Processed: your mail

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 808850 patch Bug #808850 [src:xfonts-wqy] xfonts-wqy: FTBFS: Type of arg 1 to shift must be array (not constant item) at ./bdfmerge.pl line 35, near "ARGV)" Added tag(s) patch. > -- Stopping processing here. Please contact me if you need

Processed: severity of 849830 is normal

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 849830 normal Bug #849830 [src:digikam] [src:digikam] Some sources are not included in your package Severity set to 'normal' from 'serious' > thanks Stopping processing here. Please contact me if you need assistance. -- 849830:

Processed: your mail

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 849836 serious Bug #849836 [zekr] zekr: Missing dependency on libwebkitgtk-1.0-0 Severity set to 'serious' from 'important' > End of message, stopping processing here. Please contact me if you need assistance. -- 849836:

Bug#796197: marked as done (CVE-2015-5395)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sun, 01 Jan 2017 04:34:11 + with message-id and subject line Bug#796197: fixed in sogo 3.2.4-0.1 has caused the Debian Bug report #796197, regarding CVE-2015-5395 to be marked as done. This means that you claim that the problem has been

Bug#827812: marked as done (sogo: FTBFS: Ran 13 tests FAILED (4 failures, 0 errors))

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sun, 01 Jan 2017 04:34:12 + with message-id and subject line Bug#827812: fixed in sogo 3.2.4-0.1 has caused the Debian Bug report #827812, regarding sogo: FTBFS: Ran 13 tests FAILED (4 failures, 0 errors) to be marked as done. This

Bug#808850: xfonts-wqy: FTBFS: Type of arg 1 to shift must be array (not constant item) at ./bdfmerge.pl line 35, near "ARGV)"

2016-12-31 Thread Paul Hardy
tags 808850 patch -- This is a patch so that the Makefile will not invoke bdfmerge.pl. Thus the bug in bdfmerge.pl can be downgraded to "Normal" (so it is no longer RC) once this patch is applied. The invocations to bdfmerge.pl specify a range of code points, so that only code points in that

Bug#849841: [src:linux] bpfcc-tools don't work on 4.8 signed kernels

2016-12-31 Thread Liang Guo
Package: src:linux Version: linux-image-4.8.0-2-amd64 Severity: serious Hi, I found bpfcc-tools don't work on linux-image-4.8.0-2-amd64 and linux-image-4.8.0-2-rt-amd64, for these kernels are signed kernel, I think bpfcc-tools don't work on all signed kernels on x86_64 platform. bpfcc-tools

Bug#849531: [Logwatch-devel] Bug#849531: Possible security problem,new logwatch sends mails with charset UTF-8

2016-12-31 Thread Jason Pyeron
> -Original Message- > From: Klaus Ethgen > Sent: Saturday, December 31, 2016 08:48 > To: Willi Mann > Cc: Jason Pyeron; 849...@bugs.debian.org; logwatch-de...@lists.sourceforge.net > > Hi, > > Am Sa den 31. Dez 2016 um 14:28 schrieb Willi Mann: > > thanks for your test cases. However, I

Bug#849696: libogre-1.9.0v5: Ogre games abort on startup with “basic_string::_M_construct null not valid” / freeimage API issues

2016-12-31 Thread James Cowgill
Hi, On 31/12/16 17:49, Manuel A. Fernandez Montecelo wrote: > 2016-12-30 02:33 James Cowgill: >> On 29/12/16 21:52, Thibaut Girka wrote: >>> This started happening since upgrading libfreeimage3, so this might >>> be a bug in >>> it rather than in Ogre itself, but I haven't investigated any

Bug#843163: marked as done (dpkg: -V fails on files with \ in the name)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 21:48:42 + with message-id and subject line Bug#843163: fixed in debhelper 10.2.3 has caused the Debian Bug report #843163, regarding dpkg: -V fails on files with \ in the name to be marked as done. This means that you

Processed: clone and affect

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > clone 813054 -1 -2 -3 Bug #813054 [src:firefox] firefox: contains JSHint work under non-free licence Bug 813054 cloned as bugs 849831-849833 > reassign -1 firefox-esr Bug #849831 [src:firefox] firefox: contains JSHint work under non-free licence

Bug#849830: [src:digikam] Some sources are not included in your package

2016-12-31 Thread Bastien ROUCARIÈS
Package: src:digikam Version: 4:5.3.0-1 user: lintian-ma...@debian.org usertags: source-is-missing severity: serious X-Debbugs-CC: ftpmas...@debian.org Hi, your package includes some files that seem to lack sources in preferred forms of modification (even if removed during clean target). I have

Bug#849829: [arc-gui-clients] Some sources are not included in your package

2016-12-31 Thread Bastien ROUCARIÈS
Package: arc-gui-clients Version: 0.4.6-3 user: lintian-ma...@debian.org usertags: source-is-missing severity: serious X-Debbugs-CC: ftpmas...@debian.org Hi, your package includes some files that seem to lack sources in preferred forms of modification: *

Bug#834404: marked as done (ganeti-instance-debootstrap - uses unsupported losetup -s in default config)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 21:02:25 + with message-id and subject line Bug#834404: fixed in ganeti-instance-debootstrap 0.14-2+deb8u1 has caused the Debian Bug report #834404, regarding ganeti-instance-debootstrap - uses unsupported losetup -s in

Bug#848830: marked as done (dcmtk: remote stack buffer overflow CVE-2015-8979)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 21:02:08 + with message-id and subject line Bug#848830: fixed in dcmtk 3.6.0-15+deb8u1 has caused the Debian Bug report #848830, regarding dcmtk: remote stack buffer overflow CVE-2015-8979 to be marked as done. This

Bug#849365: marked as done (libphp-phpmailer: CVE-2016-10033)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 21:02:32 + with message-id and subject line Bug#849365: fixed in libphp-phpmailer 5.2.9+dfsg-2+deb8u2 has caused the Debian Bug report #849365, regarding libphp-phpmailer: CVE-2016-10033 to be marked as done. This means

Bug#848132: marked as done (most: CVE-2016-1253: shell injection attack using LZMA-compressed files)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 21:02:32 + with message-id and subject line Bug#848132: fixed in most 5.0.0a-2.3+deb8u1 has caused the Debian Bug report #848132, regarding most: CVE-2016-1253: shell injection attack using LZMA-compressed files to be

Bug#798862: marked as done (CVE-2015-0854: Insecure use of system())

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 21:02:33 + with message-id and subject line Bug#798862: fixed in shutter 0.92-0.1+deb8u1 has caused the Debian Bug report #798862, regarding CVE-2015-0854: Insecure use of system() to be marked as done. This means that

Processed: closing 825365

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > close 825365 0.10-1 Bug #825365 [src:assword] assword: FTBFS: ValueError: Namespace Gtk not available Marked as fixed in versions assword/0.10-1. Bug #825365 [src:assword] assword: FTBFS: ValueError: Namespace Gtk not available Marked Bug as

Bug#825365: closing 825365

2016-12-31 Thread Jameson Graef Rollins
close 825365 0.10-1 thanks This was fixed upstream by having the gui module only imported when needed.

Processed: fixed 770492 in 3.2.84-1, fixed 770492 in 3.16.39-1

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > fixed 770492 3.2.84-1 Bug #770492 {Done: Salvatore Bonaccorso } [src:linux] linux-image-3.16.0-4-686-pae: chown removes security.capability xattr on other users' files (CVE-2015-1350) The source 'linux' and version '3.2.84-1'

Bug#836320: marked as done (mactelnet: CVE-2016-7115)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 18:51:25 + with message-id and subject line Bug#836320: fixed in mactelnet 0.4.4-4 has caused the Debian Bug report #836320, regarding mactelnet: CVE-2016-7115 to be marked as done. This means that you claim that the

Bug#842715: marked as done (skrooge: FTBFS with Qt 5.7.1)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 15:18:38 -0300 with message-id <1511245.fdtar5uDkI@tonks> and subject line Fixed long time ago has caused the Debian Bug report #842715, regarding skrooge: FTBFS with Qt 5.7.1 to be marked as done. This means that you claim that the problem has been dealt with.

Bug#849696: libogre-1.9.0v5: Ogre games abort on startup with “basic_string::_M_construct null not valid” / freeimage API issues

2016-12-31 Thread Manuel A. Fernandez Montecelo
Hi, 2016-12-30 02:33 James Cowgill: Control: severity -1 grave Hi, This is RC because nothing using ogre will start anymore. On 29/12/16 21:52, Thibaut Girka wrote: Package: libogre-1.9.0v5 Version: 1.9.0+dfsg1-7+b2 Severity: important Any Ogre game/application (for instance, funguloids,

Processed: fixed 849802 in 0.7-1

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > fixed 849802 0.7-1 Bug #849802 [src:python-cryptography] python-cryptography: FTBFS in stable/jessie Marked as fixed in versions python-cryptography/0.7-1. > thanks Stopping processing here. Please contact me if you need assistance. -- 849802:

Bug#843319: FTBFS: libsexplib-camlp4-dev is no longer available

2016-12-31 Thread Hendrik Tews
Hi, AFAIR the libsexplib dependency is only used for testing after building. It can safely be removed when the the tests are disabled (or when those files that depend on libsexplib have been removed from the Makefile). Bye, Hendrik

Bug#844045: marked as done (gr-radar: FTBFS (linking error))

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 11:38:15 -0500 with message-id <87y3ywrr48@rockytop.rf.org> and subject line gr-radar: FTBFS (linking error) has caused the Debian Bug report #844045, regarding gr-radar: FTBFS (linking error) to be marked as done. This means that you claim that the problem

Bug#848790: nvidia-legacy-304xx-driver: Gnome session doesnt start (Debian testing) - nvidia 304.134-1

2016-12-31 Thread Andreas Beckmann
Control: severity -1 important On 2016-12-22 13:10, Luca Boccassi wrote: > Given with other DEs it's reported to work (maybe an EGL regression?), > shall we lower the severity and let the package migrate so that at least > users with old cards with DEs other than Gnome can still run on Stretch?

Processed: Re: nvidia-legacy-304xx-driver: Gnome session doesnt start (Debian testing) - nvidia 304.134-1

2016-12-31 Thread Debian Bug Tracking System
Processing control commands: > severity -1 important Bug #848790 [nvidia-legacy-304xx-driver] nvidia-legacy-304xx-driver: Gnome session doesnt start (Debian testing) - nvidia 304.134-1 Severity set to 'important' from 'grave' -- 848790: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848790

Processed: Re: Bug#797855: spice-gtk:spice-common/common/generated_* not reliably generated from source

2016-12-31 Thread Debian Bug Tracking System
Processing control commands: > tag -1 + patch Bug #797855 [src:spice-gtk] spice-gtk: spice-common/common/generated_* not reliably Added tag(s) patch. -- 797855: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797855 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#797855: spice-gtk:spice-common/common/generated_* not reliably generated from source

2016-12-31 Thread intrigeri
Control: tag -1 + patch Hi, Liang Guo: > On Thu, Sep 3, 2015 at 3:00 PM, Chris Lamb wrote: >> Just as a summary, adding python-six is not complete fix - your package >> would still not being built from the generated sources. > spice_codegen.py is called in your build

Bug#741342: marked as done (grub2: LVM trouble at boot with several PVs)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 15:31:59 + with message-id <20161231153159.gt20...@riva.ucam.org> and subject line Re: Bug#735935: grub2: LVM trouble at boot with several PVs has caused the Debian Bug report #735935, regarding grub2: LVM trouble at boot with several PVs to be marked as

Bug#743126: marked as done (grub2: LVM trouble at boot with several PVs)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 15:31:59 + with message-id <20161231153159.gt20...@riva.ucam.org> and subject line Re: Bug#735935: grub2: LVM trouble at boot with several PVs has caused the Debian Bug report #735935, regarding grub2: LVM trouble at boot with several PVs to be marked as

Bug#741652: marked as done (grub2: LVM trouble at boot with several PVs)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 15:31:59 + with message-id <20161231153159.gt20...@riva.ucam.org> and subject line Re: Bug#735935: grub2: LVM trouble at boot with several PVs has caused the Debian Bug report #735935, regarding grub2: LVM trouble at boot with several PVs to be marked as

Bug#735935: marked as done (grub2: LVM trouble at boot with several PVs)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 15:31:59 + with message-id <20161231153159.gt20...@riva.ucam.org> and subject line Re: Bug#735935: grub2: LVM trouble at boot with several PVs has caused the Debian Bug report #735935, regarding grub2: LVM trouble at boot with several PVs to be marked as

Bug#830988: marked as done (Fails to reinstall grub in efi system)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 15:24:30 + with message-id <20161231152430.gs20...@riva.ucam.org> and subject line Re: Bug#830988: Fails to reinstall grub in efi system has caused the Debian Bug report #830988, regarding Fails to reinstall grub in efi system to be marked as done. This

Processed: Re: Bug#812574: grub-pc: wants to overwrite admin configuration on each upgrade

2016-12-31 Thread Debian Bug Tracking System
Processing control commands: > forcemerge -1 841889 Bug #812574 [grub-pc] grub-pc: wants to overwrite admin configuration on each upgrade Bug #841889 [grub-pc] grub-pc: ucf prompt that wants to change nothing except remove admin-defined config Severity set to 'serious' from 'important' Marked

Bug#812574: grub-pc: wants to overwrite admin configuration on each upgrade

2016-12-31 Thread Colin Watson
Control: forcemerge -1 841889 On Mon, Jan 25, 2016 at 09:28:56AM +0100, Thorsten Glaser wrote: > On each upgrade, I get prompted by ucf, despite there never being > any diff introduced by grub-pc, i.e. all it wants is to remove my > local admin-provided changes and revert to the package’s

Bug#734837: Why is tk8.4 removal triggering autoremoval messages of not depending packages at this point in time (Was: staden is marked for autoremoval from testing)

2016-12-31 Thread Adam D. Barratt
On Sat, 2016-12-31 at 15:38 +0100, Thibaut Paumard wrote: > I would believe removing tk8.4 by hand from testing could fix the lot of > associated autoremovals. > > Dear release team, thoughts on that? tk8.4 and tcl8.4 were already re-removed from testing this morning. Regards, Adam

Bug#817448: marked as done (enscribe: Removal of debhelper compat 4)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 15:03:44 + with message-id and subject line Bug#817448: fixed in enscribe 0.1.0-2 has caused the Debian Bug report #817448, regarding enscribe: Removal of debhelper compat 4 to be marked as done. This means that you

Bug#849531: Possible security problem, new logwatch sends mails with charset UTF-8

2016-12-31 Thread Willi Mann
Dear Security Team, I would like to get your input on bug #849531 [1]. A short summary: Logwatch is a log summarizer that parses various logfiles and reports a summary, either via e-mail or to stdout. Parts of the input are copied verbatim w.r.t. to their encoding to the output (e.g., usernames,

Processed: found 849365 in 5.1-1

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 849365 5.1-1 Bug #849365 {Done: Thijs Kinkhorst } [src:libphp-phpmailer] libphp-phpmailer: CVE-2016-10033 Marked as found in versions libphp-phpmailer/5.1-1. > thanks Stopping processing here. Please contact me if you

Bug#734837: Why is tk8.4 removal triggering autoremoval messages of not depending packages at this point in time (Was: staden is marked for autoremoval from testing)

2016-12-31 Thread Thibaut Paumard
Dear Andreas, Le 31/12/2016 à 08:23, Andreas Tille a écrit : > Hi, > > On Sat, Dec 31, 2016 at 04:40:32AM +, Debian testing autoremoval watch > wrote: >> staden 2.0.0+b11-2 is marked for autoremoval from testing on 2017-01-29 >> >> It (build-)depends on packages with these RC bugs: >>

Processed: fixed 849365 in 5.1-1.2, fixed 849365 in 5.2.9+dfsg-2+deb8u2

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > fixed 849365 5.1-1.2 Bug #849365 {Done: Thijs Kinkhorst } [src:libphp-phpmailer] libphp-phpmailer: CVE-2016-10033 The source 'libphp-phpmailer' and version '5.1-1.2' do not appear to match any binary packages Marked as fixed

Processed: reassign of already fixed bug

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > unarchive 841600 Bug #841600 {Done: PICCA Frederic-Emmanuel } [src:pyfai] pyfai: FTBFS: Tests failures Unarchived Bug 841600 > reassign 841600 python-scipy Bug #841600 {Done: PICCA

Bug#849531: [Logwatch-devel] Bug#849531: Possible security problem,new logwatch sends mails with charset UTF-8

2016-12-31 Thread 'Klaus Ethgen'
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, Am Sa den 31. Dez 2016 um 14:28 schrieb Willi Mann: > thanks for your test cases. However, I don't think that binmode provides > an acceptable solution, at least not alone. While it ensures that the > strings are valid utf-8 strings, it will

Bug#849531: [Logwatch-devel] Bug#849531: Possible security problem,new logwatch sends mails with charset UTF-8

2016-12-31 Thread Willi Mann
Hi Jason, thanks for your test cases. However, I don't think that binmode provides an acceptable solution, at least not alone. While it ensures that the strings are valid utf-8 strings, it will convert any valid utf-8 character to two "garbage" characters. Try $ ./utf8_test.pl testlog (see

Processed: bug 848800 is forwarded to https://issues.apache.org/jira/browse/TS-5107

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 848800 https://issues.apache.org/jira/browse/TS-5107 Bug #848800 [src:trafficserver] trafficserver: FTBFS: AttributeError: Inliner instance has no attribute 'start_string_prefix' Set Bug forwarded-to-address to

Bug#849777: shutter: CVE-2016-10081: Insecure use of perl exec()

2016-12-31 Thread Christoph Biedl
Christoph Biedl wrote... > The patch attached --- a/bin/shutter +++ b/bin/shutter @@ -7164,8 +7164,13 @@ elsif ( $pid == 0 ) { #see Bug #661424 -my $qfilename = quotemeta $session_screens{$key}->{'long'}; -exec( sprintf( "$^X

Bug#849777: shutter: CVE-2016-10081: Insecure use of perl exec()

2016-12-31 Thread Christoph Biedl
Salvatore Bonaccorso wrote... > CVE-2016-10081[0]: > | /usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote > | attackers to execute arbitrary commands via a crafted image name that > | is mishandled during a "Run a plugin" action. *sigh* Single-argument usage of system/exec

Processed: affects

2016-12-31 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > affects 848785 + src:dune-pdelab Bug #848785 {Done: Gert Wollny } [libvtk6-dev] libvtk6-dev cmake files hardcode nonexisting /usr/lib/libmpi.so Bug #848793 {Done: Gert Wollny } [libvtk6-dev]

Bug#849568: marked as done (aufs-dkms: dkms install fails)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 09:33:26 + with message-id and subject line Bug#849568: fixed in aufs 4.8+20161219-2 has caused the Debian Bug report #849568, regarding aufs-dkms: dkms install fails to be marked as done. This means that you claim that

Bug#822017: marked as done (pykaraoke: Build arch:all+arch:any but is missing build-{arch,indep} targets)

2016-12-31 Thread Debian Bug Tracking System
Your message dated Sat, 31 Dec 2016 09:05:50 + with message-id and subject line Bug#822017: fixed in pykaraoke 0.7.5-1.2 has caused the Debian Bug report #822017, regarding pykaraoke: Build arch:all+arch:any but is missing build-{arch,indep} targets to be

Bug#822017: NMU for pykaraoke

2016-12-31 Thread Dr. Tobias Quathamer
Hi, please find attached the patch for the NMU of pykaraoke, which I've just uploaded to unstable. Regards, Tobias diff -Nru pykaraoke-0.7.5/debian/changelog pykaraoke-0.7.5/debian/changelog --- pykaraoke-0.7.5/debian/changelog 2014-10-07 11:42:45.0 +0200 +++

Bug#849802: python-cryptography: FTBFS in stable/jessie

2016-12-31 Thread Salvatore Bonaccorso
Source: python-cryptography Version: 0.6.1-1 Severity: serious Tags: jessie Justification: FTBFS in stable Hi python-cryptography 0.6.1-1 FTBFS on stable with the attached buildlog. I noticed this while investigating a potential fix for CVE-2016-9243 via either jessie-pu or jessie-security.