Bug#1054461: krb5: annotate test dependencies

2023-10-23 Thread Helmut Grohne
Source: krb5 Version: 1.20.1-4 Severity: important Tags: patch User: helm...@debian.org Usertags: rebootstrap User: debian-cr...@lists.debian.org Usertags: cross-satisfiability Thanks for adding build-time testing to krb5! Unfortunately, this happens to break cross build support and therefore

Bug#1054460: Podman 4.7.1 file overlap with podman-compose

2023-10-23 Thread Petr Čech
Package: podman Version: 4.7.1+ds4-2 Severity: normal Hi, it seems the latest podman in experimental has file overlap with podman-compose, specificaly podman-compose.1.gz. dpkg: error processing archive /var/cache/apt/archives/podman_4.7.1+ds4-3_amd64.deb (--unpack): trying to overwrite

Bug#1054436: wand: update required for imagemagick 6.9.12.98

2023-10-23 Thread Håvard F . Aasen
On 23.10.2023 21:09, Sebastian Ramacher wrote: > Source: wand > Version: 0.6.11-2 > Severity: serious > Tags: ftbfs > Justification: fails to build from source > X-Debbugs-Cc: sramac...@debian.org > > imagemagick is currently performing a transition of its shared > libraries. wand hard-codes

Bug#1054459: debian-installer: Debian 12.2 amd64 netinst failes to find a kernel image for a Dell 7812

2023-10-23 Thread David George Henderson III
Package: debian-installer Version: debian installer found on amd64 12.2 netinst.iso Severity: important Dear Maintainer, I have several systems and have experienced this difficulty only with the Dell 7812 with an Xeon E5 CPU. The debian 12.2.0 amd64 netinst.iso boots normally and seems to

Bug#1052327: libdbd-odbc-perl: Test failure in t/rt_57957.t

2023-10-23 Thread Paul Wise
Control: tags -1 + fixed-upstream On Tue, 2023-10-10 at 12:48 +0800, Paul Wise wrote: > The fix is to increment both pointers at once. > >     *p++ = *q++; > > This fixes the libdbd-odbc-perl test failures too. > > I have sent the attached patch to upstream. Upstream released

Bug#1054434: [Pkg-javascript-devel] Bug#1054434: Bug#1054434: node-redux: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Yadd
On 10/24/23 06:25, Yadd wrote: Control: tags -1 + moreinfo On 10/23/23 23:07, Bastien Roucariès wrote: Source:  node-redux Version: 4.2.1-1 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See

Bug#1054434: [Pkg-javascript-devel] Bug#1054434: node-redux: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Yadd
Control: tags -1 + moreinfo On 10/23/23 23:07, Bastien Roucariès wrote: Source: node-redux Version: 4.2.1-1 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See website directory You should repack

Bug#1054458: ITP: mhz -- CPU frequency measurement utility

2023-10-23 Thread Benjamin Drung
Package: wnpp Severity: wishlist Owner: Benjamin Drung X-Debbugs-Cc: debian-de...@lists.debian.org, bdr...@debian.org * Package name: mhz Version : 0.0+git20230617 Upstream Contact: Willy Tarreau * URL : https://github.com/wtarreau/mhz * License : MIT

Bug#1042866: Frequent segmentation faults

2023-10-23 Thread Christophe Noisel
Hello, thank you for reporting this. I can reproduce the crash with both the current package and the last commit on the project git. Hopefully I'll fix this soon and will report here when merged with the main branch. Christophe

Bug#1054457: Remove HSIEH-* licenses from copyright file in Debian Perl packages

2023-10-23 Thread Milton Moura
Package: perl-base Version: 5.36.0-9 Description: The Perl project has removed the superfast hash algorithm that was licensed under Paul Hsieh licenses back in 2016, starting with the Perl v5.25.8 release. This can be verified here starting on line 292 :

Bug#1054306: Please install helper binaries into /usr/libexec

2023-10-23 Thread Douglas Kosovic
Hi Michael, > For consistencies sake, please consider applying the attached patch, > which moves the helper binaries to /usr/libexec. There was a new upstream version, so I updated to the newest version and incorporated the patch. If I do an update from a previously installed version using

Bug#1042111: chromium: Web Environment Integrity

2023-10-23 Thread networkException
Thanks for working on this! I noticed that this patch is not listed in the copyright file, it would be great if someone could include the header from the ungoogled-chromium repository.

Bug#1051901: 1.2.10 breaks ability to play audio using i386 binaries on amd64 host

2023-10-23 Thread Stefan Monnier
> I'd go so far to think that this is not constrained to i386 binaries on > amd64 hosts. `aplay /dev/zero` segfaults on a plain i386 host with asound > 1.2.10. Downgrading to 1.2.9 helps. Is this the same as https://github.com/alsa-project/alsa-lib/issues/352 ? Stefan

Bug#1037409: golang-golang-x-exp ftbfs with gccgo-go (both gccgo-12 and gccgo-13)

2023-10-23 Thread Nilesh Patra
Control: severity -1 important On Mon, 12 Jun 2023 18:23:39 +0530 Pirate Praveen wrote: > Package: src:golang-golang-x-exp > Version: 0.0~git20221028.83b7d23-2 > Severity: serious > > Building with golang-any changed to gccgo-go to force gccgo on amd64, > build fails with error. Full build log

Bug#1051418: Info received (obs-studio: clicking on an xcomposite window source makes obs segfault)

2023-10-23 Thread Michael Neilly
Sending in plain text so it is readable: I'm seeing the same bug in the latest Debian testing updated this morning. Specifically, if I have the following github page open in my browser clicking the xcomposite window source cases a seg fault as reported.    

Bug#1054456: ITP: python3-thumbor-plugins-gifv -- Thumbor optimizer to add support to Gifv(mp4)

2023-10-23 Thread Raphael Rossi
Package: thumbor-plugins-gifv Severity: wishlist Owner: Raphael Rossi * Package name : python3-thumbor-plugins-gifv Version : 0.1.2-1 Upstream Author : Globo * URL : https://github.com/thumbor/thumbor-plugins * License : MIT Programming Lang: Python3 Description : Thumbor optimizer to

Bug#1054455: bullseye-pu: package weborf/0.17-3

2023-10-23 Thread Salvo "LtWorf" Tomaselli
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: web...@packages.debian.org, tipos...@tiscali.it Control: affects -1 + src:weborf I have found a denial of service in all versions of weborf. It is tracked in

Bug#1054454: openstack-pkg-tools: Should-Start services are only added to AFTER= and should be added to WANTS= as well.

2023-10-23 Thread Corey Bryant
Thanks to Mauricio Faria de Oliveira for reporting this. On Mon, Oct 23, 2023 at 5:06 PM Corey Bryant wrote: > Package: openstack-pkg-tools > Version: 125 > Severity: normal > Tags: patch > User: ubuntu-de...@lists.ubuntu.com > Usertags: origin-ubuntu ubuntu-patch > > Dear Maintainer, > >

Bug#1054454: openstack-pkg-tools: Should-Start services are only added to AFTER= and should be added to WANTS= as well.

2023-10-23 Thread Corey Bryant
Package: openstack-pkg-tools Version: 125 Severity: normal Tags: patch User: ubuntu-de...@lists.ubuntu.com Usertags: origin-ubuntu ubuntu-patch Dear Maintainer, This adds Should-Start services to WANTS=. They're currently only added to AFTER=. Thanks for considering the patch. -- System

Bug#1054453: yuzu: FTBFS: Could not find a configuration file for package "Catch2" that is compatible

2023-10-23 Thread Sebastian Ramacher
Source: yuzu Version: 0-1335+ds-1.2 Severity: serious Tags: ftbfs Justification: fails to build from source (but built successfully in the past) X-Debbugs-Cc: sramac...@debian.org https://buildd.debian.org/status/fetch.php?pkg=yuzu=amd64=0-1335%2Bds-1.2%2Bb1=1698042683=0 -- Found OpenSSL:

Bug#1054452: postgresql-common: obsolete-conffile /etc/apt/apt.conf.d/01autoremove-postgresql

2023-10-23 Thread Thorsten Glaser
Package: postgresql-common Version: 225+deb11u1 Severity: normal User: debian...@lists.debian.org Usertags: adequate obsolete-conffile X-Debbugs-Cc: t...@mirbsd.de After upgrading… Unpacking postgresql-common (225+deb11u1) over (225) ... … adequate reports: postgresql-common: obsolete-conffile

Bug#1054451: src:r-cran-stanheaders: fails to migrate to testing for too long: triggers autopkgtest failures

2023-10-23 Thread Paul Gevers
Source: r-cran-stanheaders Version: 2.21.0-7-2 Severity: serious Control: close -1 2.26.28-1 Tags: sid trixie User: release.debian@packages.debian.org Usertags: out-of-sync Control: affects -1 src:r-cran-rstanarm Control: affects -1 src:r-cran-prophet Dear maintainer(s), The Release Team

Bug#1054450: src:rust-rustls-webpki: fails to migrate to testing for too long: autopkgtest regression

2023-10-23 Thread Paul Gevers
Source: rust-rustls-webpki Version: 0.101.4-5 Severity: serious Control: close -1 0.101.6-1 Tags: sid trixie User: release.debian@packages.debian.org Usertags: out-of-sync Dear maintainer(s), The Release Team considers packages that are out-of-sync between testing and unstable for more

Bug#1054446: bookworm-pu: package wolfssl/5.5.4-2+deb12u1

2023-10-23 Thread Salvatore Bonaccorso
On Mon, Oct 23, 2023 at 10:12:27PM +0200, Bastian Germann wrote: > Am 23.10.23 um 22:02 schrieb Salvatore Bonaccorso: > > > diff -Nru wolfssl-5.5.4/debian/changelog wolfssl-5.5.4/debian/changelog > > > --- wolfssl-5.5.4/debian/changelog2023-02-06 14:41:53.0 > > > + > > > +++

Bug#1053353: dacite: please make the build reproducible

2023-10-23 Thread Valentin Vidic
On Mon, Oct 02, 2023 at 02:29:34PM +0200, Chris Lamb wrote: > Whilst working on the Reproducible Builds effort [0], we noticed that > dacite could not be built reproducibly. > > This is because it shipped a bunch of nondeterminstic ~temporary build > files in the binary package, such as

Bug#1054449: pesign: Missing Pre-Depends on passwd

2023-10-23 Thread Santiago Vila
Package: pesign Version: 0.112-6 Severity: serious Tags: patch Dear maintainer: When installing this package on a minimal chroot, this is what happens: Preparing to unpack .../26-pesign_0.112-6_amd64.deb ... /var/lib/dpkg/tmp.ci/preinst: 19: groupadd: not found dpkg: error processing archive

Bug#1054323: fixed in r-cran-tmb 1.9.6-2

2023-10-23 Thread Paul Gevers
Hi Andreas, On Sun, 22 Oct 2023 13:07:16 + Debian FTP Masters wrote: r-cran-tmb (1.9.6-2) unstable; urgency=medium . * Rebuild agains rmatrix 1.6-1.1-1 Closes: #1054323 Thanks for fixing the issue. However, it seems incomplete. If I understand the situation correctly,

Bug#1054448: gnunet: Missing Depends on passwd

2023-10-23 Thread Santiago Vila
Package: gnunet Version: 0.20.0-2 Severity: serious Tags: patch Dear maintainer: When installing this package on a minimal chroot, this is what happens: Creating new GNUnet group gnunet:/var/lib/dpkg/info/gnunet.postinst: 30: groupadd: not found dpkg: error processing package gnunet

Bug#1054447: RFP: soft-serve -- mighty, self-hostable Git server for the command line

2023-10-23 Thread Antoine Beaupre
Package: wnpp Severity: wishlist X-Debbugs-Cc: debian...@lists.debian.org * Package name: soft-serve Version : 0.6.2 Upstream Contact: https://github.com/charmbracelet * URL : https://github.com/charmbracelet/soft-serve * License : MIT Programming Lang:

Bug#1054446: bookworm-pu: package wolfssl/5.5.4-2+deb12u1

2023-10-23 Thread Bastian Germann
Am 23.10.23 um 22:02 schrieb Salvatore Bonaccorso: diff -Nru wolfssl-5.5.4/debian/changelog wolfssl-5.5.4/debian/changelog --- wolfssl-5.5.4/debian/changelog 2023-02-06 14:41:53.0 + +++ wolfssl-5.5.4/debian/changelog 2023-10-23 17:46:16.0 + @@ -1,3 +1,10 @@

Bug#1054446: bookworm-pu: package wolfssl/5.5.4-2+deb12u1

2023-10-23 Thread Salvatore Bonaccorso
Hi Bastian, On Mon, Oct 23, 2023 at 09:48:45PM +0200, Bastian Germann wrote: > Package: release.debian.org > Severity: normal > Tags: bookworm > User: release.debian@packages.debian.org > Usertags: pu > X-Debbugs-CC: sirkilam...@msn.com > > Hi, > > I am including a fix for wolfssl's

Bug#1054376: liborcus: FTBFS on hppa - segmentation fault in orcus-test-xml-mapped

2023-10-23 Thread Rene Engelhard
Hi, Am 23.10.23 um 00:10 schrieb John David Anglin: The build fails on real hppa hardware (i.e., not qemu): [...] Exactly the same binary runs successfully under qemu. Maybe there is a timing issue in the orcus::file_content::~file_content destructor? That is something for you as hppa porter

Bug#1054415: cockpit-ws: remotectl command missing?

2023-10-23 Thread Martin Pitt
Wim Bertels [2023-10-23 16:06 +]: > if the manpages are generated correctly: > https://manpages.debian.org/unstable/cockpit-ws/remotectl.8.en.html > remotectl is present in unstable and testing as well? No, it's not any more in testing and unstable:

Bug#1054446: bookworm-pu: package wolfssl/5.5.4-2+deb12u1

2023-10-23 Thread Bastian Germann
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu X-Debbugs-CC: sirkilam...@msn.com Hi, I am including a fix for wolfssl's CVE-2023-3724. The vulnerability is tracked by the Security Team in #1041699 and is fixed in unstable.

Bug#1054423: RFS: python-art/6.1-1 [ITP] -- ASCII art

2023-10-23 Thread Yogeswaran Umasankar
Hi Andrey, Thanks for the info, didn't know artemis have same binary file name. You are right, it may not be a good idea to have /usr/bin/art. I believe this python library is most useful as depend for other packages rather than just creating text art at the terminal. I have excluded

Bug#1054442: forgot debdiff

2023-10-23 Thread Antoine Beaupré
And of course I forgot the debdiff, sorry! diff -Nru hash-slinger-3.1/debian/changelog hash-slinger-3.1/debian/changelog --- hash-slinger-3.1/debian/changelog 2022-02-10 01:03:46.0 -0500 +++ hash-slinger-3.1/debian/changelog 2023-10-05 10:37:58.0 -0400 @@ -1,3 +1,10 @@

Bug#1054445: softhsm2-common: Missing Depends on passwd

2023-10-23 Thread Santiago Vila
Package: softhsm2-common Version: 2.6.1-2.1 Severity: serious Tags: patch Dear maintainer: When installing this package on a minimal chroot, this is what happens: Setting up softhsm2-common (2.6.1-2.1) ... /var/lib/dpkg/info/softhsm2-common.postinst: 17: groupadd: not found This is because

Bug#1054444: golang-github-facebook-ent: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: golang-github-facebook-ent Version: 0.5.4-3 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See website directory https://sources.debian.org/src/golang-github-facebook-ent/0.5.4-3/doc/website/

Bug#1054443: node-graphql: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: node-graphql Version: 16.8.1-1 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See website directory https://sources.debian.org/src/node-graphql/16.8.1-1/website/src/pages/index.jsx/?hl=2#L2

Bug#1054442: bookworm-pu: package hash-slinger/3.1-1.1

2023-10-23 Thread Antoine Beaupre
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: hash-slin...@packages.debian.org, ond...@debian.org, team+...@tracker.debian.org Control: affects -1 + src:hash-slinger [ Reason ] When upgrading our Puppet server

Bug#1054440: reassign

2023-10-23 Thread Bastien Roucariès
control: reassign -1 ts-node signature.asc Description: This is a digitally signed message part.

Bug#1054441: node-ts-jest: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: node-ts-jest Version: 29.1.1+~cs0.2.6-2 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See website directory https://sources.debian.org/data/main/n/node-ts-jest/29.1.1%2B~cs0.2.6-2/website/

Bug#1054440: ts-node: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: ts-nod Version: 10.9.1+~cs8.8.29-1 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See website directory https://sources.debian.org/src/ts-node/10.9.1%252B~cs8.8.29-1/website/ You should

Bug#1054439: node-rjsf: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: node-rjsf Version: 5.6.2+~5.0.1-1 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See website directory

Bug#1054438: golang-entgo-ent: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: golang-entgo-ent Version: 0.11.3-4 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See website directory https://sources.debian.org/data/main/g/golang-entgo-ent/0.11.3-4/doc/website You should

Bug#1054437: golang-ariga-atlas: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: golang-ariga-atlas Version: 0.7.2-2 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See website directory https://sources.debian.org/src/golang-ariga-atlas/0.7.2-2/doc/website/ You should

Bug#1054436: wand: update required for imagemagick 6.9.12.98

2023-10-23 Thread Sebastian Ramacher
Source: wand Version: 0.6.11-2 Severity: serious Tags: ftbfs Justification: fails to build from source X-Debbugs-Cc: sramac...@debian.org imagemagick is currently performing a transition of its shared libraries. wand hard-codes these shared libraries and needs to be updated for the new SONAMEs.

Bug#1040005: ITP:magpie - window manager for the budgie desktop

2023-10-23 Thread David Mohammed
Hi Simon Yes, ftp master had concerns over the copyright file in the package. I have revised this a while back and uploaded to mentors. Unfortunately my current magpie mentor hasn't had time to rereview the copyright changes and thus re-sponsor the package. I am ever hopeful with finding some

Bug#1054435: node-react-redux: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: node-react-redux Version: 8.1.2+dfsg1+~cs1.2.3-1 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See website directory You should repack or package docusaurus and rebuild Bastien

Bug#1054434: node-redux: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: node-redux Version: 4.2.1-1 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See website directory You should repack or package docusaurus and rebuild Bastien signature.asc Description: This

Bug#1054433: node-puppeteer: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: fasttext Version: 0.9.2+ds-5 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See website directory You should repack or package docusaurus and rebuild Bastien signature.asc Description:

Bug#1054432: node-puppeteer: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: node-katex Version: 0.16.4+~cs6.1.0-1 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See: https://sources.debian.org/src/node-katex/0.16.4+~cs6.1.0-1/website/ You should repack or package

Bug#1054421: bookworm-pu: package weborf/0.19

2023-10-23 Thread Salvatore Bonaccorso
Hi, On Mon, Oct 23, 2023 at 07:07:44PM +0200, Salvo "LtWorf" Tomaselli wrote: > Package: release.debian.org > Severity: normal > Tags: bookworm > User: release.debian@packages.debian.org > Usertags: pu > X-Debbugs-Cc: web...@packages.debian.org, tipos...@tiscali.it > Control: affects -1 +

Bug#1040005: ITP:magpie - window manager for the budgie desktop

2023-10-23 Thread Simon McVittie
On Fri, 30 Jun 2023 at 21:59:48 +0100, David Mohammed wrote: > Package name : magpie ... > Magpie is a soft-fork of GNOME mutter v43.x tailored for the requirements > of the budgie-desktop. I saw that this was in the NEW queue for a while, but then disappeared. Did the ftp team have concerns

Bug#1054431: node-puppeteer: website is build with Docusaurus not packaged for debian

2023-10-23 Thread Bastien Roucariès
Source: node-puppeteer Version: 13.4.1+dfsg-2 Severity: serious Tags: ftbfs Justification: FTBFS Control: block -1 by 1054426 Dear Maintainer, The documentation is build with docusaurus. See: https://sources.debian.org/src/node-puppeteer/13.4.1+dfsg-2/website/ You should repack or package

Bug#1054430: xskat Version mismatch bug irc play

2023-10-23 Thread Adam Kubon
package: xskat version: 4.0.8 During play over irc channel /go or /go2 command causes following error: Version mismatch : X S K A T 4.0 The problem is relatively easy to solve by changing source file: text.c line 31 from: #define VERSION " X S K A T 4.0 " to #define VERSION "4.0"

Bug#1051418: obs-studio: clicking on an xcomposite window source makes obs segfault

2023-10-23 Thread Michael Neilly
I'm seeing the same bug in the latest Debian testing updated this morning. Specifically, if I have the following github page open in my browser clicking the xcomposite window source cases a seg fault as reported. https://github.com/pjreddie/darknet/issues/553 This results in a window name of 

Bug#1054429: fastdds: CVE-2023-42459

2023-10-23 Thread Moritz Mühlenhoff
Source: fastdds X-Debbugs-CC: t...@security.debian.org Severity: grave Tags: security Hi, The following vulnerability was published for fastdds. CVE-2023-42459[0]: | Fast DDS is a C++ implementation of the DDS (Data Distribution | Service) standard of the OMG (Object Management Group). In

Bug#1054428: pdm: CVE-2023-45805

2023-10-23 Thread Moritz Mühlenhoff
Source: pdm X-Debbugs-CC: t...@security.debian.org Severity: important Tags: security Hi, The following vulnerability was published for pdm. CVE-2023-45805[0]: | pdm is a Python package and dependency manager supporting the latest | PEP standards. It's possible to craft a malicious `pdm.lock`

Bug#1054427: trafficserver: CVE-2023-41752 CVE-2023-39456 CVE-2023-44487

2023-10-23 Thread Moritz Mühlenhoff
Source: trafficserver X-Debbugs-CC: t...@security.debian.org Severity: grave Tags: security Hi, The following vulnerabilities were published for trafficserver. CVE-2023-41752[0]: | Exposure of Sensitive Information to an Unauthorized Actor | vulnerability in Apache Traffic Server.This issue

Bug#1054426: RFP: docusaurus -- Docusaurus is a project for building, deploying, and maintaining open source project websites easily

2023-10-23 Thread Bastien Roucariès
Package: wnpp Severity: wishlist * Package name: docusaurus Version : 1 Upstream Contact: Facebook, Inc. and its affiliates. (Facebook, Inc. and its affiliates.) * URL : https://github.com/facebook/docusaurus * License : expat Programming Lang: javascript

Bug#1054423: RFS: python-art/6.1-1 [ITP] -- ASCII art

2023-10-23 Thread Andrey Rakhmatullin
This ships a file named /usr/bin/art. I'm not sure if it's a good idea by itself, but also the artemis package also ships a file with this name (which I'm also not sure is a good idea) and so you should follow the first paragraph of https://www.debian.org/doc/debian-policy/ch-files.html#binaries

Bug#1025789: bullseye-pu: wolfssl/4.6.0+p1-0+deb11u1_4.6.0+p1-0+deb11u2.debdiff

2023-10-23 Thread Bastian Germann
Please find a version with an additional fix for CVE-2023-3724 attached.diff -Nru wolfssl-4.6.0+p1/debian/changelog wolfssl-4.6.0+p1/debian/changelog --- wolfssl-4.6.0+p1/debian/changelog 2022-03-17 21:47:46.0 + +++ wolfssl-4.6.0+p1/debian/changelog 2023-07-22 16:08:27.0

Bug#1041699: wolfssl: CVE-2023-3724

2023-10-23 Thread Bastian Germann
On Sat, 22 Jul 2023 16:25:36 + "Jacob .." wrote:> Started the process of adding a patch to wolfssl_4.6.0+p1-0+deb11u1.1.dsc. Based on the same upstream commit, I am uploading an unstable fix as NMU so I can forward your upload to proposed-updates.diff -Nru wolfssl-5.5.4/debian/changelog

Bug#1052017: Bug#1054416: ITP: errands -- simple tasks app for GNOME

2023-10-23 Thread Leandro Cunha
Hi, On Mon, Oct 23, 2023 at 1:30 PM Jeremy Bícha wrote: > > Control: tags -1 +pending > > On Mon, Oct 23, 2023 at 12:19 PM Leandro Cunha > wrote: > > I was initially working on ITP for this package and if it's not a > > problem for you, can you include me as one of the uploders for your > >

Bug#1033791: Bug#1054401: bookworm-pu: package nagios-plugins-contrib/42.20230308+deb12u1

2023-10-23 Thread Holger Levsen
hi, On Mon, Oct 23, 2023 at 01:19:25PM +0200, Jan Wagner wrote: > [ Reason ] > As reported in #1033791, check_running_kernel fails to find version on > bookworm/(arm64|armhf). > > [ Impact ] > check_running_kernel doesn't work on arm64 and armhf as expected, this is a > regression. > > [ Tests

Bug#1053548: check-patroni: does not work well with current Patroni

2023-10-23 Thread David Prévot
Hi Michael, First of all thanks a lot for your bug report! Le Fri, Oct 06, 2023 at 09:11:32AM +0200, Michael Banck a écrit : > Package: check-patroni > Version: 1.0.0-1 > Severity: normal > Tags: patch > > Hi, > > since version 3.0.4, Patroni displays "streaming" as state if a node is >

Bug#1054424: mirror submission for mirror.marwan.ma

2023-10-23 Thread MARWAN NOC
Package: mirrors Severity: wishlist User: mirr...@packages.debian.org Usertags: mirror-submission Submission-Type: new Site: mirror.marwan.ma Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386 hurd-amd64 i386 mips mips64el mipsel powerpc ppc64el riscv64 s390x Archive-http: /debian/

Bug#1054423: RFS: python-art/6.1-1 [ITP] -- ASCII art

2023-10-23 Thread Yogeswaran Umasankar
Package: sponsorship-requests Severity: wishlist X-Debbugs-Cc: kd8...@gmail.com Dear mentors, I am looking for a sponsor for my package "python-art": * Package name : python-art Version : 6.1-1 Upstream contact : Sepand Haghighi * URL :

Bug#1054422: RFS: pointback/0.2-5 [RC] [Team] -- restore window points when returning to buffers

2023-10-23 Thread Xiyue Deng
Package: sponsorship-requests Severity: important X-Debbugs-CC: debian-emac...@lists.debian.org Dear mentors, I am looking for a sponsor for my package "pointback": * Package name : pointback Version : 0.2-5 Upstream contact : Markus Triska * URL :

Bug#1054421: bookworm-pu: package weborf/0.19

2023-10-23 Thread Salvo "LtWorf" Tomaselli
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: web...@packages.debian.org, tipos...@tiscali.it Control: affects -1 + src:weborf I have found a denial of service in all versions of weborf. It is tracked in

Bug#1054420: RFS: js2-mode/0.0~git20230628.79bc78d-1 [RC] [Team] -- Emacs mode for editing Javascript programs

2023-10-23 Thread Xiyue Deng
Package: sponsorship-requests Severity: important X-Debbugs-CC: debian-emac...@lists.debian.org Dear mentors, I am looking for a sponsor for my package "js2-mode": * Package name : js2-mode Version : 0.0~git20230628.79bc78d-1 Upstream contact : Dmitry Gutov * URL

Bug#1054419: RFS: go-mode.el/3:1.6.0+git202300823.8dce1e3-1 [RC] [Team] -- Emacs mode for editing Go code

2023-10-23 Thread Xiyue Deng
Package: sponsorship-requests Severity: important X-Debbugs-CC: debian-emac...@lists.debian.org Dear mentors, I am looking for a sponsor for my package "go-mode.el": * Package name : go-mode.el Version : 3:1.6.0+git202300823.8dce1e3-1 Upstream contact : Dominik Honnef *

Bug#970059: ITP: rust-gstreamer-play -- gstreamer's Rust bindings

2023-10-23 Thread Jeremy Bícha
Control: tags -1 + pending Control: retitle -1 ITP: rust-gstreamer-play -- gstreamer's Rust bindings Control: block 993852 by -1 I am retitling this to reflect the current status. Upstream has deprecated rust-gstreamer-player and instead distributes rust-gstreamer-play. Our initial list of apps

Bug#1054418: ITP: python-art -- ASCII art

2023-10-23 Thread Yogeswaran Umasankar
Package: wnpp Severity: wishlist Owner: Yogeswaran Umasankar X-Debbugs-Cc: debian-de...@lists.debian.org, kd8...@gmail.com * Package name: python-art Version : 6.1-1 Upstream Contact: Sepand Haghighi * URL : https://github.com/sepandhaghighi/art * License :

Bug#1054417: cve number

2023-10-23 Thread Salvo Tomaselli
Tracked in CVE-2023-46586

Bug#1052017: Bug#1054416: ITP: errands -- simple tasks app for GNOME

2023-10-23 Thread Jeremy Bícha
Control: tags -1 +pending On Mon, Oct 23, 2023 at 12:19 PM Leandro Cunha wrote: > I was initially working on ITP for this package and if it's not a > problem for you, can you include me as one of the uploders for your > package? > So the two of us closed this bug together. >

Bug#1025420: exim4: ${run}expansion fail Bug stiill open [TT#2568022]

2023-10-23 Thread SerNet Support Kevin Ivory
Hi Andreas, I installed the package https://people.debian.org/~ametzler/tmp/exim4-daemon-heavy_4.96-15+deb12u2+almostu3_amd64.deb The binary /usr/sbin/exim4 inside is from Sept 3rd: -rwsr-xr-x 1 root root 1575384 2023-09-03 13:34 /usr/sbin/exim4 That binary does not fix the problem of quote

Bug#1054417: weborf: Denial of service when executing cgi executables

2023-10-23 Thread Salvo "LtWorf" Tomaselli
Package: weborf Version: 0.20 Severity: grave Tags: patch upstream security X-Debbugs-Cc: tipos...@tiscali.it Dear Maintainer, there is an error in the code to execute cgi. Best -- System Information: Debian Release: trixie/sid APT prefers unstable APT policy: (500, 'unstable'), (500,

Bug#1054416: ITP: errands -- simple tasks app for GNOME

2023-10-23 Thread Leandro Cunha
Hi, On Mon, Oct 23, 2023 at 12:55 PM Jeremy Bícha wrote: > > Package: wnpp > Severity: wishlist > X-Debbugs-CC: debian-de...@lists.debian.org, debian-gtk-gn...@lists.debian.org > Owner: jeremy.bi...@canonical.com > > Package Name: errands > Version: 45.0.4 > Upstream Author: Vlad Krupinskii >

Bug#1054415: cockpit-ws: remotectl command missing?

2023-10-23 Thread Wim Bertels
Martin Pitt schreef op ma 23-10-2023 om 17:36 [+0200]: > > This is intended, see > https://cockpit-project.org/blog/cockpit-252.html > Hello Martin, as a follow-up to that link if the manpages are generated correctly: https://manpages.debian.org/unstable/cockpit-ws/remotectl.8.en.html

Bug#1054394: Postinst installs unsigned (unbootable) efi on secure boot systems

2023-10-23 Thread Michael Biebl
Am 23.10.23 um 11:32 schrieb sympathischerwal: Package: systemd-boot Version: 252.12-1~deb12u1 When updating systemd-boot on a system with secure-boot enabled, the postinst calls `bootctl update --graceful` which installs an unsigned efi. This will overwrite an existing efi with correct

Bug#1025420: exim4: ${run}expansion fail Bug stiill open [TT#2568022]

2023-10-23 Thread Andreas Metzler
On 2023-10-23 SerNet Support Kevin Ivory wrote: > Hello Andreas, > thanks for the info. > I am not familiar with the Repository format at > https://salsa.debian.org/exim-team/exim4/-/tree/12_bookworm?ref_type=heads > Is there a binary or a package that I can test or do > I have to patch and

Bug#1054416: ITP: errands -- simple tasks app for GNOME

2023-10-23 Thread Jeremy Bícha
Package: wnpp Severity: wishlist X-Debbugs-CC: debian-de...@lists.debian.org, debian-gtk-gn...@lists.debian.org Owner: jeremy.bi...@canonical.com Package Name: errands Version: 45.0.4 Upstream Author: Vlad Krupinskii License: Expat Programming Lang: Python Description: Simple tasks app for GNOME

Bug#967779: tome: depends on deprecated GTK 2

2023-10-23 Thread Bastian Germann
The build dependency can just be dropped, which results in the gtk frontend not being built.

Bug#1054415: cockpit-ws: remotectl command missing?

2023-10-23 Thread Wim Bertels
Martin Pitt schreef op ma 23-10-2023 om 17:36 [+0200]: > > Control: tag -1 wontfix > > > This is intended, see > https://cockpit-project.org/blog/cockpit-252.html > > Out of interest, why do you need it? Hello Martin, i was setting up the https://elephant-shed.io/ , which has this dependency in

Bug#1054147: libgraphics-magick-perl: Cannot find fonts after gsfonts transition

2023-10-23 Thread Emacksnotes
Package: libgraphicsmagick-q16-3 Version: 1.4+really1.3.42-1 Followup-For: Bug #1054147 X-Debbugs-Cc: emacksno...@gmail.com Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** To fix this problem one has to fix the paths in

Bug#1054415: cockpit-ws: remotectl command missing?

2023-10-23 Thread Martin Pitt
Control: tag -1 wontfix Hello Wim, wim [2023-10-23 17:16 +0200]: > it seems the remotectl command is missing (from bookworm and > bookworm-backports)? > (as it was included in bullseye, and is included in testing) This is intended, see https://cockpit-project.org/blog/cockpit-252.html Out of

Bug#886792: wrong results

2023-10-23 Thread Thomas Lange
When search for You have searched for packages that names contain linux-image in suite(s) stable, section(s) main, and all architectures. https://packages.debian.org/search?keywords=linux-image=names=1=stable=main I get Your keyword was too generic. Please consider using a longer keyword or

Bug#1037192: sd: version is lower than in squeeze

2023-10-23 Thread Orión González
A contributor suggested that 1.0 release should be on hold until some new features get stabilized https://github.com/chmln/sd/issues/203#issuecomment-1775390770 This might mean that the 1.0 release might take many more months.

Bug#1042576: example-script error

2023-10-23 Thread Matthias Geiger
On 23.10.23 16:14, Matthias Geiger wrote: Hi Pelle, I can't reproduce this error on my swayfx machine. I have |exec_always swaync |in my swayfx config and running |notify-send "hello world" |works just fine. That is with sway-nc 0.9.0-1 and swayfx 0.3.2. I'll retest with the latest sway;

Bug#1054415: cockpit-ws: remotectl command missing?

2023-10-23 Thread wim
Package: cockpit-ws Version: 301-1~bpo12+1 Severity: normal X-Debbugs-Cc: wim.bert...@ucll.be Hello, it seems the remotectl command is missing (from bookworm and bookworm-backports)? (as it was included in bullseye, and is included in testing) hth, Wim -- System Information: Debian Release:

Bug#1025420: exim4: ${run}expansion fail Bug stiill open [TT#2568022]

2023-10-23 Thread SerNet Support Kevin Ivory
Hello Andreas, thanks for the info. I am not familiar with the Repository format at https://salsa.debian.org/exim-team/exim4/-/tree/12_bookworm?ref_type=heads Is there a binary or a package that I can test or do I have to patch and compile? Am 23.10.23 um 14:29 schrieb Andreas Metzler: On

Bug#717778: checkinstall: mkdir -p fails (fstrans broken again?)

2023-10-23 Thread Stephen Gelman
It’s maintained, however the upstream no longer exists so I need to vet any patches myself. I will take a look at the provided patch and get it uploaded! Stephen On Oct 20, 2023 at 8:56:31 AM, Siddh Raman Pant wrote: > Is the package no longer maintained? If it is, it should be removed from >

Bug#1054414: RFP: graphmonkey -- GTK#-based graphing calculator

2023-10-23 Thread space Monkey
Package: wnpp Version: 2.0; reported 2023-10-23 Severity: wishlist * Package name: graphmonkey Version : 2.0 Upstream Author : Lounis Bellabes * URL : https://github.com/lounisB/graphMonkey * License : GPL Description : GTK#-based graphing calculator

Bug#1054412: reassign 1054412 cross-toolchain-base-ports

2023-10-23 Thread Alex Bennée
-- Alex Bennée Emulation and Virtualisation Tech Lead @ Linaro

Bug#1054413: ITP: flake8-spellcheck -- flake8 plugin that spellchecks parts of your Python code

2023-10-23 Thread Guilherme Puida Moreira
Package: wnpp Severity: wishlist Owner: Guilherme Puida Moreira X-Debbugs-Cc: debian-de...@lists.debian.org, guilhe...@puida.xyz * Package name: flake8-spellcheck Version : 0.28.0 Upstream Contact: Michael Aquilina * URL :

Bug#1052191: unicode-data: Please update for the new 15.1 release

2023-10-23 Thread Graham Inggs
Hi Alastair On Mon, 23 Oct 2023 at 10:34, Alastair McKinstry wrote: > Apologies for not treating this properly as a transition. Changes have > been limited to adding new symbols to the set, I had not thought that > this would break dependencies. It seems that every new unicode-data upstream

Bug#1020460: some people ....

2023-10-23 Thread Arno Wagner
Some people have no clue what software maintenance means. How pathetic. This thing has not been "improved", it has been fundamentally broken in 2.46. So, just took the 2.44 soruces from bullseye, compiled with a simlpe "make x" and put the binary into /usr/local/bin and archived the soruces

Bug#1054412: cross-toolchain-base-ports: Stable update request to include latest glibc

2023-10-23 Thread Alex Bennée
Package: libc6.1-dev-alpha-cross Severity: serious X-Debbugs-Cc: none Dear Maintainer, The current alpha cross toolchain can't build working static binaries due to missing the fix for bug #1028200. This is fixed in the latest bookworm glibc but this isn't included in

  1   2   >