NEW changes in stable-new

2019-08-28 Thread Debian FTP Masters
Processing changes file: linux_4.19.67-2_armel.changes ACCEPT

NEW changes in stable-new

2019-08-28 Thread Debian FTP Masters
Processing changes file: linux_4.19.67-2_i386.changes ACCEPT

Bug#936007: stretch-pu: package libu2f-host/1.1.2-2+deb9u1

2019-08-28 Thread Nicolas Braud-Santoni
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Control: block 923874 by -1 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear release team, I would like to backport the fix for CVE-2019-9578 in the next point release for

Bug#906258: stretch-pu: package yubico-piv-tool/1.4.2-2

2019-08-28 Thread Nicolas Braud-Santoni
On Thu, Aug 22, 2019 at 09:28:18PM +0100, Adam D. Barratt wrote: > Ping on a new upload? There's just over a week if you want to get this > in to 9.10. Thanks for the reminder; uploaded. signature.asc Description: PGP signature

Bug#935588: nmu: rdepends of libbabeltrace1/buster

2019-08-28 Thread Adam D. Barratt
On Wed, 2019-08-28 at 14:31 +0100, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On 2019-08-24 14:59, Adam D. Barratt wrote: > > On Sat, 2019-08-24 at 12:06 +0200, Andreas Beckmann wrote: > > > As a followup to tightening the versions in the libbabeltrace1 > > > symbols file rebuild

Bug#935999: buster-pu: package libu2f-host/1.1.9-1+deb10u1

2019-08-28 Thread Nicolas Braud-Santoni
On Wed, Aug 28, 2019 at 10:29:02PM +0200, Nicolas Braud-Santoni wrote: > I would like to backport the following patches for libu2f-host to stretch: > > + Fix for CVE-2019-9578 (Closes: #923874) I was confused, this is a minor security issue for which no CVE was assigned. (CVE-2019-9578 /

Bug#935999: buster-pu: package libu2f-host/1.1.9-1+deb10u1

2019-08-28 Thread Nicolas Braud-Santoni
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu Control: block 923874 by -1 Control: block 925274 by -1 Control: tag 923874 + pending buster Control: tag 925274 + pending buster -BEGIN PGP SIGNED MESSAGE- Hash: SHA512

Processed (with 2 errors): buster-pu: package libu2f-host/1.1.9-1+deb10u1

2019-08-28 Thread Debian Bug Tracking System
Processing control commands: > block 923874 by -1 Failed to set blocking bugs of 923874: Not altering archived bugs; see unarchive. > block 925274 by -1 Bug #925274 [libu2f-udev] libu2f-udev: Please add support for solokey 925274 was not blocked by any bugs. 925274 was not blocking any bugs.

NEW changes in stable-new

2019-08-28 Thread Debian FTP Masters
Processing changes file: linux_4.19.67-2_amd64.changes ACCEPT

NEW changes in stable-new

2019-08-28 Thread Debian FTP Masters
Processing changes file: linux_4.19.67-2_armhf.changes ACCEPT

NEW changes in stable-new

2019-08-28 Thread Debian FTP Masters
Processing changes file: linux_4.19.67-2_arm64.changes ACCEPT Processing changes file: linux_4.19.67-2_s390x.changes ACCEPT

Bug#935988: buster-pu: package reportbug/7.5.2+nmu1~deb10u1

2019-08-28 Thread Andreas Beckmann
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu reportbug/buster does not know about buster being stable ... I've just uploaded a fix to unstable via DELAYED/2, so it should be in unstable before the weekend, still hoping for a

NEW changes in stable-new

2019-08-28 Thread Debian FTP Masters
Processing changes file: linux_4.19.67-2_ppc64el.changes ACCEPT

NEW changes in stable-new

2019-08-28 Thread Debian FTP Masters
Processing changes file: linux_4.19.67-2_all.changes ACCEPT

Bug#935976: stretch-pu: package node-ws/1.1.0+ds1.e6ddaae4-3+deb9u1

2019-08-28 Thread Xavier Guimard
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Hi, During buster release, we fixed CVE-2016-10542 for node-ws. The same patch can be applied in Stretch. Cheers, Xavier diff --git a/debian/changelog b/debian/changelog index

Bug#935970: stretch-pu: package node-fstream/1.0.10-1+deb9u1

2019-08-28 Thread Xavier Guimard
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Hi, node-fstream is vulnerable to Arbitrary File Overwrite (#931408, CVE-2019-13173). This little patch fixes the problem. Cheers, Xavier diff --git a/debian/changelog

Bug#933754: buster-pu: package mariadb-10.3 10.3.17-0+deb9u1

2019-08-28 Thread Adam D. Barratt
Control: tags -1 + confirmed On 2019-08-27 22:54, Otto Kekäläinen wrote: commit b7529cdcab61f416e3fc003e42c50153475f1bd1 (HEAD -> buster, origin/buster) Author: Otto Kekäläinen Date: Tue Aug 27 23:52:54 2019 +0200 Amend changelog to surely include all changes since 1:10.3.15-1

Processed: Re: Bug#933754: buster-pu: package mariadb-10.3 10.3.17-0+deb9u1

2019-08-28 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #933754 [release.debian.org] buster-pu: package mariadb-10.3 10.3.17-0+deb9u1 Added tag(s) confirmed. -- 933754: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=933754 Debian Bug Tracking System Contact ow...@bugs.debian.org with

Bug#935746: buster-pu: package nss/2:3.42.1-1+deb10u1

2019-08-28 Thread Moritz Mühlenhoff
On Mon, Aug 26, 2019 at 06:04:55PM +0100, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Sun, 2019-08-25 at 21:25 +0200, Moritz Muehlenhoff wrote: > > The NSS update below fixes a few non-severe security issues. I've > > been running this version with Firefox on Buster (which uses

Bug#934356: stretch-pu: package mitmproxy/0.18.2-6

2019-08-28 Thread Adam D. Barratt
On 2019-08-28 12:14, Sébastien Delafond wrote: I've tried a bunch of things, essentially reusing my older pbuilder-based build setup (as opposed to the newer sbuild-based one), to no avail: I keep getting those extra upper-bound versioned dependencies in the resulting package. At this point I

Processed: Re: Bug#935588: nmu: rdepends of libbabeltrace1/buster

2019-08-28 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #935588 [release.debian.org] nmu: rdepends of libbabeltrace1/buster Added tag(s) confirmed. -- 935588: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=935588 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#935588: nmu: rdepends of libbabeltrace1/buster

2019-08-28 Thread Adam D. Barratt
Control: tags -1 + confirmed On 2019-08-24 14:59, Adam D. Barratt wrote: On Sat, 2019-08-24 at 12:06 +0200, Andreas Beckmann wrote: As a followup to tightening the versions in the libbabeltrace1 symbols file rebuild gdb to tighten the libbabeltrace1 dependency. (See #931147) Actually all

NEW changes in stable-new

2019-08-28 Thread Debian FTP Masters
Processing changes file: linux_4.19.67-2_source.changes ACCEPT

NEW changes in stable-new

2019-08-28 Thread Debian FTP Masters
Processing changes file: ncbi-tools6_6.1.20170106+dfsg1-0+deb10u2_s390x.changes ACCEPT

Bug#935957: buster-pu: package mapproxy/1.11.0-3

2019-08-28 Thread Bas Couwenberg
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu python3-mapproxy fails to serve GetCapabilities requests as reported in #935887, this is fixed by including an upstream patch. There was also an issue with missing symlinks for

Bug#934356: stretch-pu: package mitmproxy/0.18.2-6

2019-08-28 Thread Sébastien Delafond
I've tried a bunch of things, essentially reusing my older pbuilder-based build setup (as opposed to the newer sbuild-based one), to no avail: I keep getting those extra upper-bound versioned dependencies in the resulting package. At this point I see two options: - build a +deb9u2 that uses

Bug#935947: stretch-pu: package llvm-toolchain-7 7.0.1-8~deb9u1

2019-08-28 Thread Emilio Pozuelo Monfort
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Hi, I'd like to introduce llvm-toolchain-7 into stretch, as it's needed to update rustc to 1.34.2, which in turn is needed for firefox ESR 68. I have already uploaded the

Bug#935386: buster-pu: package raspi3-firmware/1.20190215-1+deb10u1

2019-08-28 Thread Cyril Brulebois
Hi Adam, Adam D. Barratt (2019-08-27): > Control: tags -1 + confirmed > > On Thu, 2019-08-22 at 09:51 +0200, Cyril Brulebois wrote: > > I'd like to request a raspi3-firmware update in buster to add some > > hardware support. The buster kernel already had all required code to > > handle

Processed: block 935308 with 935938

2019-08-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > block 935308 with 935938 Bug #935308 [release.debian.org] buster-pu: package android-sdk-meta/25.0.0+11~deb10u1 935308 was not blocked by any bugs. 935308 was not blocking any bugs. Added blocking bug(s) of 935308: 935938 > thanks Stopping

Bug#935938: android-sdk-meta_25.0.0+11~deb10u1_all.changes REJECTED

2019-08-28 Thread Aurelien Jarno
Package: android-sdk-meta Severity: serious Version: 25.0.0+11~deb10u1 On 2019-08-28 03:19, Debian FTP Masters wrote: > android-sdk-build-tools-common_27.0.1+11_all.deb: Does not match file already > existing in the pool. > > > Mapping buster to stable. > Mapping stable to proposed-updates. >

NEW changes in stable-new

2019-08-28 Thread Debian FTP Masters
Processing changes file: ncbi-tools6_6.1.20170106+dfsg1-0+deb10u2_mips64el.changes ACCEPT Processing changes file: ncbi-tools6_6.1.20170106+dfsg1-0+deb10u2_mipsel.changes ACCEPT

NEW changes in stable-new

2019-08-28 Thread Debian FTP Masters
Processing changes file: ncbi-tools6_6.1.20170106+dfsg1-0+deb10u2_armel.changes ACCEPT