Bug#776738: security-tracker: ignoring end-of-life packages (was: squeeze/wheezy updates of Redmine (+ long term state of redmine packaging))

2016-01-01 Thread Antoine Beaupré
On 2016-01-01 11:30:36, Raphael Hertzog wrote: > Hi, > > On Thu, 31 Dec 2015, Antoine Beaupré wrote: >> > I have thus pushed the attached patch to the git repository of >> > debian-security-support. Ccing the security team to inform them >> > of this change. >

Bug#500509: alsa-utils: /usr/share/alsa/alsa.conf should be moved to /etc

2016-01-01 Thread Antoine Beaupré
Package: libasound2-data Version: 1.0.28-1 Followup-For: Bug #500509 This is still a problem. While /etc/alsa.conf may not make sense because it is a "default configuration", now stuff like pulseaudio jumped into the fray and now configures pulseaudio automaticall to fire up whenever you talk to a

Bug#810534: borgbackup backport to jessie

2016-01-18 Thread Antoine Beaupré
On 2016-01-18 07:52:41, Danny Edel wrote: > Hi Antoine, > > Now that borgbackup is clear to enter and stay in testing again, it may > be time to revisit the backport to stable : ) > > On 01/09/2016 04:57 PM, Antoine Beaupré wrote: >> from what i understand, there are two d

Bug#811180: etckeeper: Please port it to python 3

2016-01-24 Thread Antoine Beaupré
On 2016-01-16 09:08:35, Petter Reinholdtsen wrote: > It would be great if etckeeper could be ported to python version 3, to > reduce the disk footprint of the FreedomBox system. If is one of the > last few pieces using python version 2 on the FreedomBox. Indeed. It should be fairly easy to do: on

Bug#773321: irssi-plugin-otr segfaults unexpectedly

2014-12-16 Thread Antoine Beaupré
Package: irssi-plugin-otr Version: 1.0.0-1~bpo70+1+b2 Severity: critical the otr plugin is severly damaged, both in jessie and wheezy-backports. in wheezy, irssi completely crashes after i "/load otr". this is even without the xmpp plugin loaded, so it's different from #499229. anarcat@desktop00

Bug#773321: [pkg-otr-team] Bug#773321: irssi-plugin-otr segfaults unexpectedly

2014-12-16 Thread Antoine Beaupré
On 2014-12-16 18:10:04, Holger Levsen wrote: > control: tags -1 + moreinfo > > Hi Antoine, > > On Dienstag, 16. Dezember 2014, Antoine Beaupré wrote: >> Severity: critical > >> the otr plugin is severly damaged, both in jessie and >> wheezy-backports. >&g

Bug#773321: [pkg-otr-team] Bug#773321: Bug#773321: irssi-plugin-otr segfaults unexpectedly

2014-12-17 Thread Antoine Beaupré
On 2014-12-16 18:53:54, Holger Levsen wrote: > On Mittwoch, 17. Dezember 2014, Antoine Beaupré wrote: >> i can reproduce this without the xmpp warning. which versions of irssi >> and irssi-plugin-otr do you use? > > ii irssi

Bug#770900: monkeysign: 'MonkeysignScan' object has no attribute 'dialog'

2014-11-26 Thread Antoine Beaupré
On 2014-11-26 14:21:02, Daniel Kahn Gillmor wrote: > On 11/25/2014 10:44 PM, Antoine Beaupré wrote: >> It seems you have stumbled upon a dusty path in the GTK UI that is >> neither unit tested or often used by graphical users. I believe you may >> be attempting to sign a k

Bug#770900: monkeysign: 'MonkeysignScan' object has no attribute 'dialog'

2014-11-26 Thread Antoine Beaupré
On 2014-11-26 16:20:23, Daniel Kahn Gillmor wrote: > On 11/26/2014 04:15 PM, Antoine Beaupré wrote: >> On 2014-11-26 14:21:02, Daniel Kahn Gillmor wrote: >>> The monkeyscan main window freezes and an strace reveals that the >>> process is stuck in a futex() call. >&

Bug#771403: ITP: willie -- simple, lightweight, open source, easy-to-use IRC utility bot

2014-11-29 Thread Antoine Beaupré
Package: wnpp Severity: wishlist Owner: "Antoine Beaupré" * Package name: willie Version : 4.5.1 Upstream Author : Michael Yanovich, Edward Powell, Elad Alfassa... * URL : https://github.com/embolalia/willie * License : EFLv2 Programming La

Bug#771403: Acknowledgement (ITP: willie -- simple, lightweight, open source, easy-to-use IRC utility bot)

2014-11-29 Thread Antoine Beaupré
First draft here: https://github.com/anarcat/willie/tree/debian Needs to be pushed to collab maint and copyright audit. But it works! A. -- That's one of the remarkable things about life: it's never so bad that it can't get worse. - Calvin signature.asc Description: P

Bug#771679: apache2-mpm-itk: fails to restart properly on some occasions

2014-12-01 Thread Antoine Beaupré
Package: apache2-mpm-itk Version: 2.2.22-13+deb7u3 Severity: important Since we have switched our Apache2 + mod_php web cluster to mod-itk, we have had intermittent problems starting the webservers. We have an automated system (AlternC.org) that frequently reloads the apache webservers on differe

Bug#771033: unblock: monkeysign/2.0.2 (pre-approval)

2014-12-01 Thread Antoine Beaupré
es sure this package will be easier to support for the +lifetime of jessie +* improve error handling again: distinguish different failure cases + and clearly transmit GPG errors + + -- Antoine Beaupré Mon, 01 Dec 2014 21:03:56 -0500 + monkeysign (2.0.1) unstable; urgency=medium

Bug#771759: allow installation besides discount

2014-12-01 Thread Antoine Beaupré
Source: libtext-markdown-perl Severity: wishlist I wish it could be possible to install libtext-markdown-perl next to discount. However, but discount conflicts with libtext-markdown-perl because the latter installs a `markdown` binary, which is a little surprising considering how it's "supposed" t

Bug#830502: apparmor-profiles: Reconsider what profiles are shipped in /etc/apparmor.d/ and in which mode

2017-08-11 Thread Antoine Beaupré
LGTM. -- If quantum mechanics hasn't profoundly shocked you, you haven't understood it yet. - Niels Bohr

Bug#861174: Elpy update, and Re: Bug#861174: importmagic

2017-08-19 Thread Antoine Beaupré
On 2017-08-19 16:53:44, Nicholas D Steeves wrote: > On Fri, Aug 18, 2017 at 04:31:05PM -0700, Diane Trout wrote: >> >> I packaged importmagic and it's in new right now. >> https://ftp-master.debian.org/new/importmagic_0.1.7-1.html >> >> Though following current policy I default to only building th

Bug#873036: new upstream release (0.19.3) required for magic-wormhole

2017-08-23 Thread Antoine Beaupré
On 2017-08-24 01:06:51, meejah wrote: > I am not a Debian developer myself, but let me know if there's anything > txtorcon can change to help... I think the issue is probably only in Debian, but thanks for the attention! A. -- Thousands of candles can be lit from a single candle And the life o

Bug#861124: ITP: elpa-writeroom-mode -- distraction-free writing for Emacs

2017-06-08 Thread Antoine Beaupré
On 2017-05-17 10:57:00, Nicholas D Steeves wrote: > Control: block -1 by 861772 > > Please do not upload this package yet. I'm blocking this RFP with an > RFS I filed, and have tagged it moreinfo while I investigate the > severity of a possible trademark infringement issue. I expect that to > be

Bug#865177: [monkeysphere] Bug#865177: /usr/share/monkeysphere/m/subkey_to_ssh_agent: line 123: agent-transfer: command not found

2017-06-19 Thread Antoine Beaupré
On 2017-06-19 18:11:31, Andrei Morgan wrote: > Package: monkeysphere > Version: 0.41-1 > Severity: important > Justification: renders package unusable > > Dear Maintainer, > > This seems to be related to/the same as Bug#835719. I have just upgraded > from 'jessie' to 'stretch' (i.e. debian stable u

Bug#873508: parsing horst source code fails on s390x and ppc64el

2017-08-28 Thread Antoine Beaupré
Control: severity 873508 serious Control: affects 873508 horst On 2017-08-28 15:22:20, James Clarke wrote: > As discussed on IRC, ppc64 and sparc64 are also affected; while they are > not release architectures and are thus less important, it would make > sense to fix those (and check any other Deb

Bug#873508: parsing horst source code fails on s390x and ppc64el

2017-08-28 Thread Antoine Beaupré
On 2017-08-28 20:53:02, Uwe Kleine-König wrote: > Hello, > > On 08/28/2017 04:32 PM, Antoine Beaupré wrote: >> Control: severity 873508 serious >> Control: affects 873508 horst >> >> On 2017-08-28 15:22:20, James Clarke wrote: >>> As discussed on IRC,

Bug#754972: ITP: percol -- adds flavor of interactive filtering to the traditional pipe concept of UNIX shell

2017-08-29 Thread Antoine Beaupré
Control: tags -1 +pending On 2016-08-01 15:51:53, anarcat wrote: > On Fri, Aug 28, 2015 at 10:29:02AM +0900, Kozo Nishida wrote: >> Hi Antoine, >> >> Sorry for the late reply, and thank you for your kindness. >> >> I first submit percol debian package on https://mentors.debian.net/ > > Hello, >

Bug#873508: sparse test failures on ppc32le (and other not so common archs)

2017-09-01 Thread Antoine Beaupré
On 2017-09-01 09:46:44, Uwe Kleine-König wrote: > Hello, > > On Thu, Aug 31, 2017 at 11:43:53PM +0100, Ramsay Jones wrote: >> On 31/08/17 21:55, Uwe Kleine-König wrote: >> > On Wed, Aug 30, 2017 at 08:11:49PM -0400, Christopher Li wrote: >> >> That is very much like on x86_64 missing define "#weak_

Bug#873955: RFP: selfspy -- log everything you do on the computer, for statistics/fun etc.

2017-09-07 Thread Antoine Beaupré
Control: owner -1 anar...@debian.org Control: retitle -1 ITP: selfspy -- log everything you do on the computer, for statistics/fun etc. On 2017-09-06 07:55:53, Chris Lamb wrote: > Hi Antoine, > >> May I suggest we audit the hell out of the code of tools like this >> before they come into Debian?

Bug#853258: docker.io: uses sleep to query user in maintainer script

2017-06-26 Thread Antoine Beaupré
Control: fixed -1 1.13.1~ds1-2 Control: severity -1 normal On 2017-06-26 17:34:36, Antoine Beaupre wrote: > Control: fixed -1 1.13.1~ds1-2 > > On Mon, Jan 30, 2017 at 09:31:38PM +0100, Dominik George wrote: >> One of the maintainer scripts asks the user whether it is ok to “nuke” >> docker contain

Bug#853258: docker.io: uses sleep to query user in maintainer script

2017-06-26 Thread Antoine Beaupré
On 2017-06-27 00:10:02, Dominik George wrote: > Hi, > >> I stand corrected: the following command does call sleep. >> >> /var/lib/docker/nuke-graph-directory.sh /var/lib/docker >> >> I agree this is a bug, but I disagree it is critical, because, >> technically, it's not the maintainer script that

Bug#853258: docker.io: uses sleep to query user in maintainer script

2017-06-27 Thread Antoine Beaupré
On 2017-06-27 08:11:03, Ian Campbell wrote: > If you want to be pointlessly pedantic about it then your bug is that > your maintainer script in debian/ calls a program which sleeps, whether > or not that program is called "sleep" or not. 1. I don't want to be pointlessly pedantic. 2. It's not my

Bug#866747: pv: ETA prediction suffers badly from bandwidth bursts, use exponential smoothing

2017-07-01 Thread Antoine Beaupré
Control: forwarded -1 pv-debia...@ivarch.com Hi! Thank you very much for this patch. I have forwarded it to upstream (in cc) who takes those by email. Hopefully this will be merged in the next release. A. -- Le pouvoir n'est pas à conquérir, il est à détruire - Jean-Fr

Bug#866786: Acknowledgement (unlock all crypto devices in cryptroot-unlock (remote SSH-based unlocking))

2017-07-01 Thread Antoine Beaupré
Some more information. Attached is the script I originally used. Here's the output of an interactive SSH session where I try to unlock the device(s) using the normal cryptroot-unlock command: [1002]anarcat@curie:~255$ unlock-marcos To unlock root partition, and maybe others like swap, run `crypt

Bug#866786: [pkg-cryptsetup-devel] Bug#866786: unlock all crypto devices in cryptroot-unlock (remote SSH-based unlocking)

2017-07-01 Thread Antoine Beaupré
On 2017-07-01 21:10:37, Guilhem Moulin wrote: > Hi Antoine, > > On Sat, 01 Jul 2017 at 13:35:20 -0400, Antoine Beaupre wrote: >> I used to have a custom initramfs script that would do that for me in >> jessie, but since the stretch upgrade, it stopped working, and I'm not >> exactly sure why: i jus

Bug#866786: [pkg-cryptsetup-devel] Bug#866786: Acknowledgement (unlock all crypto devices in cryptroot-unlock (remote SSH-based unlocking))

2017-07-01 Thread Antoine Beaupré
On 2017-07-01 21:11:29, Guilhem Moulin wrote: > On Sat, 01 Jul 2017 at 14:00:19 -0400, Antoine Beaupré wrote: >> Some more information. Attached is the script I originally used. > > Looks like you forgot the attachement :-P Typical. Here's /etc/initramfs-tools/hooks/crypt_un

Bug#805414: gdm3: disable pulseaudio to prevent capturing A2DP sink on session start

2017-07-01 Thread Antoine Beaupré
On 2017-07-02 02:21:13, Michael Biebl wrote: > Am 02.07.2017 um 01:26 schrieb Antoine Beaupre: > >> I think this should be fixed in a point release and it may be worth >> bumping up the severity accordingly. > > Sure, once there is a fix we can include it in a point release. Great. > So far there

Bug#866786: [pkg-cryptsetup-devel] Bug#866786: Bug#866786: unlock all crypto devices in cryptroot-unlock (remote SSH-based unlocking)

2017-07-02 Thread Antoine Beaupré
On 2017-07-02 11:44:35, Guilhem Moulin wrote: > Control: tag -1 moreinfo > > On Sat, 01 Jul 2017 at 23:16:32 +0200, Guilhem Moulin wrote: >> On Sat, 01 Jul 2017 at 16:10:01 -0400, Antoine Beaupré wrote: >>> On 2017-07-01 21:10:37, Guilhem Moulin wrote: >>>> Do

Bug#805414: gdm3: disable pulseaudio to prevent capturing A2DP sink on session start

2017-07-02 Thread Antoine Beaupré
On 2017-07-02 02:41:26, Michael Biebl wrote: > Am 02.07.2017 um 02:38 schrieb Michael Biebl: >> Am 02.07.2017 um 02:30 schrieb Antoine Beaupré: >>> Or do we treat this as a PA bug ("should release BT")? >> >> I'm not sure, actuall

Bug#866786: [pkg-cryptsetup-devel] Bug#866786: Bug#866786: unlock all crypto devices in cryptroot-unlock (remote SSH-based unlocking)

2017-07-02 Thread Antoine Beaupré
On 2017-07-02 23:16:22, Guilhem Moulin wrote: > Control: tag -1 = pending > > On Sun, 02 Jul 2017 at 17:03:53 -0400, Antoine Beaupré wrote: >> Maybe what is needed then is simply a patch to the motd to warn the user >> the command may need to be called multiple times?

Bug#805414: gdm3: disable pulseaudio to prevent capturing A2DP sink on session start

2017-07-02 Thread Antoine Beaupré
On 2017-07-02 23:16:19, Michael Biebl wrote: > Am 02.07.2017 um 23:11 schrieb Antoine Beaupré: >> On 2017-07-02 02:41:26, Michael Biebl wrote: >>> Am 02.07.2017 um 02:38 schrieb Michael Biebl: >>>> Am 02.07.2017 um 02:30 schrieb Antoine Beaupré: >>>>

Bug#805414: gdm3: disable pulseaudio to prevent capturing A2DP sink on session start

2017-07-02 Thread Antoine Beaupré
On 2017-07-02 23:43:55, Michael Biebl wrote: > Am 02.07.2017 um 23:36 schrieb Antoine Beaupré: >> On 2017-07-02 23:16:19, Michael Biebl wrote: > >>> Have you tested the workaround from the arch wiki and can you confirm it >>> works? >> >> I cannot, u

Bug#866790: postfix rules yield error and fail

2017-07-03 Thread Antoine Beaupré
On 2017-07-03 08:37:32, intrigeri wrote: > Antoine Beaupré: >> PS: seems to me like a good example why profiles-extra should be >> deployed straight to /etc :p > > One step at a time: I'd rather see AppArmor enabled by default with > a small, robust policy first. And t

Bug#805414: gdm3: disable pulseaudio to prevent capturing A2DP sink on session start

2017-07-03 Thread Antoine Beaupré
On 2017-07-03 15:46:20, Michael Biebl wrote: > Am 03.07.2017 um 00:05 schrieb Antoine Beaupré: >> On 2017-07-02 23:43:55, Michael Biebl wrote: >>> Am 02.07.2017 um 23:36 schrieb Antoine Beaupré: >>>> On 2017-07-02 23:16:19, Michael Biebl wrote: >>> >&g

Bug#805414: gdm3: disable pulseaudio to prevent capturing A2DP sink on session start

2017-07-03 Thread Antoine Beaupré
On 2017-07-03 11:10:37, Jude DaShiell wrote: > What happens to someone who only has a bluetooth keyboard and has a > bluetooth dongle connected to their computer to use bluetooth > temporarily since their usb keyboard broke? I do not believe the proposed workaround disables bluetooth altogether.

Bug#866786: unlock all crypto devices in cryptroot-unlock (remote SSH-based unlocking)

2017-07-03 Thread Antoine Beaupré
On 2017-07-03 23:21:25, Guilhem Moulin wrote: > On Sun, 02 Jul 2017 at 23:16:22 +0200, Guilhem Moulin wrote: >> On Sun, 02 Jul 2017 at 17:03:53 -0400, Antoine Beaupré wrote: >>> Maybe what is needed then is simply a patch to the motd to warn the user >>> the command may

Bug#867169: unattended upgrades don't work in wheezy

2017-07-04 Thread Antoine Beaupré
Control: fixed -1 0.93.1+nmu1 Adding the bug in CC. On 2017-07-04 22:13:44, Paul Wise wrote: > On Tue, Jul 4, 2017 at 10:02 PM, Matus UHLAR wrote: > >> I just found out that the unattended-upgrades package in wheezy does not >> upgrade packages although configured to do it. > > I note that this s

Bug#866786: unlock all crypto devices in cryptroot-unlock (remote SSH-based unlocking)

2017-07-04 Thread Antoine Beaupré
On 2017-07-04 10:34:04, Guilhem Moulin wrote: > On Mon, 03 Jul 2017 at 19:08:52 -0400, Antoine Beaupré wrote: >> On 2017-07-03 23:21:25, Guilhem Moulin wrote: >>> Actually I came up with a better solution that doesn't rely on the >>> behavior of dropbear. It passes

Bug#830502: apparmor-profiles: Reconsider what profiles are shipped in /etc/apparmor.d/ and in which mode

2017-07-04 Thread Antoine Beaupré
On 2017-07-04 09:52:55, intrigeri wrote: > Hi, > > intrig...@debian.org: >> The apparmor-profiles package ships a number of profiles in >> /etc/apparmor.d/, "in complain mode so that users can test and choose >> which are desired". This includes policy for dovecot, dnsmasq, >> avahi-daemon, ping. >

Bug#858539: should ca-certificates certdata.txt synchronize across all suites?

2017-07-06 Thread Antoine Beaupré
Hi everyone, In looking at fixing #858539 (blocking WoSign and StartCom, in CC) for wheezy, I noticed the issue was also pending in jessie. Furthermore, the idea originally raised by pabs[1] was to also update the packages for the latest changes in certdata.txt in wheezy, including the ISRG Root f

Bug#823104: monkeysign: Twice confused by package description

2017-09-16 Thread Antoine Beaupré
On 2017-09-16 16:10:13, Holger Levsen wrote: > Hi anarcat, > > sorry for not replying earlier… > > On Thu, Sep 01, 2016 at 02:46:40PM -0400, anarcat wrote: >> > I've read the package description and while I like the funny tone, I >> > also find it confusing for two reasons: >> > >> > 1.) >> > >>

Bug#823104: monkeysign: Twice confused by package description

2017-09-16 Thread Antoine Beaupré
On 2017-09-16 16:54:38, Holger Levsen wrote: > On Sat, Sep 16, 2017 at 12:35:53PM -0400, Antoine Beaupré wrote: >> Monkeysign is the project as a whole, and it has both a commandline >> interface and graphical interface. > > I see. That's a rather unfortunate naming de

Bug#876383: Acknowledgement (ITP: safeeyes -- Protect your eyes from eye strain using this simple and beautiful, yet extensible break reminder)

2017-09-21 Thread Antoine Beaupré
Well that was quick. Federico Ceratto (in cc) had a Debian package and he uploaded it to collab-maint: https://anonscm.debian.org/cgit/collab-maint/safeeyes.git/ Great! Now we need to see how it differs from upstream's Debian package and if we want to merge it with upstream: https://github.com/

Bug#861174: RFP: elpa-elpy -- Emacs Python Development Environment

2017-07-14 Thread Antoine Beaupré
On 2017-07-12 11:14:40, Nicholas Steeves wrote: > On 26 April 2017 at 21:55, Antoine Beaupré wrote: >> On 2017-04-26 21:26:33, Nicholas Steeves wrote: >>> By the way, what kind of a timeline do you have in mind? >> >> I'm away for a month, so no rush. :) > &g

Bug#867169: NMU pending: fixing unattended-upgrades in wheezy

2017-07-17 Thread Antoine Beaupré
5-06-29 02:18:42.0 -0400 +++ unattended-upgrades-0.79.5+wheezy3/debian/changelog 2017-07-17 15:12:33.0 -0400 @@ -1,3 +1,11 @@ +unattended-upgrades (0.79.5+wheezy3) UNRELEASED; urgency=high + + * Non-maintainer upload by the LTS Security Team. + * add "oldoldstable"

Bug#858539: should ca-certificates certdata.txt synchronize across all suites?

2017-07-17 Thread Antoine Beaupré
On 2017-07-07 16:02:51, Guido Günther wrote: > On Fri, Jul 07, 2017 at 03:57:35PM +0200, Philipp Kern wrote: >> On 07/06/2017 08:01 PM, Antoine Beaupré wrote: >> > In looking at fixing #858539 (blocking WoSign and StartCom, in CC) for >> > wheezy, I noticed the issue

Bug#868728: cups requires do lpadmin configuration to share printers

2017-07-18 Thread Antoine Beaupré
On 2017-07-18 17:19:08, Brian Potkin wrote: > On Mon 17 Jul 2017 at 20:56:48 -0400, Antoine Beaupre wrote: > >> Package: cups >> Version: 2.2.1-8 >> Severity: normal >> >> Hi! > > Hello Antoine. Thank you for your report. > >> When trying to share my printers with my roommates through the CUPS >

Bug#868728: cups requires do lpadmin configuration to share printers

2017-07-18 Thread Antoine Beaupré
On 2017-07-18 23:17:10, Brian Potkin wrote: > On Tue 18 Jul 2017 at 14:43:19 -0400, Antoine Beaupré wrote: > >> On 2017-07-18 17:19:08, Brian Potkin wrote: >> >> https://wiki.debian.org/PrintQueuesCUPS#Double_Filtering >> >> Reading that section just makes

Bug#868728: cups requires do lpadmin configuration to share printers

2017-07-18 Thread Antoine Beaupré
On 2017-07-19 00:23:32, Brian Potkin wrote: > Just a normal misconfiguration. Tell them not to do double filtering. > It's evil and completely unnecessary. I guess this is the root of the problem. I don't even know how they/I did that in the first place. I wouldn't even know how to undo the `lpad

Bug#867169: NMU pending: fixing unattended-upgrades in wheezy

2017-07-19 Thread Antoine Beaupré
Control: fixed 867169 0.79.5+wheezy3 This has now been fixed in 0.79.5+wheezy3 in wheezy. I have sent the DLA 1032-1 advisory to that regard. I have also verified that jessie will not have this problem: it uses the codename, not the archive name, so it will transition fine. A. -- I'm sorry if

Bug#858539: should ca-certificates certdata.txt synchronize across all suites?

2017-07-19 Thread Antoine Beaupré
On 2017-07-19 11:35:56, Michael Shuler wrote: > On 07/06/2017 11:13 PM, Paul Wise wrote: >> On Fri, Jul 7, 2017 at 2:01 AM, Antoine Beaupré wrote: >> >>> For what it's worth, my opinion is that we should attempt to synchronize >>> certdata.txt (and blac

Bug#858373: help needed to complete regression fix for apache2 Bug#858373

2017-07-19 Thread Antoine Beaupré
duced +something like CVE-2015-0253 when fixing CVE-2016-8743 (Closes: +#858373) + + -- Antoine Beaupré Wed, 19 Jul 2017 14:12:44 -0400 + apache2 (2.2.22-13+deb7u10) wheezy-security; urgency=high * CVE-2017-9788: The value placeholder in [Proxy-]Authorization headers of diff -Nru ap

Bug#867718: CVE-2017-11108

2017-07-20 Thread Antoine Beaupré
Control: forwarded -1 https://github.com/the-tcpdump-group/tcpdump/issues/616 Control: tags -1 +patch Opened an issue upstream, as recommended by the RedHat security folks. Also sent a pull request for the fix: https://github.com/the-tcpdump-group/tcpdump/pull/617 I'll sit on this one until we g

Bug#861541: jessie-pu: package kedpm/1.0

2017-07-20 Thread Antoine Beaupré
On 2017-06-27 21:45:17, Adam D. Barratt wrote: > On Tue, 2017-06-27 at 22:39 +0200, Cyril Brulebois wrote: >> Control: tag -1 confirmed >> >> Antoine Beaupre (2017-04-30): >> > diff -Nru kedpm-1.0/debian/changelog kedpm-1.0+deb8u1/debian/changelog >> > --- kedpm-1.0/debian/changelog 2012-11-3

Bug#861541: jessie-pu: package kedpm/1.0

2017-07-20 Thread Antoine Beaupré
+++ kedpm-1.0+deb8u1/debian/changelog2017-04-26 20:44:11.0 >> -0400 >> @@ -1,3 +1,10 @@ >> +kedpm (1.0+deb8u1) jessie; urgency=high >> + >> + * Non-maintainer upload by the Security Team. >> + * fix information leak via command history file (Closes: #8

Bug#858373: help needed to complete regression fix for apache2 Bug#858373

2017-07-21 Thread Antoine Beaupré
TL;DR: New proposed package (deb7u11) doesn't actually show a new regression, please test: https://people.debian.org/~anarcat/debian/wheezy-lts/apache2_2.2.22-13+deb7u11_amd64.changes In particular, Brian Kroth: are you *sure* you had that ErrorDocument 400 working in apache2_2.2.22-13+deb7u7 (ie

Bug#867461: should ca-certificates certdata.txt synchronize across all suites?

2017-07-21 Thread Antoine Beaupré
On 2017-07-20 18:15:00, Philipp Kern wrote: > On 07/17/2017 09:41 PM, Antoine Beaupré wrote: >> Let's not jump the gun here. We're not shipping NSS in ca-certificates, >> just a tiny part of it: one text file, more or less. > > Yeah, and the consensus of the world

Bug#858539: should ca-certificates certdata.txt synchronize across all suites?

2017-07-21 Thread Antoine Beaupré
On 2017-07-21 22:19:20, Philipp Kern wrote: > My point was that you state what your delta is and essentially boils > down to attach the diff of what will actually happen to the .deb. I > think it's generally fine to add new CAs and remove fully distrusted > ones, instead of saying "it should jus

Bug#858373: help needed to complete regression fix for apache2 Bug#858373

2017-07-29 Thread Antoine Beaupré
Control: fixed 858373 2.2.22-13+deb7u7 Control: tags 858373 +pending +patch On 2017-07-21 09:44:38, Antoine Beaupré wrote: > TL;DR: New proposed package (deb7u11) doesn't actually show a new > regression, please test: > > https://people.debian.org/~anarcat/debian/wheezy-lts/

Bug#870102: [buildd-tools-devel] Bug#870102: automatically update schroots

2017-07-30 Thread Antoine Beaupré
On 2017-07-30 08:31:08, Johannes Schauer wrote: > Quoting Antoine Beaupre (2017-07-29 22:15:29) >> It would be nice if sbuild automatically updated the configured >> schroots. As things stand now, a configured schroot will slowly rot >> down to a point where new builds will have to download a bunch

Bug#870102: [buildd-tools-devel] Bug#870102: automatically update schroots

2017-07-30 Thread Antoine Beaupré
On 2017-07-30 16:06:29, Johannes Schauer wrote: > Quoting Antoine Beaupré (2017-07-30 16:05:08) >> On 2017-07-30 08:31:08, Johannes Schauer wrote: >> > Do you not find the script in >> > /usr/share/doc/sbuild/examples/sbuild-update-all >> > sufficient? >

Bug#870102: [buildd-tools-devel] Bug#870102: automatically update schroots

2017-07-30 Thread Antoine Beaupré
On 2017-07-30 16:30:23, Johannes Schauer wrote: > Quoting Antoine Beaupré (2017-07-30 16:26:08) >> On 2017-07-30 16:06:29, Johannes Schauer wrote: >> > Quoting Antoine Beaupré (2017-07-30 16:05:08) >> >> On 2017-07-30 08:31:08, Johannes Schauer wrote: >>

Bug#870102: [buildd-tools-devel] Bug#870102: automatically update schroots

2017-07-30 Thread Antoine Beaupré
On 2017-07-30 16:47:52, Johannes Schauer wrote: > Quoting Antoine Beaupré (2017-07-30 16:42:29) >> > For documenting. The cron script already exists. ;) >> I mean in /etc/cron.weekly for example. > > But putting it there would enable it by default which I'd like

Bug#859655: [pkg-go] Bug#859655: golang-go.crypto: CVE-2017-3204

2017-04-15 Thread Antoine Beaupré
On 2017-04-15 11:04:31, Vincent Bernat wrote: > ❦ 14 avril 2017 15:07 -0400, anarcat  : > >> I looked into this during the Montreal BSP, and it's unclear what we >> should do here, considering there has been multiple new uploads since >> the stretch freeze. >> >> The patch is pretty long: >> >> h

Bug#860287: libosip2: CVE-2016-10324 CVE-2016-10325 CVE-2016-10326 CVE-2017-7853

2017-04-15 Thread Antoine Beaupré
On 2017-04-15 02:31:51, Salvatore Bonaccorso wrote: > Hi Antonie, > > On Fri, Apr 14, 2017 at 04:44:49PM -0400, anarcat wrote: > [...] >> I forgot to mention the bug # in the NMU, unfortunately... > > Since it is in the delayed queue, can you cancel, and reupload with > the changelog fixing the bug

Bug#860345: Acknowledgement (libosip2: diff for NMU version 4.1.0-2.1)

2017-04-15 Thread Antoine Beaupré
I canceled this NMU to fix the changelog to close the bug, because I forgot to to this in the original upload. Unfortunately, when I reuploaded, I forgot to add the --delayed flag and the package is now in unstable. Apologies for not respecting the proper delays, I hope the benefits will outweigh

Bug#860579: ITP: grammalecte -- grammatical corrector for libreoffice and firefox

2017-04-19 Thread Antoine Beaupré
On 2017-04-19 08:50:00, Sébastien Villemot wrote: > On Tue, 18 Apr 2017 17:30:35 -0400 Antoine Beaupre > wrote: >> Package: wnpp >> Severity: wishlist >> Owner: Antoine Beaupre >>  >> * Package name: grammalecte > > […] > >> Someone discussed maintaining this in Debian 3 years ago on their >>

Bug#860579: ITP: grammalecte -- grammatical corrector for libreoffice and firefox

2017-04-19 Thread Antoine Beaupré
On 2017-04-19 15:41:41, Sébastien Villemot wrote: > Indeed it looks like the author published the full source, this is good > news! > > Thanks for your effort, I will be a (hopefully happy!) user of the > package. I'd welcome any effort to collaboratively maintain this! If you want to contribute,

Bug#860842: silently exits on first run

2017-04-21 Thread Antoine Beaupré
On 2017-04-21 13:24:25, Ritesh Raj Sarraf wrote: > Agreed. With newer redshift (the one in Stretch), things are a little better. > redshift + geoclue2 + systemd user service, will give you a config less > working > redshift. In such a setup, you don't even need redshift-gtk. I think you still nee

Bug#860920: manpages.debian.org support (dman)

2017-04-21 Thread Antoine Beaupré
On 2017-04-21 22:36:10, Axel Beckert wrote: >> even though this is collab-maint, I didn't feel comfortable just >> doing a NMU of this thing without first consulting you. > > IMHO this is no more suitable for Stretch, so I'd merge that branch > after the Stretch release. > > But I don't see any rea

Bug#824670: ITP: dnsdiag -- DNS Diagnostics and Performance Measurement Tools

2016-12-07 Thread Antoine Beaupré
eing very busy for the past 2 > months. > > > On Tue, Oct 18, 2016, at 07:52 PM, Antoine Beaupré wrote: >> On 2016-10-18 14:17:00, Ana C. Custura wrote: >> > On Tue, Oct 18, 2016, at 03:30 PM, anarcat wrote: >> > >> >> I believe this removes the last

Bug#847924: check for config validity

2016-12-12 Thread Antoine Beaupré
Control: tags -1 +patch Thanks for the patch, it looks good and reasonable! A. -- While the creative works from the 16th century can still be accessed and used by others, the data in some software programs from the 1990s is already inaccessible. - Lawrence Lessig

Bug#848183: last.fm : 'XML not UTF-8 encoded!'

2016-12-14 Thread Antoine Beaupré
Package: mpd-sima Version: 0.10.0-2 Severity: grave Tags: patch This bug also affects Debian: https://bugs.launchpad.net/ubuntu/+source/mpd-sima/+bug/1492589 Basically, things changed on last.fm's side and mpd-sima can't deal with that anymore in jessie. I confirm the patch provided in the abov

Bug#848183: last.fm : 'XML not UTF-8 encoded!'

2016-12-14 Thread Antoine Beaupré
On 2016-12-14 18:10:46, James Cowgill wrote: > Control: fixed -1 0.14.1-2 > > On 14/12/16 22:53, Antoine Beaupré wrote: >> Package: mpd-sima >> Version: 0.10.0-2 >> Severity: grave >> Tags: patch >> >> This bug also affects Debian: >> >>

Bug#848239: deluser on purge

2016-12-15 Thread Antoine Beaupré
Package: dh-sysuser Version: 1.3 Severity: wishlist I think that, under certain circumstances, users should be completely removed along with their $HOME directory when the package is purged. I think this is a reasonable expectation of Debian packages. Some packages (e.g. mysql, iirc) explicitly p

Bug#848240: missing documentation: password? shell?

2016-12-15 Thread Antoine Beaupré
Package: dh-sysuser Version: 1.3 Severity: wishlist It would be great to have more documentation about how this package works. I tried looking at the homepage, which is just the git repository and couldn't find anything. It's only when I installed the package that i noticed the dh_sysuser(1) manp

Bug#848251: slop: missing list indent in package description

2016-12-15 Thread Antoine Beaupré
Control: tags -1 +pending +patch Thanks for the bug report, since the change is minor, it will be shipped only when other changes warrant a new upload. See if the patch is correct here: https://anonscm.debian.org/git/collab-maint/slop.git/commit/?id=ce0f81cffc723fddeba2704279c25ef9f4f6c629 A.

Bug#833865: jessie-pu: package youtube-dl/2014.08.05-1+deb8u1

2016-12-17 Thread Antoine Beaupré
On 2016-12-17 05:34:35, Julien Cristau wrote: > On Thu, Nov 24, 2016 at 14:52:44 -0500, Antoine Beaupré wrote: > >> On 2016-11-24 13:04:21, Julien Cristau wrote: >> > On Tue, Aug 9, 2016 at 11:50:27 -0400, Antoine Beaupré wrote: >> > >> >> This is a tenta

Bug#848240: missing documentation: password? shell?

2016-12-17 Thread Antoine Beaupré
On 2016-12-16 23:08:37, Dmitry Bogatov wrote: > control: tag -1 +moreinfo > > [2016-12-15 09:16] Antoine Beaupré >> >> part text/plain1572 >> Package: dh-sysuser >> Version: 1.3 >> Severity: wishlist >> >> It would be grea

Bug#848239: deluser on purge

2016-12-17 Thread Antoine Beaupré
involve a registry of UIDs which seems to be maintained in base-passwd now. On 2016-12-16 23:08:31, Dmitry Bogatov wrote: > control: tag -1 +moreinfo > > [2016-12-15 09:07] Antoine Beaupré >> >> part text/plain1199 >> Package: dh-sysuser >> V

Bug#848508: fails to work with LANG=C

2016-12-17 Thread Antoine Beaupré
Control: clone -1 Control: reassign -1 python3-click 6.6-1 On 2016-12-17 15:17:26, Joey Hess wrote: > Package: magic-wormhole > Version: 0.8.1-2 > Severity: normal > > joey@darkstar:~>LANG=C wormhole receive > Traceback (most recent call last): > File "/usr/bin/wormhole", line 11, in >

Bug#848508: fails to work with LANG=C

2016-12-17 Thread Antoine Beaupré
Control: clone 848508 -1 Control: reassign -1 magic-wormhole 0.8.1-2 Messed up my control commands of course. :( I looked a bit more upstream and there are few similar issues, but none directly related with this (they are various bugs with UTF-8 handling). https://github.com/pallets/click/issues

Bug#848508: fails to work with LANG=C

2016-12-17 Thread Antoine Beaupré
Control: reassign 848508 magic-wormhole 6.6-1 Control: reassign 848515 python3-click 0.8.1-2 (sigh...) On 2016-12-17 18:08:06, Joey Hess wrote: > Antoine Beaupré wrote: >> That's a good point! However, wouldn't that be a bug with wormhole on OS >> X (as opposed to here,

Bug#832953: do not ask about synchronous queue updates

2016-07-29 Thread Antoine Beaupré
Package: postfix Version: 2.11.3-1 Severity: wishlist Postfix asks everyone about synchronous queue updates. I believe this is too noisy for most users. First, I think the warning is too dramatic: I have never lost mails during a crash as described, and besides, journaling filsystems like ext3 ar

Bug#807992: [OATH-Toolkit-help] Bug#807992: per user oath files

2016-08-01 Thread Antoine Beaupré
On 2016-03-05 15:01:39, Antoine Beaupré wrote: > On 2015-12-21 16:44:23, Ilkka Virta wrote: >> On 16.12. 15:44, Antoine Beaupré wrote: >>> On 2015-12-16 06:21:01, Ilkka Virta wrote: >>> Right, you are right of course. I do think it's critical to keep that >>

Bug#807990: third patch, fails more gracefully

2016-08-01 Thread Antoine Beaupré
the following patch makes use of the PAM_USER_UNKNONWN flag in a more graceful way, and checks before prompting the password. it could be using more direct parsing functions, but that turned out to be harder because the parse_usersfile function has a more complicated signature than the actual authe

Bug#820816: stop using gnulib

2016-08-01 Thread Antoine Beaupré
On 2016-07-20 12:54:47, Simon Josefsson wrote: > 1) I recall Debian has granted an exception for gnulib. Gnulib is used > in many core packages such as GNU coreutils, inetutils, tar, awk, etc. I can imagine. :) > 2) Using libunistring does not work for libidn I'm afraid. The IDNA > specificatio

Bug#723763: monkeysign should not sign revoked uids

2016-08-01 Thread Antoine Beaupré
Control: tags -1 +moreinfo Could you provide unit tests coverage for this and verify that the tests pass after the patch is applied? Thanks! -- Never attribute to malice that which can be adequately explained by stupidity, but don't rule out malice. - Albert Einstein

Bug#736548: monkeysign: Reports "key is expired, cannot sign" on non-expired key

2016-08-01 Thread Antoine Beaupré
On 2016-07-16 18:57:10, Jerome Charaoui wrote: > Alas, the previous patch is insufficient as monkeysign halts on a > KEYEXPIRED error which occurs later on, probably when it's attempting to > cleanup uids. > > I'm pondering whether we should instead patch expect_pattern() to always > ignore KEYEXPI

Bug#736548: monkeysign: Reports "key is expired, cannot sign" on non-expired key

2016-08-01 Thread Antoine Beaupré
On 2016-08-01 18:01:41, Jerome Charaoui wrote: > Le 2016-08-01 à 17:55, Antoine Beaupré a écrit : >> On 2016-07-16 18:57:10, Jerome Charaoui wrote: >>> Alas, the previous patch is insufficient as monkeysign halts on a >>> KEYEXPIRED error which occurs later on, proba

Bug#830750: photofloat: traceback on run

2016-08-01 Thread Antoine Beaupré
Control: severity -1 grave On 2016-07-11 00:38:38, Mark Eichin wrote: > (It looks like that's followed by release discussion, but just thought > I'd still add the "doesn't work out of the box" data point.) Right - PhotoFloat is in pretty bad shape, both in and outside Debian. There has been only

Bug#828241: atheme-services: FTBFS with openssl 1.1.0

2016-08-01 Thread Antoine Beaupré
On 2016-06-26 06:21:03, Kurt Roeckx wrote: > OpenSSL 1.1.0 is about to released. During a rebuild of all packages using > OpenSSL this package fail to build. A log of that build can be found at: > https://breakpoint.cc/openssl-1.1-rebuild-2016-05-29/Attempted/atheme-services_7.0.7-2_amd64-2016052

Bug#842651: skip empty files

2017-01-17 Thread Antoine Beaupré
On 2017-01-17 17:39:23, Bálint Réczey wrote: >> So I figured a 2-line patch in Kodi would fix my immediate problem >> provided that, of course, it works at all. :) >> >> I'll give more information when my tests are complete. > > I hope the tests went well. :-) Unfortunately, it failed, and I disca

Bug#850217: [Pkg-privacy-maintainers] Bug#850217: parcimonie-applet: status icon menu is broken

2017-01-20 Thread Antoine Beaupré
On 2017-01-20 12:52:52, intrigeri wrote: > Hi, > > GtkStatusIcon (along with the whole "system tray" concept) has been > deprecated in 3.14, so I'm not surprised that it starts breaking. > On my desktop it's even worse: I can't see the icon anywhere at all. > Still, as long as one single binary pac

Bug#824670: ITP: dnsdiag -- DNS Diagnostics and Performance Measurement Tools

2017-01-20 Thread Antoine Beaupré
On 2017-01-20 16:23:02, Ana C. Custura wrote: > Hi Antoine, > > Many thanks for the review, it is greatly appreciated. Alright, that looks all good to me. The only concern that remains is that I just noticed a 1.5.1 release on PyPI that is not on github - i wonder if we should be shipping that in

<    5   6   7   8   9   10   11   12   13   14   >