Bug#690471: marked as done (unblock: tgmochikit/1.4.2-2.1)

2012-10-15 Thread Debian Bug Tracking System
Your message dated Mon, 15 Oct 2012 08:00:21 +0200
with message-id 20121015060021.gm17...@radis.cristau.org
and subject line Re: Bug#690471: unblock: tgmochikit/1.4.2-2.1
has caused the Debian Bug report #690471,
regarding unblock: tgmochikit/1.4.2-2.1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
690471: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690471
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package tgmochikit.  This version clarifies the
licence status of some files.

diff -u tgmochikit-1.4.2/debian/changelog tgmochikit-1.4.2/debian/changelog
--- tgmochikit-1.4.2/debian/changelog
+++ tgmochikit-1.4.2/debian/changelog
@@ -1,3 +1,14 @@
+tgmochikit (1.4.2-2.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Remove the text 'See scriptaculous.js for full license' from
+Sortable.js.  This file (and DragAndDrop.js) is derived from
+scriptaculous-js http://script.aculo.us/dist/ which is MIT-licenced
+and compatible with the MIT/AFL dual-licence applied to all the
+Javascript code. (Closes: #689285)
+
+ -- Ben Hutchings b...@decadent.org.uk  Sat, 13 Oct 2012 12:46:29 +0100
+
 tgmochikit (1.4.2-2) unstable; urgency=low
 
   [ Jakub Wilk ]
diff -u tgmochikit-1.4.2/debian/copyright tgmochikit-1.4.2/debian/copyright
--- tgmochikit-1.4.2/debian/copyright
+++ tgmochikit-1.4.2/debian/copyright
@@ -19,7 +19,7 @@
 MIT for the Python part
 MIT/AFL for the JavaScript part
 
-All Mochikit JavaScript files report All Rights Reserved. This is, from the
+Most Mochikit JavaScript files report All Rights Reserved. This is, from the
 point of view of MochiKit upstream, a way to redirect the licensing to the
 LICENSE.txt files that can be found in the distribution root (which dual
 licenses it MIT and AFL). See: http://markmail.org/message/doxccpq5mefweeay
only in patch2:
unchanged:
--- 
tgmochikit-1.4.2.orig/tgmochikit/static/javascript/1.4_r1383/unpacked/Sortable.js
+++ tgmochikit-1.4.2/tgmochikit/static/javascript/1.4_r1383/unpacked/Sortable.js
@@ -2,8 +2,6 @@
 Copyright (c) 2005 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)
 Mochi-ized By Thomas Herve (_firstna...@nimail.org)
 
-See scriptaculous.js for full license.
-
 ***/
 
 MochiKit.Base._deps('Sortable', ['Base', 'Iter', 'DOM', 'Position', 
'DragAndDrop']);
only in patch2:
unchanged:
--- tgmochikit-1.4.2.orig/tgmochikit/static/javascript/1.4/unpacked/Sortable.js
+++ tgmochikit-1.4.2/tgmochikit/static/javascript/1.4/unpacked/Sortable.js
@@ -2,8 +2,6 @@
 Copyright (c) 2005 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)
 Mochi-ized By Thomas Herve (_firstna...@nimail.org)
 
-See scriptaculous.js for full license.
-
 ***/
 
 MochiKit.Base._deps('Sortable', ['Base', 'Iter', 'DOM', 'Position', 
'DragAndDrop']);
only in patch2:
unchanged:
--- 
tgmochikit-1.4.2.orig/tgmochikit/static/javascript/trunk/unpacked/Sortable.js
+++ tgmochikit-1.4.2/tgmochikit/static/javascript/trunk/unpacked/Sortable.js
@@ -2,8 +2,6 @@
 Copyright (c) 2005 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)
 Mochi-ized By Thomas Herve (_firstna...@nimail.org)
 
-See scriptaculous.js for full license.
-
 ***/
 
 MochiKit.Base._module('Sortable', '1.5', ['Base', 'Iter', 'DOM', 'Position', 
'DragAndDrop']);
only in patch2:
unchanged:
--- 
tgmochikit-1.4.2.orig/tgmochikit/static/javascript/1.4.1/unpacked/Sortable.js
+++ tgmochikit-1.4.2/tgmochikit/static/javascript/1.4.1/unpacked/Sortable.js
@@ -2,8 +2,6 @@
 Copyright (c) 2005 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)
 Mochi-ized By Thomas Herve (_firstna...@nimail.org)
 
-See scriptaculous.js for full license.
-
 ***/
 
 MochiKit.Base._deps('Sortable', ['Base', 'Iter', 'DOM', 'Position', 
'DragAndDrop']);
only in patch2:
unchanged:
--- 
tgmochikit-1.4.2.orig/tgmochikit/static/javascript/1.4.2/unpacked/Sortable.js
+++ tgmochikit-1.4.2/tgmochikit/static/javascript/1.4.2/unpacked/Sortable.js
@@ -2,8 +2,6 @@
 Copyright (c) 2005 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)
 Mochi-ized By Thomas Herve (_firstna...@nimail.org)
 
-See scriptaculous.js for full license.
-
 ***/
 
 MochiKit.Base._deps('Sortable', ['Base', 'Iter', 'DOM', 'Position', 
'DragAndDrop']);
--- END ---

unblock tgmochikit/1.4.2-2.1

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: 

Removal request of OpenVAS packages from testing

2012-10-15 Thread Javier Fernandez-Sanguino
Dear Release Managers,

I would like to request you to remove *all* of the OpenVAS 2.x
packages from the current testing distribution. This includes the
following packages:

- libopenvas2 /  libopenvas2-dev (version 2.0.4-2.1)
- libopenvasnasl2 / libopenvasnasl2-dev (version 2.0.2-2.1)
- openvas-client (version 2.0.5-1.1)
- openvas-plugins-base / openvas-plugins-dfsg (version 1:20100705-2)
- openvas-server / openvas-server-dev (version 2.0.3-6)

Support for OpenVAS 2 was discontinued last year [2]. Providing
OpenVAS 2 to our Debian 'stable' users in our upcoming release is not
really a good idea. Even though the scanner/client works 'as it is',
users will not be able to download new plugins for this release from
the OpenVAs servers and it will not be possible for them to find
recent vulnerabilities in hosts they scan.

For the last  2 years I have provided experimental versions of OpenVAS
3, which seem to have not received to much attention from users. In
any case since that version is also going to be discontinued upstream.
Since the latest OpenVAS release is version 5 [1]  (released May this
year) I will work towards providing OpenVAS 5 in our unstable
distribution. And, once available, will try to make backports
available for Wheezy too.

Removing the OpenVAS 2 packages from testing simplifies handling
upgrades to the newer version and also installations of the backports
of OpenVAS 5 packages in Wheezy.

Please let me know if I should open up an RC bug against these
packages for this removal.

Thanks,

Javier


[1] http://www.openvas.org/news_archive.html#openvas5

[2] 
http://lists.wald.intevation.org/pipermail/openvas-announce/2011-June/000127.html


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAB9B7Us6GKR=tufmdbmrtaumoboiiforpsc_cmkxnobnp3j...@mail.gmail.com



Bug#683323: unblock: python-apt/0.8.7

2012-10-15 Thread Michael Vogt
On Sun, Oct 14, 2012 at 01:48:52PM +0300, Martin-Éric Racine wrote:
 2012/9/3 Michael Vogt m...@debian.org:
  On Mon, Aug 27, 2012 at 01:24:24PM +0200, Julian Andres Klode wrote:
  On Mon, Aug 27, 2012 at 02:10:17PM +0300, Martin-Éric Racine wrote:
   ke, 2012-08-08 kello 01:50 +0200, Cyril Brulebois kirjoitti:
[..]
  I created a branch at
  http://anonscm.debian.org/bzr/bzr/apt/python-apt/debian-wheezy/ that
  is based on the debian-sid branch but disables auth.py. I am happy to
  upload this to wheezy if that approach is approved by the release
  team.
 
 Release Team:
 
 A separate branch was created for Wheezy and a debdiff submitted. Is
 there anything else missing to move this issue forward and achieve a
 concensus about what will be allowed into Testing?

It would be great to know the direction, I uploaded a version of
python-apt 0.8.8 to sid in the meantime with some more fixes. I am
happy to cherry pick the fixes to the wheezy branch - but of course I
need to know if thats the way forward or if 0.8.8 (with the auth.py
module) is allowed to get in. I'm happy either way. I would slightly
prefer 0.8.8 as the auth.py module is IMO a good idea compared to
having multiple apps duplicating this code in various places.

Cheers,
 Michael


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121015071436.GT3172@localhost



Bug#690528: unblock: xml2rfc/1.36-5

2012-10-15 Thread Helmut Grohne
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

unblock xml2rfc/1.36-5

The squeeze version of xml2rfc fails to remove /etc/sgml/xml2rfc.cat on
either remove or purge. Upgrading such a system and then installing
wheezy's xml2rfc results in a conffile prompt as discovered by Andreas
Beckmann using piuparts in #680291. Note that the behaviour of the
squeeze package is a policy violation. The updated version solves the
conffile prompt for the left over file. I attched the full debdiff
between the version currently in wheezy and the fixing version in sid.

Helmut
diff -Nru xml2rfc-1.36/debian/changelog xml2rfc-1.36/debian/changelog
--- xml2rfc-1.36/debian/changelog   2012-08-31 20:16:57.0 +0200
+++ xml2rfc-1.36/debian/changelog   2012-10-15 01:31:22.0 +0200
@@ -1,3 +1,11 @@
+xml2rfc (1.36-5) unstable; urgency=low
+
+  [ Helmut Grohne ]
+  * Always remove /etc/sgml/xml2rfc.cat when it is not a conffile.
+(Closes: #680291)  
+
+ -- Daniel Kahn Gillmor d...@fifthhorseman.net  Sun, 14 Oct 2012 19:30:24 
-0400
+
 xml2rfc (1.36-4) unstable; urgency=low
 
   * Bump Standards-Version to 3.9.3 (no changes needed)
diff -Nru xml2rfc-1.36/debian/preinst xml2rfc-1.36/debian/preinst
--- xml2rfc-1.36/debian/preinst 1970-01-01 01:00:00.0 +0100
+++ xml2rfc-1.36/debian/preinst 2012-10-15 01:29:51.0 +0200
@@ -0,0 +1,15 @@
+#!/bin/sh
+set -e
+
+# xml2rfc version 1.35-1 as of Debian squeeze did not properly clean its
+# package catalog upon removal or purge. This results in a conffile prompt when
+# installing a dh_installcatalogs managed version. This is also known as
+# #680291. The issue affects the upgrade from squeeze to wheezy. Once wheezy is
+# released. This preinst file should be removed unless something else is added
+# to it.
+CENTCAT=/etc/sgml/xml2rfc.cat
+if test -f $CENTCAT  ! dpkg-query -S $CENTCAT /dev/null 21; then
+   mv $CENTCAT $CENTCAT.old
+fi
+
+#DEBHELPER#


Bug#689999: marked as done (unblock: tracker/0.14.1-3)

2012-10-15 Thread Debian Bug Tracking System
Your message dated Mon, 15 Oct 2012 10:45:30 +0200
with message-id 20121015084530.go17...@radis.cristau.org
and subject line Re: Bug#68: unblock: tracker/0.14.1-3
has caused the Debian Bug report #68,
regarding unblock: tracker/0.14.1-3
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
68: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=68
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package tracker

The Evolution email miner in tracker is currently broken. With evo
3.0/3.2 it could lead to evolution hang during startup, with evo 3.4 it
simply does nothing.
I've talked to upstream but progress on this issue is very slow so
it doesn't look like there will be a fix anytime soon.
So the best option I see atm is to simply drop the tracker-miner-evolution
binary package for now.

While preparing the upload, I've also switched on xz compression.

Full debdiff is attached.

Thanks,
Michael

unblock tracker/0.14.1-3

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
diff -Nru tracker-0.14.1/debian/changelog tracker-0.14.1/debian/changelog
--- tracker-0.14.1/debian/changelog	2012-06-21 23:21:58.0 +0200
+++ tracker-0.14.1/debian/changelog	2012-10-08 22:17:51.0 +0200
@@ -1,3 +1,11 @@
+tracker (0.14.1-3) unstable; urgency=low
+
+  * Use xz compression for binary packages.
+  * Disable Evolution email data miner. It is currently non-functional and
+unlikely to be fixed in time for wheezy. (Closes: #666176)
+
+ -- Michael Biebl bi...@debian.org  Mon, 08 Oct 2012 22:17:39 +0200
+
 tracker (0.14.1-2) unstable; urgency=low
 
   * debian/patches/0001-evolution-plugin-include-missing-header.patch: Include
diff -Nru tracker-0.14.1/debian/control tracker-0.14.1/debian/control
--- tracker-0.14.1/debian/control	2012-06-21 23:21:58.0 +0200
+++ tracker-0.14.1/debian/control	2012-10-08 22:17:51.0 +0200
@@ -23,9 +23,9 @@
libtotem-plparser-dev,
zlib1g-dev,
libexempi-dev (= 2.1.0),
-   evolution-dev (= 2.32.0),
-   evolution-data-server-dev (= 2.32.0),
-   libcamel1.2-dev (= 2.32.0),
+#   evolution-dev (= 2.32.0),
+#   evolution-data-server-dev (= 2.32.0),
+#   libcamel1.2-dev (= 2.32.0),
libxml2-dev (= 2.6),
libupower-glib-dev (= 0.9.0),
libnautilus-extension-dev (= 3.0),
@@ -58,7 +58,7 @@
 Recommends: tracker-utils,
 tracker-gui,
 tracker-miner-fs,
-tracker-miner-evolution
+#tracker-miner-evolution
 Breaks: rygel-tracker ( 0.5)
 Description: metadata database, indexer and search tool
  Tracker is an advanced framework for first class objects with associated
@@ -312,17 +312,17 @@
  metadata and tags. It provides a one stop solution for all metadata, tags,
  shared object databases, search tools and indexing.
 
-Package: tracker-miner-evolution
-Architecture: any
-Depends: ${shlibs:Depends},
- ${misc:Depends},
- tracker (= ${binary:Version})
-Description: metadata database, indexer and search tool - evolution plugin
- This package contains a plugin for indexing your evolution emails.
- .
- Tracker is an advanced framework for first class objects with associated
- metadata and tags. It provides a one stop solution for all metadata, tags,
- shared object databases, search tools and indexing.
+#Package: tracker-miner-evolution
+#Architecture: any
+#Depends: ${shlibs:Depends},
+# ${misc:Depends},
+# tracker (= ${binary:Version})
+#Description: metadata database, indexer and search tool - evolution plugin
+# This package contains a plugin for indexing your evolution emails.
+# .
+# Tracker is an advanced framework for first class objects with associated
+# metadata and tags. It provides a one stop solution for all metadata, tags,
+# shared object databases, search tools and indexing.
 
 Package: tracker-dbg
 Architecture: any
diff -Nru tracker-0.14.1/debian/rules tracker-0.14.1/debian/rules
--- tracker-0.14.1/debian/rules	2012-06-21 23:21:58.0 +0200
+++ tracker-0.14.1/debian/rules	2012-10-08 22:17:51.0 +0200
@@ 

Bug#690309: release.debian.org: unblock: rttool 1.0.3.0-3

2012-10-15 Thread Julien Cristau
Control: tags -1 moreinfo

On Fri, Oct 12, 2012 at 20:55:59 +0900, Youhei SASAKI wrote:

 Hi,
 Please unblock rttool.
 
 Current rttool (= 1.0.3-2) in Wheezy depends ruby1.8 only. Thus this
 cause problem for upgrade Squeeze to Wheezy (and maybe Wheezy+1 because
 ruby1.8 will be dropped). The rttool (= 1.0.3.0-3) in unstable is
 already take care of above problems.
 
ruby1.8 is still in wheezy, so I don't think this is relevant?  You can
get the ruby1.9-compatible version in to jessie...

Cheers,
Julien


signature.asc
Description: Digital signature


Bug#690337: unblock: gnome-system-log/3.4.1-2

2012-10-15 Thread Julien Cristau
Control: tags -1 moreinfo

On Sat, Oct 13, 2012 at 00:25:59 +0200, Michael Biebl wrote:

 +  [ Jeremy Bicha ]
 +  * debian/org.debian.pkexec.gnome-system-log.policy:
 +- Use simpler language when requesting authentication

How does this affect translations?

Cheers,
Julien


signature.asc
Description: Digital signature


Processed: Re: Bug#690337: unblock: gnome-system-log/3.4.1-2

2012-10-15 Thread Debian Bug Tracking System
Processing control commands:

 tags -1 moreinfo
Bug #690337 [release.debian.org] unblock: gnome-system-log/3.4.1-2
Added tag(s) moreinfo.

-- 
690337: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690337
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.b690337.135029114013617.transcr...@bugs.debian.org



Processed: Re: Bug#690309: release.debian.org: unblock: rttool 1.0.3.0-3

2012-10-15 Thread Debian Bug Tracking System
Processing control commands:

 tags -1 moreinfo
Bug #690309 [release.debian.org] release.debian.org: unblock: rttool 1.0.3.0-3
Added tag(s) moreinfo.

-- 
690309: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690309
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.b690309.135029105212903.transcr...@bugs.debian.org



Re: Removal request of OpenVAS packages from testing

2012-10-15 Thread Julien Cristau
On Mon, Oct 15, 2012 at 09:02:25 +0200, Javier Fernandez-Sanguino wrote:

 Please let me know if I should open up an RC bug against these
 packages for this removal.
 
Yes please.  The harden-remoteaudit package depends on openvas-server,
though, so please file an rc bug against it as well.

Cheers,
Julien


signature.asc
Description: Digital signature


Re: Please give back gcc-mingw-w64 (so it rebuilds using gcc-4.6 4.6.3-12)

2012-10-15 Thread Philipp Kern
On Mon, Oct 15, 2012 at 01:33:16AM +0200, Cyril Brulebois wrote:
 Stephen Kitt st...@sk2.org (14/10/2012):
  Now that gcc-4.6 4.6.3-12 is installed in unstable on all
  architectures, would it be possible to give gcc-mingw-w64 back on
  all buildds? This will cause it to be rebuilt using gcc-4.6
  4.6.3-12; since the latter's version ends up in the resulting binary
  packages' versions, a binNMU shouldn't be necessary...
  
gb gcc-mingw-w64_7 . ALL
 a package which failed to build can be given back. That's really an
 alias for “please give it another chance to build (successfully)”. If
 you want to get a(n already successfully built) package rebuilt
 against a new set of packages, that's where binNMUs come into play.

And if would've been cool if you could send a rationale for why the binNMU is
needed (I simply don't know why one has to recompile against a new gcc, and
there's no bug# reference) to debian-release@lists.d.o (Cc'ed).

(binNMUs migrate automatically if present, hence it's also slightly relevant
for wheezy release management.)

Kind regards
Philipp Kern


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121015131358.ga19...@hub.kern.lc



Bug#690337: unblock: gnome-system-log/3.4.1-2

2012-10-15 Thread Michael Biebl
Hi Julien,

On 15.10.2012 10:52, Julien Cristau wrote:
 Control: tags -1 moreinfo
 
 On Sat, Oct 13, 2012 at 00:25:59 +0200, Michael Biebl wrote:
 
 +  [ Jeremy Bicha ]
 +  * debian/org.debian.pkexec.gnome-system-log.policy:
 +- Use simpler language when requesting authentication
 
 How does this affect translations?

This policy file is currently Debian only and not translated, so it has
no effect.

Michael

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#690337: marked as done (unblock: gnome-system-log/3.4.1-2)

2012-10-15 Thread Debian Bug Tracking System
Your message dated Mon, 15 Oct 2012 15:18:03 +0200
with message-id 20121015131803.gu17...@radis.cristau.org
and subject line Re: Bug#690337: unblock: gnome-system-log/3.4.1-2
has caused the Debian Bug report #690337,
regarding unblock: gnome-system-log/3.4.1-2
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
690337: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690337
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
---BeginMessage---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package gnome-system-log

gnome-system-log is a viewer to display system logs like
/var/log/syslog. For that it needs special privileges.
We changed the .desktop file to use

Exec=pkexec gnome-system-log

some time ago.

That works for DEs like GNOME shell or KDE but fails in others like Xfce
or GNOME fallback mode. According to policykit upstream, this is
ultimately a bug in those applications launchers (xfce-panel,
gnome-panel) using double forking.

A quick test shows that E17 is also affected by this, there a possibly
more. While we might eventually fix all affected application launchers
(e.g. [1] has a patch for gnome-panel), for wheezy we decided to use a
simple shell wrapper script which works around that problem.

Thanks,
Michael

unblock gnome-system-log/3.4.1-2

[1] https://bugzilla.gnome.org/show_bug.cgi?id=686059
-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
diff -Nru gnome-system-log-3.4.1/debian/changelog gnome-system-log-3.4.1/debian/changelog
--- gnome-system-log-3.4.1/debian/changelog	2012-04-19 03:04:04.0 +0200
+++ gnome-system-log-3.4.1/debian/changelog	2012-10-12 17:13:31.0 +0200
@@ -1,3 +1,16 @@
+gnome-system-log (3.4.1-2) unstable; urgency=low
+
+  [ Jeremy Bicha ]
+  * debian/org.debian.pkexec.gnome-system-log.policy:
+- Use simpler language when requesting authentication
+
+  [ Michael Biebl ]
+  * Use a small wrapper script gnome-system-tools-pkexec which starts
+gnome-system-log directly if /var/log/syslog is readable and otherwise
+uses pkexec to start the program with elevated privileges. Closes: #650038
+
+ -- Michael Biebl bi...@debian.org  Fri, 12 Oct 2012 17:13:27 +0200
+
 gnome-system-log (3.4.1-1) unstable; urgency=low
 
   * Upload to unstable.
diff -Nru gnome-system-log-3.4.1/debian/gnome-system-log.install gnome-system-log-3.4.1/debian/gnome-system-log.install
--- gnome-system-log-3.4.1/debian/gnome-system-log.install	2012-03-13 00:39:12.0 +0100
+++ gnome-system-log-3.4.1/debian/gnome-system-log.install	2012-10-12 16:42:34.0 +0200
@@ -1 +1,2 @@
 debian/org.debian.pkexec.gnome-system-log.policy /usr/share/polkit-1/actions
+debian/gnome-system-log-pkexec /usr/bin/
diff -Nru gnome-system-log-3.4.1/debian/gnome-system-log-pkexec gnome-system-log-3.4.1/debian/gnome-system-log-pkexec
--- gnome-system-log-3.4.1/debian/gnome-system-log-pkexec	1970-01-01 01:00:00.0 +0100
+++ gnome-system-log-3.4.1/debian/gnome-system-log-pkexec	2012-10-12 16:41:38.0 +0200
@@ -0,0 +1,7 @@
+#!/bin/sh
+
+if test -r /var/log/syslog ; then
+	exec /usr/bin/gnome-system-log $@
+else
+	pkexec /usr/bin/gnome-system-log $@
+fi
diff -Nru gnome-system-log-3.4.1/debian/org.debian.pkexec.gnome-system-log.policy gnome-system-log-3.4.1/debian/org.debian.pkexec.gnome-system-log.policy
--- gnome-system-log-3.4.1/debian/org.debian.pkexec.gnome-system-log.policy	2012-03-12 19:05:52.0 +0100
+++ gnome-system-log-3.4.1/debian/org.debian.pkexec.gnome-system-log.policy	2012-05-10 00:50:18.0 +0200
@@ -6,7 +6,7 @@
 
   action id=org.debian.pkexec.gnome-system-log.run
 descriptionRun gnome-system-log/description
-messageAuthentication is required to run gnome-system-log/message
+messageAuthentication is required to view system logs/message
 defaults
   allow_anyno/allow_any
   allow_inactiveno/allow_inactive
diff -Nru gnome-system-log-3.4.1/debian/patches/01_logview_pkexec.patch gnome-system-log-3.4.1/debian/patches/01_logview_pkexec.patch
--- gnome-system-log-3.4.1/debian/patches/01_logview_pkexec.patch	2012-03-13 00:47:38.0 +0100
+++ gnome-system-log-3.4.1/debian/patches/01_logview_pkexec.patch	2012-10-12 16:43:40.0 +0200
@@ -10,7 +10,7 @@
  _Name=Log File Viewer
  

Bug#690552: pu: package clive/2.2.13-5+squeeze5

2012-10-15 Thread Ansgar Burchardt
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: pu

Hi,

I prepared an update for clive. It adapts clive to changes on youtube.com; the
problem and patch are basically the same as #688972 in libquvi-scripts.

Ansgar
diff -Nru clive-2.2.13/debian/changelog clive-2.2.13/debian/changelog
--- clive-2.2.13/debian/changelog	2012-01-28 10:42:30.0 +
+++ clive-2.2.13/debian/changelog	2012-10-15 13:15:48.0 +
@@ -1,3 +1,10 @@
+clive (2.2.13-5+squeeze5) squeeze; urgency=low
+
+  * Adapt for youtube.com changes.
++ new patch: 688972-youtube.diff
+
+ -- Ansgar Burchardt ans...@debian.org  Mon, 15 Oct 2012 13:15:16 +
+
 clive (2.2.13-5+squeeze4) stable; urgency=low
 
   * Adapt for youtube.com changes. (Closes: #645025)
diff -Nru clive-2.2.13/debian/patches/688972-youtube.diff clive-2.2.13/debian/patches/688972-youtube.diff
--- clive-2.2.13/debian/patches/688972-youtube.diff	1970-01-01 00:00:00.0 +
+++ clive-2.2.13/debian/patches/688972-youtube.diff	2012-10-15 13:14:49.0 +
@@ -0,0 +1,16 @@
+From: Ansgar Burchardt ans...@debian.org
+Subject: backport patch for #688972 from libquvi-scripts to clive
+Bug-Debian: http://bugs.debian.org/688972
+
+--- clive-2.2.13.orig/lib/clive/Host/Youtube.pm
 clive-2.2.13/lib/clive/Host/Youtube.pm
+@@ -52,6 +52,9 @@ sub parsePage {
+ 	}
+ 	my $id = $map{itag};
+ 	my $url = $map{url};
++	if (exists $map{sig}) {
++		$url .= 'signature=' . $map{sig};
++	}
+ $best   = $url unless $best;
+ $h{$id} = $url;
+ }
diff -Nru clive-2.2.13/debian/patches/series clive-2.2.13/debian/patches/series
--- clive-2.2.13/debian/patches/series	2012-01-28 10:33:11.0 +
+++ clive-2.2.13/debian/patches/series	2012-10-15 13:13:12.0 +
@@ -6,3 +6,4 @@
 liveleak-fix-from-2.2.25.patch
 636612-youtube.diff
 645025-youtube.diff
+688972-youtube.diff


Re: Please give back gcc-mingw-w64 (so it rebuilds using gcc-4.6 4.6.3-12)

2012-10-15 Thread Jonathan Wiltshire

On 2012-10-15 14:13, Philipp Kern wrote:

On Mon, Oct 15, 2012 at 01:33:16AM +0200, Cyril Brulebois wrote:

Stephen Kitt st...@sk2.org (14/10/2012):
 Now that gcc-4.6 4.6.3-12 is installed in unstable on all
 architectures, would it be possible to give gcc-mingw-w64 back on
 all buildds? This will cause it to be rebuilt using gcc-4.6
 4.6.3-12; since the latter's version ends up in the resulting 
binary

 packages' versions, a binNMU shouldn't be necessary...

   gb gcc-mingw-w64_7 . ALL
a package which failed to build can be given back. That's really an
alias for “please give it another chance to build (successfully)”. 
If

you want to get a(n already successfully built) package rebuilt
against a new set of packages, that's where binNMUs come into play.


And if would've been cool if you could send a rationale for why the 
binNMU is
needed (I simply don't know why one has to recompile against a new 
gcc, and

there's no bug# reference) to debian-release@lists.d.o (Cc'ed).

(binNMUs migrate automatically if present, hence it's also slightly 
relevant

for wheezy release management.)


Surely it would be more efficient to do a maintainer upload fixing RC
bug #690148, and you'll get the rebuilds for free?

I started looking at this bug yesterday, the fix is easy but I did not
have time to check all binary packages. Patch to follow if you want it.


--
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/efd441d31e3074db32ff56e1fdffe...@hogwarts.powdarrmonkey.net



Bug#690557: unblock: git-buildpackage/0.6.0~git20120822

2012-10-15 Thread Guido Günther
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package git-buildpackage

The package in sid has doc updates and bugfixes in several places like
uscan processing. Since it's a leaf package it's low risk to update so
it'd be great to have this updated in wheeze.
Cheers,
 -- Guido

unblock git-buildpackage/0.6.0~git20120822

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (990, 'testing'), (50, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-3-686-pae (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121015140455.ga14...@bogon.sigxcpu.org



Bug#690558: unblock: libgpod/0.8.2-7

2012-10-15 Thread Chow Loong Jin
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package libgpod

This fixes RC bug #689054 in which the C# bindings in libgpod were wrongly
marked as arch:all, despite not actually being so due to arch-specific code
being present in the bindings.

This caused duplicate playlists to be synced onto iPods as a result of the
misconfigured alignment of double types in the struct.

unblock libgpod/0.8.2-7

-- System Information:
Debian Release: wheezy/sid
  APT prefers precise-updates
  APT policy: (500, 'precise-updates'), (500, 'precise-security'), (500, 
'precise'), (400, 'precise-proposed'), (100, 'precise-backports'), (1, 
'quantal')
Architecture: amd64 (x86_64)

Kernel: Linux 3.5.4-hyper1 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20121015140758.20325.63034.reportbug@localhost6.localdomain6



Bug#690559: tpu: package isc-dhcp/4.2.2.dfsg.1-5+deb70u2

2012-10-15 Thread Raphael Geissert
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: tpu

Hi,

I've uploaded isc-dhcp/4.2.2.dfsg.1-5+deb70u2 to T-P-U to fix #690532
(CVE-2012-2248).

The patch in the bug report and the changelog entry are the only
changes I made.

Cheers,
Raphael Geissert


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121015141115.4471.52428.reportbug@localhost



Bug#690560: unblock: uim-chewing/0.1.0-3

2012-10-15 Thread 陳侃如
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package uim-chewing

Fixes RC bug #688233

unblock uim-chewing/0.1.0-3

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
diff -Nru uim-chewing-0.1.0/debian/changelog uim-chewing-0.1.0/debian/changelog
--- uim-chewing-0.1.0/debian/changelog	2012-06-04 00:57:04.0 +0800
+++ uim-chewing-0.1.0/debian/changelog	2012-10-15 21:51:22.0 +0800
@@ -1,3 +1,13 @@
+uim-chewing (0.1.0-3) unstable; urgency=medium
+
+  * Team upload.
+  * Urgency set medium to fix RC bug.
+  * debian/uim-chewing.postinst,
+debian/uim-chewing.prerm: Change uim registration directory from
+/etc/uim to /var/lib/uim (Closes: #688233).
+
+ -- Kan-Ru Chen (陳侃如) kos...@debian.org  Mon, 15 Oct 2012 21:51:10 +0800
+
 uim-chewing (0.1.0-2) unstable; urgency=low
 
   * Team upload.
diff -Nru uim-chewing-0.1.0/debian/uim-chewing.postinst uim-chewing-0.1.0/debian/uim-chewing.postinst
--- uim-chewing-0.1.0/debian/uim-chewing.postinst	2012-06-04 00:57:04.0 +0800
+++ uim-chewing-0.1.0/debian/uim-chewing.postinst	2012-10-15 21:51:22.0 +0800
@@ -26,7 +26,7 @@
 case $1 in
 configure)
 	if which uim-module-manager /dev/null 21; then
-		uim-module-manager --register chewing --path /etc/uim
+		uim-module-manager --register chewing --path /var/lib/uim
 	fi
 ;;
 
diff -Nru uim-chewing-0.1.0/debian/uim-chewing.prerm uim-chewing-0.1.0/debian/uim-chewing.prerm
--- uim-chewing-0.1.0/debian/uim-chewing.prerm	2012-06-04 00:57:04.0 +0800
+++ uim-chewing-0.1.0/debian/uim-chewing.prerm	2012-10-15 21:51:22.0 +0800
@@ -20,7 +20,7 @@
 case $1 in
 remove|deconfigure)
 	if which uim-module-manager /dev/null 21; then
-		uim-module-manager --unregister chewing --path /etc/uim
+		uim-module-manager --unregister chewing --path /var/lib/uim
 	fi
 	;;
 upgrade|failed-upgrade)


Bug#690559: tpu: package isc-dhcp/4.2.2.dfsg.1-5+deb70u2

2012-10-15 Thread Julien Cristau
Control: tag -1 d-i pending confirmed

On Mon, Oct 15, 2012 at 09:11:15 -0500, Raphael Geissert wrote:

 Package: release.debian.org
 Severity: normal
 User: release.debian@packages.debian.org
 Usertags: tpu
 
 Hi,
 
 I've uploaded isc-dhcp/4.2.2.dfsg.1-5+deb70u2 to T-P-U to fix #690532
 (CVE-2012-2248).
 
 The patch in the bug report and the changelog entry are the only
 changes I made.
 
Approved, but unblock-udeb needs d-i approval.  Also, the bts thinks
690532 affects sid.  If that's true please get it fixed there.  If not
the bug state needs fixing.  And in any case it needs to be marked as
fixed in the tpu version.

Cheers,
Julien


signature.asc
Description: Digital signature


Processed: Re: Bug#690559: tpu: package isc-dhcp/4.2.2.dfsg.1-5+deb70u2

2012-10-15 Thread Debian Bug Tracking System
Processing control commands:

 tag -1 d-i pending confirmed
Bug #690559 [release.debian.org] tpu: package isc-dhcp/4.2.2.dfsg.1-5+deb70u2
Added tag(s) d-i, confirmed, and pending.

-- 
690559: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690559
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.b690559.13503121908986.transcr...@bugs.debian.org



Bug#690566: unblock: echolot/2.1.8-8

2012-10-15 Thread Peter Palfrader
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: freeze-exception

Please unblock package echolot

unblock echolot/2.1.8-8

Version 2.1.8-7 fixes RC #689889 - service fails to start when
/var/run is a tmpfs, because it relies on /var/run/echolot to exist.
This directory is shipped with the package.

The fix is to create the directory in the init script, no longer do
the permissions stuff in postinst (but instead clean up old
statoverrides in postinst now).

The upload also adds a bunch of minor documentation fixes that have
been pending for years.

Attached is a (manually trimmed) diff between the version in
stable/testing and 2.1.8-8.

Cheers,
weasel
diff -u echolot-2.1.8/debian/changelog echolot-2.1.8/debian/changelog
--- echolot-2.1.8/debian/changelog
+++ echolot-2.1.8/debian/changelog
@@ -1,3 +1,24 @@
+echolot (2.1.8-8) unstable; urgency=low
+
+  * Really fix the markup typo in the pingd manpage.
+
+ -- Peter Palfrader wea...@debian.org  Mon, 15 Oct 2012 17:01:32 +0200
+
+echolot (2.1.8-7) unstable; urgency=low
+
+  * No longer ship /var/run/echolot in the package.  Based upon
+work by Thomas Goirand (closes: #689889).
+  * Fix a markup typo in the pingd manpage.
+  * Fix an error in README.Debian where we say /etc/default/echolot
+when we mean /etc/init.d/echolot.
+  * Fix a spelling mistake in README.Debian (closes: #459926).
+  * Fix the name of an option in an example in pingd.conf(5)
+(closes: #459938).
+  * Update the address for the remops mailinglist in README.Debian
+(closes: #563810).
+
+ -- Peter Palfrader wea...@debian.org  Mon, 15 Oct 2012 16:24:47 +0200
+
 echolot (2.1.8-6) unstable; urgency=low
 
   * In postrm during purge remove (rm -rf) /var/lib/echolot instead of
diff -u echolot-2.1.8/debian/echolot.init echolot-2.1.8/debian/echolot.init
--- echolot-2.1.8/debian/echolot.init
+++ echolot-2.1.8/debian/echolot.init
@@ -25,7 +25,8 @@
 # You probably don't want to mess with stuff below this line
 
 
-PIDFILE=/var/run/echolot/pingd.pid
+RUNDIR=/var/run/echolot
+PIDFILE=$RUNDIR/pingd.pid
 CHECKULIMIT=1
 CHECKUID=1
 USER=echolot
@@ -41,6 +42,11 @@
 # Reads config file (will override defaults above)
 [ -r /etc/default/echolot ]  . /etc/default/echolot
 
+if [ ! -d ${RUNDIR} ]; then
+	mkdir $RUNDIR
+	chown root:$GROUP $RUNDIR
+	chmod 02770 $RUNDIR
+fi
 
 wait_for_deaddaemon () {
 	PID=$1
diff -u echolot-2.1.8/debian/echolot.postinst echolot-2.1.8/debian/echolot.postinst
--- echolot-2.1.8/debian/echolot.postinst
+++ echolot-2.1.8/debian/echolot.postinst
@@ -9,6 +9,11 @@
 		db_stop
 	fi
 fi
+if [ $1 = configure ]  dpkg --compare-versions $2 lt 2.1.8-7; then
+	if ( dpkg-statoverride --list /var/run/echolot  /dev/null ); then
+		dpkg-statoverride --remove /var/run/echolot
+	fi
+fi
 
 # Make sure the echolot user exists
 adduser --quiet \
@@ -30,10 +35,6 @@
 if ( ! dpkg-statoverride --list /var/lib/echolot  /dev/null ); then
 	dpkg-statoverride --update --add root echolot 02775 /var/lib/echolot
 fi
-# and /var/run/echolot
-if ( ! dpkg-statoverride --list /var/run/echolot  /dev/null ); then
-	dpkg-statoverride --update --add root echolot 02770 /var/run/echolot
-fi
 
 #DEBHELPER#
 
diff -u echolot-2.1.8/debian/echolot.postrm echolot-2.1.8/debian/echolot.postrm
--- echolot-2.1.8/debian/echolot.postrm
+++ echolot-2.1.8/debian/echolot.postrm
@@ -6,6 +6,7 @@
 	purge)
 		rm -rf /var/lib/echolot
 		rm -rf /var/log/echolot
+		rm -rf /var/run/echolot
 		rmdir /etc/echolot/templates 2/dev/null || true
 		rmdir /etc/echolot 2/dev/null || true
 		dpkg-statoverride --remove /var/run/echolot /dev/null 21 || true
only in patch2:
unchanged:
--- echolot-2.1.8.orig/debian/echolot.dirs
+++ echolot-2.1.8/debian/echolot.dirs
@@ -1,7 +1,6 @@
 usr/bin
 usr/share/perl5
 var/lib/echolot
-var/run/echolot
 var/log/echolot
 etc/echolot
 etc/default








diff -u echolot-2.1.8/tools/create-distribution echolot-2.1.8/tools/create-distribution
--- echolot-2.1.8/tools/create-distribution
+++ echolot-2.1.8/tools/create-distribution
@@ -1,6 +1,6 @@
 #!/bin/sh
 #
-# $Id: create-distribution 695 2005-10-09 21:36:30Z weasel $
+# $Id: create-distribution 724 2012-10-15 14:34:30Z weasel $
 #
 # This file is part of Echolot - a Pinger for anonymous remailers.
 #
@@ -34,7 +34,7 @@
 if [ $dirname != echolot-$version ] ; then
 	echo WARN: Version $version might be wrong
 	echo Enter to continue
-	read
+	read dummy
 fi
 
 cd ..
diff -u echolot-2.1.8/doc/pingd.conf.pod echolot-2.1.8/doc/pingd.conf.pod
--- echolot-2.1.8/doc/pingd.conf.pod
+++ echolot-2.1.8/doc/pingd.conf.pod
@@ -1,5 +1,5 @@
 #
-# $Id: pingd.conf.pod 695 2005-10-09 21:36:30Z weasel $
+# $Id: pingd.conf.pod 726 2012-10-15 15:00:19Z weasel $
 #
 # This file is part of Echolot - a Pinger for anonymous remailers.
 #
@@ -206,7 +206,7 @@
 Also build separate rlists with data from only DSA pings, only RSA pings and
 only unencrypted pings.
 
-	Default: 

Re: CVE against the fwknop package

2012-10-15 Thread Franck Joncourt

Hi,


Le 11/10/2012 00:15, Adam D. Barratt a écrit :

On 10.10.2012 20:29, Franck Joncourt wrote:

I have prepared an upload for squeeze to fix the CVEs against the
2.0.0rc2 release. I have enclosed a debdiff.


I assume you meant wheezy here? squeeze has 1.9.


Yes, I meant wheezy :) Sorry for the mistake.


Any news about the possibility to upload the package?

Regards,

--
Franck


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/507c1b44.1030...@debian.org



Re: CVE against the fwknop package

2012-10-15 Thread Julien Cristau
On Wed, Oct 10, 2012 at 21:29:18 +0200, Franck Joncourt wrote:

 Hi,
 
 I have prepared an upload for squeeze to fix the CVEs against the
 2.0.0rc2 release. I have enclosed a debdiff.
 The new package will be named fwknop_2.0.0rc2-2+deb7u1.dsc. It is
 targetted for the testing-proposed-updates with urgency set to high.
 
 Can someone check the update so that I can upload the package?
 
I'm afraid that's not going to work while the sid version ftbfs...

Cheers,
Julien


signature.asc
Description: Digital signature


Re: CVE against the fwknop package

2012-10-15 Thread Julien Cristau
On Wed, Oct 10, 2012 at 21:29:18 +0200, Franck Joncourt wrote:

 Hi,
 
 I have prepared an upload for squeeze to fix the CVEs against the
 2.0.0rc2 release. I have enclosed a debdiff.
 The new package will be named fwknop_2.0.0rc2-2+deb7u1.dsc. It is
 targetted for the testing-proposed-updates with urgency set to high.
 
 Can someone check the update so that I can upload the package?
 
The diff looks mostly ok, though checking for S_ISLNK from stat(2) seems
useless, and I'm not quite sure why the chmod is done *after* writing
the config file rather than upfront.

Cheers,
Julien


signature.asc
Description: Digital signature


Re: Please give back gcc-mingw-w64 (so it rebuilds using gcc-4.6 4.6.3-12)

2012-10-15 Thread Stephen Kitt
On Mon, 15 Oct 2012 15:13:58 +0200, Philipp Kern pk...@debian.org wrote:
 On Mon, Oct 15, 2012 at 01:33:16AM +0200, Cyril Brulebois wrote:
  Stephen Kitt st...@sk2.org (14/10/2012):
   Now that gcc-4.6 4.6.3-12 is installed in unstable on all
   architectures, would it be possible to give gcc-mingw-w64 back on
   all buildds? This will cause it to be rebuilt using gcc-4.6
   4.6.3-12; since the latter's version ends up in the resulting binary
   packages' versions, a binNMU shouldn't be necessary...
   
 gb gcc-mingw-w64_7 . ALL
  a package which failed to build can be given back. That's really an
  alias for “please give it another chance to build (successfully)”. If
  you want to get a(n already successfully built) package rebuilt
  against a new set of packages, that's where binNMUs come into play.
 
 And if would've been cool if you could send a rationale for why the binNMU
 is needed (I simply don't know why one has to recompile against a new gcc,
 and there's no bug# reference) to debian-release@lists.d.o (Cc'ed).
 
 (binNMUs migrate automatically if present, hence it's also slightly relevant
 for wheezy release management.)

Thanks for all the info everyone! Had I known a binNMU was the appropriate
solution I would of course have filed a bug using reportbug with a
rationale...

Basically Matthias Klose asked me to update gcc-mingw-w64 to the latest
version of gcc-4.6 which fixes the kfreebsd-amd64 build bug (#637236). This
would also give us all the fixes in gcc-4.6 since the last gcc-mingw-w64
build (4.6.3-8), updates which warranted a freeze exception for gcc-4.6
(4.6.3-11 at least).

As Jonathan pointed out, there's an RC bug against gcc-mingw-w64 (#690148),
which I wasn't aware of because it got sent to the previous maintainer. I'll
fix that and do a sourceful upload.

Regards,

Stephen


signature.asc
Description: PGP signature


Re: Please give back gcc-mingw-w64 (so it rebuilds using gcc-4.6 4.6.3-12)

2012-10-15 Thread Stephen Kitt
Hi Jonathan,

On Mon, 15 Oct 2012 14:49:31 +0100, Jonathan Wiltshire j...@debian.org wrote:
 Surely it would be more efficient to do a maintainer upload fixing RC
 bug #690148, and you'll get the rebuilds for free?
 
 I started looking at this bug yesterday, the fix is easy but I did not
 have time to check all binary packages. Patch to follow if you want it.

If you've got the patch to hand I'd appreciate it. As you say the fix is
easy, but I won't have time to work on it this evening...

Regards,

Stephen


signature.asc
Description: PGP signature


tpu upload for #679669 (underscore: build-depends on uglifyjs)

2012-10-15 Thread Ansgar Burchardt
Julien Cristau jcris...@debian.org writes:
 On Sat, Oct 13, 2012 at 20:56:00 +0200, Ansgar Burchardt wrote:
 Stuart Prescott stu...@debian.org writes:
  Looking at the underscore package in squeeze-backports, it is not possible 
  to 
  build it from source using packages in squeeze+squeeze-backports. In 
  particular, the uglifyjs package (provided by node-uglify in sid) is not 
  in 
  squeeze/squeeze-backports.
 
 I modified the package in backports to not compress the *.js files:
 
 Any chance you could do that for wheezy too?

Sure.  I've attached the debdiff for an upload to wheezy (there's a
newer version in unstable).  The changes are the same as in the
backport.

Ansgar
diff -Nru underscore-1.1.6/debian/changelog underscore-1.1.6/debian/changelog
--- underscore-1.1.6/debian/changelog	2011-04-22 11:30:22.0 +0200
+++ underscore-1.1.6/debian/changelog	2012-10-15 20:48:23.0 +0200
@@ -1,3 +1,10 @@
+underscore (1.1.6-1+deb7u1) wheezy; urgency=low
+
+  * Include uncompressed version of *.js to avoid a build-dependency on
+uglifyjs. (Closes: #679669)
+
+ -- Ansgar Burchardt ans...@debian.org  Mon, 15 Oct 2012 20:46:34 +0200
+
 underscore (1.1.6-1) unstable; urgency=low
 
   * New upstream release.
diff -Nru underscore-1.1.6/debian/control underscore-1.1.6/debian/control
--- underscore-1.1.6/debian/control	2011-04-22 11:25:13.0 +0200
+++ underscore-1.1.6/debian/control	2012-10-15 20:46:31.0 +0200
@@ -5,8 +5,7 @@
 Uploaders: Jonas Smedegaard d...@jones.dk
 Build-Depends: cdbs,
  debhelper (= 6),
- dh-buildinfo,
- uglifyjs
+ dh-buildinfo
 Standards-Version: 3.9.2
 Homepage: http://documentcloud.github.com/underscore/
 Vcs-Git: git://git.debian.org/git/collab-maint/underscore
diff -Nru underscore-1.1.6/debian/rules underscore-1.1.6/debian/rules
--- underscore-1.1.6/debian/rules	2011-04-22 11:30:00.0 +0200
+++ underscore-1.1.6/debian/rules	2012-10-15 20:46:31.0 +0200
@@ -28,7 +28,7 @@
 CDBS_BUILD_DEPENDS_rules_upstream-tarball =
 CDBS_BUILD_DEPENDS_rules_utils_copyright-check =
 
-CDBS_BUILD_DEPENDS += , uglifyjs
+#CDBS_BUILD_DEPENDS += , uglifyjs
 
 DEB_UPSTREAM_URL = http://githubredir.debian.net/github/documentcloud/underscore/
 DEB_UPSTREAM_TARBALL_BASENAME = $(DEB_UPSTREAM_TARBALL_VERSION)
@@ -47,6 +47,7 @@
 
 build/$(libpkgname):: $(js-min)
 $(js-min): debian/%.min.js: $(js-basedir)%.js
-	uglifyjs -o $@ $
+	#uglifyjs -o $@ $
+	ln -sf $ $@
 clean::
 	rm -f debian/*.js


Re: tpu upload for #679669 (underscore: build-depends on uglifyjs)

2012-10-15 Thread Julien Cristau
On Mon, Oct 15, 2012 at 20:59:24 +0200, Ansgar Burchardt wrote:

 Sure.  I've attached the debdiff for an upload to wheezy (there's a
 newer version in unstable).  The changes are the same as in the
 backport.
 
Ack, please go ahead.

Thanks,
Julien


signature.asc
Description: Digital signature


Re: tpu upload for #679669 (underscore: build-depends on uglifyjs)

2012-10-15 Thread Ansgar Burchardt
Julien Cristau jcris...@debian.org writes:
 On Mon, Oct 15, 2012 at 20:59:24 +0200, Ansgar Burchardt wrote:
 Sure.  I've attached the debdiff for an upload to wheezy (there's a
 newer version in unstable).  The changes are the same as in the
 backport.
 
 Ack, please go ahead.

Uploaded (without using DELAYED/* as I don't think that matters much for
tpu).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/87vcebpmy7@deep-thought.43-1.org



Re: Request for update of package capi4hylafax (with debdiff)

2012-10-15 Thread Joachim Wiedorn
Hello,

Julien Cristau wrote on 2012-10-11 22:02:

  Perhaps the package could give a hint about this useful change while
  starting the init script? Or give a hint while upgrading?
  
 Let dpkg's conffile prompt handle that...

O.K.

  udevd-work [428]: kernel-provided name 'capi' and NAME='capi20' disagree,
   please use SYMLINK= or change the kernel to provide the proper name
  
 So you could leave the SYMLINK in place if you like, and drop the NAME=
 bit?

No, I think that is not the best way. In wheezy the udev package do not 
create /dev/capi, but capiutils creates this device with its init script
at boot time, which is absolutly ok.

So I think it is the best to go the similar way with the symlink 
  /dev/faxCAPI - /dev/capi20
to create it in the init script of capi4hylafax to get support of hylafax
for the device faxCAPI.

---
Have a nice day.

Joachim (Germany)


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121015214710.2ac89...@jupiter.home



Re: CVE against the fwknop package

2012-10-15 Thread Franck Joncourt

Le 15/10/2012 19:31, Julien Cristau a écrit :

On Wed, Oct 10, 2012 at 21:29:18 +0200, Franck Joncourt wrote:


Hi,

I have prepared an upload for squeeze to fix the CVEs against the
2.0.0rc2 release. I have enclosed a debdiff.
The new package will be named fwknop_2.0.0rc2-2+deb7u1.dsc. It is
targetted for the testing-proposed-updates with urgency set to high.

Can someone check the update so that I can upload the package?


I'm afraid that's not going to work while the sid version ftbfs...


Ok, I wanted it to go through wheezy but, I will check to fix the FTBS 
on MIPS before then.


Regards,

Franck


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/507c64e5.9050...@debian.org



Re: CVE against the fwknop package

2012-10-15 Thread Franck Joncourt

[...]

The diff looks mostly ok, though checking for S_ISLNK from stat(2) seems
useless, and I'm not quite sure why the chmod is done *after* writing
the config file rather than upfront.


I have added the patches to fix the permission issues as done per 
upstream but keeping in mind no to change too much things on my own.
I have also updated the patches to make it works against the rc2 but 
just a bit.
For the client, the permissions should not be overwritten at the end of 
the function but rather set when created as you mentionned : I think you 
are right.


For the S_ISLNK, I have to check further.

I am going to check all that and try to make the 2.0.3 release build on 
MIPs.


Regards,

Franck



--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/507c6843.3000...@debian.org



Re: Fixing the Catalyst development environment in Wheezy

2012-10-15 Thread intrigeri
Hi,

gregor herrmann wrote (14 Oct 2012 16:27:31 GMT) :
 @intrigeri, are you uploading the packages or do you want me to do it?

I'll do it later this week.
Thanks to everyone involved in unblocking this complicated situation!


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/85d30jcxc7@boum.org



Bug#690581: unblock: gle-graphics/4.2.4c-5

2012-10-15 Thread Christian T. Steigies
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package gle-graphics

Dear release team, 
please consider unblocking gle-graphics. There are two updates over the
version in testing.  The first, -4, updated the description only.  The
second, -5, modified the rules for the hurd only to allow building on this
arch by forcing the libraries on the hurd to be linked in a specific order.

thanks,
Christian

diff -Nru gle-graphics-4.2.4c/debian/changelog 
gle-graphics-4.2.4c/debian/changelog
--- gle-graphics-4.2.4c/debian/changelog2012-06-30 18:42:17.0 
+0200
+++ gle-graphics-4.2.4c/debian/changelog2012-10-01 00:03:06.0 
+0200
@@ -1,3 +1,15 @@
+gle-graphics (4.2.4c-5) unstable; urgency=low
+
+  * fix building on hurd-i386 with workaround from #578320
+
+ -- Christian T. Steigies c...@debian.org  Sun, 30 Sep 2012 23:58:58 +0200
+
+gle-graphics (4.2.4c-4) unstable; urgency=low
+
+  * rewrite package description (closes: #685822)
+
+ -- Christian T. Steigies c...@debian.org  Wed, 26 Sep 2012 23:07:27 +0200
+
 gle-graphics (4.2.4c-3) unstable; urgency=low
 
   * pass --build $(DEB_HOST_GNU_TYPE) to configure
diff -Nru gle-graphics-4.2.4c/debian/control gle-graphics-4.2.4c/debian/control
--- gle-graphics-4.2.4c/debian/control  2012-06-27 21:49:48.0 +0200
+++ gle-graphics-4.2.4c/debian/control  2012-10-01 00:03:06.0 +0200
@@ -26,23 +26,14 @@
 Architecture: any
 Depends: ${misc:Depends}, ${shlibs:Depends}
 Recommends: libgs9
-Description: Interactive Graphics Language Editor
- GLE  is  a  high  quality  graphics  package for scientists,
- combining  a  user  friendly  interface with a full range of
- facilitiesfor   producing  publication  quality  graphs,
- diagrams, posters and slides.
+Description: Graphics Layout Engine
+ GLE is a graphics scripting language designed for creating publication
+ quality figures such as charts, plots, graphs, and diagrams. It
+ supports various chart types (including function plot, histogram, bar
+ chart, scatter plot, contour plot, color map, and surface plot) through
+ a simple but flexible set of graphing commands; more complex output can
+ be created by relying on its scripting language, which is full featured
+ with subroutines, variables, and logic control.
  .
- GLE  provides LaTeX quality fonts together with a flexible
- graphics  module  which  allows  the  user  to  specify  any
- feature  of a graph (down to the line width of the subticks,
- for example)
- .
- Complex  pictures can be drawn with user defined subroutines
- and simple looping structures.
- .
- Current  device  drivers support DECWINDOWS, REGIS, TEK4010,
- all  PC  graphics  cards,  VT100s,  HP-Plotters,  PostScript
- Printers, EPSON Printers and LaserJet Printers.
- .
- GLE  runs  on  both  VAXes and PCs, giving an identical user
- interface on both platforms.
+ GLE relies on LaTeX for text output and supports mathematical formulae
+ in graphs and figures. Output formats include (E)PS, PDF, JPEG, and PNG.
diff -Nru gle-graphics-4.2.4c/debian/rules gle-graphics-4.2.4c/debian/rules
--- gle-graphics-4.2.4c/debian/rules2012-06-30 18:41:12.0 +0200
+++ gle-graphics-4.2.4c/debian/rules2012-10-01 00:03:06.0 +0200
@@ -7,12 +7,16 @@
 export DEB_BUILD_HARDENING=1
 
 # fix build problems on the sparc buildd
-ARCH=$(shell dpkg-architecture -qDEB_HOST_ARCH)
-ifeq ($(ARCH),sparc)
+ifeq ($(DEB_HOST_ARCH),sparc)
 export DEB_BUILD_HARDENING=0
 #export MALLOC_CHECK_=0
 endif
 
+# fix build problems on the hurd
+ifeq ($(DEB_HOST_ARCH),hurd-i386)
+CONFIGURE_LIBS = LIBS=-Wl,--no-as-needed -Wl,-lpthread -Wl,--as-needed
+endif
+
 %:
dh $@ 
 
@@ -27,7 +31,10 @@
 
 override_dh_auto_configure:
-autoreconf -vfi
-   ./configure --build $(DEB_HOST_GNU_TYPE) 
--docdir=/usr/share/doc/gle-graphics/ --with-rpath=no --with-scripts=no
+   ./configure --build $(DEB_HOST_GNU_TYPE) \
+   --docdir=/usr/share/doc/gle-graphics/ \
+   --with-rpath=no --with-scripts=no \
+   $(CONFIGURE_LIBS)
 
 override_dh_auto_install:
dh_auto_install

unblock gle-graphics/4.2.4c-5

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'experimental'), (100, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.3.0-trunk-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20121015201012.30920.64339.report...@guido.earth.sol



Re: CVE against the fwknop package

2012-10-15 Thread Julien Cristau
On Mon, Oct 15, 2012 at 21:32:53 +0200, Franck Joncourt wrote:

 Le 15/10/2012 19:31, Julien Cristau a écrit :
 On Wed, Oct 10, 2012 at 21:29:18 +0200, Franck Joncourt wrote:
 
 Hi,
 
 I have prepared an upload for squeeze to fix the CVEs against the
 2.0.0rc2 release. I have enclosed a debdiff.
 The new package will be named fwknop_2.0.0rc2-2+deb7u1.dsc. It is
 targetted for the testing-proposed-updates with urgency set to high.
 
 Can someone check the update so that I can upload the package?
 
 I'm afraid that's not going to work while the sid version ftbfs...
 
 Ok, I wanted it to go through wheezy but, I will check to fix the
 FTBS on MIPS before then.
 
Actually I'm told the tpu upload should work, so nevermind.

Cheers,
Julien


signature.asc
Description: Digital signature


Fwd: Bug #666896: Segfaults when moving over to host screen with cursor when clipboard is synced

2012-10-15 Thread Andres Cimmarusti
Dear Debian release team

My debian testing setup is affected by bug #666896, which was supposed
to have been dealt with in 1.3.8-2.

I've upgraded to this version and it works much better. I've had no
segfaults. Could you please allow the package to migrate to testing?
it's now being blocked by the freeze, but this is a major bug that
should be updated

Thanks

Andrés


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAH=dyrevotw7uktfpwpefr6pymj2hzunpflodvonwgo5epw...@mail.gmail.com



Pre-approval for schroot update in wheezy and squeeze

2012-10-15 Thread Roger Leigh
Hi,

I'd like to make an upload to unstable to address a number of
problems reported in schroot, which I would like to fix in
a point release (1.6.4-1), and have this migrate to testing.
These selected changes have been backported to the schroot-1.6
stable branch from the development branch.

  Changes: http://people.debian.org/~rleigh/schroot/schroot_1.6.4-1.dsc
  Diff: http://people.debian.org/~rleigh/schroot/schroot-1.6.4.patch

Changes:
* Documentation.  NEWS.Debian and some manpages updated to provide
  guidance for upgrading to wheezy.  Needed to update the configuration
  to retain full backward compatibility with the changes to the
  configuration file format.
* #686148.  This is quite serious.  A filesystem mountpoint inside
  the chroot which is a symlink can redirect the mount to be
  mounted on the host.  This is corrected by using realpath(3) to
  use only absolute paths and to ensure that the mountpoint is
  inside the chroot.
* #689078.  The CHROOT_ALIAS and SCHROOT_ALIAS_NAME environment
  variables were being set to the canonicalised chroot name rather
  than the alias used to create the session.  This could lead to
  misbehaviour of scripts relying upon these values, such as the
  Debian autobuilders, which can use these to customise the build
  environment.
* #688304.  Don't spew warnings in 15binfmt if the binfmt-support
  package is not installed.  Only cosmetic (just redirected stderr to
  null), but quite annoying.

(there are also some po file deltas due to the source file changes;
if OK, I may also get translator updates for these prior to upload.)

Additionally, I would also like to backport the fixes for #686148
and #689078 to squeeze and squeeze-backports for fixing in a stable
point release if possible.  I already ran #686148 past the security
team, who said it wasn't severe enough for a security update, but
would probably be OK for a point release.


Regards,
Roger

-- 
  .''`.  Roger Leigh
 : :' :  Debian GNU/Linuxhttp://people.debian.org/~rleigh/
 `. `'   schroot and sbuild  http://alioth.debian.org/projects/buildd-tools
   `-GPG Public Key  F33D 281D 470A B443 6756 147C 07B3 C8BC 4083 E800


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121015223835.gq18...@codelibre.net



Re: Bug#684437: pre-approval for fpc/2.6.0-7 upload

2012-10-15 Thread peter green

peter green wrote:

Retitle 684437 pre-approval for fpc/2.6.0-7 upload
Thanks

Since the last post on this bug report a load of updates related to 
localisation have landed. Specifically the package was not previously 
setup to support translations and as such was not translated. The 
package has now been fixed to support translation and translations 
have been added for Danish, Slovak, Portuguese, Russian, German, 
Polish, Czech, French, Italian, Japanese,
Swedish and Spanish. 
There was also a review of the english descriptions as part of the 
process
Which resulted in some minor rewordings and clarifications and 
(unfortunately)

a lot of reformatting.

I have also taken the opertunity to revert the removal of fpc.*dpkg* as
requested in the unblock discussions for 2.6.0-6

I have attached debdiffs against the versions in testing and unstable, 
please

review and ack/nack this upload.
Seems this mail didn't make it to the list, I guess the debdiffs were a 
bit big.


The attatchments can be found at 
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684437#33



--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/507c9594.3070...@p10link.net



Bug#690610: unblock: openvrml/0.18.9-4

2012-10-15 Thread Nobuhiro Iwamatsu
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Hi,

Please unblock package openvrml.
I made the following corrections by 0.18.9-2 to 0.18.9-4.

- Fix multiarch support for libopenvrml9 . (Closes: #674489)
- Enable hardening  and fix FTBFS with -Werror=format-security option.
- Change dh_clean to dh_prep in install target. (Closes: #683482)
- Fix FTBFS on mips.

unblock openvrml/0.18.9-4

Best regards,
  Nobuhiro

-- 
Nobuhiro Iwamatsu
   iwamatsu at {nigauri.org / debian.org}
   GPG ID: 40AD1FA6


openvrml_0.18.9-4.debdiff
Description: Binary data


Bug#690611: unblock: gtkhotkey/0.2.1-5

2012-10-15 Thread Nobuhiro Iwamatsu
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Hi,

Please unblock package gtkhotkey.
In 0.2.1-4 and 0.2.1-5, I supported multiarch.

---
gtkhotkey (0.2.1-5) unstable; urgency=low

   * Update debian/control.
 - Add 'Pre-Depends: ${misc:Pre-Depends}' to libgtkhotkey-dev.
 - Add 'Multi-Arch: same' to libgtkhotkey-dev.
 -- Nobuhiro Iwamatsu iwama...@debian.org  Thu, 13 Sep 2012 11:11:14 +0900

gtkhotkey (0.2.1-4) unstable; urgency=low

   * Update debian/control.
 - Add Version for cdbs.
 - Add 'Pre-Depends: ${misc:Pre-Depends}' to libgtkhotkey1.
 - Add 'Multi-Arch: same' to libgtkhotkey1.
   * Update debian/rules.
 Add DEB_CONFIGURE_EXTRA_FLAGS for multi-arch support.
   * Update debian/libgtkhotkey1.install.
 Convert to multi-arch support.
   * Update debian/libgtkhotkey-dev.install.
 Convert to multi-arch support.
 -- Nobuhiro Iwamatsu iwama...@debian.org  Mon, 06 Aug 2012 06:47:06 +0900--

-

Best regards,
  Nobuhiro

unblock gtkhotkey/0.2.1-5

-- 
Nobuhiro Iwamatsu
   iwamatsu at {nigauri.org / debian.org}
   GPG ID: 40AD1FA6


gtkhotkey_0.2.1.debdiff
Description: Binary data


Bug#690655: RM: openvas2 [wheezy] -- RoM; abandoned-upstream

2012-10-15 Thread Javier Fernández-Sanguino Peña

Package: release.debian.org
Version: N/A
Priority: grave
Tags: rm

I would like to request the Release Managers to remove *all* of the OpenVAS
2.x packages from the current testing distribution. This includes the
following packages:

- libopenvas2 /  libopenvas2-dev (version 2.0.4-2.1)
- libopenvasnasl2 / libopenvasnasl2-dev (version 2.0.2-2.1)
- openvas-client (version 2.0.5-1.1)
- openvas-plugins-base / openvas-plugins-dfsg (version 1:20100705-2)
- openvas-server / openvas-server-dev (version 2.0.3-6)

In addition, please also remove the following package:

 - harden-remoteaudit: it depends on openvas-server (I have sent 
   a bug to the package to update this dependency)

Support for OpenVAS 2 was discontinued last year [2]. Providing
OpenVAS 2 to our Debian 'stable' users in our upcoming release is not
really a good idea. Even though the scanner/client works 'as it is',
users will not be able to download new plugins for this release from
the OpenVAs servers and it will not be possible for them to find
recent vulnerabilities in hosts they scan.

For the last  2 years I have provided experimental versions of OpenVAS
3, which seem to have not received to much attention from users. In
any case since that version is also going to be discontinued upstream.
Since the latest OpenVAS release is version 5 [1]  (released May this
year) I will work towards providing OpenVAS 5 in our unstable
distribution. And, once available, will try to make backports
available for Wheezy too.

Removing the OpenVAS 2 packages from testing simplifies handling
upgrades to the newer version and also installations of the backports
of OpenVAS 5 packages in Wheezy.

Regards

Javier


signature.asc
Description: Digital signature