Bug#918305: hyphen-en-us: please provide fallback symlink from hyph_en.dic to hyph_en_US.dic

2019-01-04 Thread Daniel Kahn Gillmor
2001 From: Daniel Kahn Gillmor Date: Fri, 4 Jan 2019 17:00:29 -0500 Subject: [PATCH 2/7] hyphen-en-us: provide fallback symlink for hyph_en.dic (Closes: #918305) --- debian/control| 1 + debian/hyphen-en-us.links | 1 + 2 files changed, 2 insertions(+) create mode 100644 debian/hyph

Bug#918306: wrong-section-according-to-package-name is wrong about hyphen-en-us

2019-01-04 Thread Daniel Kahn Gillmor
Package: lintian Version: 2.5.119 when checking the hyphen source package, lintian claims: I: hyphen-en-us: wrong-section-according-to-package-name hyphen-en-us => localization but all hyphen-* packages are Section: text, as hyphen-en-us is. (see the source for libreoffice-dictionaries, which s

Bug#918305: hyphen-en-us: please provide fallback symlink from hyph_en.dic to hyph_en_US.dic

2019-01-04 Thread Daniel Kahn Gillmor
Package: hyphen-en-us Version: 2.8.8-5 Severity: wishlist Some tools, like pyphen's test suite (see RFP https://bugs.debian.org/917039) expect a fallback symlink from a generic language to a region-specific language. Please provide a fallback symlink from hyph_en.dic to hyph_en_US.dic in /usr/sha

Bug#918304: debmirror wants non-zero gpgv return code, instead of a GOODSIG on --status-fd

2019-01-04 Thread Daniel Kahn Gillmor
Package: debmirror Version: 1:2.30 Severity: normal sid is apparently currently signed by three keys -- automatic signing keys for wheezy, jessie, and stretch. I can't justify this (i have no idea why it should be signed by the wheezy signing key, for example), but that shouldn't matter for debmi

Bug#918248: hddemux 0.4-7: FTBFS, alignment problem

2019-01-04 Thread Daniel Kahn Gillmor
Control: reassign 918248 knot-resolver Control: affects 918248 + hddemux Control: forwarded 918248 https://gitlab.labs.nic.cz/knot/knot-resolver/issues/426 Hi Steve-- On Fri 2019-01-04 18:19:27 +, Steve McIntyre wrote: > When building your package, I've found a bus error (aka alignment > fau

Bug#909612: fakechroot: does not support renameat2

2019-01-03 Thread Daniel Kahn Gillmor
On Tue 2019-01-01 08:24:51 +0100, Johannes Schauer wrote: > I uploaded a NMU to DELAYED/10. Debdiff attached. Please cancel this upload in > case you don't like it. :) thank you for taking care of this, Johannes! --dkg signature.asc Description: PGP signature

Bug#916012: emacs-gtk crashes when rendering U+2728 SPARKLES

2019-01-02 Thread Daniel Kahn Gillmor
On Wed 2019-01-02 19:40:43 -0600, Rob Browning wrote: > Daniel Kahn Gillmor writes: > >> Control: found 916012 1:26.1+1-2 >> >> running emacs-gtk 26.1 from unstable, I still get crashes on U+2728 >> SPARKLES . I'm also seeing a crash when trying to render U+26C

Bug#916012: emacs-gtk crashes when rendering U+2728 SPARKLES

2018-12-21 Thread Daniel Kahn Gillmor
Control: found 916012 1:26.1+1-2 running emacs-gtk 26.1 from unstable, I still get crashes on U+2728 SPARKLES . I'm also seeing a crash when trying to render U+26C4 SNOWMAN WITHOUT SNOW. interestingly, U+1F332 EVERGREEN TREE gives no problems :) A stderr transcript from one such crash: X proto

Bug#917039: RFP: pyphen -- Python hyphenation module

2018-12-21 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist * Package name: pyphen Version : 0.9.5 Upstream Author : Guillaume Ayoub * URL : https://pyphen.org/ * License : GPL 2.0+/LGPL 2.1+/MPL 1.1 Programming Lang: Python Description : Python hyphenation module Pyphen is a p

Bug#917038: RFP: weasyprint -- Visual rendering engine for HTML and CSS that can export to PDF

2018-12-21 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist * Package name: weasyprint Version : 43 Upstream Author : Simon Sapin * URL : https://weasyprint.org/ * License : BSD Programming Lang: Python Description : Visual rendering engine for HTML and CSS that can export to PD

Bug#911768: pinentry-gnome3 fails to open a window with 'No Gcr System Prompter available, falling back to curses'

2018-12-21 Thread Daniel Kahn Gillmor
Control: affects 911768 - gpg-agent Control: affects 911768 + gcr On Fri 2018-12-21 07:28:22 -0500, Theodore Y. Ts'o wrote: > On Thu, Dec 20, 2018 at 03:17:03PM -0500, Daniel Kahn Gillmor wrote: >> >> I wonder whether we can rule out any interaction with gpg-agent itself >

Bug#916494: devscripts: [uscan] running uscan multiple times makes ../*.asc grow

2018-12-14 Thread Daniel Kahn Gillmor
Package: devscripts Version: 2.18.10 Severity: normal if i run uscan multiple times in a single source directory, each time the signature gets *appended* to the appropriate *.asc file, rather than replacing it. below is a transcript -- note that the *.asc grows each time uscan is run: 0 dkg@test

Bug#643341: [pkg-gnupg-maint] Bug#643341: libgpg-error-dev: cross-compiling anything based on libgpg-error is painful

2018-12-14 Thread Daniel Kahn Gillmor
Control: close 643341 1.33-3 hi all-- libgpg-error 1.33 is now in unstable, and it ships a pkg-config file. Thanks to NIIBE for all his work on this! as of 1.33-3, i'vem also added an autopkgtest that uses the pkg-config file to ensure that a simple build works as expected. Could any of the fo

Bug#916012:

2018-12-12 Thread Daniel Kahn Gillmor
On Mon 2018-12-10 00:16:06 +, J. Smith wrote: > See https://debbugs.gnu.org/30045 and similar. Thanks for this pointer, J. Smith. i agree that looks like the same thing. This is a pretty serious bug, including risks of data loss -- i've lost draft e-mail messages simply from searching in my

Bug#916185: ekiga manpage refers to http://www.ekiga.org/, should use https.

2018-12-10 Thread Daniel Kahn Gillmor
Package: ekiga Version: 4.0.1-9+b1 Severity: minor man ekiga says: - DOCUMENTATION More documentation is available in the manual available through Ekiga's Help menu. There is also a FAQ at: http://www.ekiga.org GETTING HELP Feel free to join #ekiga on irc.gnome.org (

Bug#916012: emacs-gtk crashes when rendering U+2728 SPARKLES

2018-12-09 Thread Daniel Kahn Gillmor
Package: emacs-gtk Version: 1:25.2+1-11 Severity: normal Control: affects -1 + notmuch-emacs I'm running emacs-gtk under X11. When i try to open the attached file (sparkles.txt), emacs-gtk crashes with the following backtrace. Sorry for it not being well-annotated, i have emacs-gtk-dbg and emacs

Bug#915788: RFP: zlint -- X.509 certificate linter

2018-12-06 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist * Package name: zlint Version : 0.0.20181123 Upstream Author : Regents of the University of Michigan * URL : https://github.com/zmap/zlint * License : Apache 2.0 Programming Lang: Go Description : X.509 certificate linter

Bug#907060: linux: ratelimiting hides warnings about uninitialized crng usage

2018-11-30 Thread Daniel Kahn Gillmor
Control: found 907060 4.18.20-2 On Thu 2018-08-23 12:31:29 -0400, Daniel Kahn Gillmor wrote: > root@test:~# cat /proc/cmdline > BOOT_IMAGE=/boot/vmlinuz-4.17.0-3-amd64 > root=UUID=44659876-4a68-4a3a-b3fa-0403eeb0c6ca > ro console=ttyS0,115200n8 > root@test:~# dmesg | tail -n 3

Bug#915119: dpkg-dev: dpkg-shlibdeps erroneously reports "symbol pthread_once used by libdnssec.so.6.0.0 found in none of the libraries"

2018-11-30 Thread Daniel Kahn Gillmor
Package: dpkg-dev Version: 1.19.2 Severity: normal Control: affects -1 libdnssec6 libdnssec.so.6.0.0 links against pthread, and uses pthread_once. but dpkg-shlibdeps complains that it is found in none of the libraries. I think this is a bug in dpkg-shlibdeps. If not, please let me know what nee

Bug#914944: [pkg-gnupg-maint] Bug#914944: gnupg: importing a key fails when there's no tty (regression from 2.1.18-8~deb9u2)

2018-11-29 Thread Daniel Kahn Gillmor
Control: forcemerge 913614 914944 Thanks for noting this, Lucas. On Thu 2018-11-29 00:12:05 +0100, Lucas Nussbaum wrote: > Importing the attached key fails when there's no tty. This is the same as #913614, merging. Note that #914032 proposes an update to stretch that fixes this regression. I'v

Bug#911568: crashes with traceback about signatures

2018-11-27 Thread Daniel Kahn Gillmor
Control: reassign 911568 python3-gpg 1.12.0-4 Control: affects 911568 + impass Control: forwarded 911568 https://dev.gnupg.org/T4271 Joey wrote: > a) impass used to work despite that (it displated a red warning in the gui), >and has for some reason stopped working due to a dependency upgrade,

Bug#736859: dput: Please set the default transport to use ssh-upload

2018-11-27 Thread Daniel Kahn Gillmor
On Tue 2018-11-27 13:07:12 +0100, Paride Legovini wrote: > On Mon, 27 Jan 2014 Micah Anderson wrote:> >> It would be nice if ssh-upload were the default transport for >> uploading files in debian. Is there a particular reason why it isn't >> set as the default now? > While ssh-upload is clearly be

Bug#908994: diffoscope: extract information from OpenPGP keys and signatures

2018-11-27 Thread Daniel Kahn Gillmor
Please remember to supply --batch whenever you invoke gpg from a script or other automated tooling! On Mon 2018-09-17 16:06:40 +0800, Paul Wise wrote: > For keys only: > > gpg --home $(mktemp -d) file Please don't use this form, it's broken and unsupported by upstream. There is no explicit comman

Bug#911568: crashes with traceback about signatures

2018-11-27 Thread Daniel Kahn Gillmor
On Sun 2018-10-21 20:00:02 -0400, Joey Hess wrote: > joey@darkstar:~/.impass>impass add > Traceback (most recent call last): > File "/usr/lib/python3/dist-packages/impass/db.py", line 105, in _decryptDB > data, _, vfy = self._gpg.decrypt(f, verify=[k]) > File "/usr/lib/python3/dist-package

Bug#912092: impass FTBFS: FAIL decrypt db

2018-11-27 Thread Daniel Kahn Gillmor
tml I'm not convinced that this is a change in unstable -- it appears to be a bug in the test suite, which is fixed by the attached patch. --dkg From 3e6b1fa16887f105adf35599c922b452f8af0af4 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Tue, 27 Nov 2018 02:46:30 -0500 Subject: [PA

Bug#914769: RFP: bindgen -- Generate Rust FFI bindings to C and C++ libraries

2018-11-26 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist * Package name: bindgen Version : 0.43.2 Upstream Author : Jyun-Yan You * URL : https://github.com/rust-lang/rust-bindgen * License : BSD-3-Clause Programming Lang: Rust Description : Generate Rust FFI bindings to C and

Bug#914395: [pkg-gnupg-maint] Bug#914395: Bug#914395: dirmngr log

2018-11-26 Thread Daniel Kahn Gillmor
On Mon 2018-11-26 08:42:20 +0100, Werner Koch wrote: > On Sun, 25 Nov 2018 22:22, csm...@debian.org said: >> It seems it needs the SRV record and fails wrong without it. >> Checking on the same system looking up that SRV record I get the >> expected NXDOMAIN error. > > That seems to be a Debian spe

Bug#914720: terminator: "Insert terminal number" menu option fails with 'Vte.Terminal.feed_child() takes exactly 2 arguments (3 given)'

2018-11-26 Thread Daniel Kahn Gillmor
Package: terminator Version: 1.91-1 Severity: normal Launch terminator from another terminal emulator so that stderr is visible. click the upper-left-corner button to get a dropdown menu and then click "Insert terminal number". Nothing happens in the terminator window, but the following is print

Bug#914269: google-i18n-address FTBFS: UnicodeDecodeError: 'ascii' codec can't decode byte 0xc4 in position 11

2018-11-22 Thread Daniel Kahn Gillmor
On Wed 2018-11-21 17:12:23 +0200, Adrian Bunk wrote: > Fails: > LC_ALL=C dpkg-buildpackage > > Builds: > LC_ALL=C.UTF-8 dpkg-buildpackage > > Python 3.7 has a workaround for C locale. > > In debian/rules add: > export LC_ALL=C.UTF-8 thank you, Adrian! I've lost count of how many beers i owe you,

Bug#914269: google-i18n-address FTBFS: UnicodeDecodeError: 'ascii' codec can't decode byte 0xc4 in position 11

2018-11-21 Thread Daniel Kahn Gillmor
Control: tags 914269 + confirmed help I see this error in my cowbuilder instance as well, but i don't see the error when i build by hand on a buster/sid system. more confusingly, this error crops up in python3.6, but not when using python3.7 -- so i don't understand what the issue is, or how to d

Bug#912228: ITP: google-i18n-address -- Address Internationalization database (with python bindings)

2018-11-19 Thread Daniel Kahn Gillmor
On Mon 2018-10-29 11:27:51 -0400, Daniel Kahn Gillmor wrote: > Package: wnpp > Severity: wishlist > Owner: Daniel Kahn Gillmor > > * Package name: google-i18n-address > Version : 2.3.2 > Upstream Author : Mirumee Software > * URL : https://g

Bug#913582: [pkg-gnupg-maint] Bug#913582: gpg-zip: wrong default TAR path if built on a merged-/usr system and used on an unmerged-/usr system

2018-11-19 Thread Daniel Kahn Gillmor
Hi Simon-- On Mon 2018-11-12 16:48:29 +, Simon McVittie wrote: > I recently added a new point of variation (#901473) to Debian's > reproducible builds infrastructure: the first build is done in a > traditional Debian system with separate /bin and /usr/bin, while the > second is done with merge

Bug#914032: stretch-pu: package gnupg2/2.1.18-8~deb9u4

2018-11-18 Thread Daniel Kahn Gillmor
.18/debian/changelog --- gnupg2-2.1.18/debian/changelog 2018-10-05 16:43:38.0 -0400 +++ gnupg2-2.1.18/debian/changelog 2018-11-18 12:20:52.0 -0500 @@ -1,3 +1,9 @@ +gnupg2 (2.1.18-8~deb9u4) stretch; urgency=medium + + * Avoid crash when importing without a TTY (closes #913614)

Bug#913614: [pkg-gnupg-maint] Bug#913614: gnupg2 fails with "cannot open '/dev/tty': No such device or address"

2018-11-18 Thread Daniel Kahn Gillmor
Control: tags 913614 + patch The attached patch resolves the issue, and also introduces a test to ensure that the problem is (and remains) fixed. --dkg >From 2e3b6845ea6c4762e86d281bcf83bf0e84315d8c Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Fri, 16 Nov 2018 00:38:40 -0

Bug#913446: wireguard-tools: optionally reload module / interfaces on upgrade

2018-11-15 Thread Daniel Kahn Gillmor
On Thu 2018-11-15 14:45:10 +0100, Fabian Grünbichler wrote: > indeed, after removing any and all wireguard.ko from the usual search > paths: > > # new_version=$(modinfo -F version wireguard 2>/dev/null || echo 'invalid') > # echo $new_version > invalid > # cat /sys/module/wireguard/version > 0.0.20

Bug#913446: wireguard-tools: optionally reload module / interfaces on upgrade

2018-11-14 Thread Daniel Kahn Gillmor
On Wed 2018-11-14 21:14:08 +0100, Fabian Grünbichler wrote: > Maybe going with the meta package is a good idea then - especially since > it allows us a cheap 'opt-in' for the reloading behaviour. yep, i'm leaning in this direction too. > I was thinking about changes to the wg-quick template unit

Bug#913755: hopenpgp-tools: hokey lint reports "unknown pubkey algorithm type 22" for ed25519 subkey

2018-11-14 Thread Daniel Kahn Gillmor
Package: hopenpgp-tools Version: 0.21.2-2 Severity: normal D368FE75E1AA92F6E49B99D26C1F1EDECC50FA53 is a signing-capable ed25519 subkey of 0EE5BE979282D80B9F7540F1CCD2ED94D21739E9. "hokey lint" complains "unknown pubkey algorithm type 22 unknown" hopenpgp-tools should learn about ed25519!

Bug#913446: wireguard-tools: optionally reload module / interfaces on upgrade

2018-11-13 Thread Daniel Kahn Gillmor
This looks great and very thorough, Fabian. thank you! I'm trying to reason about some of the details, to see how we can simplify things further. Some questions: * why put the module reloading in wireguard-tools.postinst and not in wireguard.postinst ? There's no guarantee that wireguard-d

Bug#913701: src:knot: we should package python3-libknot

2018-11-13 Thread Daniel Kahn Gillmor
ave some good ideas. --dkg From 9fb2b324269af6eb1fe66e4f135611776d39b10c Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Fri, 2 Nov 2018 11:26:09 -0400 Subject: [PATCH] python: auto-generate versioned python module setup.py --- configure.ac | 3 ++- python/Makefile

Bug#913582: [pkg-gnupg-maint] Bug#913582: gpg-zip: wrong default TAR path if built on a merged-/usr system and used on an unmerged-/usr system

2018-11-13 Thread Daniel Kahn Gillmor
Control: tags 913582 + confirmed upstream Control: forwarded 913582 https://dev.gnupg.org/T4251 Thanks for catching this, Simon! On Mon 2018-11-12 16:48:29 +, Simon McVittie wrote: > * Have two systems/chroots/containers, one with merged /usr (/bin is a > symlink to /usr/bin) and one withou

Bug#871806: #871806: check git tag signatures

2018-11-13 Thread Daniel Kahn Gillmor
On Tue 2018-11-13 21:53:12 +0100, Xavier wrote: > Note that if there is a "git origin" that points to upstream repo, uscan > will use it instead of creating a temporary "git clone". It is more > efficient I think hm, too bad. i use "upstream" as the name of my upstream git repos, since as often a

Bug#871806: #871806: check git tag signatures

2018-11-13 Thread Daniel Kahn Gillmor
Hi Xavier-- On Tue 2018-09-25 23:45:18 +0200, Xavier wrote: > I just implement a git-tag-signature-verify feature [1] to fix #827065: > just to add "pgpmode=gittag" in opts. > I think it fixes this issue too. If you agree, I'll merge it. Thanks for this! I finally got around to testing out your

Bug#913665: uscan: should use gpgv in all cases, including pgpmode=self

2018-11-13 Thread Daniel Kahn Gillmor
Package: devscripts Version: 2.18.7 Severity: normal When uscan is verifying signatures, it currently uses gpgv everywhere except when pgpmode=self. in that case, it uses gpg, presumably in order to extract the source tarball. however, modern GnuPG (since 2.1.16, so including debian stretch) off

Bug#913556: apt-show-versions: Max. recursion depth with nested structures exceeded

2018-11-13 Thread Daniel Kahn Gillmor
I ran into the same issue on a powerpc installation. On Mon 2018-11-12 17:16:10 +0100, Christoph Martin wrote: > please try for me to change the value in line 271 from 65536 to a higher > value which is high enough for your sources.list . When i changed from 65536 to 655360, the "apt-show-version

Bug#913488: [pkg-gnupg-maint] Bug#913488: scdaemon: gnupg --card-status does not recognize smart card via usb reader

2018-11-12 Thread Daniel Kahn Gillmor
On Mon 2018-11-12 17:02:40 +0100, Elmar Stellnberger wrote: > Now I have removed pcscd with apt-get remove and see it works now on my > Debian 9 machine. glad to hear that it's working reliably now! I'm closing this bug report since it sounds like it's resolved, but feel free to re-open it if yo

Bug#913488: [pkg-gnupg-maint] Bug#913488: scdaemon: gnupg --card-status does not recognize smart card via usb reader

2018-11-12 Thread Daniel Kahn Gillmor
Hi Elmar-- On Sun 2018-11-11 15:54:42 +0100, Elmar Stellnberger wrote: > The problem is that gnupg does not recognize my gpg-card if I insert it > via the Gemalto PC-card reader; if I use the integrated reader it works. > The problem only occurs with Debian GNU Linux 9. The USB reader still > wo

Bug#906843: xul-ext-custom-tab-width no longer works with firefox-esr 60

2018-11-08 Thread Daniel Kahn Gillmor
On Wed 2018-10-03 17:20:02 +0200, Moritz Mühlenhoff wrote: > This is dead upstream and broken even in ESR, let's remove it > from the archive? agreed, i've just filed a RM/ROM bug report (#913215) on custom-tab-width. --dkg

Bug#913215: RM: custom-tab-width -- ROM; dead upstream, no longer works in firefox ESR

2018-11-08 Thread Daniel Kahn Gillmor
Package: ftp.debian.org Severity: normal Control: affects -1 src:custom-tab-width Control: block 906843 with -1 Since Quantum made it to Firefox ESR, the custom-tab-width browser extension is no longer useful. https://bugs.debian.org/906843 notes that the package isn't currently useful either. P

Bug#908755: RM: knot-resolver [arm64] -- ROM; arm64 build fails

2018-11-05 Thread Daniel Kahn Gillmor
On Mon 2018-11-05 00:43:16 -0500, Scott Kitterman wrote: > I've asked for a give back on knot-resolver for armhf. If that succeeds, I > think it will migrate. thanks! looks like the giveback succeeded :) https://buildd.debian.org/status/fetch.php?pkg=knot-resolver&arch=armhf&ver=3.0.0-9&s

Bug#908755: RM: knot-resolver [arm64] -- ROM; arm64 build fails

2018-11-04 Thread Daniel Kahn Gillmor
Control: tags 908755 - moreinfo On Sun 2018-11-04 11:54:48 -0500, Scott Kitterman wrote: > There is a rdepend that should be addressed too: > > Checking reverse dependencies... > # Broken Build-Depends: > hddemux: knot-resolver > > Dependency problem found. > > Once that's resolved, please remove

Bug#912818: getmail: socket error ([SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:726))

2018-11-03 Thread Daniel Kahn Gillmor
On Sun 2018-11-04 11:26:26 +1100, Dmitry Smirnov wrote: > Package: getmail > Version: 5.6-1 > Severity: normal > > getmail no longer works after dist-upgrade to Buster: > > > SimplePOP3SSLRetriever:{USER}@iinet.net...@mail.iinet.net.au:995: > {USER}@iinet.net.au: socket error ([SSL: WRONG_SIGN

Bug#912210: python backtrace in configure

2018-10-31 Thread Daniel Kahn Gillmor
Control: tags 912210 + confirmed Control: found 912210 2.7.2-2~bpo9+1 Control: found 912210 2.7.3-1 On Mon 2018-10-29 10:35:10 +, Peter Palfrader wrote: > | Configuration file '/etc/knot/knot.conf' > | ==> Modified (by you or by a script) since installation. > | ==> Package distributor has s

Bug#909085: ispell: Sequoia & ispell's /usr/bin/sq

2018-10-31 Thread Daniel Kahn Gillmor
t the git repo in https://salsa.debian.org/debian/ispell) does that, i think. If someone really wants to keep sq, perhaps they could speak up here? --dkg >From 941518e0e8be8cf842a435f68c6ea66ec73c3264 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Wed, 31 Oct 2018 10:29:51 -0400

Bug#912194: stretch-pu: package enigmail/2.0.8-5~deb9u1

2018-10-31 Thread Daniel Kahn Gillmor
On Mon 2018-10-29 19:31:07 +, Adam D. Barratt wrote: > Please go ahead. this is now uploaded, and it's in stable-new. --dkg

Bug#911907: [monkeysphere] Bug#911907: monkeysphere: Patch v3

2018-10-30 Thread Daniel Kahn Gillmor
On Tue 2018-10-30 11:03:02 -0700, Sunil Mohan Adapa wrote: > We have been setting the TMPDIR to > /var/lib/monkeysphere/authentication/tmp/ in FreedomBox for some time > now to work around the problem. So, I think, in general, this solution > is fine. However, perhaps we could conservatively use

Bug#911907: monkeysphere: Patch v3

2018-10-30 Thread Daniel Kahn Gillmor
On Mon 2018-10-29 12:56:48 -0700, Sunil Mohan Adapa wrote: > Attached the patches do this with /usr/bin/env (better to have full > path?). I have retested all invocations again. thanks! I've applied your patch on the master branch upstream, and then also changed /usr/bin/env to just "env" -- no r

Bug#912228: ITP: google-i18n-address -- Address Internationalization database (with python bindings)

2018-10-29 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist Owner: Daniel Kahn Gillmor * Package name: google-i18n-address Version : 2.3.2 Upstream Author : Mirumee Software * URL : https://github.com/mirumee/google-i18n-address * License : BSD Programming Lang: Python, JSON

Bug#906438: nsd initscript improve stop action for chrooted daemon

2018-10-29 Thread Daniel Kahn Gillmor
On Mon 2018-10-29 14:07:33 +0100, har...@a-little-linux-box.at wrote: > It seems the problem with the initscript is my chrooted nsd setup, if > PIDFILE is not defined in the initscript it automatically gets set to > /var/run/$NAME.pid (which is not true in a chrooted setup). So I guess > adding the

Bug#911907: [monkeysphere] Bug#911907: [Pkg-privacy-maintainers] Bug#911907: monkeysphere: Install fails on systems with PAM login restrictions

2018-10-29 Thread Daniel Kahn Gillmor
Hi Sunil-- thanks for all your work on this. i think we're heading for a significant improvement here :) On Mon 2018-10-29 00:35:53 -0700, Sunil Mohan Adapa wrote: > runuser does not seem to depend on the user's shell. It simply runs a > given process under that user's id (with a different PAM c

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-28 Thread Daniel Kahn Gillmor
On Sun 2018-10-28 21:58:55 +, Adam D. Barratt wrote: > I don't have any objections if you want to upload already, but it won't > get accepted into p-u from stable-new until it's had the d-i ack. OK, it's uploaded now, in stable-new, waiting for the d-i ack. thanks for your work on the stable

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-28 Thread Daniel Kahn Gillmor
On Sun 2018-10-28 10:58:17 -0400, Daniel Kahn Gillmor wrote: > On Sat 2018-10-27 16:47:27 +0100, Adam D. Barratt wrote: >> Are you planning on handling the enigmail upload as well? I can't see >> an open p-u bug for it so, given the timings, would suggest that start >>

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-28 Thread Daniel Kahn Gillmor
On Sat 2018-10-27 16:47:27 +0100, Adam D. Barratt wrote: > As it turns out, that was quite a lot of noise indeed - about 1/3 of > the ~3300 line diff, from my visual scan-and-chop. Apologies for the > delay, but I've finally managed to carve out a block of time to handle > this. apologies for the

Bug#890468: lintian: source-is-missing false positive when d/missing-sources/foo has no known suffix

2018-10-26 Thread Daniel Kahn Gillmor
Control: retitle 890468 lintian: source-is-missing false positive when d/missing-sources/foo has no known suffix On Fri 2018-10-26 14:52:38 -0400, Chris Lamb wrote: > Chris Lamb wrote: > >> Thanks for the bug report but unfortunately I think I'm either >> parsing the problem incorrectly or think

Bug#911974: openssh-client: please avoid shipping setuid ssh-keysign by default

2018-10-26 Thread Daniel Kahn Gillmor
Package: openssh-client Version: 1:7.9p1-1 Severity: wishlist /usr/lib/openssh/ssh-keysign is one of only a few setuid programs left on a modern system. It looks like it is *probably* relatively safe -- not enabled by default due to configurations set in /etc/ssh/ssh_config, checking that config

Bug#765017: SECURITY - normal users are allowed full access to USB devices per default

2018-10-26 Thread Daniel Kahn Gillmor
Is it possible that libspice-client-glib-2.0-8 should merely Recommend: spice-client-glib-usb-acl-helper, rather than Depend: ing on it? spice-client-glib-usb-acl-helper is one of the few setuid binaries on debian systems, and if it isn't installed, it seems like the attack surface would be reduce

Bug#906438: nsd initscript improve stop action

2018-10-26 Thread Daniel Kahn Gillmor
On Fri 2018-08-17 15:48:32 +, Harald Jenny wrote: > the stop action of the current initscript takes a long time to stop > the daemon, please find attached a patch which makes stopping faster. Do you know why it takes a long time to stop? without this change, it's using the standard do_stop_cm

Bug#911907: [Pkg-privacy-maintainers] Bug#911907: monkeysphere: Install fails on systems with PAM login restrictions

2018-10-26 Thread Daniel Kahn Gillmor
Control: tags 911907 + confirmed Hi Sunil-- thanks for catching this, and for proposing a fix. On Thu 2018-10-25 18:20:11 -0700, Sunil Mohan Adapa wrote: > We faced a similar issue with quassel-core package recently and the > maintainer fixed it by using runuser instead of su. From what I gather

Bug#911768: [pkg-gnupg-maint] Bug#911768: pinentry-gnome3 fails to open a window with 'No Gcr System Prompter available, falling back to curses'

2018-10-25 Thread Daniel Kahn Gillmor
Hi Tiziano-- thanks for following up here! I'm closing the bug report as you recommended, but i wanted to add a little more followup in case someone else reads this. On Thu 2018-10-25 13:03:12 +0200, Tiziano Zito wrote: > It has nothing to do with pinentry. Given that I have a system with almost

Bug#873499: Should depend on "gnupg | gnupg2 | gpg"

2018-10-25 Thread Daniel Kahn Gillmor
Control: affects 873499 src:gnupg2 On Mon 2017-08-28 14:36:20 +0200, Yuri D'Elia wrote: > The gnupg2 package in unstable has been renamed again and split into several > components. > > The "gnupg" package is now the full suite, while "gpg" contains the binary > itself. To avoid extra dependencies,

Bug#911852: php-crypt-gpg: please Depend: gnupg instead of gnupg2

2018-10-25 Thread Daniel Kahn Gillmor
Package: php-crypt-gpg Version: 1.6.0-1 Severity: normal Control: affects -1 src:gnupg2 I would like to be able to remove the gnupg2 binary package from debian eventually, because we ship modern GnuPG as the gnupg package. /usr/bin/gpg2 is a legacy symlink supplied by the gnupg2 dummy package. p

Bug#911853: openpgp-applet: please Depend: gnupg instead of gnupg2

2018-10-25 Thread Daniel Kahn Gillmor
Package: openpgp-applet Version: 1.1-1 Severity: normal Control: affects -1 src:gnupg2 I would like to be able to remove the gnupg2 binary package from debian eventually, because we ship modern GnuPG as the gnupg package. /usr/bin/gpg2 is a legacy symlink supplied by the gnupg2 dummy package. op

Bug#911768: [pkg-gnupg-maint] Bug#911768: pinentry-gnome3 fails to open a window with 'No Gcr System Prompter available, falling back to curses'

2018-10-24 Thread Daniel Kahn Gillmor
Hi Tiziano-- On Wed 2018-10-24 17:24:33 +0200, Tiziano Zito wrote: > pinentry-gnome3 (but also pinentry-gtk-2) does not open a window anymore to > ask for a passphrase. If run from terminal it shows: > > No Gcr System Prompter available, falling back to curses > OK Pleased to meet you > > It was

Bug#911718: apt: error message "apt install enigmail" failure is misleading

2018-10-23 Thread Daniel Kahn Gillmor
Package: apt Version: 1.4.8 Severity: minor Over in https://bugs.debian.org/909000, On Mon 2018-10-22 08:28:50 -0400, Fabián Rodríguez wrote: > This also fails in a clean Stretch install: > > # apt install enigmail > Reading package lists... Done > Building dependency tree > Reading state informat

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-23 Thread Daniel Kahn Gillmor
Hi Adam-- On Tue 2018-10-23 16:18:05 +0100, Adam D. Barratt wrote: > Sure, but that's not what I said. My distinction was between including > the gnupg update in the point release versus pushing it more urgently > via stable-updates. I never implied the updates shouldn't be released at > all.

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-23 Thread Daniel Kahn Gillmor
On Tue 2018-10-23 20:00:06 +0100, Adam D. Barratt wrote: > From discussions elsewhere, I understand that the "raw" upstream > enigmail - i.e. installed via upstream's addons service - is actually > already compatible with the new Thunderbird version, and the problem > only affects the Debian packag

Bug#911244: stretch-pu: package publicsuffix/20181003.1334-0+deb9u1

2018-10-23 Thread Daniel Kahn Gillmor
On Sun 2018-10-21 11:47:51 +0100, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Wed, 2018-10-17 at 11:13 -0400, Daniel Kahn Gillmor wrote: >> Please consider an update to publicsuffix in debian stretch. >> >> This package reflects the state of the network

Bug#909000: [Pkg-mozext-maintainers] Bug#909000: Enigmail 2.0 needed in Stretch after Thunderbird 60 upload

2018-10-23 Thread Daniel Kahn Gillmor
Control: clone 909000 -2 Control: retitle -2 apt: error message "apt install enigmail" failure is misleading Control: reassign -2 apt 1.4.8 Control: severity -2 minor On Mon 2018-10-22 08:28:50 -0400, Fabián Rodríguez wrote: > This also fails in a clean Stretch install: > > # apt install enigmail

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-23 Thread Daniel Kahn Gillmor
Thanks to Adam for your ongoing work on the stable releases! I just wanted to clarify a few points here. On Tue 2018-10-23 08:57:08 +0100, Adam D. Barratt wrote: > An issue is that the gnupg update itself doesn't really qualify for > stable-updates any more than it qualifies for stable-security.

Bug#911377: libgpg-error: building architecture-independent-only packages fails with "libgpg-error-l10n missing files: usr/share/locale'

2018-10-19 Thread Daniel Kahn Gillmor
Source: libgpg-error Version: 1.32-2 Severity: normal Control: tags -1 + help confirmed when trying to build from source with "gbp buildpackage -A" or "dpkg-buildpackage -A", the build fails, terminating the following error message: - […] make[5]: Leaving directory '/home/dkg/src/libgpg-

Bug#911339: RFP: node-chai -- assertion library for node and the browser

2018-10-18 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist Control: block 911189 by -1 Control: affects src:gpgme1.0 * Package name: node-chai Version : 4.1.2 Upstream Author : Chai development team * URL : https://www.chaijs.com/ * License : MIT Programming Lang: Javascript Descript

Bug#911338: node-webpack: new upstream version 4.21.0 available

2018-10-18 Thread Daniel Kahn Gillmor
Source: node-webpack Version: 3.5.6-3 Severity: wishlist Control: affects -1 src:gpgme1.0 Control: block 911189 by -1 https://github.com/webpack/webpack/archive/v4.21.0.tar.gz is available upstream. The debian package for webpack has not been updated since 2018-03-08. I'm trying to use webpack t

Bug#903656: publicsuffix 20180523.2326-0+deb9u1 flagged for acceptance

2018-10-17 Thread Daniel Kahn Gillmor
On Tue 2018-10-09 19:15:09 +, Adam D Barratt wrote: > The upload referenced by this bug report has been flagged for acceptance into > the proposed-updates queue for Debian stretch. > > Thanks for your contribution! > > Upload details > == > > Package: publicsuffix > Version: 201805

Bug#911244: stretch-pu: package publicsuffix/20181003.1334-0+deb9u1

2018-10-17 Thread Daniel Kahn Gillmor
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Control: affects -1 publicsuffix Please consider an update to publicsuffix in debian stretch. This package reflects the state of the network, and keeping it current is useful for a

Bug#911189: src:gpgme1.0: please ship gpgme-json with native messaging hooks for chromium and firefox

2018-10-16 Thread Daniel Kahn Gillmor
Package: src:gpgme1.0 Version: 1.12.0-1 Severity: wishlist as of gpgme 1.12.0-1, GPGME ships a javascript binding that works with so-called "Native Messaging" in both chrome and firefox. we should ship this as a separate binary package, along with the appropriate extension manifests. for more de

Bug#909000: [Pkg-mozext-maintainers] Bug#909000: Thunderbird 60 cannot STILL be at stretch normal repository

2018-10-16 Thread Daniel Kahn Gillmor
On Tue 2018-10-16 12:05:33 +0200, Carsten Schoenert wrote: > yes, the problem here is Enigmail, not Thunderbird! But I don't see that > this as a vulnerability per se from a security perspective. > And you still can install the Mozilla AddOns manually into FF and TB. > It's a loosing of comfort and

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-15 Thread Daniel Kahn Gillmor
Hi release team, security team: over in #910398, i wrote: On Fri 2018-10-05 17:48:10 -0500, Daniel Kahn Gillmor wrote: > I'd like to update the version of GnuPG in debian stable with a series > of targeted bugfixes (most of which are backported from upstream). > > There are f

Bug#869605: libgpg-error: Add support for arm64ilp32

2018-10-12 Thread Daniel Kahn Gillmor
Hi Wookey-- On Mon 2017-07-24 18:58:48 +0100, Wookey wrote: > This small patch adds support for the arm64ilp32 architecture. I've just pushed this upstream at https://dev.gnupg.org/rEa3f4e8838036a14e87cca811e40c9f670f152fcd sorry for the delay, and thanks for contributing another per-architectur

Bug#872806: [pkg-gnupg-maint] Bug#872806: libgpg-error0 packs runtime support files in shared library

2018-10-12 Thread Daniel Kahn Gillmor
On Fri 2018-10-12 12:36:12 +0200, Sven Joachim wrote: > Control: tags -1 + patch thank you, Sven and Helmut for your attention to this kind of detail. I'm preparing an upload with these changes. Y'all rock! --dkg

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-11 Thread Daniel Kahn Gillmor
On Thu 2018-10-11 13:02:18 +, Georg Faerber wrote: > Although I'm not using Thunderbird and Enigmail myself, I've rolled out > this fix to a couple of friends on Monday. So far, they're pretty happy, > no problems found. thanks for this testing and feedback, Georg! --dkg

Bug#910762: uscan: generated git date uses embedded timezone, should use UTC

2018-10-10 Thread Daniel Kahn Gillmor
Package: devscripts Version: 2.18.6 Severity: normal Control: affects -1 publicsuffix I'd like to use a debian/watch file for the publicsuffix package like this: version=4 opts=mode=git,pretty=%cd,date=%Y%m%d.%H%M \ https://github.com/publicsuffix/list HEAD however, the publicsuffix

Bug#910759: devscripts: uscan documentation: git has a "hash" not a "hush"

2018-10-10 Thread Daniel Kahn Gillmor
n ratt ii reprotest 0.7.8 ii svn-buildpackage 0.8.7 ii w3m0.5.3-36+b1 -- no debconf information From 34f245c53570d9fd83dfa28db7727f314070fc11 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gi

Bug#909000: Thunderbird 60 cannot be at stretch normal repository

2018-10-10 Thread Daniel Kahn Gillmor
On Wed 2018-10-10 17:30:33 +0200, Narcis Garcia wrote: > The good solution for this is to move Thunderbird 60 to > stretch-backports instead of being at normal repository. > > Normal users will keep current Enigmail 2:1.9 , current Thunderbird 1:52 > and current GnuPG 2.1 and not unstable repositor

Bug#910493: [Pkg-privacy-maintainers] Bug#910493: Handle transition from MAT to MAT2

2018-10-08 Thread Daniel Kahn Gillmor
On Sun 2018-10-07 10:31:13 +0200, intrigeri wrote: > intrigeri: >> What matters to me is the users' perspective. I think we should >> provide a clear, unambiguous transition path and avoid leaking >> technical details to users. So once MAT2 reaches feature parity with >> MAT (I think the only real

Bug#909000: Enigmail 2.0 needed in Stretch after Thunderbird 60 upload

2018-10-08 Thread Daniel Kahn Gillmor
On Mon 2018-10-08 16:05:39 +0200, W. Martin Borgert wrote: >> In the meantime, for enigmail, i've pushed a debian/stretch branch into >> salsa with commit id b6e978d64af1defdfed876b09c8a57acb796ad72 as > > Did you push? I can't find the id. I would like to test. thanks for testing! it appears tha

Bug#835394: [pkg-gnupg-maint] Bug#835394: Bug#835394: Same issue here

2018-10-07 Thread Daniel Kahn Gillmor
On Sun 2018-10-07 19:46:38 +0200, Sofus Rose wrote: > 0. systemd is set to a text startup target. > 1. I login to a tty text console. > 2. I run startx I use this same workflow to start X11, and i don't have the problems described. > It may be worth noting that after my DE (Budgie) has started, I

Bug#903656: stretch-pu: package publicsuffix/20180523.2326-0+deb9u1

2018-10-07 Thread Daniel Kahn Gillmor
On Sat 2018-10-06 18:13:12 +0100, Adam D. Barratt wrote: > On Thu, 2018-07-12 at 12:27 -0400, Daniel Kahn Gillmor wrote: >> I've tried multiple times now to attach the debdiff to this bug >> report, >> and it continues to be rejected as spam by bugs.debian.org with thi

Bug#903656: stretch-pu: package publicsuffix/20180523.2326-0+deb9u1

2018-10-07 Thread Daniel Kahn Gillmor
On Sat 2018-10-06 18:13:12 +0100, Adam D. Barratt wrote: > On Thu, 2018-07-12 at 12:27 -0400, Daniel Kahn Gillmor wrote: >> I've tried multiple times now to attach the debdiff to this bug >> report, >> and it continues to be rejected as spam by bugs.debian.org with thi

Bug#910559: cli-common-dev: dh_makeclilibs explicitly uses "chown", which means we cannot use Rules-Requires-Root: no

2018-10-07 Thread Daniel Kahn Gillmor
Package: cli-common-dev Version: 0.9+nmu1 Severity: normal Control: affects -1 src:gmime2.6 I'm trying to rebuild gmime2.6 with Rules-Requires-Root: no (see /usr/share/doc/dpkg-dev/rootless-builds.txt.gz for more details). When I do that, though, it yields the following error: dh_makeclilibs

Bug#909000: Enigmail 2.0 needed in Stretch after Thunderbird 60 upload

2018-10-05 Thread Daniel Kahn Gillmor
On Tue 2018-10-02 14:31:13 -0500, Daniel Kahn Gillmor wrote: > I'm now working on figuring out what updates are needed to GnuPG in > debian stable (stretch) to be able to get the enigmail test suite to > pass. Hopefully they'll be minor, and comprehensible. Turns out ther

Bug#910398: stretch-pu: package gnupg2/2.1.18-8~deb9u3

2018-10-05 Thread Daniel Kahn Gillmor
Package: release.debian.org User: release.debian@packages.debian.org X-Debbugs-Cc: pkg-gnupg-ma...@lists.alioth.debian.org, secur...@debian.org Usertags: pu Tags: stretch Severity: normal Control: affects -1 src:gnupg2 enigmail Control: block 909000 -1 I'd like to update the version of GnuPG i

<    5   6   7   8   9   10   11   12   13   14   >