Bug#945122: buster-pu: package cyrus-imapd/3.0.8-6+deb10u2

2019-11-19 Thread Xavier Guimard
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu Hi, cyrus-imapd is vulnerable to CVE-2019-18928: privilege escalation on HTTP request. This is a minor vulnerability since authentication is already vulnerable when using non-SSL

NEW changes in stable-new

2019-11-19 Thread Debian FTP Masters
Processing changes file: dpdk_18.11.2-2+deb10u2_source.changes ACCEPT Processing changes file: dpdk_18.11.2-2+deb10u2_all.changes ACCEPT Processing changes file: dpdk_18.11.2-2+deb10u2_amd64.changes ACCEPT Processing changes file: dpdk_18.11.2-2+deb10u2_arm64.changes ACCEPT Processing

Bug#942106: python3.8 / pandas py2removal

2019-11-19 Thread Rebecca N. Palmer
The binNMUs (to add python3.8 support) of pandas and statsmodels failed. I think this will make them work (but haven't tried it): - Apply the (existing) #943418 fix to python-xlrd. - Build matplotlib, pandas and statsmodels in that order. (ben can't work this out because the declared

Bug#945113: transition: hwloc

2019-11-19 Thread Samuel Thibault
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition Hello, Version 2 of hwloc introduces a soname bump. It also introduces incompatible API changes, but with the latest upload of openmpi, I could check that all packages that build with

Processed: Re: Bug#944227: breaks

2019-11-19 Thread Debian Bug Tracking System
Processing control commands: > tags -1 - moreinfo + confirmed Bug #944227 [release.debian.org] transition: prompt-toolkit Removed tag(s) moreinfo. Bug #944227 [release.debian.org] transition: prompt-toolkit Added tag(s) confirmed. -- 944227:

Bug#944227: breaks

2019-11-19 Thread Graham Inggs
Control: tags -1 - moreinfo + confirmed On Tue, 19 Nov 2019 at 13:48, Gordon Ball wrote: > I've added Breaks to the package in git: > > aws-shell (<= 0.2.1) [1] > mycli (<< 1.19) > pgcli (<< 2) > python3-ipython (<< 7) > python3-jupyter-console (<< 6) > python3-softlayer (<< 5.8) > > [1] No

Bug#943992: transition: qscintilla2, soname 13 -> 15

2019-11-19 Thread Graham Inggs
Hi On 2019/11/19 12:39, Dmitry Shachnev wrote: qscintilla2 is now built and installed on all release architectures. Thanks for the quick fix of the mips64el symbols! You can schedule binNMUs. Done a few hours ago. Regards Graham

Bug#944227: breaks

2019-11-19 Thread Gordon Ball
I've added Breaks to the package in git: aws-shell (<= 0.2.1) [1] mycli (<< 1.19) pgcli (<< 2) python3-ipython (<< 7) python3-jupyter-console (<< 6) python3-softlayer (<< 5.8) [1] No upstream version which fixes this, but I assume adding an unversioned Breaks: is a bad idea. I think that having

Bug#943992: transition: qscintilla2, soname 13 -> 15

2019-11-19 Thread Dmitry Shachnev
Hi all, On Fri, Nov 15, 2019 at 01:50:19PM +0200, Graham Inggs wrote: > On 2019/11/14 19:40, Lisandro Damián Nicanor Pérez Meyer wrote: > > I have just uploaded the fix... and now it FTBFS because it got tangled > > with the python3.8 transition :S > > > > So in order to get qscintilla2 going we

Processed: block 945014 with 945066

2019-11-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > block 945014 with 945066 Bug #945014 [enigmail] enigmail removed after installing thunderbird 68.2.2-1~deb10u1 Bug #945033 [enigmail] enigmail in Buster uninstallable due to thunderbird 1:68.2.2-1~deb10u1 945014 was not blocked by any bugs.

Bug#945066: buster-pu: package enigmail/2:2.1.3+ds1-4~deb10u1

2019-11-19 Thread Daniel Kahn Gillmor
Package: release.debian.org User: release.debian@packages.debian.org Usertags: pu Tags: buster Severity: normal Control: affects -1 enigmail Control: blocks 945014 with -1 thunderbird 68 is now in buster-new and in security.debian.org sadly, the enigmail upstream versions are closely tied to

Processed (with 1 error): buster-pu: package enigmail/2:2.1.3+ds1-4~deb10u1

2019-11-19 Thread Debian Bug Tracking System
Processing control commands: > affects -1 enigmail Bug #945066 [release.debian.org] buster-pu: package enigmail/2:2.1.3+ds1-4~deb10u1 Added indication that 945066 affects enigmail > blocks 945014 with -1 Unknown command or malformed arguments to command. -- 945066: