Bug#991081: marked as done (gir1.2-diodon-1.0 lacks dependencies)

2021-08-08 Thread Debian Bug Tracking System
Your message dated Sun, 08 Aug 2021 21:18:39 + with message-id and subject line Bug#991081: fixed in diodon 1.11.1-1 has caused the Debian Bug report #991081, regarding gir1.2-diodon-1.0 lacks dependencies to be marked as done. This means that you claim that the problem has been dealt with.

Bug#992008: ruby-google-protobuf: Missing lib/google/protobuf directory and fails require

2021-08-08 Thread Pirate Praveen
On Mon, Aug 9, 2021 at 12:12 am, Pirate Praveen wrote: [copying debian-ruby list] On Sun, 08 Aug 2021 22:08:39 +0530 Akshay S Dinesh wrote: > Package: ruby-google-protobuf > Version: 3.17.3-1 > Severity: grave > Justification: renders package unusable > > Dear Maintainer, > > I was

Bug#992008: ruby-google-protobuf: Missing lib/google/protobuf directory and fails require

2021-08-08 Thread Pirate Praveen
[copying debian-ruby list] On Sun, 08 Aug 2021 22:08:39 +0530 Akshay S Dinesh wrote: > Package: ruby-google-protobuf > Version: 3.17.3-1 > Severity: grave > Justification: renders package unusable > > Dear Maintainer, > > I was trying to install gitlab to reproduce #966653 > > Installed

Bug#962439: sctk: diff for NMU version 2.4.10-20151007-1312Z+dfsg2-3.1

2021-08-08 Thread Giulio Paci
Dear Adrian, thank you for taking care of this issue. Several months ago I filed a RFS bug #981030 taking care of this and other issues. Unfortunately the RFS is still open. If I update the package in order to include this NMU changes, will you consider sponsoring the package? Best regards,

Bug#992008: ruby-google-protobuf: Missing lib/google/protobuf directory and fails require

2021-08-08 Thread Akshay S Dinesh
Package: ruby-google-protobuf Version: 3.17.3-1 Severity: grave Justification: renders package unusable Dear Maintainer, I was trying to install gitlab to reproduce #966653 Installed ruby-google-protobuf from experimental The pg_query library was erroring at startup, with failure to require

Bug#991982: nano does not work with TERM unset

2021-08-08 Thread Bastien Roucariès
Le dimanche 8 août 2021, 10:04:30 UTC Benno Schulenberg a écrit : > > $env -i nano > > command fail because TERM is unset > > I can work around an unset TERM. But what if TERM=="" or TERM=="nonsense"? > Checking whether TERM is a valid terminal name goes too far, in my opinion. > > Also, is the

Bug#991971: [pkg-lynx-maint] Bug#991971: Bug#991971: [CVE-2021-38165] lynx: bug in SSL certificate validation -> leaks password in clear text via SNI (under some circumstances)

2021-08-08 Thread Axel Beckert
Hi Salvatore, Salvatore Bonaccorso wrote: > > > bullseye-security is operational, so we can do both at the same time > > > so that bullseye will be fixed from day one. > > > > That'd be great, thanks! > > > > Feel free to base the security upload upon 2.9.0dev.6-3 which I > > uploaded just

Bug#991971: [pkg-lynx-maint] Bug#991971: [CVE-2021-38165] lynx: bug in SSL certificate validation -> leaks password in clear text via SNI (under some circumstances)

2021-08-08 Thread Salvatore Bonaccorso
Axel, On Sun, Aug 08, 2021 at 12:14:16PM +0200, Axel Beckert wrote: > Hi Moritz, > > Moritz Mühlenhoff wrote: > > > Security Team: Do you think the fix for CVE-2021-38165 should get a > > > DSA? Or do you think it's not important enough and we should target a > > > minor stable update for it? >

Bug#991982: nano does not work with TERM unset

2021-08-08 Thread Benno Schulenberg
> $env -i nano > command fail because TERM is unset I can work around an unset TERM. But what if TERM=="" or TERM=="nonsense"? Checking whether TERM is a valid terminal name goes too far, in my opinion. Also, is the 'vt100' terminal description guaranteed to exist? I ask, because 'dumb' and

Bug#991971: [pkg-lynx-maint] Bug#991971: [CVE-2021-38165] lynx: bug in SSL certificate validation -> leaks password in clear text via SNI (under some circumstances)

2021-08-08 Thread Axel Beckert
Hi Moritz, Moritz Mühlenhoff wrote: > > Security Team: Do you think the fix for CVE-2021-38165 should get a > > DSA? Or do you think it's not important enough and we should target a > > minor stable update for it? > > This breaks a pretty fundamental security assumption for a browser, Ack. >

Bug#991706: marked as done (exiv2: CVE-2021-31292)

2021-08-08 Thread Debian Bug Tracking System
Your message dated Sun, 08 Aug 2021 10:03:29 + with message-id and subject line Bug#991706: fixed in exiv2 0.27.3-3+deb11u1 has caused the Debian Bug report #991706, regarding exiv2: CVE-2021-31292 to be marked as done. This means that you claim that the problem has been dealt with. If this

Bug#991705: marked as done (exiv2: CVE-2021-29457)

2021-08-08 Thread Debian Bug Tracking System
Your message dated Sun, 08 Aug 2021 10:03:29 + with message-id and subject line Bug#991705: fixed in exiv2 0.27.3-3+deb11u1 has caused the Debian Bug report #991705, regarding exiv2: CVE-2021-29457 to be marked as done. This means that you claim that the problem has been dealt with. If this

Bug#991971: [pkg-lynx-maint] Bug#991971: [CVE-2021-38165] lynx: bug in SSL certificate validation -> leaks password in clear text via SNI (under some circumstances)

2021-08-08 Thread Moritz Mühlenhoff
Am Sun, Aug 08, 2021 at 01:54:56AM +0200 schrieb Axel Beckert: > Hi Andreas, > > Andreas Metzler wrote: > > > > tags 991971 fixed-upstream > > > Bug #991971 [lynx] lynx: SSL certificate validation fails with URLs > > > containing user name or user name and password, i.e. > > >