: Please add kleopatra to Depends

2019-01-14 Thread Scott Kitterman
Package: kde-standard Version: 5:102 Severity: normal Debian ought to be making barriers to using encryption as low as we reasonably can. If you attempt to set a preferred gpg key in kmail without kleopatra installed, it fails with a very unhelpful error message. Rather than improve the error

Bug#919332: casparcg-server: FTBFS in sid (cannot find -lpthreads)

2019-01-14 Thread Santiago Vila
Package: src:casparcg-server Version: 2.2.0+dfsg-1 Severity: serious Tags: ftbfs Dear maintainer: I tried to build this package in sid but it failed: [...] debian/rules build-arch dh build-arch

Bug#919333: schroedinger-coordgenlibs: FTBFS in sid (Can't exec "cmake": No such file or directory)

2019-01-14 Thread Santiago Vila
Package: src:schroedinger-coordgenlibs Version: 1.1-1 Severity: serious Tags: ftbfs Dear maintainer: I tried to build this package in sid but it failed: [...] debian/rules build-arch dh build-arch

Bug#919266: msmtp: AppArmor profile makes .msmtprc symlink unusable

2019-01-14 Thread semente
Package: msmtp Version: 1.8.1-2 Followup-For: Bug #919266 I have the same issue. I set up my dotfiles as symlinks and would be great if AppArmor allow it. -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign

Bug#919320: nginx-extras: Would you please consider replacing Gzip module with Brotli for compression?

2019-01-14 Thread Abigaile Johannesburg
Thanks for sharing your thought. But I just checked Google's home page, it is using 'content-encoding: br'. I wonder how they curb the security concern. Then how about keeping Gzip and include length_hiding module in nginx-extra instead?

Bug#919331: wine: /run/user exists, but not /run/user/$uuid

2019-01-14 Thread Jon Daley
Package: wine Version: 4.0~rc4-2 Severity: normal I checked the patch (in bug 904041, not what was actually checked in to the source code) and I see that it only checks for /run/user, which does exist on my system. I do have pam-systemd, but not XDG_RUNTIME_DIR, as was requested in the other

Bug#919330: ITP: libapache2-mod-authn-yolo

2019-01-14 Thread Hans van Kranenburg
Package: wnpp Severity: wishlist Owner: Hans van Kranenburg * Package name: libapache2-mod-authn-yolo Version : 1.1 Upstream Author : Hans van Kranenburg * URL : https://github.com/knorrie/mod-authn-yolo/ * License : Apache-2.0 Programming Lang: C

Bug#918764: udev: "udevadm control --reload-rules" kills all processes except init

2019-01-14 Thread Michael Biebl
On Sat, 12 Jan 2019 14:54:09 +0100 Axel Beckert wrote: > I don't have local access to the affected machine for the weekend and > hence won't be able to test reboots before Monday again, though. > > I'm though also keen to know if a downgrade to udev 239 will make it > more stable again, so I'll

Bug#919256: dnssec-trigger: Failed to upgrade: installed dnssec-trigger package post-installation script subprocess returned error exit status 1

2019-01-14 Thread Florian Schlichting
On Mon, Jan 14, 2019 at 01:31:28PM -0800, Diane Trout wrote: > I'm a little worried about just rm-ing previously invalid locations for > configuration files. Might you have suggestions about how to safely > clean up dnssec-triggers configuration file mess? (At the very least it > seems like it

Bug#918322: initramfs-tools: kernel fails to boot with "Gave up waiting for root file system device"

2019-01-14 Thread Michael Biebl
Am 14.01.19 um 19:45 schrieb Isaac Gelado: > When I got the initramfs shell I also typed > > udevadm trigger --type=subsystems --action=add > udevadm trigger --type=devices --action=add > > and tried to continue the boot process, but it failed. Then I typed > > udevadm trigger --type=devices

Bug#919320: nginx-extras: Would you please consider replacing Gzip module with Brotli for compression?

2019-01-14 Thread Thomas Ward
FYI if I remember right BREACH is a risk in Brotli as well. Also Brotli has a few code level concerns that the Ubuntu Security Team saw in a cursory review that could lead to crashes which made it judged 'not suitable for inclusion'. Just wanted to share this info. On Mon, Jan 14, 2019, 17:46

Bug#919326: msmtp: account default not found: no configuration file available

2019-01-14 Thread Simon Deziel
Hi Sergio, On 2019-01-14 5:40 p.m., Sergio Mendoza wrote: > A few days ago, msmtp fails to work. It all seems to be related to the > inability to read ~/.msmtprc file. In other words it seems that > ~/.msmtprc needs to have mode 644. This is not at all desired since > sensible (private)

Bug#919326: msmtp: account default not found: no configuration file available

2019-01-14 Thread Sergio Mendoza
Dear Simon, Yes. I have now checked and I have .msmtprc as a symlink. If it is not a symlink then I have no problems and everything runs smooth. In any case this is the output you asked for: root@quetzalli:~# dmesg | grep apparmor | tail -n 20 [1064093.935900] audit: type=1400

Bug#919162: lintian.d.o apears to report many failures twice

2019-01-14 Thread Chris Lamb
[Adding ni...@thykier.net to CC] Hi Ian, > It seems that lintian.d.o lists some (all?) failures in a binary > package twice. […] > * usr/bin/grub-editenv > * usr/bin/grub-editenv […] > I failed to find the raw reports anywhere so I can't see if these are > duplicated there So I dug them out

Bug#919328: ITP: exadrums -- Software drum module (graphical user interface)

2019-01-14 Thread Jeremy Oden
Package: wnpp Severity: wishlist Owner: Jeremy Oden * Package name: exadrums Version : 0.3.0 Upstream Author : Jeremy Oden * URL : https://github.com/SpintroniK/eXaDrums * License : MIT Programming Lang: C++ Description : Software drum module

Bug#919325: iptables -nvL consumes 100% of CPU and hogs memory with kernel 5.0-rc2

2019-01-14 Thread Martin Steigerwald
I asked on LKML using similar subject about it. Not yet visible on https://lore.kernel.org/lkml/ Thanks, -- Martin

Bug#919329: ITP: r-cran-venndiagram -- Generate High-Resolution Venn and Euler Plots

2019-01-14 Thread Steffen Moeller
Package: wnpp Severity: wishlist Owner: Steffen Moeller * Package name: r-cran-venndiagram * URL : https://cran.r-project.org/web/packages/VennDiagram/ * License : GPL-2 Programming Lang: R Description : Generate High-Resolution Venn and Euler Plots To be team

Bug#919117: meson ignores all compiler flags when a --cross-file is given

2019-01-14 Thread Jussi Pakkanen
On Sun, Jan 13, 2019 at 5:35 PM Jussi Pakkanen wrote: > I updated the packaging to have the new debcrossgen script. > Unfortunately the repository is currently broken and pbuilder can not > install all the dependency packages needed to run the test suite so > binary packages can not be built. I

Bug#919327: ITP: libexadrums -- Software drum module (library)

2019-01-14 Thread Jeremy Oden
Package: wnpp Severity: wishlist Owner: Jeremy Oden * Package name: libexadrums Version : 0.3.0 Upstream Author : Jeremy Oden * URL : https://github.com/SpintroniK/libeXaDrums * License : MIT Programming Lang: C++ Description : Software drum module

Bug#919325: iptables -nvL consumes 100% of CPU and hogs memory with kernel 5.0-rc2

2019-01-14 Thread Martin Steigerwald
Martin Steigerwald - 14.01.19, 23:38: > Package: iptables > Version: 1.8.2-3 > Severity: important […] > I upgraded to self-compiled 5.0-rc2 today and found the machine to be > slow after startup. I saw iptables consuming 100% CPU, it only > responded to SIGKILL. It got restarted several times,

Bug#919326: msmtp: account default not found: no configuration file available

2019-01-14 Thread Sergio Mendoza
Package: msmtp Version: 1.8.1-2 Severity: grave Justification: renders package unusable Dear Maintainer, A few days ago, msmtp fails to work. It all seems to be related to the inability to read ~/.msmtprc file. In other words it seems that ~/.msmtprc needs to have mode 644. This is not at

Bug#919325: iptables -nvL consumes 100% of CPU and hogs memory with kernel 5.0-rc2

2019-01-14 Thread Martin Steigerwald
Package: iptables Version: 1.8.2-3 Severity: important Dear Maintainer, for now I am rating this important. If it happens for many users it may have a higher severity. It may however also be a kernel issue, as it happened after upgrading to self-compiled 5.0-rc2. I upgraded to self-compiled

Bug#918820:

2019-01-14 Thread Simon Deziel
On 2019-01-14 1:42 p.m., demuredemeanor wrote: > After testing this new configuration (and retesting after removing my > temporary apparmor force-complain symlink) msmtp seems to working for > both `pass` and the GNU stow symlink. Thanks for the testing and feedback!

Bug#919324: CVE-2018-20450 CVE-2018-20452

2019-01-14 Thread Moritz Muehlenhoff
Package: r-cran-readxl Severity: important Tags: security These two libxls issues should affect r-cran-readxl: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20450 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20452 Cheers, Moritz

Bug#919323: msmtp: apparmor blocks reading configuration file ~/.msmtprc

2019-01-14 Thread Simon Deziel
Hi Robbie, On 2019-01-14 5:28 p.m., Robbie Harwood wrote: > Package: msmtp > Version: 1.8.1-2 > Severity: important > > Dear Maintainer, > > Trying to send mail with msmtp after upgrading, it fails with "no > configuration file available". The audit line is: > > audit: type=1400

Bug#918623: dizzy: Your vendor has not defined OpenGL macro GL_FRAMEBUFFER_EXT

2019-01-14 Thread Florian Schlichting
Hi Niko, > > $ dizzy > > GPU features: [x] GLSL [x] FBOs > > Your vendor has not defined OpenGL macro GL_FRAMEBUFFER_EXT, used at > > /usr/share/perl5/Dizzy/TextureGenerator.pm line 101. > > > > I tested the same qemu VM with stretch and there it was working. > > After some tests I

Bug#919322: CVE-2019-6245 CVE-2019-6247

2019-01-14 Thread Moritz Muehlenhoff
Source: agg Severity: grave Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6245 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6247 Given that the package isn't exactly fast-moving, how about revisiting #377270 for buster? Right now we need to coordinate rebuilds

Bug#919323: msmtp: apparmor blocks reading configuration file ~/.msmtprc

2019-01-14 Thread Robbie Harwood
Package: msmtp Version: 1.8.1-2 Severity: important Dear Maintainer, Trying to send mail with msmtp after upgrading, it fails with "no configuration file available". The audit line is: audit: type=1400 audit(1547504604.078:263): apparmor="DENIED" operation="open" profile="/usr/bin/msmtp"

Bug#919321: CVE-2019-6246

2019-01-14 Thread Moritz Muehlenhoff
Source: svgpp Severity: grave Tags: security Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6246 It will also be affected by CVE-2019-6247 and CVE-2019-6245, as agg doesn't provide a shared library... So make sure to add a versioned build-deps on the fixed agg when that's

Bug#919320: nginx-extras: Would you please consider replacing Gzip module with Brotli for compression?

2019-01-14 Thread Abigaile Johannesburg
Package: nginx-extras Version: 1.14.2-2 Severity: wishlist Hello nginx maintainers, At the moment, nginx-extra package includes gzip module as one of the optional http modules. However it seems Gzip compression is vulnerable to BREACH [1] attack and the vulnerability researchers'

Bug#919319: RM: pion -- RoQA; orphaned, low popcon, no rdeps

2019-01-14 Thread Sebastian Andrzej Siewior
Package: ftp.debian.org Severity: normal Please remove pion from unstable. Its popcon is low, it has been recently orphaned (#919210) it is not fit for a release due to a RC bug and has no reverse dependencies. The old maintainer gave me his blessing [0] to file this removal. [0]

Bug#919289: [Pkg-kde-extras] Bug#919289: kile: After upgrade, kile will not open until okular installed

2019-01-14 Thread D Haley
Hi, Thanks for the quick reply. > Which kind of system is this? > > You have a mixup of stable and testing/unstable. This situation is not > supported. Its a stable system that I was upgrading to testing. It normally runs stable. The upgrade is incomplete because I was upgrading from inside

Bug#672369: "FIXME: MISSING XINCLUDE CONTENT" in reference manual

2019-01-14 Thread arielaw
Confirming that this bug is still around, 6 years later, on testing, with the exact same description. Version: 3.24.2-3 Debian Release: testing Architecture: i686 (x86_32) Any ideas on how to fix this? I can help, but I'm gonna need a pointer or two in the right direction. -- arielaw

Bug#919318: nginx-extras: Would you please consider replacing Gzip module with Brotli for compression?

2019-01-14 Thread Abigaile Johannesburg
Package: nginx-extrasVersion: 1.14.2-2Severity: wishlistHello nginx maintainers, At the moment, nginx-extra package includes gzip module as one of the optional http modules. However it seems Gzip compression is vulnerable to BREACH [1] attack and the vulnerability researchers' recommendation is

Bug#784479: [kde4libs] Qt4's WebKit removal

2019-01-14 Thread Adrian Bunk
On Mon, Jan 14, 2019 at 06:22:52AM -0500, Scott Kitterman wrote: > > That patch no longer seems to be available, so I made my own. Patches for > kde4libs and kde-runtime attached. I looked at the KDE4 packages still in > Buster and I don't believe this interferes with anything. This also

Bug#919256: dnssec-trigger: Failed to upgrade: installed dnssec-trigger package post-installation script subprocess returned error exit status 1

2019-01-14 Thread Diane Trout
On Mon, 2019-01-14 at 21:25 +0100, Florian Schlichting wrote: > Hi, > > in the course of looking into the upgrade failure, I ended up purging > dnssec-trigger and then installed it again. I notice this creates > keys > and config files in both /etc/ and /etc/dnssec-trigger?! Different to > Alex,

Bug#919296: git-daemon-run: fails with 'warning: git-daemon: unable to open supervise/ok: file does not exist'

2019-01-14 Thread Jonathan Nieder
Hi again, Celejar wrote: > Severity: grave > > Any attempt to manage the daemon (e.g., 'sv stat git-daemon', as per > README.debian) fails with: > > warning: git-daemon: unable to open supervise/ok: file does not exist [...] > Versions of packages git-daemon-run depends on: > ii adduser 3.118 >

Bug#919296: git-daemon-run: fails with 'warning: git-daemon: unable to open supervise/ok: file does not exist'

2019-01-14 Thread Jonathan Nieder
Hi, Celejar wrote: > Severity: grave > > Any attempt to manage the daemon (e.g., 'sv stat git-daemon', as per > README.debian) fails with: > > warning: git-daemon: unable to open supervise/ok: file does not exist > > I see that there's an old, archived bug about this: > >

Bug#919316: bugs.debian.org: DoS with libravatar.cgi and version.cgi

2019-01-14 Thread Julien Cristau
Package: bugs.debian.org Severity: important X-Debbugs-Cc: debian-ad...@lists.debian.org Hi, the last few days our two bugs web hosts have been struggling. We've got apache set up with RLimitNPROC 256, which means once www-data has that many processes fork() dies with EAGAIN. In the case of

Bug#919315: geeqie: Orientation keys ('[' and ']') don't work in latest geeqie release

2019-01-14 Thread Dima Kogan
Package: geeqie Version: 1:1.3-1+b1 Severity: normal Hi. These appear to not work anymore. With the geeqie in stable (1:1.3-1+b1) I can load any image, press [ and see the image rotate in response. With the latest (1:1.4+git20190106-1) when I press '[', the text in the Exif pane gets a

Bug#919217: Acknowledgement (Missing dependency on devscripts)

2019-01-14 Thread Jeroen Dekkers
Control: tag -1 +patch https://salsa.debian.org/jelmer/lintian-brush/merge_requests/1

Bug#919314: nmu: node-leveldown_1.5.0+dfsg-1, node-sqlite3_4.0.2+ds1-1

2019-01-14 Thread Andreas Beckmann
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu nmu node-leveldown_1.5.0+dfsg-1 . ANY . unstable . -m "Rebuild against nodejs-abi-64" nmu node-sqlite3_4.0.2+ds1-1 . ANY . experimental . -m "Rebuild against nodejs-abi-64" Looks like a

Bug#919313: ITP: r-cran-ffield -- Force field simulation for a set of points

2019-01-14 Thread Steffen Moeller
Package: wnpp Severity: wishlist Owner: Steffen Moeller * Package name: r-cran-ffield Version : 0.1.0 * URL : https://cran.r-project.org/web/packages/FField/index.html * License : GPL-3 Programming Lang: R Description : Force field simulation for a set

Bug#919312: ITP: git-secrets -- Prevents you from committing passwords and other sensitive information to a git repository.

2019-01-14 Thread Francois Marier
Package: wnpp Severity: wishlist Owner: Francois Marier * Package name: git-secrets Version : 1.2.1 Upstream Author : Michael Dowling * URL : https://github.com/awslabs/git-secrets * License : Apache 2.0 Programming Lang: Bash Description : Prevents

Bug#919197: Acknowledgement (qtwayland-opensource-src: FTBFS on hppa - Segmentation faults in testsuite)

2019-01-14 Thread Dmitry Shachnev
Hi John! On Sun, Jan 13, 2019 at 05:55:22PM -0500, John David Anglin wrote: > Actually, it has only been partially optimized away.  It appears the > check is still there (movb instruction) > but register r3 contains an undefined value (it is not an argument > register).  So, this seems a wrong >

Bug#912237: /etc/init.d/rpcbind: stat: not found

2019-01-14 Thread Allan Jensen
On Mon, 29 Oct 2018 16:20:06 +0100 Laurent Bigonville wrote: > Package: rpcbind > Version: 1.2.5-0.1 > Severity: important > > Hi, > > So according to [0], the LSB initscript fails to start rpcbind because > it looks for "stat" command that is not in the path, PATH is > explicitly set to

Bug#892403: starpu-contrib: build-depends on GCC 6

2019-01-14 Thread Samuel Thibault
Control: tags -1 + pending Andreas Beckmann, le lun. 14 janv. 2019 17:44:01 +0100, a ecrit: > On 2019-01-10 01:10, Samuel Thibault wrote: > > Andreas Beckmann, le jeu. 10 janv. 2019 01:02:19 +0100, a ecrit: > >> I successfully built the package with the attached patch that switched > >> to GCC 7,

Bug#917909: NMU for fribidi 1.0.5-3.1

2019-01-14 Thread Samuel Thibault
Hugh McMaster, le mer. 09 janv. 2019 22:18:52 +1100, a ecrit: > I have prepared an NMU for fribidi, fixing bugs 907792 and 917909. Thanks! I can confirm that today's daily build has RtL fixed in textmode. Samuel

Bug#916468: dune: /usr/bin/dune is already provided by the whitedune package

2019-01-14 Thread Paul Gevers
Hi whitedune maintainers, On Mon, 7 Jan 2019 14:00:45 +0100 =?UTF-8?Q?St=c3=a9phane_Glondu?= wrote: > reassign 916468 whitedune 0.30.10-2.1 > thanks > > Le 14/12/2018 à 20:24, Andreas Beckmann a écrit : > > automatic installation tests of packages that share a file and at the > > same time do

Bug#919250: RM: qtscriptgenerator -- RoQA; Obsolete, unmaintained, RC buggy

2019-01-14 Thread Scott Kitterman
On Mon, 14 Jan 2019 00:17:55 -0500 Scott Kitterman wrote: > Package: ftp.debian.org > Severity: normal > > Last maintainer upload was in 2012. Package has been out of Testing for 15 > months and will not return. This is an obsolete, unmaintained Qt4 package > that should be removed. Sigh.

Bug#919289: [Pkg-kde-extras] Bug#919289: kile: After upgrade, kile will not open until okular installed

2019-01-14 Thread Pino Toscano
Hi, In data lunedì 14 gennaio 2019 16:21:33 CET, D Haley ha scritto: > Package: kile > Version: 4:2.9.92-1 > Severity: normal > > Dear Maintainer, > > After upgrading kile from 4:2.1.3-4+b1 to 4:2.9.92-1, kile would not > open, giving an error along the lines of missing libokular. Okular was >

Bug#919256: dnssec-trigger: Failed to upgrade: installed dnssec-trigger package post-installation script subprocess returned error exit status 1

2019-01-14 Thread Axel Beckert
Hi Diane, Diane Trout wrote: > Was dnssec-triggerd running before the upgrade? I think so. > Was there then an > upgrade to openssl 1.1.1? and then finally it wouldn't start? That one was much earlier IIRC, like weeks ago. Anyway, I've now got a second machine with the same symptoms, just now

  1   2   3   >