For what it is worth, the latest widelands (2:1.1-3) in the testing repo
as of today does not appear to have this bug anymore. Thanks for fixing.
Tobias Frost wrote:
Control: tags -1 -moreinfo
Hi waxhead,
thanks for the info! I think I now understand what's happening:
This seems to be
Paul Gevers wrote:
> With a recent upload of memcached the autopkgtest of cachelib fails in
> testing when that autopkgtest is run with the binary packages of
> memcached from unstable. It passes when run with only packages from
> testing. In tabular form:
>
> pass
partman-efi "Fix detection of BIOS-bootable systems" provides a
significant improvement over previous behaviour. However I have a few
comments.
1a) The patch assumes that a GPT disk may be BIOS-bootable only if it
has a BIOS boot partition. But a GPT disk can be BIOS-bootable even
without a
Source: dmraid
Severity: serious
Tags: sid trixie bookworm bookworm-ignore
Hi,
As discussed in bug 864423 and soon to be documented in the
release-notes, dmraid is not to be shipped in Debian stable after the
release of bookworm. This bug should ensure that dmraid will not be in
trixie.
Processing commands for cont...@bugs.debian.org:
> fixed 1034182 owslib/0.29.0-1~exp1
Bug #1034182 {Done: Sebastiaan Couwenberg } [src:owslib]
owslib: CVE-2023-27476
Marked as fixed in versions owslib/0.29.0-1~exp1.
> thanks
Stopping processing here.
Please contact me if you need assistance.
--
Processing commands for cont...@bugs.debian.org:
> reassign 1034177 src:bzip3
Bug #1034177 [bzip3] bipz3 CVE-2023-29415 CVE-2023-29416 CVE-2023-29418
CVE-2023-29419 CVE-2023-29420 CVE-2023-29421
Bug reassigned from package 'bzip3' to 'src:bzip3'.
Ignoring request to alter found versions of bug
Processing commands for cont...@bugs.debian.org:
> tags 1034171 + upstream
Bug #1034171 [src:cmark-gfm] cmark-gfm: CVE-2023-26485 CVE-2023-24824
Added tag(s) upstream.
> tags 1034172 + upstream
Bug #1034172 [src:python-cmarkgfm] python-cmarkgfm: CVE-2023-26485
CVE-2023-24824
Added tag(s)
Control: reassign -1 bzip3
Control: retitle -1 bipz3 CVE-2023-29415 CVE-2023-29416 CVE-2023-29418
CVE-2023-29419 CVE-2023-29420 CVE-2023-29421
Dear Moritz and Sec Team,
Please, correct me if I am wrong, but it seems a bzip3 bug, instead of a
bzip2's.
El 10/04/23 a las 19:33, Moritz Mühlenhoff
Processing control commands:
> reassign -1 bzip3
Bug #1034177 [src:bzip2] bzip2: CVE-2023-29415 CVE-2023-29416 CVE-2023-29418
CVE-2023-29419 CVE-2023-29420 CVE-2023-29421
Bug reassigned from package 'src:bzip2' to 'bzip3'.
Ignoring request to alter found versions of bug #1034177 to the same
Processing commands for cont...@bugs.debian.org:
> reopen 990746
Bug #990746 {Done: Jeremy Bicha } [thawab]
/usr/bin/thawab-gtk: thawab fails to start.
Bug reopened
Ignoring request to alter fixed versions of bug #990746 to the same values
previously set
>
End of message, stopping processing
Source: owslib
X-Debbugs-CC: t...@security.debian.org
Severity: grave
Tags: security
Hi,
The following vulnerability was published for owslib.
CVE-2023-27476[0]:
| OWSLib is a Python package for client programming with Open Geospatial
| Consortium (OGC) web service interface standards, and
Your message dated Mon, 10 Apr 2023 16:19:05 +
with message-id
and subject line Bug#1033697: fixed in flycheck 32~git.20200527.9c435db3-4
has caused the Debian Bug report #1033697,
regarding flycheck: autopkgtest fails: trampoline file does not exists
to be marked as done.
This means that
Processing commands for cont...@bugs.debian.org:
> reassign 1034160 libqt5gui5 5.15.8+dfsg-4
Bug #1034160 [libkscreenlocker5] libkscreenlocker5: Screen locker crashes
asking for loginctl command
Bug reassigned from package 'libkscreenlocker5' to 'libqt5gui5'.
No longer marked as found in
Your message dated Mon, 10 Apr 2023 19:58:44 +0200
with message-id
and subject line Re: Bug#1034182: owslib: CVE-2023-27476
has caused the Debian Bug report #1034182,
regarding owslib: CVE-2023-27476
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is
Source: netatalk
X-Debbugs-CC: t...@security.debian.org
Severity: grave
Tags: security
Hi,
The following vulnerability was published for netatalk.
CVE-2022-43634[0]:
| This vulnerability allows remote attackers to execute arbitrary code
| on affected installations of Netatalk. Authentication is
Source: bzip2
X-Debbugs-CC: t...@security.debian.org
Severity: grave
Tags: security
Hi,
The following vulnerabilities were published for bzip2.
CVE-2023-29415[0]:
| An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A denial
| of service (process hang) can occur with a crafted archive
Hi Santiago,
On Mon, Apr 10, 2023 at 08:51:06PM +0200, Santiago Ruano Rincón wrote:
> Control: reassign -1 bzip3
> Control: retitle -1 bipz3 CVE-2023-29415 CVE-2023-29416
> CVE-2023-29418 CVE-2023-29419 CVE-2023-29420 CVE-2023-29421
>
> Dear Moritz and Sec Team,
>
> Please, correct me if I am
Processing commands for cont...@bugs.debian.org:
> # already fixed in 0.28.1 upstream, found 1034182 0.27.2-2
> close 1034182 0.28.1-1~exp1
Bug #1034182 {Done: Sebastiaan Couwenberg } [src:owslib]
owslib: CVE-2023-27476
Marked as fixed in versions owslib/0.28.1-1~exp1.
Bug #1034182 {Done:
Your message dated Mon, 10 Apr 2023 19:20:16 +
with message-id
and subject line Bug#1033931: fixed in glibc 2.36-9
has caused the Debian Bug report #1033931,
regarding Bug in glibc causes SIGSEGV in fis-gtm; see upstream bug report
to be marked as done.
This means that you claim that the
Hi,
I'm doing the build right now and it got past the part where it's been failing,
so I'm pretty sure we're good!
Adrian, would you be willing to sponsor my upload? I'll send a second mail when
it's ready. The change is extremely small, and to be frank I'll probably skip
running the test
Your message dated Mon, 10 Apr 2023 21:21:39 +
with message-id
and subject line Bug#1034160: fixed in qtbase-opensource-src 5.15.8+dfsg-5
has caused the Debian Bug report #1034160,
regarding libkscreenlocker5: Screen locker crashes asking for loginctl command
to be marked as done.
This means
I've just pushed an update to the code here...
On Mon, Apr 10, 2023 at 05:45:15PM +0200, Pascal Hambourg wrote:
>On 10/04/2023 at 15:13, Steve McIntyre wrote:
>>
>> Overall comment: I'm not trying to make the heuristics 100% reliable
>> here, as I don't think that's actually possible. Instead,
Hi Moritz,
On Mon, Apr 10, 2023 at 07:33:38PM +0200, Moritz Mühlenhoff wrote:
> Source: bzip2
> X-Debbugs-CC: t...@security.debian.org
> Severity: grave
> Tags: security
>
> Hi,
>
> The following vulnerabilities were published for bzip2.
I think this all should be against src:bzip3 instead?
Package: sgt-puzzles
Version: 20230122.806ae71-1
Severity: serious
Tags: security upstream fixed-upstream
X-Debbugs-Cc: Debian Security Team
Ben Harris found multiple issues in sgt-puzzles where a malformed game
description or save file can lead to a buffer overflow, buffer
overread, use of an
Your message dated Tue, 11 Apr 2023 04:04:07 +
with message-id
and subject line Bug#1034055: fixed in fwknop 2.6.10-16
has caused the Debian Bug report #1034055,
regarding fwknop-apparmor-profile: AppArmor profile installed in systemd system
service path
to be marked as done.
This means
On 10/04/2023 at 15:13, Steve McIntyre wrote:
Overall comment: I'm not trying to make the heuristics 100% reliable
here, as I don't think that's actually possible. Instead, I'm trying
to tread the fine line of:
* minimising false negatives - let's try to pick up on the most
common cases
Your message dated Mon, 10 Apr 2023 15:48:57 +
with message-id
and subject line Bug#1032902: fixed in genx 3.6.21-1
has caused the Debian Bug report #1032902,
regarding genx won't start: TypeError: Pen(): arguments did not match any
overloaded call
to be marked as done.
This means that you
Processing commands for cont...@bugs.debian.org:
> unarchive 980132
Bug #980132 {Done: Thomas Goirand } [src:openvswitch]
openvswitch: CVE-2020-27827
Unarchived Bug 980132
> thanks
Stopping processing here.
Please contact me if you need assistance.
--
980132:
Processing commands for cont...@bugs.debian.org:
> close 1027808 2.4.7.1+dfsg-1
Bug #1027808 [src:openimageio] openimageio: CVE-2022-43603 CVE-2022-41999
Ignoring request to alter fixed versions of bug #1027808 to the same values
previously set
Bug #1027808 [src:openimageio] openimageio:
close 1027808 2.4.7.1+dfsg-1
thanks
Processing control commands:
> tag -1 pending
Bug #1034158 [src:geocode-glib] geocode-glib: geolocation not working in
Initial Setup, Weather
Added tag(s) pending.
--
1034158: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034158
Debian Bug Tracking System
Contact ow...@bugs.debian.org
Control: tag -1 pending
Hello,
Bug #1034158 in geocode-glib reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
Hey Pascal, and thanks for the review!
Overall comment: I'm not trying to make the heuristics 100% reliable
here, as I don't think that's actually possible. Instead, I'm trying
to tread the fine line of:
* minimising false negatives - let's try to pick up on the most
common cases where
The patch fixes the bug for Initial Setup and the GNOME Clocks app.
I wasn't able to reproduce the bug in some other GNOME apps that
depend on geocode-glib: Maps and Weather.
Thank you,
Jeremy Bícha
Processing commands for cont...@bugs.debian.org:
> # fixed in bullseye
> severity 1027808 grave
Bug #1027808 [src:openimageio] openimageio: CVE-2022-43603 CVE-2022-41999
Severity set to 'grave' from 'important'
> thanks
Stopping processing here.
Please contact me if you need assistance.
--
Source: geocode-glib
Version: 3.26.3-5
Severity: serious
Forwarded: https://gitlab.gnome.org/GNOME/geocode-glib/-/issues/30
Automatic geolocation isn't working in the GNOME Weather or GNOME
Initial Setup Apps. This is a regression from the libsoup3 migration.
Thank you,
Jeremy Bícha
Package: libkscreenlocker5
Version: 5.27.2-1
Severity: grave
Justification: renders package unusable
Dear Maintainer,
After some libraries updates, I cannot lock my plasma session anymore.
It shows a black screen with a message asking to go to a virtual terminal and
run a 'loginctl
Your message dated Mon, 10 Apr 2023 13:19:06 +
with message-id
and subject line Bug#1034158: fixed in geocode-glib 3.26.3-6
has caused the Debian Bug report #1034158,
regarding geocode-glib: geolocation not working in Initial Setup, Weather
to be marked as done.
This means that you claim
38 matches
Mail list logo
