NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: ceph_0.80.7-2+deb8u2_mipsel.changes
  ACCEPT

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: ceph_0.80.7-2+deb8u2_armel.changes
  ACCEPT
Processing changes file: ceph_0.80.7-2+deb8u2_armhf.changes
  ACCEPT

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: ceph_0.80.7-2+deb8u2_s390x.changes
  ACCEPT

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: python-crypto_2.6.1-5+deb8u1_armel.changes
  ACCEPT

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: asterisk_11.13.1~dfsg-2+deb8u2_mipsel.changes
  ACCEPT
Processing changes file: nvidia-graphics-drivers_340.101-1_armhf.changes
  ACCEPT
Processing changes file: python-crypto_2.6.1-5+deb8u1_armhf.changes
  ACCEPT
Processing changes file: systemd_215-17+deb8u6_armel.changes
  ACCEPT
Processing changes file: systemd_215-17+deb8u6_mips.changes
  ACCEPT
Processing changes file: unrtf_0.21.5-3+deb8u1_armel.changes
  ACCEPT

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: jq_1.4-2.1+deb8u1_armel.changes
  ACCEPT
Processing changes file: jq_1.4-2.1+deb8u1_armhf.changes
  ACCEPT
Processing changes file: python-crypto_2.6.1-5+deb8u1_mipsel.changes
  ACCEPT
Processing changes file: systemd_215-17+deb8u6_armhf.changes
  ACCEPT
Processing changes file: systemd_215-17+deb8u6_mipsel.changes
  ACCEPT
Processing changes file: unrtf_0.21.5-3+deb8u1_armhf.changes
  ACCEPT

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: asterisk_11.13.1~dfsg-2+deb8u2_armel.changes
  ACCEPT
Processing changes file: asterisk_11.13.1~dfsg-2+deb8u2_armhf.changes
  ACCEPT
Processing changes file: asterisk_11.13.1~dfsg-2+deb8u2_mips.changes
  ACCEPT
Processing changes file: ceph_0.80.7-2+deb8u2_arm64.changes
  ACCEPT
Processing changes file: hplip_3.14.6-1+deb8u1_armel.changes
  ACCEPT
Processing changes file: hplip_3.14.6-1+deb8u1_armhf.changes
  ACCEPT
Processing changes file: python-crypto_2.6.1-5+deb8u1_mips.changes
  ACCEPT

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: asterisk_11.13.1~dfsg-2+deb8u2_powerpc.changes
  ACCEPT
Processing changes file: ceph_0.80.7-2+deb8u2_i386.changes
  ACCEPT
Processing changes file: ceph_0.80.7-2+deb8u2_powerpc.changes
  ACCEPT
Processing changes file: ceph_0.80.7-2+deb8u2_ppc64el.changes
  ACCEPT
Processing changes file: exim4_4.84.2-2+deb8u3_mips.changes
  ACCEPT
Processing changes file: hplip_3.14.6-1+deb8u1_mips.changes
  ACCEPT
Processing changes file: hplip_3.14.6-1+deb8u1_mipsel.changes
  ACCEPT
Processing changes file: hplip_3.14.6-1+deb8u1_s390x.changes
  ACCEPT
Processing changes file: jq_1.4-2.1+deb8u1_ppc64el.changes
  ACCEPT
Processing changes file: jq_1.4-2.1+deb8u1_s390x.changes
  ACCEPT
Processing changes file: python-crypto_2.6.1-5+deb8u1_powerpc.changes
  ACCEPT
Processing changes file: python-crypto_2.6.1-5+deb8u1_ppc64el.changes
  ACCEPT
Processing changes file: python-crypto_2.6.1-5+deb8u1_s390x.changes
  ACCEPT
Processing changes file: unrtf_0.21.5-3+deb8u1_mips.changes
  ACCEPT
Processing changes file: unrtf_0.21.5-3+deb8u1_mipsel.changes
  ACCEPT
Processing changes file: unrtf_0.21.5-3+deb8u1_powerpc.changes
  ACCEPT
Processing changes file: unrtf_0.21.5-3+deb8u1_ppc64el.changes
  ACCEPT
Processing changes file: unrtf_0.21.5-3+deb8u1_s390x.changes
  ACCEPT

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: asterisk_11.13.1~dfsg-2+deb8u2_arm64.changes
  ACCEPT
Processing changes file: asterisk_11.13.1~dfsg-2+deb8u2_i386.changes
  ACCEPT
Processing changes file: asterisk_11.13.1~dfsg-2+deb8u2_ppc64el.changes
  ACCEPT
Processing changes file: asterisk_11.13.1~dfsg-2+deb8u2_s390x.changes
  ACCEPT
Processing changes file: exim4_4.84.2-2+deb8u3_armel.changes
  ACCEPT
Processing changes file: exim4_4.84.2-2+deb8u3_armhf.changes
  ACCEPT
Processing changes file: exim4_4.84.2-2+deb8u3_mipsel.changes
  ACCEPT
Processing changes file: exim4_4.84.2-2+deb8u3_s390x.changes
  ACCEPT
Processing changes file: hplip_3.14.6-1+deb8u1_arm64.changes
  ACCEPT
Processing changes file: hplip_3.14.6-1+deb8u1_i386.changes
  ACCEPT
Processing changes file: hplip_3.14.6-1+deb8u1_powerpc.changes
  ACCEPT
Processing changes file: hplip_3.14.6-1+deb8u1_ppc64el.changes
  ACCEPT
Processing changes file: jq_1.4-2.1+deb8u1_i386.changes
  ACCEPT
Processing changes file: jq_1.4-2.1+deb8u1_mips.changes
  ACCEPT
Processing changes file: jq_1.4-2.1+deb8u1_mipsel.changes
  ACCEPT
Processing changes file: jq_1.4-2.1+deb8u1_powerpc.changes
  ACCEPT
Processing changes file: libpng_1.2.50-2+deb8u3_armel.changes
  ACCEPT
Processing changes file: libpng_1.2.50-2+deb8u3_armhf.changes
  ACCEPT
Processing changes file: libpng_1.2.50-2+deb8u3_mips.changes
  ACCEPT
Processing changes file: libpng_1.2.50-2+deb8u3_mipsel.changes
  ACCEPT
Processing changes file: libpng_1.2.50-2+deb8u3_ppc64el.changes
  ACCEPT
Processing changes file: libpng_1.2.50-2+deb8u3_s390x.changes
  ACCEPT
Processing changes file: nvidia-graphics-drivers_340.101-1_amd64.changes
  ACCEPT
Processing changes file: nvidia-graphics-drivers_340.101-1_i386.changes
  ACCEPT
Processing changes file: 
nvidia-graphics-drivers-legacy-304xx_304.134-0~deb8u1_amd64.changes
  ACCEPT
Processing changes file: 
nvidia-graphics-drivers-legacy-304xx_304.134-0~deb8u1_i386.changes
  ACCEPT
Processing changes file: python-crypto_2.6.1-5+deb8u1_arm64.changes
  ACCEPT
Processing changes file: python-crypto_2.6.1-5+deb8u1_i386.changes
  ACCEPT
Processing changes file: systemd_215-17+deb8u6_arm64.changes
  ACCEPT
Processing changes file: systemd_215-17+deb8u6_i386.changes
  ACCEPT
Processing changes file: systemd_215-17+deb8u6_powerpc.changes
  ACCEPT
Processing changes file: systemd_215-17+deb8u6_ppc64el.changes
  ACCEPT
Processing changes file: systemd_215-17+deb8u6_s390x.changes
  ACCEPT
Processing changes file: unrtf_0.21.5-3+deb8u1_arm64.changes
  ACCEPT
Processing changes file: unrtf_0.21.5-3+deb8u1_i386.changes
  ACCEPT

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: exim4_4.84.2-2+deb8u3_arm64.changes
  ACCEPT
Processing changes file: exim4_4.84.2-2+deb8u3_i386.changes
  ACCEPT
Processing changes file: exim4_4.84.2-2+deb8u3_powerpc.changes
  ACCEPT
Processing changes file: exim4_4.84.2-2+deb8u3_ppc64el.changes
  ACCEPT
Processing changes file: jq_1.4-2.1+deb8u1_arm64.changes
  ACCEPT
Processing changes file: libpng_1.2.50-2+deb8u3_amd64.changes
  ACCEPT
Processing changes file: libpng_1.2.50-2+deb8u3_arm64.changes
  ACCEPT
Processing changes file: libpng_1.2.50-2+deb8u3_i386.changes
  ACCEPT
Processing changes file: libpng_1.2.50-2+deb8u3_powerpc.changes
  ACCEPT

Trang web bị mất nhiều từ khóa gg...

[Cao Tuan]

Hi bạn lista, mình thấy website của bạn đang bị mất đi một vài từ khóa trên 
google

Đó là vì khách truy cập vào trang web của bạn nhưng họ đã thoát khỏi trang web 
quá nhanh

Bạn có thể sử dụng hộp chát uhchat .net gắn vào website để câu giờ cho họ ở lại 
lâu hơn hoặc

Bug#850482: nmu: ardour_1:5.5.0~dfsg-1

[James Cowgill]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: binnmu

Hi,

Please can ardour be binNMUed against fftw3 3.3.5-3. That version of
fftw3 tightens the package dependencies which is needed for a new API
used by ardour.

Thanks,
James


nmu ardour_1:5.5.0~dfsg-1 . ANY . unstable . -m "rebuild for stricter fftw3 
dependency"

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'buildd-unstable'), (500, 
'unstable'), (500, 'testing'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.8.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)



signature.asc
Description: OpenPGP digital signature

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: asterisk_11.13.1~dfsg-2+deb8u2_amd64.changes
  ACCEPT

Processed: Re: Bug#850084: jessie-pu: package asterisk/1:11.13.1~dfsg-2+deb8u2

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #850084 [release.debian.org] jessie-pu: package 
asterisk/1:11.13.1~dfsg-2+deb8u2
Added tag(s) pending.

-- 
850084: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850084
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#850084: jessie-pu: package asterisk/1:11.13.1~dfsg-2+deb8u2

[Adam D. Barratt]

Control: tags -1 + pending

On Fri, 2017-01-06 at 21:03 +0100, Bernhard Schmidt wrote:
> On 05.01.2017 20:53, Adam D. Barratt wrote:
> > Control: tags -1 + confirmed
> > 
> > On Wed, 2017-01-04 at 00:05 +0100, Bernhard Schmidt wrote:
> >> I would like to fix CVE-2016-9938 (Bug #847668) with the upcoming point 
> >> release. 
> >> The issue has been categorized no-dsa by the security team before.
> > 
> > Please go ahead.
> 
> Uploaded and processed, thanks.

Flagged for acceptance.

Regards,

Adam

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: duck_0.7+deb8u1_amd64.changes
  ACCEPT
Processing changes file: exim4_4.84.2-2+deb8u3_amd64.changes
  ACCEPT
Processing changes file: libpng_1.2.50-2+deb8u3_source.changes
  ACCEPT
Processing changes file: mapserver_6.4.1-5+deb8u1_amd64.changes
  ACCEPT
Processing changes file: postgresql-common_165+deb8u2_amd64.changes
  ACCEPT
Processing changes file: python-crypto_2.6.1-5+deb8u1_amd64.changes
  ACCEPT
Processing changes file: unrtf_0.21.5-3+deb8u1_amd64.changes
  ACCEPT

Processed: Re: Bug#847273: jessie-pu: package mapserver/6.4.1-5

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #847273 [release.debian.org] jessie-pu: package mapserver/6.4.1-5
Added tag(s) pending.

-- 
847273: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847273
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Processed: Re: Bug#849869: jessie-pu: package unrtf/0.21.5-3

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #849869 [release.debian.org] jessie-pu: package unrtf/0.21.5-3
Added tag(s) pending.

-- 
849869: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849869
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#849869: jessie-pu: package unrtf/0.21.5-3

[Adam D. Barratt]

Control: tags -1 + pending

On Fri, 2017-01-06 at 09:51 +0100, Willi Mann wrote:
> > Uploaded. Unfortunately, I realized after the upload that the debdiff
> > got bloated by my pbuilder build. I guess because unapply-patches is not
> > set. Let me know whether I should fix that.
> 
> False alarm- the diff is still fine. It just wasn't a good idea to
> compare the 2 unpacked versions of the source tree instead of using
> debdiff...

Flagged for acceptance.

Regards,

Adam

Processed: Re: Bug#849962: jessie-pu: package libpng/1.2.50-2+deb8u3

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #849962 [release.debian.org] jessie-pu: package libpng/1.2.50-2+deb8u3
Added tag(s) pending.

-- 
849962: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849962
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#849698: jessie-pu: package python-crypto/2.6.1-5+deb8u1

[Adam D. Barratt]

Control: tags -1 + pending

On Fri, 2017-01-06 at 15:58 +0100, Sebastian Ramacher wrote:
> Hi
> 
> On 2017-01-05 19:58:53, Adam D. Barratt wrote:
> > Control: tags -1 + confirmed
> > 
> > On Tue, 2017-01-03 at 14:05 +0100, Sebastian Ramacher wrote:
> > > Hi
> > > 
> > > On 2017-01-03 11:05:40, Sebastian Ramacher wrote:
> > > > On 2017-01-01 20:55:40, Sebastian Ramacher wrote:
> > [..]
> > > > > > 
> > > > > > On Thu, 2016-12-29 at 23:15 +0100, Sebastian Ramacher wrote:
> > > > > > > I'd like to fix CVE-2013-7459 (#849495) in jessie via the next 
> > > > > > > point release.
> > > > > > > The issue was marked as no-dsa.
> > > > > > > 
> > > > > > > The proposed debdiff is attached. The same patch was applied to 
> > > > > > > the package in
> > > > > > > unstable.
> > > > > > 
> > > > > > +  * Throw exception when IV is used with ECB or CTR (CVE-2013-7459)
> > [...]
> > > > Seems like python-paramiko broke in wheezy-lts (#850025). I will come 
> > > > back to
> > > > you once I've checked if stable is affected as well.
> > > 
> > > New debdiff is attached. Instead of throwing an exception the IV is simply
> > > ignored and a warning is displayed.
> > 
> > The patch itself still refers to exceptions in its metadata, fwiw.
> 
> Thanks, updated the metadata and explained the change compared to the original
> upstream patch.
> 
> > Please go ahead.
> 
> Uploaded with above change.

Flagged for acceptance in to p-u.

Regards,

Adam

Processed: Re: Bug#849865: jessie-pu: package postgresql-common/165+deb8u2

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #849865 [release.debian.org] jessie-pu: package postgresql-common/165+deb8u2
Added tag(s) pending.

-- 
849865: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849865
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#849962: jessie-pu: package libpng/1.2.50-2+deb8u3

[Adam D. Barratt]

Control: tags -1 + pending

On Thu, 2017-01-05 at 19:51 +, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Mon, 2017-01-02 at 17:27 +, Gianfranco Costamagna wrote:
> > CVE-2016-10087 is not worth a DSA, Security Team asked for a point release 
> > update.
> > 
> > diff -Nru libpng-1.2.50/debian/changelog libpng-1.2.50/debian/changelog
> > --- libpng-1.2.50/debian/changelog  2016-01-07 20:39:14.0 +0100
> > +++ libpng-1.2.50/debian/changelog  2017-01-02 18:24:35.0 +0100
> > @@ -1,3 +1,10 @@
> > +libpng (1.2.50-2+deb8u3) jessie; urgency=medium
> > +
> > +  * debian/patches/CVE-2016-10087.patch:
> > +- cherry-pick upstream fix for CVE-2016-10087
> 
> Please go ahead.

Uploaded and flagged for acceptance.

Regards,

Adam

Processed: Re: Bug#849698: jessie-pu: package python-crypto/2.6.1-5+deb8u1

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #849698 [release.debian.org] jessie-pu: package python-crypto/2.6.1-5+deb8u1
Added tag(s) pending.

-- 
849698: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849698
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#849865: jessie-pu: package postgresql-common/165+deb8u2

[Adam D. Barratt]

Control: tags -1 + pending

On Thu, 2017-01-05 at 19:56 +, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Sun, 2017-01-01 at 18:53 +0100, Christoph Berg wrote:
> > I would like to upload postgresql-common/165+deb8u2 with the diff
> > quoted below to jessie. It's fixing a data-loss bug, and a security
> > issue. The issues are already addresses in unstable (both in 178).
> 
> Please go ahead.

Uploaded and flagged for acceptance.

Regards,

Adam

Bug#847273: jessie-pu: package mapserver/6.4.1-5

[Adam D. Barratt]

Control: tags -1 + pending

On Thu, 2017-01-05 at 21:27 +0100, Sebastiaan Couwenberg wrote:
> On 01/05/2017 09:04 PM, Adam D. Barratt wrote:
> > On Tue, 2016-12-06 at 22:00 +0100, Sebastiaan Couwenberg wrote:
> >> Sorry for the outdated debdiff, for p-u the distribution has been
> >> changed to stable.
> > 
> > Please go ahead.
> 
> Thanks!

Flagged for acceptance.

Regards,

Adam

Bug#849967: jessie-pu: package exim4/4.84.2-2+deb8u3

[Adam D. Barratt]

Control: tags -1 + pending

On Thu, 2017-01-05 at 19:52 +, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Mon, 2017-01-02 at 19:44 +0100, Andreas Metzler wrote:
> > I (and Heiko from exim upstream) would like to fix #845569 in jessie.
> > sid/testing already include the fix, it was part of 4.88~RC6.
> > 
> > The issue is a memleak in the GnuTLS code, the patch is a towo line
> > change. Heiko has provided a very nice writeup in
> > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845569#20
> 
> Please go ahead.

Uploaded and flagged for acceptance.

Regards,

Adam

Processed: Re: Bug#829606: jessie-pu: package duck/0.7+deb8u1

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #829606 [release.debian.org] jessie-pu: package duck/0.7+deb8u1
Added tag(s) pending.

-- 
829606: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=829606
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#829606: jessie-pu: package duck/0.7+deb8u1

[Adam D. Barratt]

Control: tags -1 + pending

On Fri, 2017-01-06 at 22:07 +0100, Simon Kainz wrote:
> Am 2017-01-06 um 22:04 schrieb Salvatore Bonaccorso:
> > Hi Simon
> > 
> > Looks you uploaded to the wrong host (security-master instead of
> > ftp-master), and the target distribution was set to jessie-security.
> > 
> > I have thus rejected the package on security-master.
> > 
> > So as Adam said, you need to change the target distribution to
> > 'jessie', then upload to ftp-master for the point release.
> 
> ok, sorry for the mess.
> 
> Will do as you suggested.

Flagged for acceptance.

Regards,

Adam

Processed: Re: Bug#849967: jessie-pu: package exim4/4.84.2-2+deb8u3

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #849967 [release.debian.org] jessie-pu: package exim4/4.84.2-2+deb8u3
Added tag(s) pending.

-- 
849967: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849967
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#849020: jessie-pu: package systemd/215-17+deb8u6

[Adam D. Barratt]

Control: tags -1 + pending

On Thu, 2017-01-05 at 13:30 +0100, Michael Biebl wrote:
> Am 05.01.2017 um 07:18 schrieb Adam D. Barratt:
> > Michael, please feel free to upload. 
> 
> Thanks. done
> 
> (I'm assuming that the resulting
> > package has had at least some testing on a jessie system already.)
> 
> I did test the invididual fixes in a jessie VM and lxc container, which
> included installing and running the final version of systemd_215-17+deb8u6.

Thanks for the confirmation.

Flagged for acceptance into p-u.

Regards,

Adam

Processed: Re: Bug#849020: jessie-pu: package systemd/215-17+deb8u6

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #849020 [release.debian.org] jessie-pu: package systemd/215-17+deb8u6
Added tag(s) pending.

-- 
849020: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849020
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

NEW changes in stable-new

[Debian FTP Masters]

Processing changes file: ceph_0.80.7-2+deb8u2_amd64.changes
  ACCEPT
Processing changes file: e2fsprogs_1.42.12-2+b1_amd64.changes
  ACCEPT
Processing changes file: e2fsprogs_1.42.12-2+b1_arm64.changes
  ACCEPT
Processing changes file: e2fsprogs_1.42.12-2+b1_armel.changes
  ACCEPT
Processing changes file: e2fsprogs_1.42.12-2+b1_armhf.changes
  ACCEPT
Processing changes file: e2fsprogs_1.42.12-2+b1_i386.changes
  ACCEPT
Processing changes file: e2fsprogs_1.42.12-2+b1_mips.changes
  ACCEPT
Processing changes file: e2fsprogs_1.42.12-2+b1_mipsel.changes
  ACCEPT
Processing changes file: e2fsprogs_1.42.12-2+b1_powerpc.changes
  ACCEPT
Processing changes file: e2fsprogs_1.42.12-2+b1_ppc64el.changes
  ACCEPT
Processing changes file: e2fsprogs_1.42.12-2+b1_s390x.changes
  ACCEPT
Processing changes file: hplip_3.14.6-1+deb8u1_amd64.changes
  ACCEPT
Processing changes file: intel-microcode_3.20161104.1~deb8u1_multi.changes
  ACCEPT
Processing changes file: jq_1.4-2.1+deb8u1_amd64.changes
  ACCEPT
Processing changes file: libphp-phpmailer_5.2.9+dfsg-2+deb8u3_amd64.changes
  ACCEPT
Processing changes file: libvncserver_0.9.9+dfsg2-6.1+deb8u2_amd64.changes
  ACCEPT
Processing changes file: libvncserver_0.9.9+dfsg2-6.1+deb8u2_arm64.changes
  ACCEPT
Processing changes file: libvncserver_0.9.9+dfsg2-6.1+deb8u2_armel.changes
  ACCEPT
Processing changes file: libvncserver_0.9.9+dfsg2-6.1+deb8u2_armhf.changes
  ACCEPT
Processing changes file: libvncserver_0.9.9+dfsg2-6.1+deb8u2_i386.changes
  ACCEPT
Processing changes file: libvncserver_0.9.9+dfsg2-6.1+deb8u2_mips.changes
  ACCEPT
Processing changes file: libvncserver_0.9.9+dfsg2-6.1+deb8u2_mipsel.changes
  ACCEPT
Processing changes file: libvncserver_0.9.9+dfsg2-6.1+deb8u2_powerpc.changes
  ACCEPT
Processing changes file: libvncserver_0.9.9+dfsg2-6.1+deb8u2_ppc64el.changes
  ACCEPT
Processing changes file: libvncserver_0.9.9+dfsg2-6.1+deb8u2_s390x.changes
  ACCEPT
Processing changes file: nvidia-graphics-drivers_340.101-1_source.changes
  ACCEPT
Processing changes file: 
nvidia-graphics-drivers-legacy-304xx_304.134-0~deb8u1_source.changes
  ACCEPT
Processing changes file: pcsc-lite_1.8.13-1+deb8u1_amd64.changes
  ACCEPT
Processing changes file: pcsc-lite_1.8.13-1+deb8u1_arm64.changes
  ACCEPT
Processing changes file: pcsc-lite_1.8.13-1+deb8u1_armel.changes
  ACCEPT
Processing changes file: pcsc-lite_1.8.13-1+deb8u1_armhf.changes
  ACCEPT
Processing changes file: pcsc-lite_1.8.13-1+deb8u1_i386.changes
  ACCEPT
Processing changes file: pcsc-lite_1.8.13-1+deb8u1_mips.changes
  ACCEPT
Processing changes file: pcsc-lite_1.8.13-1+deb8u1_mipsel.changes
  ACCEPT
Processing changes file: pcsc-lite_1.8.13-1+deb8u1_powerpc.changes
  ACCEPT
Processing changes file: pcsc-lite_1.8.13-1+deb8u1_ppc64el.changes
  ACCEPT
Processing changes file: pcsc-lite_1.8.13-1+deb8u1_s390x.changes
  ACCEPT
Processing changes file: systemd_215-17+deb8u6_amd64.changes
  ACCEPT

Bug#848829: jessie-pu: package nvidia-graphics-drivers-legacy-304xx/304.134-0~deb8u1

[Adam D. Barratt]

Control: tags -1 + pending

On Sat, 2016-12-31 at 17:17 +, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Tue, 2016-12-20 at 03:09 +0100, Andreas Beckmann wrote:
> > for fixing CVE-2016-8826, CVE-2016-7382, CVE-2016-7389 in
> > nvidia-graphics-drivers-legacy-304xx we need to update to a new upstream
> > version.
> > 
> > The packaging contains further changes to
> > * switch from our manually maintained conftest.h (that had to be updated
> >   for each new upstream release) to using upstream's conftest.sh script
> >   instead. This required backporting several build system fixes for the
> >   kernel module.
> > * switch the source layout to have one .orig-$ARCH.tar.gz per
> >   architecture
> > * backport minor fixes and description updates from sid
> 
> Please go ahead.

Uploaded and flagged for acceptance.

Regards,

Adam

Processed: Re: Bug#848829: jessie-pu: package nvidia-graphics-drivers-legacy-304xx/304.134-0~deb8u1

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #848829 [release.debian.org] jessie-pu: package 
nvidia-graphics-drivers-legacy-304xx/304.134-0~deb8u1
Added tag(s) pending.

-- 
848829: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848829
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#846352: jessie-pu: package nvidia-graphics-drivers/340.98-1

[Adam D. Barratt]

Control: tags -1 + pending

On Wed, 2017-01-04 at 14:00 +0100, Andreas Beckmann wrote:
> Control: retitle -1 jessie-pu: package nvidia-graphics-drivers/340.101-1
> 
> On 2016-12-31 18:36, Adam D. Barratt wrote:
> > On Wed, 2016-11-30 at 15:53 +0100, Andreas Beckmann wrote:
> >> again we have some CVEs in the proprietary nvidia driver:
> >> CVE-2016-7382, CVE-2016-7389: #846331
> 
> > Please go ahead; apologies for the delay.
> 
> I just uploaded the next upstream release 340.101 fixing another CVE:
> 
>   * New upstream legacy 340xx branch release 340.101 (2016-12-14).
> * Fixed CVE-2016-8826.  (Closes: #848195)
> * Improved compatibility with recent Linux kernels.
> 
> Some patches added/removed, but no further packaging changes over the
> big lot in 340.98.

Flagged for acceptance.

Regards,

Adam

Processed: Re: Bug#846352: jessie-pu: package nvidia-graphics-drivers/340.98-1

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #846352 [release.debian.org] jessie-pu: package 
nvidia-graphics-drivers/340.101-1
Added tag(s) pending.

-- 
846352: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=846352
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Processed: Re: Bug#849488: Bug#847575: closed by Hilko Bengen <ben...@debian.org> (no embedded dietlibc)

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #849488 [release.debian.org] nmu: e2fsck-static
Ignoring request to alter tags of bug #849488 to the same tags previously set

-- 
849488: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849488
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#849488: Bug#847575: closed by Hilko Bengen <ben...@debian.org> (no embedded dietlibc)

[Adam D. Barratt]

Control: tags -1 + pending

On Wed, 2016-12-28 at 18:36 +, Adam D. Barratt wrote:
> [recipient list trimmed and sent to the release.d.o bug rather than the
> e2fsprogs one]
> 
> On Tue, 2016-12-27 at 19:56 +, Adam D. Barratt wrote:
> [...]
> > On Tue, 2016-12-27 at 12:31 -0500, Theodore Ts'o wrote:
> [...]
> > > Agreed, that seems to be the best way to handle things.  So that means
> > > we would need to do a binNMU for e2fsck-static/1.42.12-2 for the
> > > following architectures:
> > > 
> > > alpha amd64 arm hppa i386 ia64 powerpc ppc64 s390 sparc
> > > 
> > > I've reassigned this to the release team to see if the Stable Release
> > > Managers agree (which hopefully they will).
> > 
> > Only three of those architectures - amd64, i386 and powerpc - are in
> > stable so are the only ones that are relevant as far as the release.d.o
> > bug is concerned. I've scheduled binNMUs for those; you'll have to
> > handle the others separately, or explain which Debian architectures you
> > actually meant (for instance, "arm" hasn't been used as a Debian
> > architecture name for several releases now).
> 
> Are binNMUs for any other architectures in stable required?

Answer came there none. However, I noticed that the libraries produced
by e2fsprogs are multi-arch:same, so I scheduled binNMUs for all
architectures in jessie, which have now been flagged for acceptance into
p-u.

Regards,

Adam

Bug#849467: jessie-pu: package hplip/3.14.6-1+deb8u1

[Adam D. Barratt]

Control: tags -1 + pending

On Tue, 2017-01-03 at 12:47 +, Adam D. Barratt wrote:
> On 2017-01-03 12:23, Didier 'OdyX' Raboud wrote:
> > Le mardi, 3 janvier 2017, 12.21:36 h CET Adam D. Barratt a écrit :
> >> You can't immediately re-use the version. Either we can reject the
> >> current package and you can then upload a fixed +deb8u1, or you can
> >> upload +deb8u2 which just adds the fix above.
> > 
> > It does make sense to re-use the same version, doesn't it? If so, 
> > please
> > reject, I'll upload after that.
> 
> There are advantages to both approaches.
> 
> In any case, I've asked dak to reject the current upload. Hopefully it 
> will action that soonish.

Re-uploaded and flagged for acceptance.

Regards,

Adam

Bug#850214: jessie-pu: package jq/1.4-2.2

[Adam D. Barratt]

Control: tags -1 + pending

On Thu, 2017-01-05 at 06:50 +, Adam D. Barratt wrote:
> On Thu, 2017-01-05 at 01:37 -0500, Harlan Lieberman-Berg wrote:
> > "Adam D. Barratt"  writes:
> > > On Thu, 2017-01-05 at 07:12 +0100, Salvatore Bonaccorso wrote:
> > >> Disclaimer: I'm not a member of release team, so this is not binding
> > >> statement :-)
> > 
> > Good advice is appreciated, no matter the source!
> > 
> > > What Salvatore said, please. :-)
> > 
> > Rebuilt with the corrected version.  debdiff attached.
> 
> Thanks; please go ahead. (That was implicit in the previous message, but
> I realise possibly not obvious.)

Uploaded and flagged for acceptance.

Regards,

Adam

Processed: Re: Bug#850214: jessie-pu: package jq/1.4-2.2

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #850214 [release.debian.org] jessie-pu: package jq/1.4-2.2
Added tag(s) pending.

-- 
850214: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850214
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Processed: Re: Bug#849467: jessie-pu: package hplip/3.14.6-1+deb8u1

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #849467 [release.debian.org] jessie-pu: package hplip/3.14.6-1+deb8u1
Added tag(s) pending.

-- 
849467: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849467
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Processed: Re: Bug#848341: jessie-pu: package intel-microcode/3.20161104.1~deb8u1

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #848341 [release.debian.org] jessie-pu: package 
intel-microcode/3.20161104.1~deb8u1
Added tag(s) pending.

-- 
848341: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848341
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#848341: jessie-pu: package intel-microcode/3.20161104.1~deb8u1

[Adam D. Barratt]

Control: tags -1 + pending

On Thu, 2017-01-05 at 09:29 -0200, Henrique de Moraes Holschuh wrote:
> On Thu, 05 Jan 2017, Adam D. Barratt wrote:
> > On Fri, 2016-12-16 at 10:17 -0200, Henrique de Moraes Holschuh wrote:
> > > I would like to update the intel-microcode packages in stable to address
> > > several critical errata in newer Intel processors.
> > > 
> > > The updated packages being proposed in this bug report are identical to
> > > the ones in unstable/testing and jessie-backports, other than
> > > debian/changelog and version numbering.
> > > 
> > > These changes have been tested in unstable since 2016-11-09, in testing
> > > since 2016-11-15, and in jessie-backports since 2016-11-17, without any
> > > issues being reported.
> > 
> > Please go ahead.
> 
> Uploaded.

Flagged for acceptance into p-u.

Regards,

Adam

Processed: Re: Bug#849538: jessie-pu: package ceph/0.80.7-2+deb8u2

[Debian Bug Tracking System]

Processing control commands:

> tags -1 + pending
Bug #849538 [release.debian.org] jessie-pu: package ceph/0.80.7-2+deb8u2
Added tag(s) pending.

-- 
849538: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849538
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

Bug#849538: jessie-pu: package ceph/0.80.7-2+deb8u2

[Adam D. Barratt]

Control: tags -1 + pending

On Sat, 2016-12-31 at 17:08 +, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Wed, 2016-12-28 at 11:38 +0100, Gaudenz Steinlin wrote:
> > I would like to update ceph with the next stable point release to fix
> > the 4 security issues listed below. These are all minor issues which did
> > not warrant a DSA on their own, but are still worth fixing.
> > 
> > https://security-tracker.debian.org/tracker/CVE-2016-9579
> > https://security-tracker.debian.org/tracker/CVE-2016-5009
> > https://security-tracker.debian.org/tracker/CVE-2016-7031
> > https://security-tracker.debian.org/tracker/CVE-2016-8626
> 
> Please go ahead.

Uploaded and flagged for acceptance.

Regards,

Adam

Bug#829606: jessie-pu: package duck/0.7+deb8u1

[Salvatore Bonaccorso]

Hi Simon

Looks you uploaded to the wrong host (security-master instead of
ftp-master), and the target distribution was set to jessie-security.

I have thus rejected the package on security-master.

So as Adam said, you need to change the target distribution to
'jessie', then upload to ftp-master for the point release.

Regards,
Salvatore

Bug#829606: jessie-pu: package duck/0.7+deb8u1

[Simon Kainz]

Ah, sorry, i tried to follow [0], which then either is wrong or does not
apply in my case. Can someone enlighten me please.


[0]
https://www.debian.org/doc/manuals/developers-reference/pkgs.html#bug-security

Am 2017-01-06 um 22:04 schrieb Salvatore Bonaccorso:
> Hi Simon
> 
> Looks you uploaded to the wrong host (security-master instead of
> ftp-master), and the target distribution was set to jessie-security.
> 
> I have thus rejected the package on security-master.
> 
> So as Adam said, you need to change the target distribution to
> 'jessie', then upload to ftp-master for the point release.

ok, sorry for the mess.

Will do as you suggested.

Bye,




> 
> Regards,
> Salvatore
> 



signature.asc
Description: OpenPGP digital signature

Bug#850084: jessie-pu: package asterisk/1:11.13.1~dfsg-2+deb8u2

[Bernhard Schmidt]

On 05.01.2017 20:53, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Wed, 2017-01-04 at 00:05 +0100, Bernhard Schmidt wrote:
>> I would like to fix CVE-2016-9938 (Bug #847668) with the upcoming point 
>> release. 
>> The issue has been categorized no-dsa by the security team before.
> 
> Please go ahead.

Uploaded and processed, thanks.

Bernhard

Bug#837728: Heimdal has done a new release

[Jelmer Vernooij]

Heimdal has done a new release, which has been packaged and will
hopefully make it into stretch, rendering this removal request
unnecessary.

The only thing that's preventing its migration to testing at the
moment is a regression in binutils on MIPS
(https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=844357).


signature.asc
Description: PGP signature

Bug#850440: jessie-pu: package w3m/0.5.3-19+deb8u2

[Tatsuya Kinoshita]

Package: release.debian.org
Severity: normal
Tags: jessie
User: release.debian@packages.debian.org
Usertags: pu

Hi, the release team,

I'd like to update package w3m in jessie to fix additional security
issues to 0.5.3-19+deb8u1, mentioned in .

See this changelog and the attached debdiff.

w3m (0.5.3-19+deb8u2) jessie; urgency=medium

  * Fix multiple vulnerabilities (closes: #850432)
- New patch 934_menu.patch to fix buffer overflow (tats/w3m#49)
- New patch 935_shiftanchor.patch to fix buffer overflow (tats/w3m#62)
- New patch 936_metarefresh.patch to fix buffer overflow (tats/w3m#63)
- New patch 937_lineproc0.patch to fix buffer overflow (tats/w3m#67)
- New patch 938_lineproc2body.patch to fix buffer overflow (tats/w3m#61)
- New patch 939_textarea.patch to fix buffer overflow (tats/w3m#58)
- New patch 940_tabattr.patch to fix buffer overflow (tats/w3m#60)
- New patch 941_integeredwidth.patch to fix buffer overflow (tats/w3m#70)
- New patch 942_tridvalue.patch to fix buffer overflow (tats/w3m#71)
- New patch 943_pushlink.patch to fix buffer overflow (tats/w3m#64, #66)
- New patch 944_lineproc0.patch to fix use after free (tats/w3m#65)
- New patch 945_wtfstrwidth.patch to fix buffer overflow (tats/w3m#57)
- New patch 946_strnewsize.patch to fix buffer overflow (tats/w3m#72)
- New patch 947_realcolumn.patch to fix buffer overflow (tats/w3m#69)
- New patch 948_getmclen.patch to fix buffer overflow
  (tats/w3m#59, #73, #74, #75, #76, #78, #79, #80, #83, #84)
- New patch 949_wtftowcs.patch to fix buffer overflow (tats/w3m#77)
- New patch 950_textarea.patch to fix infinite loop (tats/w3m#85)
- New patch 951_lineproc0.patch to fix use after free (tats/w3m#81)
- New patch 952_formupdatebuffer.patch to fix buffer overflow (tats/w3m#82)
- New patch 953_formupdateline.patch to fix buffer overflow
  (tats/w3m#68#issuecomment-266214643)
- New patch 954_wtfparse1.patch to fix buffer overflow (tats/w3m#68)

 -- Tatsuya Kinoshita   Fri, 06 Jan 2017 23:21:55 +0900

Please let me know if I can upload it.

Thanks,
--
Tatsuya Kinoshita
diffstat for w3m-0.5.3 w3m-0.5.3

 changelog  |   29 
 patches/934_menu.patch |   25 +++
 patches/935_shiftanchor.patch  |   26 +++
 patches/936_metarefresh.patch  |   28 
 patches/937_lineproc0.patch|   25 +++
 patches/938_lineproc2body.patch|   25 +++
 patches/939_textarea.patch |   25 +++
 patches/940_tabattr.patch  |   25 +++
 patches/941_integeredwidth.patch   |   34 ++
 patches/942_tridvalue.patch|   28 
 patches/943_pushlink.patch |   32 ++
 patches/944_lineproc0.patch|   26 +++
 patches/945_wtfstrwidth.patch  |   40 +
 patches/946_strnewsize.patch   |   25 +++
 patches/947_realcolumn.patch   |   25 +++
 patches/948_getmclen.patch |   76 +
 patches/949_wtftowcs.patch |   36 +++
 patches/950_textarea.patch |   27 +++
 patches/951_lineproc0.patch|   25 +++
 patches/952_formupdatebuffer.patch |   26 +++
 patches/953_formupdateline.patch   |   26 +++
 patches/954_wtfparse1.patch|   84 +
 patches/series |   21 +
 23 files changed, 739 insertions(+)

diff -Nru w3m-0.5.3/debian/changelog w3m-0.5.3/debian/changelog
--- w3m-0.5.3/debian/changelog  2016-11-24 19:49:18.0 +0900
+++ w3m-0.5.3/debian/changelog  2017-01-06 23:21:55.0 +0900
@@ -1,3 +1,32 @@
+w3m (0.5.3-19+deb8u2) jessie; urgency=medium
+
+  * Fix multiple vulnerabilities (closes: #850432)
+- New patch 934_menu.patch to fix buffer overflow (tats/w3m#49)
+- New patch 935_shiftanchor.patch to fix buffer overflow (tats/w3m#62)
+- New patch 936_metarefresh.patch to fix buffer overflow (tats/w3m#63)
+- New patch 937_lineproc0.patch to fix buffer overflow (tats/w3m#67)
+- New patch 938_lineproc2body.patch to fix buffer overflow (tats/w3m#61)
+- New patch 939_textarea.patch to fix buffer overflow (tats/w3m#58)
+- New patch 940_tabattr.patch to fix buffer overflow (tats/w3m#60)
+- New patch 941_integeredwidth.patch to fix buffer overflow (tats/w3m#70)
+- New patch 942_tridvalue.patch to fix buffer overflow (tats/w3m#71)
+- New patch 943_pushlink.patch to fix buffer overflow (tats/w3m#64, #66)
+- New patch 944_lineproc0.patch to fix use after free (tats/w3m#65)
+- New patch 945_wtfstrwidth.patch to fix buffer overflow (tats/w3m#57)
+- New patch 946_strnewsize.patch to fix buffer overflow (tats/w3m#72)
+- New patch 947_realcolumn.patch to fix buffer overflow (tats/w3m#69)
+- New patch 

Bug#849698: jessie-pu: package python-crypto/2.6.1-5+deb8u1

[Sebastian Ramacher]

Hi

On 2017-01-05 19:58:53, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Tue, 2017-01-03 at 14:05 +0100, Sebastian Ramacher wrote:
> > Hi
> > 
> > On 2017-01-03 11:05:40, Sebastian Ramacher wrote:
> > > On 2017-01-01 20:55:40, Sebastian Ramacher wrote:
> [..]
> > > > > 
> > > > > On Thu, 2016-12-29 at 23:15 +0100, Sebastian Ramacher wrote:
> > > > > > I'd like to fix CVE-2013-7459 (#849495) in jessie via the next 
> > > > > > point release.
> > > > > > The issue was marked as no-dsa.
> > > > > > 
> > > > > > The proposed debdiff is attached. The same patch was applied to the 
> > > > > > package in
> > > > > > unstable.
> > > > > 
> > > > > +  * Throw exception when IV is used with ECB or CTR (CVE-2013-7459)
> [...]
> > > Seems like python-paramiko broke in wheezy-lts (#850025). I will come 
> > > back to
> > > you once I've checked if stable is affected as well.
> > 
> > New debdiff is attached. Instead of throwing an exception the IV is simply
> > ignored and a warning is displayed.
> 
> The patch itself still refers to exceptions in its metadata, fwiw.

Thanks, updated the metadata and explained the change compared to the original
upstream patch.

> Please go ahead.

Uploaded with above change.

Cheers
-- 
Sebastian Ramacher


signature.asc
Description: PGP signature

Bug#849869: jessie-pu: package unrtf/0.21.5-3

[Willi Mann]

> Uploaded. Unfortunately, I realized after the upload that the debdiff
> got bloated by my pbuilder build. I guess because unapply-patches is not
> set. Let me know whether I should fix that.

False alarm- the diff is still fine. It just wasn't a good idea to
compare the 2 unpacked versions of the source tree instead of using
debdiff...

Willi

Bug#849869: jessie-pu: package unrtf/0.21.5-3

[Willi Mann]

Hi,

Am 2017-01-05 um 20:55 schrieb Adam D. Barratt:

>> The changelog is:
>> unrtf (0.21.5-3+deb8u1) stable; urgency=medium
>>
>>   * Add patch from upstream to fix CVE-2016-10091 (buffer overflow in various
>> cmd_ functions) closes: 849705
> 
> Please go ahead.

Uploaded. Unfortunately, I realized after the upload that the debdiff
got bloated by my pbuilder build. I guess because unapply-patches is not
set. Let me know whether I should fix that.

Willi