NEW changes in stable-new

2017-08-08 Thread Debian FTP Masters
Processing changes file: gnutls28_3.5.8-5+deb9u3_mipsel.changes
  ACCEPT



Bug#862961: jessie-pu: package libembperl-perl/2.5.0-4+deb8u1

2017-08-08 Thread gregor herrmann
On Tue, 08 Aug 2017 15:44:48 -0400, Adam D. Barratt wrote:

> > > I'm attaching the full new debdiff, and I'm looping in Axel for a sanity
> > > check.
> > I won't be tagging this bug report with +confirmed right away, since we're
> > awaiting for some more feedback, but the proposed changes look good to me.
> Me too. Based on the subsequent responses, please go ahead.

Thank you! Uploaded.

Cheers,
gregor

-- 
 .''`.  https://info.comodo.priv.at/ - Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   


signature.asc
Description: Digital Signature


NEW changes in stable-new

2017-08-08 Thread Debian FTP Masters
Processing changes file: gnutls28_3.5.8-5+deb9u3_mips.changes
  ACCEPT
Processing changes file: speech-dispatcher_0.8.6-4+deb9u1_mipsel.changes
  ACCEPT
Processing changes file: torsocks_2.2.0-1+deb9u1_mips64el.changes
  ACCEPT
Processing changes file: torsocks_2.2.0-1+deb9u1_mipsel.changes
  ACCEPT



NEW changes in stable-new

2017-08-08 Thread Debian FTP Masters
Processing changes file: gnutls28_3.5.8-5+deb9u3_armhf.changes
  ACCEPT



Processed: Adding tracking bug for stretch-pu

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> block 793837 by 868756
Bug #793837 {Done: Bernhard Schmidt } [ntp] ntp: Please 
include sntp in the ntp package
793837 was not blocked by any bugs.
793837 was not blocking any bugs.
Added blocking bug(s) of 793837: 868756

-- 
793837: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793837
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



NEW changes in stable-new

2017-08-08 Thread Debian FTP Masters
Processing changes file: speech-dispatcher_0.8.6-4+deb9u1_arm64.changes
  ACCEPT
Processing changes file: speech-dispatcher_0.8.6-4+deb9u1_ppc64el.changes
  ACCEPT
Processing changes file: speech-dispatcher_0.8.6-4+deb9u1_s390x.changes
  ACCEPT
Processing changes file: torsocks_2.2.0-1+deb9u1_arm64.changes
  ACCEPT
Processing changes file: torsocks_2.2.0-1+deb9u1_ppc64el.changes
  ACCEPT
Processing changes file: torsocks_2.2.0-1+deb9u1_s390x.changes
  ACCEPT



NEW changes in stable-new

2017-08-08 Thread Debian FTP Masters
Processing changes file: gnutls28_3.5.8-5+deb9u3_all.changes
  ACCEPT
Processing changes file: gnutls28_3.5.8-5+deb9u3_amd64.changes
  ACCEPT
Processing changes file: gnutls28_3.5.8-5+deb9u3_arm64.changes
  ACCEPT
Processing changes file: gnutls28_3.5.8-5+deb9u3_i386.changes
  ACCEPT
Processing changes file: gnutls28_3.5.8-5+deb9u3_s390x.changes
  ACCEPT
Processing changes file: speech-dispatcher_0.8.6-4+deb9u1_i386.changes
  ACCEPT
Processing changes file: speech-dispatcher_0.8.6-4+deb9u1_mips.changes
  ACCEPT
Processing changes file: torsocks_2.2.0-1+deb9u1_amd64.changes
  ACCEPT
Processing changes file: torsocks_2.2.0-1+deb9u1_i386.changes
  ACCEPT
Processing changes file: torsocks_2.2.0-1+deb9u1_mips.changes
  ACCEPT



Bug#870911: stretch-pu: package torsocks/2.2.0-1+deb9u1

2017-08-08 Thread intrigeri
Adam D. Barratt:
> Control: tags -1 + pending

> On Tue, 2017-08-08 at 12:00 -0400, Adam D. Barratt wrote:
>> Please go ahead.

> Uploaded and flagged for acceptance.

Thanks!



NEW changes in stable-new

2017-08-08 Thread Debian FTP Masters
Processing changes file: speech-dispatcher_0.8.6-4+deb9u1_armel.changes
  ACCEPT
Processing changes file: speech-dispatcher_0.8.6-4+deb9u1_armhf.changes
  ACCEPT
Processing changes file: torsocks_2.2.0-1+deb9u1_armel.changes
  ACCEPT
Processing changes file: torsocks_2.2.0-1+deb9u1_armhf.changes
  ACCEPT



NEW changes in stable-new

2017-08-08 Thread Debian FTP Masters
Processing changes file: gnutls28_3.5.8-5+deb9u3_ppc64el.changes
  ACCEPT
Processing changes file: speech-dispatcher_0.8.6-4+deb9u1_mips64el.changes
  ACCEPT



NEW changes in stable-new

2017-08-08 Thread Debian FTP Masters
Processing changes file: gnutls28_3.5.8-5+deb9u3_mips64el.changes
  ACCEPT



NEW changes in stable-new

2017-08-08 Thread Debian FTP Masters
Processing changes file: gnutls28_3.5.8-5+deb9u3_armel.changes
  ACCEPT



Processed: Re: Bug#871056: transition: openssl

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> forwarded -1 https://release.debian.org/transitions/html/openssl1.0-rm.html
Bug #871056 [release.debian.org] transition: openssl
Set Bug forwarded-to-address to 
'https://release.debian.org/transitions/html/openssl1.0-rm.html'.

-- 
871056: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871056
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#871056: transition: openssl

2017-08-08 Thread Emilio Pozuelo Monfort
Control: forwarded -1 
https://release.debian.org/transitions/html/openssl1.0-rm.html

On 07/08/17 00:08, Sebastian Andrzej Siewior wrote:
> Package: release.debian.org
> User: release.debian@packages.debian.org
> Usertags: transition
> Severity: normal
> 
> This transition should be the final one to get libssl1.0.2 out of
> unstable for Buster and move all libssl1.0-dev users back to libssl-dev.
> There are new 1.0-users comming from to time. The current 1.0 packages
> are tracked at [0]. I still have my old tracker at [1] where I track 1.0
> packages.

I added this [1] a while ago:

https://release.debian.org/transitions/html/openssl1.0-rm.html

Cheers,
Emilio



Bug#870774: marked as done (nmu: mpich 3.2-7)

2017-08-08 Thread Debian Bug Tracking System
Your message dated Tue, 8 Aug 2017 09:27:06 +0200
with message-id <1424143c-5ef2-b265-f061-e25289472...@debian.org>
and subject line Re: Bug#870774: nmu: mpich 3.2-7
has caused the Debian Bug report #870774,
regarding nmu: mpich 3.2-7
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
870774: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870774
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: binnmu

Please binNMU mpich on all architectures building with GCC 7 as the default (the
header files unfortunately encode the GCC version).
--- End Message ---
--- Begin Message ---
On 05/08/17 00:14, Matthias Klose wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: binnmu
> 
> Please binNMU mpich on all architectures building with GCC 7 as the default 
> (the
> header files unfortunately encode the GCC version).

Scheduled.

Emilio--- End Message ---


Bug#871267: marked as done (nmu: budgie-desktop 10.3.1-4)

2017-08-08 Thread Debian Bug Tracking System
Your message dated Tue, 8 Aug 2017 09:19:50 +0200
with message-id 
and subject line Re: Bug#871267: nmu: budgie-desktop 10.3.1-4
has caused the Debian Bug report #871267,
regarding nmu: budgie-desktop 10.3.1-4
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
871267: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871267
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
User: release.debian@packages.debian.org
Usertags: binnmu
Severity: normal

budgie-desktop supports either gnome-settings-daemon << 3.24 or >=
3.24 depending on which gnome-settings-daemon version is present at
build time. Therefore, budgie-desktop will need to be rebuilt with
gnome-settings-daemon 3.24 which is being uploaded now.

This is my first time requesting a binNMU like this so here's my guess
at the wanna-build syntax:

nmu budgie-desktop_10.3.1-4 . ANY . -m 'Rebuild against
gnome-settings-daemon 3.24'
dw budgie-desktop_10.3.1-4 . ANY . -m 'gnome-settings-daemon (>= 3.24)'


Thanks,
Jeremy Bicha
--- End Message ---
--- Begin Message ---
On 07/08/17 15:52, Jeremy Bicha wrote:
> Package: release.debian.org
> User: release.debian@packages.debian.org
> Usertags: binnmu
> Severity: normal
> 
> budgie-desktop supports either gnome-settings-daemon << 3.24 or >=
> 3.24 depending on which gnome-settings-daemon version is present at
> build time. Therefore, budgie-desktop will need to be rebuilt with
> gnome-settings-daemon 3.24 which is being uploaded now.
> 
> This is my first time requesting a binNMU like this so here's my guess
> at the wanna-build syntax:
> 
> nmu budgie-desktop_10.3.1-4 . ANY . -m 'Rebuild against
> gnome-settings-daemon 3.24'
> dw budgie-desktop_10.3.1-4 . ANY . -m 'gnome-settings-daemon (>= 3.24)'

Scheduled.

Emilio--- End Message ---


Bug#871469: transition: ocaml

2017-08-08 Thread Stéphane Glondu
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Dear release team,

We would like to update ocaml from 4.02.3 to 4.05.0. This is 3 major
releases (and 2 years) ahead.

With current unstable, on amd64:
- 9 source uploads (at least) are needed
- 222 packages rebuild fine with no changes
- 22 packages FTBFS with the new version
- 18 packages cannot be rebuilt because one of their b-deps FTBFS

Among the latter 40 packages, 32 are in testing. Bug reports have been
submitted for some of them [1] and patches are available. The
remaining ones are pretty self-contained (no external reverse
dependencies) and can be removed from testing if they get in the
way. I've put details at [2].

ocaml 4.05.0 and a few selected packages have been uploaded to
experimental and build fine on all architectures [3].

[1] 
https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=ocaml-4.05.0-transition;users=debian-ocaml-ma...@lists.debian.org
[2] http://ocaml.debian.net/debian/ocaml-4.05.0%2Brc1/
[3] 
https://buildd.debian.org/status/package.php?p=ocaml%2Ccamlp4%2Cfindlib%2Cocamlbuild=experimental=compact

So, basically, this transition is ready to be started from my point of
view.

I will take care of the necessary binNMUs.

Ben file:

title = "ocaml";
is_affected = .depends ~ /ocaml(-base)?(-nox)?-4.02.3/ | .depends ~ 
/ocaml(-base)?(-nox)?-4.05.0/;
is_good = .depends ~ /ocaml(-base)?(-nox)?-4.05.0/;
is_bad = .depends ~ /ocaml(-base)?(-nox)?-4.02.3/;


Cheers,

-- 
Stéphane

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.11.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8), 
LANGUAGE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)


Bug#871466: stretch-pu: package wrk/4.0.2-2~deb9u1

2017-08-08 Thread Christos Trochalakis

Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu

Hello,

wrk in stable is not functional due to #855118 [0], I'd like to
upload wrk_4.0.2-2~deb9u1 fixing the bug above, plus an FTBFS on mips
architectures.

[0] http://bugs.debian.org/855118
[1] http://bugs.debian.org/801881

Vcs commits:
https://anonscm.debian.org/cgit/collab-maint/wrk.git/commit/?h=debian=f83391282fc9c80380dd64e91f269c6e8e16289d
https://anonscm.debian.org/cgit/collab-maint/wrk.git/commit/?h=debian=a81e6cc12f24f8f980a88fcae9a37c8507abb546

I am attaching the relevant debdiff.
diff -Nru wrk-4.0.2/debian/changelog wrk-4.0.2/debian/changelog
--- wrk-4.0.2/debian/changelog  2016-10-03 03:16:03.0 +0300
+++ wrk-4.0.2/debian/changelog  2017-08-08 10:31:41.0 +0300
@@ -1,3 +1,18 @@
+wrk (4.0.2-2~deb9u1) stretch; urgency=medium
+
+  * Rebuild for stretch.
+
+ -- Christos Trochalakis   Tue, 08 Aug 2017 10:31:41 
+0300
+
+wrk (4.0.2-2) unstable; urgency=medium
+
+  [ Christos Trochalakis ]
+  * Modify previous mips FTBFS patch rendering wrk unusable in all
+architectures. Thanks to Rinat Ibragimov (Closes: #855118)
+  * Fix build on mips architectures (Closes: #801881)
+
+ -- Robert Edmonds   Sat, 05 Aug 2017 16:04:19 -0400
+
 wrk (4.0.2-1) unstable; urgency=medium
 
   [ Robert Edmonds ]
diff -Nru wrk-4.0.2/debian/patches/debian-changes 
wrk-4.0.2/debian/patches/debian-changes
--- wrk-4.0.2/debian/patches/debian-changes 2016-10-03 03:16:03.0 
+0300
+++ wrk-4.0.2/debian/patches/debian-changes 2017-08-08 10:31:41.0 
+0300
@@ -10,15 +10,17 @@
 repository.
 --- wrk-4.0.2.orig/Makefile
 +++ wrk-4.0.2/Makefile
-@@ -1,21 +1,14 @@
- CFLAGS  += -std=c99 -Wall -O2 -D_REENTRANT
- LIBS:= -lpthread -lm -lssl -lcrypto
- 
--TARGET  := $(shell uname -s | tr '[A-Z]' '[a-z]' 2>/dev/null || echo unknown)
-+CFLAGS   += -std=c99 -Wall -D_REENTRANT -D_POSIX_C_SOURCE=200112L 
-D_BSD_SOURCE
+@@ -1,21 +1,11 @@
+-CFLAGS  += -std=c99 -Wall -O2 -D_REENTRANT
+-LIBS:= -lpthread -lm -lssl -lcrypto
++CFLAGS   += -O2 -std=c99 -Wall -D_REENTRANT -D_POSIX_C_SOURCE=200112L 
-D_BSD_SOURCE
 +LIBS += -lpthread -lm -lcrypto -lssl
 +LDFLAGS  += -Wl,-E
  
+-TARGET  := $(shell uname -s | tr '[A-Z]' '[a-z]' 2>/dev/null || echo unknown)
++CFLAGS   += $(shell pkg-config --cflags luajit)
++LIBS += $(shell pkg-config --libs luajit)
+ 
 -ifeq ($(TARGET), sunos)
 -  CFLAGS += -D_PTHREADS -D_POSIX_C_SOURCE=200112L
 -  LIBS   += -lsocket
@@ -32,14 +34,11 @@
 -  CFLAGS  += -D_DECLARE_C99_LDBL_MATH
 -  LDFLAGS += -Wl,-E
 -endif
-+CFLAGS   += $(shell pkg-config --cflags luajit)
-+LIBS += $(shell pkg-config --libs luajit)
-+
 +CFLAGS   += $(CPPFLAGS)
  
  SRC  := wrk.c net.c ssl.c aprintf.c stats.c script.c units.c \
ae.c zmalloc.c http_parser.c
-@@ -50,8 +43,7 @@ clean:
+@@ -50,8 +40,7 @@ clean:
$(RM) -rf $(BIN) obj/*
  
  $(BIN): $(OBJ)
@@ -51,7 +50,7 @@
  
 --- wrk-4.0.2.orig/src/stats.c
 +++ wrk-4.0.2/src/stats.c
-@@ -21,12 +21,12 @@ void stats_free(stats *stats) {
+@@ -21,12 +21,21 @@ void stats_free(stats *stats) {
  
  int stats_record(stats *stats, uint64_t n) {
  if (n >= stats->limit) return 0;
@@ -63,8 +62,17 @@
  uint64_t max = stats->max;
 -while (n < min) min = __sync_val_compare_and_swap(>min, min, n);
 -while (n > max) max = __sync_val_compare_and_swap(>max, max, n);
-+while (n < min) min = __atomic_compare_exchange(>min, , , 
false,__ATOMIC_SEQ_CST,__ATOMIC_SEQ_CST);
-+while (n > max) max = __atomic_compare_exchange(>max, , , 
false,__ATOMIC_SEQ_CST,__ATOMIC_SEQ_CST);
++while (n < min) {
++__atomic_compare_exchange(>min, , , false,
++  __ATOMIC_SEQ_CST, __ATOMIC_SEQ_CST);
++min = stats->min;
++}
++while (n > max) {
++__atomic_compare_exchange(>max, , , false,
++  __ATOMIC_SEQ_CST, __ATOMIC_SEQ_CST);
++max = stats->max;
++}
++
  return 1;
  }
  


Re: [pkg-golang-devel] Bug#860608: Bug#860608: Bug#860608: golang: FTBFS: Go version is "go1.6.1", ignoring -next /<>/api/next.txt

2017-08-08 Thread Paul Tagliamonte
On Tue, May 2, 2017 at 4:23 AM, Michael Hudson-Doyle
 wrote:
> As you can see these are all -dev packages, so the Built-Using is bogus and
> should simply be dropped from the package.
>
> There are quite a few more packages that reference obsolete golang packages
> in their Built-Using...

Indeed. Thanks for pointing that out, I totally forgot this was a thing.

I wrote a script to grab all packages pkg-go maintains that are
arch:all and have a B-U in source.

I went through each one, and I've patched them all in VCS, and they
should be fixed on next upload(s).

  Paul



Bug#864201: marked as done (jessie-pu: dblatex/0.3.5-2)

2017-08-08 Thread Debian Bug Tracking System
Your message dated Wed, 9 Aug 2017 04:56:44 +0200
with message-id 
and subject line Re: Bug#864201: release.debian.org: jessie dblatex breaks 
jessie-stretch dist-upgrade
has caused the Debian Bug report #864201,
regarding jessie-pu: dblatex/0.3.5-2
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
864201: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864201
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: important

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I'd kindly ask you to consider a fix for BTS #863890 for the next
jessie point release:

It has been reported that jessie-stretch dist-upgrades abort because
of the dblatex postrm script failing: it calls texlive-binaries
command mktexlsr which is unavailable at this very moment.

The fix is simple, but needs to be applied to the jessie version of
dblatex.  BTW, is there a final jessie point release planned to fix
such dist-upgrade problems?  This would help as users are expected to
upgrade to the latest jessie point release before upgrading to
stretch:
https://www.debian.org/releases/testing/amd64/release-notes/ch-upgrading.en.html#system-status

Thanks for your feedback on this, Andreas

- -- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

-BEGIN PGP SIGNATURE-

iHsEARECADsWIQSkpui1WTrom0lrgvByjYt+uIjSzgUCWTURYx0cYW5kcmVhc0Bo
b2VuZW4tdGVyc3RhcHBlbi5kZQAKCRByjYt+uIjSzvw7AJ9zb3B+mEXEgA3BMF8f
JWUntfdxQgCfWKXuPEkFZDL8S7MaODl6udarS5A=
=KAX7
-END PGP SIGNATURE-
diff -Nru dblatex-0.3.5/debian/changelog dblatex-0.3.5/debian/changelog
--- dblatex-0.3.5/debian/changelog  2014-12-07 15:10:52.0 +0100
+++ dblatex-0.3.5/debian/changelog  2017-06-05 09:35:43.0 +0200
@@ -1,3 +1,14 @@
+dblatex (0.3.5-3) stable; urgency=high
+
+  * Remove the call of command "mktexlsr" in postrm:
++ It has been reported for some installations to result in upgrade errors
+  when dist-upgrading from jessie to stretch due to the command being
+  temporarily unavailable when dblatex postrm is called.
++ It is superfluous: mktexlsr gets called via a trigger anyway.
+Closes: #863890
+
+ -- Andreas Hoenen   Mon, 05 Jun 2017 09:35:43 
+0200
+
 dblatex (0.3.5-2) unstable; urgency=low
 
   * 20_nb_quotes_in_title.patch:
diff -Nru dblatex-0.3.5/debian/postrm dblatex-0.3.5/debian/postrm
--- dblatex-0.3.5/debian/postrm 2012-05-03 20:40:15.0 +0200
+++ dblatex-0.3.5/debian/postrm 2017-06-05 09:35:43.0 +0200
@@ -19,42 +19,10 @@
 
 
 case "$1" in
-remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
-
-# A call to 'mktexlsr' is needed to unregister the dblatex TeX files
-# in the TeX database '/var/lib/texmf/ls-R-TEXMFMAIN'.
-#
-# This call won't do any harm even if it might be superfluous in
-# special postrm cases, but it may take some time.
-# Thus a performance optimization can be applied to the main case
-# of successful package upgrade:
-# As the new version's postinst script will register the new version's
-# dblatex TeX files in the TeX database, the old version's files that
-# have vanished in the new version will be unregistered implicitly 
then.
-# Thus in the case of successful upgrade to another dblatex version
-# supporting the TeX (de)registration the deregistration call can be
-# left out as a superfluous duplicate.
-
-if test "$1" = upgrade -a -n "$2" && \
-   dpkg --compare-versions "$2" ge 0.1.9-3
-then
-true # Unregistration will be executed implicitly by
- # 'new-postinst configure'.
-else
-mktexlsr /usr/share/texmf # Unregister dblatex TeX files in TeX.
-fi
-;;
 purge)
-# TeX unregistration has already been executed before.
-# (Besides that mktexlsr is not guaranteed to be available at purge
-#  as it belongs to a non-essential package.)
-
 # Remove dblatex configuration directory.
 rm --recursive --force /etc/dblatex
 ;;
-*)
-echo "postrm called with unknown argument \`$1'" >&2
-exit 1
 

Processed: Re: Bug#864027: unblock: swift/2.10.2-1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + pending
Bug #864027 [release.debian.org] stretch-pu: package swift/2.10.2-1
Added tag(s) pending.

-- 
864027: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864027
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#870911: stretch-pu: package torsocks/2.2.0-1+deb9u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + pending
Bug #870911 [release.debian.org] stretch-pu: package torsocks/2.2.0-1+deb9u1
Added tag(s) pending.

-- 
870911: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870911
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#870911: stretch-pu: package torsocks/2.2.0-1+deb9u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + pending

On Tue, 2017-08-08 at 12:00 -0400, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Sun, 2017-08-06 at 08:32 -0400, intrigeri wrote:
> > A few Debian users let me know that the upgrade to Stretch broke some 
> > important
> > use cases of torsocks (most notably, the way some ISPs have set up
> > SMTP-over-Tor-Onion-Services between their email servers); the upstream 
> > author
> > (X-Debbugs-Cc'ed) says a great number of people also complained about 
> > various
> > bugs that share the same root cause.
> > 
> > I would like to fix this in Stretch.
> 
> Please go ahead.

Uploaded and flagged for acceptance.

Regards,

Adam



Bug#864027: unblock: swift/2.10.2-1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + pending

On Tue, 2017-08-08 at 12:41 -0400, Ondrej Novy wrote:
> 2017-08-08 11:32 GMT-04:00 Adam D. Barratt :
> Please go ahead.
> 
> 
> Uploaded, thanks.

Flagged for acceptance.

Regards,

Adam



Processed: Re: Bug#871440: stretch-pu: package speech-dispatcher/0.8.6-4+deb9u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + pending
Bug #871440 [release.debian.org] stretch-pu: package 
speech-dispatcher/0.8.6-4+deb9u1
Added tag(s) pending.

-- 
871440: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871440
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#869434: stretch-pu: package gnutls28/3.5.8-5+deb9u3

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + pending

On Tue, 2017-08-08 at 19:22 +0200, Andreas Metzler wrote:
> On 2017-08-08 "Adam D. Barratt"  wrote:
> > On Sun, 2017-07-23 at 15:28 +0200, Andreas Metzler wrote:
> >> gnutls upstream has pointed out that it would make sense to pull
> >> two patches from 3.5.14. These improve interoperability by avoiding
> >> incorrect OCSP verification errors. These errors could become quite
> >> common with growing popularity of ecdsa signatures.
> 
> > Please go ahead.
> 
> Thanks, uploaded.

Flagged for acceptance into p-u.

Regards,

Adam



Bug#871440: stretch-pu: package speech-dispatcher/0.8.6-4+deb9u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + pending

On Tue, 2017-08-08 at 12:15 -0400, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Tue, 2017-08-08 at 01:35 +0200, Samuel Thibault wrote:
> > In #860898 it was reported that the configuration tool for
> > speech-dispatcher, spd-conf, is completely broken in Stretch.  Since
> > it took a long time for the report to come, we considered it a not bad
> > enough bug to propose a change before the release.
> > 
> > It however seems that now that Stretch is released, users are really
> > having problems with not having a working spd-conf (see thread starting
> > at https://lists.debian.org/debian-accessibility/2017/08/msg2.html),
> > to the point that they are considering reverting to Jessie (see "How
> > long id Jessie supported?" at
> > https://lists.debian.org/debian-accessibility/2017/08/msg00010.html)
> > 
> > The fix for spd-conf is really simple, see the attached patch (already
> > applied upstream) which I propose to upload to Stretch.
> 
> Please go ahead.

Uploaded and flagged for acceptance.

Regards,

Adam



Processed: Re: Bug#869434: stretch-pu: package gnutls28/3.5.8-5+deb9u3

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + pending
Bug #869434 [release.debian.org] stretch-pu: package gnutls28/3.5.8-5+deb9u3
Added tag(s) pending.

-- 
869434: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869434
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#864027: unblock: swift/2.10.2-1

2017-08-08 Thread Ondrej Novy
2017-08-08 11:32 GMT-04:00 Adam D. Barratt :

> Please go ahead.
>

Uploaded, thanks.

-- 
Best regards
 Ondřej Nový

Email: n...@ondrej.org
PGP: 3D98 3C52 EB85 980C 46A5  6090 3573 1255 9D1E 064B


Bug#871242: stretch-pu: package webkit2gtk/2.16.6-0+deb9u1

2017-08-08 Thread Jeremy Bicha
On Tue, Aug 8, 2017 at 12:10 PM, Adam D. Barratt
 wrote:
> While the patch looks harmless enough, adding support for architectures
> that aren't even in the Debian archive as part of a stable update seems
> somewhat strange.

I apologize. I didn't realize that it had previously been unbuildable on m68k.

Thanks,
Jeremy Bicha



Bug#870376: jessie-pu: package sudo/1.8.10p3-1+deb8u5

2017-08-08 Thread Salvatore Bonaccorso
Hi Adam,

On Tue, Aug 08, 2017 at 11:25:53AM -0400, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Tue, 2017-08-01 at 15:55 +0200, Salvatore Bonaccorso wrote:
> > sudo in jessie ist still affected by CVE-2017-1000368. The issue IMHo
> > does not need a DSA, since with the previous fixes due to the /dev
> > traversal changes the issue was not anymore exploitable. Still it
> > would make sense IMHO to address it. Attached is the proposed debdiff.
> 
> Please go ahead.

I will not for now fortunately spotted in time, there is a problem in
my patch. I lost 

snprintf(path, sizeof(path), "/proc/%u/stat", (unsigned int)getpid());

while backporting.

Iwill need either fix that in the patch, or cherry-pick
https://www.sudo.ws/repos/sudo/rev/6f3d9816541b?revcount=120 as well.

Will come back with a revisited patch.

Regards,
Salvatore



Bug#871466: stretch-pu: package wrk/4.0.2-2~deb9u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Tue, 2017-08-08 at 11:02 +0300, Christos Trochalakis wrote:
> wrk in stable is not functional due to #855118 [0], I'd like to
> upload wrk_4.0.2-2~deb9u1 fixing the bug above, plus an FTBFS on mips
> architectures.
> 
> [0] http://bugs.debian.org/855118
> [1] http://bugs.debian.org/801881

I've argued with myself a bit as to whether the FTBFS fix is appropriate
for a stable update, but please go ahead.

Regards,

Adam



Bug#869434: stretch-pu: package gnutls28/3.5.8-5+deb9u3

2017-08-08 Thread Andreas Metzler
On 2017-08-08 "Adam D. Barratt"  wrote:
> On Sun, 2017-07-23 at 15:28 +0200, Andreas Metzler wrote:
>> gnutls upstream has pointed out that it would make sense to pull
>> two patches from 3.5.14. These improve interoperability by avoiding
>> incorrect OCSP verification errors. These errors could become quite
>> common with growing popularity of ecdsa signatures.

> Please go ahead.

Thanks, uploaded.

cu Andreas



Processed: Re: Bug#871466: stretch-pu: package wrk/4.0.2-2~deb9u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #871466 [release.debian.org] stretch-pu: package wrk/4.0.2-2~deb9u1
Added tag(s) confirmed.

-- 
871466: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871466
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



NEW changes in stable-new

2017-08-08 Thread Debian FTP Masters
Processing changes file: gnutls28_3.5.8-5+deb9u3_multi.changes
  ACCEPT
Processing changes file: speech-dispatcher_0.8.6-4+deb9u1_amd64.changes
  ACCEPT
Processing changes file: swift_2.10.2-1~deb9u1_amd64.changes
  ACCEPT
Processing changes file: torsocks_2.2.0-1+deb9u1_sourceonly.changes
  ACCEPT



Bug#870178: jessie-pu: package bareos/14.2.1+20141017gitc6c5b56-3+deb8u3

2017-08-08 Thread Adam D. Barratt
Control: tags -1 -moreinfo +confirmed

On Sun, 2017-07-30 at 22:42 +0100, Adam D. Barratt wrote:
> Control: tags -1 + moreinfo
> 
> On Sun, 2017-07-30 at 21:42 +0200, Felix Geyer wrote:
> > On Sun, 30 Jul 2017 21:37:20 +0200 Felix Geyer  wrote:
> > > debdiff is attached.
> > 
> > Now for real.
> 
> So far as I can tell, the logrotate issues also affects the package in
> unstable - is that correct?

It looks like that was resolved in a subsequent upload.

Please go ahead.

Regards,

Adam




Processed: Re: Bug#870178: jessie-pu: package bareos/14.2.1+20141017gitc6c5b56-3+deb8u3

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 -moreinfo +confirmed
Bug #870178 [release.debian.org] jessie-pu: package 
bareos/14.2.1+20141017gitc6c5b56-3+deb8u3
Removed tag(s) moreinfo.
Bug #870178 [release.debian.org] jessie-pu: package 
bareos/14.2.1+20141017gitc6c5b56-3+deb8u3
Added tag(s) confirmed.

-- 
870178: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870178
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: tagging 870376

2017-08-08 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> # requestor will update patch
> tags 870376 - confirmed + moreinfo
Bug #870376 [release.debian.org] jessie-pu: package sudo/1.8.10p3-1+deb8u5
Removed tag(s) confirmed.
Bug #870376 [release.debian.org] jessie-pu: package sudo/1.8.10p3-1+deb8u5
Added tag(s) moreinfo.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
870376: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870376
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#860243: jessie-pu: package apt-cacher-ng/0.8.0-3

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #860243 [release.debian.org] jessie-pu: package apt-cacher-ng/0.8.0-3
Added tag(s) confirmed.

-- 
860243: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860243
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems




Bug#860243: jessie-pu: package apt-cacher-ng/0.8.0-3

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Thu, 2017-04-13 at 14:33 +0200, Eduard Bloch wrote:
> I would like to upgrade the apt-cacher-ng version in Stable ASAP.
> 
> See attachment for the overview of the proposed changes.  Please note
> that it does not fully resolve #839751, only a minor change was included
> (extra certificate check for the weakest/obvious attacks).

Apologies for the delay in getting back to you.

If you're still interested in this update, please feel free to upload,
fixing up the changelog to account for the fact that jessie is no longer
stable.

> + apt-cacher-ng (0.8.0-4) stable; urgency=high

The convention would be 0.8.0-3+deb8u1 with a distribution of "jessie".

Regards,

Adam



Bug#862961: jessie-pu: package libembperl-perl/2.5.0-4+deb8u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 -moreinfo +confirmed

On Fri, 2017-06-30 at 05:07 +0200, Cyril Brulebois wrote:
> Hi,
> 
> gregor herrmann  (2017-06-28):
> > On Wed, 28 Jun 2017 00:51:33 +0200, Cyril Brulebois wrote:
> > > I haven't matched this to code changes at first glance. For the sake
> > > of clarity: this relates to the Depends → Recommends update, because
> > > code was added to “apache2_invoke enmode perl” where needed?
> > 
> > Thanks for asking; this made me look at the changes again, and made me
> > realize that I made a mistake (I took only one of Axel's commits between
> > 2.5.0-4 and 2.5.0-5 but there were actually three). Sorry for that.
> >  
> > > (The second sentence makes it look like this /was/ the case already, while
> > > this seems to /become/ the case with this particular upload AFAIUI.)
> > 
> > The problem in #810655, as I understand it, is that d/control has
> > libapache2-mod-perl2 in Recommends (which is correct as embperl doesn't
> > require it) but that embperl's /etc/apache2/mods-available/zembperl.load
> > unconditionally tried to load mod_perl.
> 
> 
> > Axel has in a later commit removed the changes in libembperl-perl.postinst
> > again, after verifying that embperl installs without mod_perl, with mod_perl
> > installed and activated and with mod_perl installed but disabled.
> 
> Tests are good. :)
> 
> > So the only remaining code change is actually:
> > 
> > #v+
> > --- a/debian/zembperl.load.in
> > +++ b/debian/zembperl.load.in
> > @@ -1,6 +1,6 @@
> >  # The sucky "zembperl" name is so we load after perl
> > 
> > -# Depends: perl
> > +# Recommends: perl
> > 
> >  
> >LoadModule embperl_module @ARCHLIB@/auto/Embperl/Embperl.so
> > #v-
> > 
> > 
> > I've now tentatively changed d/changelog to say
> > 
> > #v+
> >   * Change hard dependency on mod_perl in zembperl.load to Recommends.
> > mod_perl is not required, and is enabled by default anyway if it is
> > installed.
> > This change matches the package dependencies and fixes an installation
> > failure when libapache2-mod-perl2 is not installed.
> > (Closes: #810655)
> > #v-
> > 
> > 
> > Does this make sense?
> 
> I think the situation is clearer with your explanations above, and the
> changes+changelog look in sync and reasonable.
> 
> > I'm attaching the full new debdiff, and I'm looping in Axel for a sanity
> > check.
> 
> I won't be tagging this bug report with +confirmed right away, since we're
> awaiting for some more feedback, but the proposed changes look good to me.

Me too. Based on the subsequent responses, please go ahead.

Regards,

Adam



Processed: Re: Bug#862961: jessie-pu: package libembperl-perl/2.5.0-4+deb8u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 -moreinfo +confirmed
Bug #862961 [release.debian.org] jessie-pu: package 
libembperl-perl/2.5.0-4+deb8u1
Removed tag(s) moreinfo.
Bug #862961 [release.debian.org] jessie-pu: package 
libembperl-perl/2.5.0-4+deb8u1
Added tag(s) confirmed.

-- 
862961: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862961
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#862363: jessie-pu: package dwww/1.12.1+deb8u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Wed, 2017-07-05 at 23:39 +0200, Robert Luberda wrote:
> +dwww (1.12.1+deb8u1) jessie; urgency=medium
> +
> +  * Fix an old typo in the `Last-Modified' header name that prevents dwww
> +from working correctly on systems running the latest available jessie
> +version of apache2, which as a part its security update for
> CVE-2016-8743
> +started enforcing HTTP headers conformance with the appropriate
> standards
> +(closes: #850016, #850885).
=

Apologies for the delay in getting back to you; please go ahead.

[...]
> Would this be accepted? If yes, could you please let me know how should
> I upload this, as I haven't uploaded anything to stable for ages?

Build the package in a jessie chroot, then simply upload it as you would
for a package destined for any other suite in the main archive (e.g.
unstable). The archive software will automagically do the right thing
based on the changelog (more specifically the .changes) using a target
distribution of "jessie".

Regards,

Adam



Processed: Re: Bug#862363: jessie-pu: package dwww/1.12.1+deb8u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #862363 [release.debian.org] jessie-pu: package dwww/1.12.1+deb8u1
Added tag(s) confirmed.

-- 
862363: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862363
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#864201: release.debian.org: jessie dblatex breaks jessie-stretch dist-upgrade

2017-08-08 Thread Adam D. Barratt
On Mon, 2017-06-05 at 15:05 +0200, Andreas Beckmann wrote:
> On Mon, 05 Jun 2017 09:22:00 + Niels Thykier  wrote:
> > Thanks for filing this issue.  I have cloned a copy of it to the
> > release-notes as it is too late to fix in jessie before the stretch release.
> 
> I think I identified the underlying cause and that can be fixed
> trivially: just changing a dependency from texlive-math-extra to
> texlive-science (plus removing superfluous mktexlsr calls from the
> maintainer scripts to avoid future breakage).
> texlive-math-extra is a real package in jessie but a virtual package in
> stretch, that gives apt a headache and it decides to remove dblatex (and
> does it at the wrong time).
> That fix should avoid updating the jessie package and avoid needing
> something in the release notes :-)

Did anything happen there in the end?

Regards,

Adam



Processed: Re: Bug#870181: stretch-pu: package bareos/16.2.4-3+deb9u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #870181 [release.debian.org] stretch-pu: package bareos/16.2.4-3+deb9u1
Added tag(s) confirmed.

-- 
870181: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870181
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#870181: stretch-pu: package bareos/16.2.4-3+deb9u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Tue, 2017-08-08 at 07:52 +0200, Felix Geyer wrote:
> Control: tags -1 - moreinfo
> 
> On Mon, 31 Jul 2017 00:24:41 +0200 Felix Geyer  wrote:
> > Uh, you are right of course. Not sure how I missed that. Thanks for 
> > checking!
> > I've just upload 16.2.6-3 with those changes to unstable.
> > 
> > While looking further into it I noticed that the version check in
> > bareos-director.postinst is wrong.
> > Instead of 15.2.2-1~ it should be 16.2.4-3+deb9u1~
> 
> The fixed version is now in testing.

Thanks. Please feel free to upload.

Regards,

Adam



Bug#871451: stretch-pu: package up-imapproxy/1.2.8~svn20161210-2

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Tue, 2017-08-08 at 00:09 -0500, Richard Laager wrote:
> I have attached the patch of the changes I intend to (have my sponsor)
> upload. This is identical to the changes in 1.2.8~svn20161210-3 in
> unstable and testing, except for the version number and date in the
> changelog and setting a debian-branch in debian/gbp.conf.

Please go ahead.

Regards,

Adam



Processed: Re: Bug#871451: stretch-pu: package up-imapproxy/1.2.8~svn20161210-2

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #871451 [release.debian.org] stretch-pu: package 
up-imapproxy/1.2.8~svn20161210-2
Added tag(s) confirmed.

-- 
871451: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871451
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#869836: stretch-pu: package nvidia-graphics-drivers/375.82-1~deb9u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Sun, 2017-07-30 at 23:58 +0100, Luca Boccassi wrote:
> On Sun, 2017-07-30 at 23:44 +0100, Adam D. Barratt wrote:
> > On Sun, 2017-07-30 at 23:23 +0100, Luca Boccassi wrote:
> > > To further clarify, the debdiff I attached originally is the one
> > > from
> > > the source I built and tested on Stretch.
> > 
> > That's rather confusing, given that it had the changelog set to
> > "unstable"...
[...]
> It was confusing, sorry about that.
> 
> It was a local build from SVN on my Stretch machine to test it, so I
> hadn't updated the changelog with the stable entry yet.

Please go ahead, and we'll hope it looks sane after that. :-p

Regards,

Adam



Processed: Re: Bug#869836: stretch-pu: package nvidia-graphics-drivers/375.82-1~deb9u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #869836 [release.debian.org] stretch-pu: package 
nvidia-graphics-drivers/375.82-1~deb9u1
Added tag(s) confirmed.

-- 
869836: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869836
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#868756: stretch-pu: package ntp/1:4.2.8p10+dfsg-3+deb9u1 (pre-pre-approval)

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + moreinfo
Bug #868756 [release.debian.org] stretch-pu: package 
ntp/1:4.2.8p10+dfsg-3+deb9u1 (pre-pre-approval)
Added tag(s) moreinfo.

-- 
868756: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868756
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#868756: stretch-pu: package ntp/1:4.2.8p10+dfsg-3+deb9u1 (pre-pre-approval)

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + moreinfo

On Tue, 2017-07-18 at 12:07 +0200, Bernhard Schmidt wrote:
> I'm looking for an indication whether something like this would be acceptable
> for a stable release. If it might be acceptable I would come back with a 
> proper debdiff for approval. A fellow DD has recently asked on the pkg-ntp
> mailinglist about this.
> 
> sntp is the proper NTP client tool bundled with ntp sources, replacing
> ntpdate. It was accidentally included in jessie due to an upstream 
> build-system
> screwup, fixed shortly after, not reenabled in time for Stretch but now built
> in Buster. This makes Stretch having a regression over Jessie by not shipping
> sntp.
> 
> I have added it in a seperate binary package in Buster. I think this will not
> be possible for Stretch, so I would like to add it to the ntp binary package 
> as
> it has been the case with Jessie. The proper breaks/replaces for going to
> Buster should be already in place, but I'll test the upgrade paths before
> submission.

That sounds plausible, yes. As with any p-u request we'd need to see a
tested debdiff before a final ack, hence tagging moreinfo for now.

Regards,

Adam



Bug#870376: jessie-pu: package sudo/1.8.10p3-1+deb8u5

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Tue, 2017-08-01 at 15:55 +0200, Salvatore Bonaccorso wrote:
> sudo in jessie ist still affected by CVE-2017-1000368. The issue IMHo
> does not need a DSA, since with the previous fixes due to the /dev
> traversal changes the issue was not anymore exploitable. Still it
> would make sense IMHO to address it. Attached is the proposed debdiff.

Please go ahead.

Regards,

Adam



Processed: Re: Bug#870376: jessie-pu: package sudo/1.8.10p3-1+deb8u5

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #870376 [release.debian.org] jessie-pu: package sudo/1.8.10p3-1+deb8u5
Added tag(s) confirmed.

-- 
870376: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870376
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#864027: unblock: swift/2.10.2-1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Wed, 2017-06-21 at 23:34 +0200, Ondřej Nový wrote:
> Control: tags -1 - moreinfo
> 
> 
> Hi,
> 
> 
> attaching debdiff against stretch version, build and tested on
> stretch.

Please go ahead.

Regards,

Adam



Processed: Re: Bug#864027: unblock: swift/2.10.2-1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #864027 [release.debian.org] stretch-pu: package swift/2.10.2-1
Added tag(s) confirmed.

-- 
864027: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864027
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#868284: stretch-pu: package suricata/3.2.1-1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #868284 [release.debian.org] stretch-pu: package suricata/3.2.1-1
Added tag(s) confirmed.

-- 
868284: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868284
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#868284: stretch-pu: package suricata/3.2.1-1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Mon, 2017-07-31 at 12:07 +0200, Arturo Borrero Gonzalez wrote:
> Control: tags -1 - moreinfo
> On Tue, 25 Jul 2017 22:54:15 +0200 Arturo Borrero Gonzalez
>  wrote:
> > Currently working on it.
> >
> 
> Hi,
> 
> now unstable containst the code, package version 1:4.0.0-1

Thanks. Please go ahead, with the tweaks from the earlier discussion -
i.e. 3.2.1-1+deb9u1, with a changelog distribution of "stretch".

Regards,

Adam



Bug#869434: stretch-pu: package gnutls28/3.5.8-5+deb9u3

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Sun, 2017-07-23 at 15:28 +0200, Andreas Metzler wrote:
> gnutls upstream has pointed out that it would make sense to pull
> two patches from 3.5.14. These improve interoperability by avoiding
> incorrect OCSP verification errors. These errors could become quite
> common with growing popularity of ecdsa signatures.

Please go ahead.

Regards,

Adam



Processed: Re: Bug#869434: stretch-pu: package gnutls28/3.5.8-5+deb9u3

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #869434 [release.debian.org] stretch-pu: package gnutls28/3.5.8-5+deb9u3
Added tag(s) confirmed.

-- 
869434: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869434
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#869661: stretch-pu: package open-vm-tools/2:10.1.5-5055683-4+deb9u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Tue, 2017-07-25 at 14:23 +0200, Bernd Zeimetz wrote:
> as discussed in #869633 I'd like to fix CVE-2015-5191 in
> open-vm-tools with the next stretch pointrelease.
> 
> A debdiff is attached, I'll upload it to stable(-pu) as
> soon as I have an ack from you.

+open-vm-tools (2:10.1.5-5055683-4+deb9u1) stable; urgency=medium

We generally prefer the changelog distribution to be "stretch".

Please go ahead.

Regards,

Adam



Processed: Re: Bug#869661: stretch-pu: package open-vm-tools/2:10.1.5-5055683-4+deb9u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #869661 [release.debian.org] stretch-pu: package 
open-vm-tools/2:10.1.5-5055683-4+deb9u1
Added tag(s) confirmed.

-- 
869661: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869661
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#869676: stretch-pu: package gnome-exe-thumbnailer/0.9.4-2+deb9u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #869676 [release.debian.org] stretch-pu: package 
gnome-exe-thumbnailer/0.9.4-2+deb9u1
Added tag(s) confirmed.

-- 
869676: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869676
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#869676: stretch-pu: package gnome-exe-thumbnailer/0.9.4-2+deb9u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Tue, 2017-07-25 at 22:50 +0800, James Lu wrote:
> I've prepared an update to gnome-exe-thumbnailer which includes two changes
> backported from the 0.9.5 release:
> 
> 1) Migrating away from insecure Wine+VBScript based parsing of .msi files to
> msitools, as part of the fix for CVE-2017-11421[1] (VBScript code injection 
> via
> filenames containing code). This issue was marked no-dsa, so I'm sending the
> update here instead. I also adjusted the dependencies to add msitools, but 
> IIRC
> this means that users upgrading will need to run dist-upgrade (if such a 
> change
> is too disruptive, I will probably look at disabling version info for .msi
> files entirely).
> 
> 2) Fix readability of version labels by using a dark background colour.
> Previously, the version label exe-thumbnailer adds to generated thumbnails 
> used
> a transparent background, which shows up as white text on white with a default
> configuration.
> 
> [1]: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11421

Please go ahead.

Regards,

Adam



Bug#870659: pu: package irssi/1.0.2-1+deb9u2

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + pending

On Sat, 2017-08-05 at 11:12 -0400, Adam D. Barratt wrote:
> Control: tags -1 -moreinfo +confirmed
> 
> On Thu, 2017-08-03 at 23:35 +0200, Rhonda D'Vine wrote:
> > * Adam D. Barratt  [2017-08-03 23:34:18 CEST]:
> > > Control: tags -1 + stretch moreinfo
> > > 
> > > On Thu, 2017-08-03 at 22:13 +0200, Rhonda D'Vine wrote:
> > > >  for fixing #867598 in stable I prepared a 1.0.2-1+deb9u2 update for
> > > > irssi.  Please find the debdiff attached.
> > > 
> > > Apparently not. :)
> > 
> >  Darn.  I really need more caffein, but people won't bring it to me in
> > the Garden. :)
> > 
> >  Find it attached this time, for sure.
> 
> Please go ahead.

This was uploaded and flagged for acceptance (but somehow we forgot to
update the bug).

Regards,

Adam



Processed: Re: Bug#870659: pu: package irssi/1.0.2-1+deb9u2

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + pending
Bug #870659 [release.debian.org] pu: package irssi/1.0.2-1+deb9u2
Added tag(s) pending.

-- 
870659: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870659
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#870205: stretch-pu: package librsb/1.2.0-rc5-3

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #870205 [release.debian.org] stretch-pu: package librsb/1.2.0-rc5-3
Added tag(s) confirmed.

-- 
870205: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870205
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#870205: stretch-pu: package librsb/1.2.0-rc5-3

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Mon, 2017-07-31 at 00:27 +0200, Rafael Laboissière wrote:
> Version 1.2.0-rc5-3 of the librsb package in stretch suffers a few severe 
> bugs leading to numerically wrong results.  These were solved in the new 
> upstream release 1.2.0-rc7.
> 
> Michele Martone, the upstream author, who also contributes to the Debian 
> package, prepared a minimal patch by backporting the fixes from version 
> 1.2.0-rc7.  This patch was attached to the report of Bug#870137.
> 
> I am attaching below the debdiff between 1.2.0-rc5-3 and the stretch 
> proposed-update 1.2.0-rc5-3+deb9u1.  This version includes the patch 
> proposed by Michele Martone as well as a unit test C source file for 
> verifying that the fix is really implemented.  I added small changes to 
> debian/rules and debian/clean for compiling, running and cleaning this 
> unit test.

Please go ahead.

Regards,

Adam



Processed: Re: Bug#870911: stretch-pu: package torsocks/2.2.0-1+deb9u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #870911 [release.debian.org] stretch-pu: package torsocks/2.2.0-1+deb9u1
Added tag(s) confirmed.

-- 
870911: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870911
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#870911: stretch-pu: package torsocks/2.2.0-1+deb9u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Sun, 2017-08-06 at 08:32 -0400, intrigeri wrote:
> A few Debian users let me know that the upgrade to Stretch broke some 
> important
> use cases of torsocks (most notably, the way some ISPs have set up
> SMTP-over-Tor-Onion-Services between their email servers); the upstream author
> (X-Debbugs-Cc'ed) says a great number of people also complained about various
> bugs that share the same root cause.
> 
> I would like to fix this in Stretch.

Please go ahead.

Regards,

Adam



Processed: Re: Bug#871242: stretch-pu: package webkit2gtk/2.16.6-0+deb9u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #871242 [release.debian.org] stretch-pu: package webkit2gtk/2.16.6-0+deb9u1
Added tag(s) confirmed.

-- 
871242: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871242
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#871242: stretch-pu: package webkit2gtk/2.16.6-0+deb9u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Mon, 2017-08-07 at 01:02 -0400, Jeremy Bicha wrote:
> webkit2gtk 2.16.6 was released 2 weeks ago which is plenty of time for
> any regressions to be identified. I am unaware of any regressions with
> this update.
[...]
> webkit2gtk (2.16.6-0+deb9u1) stretch; urgency=medium
> 
>   * Team upload.
>   * New upstream security and bugfix release.
>   * Fixes these security issues reported in WSA-2017-0005 and
> WSA-2017-0006:
> + CVE-2017-2538, CVE-2017-7052 (fixed in 2.16.4)
> + CVE-2017-7018, CVE-2017-7030, CVE-2017-7034, CVE-2017-7037,
>   CVE-2017-7039, CVE-2017-7046, CVE-2017-7048, CVE-2017-7055,
>   CVE-2017-7056, CVE-2017-7061, CVE-2017-7064 (fixed in 2.16.6).
>   * Add debian/patches/fix-ftbfs-m68k.patch:
> + Fix FTBFS in m68k (Closes: #868126).

While the patch looks harmless enough, adding support for architectures
that aren't even in the Debian archive as part of a stable update seems
somewhat strange.

Please go ahead.

Regards,

Adam



Bug#871440: stretch-pu: package speech-dispatcher/0.8.6-4+deb9u1

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed

On Tue, 2017-08-08 at 01:35 +0200, Samuel Thibault wrote:
> In #860898 it was reported that the configuration tool for
> speech-dispatcher, spd-conf, is completely broken in Stretch.  Since
> it took a long time for the report to come, we considered it a not bad
> enough bug to propose a change before the release.
> 
> It however seems that now that Stretch is released, users are really
> having problems with not having a working spd-conf (see thread starting
> at https://lists.debian.org/debian-accessibility/2017/08/msg2.html),
> to the point that they are considering reverting to Jessie (see "How
> long id Jessie supported?" at
> https://lists.debian.org/debian-accessibility/2017/08/msg00010.html)
> 
> The fix for spd-conf is really simple, see the attached patch (already
> applied upstream) which I propose to upload to Stretch.

Please go ahead.

Regards,

Adam



Processed: Re: Bug#871440: stretch-pu: package speech-dispatcher/0.8.6-4+deb9u1

2017-08-08 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + confirmed
Bug #871440 [release.debian.org] stretch-pu: package 
speech-dispatcher/0.8.6-4+deb9u1
Added tag(s) confirmed.

-- 
871440: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871440
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems