Bug#891611: jessie-pu: package subversion/1.8.10-6+deb8u6

2018-05-20 Thread James McCoy
On Mon, Feb 26, 2018 at 10:12:15PM -0500, James McCoy wrote:
> Package: release.debian.org
> Severity: normal
> Tags: jessie
> User: release.debian@packages.debian.org
> Usertags: pu
> 
> This upload would fix crashes that are seen when using subversion's Perl
> bindings.  In particular, git-svn has been a common victim since its
> memory usage patterns tend to cause the right conditions.
> 
> I've verified this against the originally reported issue[0] and
> Salvatore Bonaccorso, who prodded me to prepare the upload, has verified
> it against their problematic repository.

Uploaded, per the workflow changes described in
<1523909491.2872.15.ca...@adam-barratt.org.uk>.

Cheers,
-- 
James
GPG Key: 4096R/91BF BF4D 6956 BD5D F7B7  2D23 DFE6 91AE 331B A3DB



NEW changes in oldstable-new

2018-05-20 Thread Debian FTP Masters
Processing changes file: imagemagick_6.8.9.9-5+deb8u12_amd64.changes
  ACCEPT
Processing changes file: imagemagick_6.8.9.9-5+deb8u12_arm64.changes
  ACCEPT
Processing changes file: imagemagick_6.8.9.9-5+deb8u12_armel.changes
  ACCEPT
Processing changes file: imagemagick_6.8.9.9-5+deb8u12_armhf.changes
  ACCEPT
Processing changes file: imagemagick_6.8.9.9-5+deb8u12_i386.changes
  ACCEPT
Processing changes file: imagemagick_6.8.9.9-5+deb8u12_mips.changes
  ACCEPT
Processing changes file: imagemagick_6.8.9.9-5+deb8u12_mipsel.changes
  ACCEPT
Processing changes file: imagemagick_6.8.9.9-5+deb8u12_powerpc.changes
  ACCEPT
Processing changes file: imagemagick_6.8.9.9-5+deb8u12_ppc64el.changes
  ACCEPT
Processing changes file: imagemagick_6.8.9.9-5+deb8u12_s390x.changes
  ACCEPT



Processed: Merge duplicates

2018-05-20 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> reassign 898339 src:boost1.62
Bug #898339 [ncmpcpp] Ncmpcpp crashes at start
Bug reassigned from package 'ncmpcpp' to 'src:boost1.62'.
No longer marked as found in versions ncmpcpp/0.8.1-1.
Ignoring request to alter fixed versions of bug #898339 to the same values 
previously set
> forcemerge 898369 898339
Bug #898369 {Done: Emilio Pozuelo Monfort } [src:boost1.62] 
boost: ICU version used is part of the ABI
Bug #898339 [src:boost1.62] Ncmpcpp crashes at start
Severity set to 'serious' from 'grave'
898465 was blocked by: 898369
898465 was blocking: 894159
Added blocking bug(s) of 898465: 898339
894159 was blocked by: 888908 898369 898465
894159 was not blocking any bugs.
Added blocking bug(s) of 894159: 898339
Marked Bug as done
Added indication that 898339 affects libmapnik3.0,viking
Marked as fixed in versions boost1.62/1.62.0+dfsg-5.1.
The source boost1.62 and version 1.62.0+dfsg-5+b2 do not appear to match any 
binary packages
Marked as found in versions boost1.62/1.62.0+dfsg-5+b2 and 
boost1.62/1.62.0+dfsg-5.
Merged 898339 898369
> affects 898369 ncmpcpp
Bug #898369 {Done: Emilio Pozuelo Monfort } [src:boost1.62] 
boost: ICU version used is part of the ABI
Bug #898339 {Done: Emilio Pozuelo Monfort } [src:boost1.62] 
Ncmpcpp crashes at start
Added indication that 898369 affects ncmpcpp
Added indication that 898339 affects ncmpcpp
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
894159: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894159
898339: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898339
898369: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898369
898465: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898465
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#894713: stretch-pu: apache2/2.4.25-3+deb9u5

2018-05-20 Thread Stefan Fritsch
Hi,

On Sunday, 13 May 2018 19:15:22 CEST Stefan Fritsch wrote:
> On Tuesday, 3 April 2018 14:07:33 CEST Stefan Fritsch wrote:
> > I would like to do an upgrade of apache2 in stretch that upgrades the
> > complete mod_http2 and mod_proxy_http2 modules from the versions from
> > 2.4.25 to the versions from 2.4.33.
> > 
> > The reason is that the fix for CVE-2018-1302 [1] is difficult to
> > backport because it concerns a complex life-time issue of data
> > structures, the relevant code has changed greatly between 2.4.25 and
> > 2.4.33, and I am not familiar with the internals of mod_http2.  There
> > are other random segfaults [2] and other bugs [3] in stretch's mod_http2
> > that are reportedly fixed by newer mod_http2. Therefore, upgrading the
> > whole thing seems like the best solution to me. Do you agree with this
> > approach?
> 
> I have now prepared updated packages. The changelog diff is:


There is one complication: It turns out that in newer versions of apache2, 
mod_http2 does no longer support being used with mpm_prefork but only with 
mpm_worker and mpm_event. If loaded together with mpm_prefork, mod_http2 will 
log a message and refuse to serve HTTP/2, but HTTP/1.x continues to work.

As I don't see any other way to fix the open issues, I would still like to go 
ahead. But I will prepare a new package/diff with a NEWS.Debian entry that 
informs about this change.

Cheers,
Stefan



Processed: tagging 899189

2018-05-20 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 899189 + stretch
Bug #899189 [release.debian.org] nmu: unison_2.48.3-1
Added tag(s) stretch.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
899189: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=899189
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#899189: nmu: unison_2.48.3-1

2018-05-20 Thread Stéphane Glondu
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: binnmu

Hi,

Currently, Unison in Stretch is compiled with OCaml 4.01.0 (at least
on i386), while OCaml in Stretch is 4.02.3. This triggers a subtle
interoperability bug more often than it should, and led to too much
lost time in my opinion (e.g. see [1] and [2]).

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802919
[2] https://github.com/bcpierce00/unison/issues/94

I don't know if it is acceptable to do binNMUs in stable (I probably
can do it myself), so I'm asking here :-)

nmu unison_2.48.3-1 . ANY . stretch . -m "Recompile with ocaml version in 
stretch"

Cheers,

-- 
Stéphane

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.16.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)


Re: Scheduling final Jessie point release, 8.11

2018-05-20 Thread Joerg Jaspert
On 15037 March 1977, Jonathan Wiltshire wrote:

>  - 23rd Jun

Ok.

>  - 7th July

No.

-- 
bye, Joerg



Re: Scheduling 9.5

2018-05-20 Thread Joerg Jaspert
On 15037 March 1977, Jonathan Wiltshire wrote:
>  - May 26th (meaning freeze this coming weekend, which might be a big
>  ask)

No.

>  - Jun 2nd (which may require an unusual SRM)

Possible.

>  - Jun 9th (getting quite a way out of cadence, but maybe that can't be
>helped)

Possible.

-- 
bye, Joerg



Bug#899146: marked as done (transition: orocos-kdl)

2018-05-20 Thread Debian Bug Tracking System
Your message dated Sun, 20 May 2018 09:39:14 +0200
with message-id <094fd66c-f80e-9e18-2d1b-cc55c2bec...@debian.org>
and subject line Re: Bug#899146: transition: orocos-kdl
has caused the Debian Bug report #899146,
regarding transition: orocos-kdl
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
899146: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=899146
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Dear release team, there was a bug in liborocos-kdl-dev exposing the
Soversion in the cmake file of the reverse build dependencies (#898883).
This should be fixed in 1.4.0-4. Could you please schedule binNMUs for
all the reverse build dependencies?

Thanks

Jochen

P.S.: I hope this is the right way to request this, please redirect me
otherwise.


-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.16.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), 
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
--- End Message ---
--- Begin Message ---
On 19/05/18 22:46, Jochen Sprickerhof wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: transition
> 
> Dear release team, there was a bug in liborocos-kdl-dev exposing the
> Soversion in the cmake file of the reverse build dependencies (#898883).
> This should be fixed in 1.4.0-4. Could you please schedule binNMUs for
> all the reverse build dependencies?
> 
> Thanks
> 
> Jochen
> 
> P.S.: I hope this is the right way to request this, please redirect me
> otherwise.

Scheduled.

btw ros-robot-state-publisher needs some symbol updates:

https://buildd.debian.org/status/package.php?p=ros-robot-state-publisher

Emilio--- End Message ---