Bug#857573: Processed: Re: systemd: Raise network interfaces fails to stop cleanly on shutdown/reboot

2017-05-14 Thread Christoph Biedl
Guus Sliepen wrote... > I understand the gravity of this bug, the problem is that it's not > ifupdown's fault. That it was ifupdown itself that kept a network > interface up when it detected a network filesystem still being mounted > was a *hack*. Agreed, but at least it worked quite well for

Bug#862360: llvm-toolchain-3.8: Fix R_AARCH64_MOVW_UABS_G3 relocation

2017-05-14 Thread Adrian Bunk
Control: clone -1 -2 -3 Control: reassign -2 src:llvm-toolchain-3.7 Control: retitle -2 llvm-toolchain-3.7: Fix R_AARCH64_MOVW_UABS_G3 Control: reassign -2 src:llvm-toolchain-3.9 Control: retitle -2 llvm-toolchain-3.9: Fix R_AARCH64_MOVW_UABS_G3 On Fri, May 12, 2017 at 02:25:24PM +0200, Graham

Bug#862534: unblock: vlc/2.2.5.1-1~deb9u1

2017-05-14 Thread Sebastian Ramacher
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package vlc, version 2.2.5.1-1~deb9u1. It includes the latest upstream stable release. From vlc's NEWS: Changes between 2.2.5 and 2.2.5.1:

Bug#814007: closed by James Cowgill <jcowg...@debian.org> (Bug#814007: fixed in uchardet 0.0.6-1)

2017-05-14 Thread Jehan Pagès
Hi! Sorry to bother you again. I changed the upstream again. I am still the maintainer, but the project has been moved out of github. Here is the thread on the original github repo where we discussed this: https://github.com/BYVoid/uchardet/issues/22 Now everything is on Freedesktop:

Bug#862528: libcaffe-cuda-dev: libproto.a missing in libcaffe-cuda-dev

2017-05-14 Thread Erik Andresen
Hi, generally a good idea, searching for libproto I ended up with a lot of "libprotobuf" results. But this might break 3rd party software. Maybe the name change should better be done upstream. greetings, Erik Am 14.05.2017 um 14:46 schrieb lumin: Hi Erik, Thank you for this bug report. I

Bug#862550: ITP: r-bioc-genomeinfodbdata -- BioConductor species and taxonomy ID look up tables

2017-05-14 Thread Graham Inggs
Package: wnpp Severity: wishlist Owner: Graham Inggs X-Debbugs-CC: debian-med-packag...@lists.alioth.debian.org, debian-de...@lists.debian.org * Package name: r-bioc-genomeinfodbdata Version : 0.99.0 Upstream Author : Bioconductor Package Maintainer

Bug#844431: policy: packages should be reproducible

2017-05-14 Thread Holger Levsen
On Sun, May 14, 2017 at 05:05:36PM +0200, Bill Allombert wrote: > OK, but how can I check that my package build is reproducible before uploading > it ? in general you cannot find out with 100% certainity whether a given source package will be reproducible. You can only find out with certainity

Bug#862562: debian-live: Log Out option don't work

2017-05-14 Thread syl
Package: debian-live Severity: normal Dear Maintainer, The menu on the top right offers an option to log out (in the submenu "Debian Live user"), it does not work and crash the system. -- System Information: Debian Release: 9.0 APT prefers testing APT policy: (500, 'testing')

Bug#862569: unblock: bind9/1:9.10.3.dfsg.P4-12.3

2017-05-14 Thread Salvatore Bonaccorso
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Hi Please unblock package bind9 The upload fixes three issues: +bind9 (1:9.10.3.dfsg.P4-12.3) unstable; urgency=high + + * Non-maintainer upload. + * Dns64 with "break-dnssec yes;" can

Bug#862573: CVE-2017-8345

2017-05-14 Thread Bastien ROUCARIES
package: src:imagemagick Version: 8:6.9.7.4+dfsg-6 Severity: important Tags: security X-Debbugs-CC: t...@security.debian.org control: found -1 8:6.8.9.9-5+deb8u8 control: found -1 8:6.7.7.10-5+deb7u13 control: found -1 8:6.7.7.10-5+deb7u4 forwarded:

Bug#862572: CVE-2017-8343: he ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) via a crafted file.

2017-05-14 Thread Bastien ROUCARIES
Package: src:imagemagick Version: 8:6.9.7.4+dfsg-6 Severity: important Tags: security X-Debbugs-CC: t...@security.debian.org control: found -1 8:6.8.9.9-5+deb8u8 control: found -1 8:6.7.7.10-5+deb7u13 control: found -1 8:6.7.7.10-5+deb7u4 forwarded:

Bug#862574: CVE-2017-8344

2017-05-14 Thread Bastien ROUCARIES
package: src:imagemagick Version: 8:6.9.7.4+dfsg-6 Severity: important Tags: security X-Debbugs-CC: t...@security.debian.org control: found -1 8:6.8.9.9-5+deb8u8 control: found -1 8:6.7.7.10-5+deb7u13 control: found -1 8:6.7.7.10-5+deb7u4 forwarded:

Bug#862585: Please re-enable build on x32

2017-05-14 Thread James Clarke
Source: reprozip Version: 1.0.9-2 Severity: wishlist Hi, You disabled every architecture except amd64 and i386 as a result of #862351, but upstream actually supports x32 too (I just successfully built it in an x32 chroot). Please could you add x32 back to the list of architectures? Regards,

Bug#862586: devscripts: debrepro should first check that faketime is present

2017-05-14 Thread Alexandre Detiste
Package: devscripts Version: 2.17.5 Severity: normal I, if faketime is not installed, debrepro will fail on the second run. I realize it is already Suggested, be can you please make debrepro fail sooner to avoid wasting CPU/time ? Cheers, -- Package-specific info: --- /etc/devscripts.conf

Bug#862485: fwsnort mustn't set iptables rules when purged

2017-05-14 Thread Axel Beckert
Axel Beckert wrote: > Point taken. Will move that line (or an "fwsnort --ipt-flush") into a > (to be created) prerm and do another QA upload. (Unless you're already > onto it. Feel free to do that.) Unfortunately "fwsnort --ipt-flush" only flushes the chains but does not remove the chains: #

Bug#862354: ITP: installation-birthday -- Receive congratulations on system installation anniversaries

2017-05-14 Thread Holger Levsen
On Fri, May 12, 2017 at 10:09:09AM +0100, Chris Lamb wrote: > Updated the package description to make this clearer. :) cool, thanks! is it already suggested by debian-goodies? ;-) -- cheers, Holger signature.asc Description: Digital signature

Bug#842634: Bug#851877: fails every time

2017-05-14 Thread Guillaume Delacour
Hi, Le 15/05/2017 à 00:50, Adam Borowski a écrit : > > So it's a fully _reproducible_ bug, with a well-defined immediate cause > (even if we haven't identified the indirect cause yet) -- unlike the > original report by Santiago Villa. Thus, it looks we have two different > bugs that just

Bug#862602: libcore-cache-clojure: Package is missing a dependency

2017-05-14 Thread Elana Hashman
Package: libcore-cache-clojure Version: 0.6.5-1 Severity: grave Justification: renders package unusable Control: block -1 by 855722 Hello! While working on packaging libstencil-clojure, I noticed that the dependency org.clojure/data.priority-map was missing, and traced it down to this package:

Bug#862570: libmenu-cache: menu-cached socket may be blocked by another user.

2017-05-14 Thread Andriy Grytsenko
Package: libmenu-cache3 Version: 1.0.2-2 Severity: serious Tags: upstream security The socket placed in /tmp is predictable and public-writable. Therefore if one user placed a symlink to another socket instead of socket for another use then said another user will either be unable to get menu, or

Bug#861623: qytile: broken dependencies render it useless in Stretch

2017-05-14 Thread Andreas Hoenen
Same here. Doesn't that mean that qtile is just unusable in Stretch? Which would mean a release-critical severity like "grave", wouldn't it? And shouldn't #861623 and #861680 get merged? Regards, Andreas -- Andreas Hoenen GPG: 1024D/B888D2CE A4A6 E8B5 593A

Bug#862580: pam: PAM 'user unknown' prevents domain login but allows local logins

2017-05-14 Thread Christian Meyer
Package: libpam0g Version: 1.1.8-3.5 Severity: important File: pam Dear Maintainer, I'm trying to login via ssh as a Windows AD user and auth fails. When doing a ssh-login as a local user it works fine. After login out the local user and trying as domain user again, it works fine, like

Bug#862581: mirror listing update for debian.redlibre.cl

2017-05-14 Thread Pablo Umanzor
Package: mirrors Severity: minor User: mirr...@packages.debian.org Usertags: mirror-list Submission-Type: update Site: debian.redlibre.cl Type: leaf Archive-architecture: amd64 armhf i386 mips mipsel powerpc s390x Archive-http: /debian/ Archive-upstream: mirrors.kernel.org Updates: four

Bug#861581: ITP: rainloop -- Simple, modern & fast web-based email client

2017-05-14 Thread Gunnar Wolf
Hi Daniel, Daniel Ring dijo [Sun, May 07, 2017 at 11:01:33AM +]: > Hi Gunnar, > > I've finished putting together a preliminary version of the package, but I > have a few concerns about it. > > The largest one is that the build system is NodeJS-based, and requires a > version of npm newer

Bug#862590: CVE-2017-8352

2017-05-14 Thread Bastien ROUCARIES
package: src:imagemagick Version: 8:6.9.7.4+dfsg-6 Severity: important Tags: security X-Debbugs-CC: t...@security.debian.org control: found -1 8:6.8.9.9-5+deb8u8 control: found -1 8:6.7.7.10-5+deb7u13 control: found -1 8:6.7.7.10-5+deb7u4 forwarded:

Bug#862593: xarchiver: Adding files to .tar.xz deletes existing content

2017-05-14 Thread Nikolaus Rath
> Steps to reproduce: > > $ echo foo > "Kieran Daycare Contract.pdf" > $ echo bar > "Kieran Daycare 2.pdf" > $ tar cJvf "Kieran Daycare Contract.pdf.tar.xz" "Kieran Daycare > Contract.pdf" > Kieran Daycare Contract.pdf > > $ xarchiver Kieran\ Daycare\ Contract.pdf.tar.xz > # Select Action->Add

Bug#862601: libmaven3-core-java: Version upgrade request to 3.5.0

2017-05-14 Thread Elana Hashman
Package: libmaven3-core-java Version: 3.3.9-4 Severity: wishlist Control: block 862233 by -1 To facilitate packaging leiningen2, this package needs an upgrade to version 3.5.0. This is because its dependency libpomegranate-clojure currently depends on a version of maven much older than

Bug#861699: RFS: writegood-mode/2.0.2-1 [ITP]

2017-05-14 Thread Nicholas D Steeves
control: tag -1 -moreinfo On Sun, May 14, 2017 at 05:02:23PM -0700, Sean Whitton wrote: > control: owner -1 ! > control: tag -1 +moreinfo > > On Tue, May 02, 2017 at 04:58:31PM -0400, Nicholas D Steeves wrote: > > I am looking for a sponsor for my package "writegood-mode" > > a5b0ac4 looks

Bug#817837: closed by Jonathan McDowell <nood...@earth.li> (Bug#817837: fixed in l2tpns 2.2.1-2)

2017-05-14 Thread Adrian Bunk
On Tue, Jul 05, 2016 at 10:09:57AM +, Debian Bug Tracking System wrote: >... > l2tpns (2.2.1-2) unstable; urgency=low > . >* Fix log buffer overrun, thanks to Dave Reeve (closes: #817837) >... Hi Jonathan, thanks a lot for fixing this bug for stretch. It is still present in jessie,

Bug#834213: perlcritic: some code causes a perltidy.ERR file to be created or overwritten

2017-05-14 Thread Jakub Wilk
Control: tags -1 + security * Paul Wise , 2016-08-13, 15:09: There is some code which causes perlcritic to create or overwrite a perltidy.ERR file in the current directory. Perl::Tidy tries to delete existing perltidy.ERR; but if deleting fails, it proceeds as if nothing

Bug#862579: CVE-2017-8349

2017-05-14 Thread Bastien ROUCARIES
package: src:imagemagick Version: 8:6.9.7.4+dfsg-6 Severity: important Tags: security X-Debbugs-CC: t...@security.debian.org control: found -1 8:6.8.9.9-5+deb8u8 control: found -1 8:6.7.7.10-5+deb7u13 control: found -1 8:6.7.7.10-5+deb7u4 forwarded:

Bug#844431: policy: packages should be reproducible

2017-05-14 Thread Guillem Jover
On Sun, 2017-05-14 at 15:20:54 +, Holger Levsen wrote: > On Sun, May 14, 2017 at 05:05:36PM +0200, Bill Allombert wrote: > > OK, but how can I check that my package build is reproducible before > > uploading > > it ? > > in general you cannot find out with 100% certainity whether a given

Bug#862461: tiptop: requires root to run

2017-05-14 Thread Ben Hutchings
On Sun, 2017-05-14 at 10:43 +0200, Tomasz Buchert wrote: > On 12/05/17 18:54, Nathaniel Beaver wrote: > > [...] > > Thank you, Nathaniel. > > I confirm the problem. A safe bet is that > https://lkml.org/lkml/2016/1/11/587 is the cause.  You can verify that > /proc/sys/kernel/perf_event_paranoid

Bug#862578: CVE-2017-8348

2017-05-14 Thread Bastien ROUCARIES
package: src:imagemagick Version: 8:6.9.7.4+dfsg-6 Severity: important Tags: security X-Debbugs-CC: t...@security.debian.org control: found -1 8:6.8.9.9-5+deb8u8 control: found -1 8:6.7.7.10-5+deb7u13 control: found -1 8:6.7.7.10-5+deb7u4 forwarded:

Bug#862583: RFS: reprozip/1.0.9-3 [RC]

2017-05-14 Thread Ghislain Vaillant
Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for the following package: * Package name: reprozip   Version : 1.0.9   Upstream Author : Remi Rampin * URL : https://www.reprozip.org/ * License : BSD   Section :

Bug#842634: Bug#851877: fails every time

2017-05-14 Thread Adam Borowski
On Sun, May 14, 2017 at 10:37:17PM +0200, Michael Stapelberg wrote: > On Sun, May 14, 2017 at 7:59 AM, Adam Borowski wrote: > > > Use: gcc -Wall -o gai gai.c && ./gai localhost 9002 > > > > On all three machines, it looks fine: > > ai_family = 10 > > host=::1, serv=9002

Bug#861699: RFS: writegood-mode/2.0.2-1 [ITP]

2017-05-14 Thread Sean Whitton
control: owner -1 ! control: tag -1 +moreinfo On Tue, May 02, 2017 at 04:58:31PM -0400, Nicholas D Steeves wrote: > I am looking for a sponsor for my package "writegood-mode" a5b0ac4 looks good, except I think you should install the README, which could be quite useful to users. If you're able

Bug#771671: Fixing kexec-tools bugs in jessie

2017-05-14 Thread Khalid Aziz
On 05/14/2017 05:59 AM, Adrian Bunk wrote: > Hi Khalid, > > the following RC bugs are open for kexec-tools in jessie and > seem worth fixing: > > 771671 /sbin/kexec: Unable to load kdump kernel on i386 > 782033 kexec-tools: Reboots the machine while removing the package > 785714

Bug#862604: dh-make-elpa: extending create_docs{}

2017-05-14 Thread Nicholas D Steeves
Package: dh-make-elpa Version: 0.7.1 Severity: wishlist Hi Sean, I thought I'd take a quick look at dh-make-elpa's create_docs, because I've been using dh-make-elpa a lot recently. What do you think of iteratively printing (filename\n) from a list generated from *.md and *.org instead of

Bug#862603: te923con: FTBFS on non-Linux: usb_*_driver_np undefined

2017-05-14 Thread Aaron M. Ucko
Source: te923con Version: 0.6.1-1 Severity: important Justification: fails to build from source The build of te923con for hurd-i386 (admittedly not a release architecture) failed: te923usb.c: In function 'te923_handle': te923usb.c:67:9: warning: implicit declaration of function

Bug#862591: libvte-2.91-0: xfce4-terminal crashes when dumping a lot of text

2017-05-14 Thread Brian Warner
Package: libvte-2.91-0 Version: 0.46.1-1 Severity: grave There seems to be a bug in sid's libvte, such that dumping a large amount of text to stdout in a short period of time causes the terminal program to crash. "cat" of a file with 1MB of the letter "a" is sufficient to reproduce it. I'm

Bug#844431: policy: packages should be reproducible

2017-05-14 Thread Bill Allombert
On Sun, May 14, 2017 at 03:20:54PM +, Holger Levsen wrote: > On Sun, May 14, 2017 at 05:05:36PM +0200, Bill Allombert wrote: > a.) go to http://reproducible.debian.net/$srcpkg and see if its reproducible > today. As I said, I would like to check that my package build is reproducible before I

Bug#860609: influxdb: FTBFS: Test failures

2017-05-14 Thread Santiago Vila
Version: 1.1.1+dfsg1-4 On Wed, 19 Apr 2017, Lucas Nussbaum wrote: > Source: influxdb > Version: 1.1.1+dfsg1-2 > Severity: serious > Tags: stretch sid > User: debian...@lists.debian.org > Usertags: qa-ftbfs-20170418 qa-ftbfs > Justification: FTBFS in stretch on amd64 > > Hi, > > During a

Bug#862422: [pkg-golang-devel] Bug#862422: gccgo-go: wrap gccgo-7 for full Go 1.8 runtime

2017-05-14 Thread Aaron M. Ucko
Michael Hudson-Doyle writes: > Makes sense to me, I'd be happy to upload that change to experimental. Great, thanks! > What's the timeframe for gccgo-7 getting into unstable? Just waiting for > buster development to open? Presumably; I'm not aware of another

Bug#861718: src:cppunit: please update cppunit to 0.14.0

2017-05-14 Thread Rene Engelhard
Hi, On Sun, May 14, 2017 at 10:25:48AM -0500, Steve Robbins wrote: >Hi. I think your plan is fine. I no longer use cppunit myself so I'm happy >to see you take an active role in the maintenance. Please consider OK. >yourself the lead maintainer and feel free to go ahead with upload

Bug#684499: Streaming MOVE commands

2017-05-14 Thread Emilio Jesús Gallego Arias
Hi Adrian, Adrian Bunk writes: > What was the result? > Any chance of getting this one-line change into jessie? So far the current Jessie packages don't include the fix, which forces me to use my own custom packages, so indeed, this is not optimal. jessie-backports seem to

Bug#862577: CVE-2017-8347

2017-05-14 Thread Bastien ROUCARIES
package: src:imagemagick Version: 8:6.9.7.4+dfsg-6 Severity: important Tags: security X-Debbugs-CC: t...@security.debian.org control: found -1 8:6.8.9.9-5+deb8u8 control: found -1 8:6.7.7.10-5+deb7u13 control: found -1 8:6.7.7.10-5+deb7u4 forwarded:

Bug#862584: thunderbird: Thunderbird hang on some usenet articles with attachements

2017-05-14 Thread kjonca
Package: thunderbird Version: 1:45.8.0-3 Severity: normal Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? I have subscribed to nntp group, where is a lot of articles with attachments. This group was a mirror

Bug#862588: tkhtml1: please make the build reproducible

2017-05-14 Thread Chris Lamb
Source: tkhtml1 Version: 1.04-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0], we noticed that tkhtml1 could not be built

Bug#862589: CVE-2017-8351

2017-05-14 Thread Bastien ROUCARIES
package: src:imagemagick Version: 8:6.9.7.4+dfsg-6 Severity: important Tags: security X-Debbugs-CC: t...@security.debian.org control: found -1 8:6.8.9.9-5+deb8u8 control: found -1 8:6.7.7.10-5+deb7u13 control: found -1 8:6.7.7.10-5+deb7u4 forwarded:

Bug#862587: CVE-2017-8350

2017-05-14 Thread Bastien ROUCARIES
package: src:imagemagick Version: 8:6.9.7.4+dfsg-6 Severity: important Tags: security X-Debbugs-CC: t...@security.debian.org control: found -1 8:6.8.9.9-5+deb8u8 control: found -1 8:6.7.7.10-5+deb7u13 control: found -1 8:6.7.7.10-5+deb7u4 forwarded:

Bug#861623: qytile: broken dependencies render it useless in Stretch

2017-05-14 Thread Iain R. Learmonth
qtile isn't in stretch. On Sun, May 14, 2017, at 09:07 PM, Andreas Hoenen wrote: > Same here. > > Doesn't that mean that qtile is just unusable in Stretch? Which would > mean a release-critical severity like "grave", wouldn't it? > > And shouldn't #861623 and #861680 get merged? > > Regards,

Bug#862588: tkhtml1: please make the build reproducible

2017-05-14 Thread Chris Lamb
user 862588 reproducible-bui...@lists.alioth.debian.org usertag 862588 = buildpath thanks Hi, > tkhtml1: please make the build reproducible This is due to shipping a `tkhtml1Config.sh` config file containing build paths (hat won't work on end-user systems anyway as they will never match. :)

Bug#862592: taskcoach: please make the build reproducible

2017-05-14 Thread Chris Lamb
Source: taskcoach Version: 1.4.3-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: fileordering X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0], we noticed that taskcoach could not be

Bug#862595: FTBFS with python3.6

2017-05-14 Thread James Clarke
Source: reprozip Version: 1.0.9-2 Tags: upstream patch Hi, Currently reprozip FTBFS in Ubuntu[1], which has switched to python3.6. The failure is in the test suite: > == > ERROR: test_combine (test_reprozip.TestCombine) >

Bug#862596: libasyncns0: Assignment instead of check for equality in assert: asyncns_setuserdata, asyncns_getuserdata

2017-05-14 Thread Myhailo Danylenko
Package: libasyncns0 Severity: minor Tags: upstream patch Hello. Since I forwarded my bugreport, I'll also forward this one, quite obvious, and still present one, reported by Olof Sivertsson: https://bugs.freedesktop.org/show_bug.cgi?id=91859 Bug applies to libasyncns release 0.8 and current

Bug#862597: clang-3.9-doc: -doc package contains (almost) no documentation

2017-05-14 Thread Ben Harris
Package: clang-3.9-doc Version: 1:3.9.1-8 Severity: grave Justification: renders package unusable Dear Maintainer, According to its description, this package should contain documentation for Clang. It is, however, almost empty: wraith:~$ dpkg -L clang-3.9-doc /. /usr /usr/share

Bug#844431: policy: packages should be reproducible

2017-05-14 Thread Holger Levsen
On Mon, May 15, 2017 at 12:05:17AM +0200, Bill Allombert wrote: > On Sun, May 14, 2017 at 03:20:54PM +, Holger Levsen wrote: > > On Sun, May 14, 2017 at 05:05:36PM +0200, Bill Allombert wrote: > > a.) go to http://reproducible.debian.net/$srcpkg and see if its > > reproducible today. > As I

Bug#789059: what is the state of this?

2017-05-14 Thread Gürkan Myczko
Hello Michael Do you have anything done on this yet? I've quickly given it a look at, here http://sid.ethz.ch/debian/infer/ Yours,

Bug#842634: Bug#851877: fails every time

2017-05-14 Thread Adam Borowski
Control: severity -1 important On Mon, May 15, 2017 at 01:52:09AM +0200, Guillaume Delacour wrote: > Le 15/05/2017 à 00:50, Adam Borowski a écrit : > > So it's a fully _reproducible_ bug, with a well-defined immediate cause > > (even if we haven't identified the indirect cause yet) -- unlike the

Bug#830844: closed by Damyan Ivanov <d...@debian.org> (Bug#830844: fixed in libauthen-krb5-perl 1.9-5)

2017-05-14 Thread Adrian Bunk
On Tue, Jul 12, 2016 at 10:00:21AM +, Debian Bug Tracking System wrote: >... >[ Damyan Ivanov ] >* add patch removing references to obsolete krb5_{get,free}_krbhst. > Thanks to Sergio Gelato. Closes: #830844 >... Hi Damyan, thanks a lot for fixing this bug for stretch. It is

Bug#862571: pcmanfm: single instance socket may be blocked by another user.

2017-05-14 Thread Andriy Grytsenko
Package: pcmanfm Version: 1.2.5-2 Version: 1.2.3-1.1 Severity: serious Tags: upstream security The socket placed in /tmp is predictable and public-writable. Therefore if one user placed a symlink to another socket instead of socket for another user then said another user will either be unable to

Bug#797722: spamassassin cron.daily fails with permission denied for tmp file

2017-05-14 Thread Simon Walter
On 12.05.2017 00:52, Noah Meyerhans wrote: > On Tue, Sep 01, 2015 at 10:57:57PM +, Simon Walter wrote: >> Package: spamassassin >> Version: 3.4.0-6 >> >> cron.daily spamassassin fails because the tmp file can't be created. script >> seems to be executed in /root/ > This bug has been open for

Bug#761627: libtomcrypt-dev: arch-dependent file in "Multi-Arch: same" package

2017-05-14 Thread Michael Stapelberg
Thanks for investigating this issue and providing the updated patch. As Debian is currently in a freeze, I can’t upload the patch right now. Could you ping this email thread/bug report once Debian left the freeze please? Thank you. On Sun, May 14, 2017 at 5:49 PM, François Poirotte

Bug#844431: policy: packages should be reproducible

2017-05-14 Thread Holger Levsen
On Sun, May 14, 2017 at 09:58:12PM +0200, Guillem Jover wrote: > On Sun, 2017-05-14 at 15:20:54 +, Holger Levsen wrote: > > Bill, did you do this for your packages? on re-reading what I wrote here, it occurred to me that this could be read *hostile* despite me having *zero* intentions to

Bug#862593: xarchiver: Adding files to .tar.xz deletes existing content

2017-05-14 Thread Nikolaus Rath
Package: xarchiver Version: 1:0.5.4-1+deb8u1 Severity: critical Justification: causes serious data loss As far as I can tell, using xarchiver to add additional files to a .tar.xz file will destroy the existing data. Steps to reproduce: $ echo foo > "Kieran Daycare Contract.pdf" $ echo bar >

Bug#862422: [pkg-golang-devel] Bug#862422: gccgo-go: wrap gccgo-7 for full Go 1.8 runtime

2017-05-14 Thread Michael Hudson-Doyle
Makes sense to me, I'd be happy to upload that change to experimental. What's the timeframe for gccgo-7 getting into unstable? Just waiting for buster development to open? On 13 May 2017 at 03:13, Aaron M. Ucko wrote: > Package: gccgo-go > Version: 2:1.8~1 > Severity: important

Bug#862594: libasyncns0: libasyncns using pthreads blocks until workers die on free()

2017-05-14 Thread Myhailo Danylenko
Package: libasyncns0 Severity: normal Tags: patch upstream Hello, Forwarding here this bug, since there's no any action from upstream: https://bugs.freedesktop.org/show_bug.cgi?id=94849 When using libasyncns with pthreads support, it freezes entire application, when you try to asyncns_free()

Bug#862599: webhook.service should have ConditionFileExist=/etc/webhook.conf

2017-05-14 Thread Felipe Sateler
Package: webhook Version: 2.5.0-1+b2 Severity: wishlist Hi, The webhook service file could benefit from having ConditionFileExists=/etc/webhook.conf . Since webhook can't do anything if there is no config file, it makes sense to not even start the service if the config file does not exist.

Bug#862600: tests.r-b.o: tests version from sid in testing due to the source is in testing due to Built-Using:…

2017-05-14 Thread Holger Levsen
Package: jenkins.debian.org Severity: normal x-debbugs-cc: b...@debian.org Dear Maintainer, < bunk> https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/golang-github-rackspace-gophercloud.html < bunk> This seems confused by the more recent source that is in stretch due to

Bug#789150: #789150 boot failure with root=UUID= and software RAID

2017-05-14 Thread Elliott Mitchell
I ran into this issue myself and was trying to figure out how to solve it. Examining the initrd image which had been created, the 63-md-raid-arrays.rules and 64-md-raid-assembly.rules files were absent. As mentioned in #789150, mdadm now has its own /usr/share/initramfs-tools/hooks/mdadm which

Bug#862576: etoys: Doesn't get beyond Squeak security key generation

2017-05-14 Thread Víctor Bettachini
Package: etoys Version: 5.0.2408-1 Severity: grave Justification: renders package unusable Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? Just running etoys&. * What exactly did you do (or not do)

Bug#862575: CVE-2017-8346

2017-05-14 Thread Bastien ROUCARIES
package: src:imagemagick Version: 8:6.9.7.4+dfsg-6 Severity: important Tags: security X-Debbugs-CC: t...@security.debian.org control: found -1 8:6.8.9.9-5+deb8u8 control: found -1 8:6.7.7.10-5+deb7u13 control: found -1 8:6.7.7.10-5+deb7u4 forwarded:

Bug#862582: ITP: libtgvoip - VoIP library for Telegram clients

2017-05-14 Thread Коля Гурьев
Package: wnpp Severity: wishlist Hello everybody! I intend to make a package for this VoIP library that is used by the new version of Telegram Desktop. The source is available on GitHub: https://github.com/grishka/libtgvoip This library is software in public domain, and it's distributed under

Bug#842634: Bug#851877: fails every time

2017-05-14 Thread Michael Stapelberg
On Sun, May 14, 2017 at 7:59 AM, Adam Borowski wrote: > On Sat, May 13, 2017 at 08:44:15PM +0200, Michael Stapelberg wrote: > > Sorry for the late reply. > > > > Adam, could you run the attached example program (derived from the > > getaddrinfo and getnameinfo manpages)

Bug#830844: closed by Damyan Ivanov <d...@debian.org> (Bug#830844: fixed in libauthen-krb5-perl 1.9-5)

2017-05-14 Thread Damyan Ivanov
-=| Adrian Bunk, 14.05.2017 21:42:59 +0300 |=- > On Tue, Jul 12, 2016 at 10:00:21AM +, Debian Bug Tracking System wrote: > >... > >[ Damyan Ivanov ] > >* add patch removing references to obsolete krb5_{get,free}_krbhst. > > Thanks to Sergio Gelato. Closes: #830844 > >... > > Hi

Bug#862591: libvte-2.91-0: xfce4-terminal crashes when dumping a lot of text

2017-05-14 Thread Michael Biebl
Control: tags -1 moreinfo unreproducible Control: severity -1 normal Am 14.05.2017 um 22:57 schrieb Brian Warner: > Package: libvte-2.91-0 > Version: 0.46.1-1 > Severity: grave > > There seems to be a bug in sid's libvte, such that dumping a large > amount of text to stdout in a short period of

Bug#862497: texlive-lang-portuguese: Extra \endcsname

2017-05-14 Thread Norbert Preining
tags + 862497 moreinfo thanks Dear Osamu, thanks for your investigation and test case. > Careful tracing of the bug lead me to the following minimal source case > and root cause pf the problem seems to be this texlive-lang-portuguese > package. I suspect the file: >

Bug#829046: Moving away from (unsupportable) FusionForge on Alioth?

2017-05-14 Thread Sergio Durigan Junior
On Sunday, May 14 2017, Boyuan Yang wrote: > 在 2017年5月14日星期日 CST 下午3:04:26,Pirate Praveen 写道: >> As far as I understand, the only thing that is blocking is non >> availability of pagure package. >> >> So helping fix this would help move this forward (currently pagure tests >> are failing). >>

Bug#862598: unblock: udfclient/0.8.7-1

2017-05-14 Thread Pali Rohár
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package udfclient New upstream version fixes CVE-2017-8305 (Buffer overflow in strlcpy implementation), debian bug #861347. As protection for buffer overflows, package has

Bug#861584: xfwm4 bug report filed

2017-05-14 Thread Zenaan Harkness
See XFCE / xfwm4 bug report filed here: https://bugzilla.xfce.org/show_bug.cgi?id=13575 See recent email here: https://mail.xfce.org/pipermail/xfce/2017-May/035584.html

Bug#790098: Using Gnome HiDPI settings confuses emacs window geometry

2017-05-14 Thread Martin Geisler
On Mon, 6 Jun 2016 03:39:48 +0200 Christophe Troestler < christophe.troest...@umons.ac.be> wrote: > > You should start Emacs with > > GDK_SCALE= emacs > > (make a script). Thanks for the solution! I copied the emacs24.desktop file to my home directory: $ cp

Bug#862547: Bug on moving mate panel applets

2017-05-14 Thread Seb Tree
Subject: mate-panel applet become unusable after moving towards another panel Package: mate-panel Version: 1.16.2-1 Severity: normal Dear Maintainer, Starting with initial configuration of MATE. 1 - Open menu on applet (e.g. Task list) 2 - Unlock from panel 3 - Move

Bug#862546: Please add libreoffice-l10n-kk package into the images

2017-05-14 Thread Timur Birsh
Package: live-images Version: 5.0~a5-2 Severity: wishlist Hello, Please add libreoffice-l10n-kk package into the images. Thanks. -- Timur

Bug#862551: RM: libechonest -- ROM; Obsolete library that use an external API that no longer exists.

2017-05-14 Thread Thomas Pierson
Package: ftp.debian.org Severity: normal Hi, Please remove libechonest. This library is now obsolete because it depends on an external API (Echonest API) that no longer exist. Clementine, a music player packaged in Debian, used this library in the past but not anymore. As far as I know, no more

Bug#844431: policy: packages should be reproducible

2017-05-14 Thread Holger Levsen
On Thu, May 11, 2017 at 02:42:43PM +0200, Bill Allombert wrote: > I really think there should be an official tool to do build packages > reproducibly with an interface like cowbuilder. the official tool to build packages reproducible in sid is called "dpkg-buildpackage" (since dpkg 1.18.16 in

Bug#829046: Moving away from (unsupportable) FusionForge on Alioth?

2017-05-14 Thread Boyuan Yang
在 2017年5月14日星期日 CST 下午3:04:26,Pirate Praveen 写道: > As far as I understand, the only thing that is blocking is non > availability of pagure package. > > So helping fix this would help move this forward (currently pagure tests > are failing). > > >>

Bug#844431: policy: packages should be reproducible

2017-05-14 Thread Bill Allombert
On Sun, May 14, 2017 at 02:36:46PM +, Holger Levsen wrote: > On Thu, May 11, 2017 at 02:42:43PM +0200, Bill Allombert wrote: > > I really think there should be an official tool to do build packages > > reproducibly with an interface like cowbuilder. > > the official tool to build packages

Bug#859336: Cloned bug report

2017-05-14 Thread Kjö Hansi Glaz
Hi, Thanks mercedes508 for reporting this issue with seahorse. However, it appears that the error you face "trying for the first time to sign, every signature after that first error goes fine." is not related to the one that was tracked by this bug. I thus cloned this bug report as 862552 [1].

Bug#861298: Location of sample ogg file

2017-05-14 Thread Georges Racinet
control: tag -1 patch Hi, I don't really have insight on the best place to put a sample ogg file ; in the meanwhile, that one is now in python-pygame-doc, and the attached patch fixes the FTBFS for me. Hoping this short-term fix can be useful. diff --git a/debian/changelog b/debian/changelog

Bug#844431: policy: packages should be reproducible

2017-05-14 Thread Holger Levsen
On Sun, May 14, 2017 at 04:51:47PM +0200, Bill Allombert wrote: > > the official tool to build packages reproducible in sid is called > > "dpkg-buildpackage" (since dpkg 1.18.16 in sid since 2016-12-17). > So if your package builds with "dpkg-buildpackage" then the build is > reproducible and any

Bug#862521: further investigation

2017-05-14 Thread Martin Maney
Correction: the Realtek NIC doesn't, in fact, require that firmware. System works the same (aside from the boot message abouit not finding the firmware file) without it, devices renamed the same... And I booted into d-i far enough to see that, yep, it sees the new name when it sets up the NIC.

Bug#862112: #862112: r-base-dev: Generate reproducible output independently of the build path

2017-05-14 Thread Holger Levsen
control: found -1 3.4.0-1 control: notfound -1 3.4.0-1.0~reproducible2 Hi Dirk, I've asked Ximin to file this bug so that we have something to track and to refer in discussions… you wrote: > At work now with limited time, but I think I already told you twice that > there were two of the three

Bug#862537: RM: ruby-bdb -- ROM; dead upstream

2017-05-14 Thread Cédric Boutillier
Package: ftp.debian.org Severity: normal Hi, Please remove ruby-dbd from the archive. It has been dead upstream for a long time. The only reverse dependency, dhelp, has migrated away from Berkeley DB, so there is no reason to keep it any more. Thanks in advance. Cheers, Cédric signature.asc

Bug#862540: Please tighten dependency on libpotrace0

2017-05-14 Thread Vincent Fourmond
Package: potrace Version: 1.14-1 Severity: important Dear potrace Maintainer, I just installed potrace by running apt install potrace, and it kept segfaulting at startup. Upgrading libpotrace0 to the current version fixed the problem. This means that the libpotrace0 dependency to the

Bug#678232:

2017-05-14 Thread Friedrich Mayrhofer
This is the second time i am sending you this mail. I, Friedrich Mayrhofer Donate $ 1,000,000.00 to You, Email Me personally for more details. Regards. Friedrich Mayrhofer

Bug#862547: merge 862549 862547

2017-05-14 Thread luffah
merge 862549 862547 thanks Sorry for the duplicate

Bug#761627: libtomcrypt-dev: arch-dependent file in "Multi-Arch: same" package

2017-05-14 Thread François Poirotte
Hi, It seems the patch "deterministic-latex.patch" is not working as it should. I guess it may have to do with the way it uses escape sequences (in my case, "\\fixedpdfdate" is actually replaced by a form feed character followed by "ixedpdfdate" in the final .tex file). Attached is an

Bug#861282: Pending fixes for bugs in the packer package

2017-05-14 Thread pkg-go-maintainers
tag 861282 + pending thanks Some bugs in the packer package are closed in revision 3b5252a6242d6f53c6f2abb41d0d86932df69785 in branch 'master' by Roger Shimizu The full diff can be seen at https://anonscm.debian.org/cgit/pkg-go/packages/packer.git/commit/?id=3b5252a Commit message: Add

Bug#862560: debian-live: GNOME Software in Debian Live lists only installed packages

2017-05-14 Thread syl
Package: debian-live Severity: normal Dear Maintainer, * What led up to the situation? Launch GNOME Software in Debian Live. Only "Installed" tab show packages. The "All" tab only show "Editor's Picks" on the top, the rest is blank. * What exactly did you do (or not do) that was effective

Bug#862564: ITP: node-chokidar -- wrapper around node.js fs.watch / fs.watchFile / fsevents

2017-05-14 Thread Pirate Praveen
Package: wnpp Severity: wishlist Owner: Pirate Praveen X-Debbugs-CC: debian-de...@lists.debian.org * Package name: node-chokidar Version : 1.7.0 Upstream Author : Paul Miller (http://paulmillr.com) * URL : https://github.com/paulmillr/chokidar *

  1   2   >