Processed: Re: Bug#829136: jessie-pu: package harfbuzz/0.9.35-2+deb8u1

2016-07-12 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #829136 [release.debian.org] jessie-pu: package harfbuzz/0.9.35-2+deb8u1 Added tag(s) confirmed. -- 829136: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=829136 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#825699: jessie-pu: package glibc/2.19-18+deb8u5

2016-07-12 Thread Aurelien Jarno
On 2016-07-12 21:33, Adam D. Barratt wrote: > On Wed, 2016-06-08 at 00:28 +0200, Aurelien Jarno wrote: > > On 2016-05-29 17:19, Adam D. Barratt wrote: > > > Control: tags -1 -moreinfo +confirmed > > > > > > On Sun, 2016-05-29 at 17:53 +0200, Aurelien Jarno wrote: > > > > > > > Can we get this

Bug#830911: Britney git mirrors are broken by release.d.o move

2016-07-12 Thread Niels Thykier
Package: release.debian.org Severity: important User: release.debian@packages.debian.org Usertags: britney https://anonscm.debian.org/git/mirror/britney2.git (and similar) are not being updated. They pull from release.d.o/git/, but those links are not functional anymore.

Bug#829136: jessie-pu: package harfbuzz/0.9.35-2+deb8u1

2016-07-12 Thread Adam D. Barratt
Control: tags -1 + confirmed On Thu, 2016-06-30 at 22:19 +0200, Moritz Muehlenhoff wrote: > +harfbuzz (0.9.35-2+deb8u1) jessie; urgency=medium > + > + * Backport upstream commit 613e630617074eb9b62b794cc37c9b42a7fb079b to > address > +CVE-2016-2052 Please go ahead. Regards, Adam

Bug#829135: jessie-pu: package python2.7/2.7.9-2+deb8u1

2016-07-12 Thread Adam D. Barratt
Control: tags -1 + confirmed On Thu, 2016-06-30 at 22:17 +0200, Moritz Muehlenhoff wrote: > +python2.7 (2.7.9-2+deb8u1) jessie; urgency=medium > + > + * Backport upstream commit b3ce713fb9beebfff9848cefa0acbd59acc68fe9 > +to address StartTLS stripping attack in smtplib (CVE-2016-0772) > + *

Processed: Re: Bug#829135: jessie-pu: package python2.7/2.7.9-2+deb8u1

2016-07-12 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #829135 [release.debian.org] jessie-pu: package python2.7/2.7.9-2+deb8u1 Added tag(s) confirmed. -- 829135: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=829135 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#829145: marked as done (transition: glibc 2.23)

2016-07-12 Thread Debian Bug Tracking System
Your message dated Wed, 13 Jul 2016 00:51:36 +0200 with message-id <396adae9-1914-09a1-29c4-817b356e2...@debian.org> and subject line Re: Bug#829145: transition: glibc 2.23 has caused the Debian Bug report #829145, regarding transition: glibc 2.23 to be marked as done. This means that you claim

Bug#825699: jessie-pu: package glibc/2.19-18+deb8u5

2016-07-12 Thread Adam D. Barratt
On Wed, 2016-06-08 at 00:28 +0200, Aurelien Jarno wrote: > On 2016-05-29 17:19, Adam D. Barratt wrote: > > Control: tags -1 -moreinfo +confirmed > > > > On Sun, 2016-05-29 at 17:53 +0200, Aurelien Jarno wrote: > > > > > Can we get this into jessie-proposed-updates just after the 8.5 release, > >

Bug#823911: jessie-pu: package debian-security-support/2016.05.09+nmu1~deb8u1

2016-07-12 Thread Adam D. Barratt
On Wed, 2016-06-29 at 16:29 +0200, Santiago Ruano Rincón wrote: > El 27/05/16 a las 18:17, Adam D. Barratt escribió: > > Control: tags -1 + confirmed [...] > > Please go ahead. [...] > A more recent version of debian-security-support fixes two additional > bugs: > > https://bugs.debian.org/824015

Processed: Re: Bug#829650: jessie-pu: package ruby-eventmachine/1.0.3-6+deb8u1

2016-07-12 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #829650 [release.debian.org] jessie-pu: package ruby-eventmachine/1.0.3-6+deb8u1 Added tag(s) confirmed. -- 829650: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=829650 Debian Bug Tracking System Contact ow...@bugs.debian.org with

Processed: Re: Bug#829603: jessie-pu: package conkeror/1.0~~pre-1+git141025-1+deb8u2

2016-07-12 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #829603 [release.debian.org] jessie-pu: package conkeror/1.0~~pre-1+git141025-1+deb8u2 Added tag(s) confirmed. -- 829603: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=829603 Debian Bug Tracking System Contact ow...@bugs.debian.org with

Bug#829603: jessie-pu: package conkeror/1.0~~pre-1+git141025-1+deb8u2

2016-07-12 Thread Adam D. Barratt
Control: tags -1 + confirmed On Mon, 2016-07-04 at 17:29 +0200, Axel Beckert wrote: > With the update to Firefox 45 in Jessie, it once again caused > regressions in depending packages due to removed features. For > conkeror it's this time the removal of some specific syntactic sugar > around the

Bug#829650: jessie-pu: package ruby-eventmachine/1.0.3-6+deb8u1

2016-07-12 Thread Adam D. Barratt
Control: tags -1 + confirmed On Tue, 2016-07-05 at 04:40 +0200, Balint Reczey wrote: > The Security Team suggested fixing the TEMP-0678512-2E167C [1] security > issue through a point release. > > The issue is a remotely triggerable crash due to stack overflow. Please go ahead. Regards, Adam

Bug#827781: jessie-pu: package lxc/1:1.0.6-6+deb8u3

2016-07-12 Thread Adam D. Barratt
On Wed, 2016-06-29 at 16:54 -0300, Antonio Terceiro wrote: > On Tue, Jun 28, 2016 at 12:16:21PM +0200, Julien Cristau wrote: [...] > > Ack. Please go ahead. > > Hi, actually I was just made aware of a regression: including `init` in > the package list breaks the creation of wheezy containers

Bug#830805: jessie-pu: package cacti/0.8.8b+dfsg-8+deb8u4

2016-07-12 Thread Adam D. Barratt
Control: tags -1 + confirmed On Mon, 2016-07-11 at 20:28 +0200, Paul Gevers wrote: > There are currently three CVE's open against the cacti package in jessie that > have a patch available¹. Non of the issues are severe enough to warrent a > security upload, but I still think it is a good idea to

Processed: Re: Bug#830805: jessie-pu: package cacti/0.8.8b+dfsg-8+deb8u4

2016-07-12 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + confirmed Bug #830805 [release.debian.org] jessie-pu: package cacti/0.8.8b+dfsg-8+deb8u4 Added tag(s) confirmed. -- 830805: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=830805 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#794194: britney: Strip off Multi-Arch qualifiers in reverse dependency calculation

2016-07-12 Thread Martin Pitt
Control: tag -1 confirmed -moreinfo Hello Niels, Niels Thykier [2016-01-16 14:34 +]: > Does this issue still apply to Britney at the current master branch? We > have removed register_reverses in favour of a different approach for > unrelated reasons. Yes, it does still apply. I rebased

Processed: Re: Bug#794194: britney: Strip off Multi-Arch qualifiers in reverse dependency calculation

2016-07-12 Thread Debian Bug Tracking System
Processing control commands: > tag -1 confirmed -moreinfo Bug #794194 [release.debian.org] britney: Strip off Multi-Arch qualifiers in reverse dependency calculation Added tag(s) confirmed. Bug #794194 [release.debian.org] britney: Strip off Multi-Arch qualifiers in reverse dependency

Bug#830846: nmu: squid3_3.4.8-6+deb8u2~bpo70+1

2016-07-12 Thread Markus Koschany
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu Dear release team, the version of squid3 in wheezy-backports (amd64) is uninstallable due to unmet dependencies. This was caused by building the binary packages for amd64 in an unclean

Processed: unarchiving 794194, reopening 794194

2016-07-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > unarchive 794194 Bug #794194 {Done: Martin Pitt } [release.debian.org] britney: Strip off Multi-Arch qualifiers in reverse dependency calculation Unarchived Bug 794194 > reopen 794194 Bug #794194 {Done: Martin Pitt

Re: Thinking about a "jessie and a half" release

2016-07-12 Thread Nicholas D Steeves
Hi Jeffrey, On 12 July 2016 at 09:28, Jeffrey Walton wrote: > > I think it would benefit more than Skylake users. The last few > processors are missing support. Below is from a Core i5-5300U (5th > gen) and a 3.19.0-64-generic kernel. > > ** > > $ dmesg | egrep -i

Bug#830846: marked as done (nmu: squid3_3.4.8-6+deb8u2~bpo70+1)

2016-07-12 Thread Debian Bug Tracking System
Your message dated Tue, 12 Jul 2016 15:01:31 +0200 with message-id <07fdb7f0-33df-7ab6-5ba1-ed35d6c77...@debian.org> and subject line Re: Bug#830846: nmu: squid3_3.4.8-6+deb8u2~bpo70+1 has caused the Debian Bug report #830846, regarding nmu: squid3_3.4.8-6+deb8u2~bpo70+1 to be marked as done.

Bug#830871: release.debian.org: missing hints file 'freeze'

2016-07-12 Thread Lucas Nussbaum
Package: release.debian.org Severity: normal Hi, On https://release.debian.org/britney/hints/ there's a link to a 'freeze' file, but that link doesn't work (404 error). This breaks UDD's hints importer. Full IRC log from #debian-release: 13:31 < lucas> hi 13:31 < lucas> on

Bug#830846: nmu: squid3_3.4.8-6+deb8u2~bpo70+1

2016-07-12 Thread Markus Koschany
On 12.07.2016 15:01, Emilio Pozuelo Monfort wrote: [...] > AFAIK backport nmus should go to the backports team. > > In any case, this already got scheduled. > > Cheers, > Emilio Hi, thank you for working on this issue. The reportbug template for release.debian.org and binNMUs lists

Re: Thinking about a "jessie and a half" release

2016-07-12 Thread Jeffrey Walton
> There's something I've been pondering for a while, along with some > other folks - it might be useful to do a "jessie and a half" release, > similarly to what we did in the etch days. That's *basically* just > like a normal jessie release, but with a few key updates: > > * backports kernel > *

Bug#794194: britney: Strip off Multi-Arch qualifiers in reverse dependency calculation

2016-07-12 Thread Niels Thykier
Control: tags -1 moreinfo Martin Pitt: > Control: tag -1 confirmed -moreinfo > > Hello Niels, > > Niels Thykier [2016-01-16 14:34 +]: >> Does this issue still apply to Britney at the current master branch? We >> have removed register_reverses in favour of a different approach for >>

Processed: Re: Bug#794194: britney: Strip off Multi-Arch qualifiers in reverse dependency calculation

2016-07-12 Thread Debian Bug Tracking System
Processing control commands: > tags -1 moreinfo Bug #794194 [release.debian.org] britney: Strip off Multi-Arch qualifiers in reverse dependency calculation Added tag(s) moreinfo. -- 794194: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794194 Debian Bug Tracking System Contact

Bug#830900: RM: trn/3.6-24

2016-07-12 Thread Matthew Vernon
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: rm Hi, I write as the trn maintainer. trn has been removed from unstable and testing, because it is insecure (see #830294 for the insecurity, #830296 for the removal from unstable/testing). I