Bug#1029218: dkms should perform reproducible build of modules

2023-04-01 Thread Daniel Richard G.
Hi Andreas, On Fri, 2023 Mar 31 09:22-04:00, Andreas Beckmann wrote: > > Do you have an example how the kernel modules differ? diffoscope might > help ... > Does this happen with all or only with certain dkms modules? The only DKMS modules I am using currently are the ones associated with

Bug#1033812: Security of systemd service file should be improved

2023-04-01 Thread Sergio Durigan Junior
Source: znc Version: 1.8.2-3 Severity: important Hello, I noticed that ZNC's service file comes with just a few settings that improve security: --8<---cut here---start->8--- ... PrivateTmp=true ProtectSystem=full ProtectHome=no PrivateDevices=true

Bug#1033809: RFS: tagainijisho/1.2.2-1 [ITP] -- Japanese dictionary and learning assistant

2023-04-01 Thread Paul Wise
On Sat, 2023-04-01 at 20:27 -0700, Bryan Gardiner wrote: > ... sponsor to help me reintroduce "tagainijisho" into Debian: Please note the extra steps needed when reintroducing packages: https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#reintroducing-packages -- bye, pabs

Bug#1030316: [Pkg-zfsonlinux-devel] Bug#1030316: trim script always exits 1 despite not failing

2023-04-01 Thread Scott Colby
Hello again, On Sat, Apr 1, 2023, at 18:46, наб wrote: > a quick skim reveals > this is because the final pipeline exits 1 because I used a && as an if; Wow, thank you for noticing that! It makes perfect sense, but I hadn't considered that particular difference between && and if. From the The

Bug#1018718: marked as pending in apache2

2023-04-01 Thread Christoph Anton Mitterer
Hey. Thanks for the fix. Am I right that this *generally* does not longer enable apache2- doc.conf per default (i.e. also on fresh installs)? Causes that would also make it fix #977014. Cheers, Chris.

Bug#1033811: unblock: mariadb/1:10.11.2-2

2023-04-01 Thread Otto Kekäläinen
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Control: affects -1 + src:mariadb Please unblock package 'mariadb' so that the bug fixes in the Debian revision 2 can be included in the release of Debian 12 "Bookworm". The package is

Bug#1033810: unblock: cyrus-imapd/3.6.1-4

2023-04-01 Thread Yadd
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock X-Debbugs-Cc: cyrus-im...@packages.debian.org Control: affects -1 + src:cyrus-imapd Please unblock package cyrus-imapd [ Reason ] debian/copyright was incomplete [ Impact ] Incomplete

Bug#1033809: RFS: tagainijisho/1.2.2-1 [ITP] -- Japanese dictionary and learning assistant

2023-04-01 Thread Bryan Gardiner
Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor to help me reintroduce "tagainijisho" into Debian: * Package name : tagainijisho Version : 1.2.2-1 Upstream contact : Alexandre Courbot * URL : https://www.tagaini.net/ *

Bug#1033770: bullseye-pu: package apache2/2.4.56-1~deb11u2

2023-04-01 Thread Yadd
Control: tags -1 - confirmed On 4/1/23 22:47, Moritz Mühlenhoff wrote: Am Sat, Apr 01, 2023 at 08:32:55AM +0400 schrieb Yadd: Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: apac...@packages.debian.org Control:

Bug#1032237: bullseye-pu: zfs-linux/2.0.3-9+deb11u1

2023-04-01 Thread Aron Xu
Control: tags -1 - moreinfo On Sun, Apr 2, 2023 at 3:10 AM Adam D. Barratt wrote: > > Control: tags -1 + moreinfo > > On Thu, 2023-03-02 at 15:33 +0800, Aron Xu wrote: > > I would like to apply a few patches to address some stability issues > > in the > > zfs-linux package in bullseye. All the

Bug#1032493: linux-image-6.1.0-5-amd64: Kernel freezes computer on CPU soft lockup - CPU thread getting stuck

2023-04-01 Thread Dario Susman
Package: src:linux Version: 6.1.20-1 Followup-For: Bug #1032493 Dear Maintainer, I'm adding current system's information to this bug. Best regards, Dario Susman -- Package-specific info: ** Version: Linux version 6.1.0-7-amd64 (debian-ker...@lists.debian.org) (gcc-12 (Debian 12.2.0-14)

Bug#1033808: ImportError: cannot import name 'Markup' from 'jinja2'

2023-04-01 Thread David Mandelberg
Package: salt-common Version: 3004.1+dfsg-2 Severity: important salt-ssh and salt-call are both giving me the error below, though with different parts at the top of the stack trace. Upstream bug is: https://github.com/saltstack/salt/issues/61848 Traceback (most recent call last): File

Bug#1028421: salt upstream lifecycle details

2023-04-01 Thread Federico Grau
Adding to this thread/bug-report per salt project and Debian packaging, salt is unfortunately probably not a good candidate for the Debian ecosystem. The salt project current (2023-04) published lifecycle only lists 1.5 years of support for typical releases. After that their "extended life

Bug#1032989: marked as done (Liferea 1.14.1-1 segfaults on startup when trying to read gsettings)

2023-04-01 Thread Martin Bergström
On 2023-04-01 19:57, Paul Gevers wrote: I have uploaded a new upstream version that includes the fix for this issue, as well as fixes for some more crashes. I would appreciate it a lot if you could install the version from unstable once it's build and report back what your experience with

Bug#1033477: linux: symlink in sticky directory not owned 0:0 behaves weirdly (EACCES if mode 1777, okay if 1755, )

2023-04-01 Thread наб
Control: forwarded -1 https://lore.kernel.org/linux-man/7818bd3c-0351-a738-fd69-14b59838c...@gmail.com/t/#mcf38b6c9ad9e6ae8f4d4ebc7d5373fe7b7f5e1f9 Control: tags -1 + fixed-upstream Applied as

Bug#1027257: bullseye-pu: package golang-github-containers-storage/1.24.8+dfsg1-2~deb11u1

2023-04-01 Thread Reinhard Tartler
On 4/1/23 3:51 PM, Adam D. Barratt wrote: Control: tags -1 + moreinfo Apologies for the delay in getting back to you on this. On Wed, 2022-12-28 at 22:26 -0500, Reinhard Tartler wrote: In order to fix CVE-2022-1227, an update to golang-github-containers- psgo is needed, more specifically,

Bug#1025654: bullseye-pu: package x4d-icons/1.2-2+deb11u1

2023-04-01 Thread Santiago Vila
El 1/4/23 a las 21:58, Adam D. Barratt escribió: Have you confirmed via a binary debdiff that there are no changes to the resulting packages? The package contents is the expected one: $ debdiff x4d-icons_1.2-2_all.deb x4d-icons_1.2-2+deb11u1_all.deb File lists identical (after any

Bug#1030316: [Pkg-zfsonlinux-devel] Bug#1030316: trim script always exits 1 despite not failing

2023-04-01 Thread наб
Control: tags -1 + patch Control: retitle -1 zfsutils-linux: trim script exits 1 if last pool not nvme-only Got the attached mail today from sd-cron; a quick skim reveals this is because the final pipeline exits 1 because I used a && as an if; there's some merit to catching errors from

Bug#1033732: linux-image-6.1.0-7-amd64: The Linux 6.1.0-7-amd64 kernel launching crashes with a panic message

2023-04-01 Thread Diederik de Haas
Control: tag -1 upstream On Saturday, 1 April 2023 22:47:35 CEST Guy Durrieu wrote: > I just finished to build the patched kernel. Well done! > After installing it, the system 6.1.0-7 boots again and run fine. > Thus the source was well identified by Bjørn Mork. This is great :-) > I just

Bug#1033804: cruft-ng: misc false positives

2023-04-01 Thread Alexandre Detiste
ller created them. I am not sure how to handle them, since they are >probably required on >wifi system and otherwise unnecessary. It comes from the "udeb"... https://sources.debian.org/src/debian-installer/20230401/debian/changelog/?hl=134#L134 > [ Holger Wansing ] > * Ad

Bug#1033740: linphone crashed when receiving a phone call

2023-04-01 Thread Marco d'Itri
On Apr 01, Dennis Filder wrote: > I cannot reproduce this here. BTW: That stack backtrace is missing > the actual error message which I need. I do not understand which message that would be: I reported the complete output of "where". If it is linphone output then I do not have it anymore: I

Bug#1033802: dropbear-initramfs: sleep and cat not found

2023-04-01 Thread Guilhem Moulin
Control: tag -1 unreproducible moreinfo On Sat, 01 Apr 2023 at 18:36:47 +0200, William Desportes wrote: > I am trying to sort out this bug, but the machine is blocked in an endless > loop > > It does /scripts/init-bottom > > And then the monitor displays in an endless loop: >

Bug#1033807: unblock: librest/0.9.1-6

2023-04-01 Thread Jeremy Bícha
] [X] all changes are documented in the d/changelog [X] I reviewed all changes and I approve them [X] attach debdiff against the package in testing [ Other info ] unblock librest/0.9.1-6 Thank you, Jeremy Bicha librest-unblock-20230401.debdiff Description: Binary data

Bug#1033564: pip install changes should be documented

2023-04-01 Thread James Addison
Package: release-notes Followup-For: Bug #1033564 X-Debbugs-Cc: anar...@debian.org Hi Antoine - this seems related to - perhaps an extension of? - some discussion on Salsa: https://salsa.debian.org/ddp-team/release-notes/-/merge_requests/142 (I'll admit that I don't tend to use 'pipx' either. I

Bug#1033732: linux-image-6.1.0-7-amd64: The Linux 6.1.0-7-amd64 kernel launching crashes with a panic message

2023-04-01 Thread Guy Durrieu
Hello everybody, I just finished to build the patched kernel. After installing it, the system 6.1.0-7 boots again and run fine. Thus the source was well identified by Bjørn Mork. I just had problems trying to install linux-headers-6.1.0-7-amd64_6.1.20-1a~test_amd64.deb, for dependencies

Bug#1002056: ITP: zlib-ng -- optimized zlib compression library

2023-04-01 Thread Guillem Jover
Hi! On Sat, 2023-03-25 at 21:24:44 +0100, David Heidelberg wrote: > I see you recently pushed some code into git, do you plan to push the code > also into Debian itself? Given that it conflicts with the zlib package, and I'm not sure it makes sense to upload just the zlib-ng specific library

Bug#995357:

2023-04-01 Thread Daniel Bareiro
Uninstalling pipewire serves as a temporary workaround so that the pulseaudio service starts automatically during operating system boot. Kind regards, Daniel

Bug#1028623: apt: "apt info" should report Multi-Arch fields

2023-04-01 Thread Dima Kogan
Thanks for replying. I get the rationale, but I'd like to find some kind of better solution here. DonKult just pointed out to me on IRC that I can get the output I want with an "apt-cache show" instead of "apt show". Which is great. But it exposes a different problem: "apt" and

Bug#1026845: bullseye-pu: package systemd/247.3-7+deb11u2

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed d-i On Thu, 2022-12-22 at 12:13 +, Luca Boccassi wrote: > We'd like to upload several bug fixes, including security fixes, for > systemd to bullseye. > The fixes come from the upstream stable branches which are covered by > CI and confirmed by reporters. >

Bug#1033806: libntru: autopkgtest regression: undefined reference

2023-04-01 Thread Paul Gevers
Source: libntru Version: 0.5-2 Severity: serious Control: tags -1 bookworm-ignore User: debian...@lists.debian.org Usertags: regression Dear maintainer(s), Your package has an autopkgtest, great. However, it fails. Can you please investigate the situation and fix it? I copied some of the

Bug#1025703: bullseye-pu: package libexplain/1.4.D001-11+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Wed, 2022-12-07 at 19:37 +0100, Santiago Vila wrote: > I'd like to make this QA upload to fix FTBFS bug #997222 in > bullseye, > plus allow compilation with kernels slightly newer than the one in > bullseye (for example bullseye-backports). > > The two patches

Bug#1025654: bullseye-pu: package x4d-icons/1.2-2+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + moreinfo On Tue, 2022-12-06 at 23:47 +0100, Santiago Vila wrote: > I'd like to fix FTBFS bug #991067 in stable using the attached > debdiff > (not uploaded yet). > Apologies for the delay in getting back to you on this. > The way the FTBFS is fixed is the same I used in

Bug#1033805: opendmarc: Segmentation fault with 3072-bit key signatures in ARC-Seal headers

2023-04-01 Thread Scott Kitterman
Package: opendmarc Version: 1.4.0~beta1+dfsg-6+deb11u1 Severity: serious Tags: upstream patch Justification: Maintainer designation Currently opendmarc in Stable, Testing, and Unstable will crash if they key used in an ARC header field is 3072 bit RSA or longer. This really needs to be fixed

Bug#1027257: bullseye-pu: package golang-github-containers-storage/1.24.8+dfsg1-2~deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + moreinfo Apologies for the delay in getting back to you on this. On Wed, 2022-12-28 at 22:26 -0500, Reinhard Tartler wrote: > In order to fix CVE-2022-1227, an update to golang-github-containers- > psgo > is needed, more specifically, >

Bug#1027258: bullseye-pu: package golang-github-containers-psgo/1.5.2-2~deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + moreinfo On Wed, 2022-12-28 at 22:40 -0500, Reinhard Tartler wrote: > Backport for CVE-2022-1227, taken from > https://github.com/containers/psgo/pull/92 > > This prevents an exploit when running 'podman top' > Apologies for the delay in getting back to you regarding this.

Bug#1029142: bullseye-pu: package geeqie/1:1.6-9+deb11u2 (pre-approval)

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + moreinfo On Wed, 2023-01-18 at 15:13 +0100, Andreas Rönnquist wrote: > The clutter library is buggy, to the extent that geeqie might crash > if > not ran without it. This fix simply removes the libchamplain > dependency > (which in it's turn depends on clutter). This makes it

Bug#1033798: unblock: lazarus/2.2.6+dfsg1-1

2023-04-01 Thread Abou Al Montacir
Control: retitle -1 unblock: lazarus/2.2.6+dfsg1-2 Another bug was fixed in order to allow building Lazarus for armel architecture. This bug is just disabling a compilation switch in a source file. The removed compilation switch forces to disable the FPU emulation, which does not have any sense

Bug#1033653: bullseye-pu: package lemonldap-ng/2.0.11+ds-4+deb11u

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Wed, 2023-03-29 at 16:26 +0400, Yadd wrote: > lemonldap-ng is vulnarable to a second factor bypass when used with > an > "AuthBasic handler" (generally used for non-browser apps). > [...] > I didn't pushed yet the already accepted patch for deb11u3 > (#1030598). >

Bug#1033415: micro: syntax highlighting doesn't work

2023-04-01 Thread Nilesh Patra
Hi Sebastian, On Fri, 24 Mar 2023 18:33:28 +0100 =?UTF-8?Q?Sebastian_H=c3=b6rberg?= wrote: > Package: micro > Version: 2.0.11-1+b1 > Severity: normal > The static binary from upstream's github works as expected. > > Could the debian package be missing the resource files? I have tried to fix

Bug#1032614: ddcutil: pre-approval request ddcutil-1.4.2-1 fixes bug #1031259

2023-04-01 Thread Sebastian Ramacher
On 2023-03-13 19:00:22 +0100, Sebastian Ramacher wrote: > On 2023-03-13 13:28:47 -0400, Sanford Rockowitz wrote: > > On 3/13/23 07:42, Sebastian Ramacher wrote: > > > On 2023-03-13 07:25:41 -0400, Sanford Rockowitz wrote: > > > > On 3/13/23 05:33, Sebastian Ramacher wrote: > > > > > On 2023-03-11

Bug#1031097: bullseye-pu: package conmon/2.0.25+ds1-1.1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sat, 2023-02-11 at 19:03 +0100, Reinhard Tartler wrote: > conmon 2.0.25 contains a bug where the container will hang when there > is lots of terminal output. You can easily reproduce like so: > > podman run -it --rm debian:latest > find / > Please go ahead;

Bug#1031630: bullseye-pu: package containerd/1.4.13~ds1-1~deb11u4

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sun, 2023-02-19 at 22:56 +0800, Shengjing Zhu wrote: > Backport patches for 2 CVE: > > * CVE-2023-25153: OCI image importer memory exhaustion > * CVE-2023-25173: Supplementary groups are not set up properly > Please go ahead; sorry for the delay. Regards, Adam

Bug#1031410: bullseye-pu: package postgis/3.1.1+dfsg-1+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Thu, 2023-02-16 at 19:38 +0100, Bas Couwenberg wrote: > As reported in #1031392, postgis 3.1.1 has an important issue with > polar > stereographic projections which was resolved in 3.1.2. > > [ Impact ] > Unusable coordinates from transformations. > Please go

Bug#1031109: bullseye-pu: package crun/0.17+dfsg-1+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sun, 2023-02-12 at 00:06 +0200, Faidon Liambotis wrote: > A no-dsa security vulnerability, CVE-2022-27650: > https://security-tracker.debian.org/tracker/CVE-2022-27650 > > [ Impact ] > Copying from the CVE: > > "A flaw was found in crun where containers were

Bug#1031926: bullseye-pu: package gtk+3.0/3.24.24-4+deb11u3

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sat, 2023-02-25 at 12:05 +, Simon McVittie wrote: > User request via #1020937: make it possible to run GTK 3 apps in > native > Wayland on some proprietary GLES-only graphics drivers (Raspberry Pi > video core, iMX/Vivante). > Please go ahead, sorry for the

Bug#1031788: bullseye-pu: package publicsuffix/20230209.2326-0+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Wed, 2023-02-22 at 13:48 -0500, Daniel Kahn Gillmor wrote: > Please consider an update to publicsuffix in debian bullseye. > > This package reflects the state of the network, and keeping it > current > is useful for all the packages that depend on it. > Please

Bug#1028623: apt: "apt info" should report Multi-Arch fields

2023-04-01 Thread Julian Andres Klode
Control: tag -1 wontfix On Sat, Apr 01, 2023 at 10:38:05AM -0700, Dima Kogan wrote: > I just realized that it also doesn't report the Architecture field, so > it's impossible to tell if a given package is Architecture:all or not. > This info is there in /var/lib/apt/lists, so it's available to

Bug#958050: hd-idle: -a parameter behaviour not consistent with -t and with the manpage

2023-04-01 Thread Tino Mettler
Am Mon, Mar 27, 2023 at 16:54:04 +0200 schrieb Tino Mettler: [...] > So yes, this is indeed inconsistent and confusing. Furthermore, the > device name lookup for -a does not report any errors when the device is > not found. One addition: the fact that nothing is logged to /var/log/hd-idle.log

Bug#1031948: bullseye-pu: package libgit2/1.1.0+dfsg.1-4+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sat, 2023-02-25 at 21:16 +0100, Tobias Frost wrote: > After fixing CVE-2023-22742 for LTS and ELTS, I'd like to see > this CVE also fixed in stable, for consistency. > > The CVE is an inproper ssh certificate validation vulnerabilty, > which allows

Bug#1032134: bullseye-pu: package node-cookiejar/2.1.2-1+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Tue, 2023-02-28 at 18:00 +0400, Yadd wrote: > node-cookiejar is vulnerable to ReDoS (CVE-2022-25901). > Please go ahead. Regards, Adam

Bug#958050: hd-idle: -a parameter behaviour not consistent with -t and with the manpage

2023-04-01 Thread Tino Mettler
Hi, according to the source code, the option parser for -a tries to resolve a symlink using a function disk_name(), the result is something like sda, sdb sdc. This function requires the full pathname including /dev. The code handling the spindown timer then uses this short name (sda, sdb, sdc)

Bug#1032237: bullseye-pu: zfs-linux/2.0.3-9+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + moreinfo On Thu, 2023-03-02 at 15:33 +0800, Aron Xu wrote: > I would like to apply a few patches to address some stability issues > in the > zfs-linux package in bullseye. All the patches are cherry-picked from > upstream > > 2.0.x and 2.1.x stable branches. > +This change

Bug#1032299: bullseye-pu: package node-css-what/4.0.0-3

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Fri, 2023-03-03 at 08:57 +, Bastien Roucariès wrote: > CVE-2022-21222/CVE-2021-33587 The package css-what before 2.1.3 are > vulnerable > to Regular Expression Denial of Service (ReDoS) due to the usage of > insecure > regular expression in the re_attr variable

Bug#1033160: bullseye-pu: package flatpak/1.10.8-0+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sat, 2023-03-18 at 16:20 +, Simon McVittie wrote: > CVE-2023-28101: A malicious Flatpak app could prevent the flatpak(1) > CLI > from displaying its permissions as intended, by having crafted > permissions > or other metadata containing terminal escape

Bug#1032921: bullseye-pu: package node-webpack/4.43.0-6+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Tue, 2023-03-14 at 08:01 +0400, Yadd wrote: > node-webpack is vulnerable to cross-realm object access > (#1032904, CVE-2023-28154) > Please go ahead. Regards, Adam

Bug#995357: pipewire: rtkit-daemon race condition causes realtime scheduling and nice-level failure

2023-04-01 Thread Daniel Bareiro
It seems that this bug is still present in current testing with pipewire 0.3.65-3: root@orion:~# grep pulse /var/log/syslog 2023-04-01T11:23:24.547424-03:00 orion systemd[1086]: Listening on pipewire-pulse.socket - PipeWire PulseAudio. 2023-04-01T11:23:24.641238-03:00 orion systemd[1086]: Started

Bug#1033759: bullseye-pu: duktape/2.5.0-2+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Fri, 2023-03-31 at 22:28 +, Thorsten Alteholz wrote: > The attached debdiff for duktape fixes CVE-2021-46322 in Bullseye. > Please go ahead. Regards, Adam

Bug#1033578: bullseye-pu: package joblib/0.17.0-4+deb11u1

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Mon, 2023-03-27 at 19:42 +0200, Helmut Grohne wrote: > Fix no-dsa security vulnerability CVE-2022-21797. > > [ Impact ] > > The n_jobs parameter of the parallel_backend, which used to be a > string > containing a Python expression, becomes restricted to fairly

Bug#1033524: Simplify the instructions for making bootable media

2023-04-01 Thread Holger Wansing
Hi, Steve McIntyre wrote (Sun, 26 Mar 2023 22:41:10 +0100): > On Sun, Mar 26, 2023 at 11:06:56PM +0200, Holger Wansing wrote: > > > > > >Am 26. März 2023 19:48:09 MESZ schrieb Steve McIntyre : > >>If anybody *does* want to keep the rest of the text, please put it in > >>an appendix called "extra

Bug#1033506: bullseye-pu: package libreoffice/1:7.0.4-4+deb11u6

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sun, 2023-03-26 at 14:23 +0200, Rene Engelhard wrote: > This fixes "CVE-2022-38745. Empty entry in Java class path risks > arbitrary code execution" just disclosed by Apache OpenOffice. > Please go ahead. Regards, Adam

Bug#1033770: bullseye-pu: package apache2/2.4.56-1~deb11u2

2023-04-01 Thread Moritz Mühlenhoff
Am Sat, Apr 01, 2023 at 08:32:55AM +0400 schrieb Yadd: > Package: release.debian.org > Severity: normal > Tags: bullseye > User: release.debian@packages.debian.org > Usertags: pu > X-Debbugs-Cc: apac...@packages.debian.org > Control: affects -1 + src:apache2 > > [ Reason ] > apache2 silently

Bug#1033770: bullseye-pu: package apache2/2.4.56-1~deb11u2

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + confirmed On Sat, 2023-04-01 at 08:32 +0400, Yadd wrote: > apache2 silently reenable apache2-doc.conf despite having been > disabled > (#1018718) > > [ Impact ] > This behavior overwrites local changes on upgrade, which is a > release-critical bug as it’s a Policy violation >

Bug#1033766: bullseye-pu: package cyrus-imapd/3.6.1-4

2023-04-01 Thread Adam D. Barratt
Control: tags -1 + moreinfo On Sat, 2023-04-01 at 07:32 +0400, Yadd wrote: > debian/copyright was incomplete > The debdiff and package version both appear to be for unstable, not bullseye. In general, an update purely to licensing information isn't sufficient to justify a rebuild and update

Bug#1033804: cruft-ng: misc false positives

2023-04-01 Thread Christian Göttsche
Package: cruft-ng Version: 0.9.54 Dear Alexandre, a couple of false-positive reports from a fresh bookworm installation. Using the recent daily script of chkrootkit result in the following files reported: /var/log/chkrootkit/chkrootkit-daily.log /var/log/chkrootkit/log.expected

Bug#1019732: apt-listbugs: undefined method `default' for " # returns password\n":String

2023-04-01 Thread Francesco Poli
On Wed, 29 Mar 2023 14:25:23 -0300 Antonio Terceiro wrote: > On Wed, Mar 29, 2023 at 03:40:21AM +0200, Vincent Lefevre wrote: > > On 2023-03-28 20:37:56 -0300, Antonio Terceiro wrote: > > > Still, I see no evidence that this is caused by the Ruby interpreter. > > > For example apt-listbugs uses a

Bug#1033669: libdatetime-timezone-perl 2.47-1+2023c flagged for acceptance

2023-04-01 Thread Adam D Barratt
package release.debian.org tags 1033669 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: libdatetime-timezone-perl

Bug#1033571: unblock: keyman/16.0.139-4

2023-04-01 Thread Paul Gevers
Control: tags -1 moreinfo On 27-03-2023 18:15, Eberhard Beilharz wrote: While keyman has autopkgtests and so would qualify for automatic migration, the tests are skipped on s390x. Ack. Included are only small changes: one is a small fix in the postinst script, -set -e +# Don't call `set

Bug#1033157: debian-archive-keyring 2021.1.1+deb11u1 flagged for acceptance

2023-04-01 Thread Adam D Barratt
package release.debian.org tags 1033157 = bullseye pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye. Thanks for your contribution! Upload details == Package: debian-archive-keyring

Bug#1004507: RFP: tagainijisho -- Japanese dictionary and learning assistant

2023-04-01 Thread Bastian Germann
Control: retitle -1 ITP: tagainijisho -- Japanese dictionary and learning assistant X-Debbugs-Cc: b...@khumba.net On Fri, 31 Mar 2023 21:15:12 -0700 Bryan Gardiner wrote: I have updated the old 1.0.2-2 packaging for the latest release, and uploaded a source package to mentors.debian.net. I

Bug#997844: grub2-common: GRUB_THEME setting broken when used with encrypted disks

2023-04-01 Thread Andres Salomon
On Mon, 25 Oct 2021 15:08:31 -0400 =?utf-8?b?4LKa4LK/4LKw4LK+4LKX4LONIOCyqOCyn+CysOCyvuCynOCzjQ==?= wrote: > Package: grub2-common > Version: 2.04-20 > Severity: normal > X-Debbugs-Cc: debb...@chiraag.me > > Dear Maintainer, > > My setup is as follows. I have 2 storage disks, one SATA HDD and

Bug#1018833: refpolicy: misc missing permissions

2023-04-01 Thread Christian Göttsche
Re-checked on a new installed bookworm system: type=PROCTITLE msg=audit(01/04/23 19:09:55.035:61) : proctitle=restorecon -vv -R -F -n -T 0 / type=PATH msg=audit(01/04/23 19:09:55.035:61) : item=0 name=/proc/sys/vm/overcommit_memory inode=14256 dev=00:14 mode=file,644 ouid=root ogid=root

Bug#1032989: marked as done (Liferea 1.14.1-1 segfaults on startup when trying to read gsettings)

2023-04-01 Thread Paul Gevers
Hi Grzegorz, H.-Dirk On 01-04-2023 19:54, Debian Bug Tracking System wrote: This means that you claim that the problem has been dealt with. I have uploaded a new upstream version that includes the fix for this issue, as well as fixes for some more crashes. I would appreciate it a lot if you

Bug#923824: libdancer2-plugin-database-perl: FTBFS randomly (failing tests)

2023-04-01 Thread Paul Gevers
Control: severity -1 serious Control: tags -1 bookworm-ignore Hi, On Tue, 21 Feb 2023 21:01:51 +0100 =?utf-8?Q?=C3=89tienne?= Mollier wrote: This looks to affect autopkgtest as well on occasions[1], so can be annoying during testing migrations. I ran into this issue today. Normally I file

Bug#1033732: linux-image-6.1.0-7-amd64: The Linux 6.1.0-7-amd64 kernel launching crashes with a panic message

2023-04-01 Thread Guy Durrieu
Thanks for your help ! That was more or less my conclusion, but it would indeed be useful to clarify that 4.1 and 4.21. are mutually exclusive. And I must admit that the # vs $ steps had escaped me :( Best regards. -- Guy Le 01/04/2023 à 18:56, Diederik de Haas a écrit : On Saturday, 1

Bug#1033732: linux-image-6.1.0-7-amd64: The Linux 6.1.0-7-amd64 kernel launching crashes with a panic message

2023-04-01 Thread Guy Durrieu
Thanks for your help ! That was more or less my conclusion, but it would indeed be useful to clarify that 4.1 and 4.21. are mutually exclusive. And I must admit that the # vs $ steps had escaped me :( Best regards. -- Guy Le 01/04/2023 à 18:56, Diederik de Haas a écrit : On Saturday, 1

Bug#1028623: apt: "apt info" should report Multi-Arch fields

2023-04-01 Thread Dima Kogan
I just realized that it also doesn't report the Architecture field, so it's impossible to tell if a given package is Architecture:all or not. This info is there in /var/lib/apt/lists, so it's available to the tool. Can we please make "apt info PACKAGE" and "apt show PACKAGE" report these fields?

Bug#1033803: [INTL:ro] Romanian debconf templates translation of xfonts-traditional

2023-04-01 Thread Remus-Gabriel Chelu
Package: xfonts-traditional Version: N/A Severity: wishlist Tags: l10n, patch Dear Maintainer, Please find attached the Romanian translation of the «xfonts-traditional» file. Thanks, Remus-Gabriel xfonts-traditional_debconf_ro.po Description: Binary data

Bug#1004130: debian logo displayed partly off screen

2023-04-01 Thread Jerome
I have another laptop that works perfectly with the same external screen. Also Bookworm, both up to date, same configurations for Plymouth, initramfs and grub. I checked the initramfs content and couldn't detect a difference related to the display. The laptop with the issue is a Thinkpad X1

Bug#1033732: linux-image-6.1.0-7-amd64: The Linux 6.1.0-7-amd64 kernel launching crashes with a panic message

2023-04-01 Thread Diederik de Haas
On Saturday, 1 April 2023 17:44:21 CEST Guy Durrieu wrote: > I am in trouble... I first did "Obtaining the kernel source", and at the > end I got a /root/linux-source-6.1/ directory. > > Then I did "Rebuilding official Debian kernel packages" and > "Preparation", and then I got among others a >

Bug#1033795: spamassassin: Spamassassin does start

2023-04-01 Thread Noah Meyerhans
On Sat, Apr 01, 2023 at 09:53:06AM -0400, Ed Lawson wrote: > Spamassassin does not start and is not functional. I have two computers > running Debian Sid and spamassissin is not working on either. When I > run systemctl status spamassassin it reports "Units spamassassin.service > could not be

Bug#1033802: dropbear-initramfs: sleep and cat not found

2023-04-01 Thread William Desportes
Package: dropbear-initramfs Severity: important I am trying to sort out this bug, but the machine is blocked in an endless loop It does /scripts/init-bottom And then the monitor displays in an endless loop: /scripts/init-premount/dropbear: line 339: sleep: not found

Bug#1033801: libqt6core5compat6-dev: Cannot install on Bullseye with backports

2023-04-01 Thread Jean-Michaël Celerier
Package: libqt6core5compat6-dev Severity: important X-Debbugs-Cc: jeanmichael.celer...@gmail.com Dear Maintainer, When I try to install the package with apt I get: libqt6core5compat6-dev : Depends: libqt6core5compat6 (= 6.3.1-2~bpo11+1) but 6.4.2-1~bpo11+1 is to be installed It can be

Bug#973822: ITP: dosbox-staging -- DOSBox Staging is a full x86 CPU emulator (independent of host architecture), capable of running DOS programs that require real or protected mode.

2023-04-01 Thread Zuhair al-Mrayyed
On Thu, 5 Nov 2020 19:37:39 +0100 Philipp Kern wrote: > On 05.11.20 17:41, David Heidelberg wrote: > > Package: wnpp > > Severity: wishlist > > Owner: David Heidelberg > > X-Debbugs-Cc: debian-de...@lists.debian.org > > > > * Package name    : dosbox-staging > >   Version : 0.76 > >  

Bug#1029962: check-missing-firmware fails to find firmware file or package on partitioned removable media

2023-04-01 Thread Pascal Hambourg
Control: tags -1 patch On 29/01/2023 at 17:27, I wrote: Observed behaviour: - When looking for a loose firmware file, check-missing-firmware calls "mountmedia" which returns after mounting the first device which can be mounted. - When looking for a firmware package, check-missing-firmware

Bug#1033732: linux-image-6.1.0-7-amd64: The Linux 6.1.0-7-amd64 kernel launching crashes with a panic message

2023-04-01 Thread Guy Durrieu
I am in trouble... I first did "Obtaining the kernel source", and at the end I got a /root/linux-source-6.1/ directory. Then I did "Rebuilding official Debian kernel packages" and "Preparation",  and then I got among others a /root/linux-source-6.1/linux-6.1.20 the content of which is

Bug#1033800: [INTL:ro] Romanian debconf templates translation of xawtv

2023-04-01 Thread Remus-Gabriel Chelu
Package: xawtv Version: N/A Severity: wishlist Tags: l10n, patch Dear Maintainer, Please find attached the Romanian translation of the «xawtv» file. Thanks, Remus-Gabriel xawtv_debconf_ro.po Description: Binary data

Bug#950920: [3dprinter-general] trimesh_3.5.25-1_amd64.changes REJECTED

2023-04-01 Thread Gregor Riepl
I experimented with the package a bit and was successful in building it, including running all the tests. My current fix for the model path issue is not very good, though: I simply patched out the relative path so it would work with the local package build directory, but it's probably better

Bug#1033732: linux-image-6.1.0-7-amd64: The Linux 6.1.0-7-amd64 kernel launching crashes with a panic message

2023-04-01 Thread Diederik de Haas
On April 1, 2023 4:31:49 PM GMT+02:00, Guy Durrieu wrote: >Thanks for your help ! > >There is something not clear for me in the section 4.2.2. Simple patching and >building... > >I ran apt-get install devscripts but I can't find any debian directory nor >patches. Is it sufficient to apply

Bug#1029588: bts: Changes in libio-socket-ssl-perl 2.078 make bts fail to send mail to mail-server via SSL/TLS - hostname verification failed

2023-04-01 Thread Dominique Dumont
Hi I've created a merge request [1] on devscript to fix this issue All the best [1] https://salsa.debian.org/debian/devscripts/-/merge_requests/343

Bug#1033799: pasystray: please update to 0.8.2 (fixes broken output switching with wireplumber)

2023-04-01 Thread Tomas Janousek
Package: pasystray Version: 0.7.1-1+b1 Severity: normal https://github.com/christophgysin/pasystray/pull/166 got merged a couple weeks ago, fixing serious issues making pasystray unusable with wireplumber and bluetooth headphones. These fixes got released in

Bug#1033798: unblock: lazarus/2.2.6+dfsg1-1

2023-04-01 Thread Abou Al Montacir
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package lazarus Lazarus is an IDE and a library for rapid application development using Free Pascal Compiler. [ Reason ] New upstream maintenance release. [ Impact ]

Bug#1033785: irssi: CVE-2023-29132

2023-04-01 Thread Salvatore Bonaccorso
On Sat, Apr 01, 2023 at 10:36:56AM +0200, Salvatore Bonaccorso wrote: > Source: irssi > Version: 1.4.3-1 > Severity: grave > Tags: security upstream > X-Debbugs-Cc: car...@debian.org, Debian Security Team > > > Hi, > > The following vulnerability was published for irssi. > >

Bug#1033732: linux-image-6.1.0-7-amd64: The Linux 6.1.0-7-amd64 kernel launching crashes with a panic message

2023-04-01 Thread Guy Durrieu
Thanks for your help ! There is something not clear for me in the section 4.2.2. Simple patching and building... I ran apt-get install devscripts but I can't find any debian directory nor patches. Is it sufficient to apply the patch given by Diederik de Haas ? Regards. -- Guy Le

Bug#1033797: [saods9] Cannot connect from IRAF to saods9

2023-04-01 Thread Ole Streicher
Package: saods9 Version: 8.4.1+repack-1 Severity: important With the current version, the connection from IRAF to saods9 fails, because ds9 does not create the UNIX socket /tmp/.IMT%d. The severity is set to "important" because interaction with IRAF is the main use case for saods9.

Bug#995156: easy-rsa: vars Autodetection

2023-04-01 Thread textshell
Bump to avoid auto removal while the fixed version ages in unstable.

Bug#1033796: Regexp::Pattern::License test code uses feature with undefined behavior

2023-04-01 Thread demerphq
Package: libregexp-pattern-license-perl Version: v3.10.0 This package (as distributed on CPAN) will fail tests on Perl 5.37.10. The code exploits historically undefined behavior which has become defined in 5.37.10. Historically perl would "accumulate" capture buffer data in a quantified subgroup

Bug#1033795: spamassassin: Spamassassin does start

2023-04-01 Thread Ed Lawson
Package: spamassassin Version: 4.0.0-4 Severity: important X-Debbugs-Cc: elaw...@grizzy.com Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? * What exactly did you do (or not do) that was effective (or

Bug#640128: mesa: low performance

2023-04-01 Thread Leandro Almeida
Dear Maintainer, I just installed the system and updated. 60 fps is not fixed. The monitor is not fully recognized at 60hz, it stays at 59.97 Solution would be better driver, for better support for everything, 4k60fps etc Improve PC hardware recognition My pc is a Lenovo Ideapad 330-15IGM 81FN

Bug#1018981: acpi: bug acpi ae not found boot and sgx, x509

2023-04-01 Thread Leandro Almeida
Dear Maintainer, I just installed the system, I don't know what causes the bug to happen, it must be acpi sgx x509 incompatibility Reverse engineering would be the solution, the bug happens all the time at boot, and in every kernel I've ever used. -- System information: Debian version: 12.0 APT

Bug#1033732: linux-image-6.1.0-7-amd64: The Linux 6.1.0-7-amd64 kernel launching crashes with a panic message

2023-04-01 Thread Salvatore Bonaccorso
Hi, On Sat, Apr 01, 2023 at 11:51:38AM +0200, Guy Durrieu wrote: > Hello, > > This is something I have never done, but I can try. > > However some time ago, for solving a previous issue, a guy from Debian > compiled for me an unofficial release including the patch to be tested, > along with

  1   2   >