Bug#1011712: olm: diff for NMU version 3.2.11~dfsg-1.1

2022-07-05 Thread Evangelos Ribeiro Tzaras
Hi again, On Sat, 2 Jul 2022 03:32:30 +0200 Evangelos Ribeiro Tzaras wrote: > Dear maintainer, > > I've prepared an NMU for olm (versioned as 3.2.11~dfsg-1.1) and > uploaded it to DELAYED/2. Please feel free to tell me if I > should delay it longer. It was uploaded and (expectedly) REJECT'ed

Bug#1014300: nheko: Menus appear at unexpected places or not at all

2022-07-05 Thread Hubert Chathi
package nheko forwarded 1014300 https://github.com/Nheko-Reborn/nheko/issues/618 thanks Hi Bruno, Thanks for the report. This appears to be an upstream QT issue (https://bugreports.qt.io/browse/QTBUG-94619), rather than a nheko-specific issue. It is being tracked for nheko at

Bug#1014398: need configuration option and command line option for default groups?

2022-07-05 Thread Marc Haber
Package: adduser Version: 3.121 Severity: minor I have found that we actually don't have a possiblity to set default supplementary groups for a newly created account. The only thing we have is the EXTRA_GROUPS mechanism which is off by default. This kind of surprises me. Should we have a

Bug#992555: probably same on Dell Inspiron 3580

2022-07-05 Thread Piotr A. Dybczyński
On Mon, 1 Nov 2021 13:54:14 +0100 Hendrik Buchner wrote: > > Hi, > > > > both: after upgrade from Buster and after clean install laptop does > > not wake up when opening lid. Simply freezes, only power off helps. > > > > When I boot Bullseye with 4.19 kernel it works. > > > > Regards, > >

Bug#678615: "users" group is empty

2022-07-05 Thread Marc Haber
Control: -1 tags confirmed On Sat, Jun 23, 2012 at 11:19:40AM +0200, email@arcor.de wrote: > However, as the debian default is to use user(private)groups, > this leaves the general "users" group unpopulated. > > Please enable the standard "users" group as a default extra group, > to ensure

Bug#1014397: openafs-modules-source: drop alternative dependency on kernel-package, gone since stretch

2022-07-05 Thread Andreas Beckmann
Package: openafs-modules-source Version: 1.8.8.1-3 Severity: minor Hi, please drop the alternative dependency on kernel-package, that package was removed before the stretch release. Andreas

Bug#1014396: education-desktop-other: drop Suggests: kernel-package, gone since stretch

2022-07-05 Thread Andreas Beckmann
Package: education-desktop-other Version: 2.12.7 Severity: minor Hi, education-desktop-other still suggests kernel-package, but that was removed before the release of stretch. Andreas

Bug#1014355: adduser: ADD_EXTRA_GROUPS does not work

2022-07-05 Thread Marc Haber
The body of the bug report was empty, and I can not confirm the non working of the option. The documentation says that the EXTRA_GROUPS (settable only from the configuration file) are only used for new non-system user iff either ADD_EXTRA_GROUPS is set or --add_extra_groups is set on the command

Bug#1014395: --add_extra_groups should be --add-extra-groups

2022-07-05 Thread Marc Haber
Package: adduser Version: 3.121 Severity: important add_extra_groups is the only multi-word command line option that uses underscores instead of hyphens to separate the words. We should rectify this asap. According to codesearch.debian.net only the fish package contains the literal

Bug#1014394: linux kernel 5.10.0-15 on virtualbox host causes random process crashes in guests

2022-07-05 Thread Michael
package: linux-image-5.10.0-15-arm64 version: 5.10.120-1 i am running virtualbox 6.1.34 from the virtualbox.org repo on a debian 11.3 host. the guest also runs debian 11.3. when both host and guest run the latest stable kernel 5.10.0-15 (5.10.120-1) i get random process crashes in the guest

Bug#1014393: osk-sdl: unistalling osk-sdl leaves crypttab dirty causing failure in asking for the password

2022-07-05 Thread Eugen Răhăian
Package: osk-sdl Version: 0.67-1 Severity: normal X-Debbugs-Cc: eu...@rah.ro Dear Maintainer, On mobian/bookworm using a Pinephone (original). After removing osk-sdl, the crypttab file still contains the option keyscript=/osk-sdl-keyscript. That is an error that prevents the booting

Bug#1014389: mapcache: CVE-2022-30045 incorrect memory handling leading to a heap out-of-bounds read

2022-07-05 Thread Sebastiaan Couwenberg
On 7/5/22 11:14, Neil Williams wrote: CVE-2022-30045[0]: | An issue was discovered in libezxml.a in ezXML 0.8.6. The function | ezxml_decode() performs incorrect memory handling while parsing | crafted XML files, leading to a heap out-of-bounds read. How is this different from #989363? It's

Bug#1004729: Problem with versions on debian 11 bullseye

2022-07-05 Thread jean-Marie Leroy
(correct an error of my precedent message: On Debian 11 Bullseye, bind9 version is actually 9.16.27 not 9.16.22) It is impossible to use bind9-dyndb-ldap ( version 11-.6.3) on debian 11 bullseye because it try to load libdns-9.16.15-Debian.so and libics-9.16.15-Debian.so whereas the actual

Bug#1004729: Problem with versions on debian 11 bullseye

2022-07-05 Thread jean-Marie Leroy
It is impossible to use bind9-dyndb-ldap ( version 11-.6.3) on debian 11 bullseye because it try to load libdns-9.16.15-Debian.so and libics-9.16.15-Debian.so whereas the actual version of this libraries is 9.16.22. Make a 'ln -s' (ls -s libdns-9.16.15-Debian.so libdns-9.16.22-Debian.so)

Bug#1014392: mingw-w64: ftbfs on riscv64(error: #error Unknown CPU architecture!)

2022-07-05 Thread Bo YU
Source: mingw-w64 Version: 10.0.0-2 Severity: minor Tags: ftbfs, patch User: debian-ri...@lists.debian.org Usertags: riscv64 X-Debbugs-Cc: debian-ri...@lists.debian.org Dear mingw-w64 Maintainer, The package has a ftbfs issue on risv64: ``` ... mv -f src/.deps/widl-expr.Tpo src/.deps/widl-expr.Po

Bug#1014391: scilab: CVE-2022-30045 incorrect memory handling in ezml support leading to a heap out-of-bounds read

2022-07-05 Thread Neil Williams
Source: scilab Version: 6.1.1+dfsg2-3 Severity: important Tags: security X-Debbugs-Cc: codeh...@debian.org, Debian Security Team Hi, The following vulnerability was published for scilab. CVE-2022-30045[0]: | An issue was discovered in libezxml.a in ezXML 0.8.6. The function | ezxml_decode()

Bug#1014390: navit: CVE-2022-30045 incorrect memory handling in ezml support leading to a heap out-of-bounds read

2022-07-05 Thread Neil Williams
Source: navit Version: 0.5.0+dfsg.1-2 Severity: important Tags: security X-Debbugs-Cc: codeh...@debian.org, Debian Security Team Hi, The following vulnerability was published for navit. CVE-2022-30045[0]: | An issue was discovered in libezxml.a in ezXML 0.8.6. The function | ezxml_decode()

Bug#1014389: mapcache: CVE-2022-30045 incorrect memory handling leading to a heap out-of-bounds read

2022-07-05 Thread Neil Williams
Source: mapcache Version: 1.12.1-1 Severity: important Tags: security X-Debbugs-Cc: codeh...@debian.org, Debian Security Team Hi, The following vulnerability was published for mapcache. CVE-2022-30045[0]: | An issue was discovered in libezxml.a in ezXML 0.8.6. The function | ezxml_decode()

Bug#1013425: ITP: wnpp -- Python Airspeed is a powerful templating engine compatible with Velocity for Java

2022-07-05 Thread Stephan Lachnit
Uploaded as well! (Comment on shtab ITP applies here as well) Cheers, Stephan On Mon, Jul 4, 2022 at 12:30 PM Moessbauer, Felix < felix.moessba...@siemens.com> wrote: > Hi Stephan, > > > > Thanks for the review. I changed the name of the package, renamed the > project on salsa and cut the

Bug#1013890: gmp-ecm breaks sagemath autopkgtest: lots of issues

2022-07-05 Thread Tobias Hansen
Hi, not all tests are expected to pass in sagemath's test suite. The issue is always described at the end: Success: 62 tests failed, up to 100 failures are tolerated Error: critical test failures (e.g. timeout, segfault, etc.) And in the overview above that, it indicates a segfault:

Bug#1012761: ITP: shtab -- generator for shell tab completion files for python projects

2022-07-05 Thread Stephan Lachnit
Thanks, uploaded! FYI: you might be interested in running lintian with `lintian --pedantic -I -E`, there are some optional things that are relatively easy to fix (but none are important if you lack the time). Also, you might want to add the Debian CI running pytest, it is really easy:

Bug#1010974: Plans to backport to bullseye

2022-07-05 Thread Ondřej Surý
> On 1. 7. 2022, at 18:00, Bastian Germann wrote: > > X-Debbugs-Cc: ond...@debian.org > > On Tue, 21 Jun 2022 13:59:54 +0100 Henri Cook wrote: >> Are there any plans to backport this fix to bullseye? > > That would be interesting. Ondřej, I guess you are the only Berkeley DB Team > member.

Bug#1014388: RFA: py-lmdb

2022-07-05 Thread Ondřej Surý
Package: wnpp Severity: normal Control: affects -1 src:py-lmdb -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 I request an adopter for the py-lmdb package. Ondrej -BEGIN PGP SIGNATURE- iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmLD/zBfFIAALgAo

Bug#1014387: RFA: db-defaults

2022-07-05 Thread Ondřej Surý
Package: wnpp Severity: normal Control: affects -1 src:db-defaults -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 I request an adopter for the db-defaults package. Ondrej -BEGIN PGP SIGNATURE- iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmLD/xpfFIAALgAo

Bug#1014386: RFA: db5.3 -- Berkeley v5.3 Database Libraries [runtime]

2022-07-05 Thread Ondřej Surý
Package: wnpp Severity: normal Control: affects -1 src:db5.3 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 I request an adopter for the db5.3 package. The package description is: This is the runtime package for programs that use the v5.3 Berkeley database library. -BEGIN PGP

Bug#1014385: passportjs: CVE-2022-25896 - regenerates stale session on user login

2022-07-05 Thread Neil Williams
Source: passportjs Version: 0.5.2+~1.0.0-1 Severity: important Tags: security X-Debbugs-Cc: codeh...@debian.org, Debian Security Team Hi, The following vulnerability was published for passportjs. CVE-2022-25896[0]: | This affects the package passport before 0.6.0. When a user logs in or |

Bug#1013644: erlang-p1-tls: FTBFS: test failed

2022-07-05 Thread Lucas Nussbaum
On 03/07/22 at 12:37 +0200, Philipp Huebner wrote: > Hi Lucas, > > unfortunately I am unable to reproduce this error. > > How do you suggest to continue here? Hi, Can you diff the logs to see if sometimes pops up? Lucas signature.asc Description: PGP signature

Bug#1013402: python-openstacksdk: FTBFS with Sphinx 5.0, docutils 0.18: FAIL: openstack.tests.unit.identity.v2.test_role.TestRole.test_make_it

2022-07-05 Thread Lucas Nussbaum
Hi, On 01/07/22 at 10:04 +0200, Thomas Goirand wrote: > On 6/23/22 08:44, Lucas Nussbaum wrote: > > python-openstacksdk fails to build with Sphinx 5.0 and docutils 0.18, both > > of which > > are currently available in experimental. > > > > >

Bug#1014384: RM: libgroove -- RoQA; dead upstream, orphaned, unused

2022-07-05 Thread Sebastian Ramacher
Package: ftp.debian.org Severity: normal libgroove only provides shared libraries without any reverse dependencies in the archive. It is dead upstream (last commit in 2017) and not ocmpatible with ffmpeg 5 (#1013422). Please remove libgroove from the archive. Cheers -- Sebastian Ramacher

Bug#1014383: zsh: "IOT instruction" on SIGABRT

2022-07-05 Thread Jakub Wilk
Package: zsh Version: 5.9-1 The message zsh prints when a process aborts is confusing: % perl -MPOSIX -e'abort()' zsh: IOT instruction perl -MPOSIX -e'abort()' I happen to know that SIGIOT == SIGABRT on Linux, but I guess most people don't. The message was more informative in bullseye:

Bug#826282: ITA: apngasm -- assemble APNG animation from PNG/TGA image sequence

2022-07-05 Thread 肖盛文
owner -1 atzli...@sina.com retitle -1 ITA: apngasm -- assemble APNG animation from PNG/TGA image sequence -- 肖盛文 xiao sheng wen https://www.atzlinux.com 《铜豌豆 Linux》基于 Debian 的 Linux 中文 桌面 操作系统 Debian QA page: https://qa.debian.org/developer.php?login=atzlinux%40sina.com Debian salsa:

Bug#1014382: dradio currently not usable

2022-07-05 Thread Nicolas Schier
Package: dradio Version: 3.8-2+b3 Severity: important Dear Maintainer, dradio is currently barely usable. A simple call of dradio after a fresh installation results in a segmentation fault, no matter if dradio-config has been called before. Re-compiled and run inside of gdb: $ gdb dradio

Bug#1014381: RM: nordlicht -- RoQA; dead upstream

2022-07-05 Thread Sebastian Ramacher
Package: ftp.debian.org Severity: normal nordlicht is no longer maintained upstream (last commit in 2018) and is not compatible with ffmpeg 5. Please remove it from unstable. Cheers -- Sebastian Ramacher

Bug#1004597: amide ftbfs with ffmpeg 5.0 - options

2022-07-05 Thread Sebastian Ramacher
On 2022-06-26 23:02:38, Étienne Mollier wrote: > Control: tag -1 help > > Howdy, > > So, I had a look at amide failure to build from source with the > ffmpeg upgrade de version 5.0. The relevant part of the build > log is: > > | /usr/bin/ld: mpeg_encode.o: in function

Bug#1014380: vagrant: Unable to activate net-sftp-3.0.0, because net-ssh-7.0.1 conflicts with net-ssh (>= 5.0.0, < 7.0.0)

2022-07-05 Thread Kyle Robbertze
Package: vagrant Version: 2.2.19+dfsg-1 Severity: important Dear Maintainer, Vagrant currently fails to start due to the following error: $ vagrant up focal /usr/lib/ruby/vendor_ruby/rubygems/specification.rb:2248:in `raise_if_conflicts': Unable to activate net-sftp-3.0.0, because

Bug#1014379: armhf: wrong-code generated at -02

2022-07-05 Thread Mathieu Malaterre
Package: gcc-11 Version: 11.3.0-3 Forwarded: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106187 g++-11 -02 cannot be used to compile highway on armhf. It seems to be fixed in g++-12.

Bug#1014378: RM: ffdiaporama -- RoQA; dead upstream, unmaintained

2022-07-05 Thread Sebastian Ramacher
Package: ftp.debian.org Severity: normal Please remove ffidaporama from unstable. It is unmaintained upstream (last release in 2014) and in Debian (#997138, #1014281). Cheers -- Sebastian Ramacher

Bug#1004831: transition: ffmpeg

2022-07-05 Thread Sebastian Ramacher
On 2022-07-05 08:33:07, Neil Williams wrote: > On Sun, 03 Jul 2022 23:26:46 -0500 Steven Robbins > wrote: > > Hello, > > > > On Wed, 22 Jun 2022 22:13:11 +0200 Sebastian Ramacher > > wrote: > > > > > ffmpeg got a new major release including API and ABI breakage. > > > Hence, it needs a

Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service

2022-07-05 Thread Ansgar
Hi, On Tue, 2022-07-05 at 09:00 +0200, Bastian Blank wrote: > On Mon, Jul 04, 2022 at 10:34:39PM +0200, Ansgar wrote: > > As a further test I tried a different PKCS#11 module: > > Could you try the same with "openssl cms"?  Just to make sure it's > not sign-file itself. I replaced the

Bug#1013700: Strangely rare pytest 7.x bug report

2022-07-05 Thread Carles Pina i Estany
Hi, On Jul/04/2022, Julian Gilbey wrote: > It is utterly, utterly bizarre. But I think I've found the problem. [...] > Thanks for your help! You're welcome! Cheers, > > Best wishes, > >Julian > > On Mon, Jul 04, 2022 at 08:39:32PM +0100, Carles Pina i Estany wrote: > > > > Hi

Bug#1014377: tootle: When adding a new account, Tootle fails to launch a browser but remains silent

2022-07-05 Thread anonymous coward
Package: tootle Version: 1.0-alpha2-1 Severity: normal X-Debbugs-Cc: debbug.too...@sideload.33mail.com Everytime I added a new account, tootle failed to launch a browser for the Oauth URL. Most normal users would be totally stumped at this point because the GUI gives no indication that there was

Bug#1014056: apache2: /var/run/apache2 permissions too narrow for cgid

2022-07-05 Thread Yadd
On 29/06/2022 16:51, MK wrote: Package: apache2 Version: 2.4.53-1~deb11u1 Severity: minor Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** Enabling cgid in apache2 (with a2enmod cgid) results in an error when using  mpm_event:    

Bug#1014305: ruby-net-sftp: Upgrade of ruby-net-ssh to 7.0.1 breaks the package

2022-07-05 Thread Daniele Scasciafratte
I confirm the issue too, but I am on unstable.

Bug#1004831: transition: ffmpeg

2022-07-05 Thread Neil Williams
On Sun, 03 Jul 2022 23:26:46 -0500 Steven Robbins wrote: > Hello, > > On Wed, 22 Jun 2022 22:13:11 +0200 Sebastian Ramacher > wrote: > > > ffmpeg got a new major release including API and ABI breakage. > > Hence, it needs a transition. The reverse dependencies are not yet > > ready, so this

Bug#1014376: openvpn: Using unreleased version with backwards incompatible changes is not a good idea

2022-07-05 Thread Raphaël Hertzog
Package: openvpn Version: 2.6.0~git20220518+dco-2 Severity: important User: de...@kali.org Usertags: origin-kali X-Debbugs-Cc: raph...@freexian.com Hello Bernhard, as Kali is based on Debian testing, our users started to experience the git snapshot of OpenVPN that you uploaded. Unfortunately, we

Bug#1014114: installation of crypt.h in the multiarch location breaks the GCC and LLVM multilib builds

2022-07-05 Thread Helmut Grohne
Control: clone -1 -2 Control: retitle -2 bootstrap dependency cycle between gcc and libxcrypt: libsanitizer requires struct crypt_data from crypt.h Control: tags -2 = Control: severity -2 important Control: reassign -2 src:libxcrypt,src:gcc-12 Control: user helm...@debian.org Control: usertags -2

Bug#1014374: tootle: Tootle only remembers 4 accounts (5th acct can be added but is lost)

2022-07-05 Thread anonymous coward
Package: tootle Version: 1.0-alpha2-1 Severity: normal X-Debbugs-Cc: debbug.too...@sideload.33mail.com I have been able to add 4 accounts, shutdown the app, relaunch, and the 4 accounts are remembered just fine. But when a 5th account is added, it is accepted and it functions just for the

Bug#1014373: tootle: Crash when clicking a deleted toot

2022-07-05 Thread anonymous coward
Package: tootle Version: 1.0-alpha2-1 Severity: normal X-Debbugs-Cc: debbug.too...@sideload.33mail.com Steps to reproduce: 1. Click the search icon and manually enter your own pseudonym by hand (since there is no other way to view one’s own timeline) 2. Click the /more/ icon (stacked dots) &

Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service

2022-07-05 Thread Bastian Blank
On Mon, Jul 04, 2022 at 10:34:39PM +0200, Ansgar wrote: > As a further test I tried a different PKCS#11 module: Could you try the same with "openssl cms"? Just to make sure it's not sign-file itself. The complete command line I use to create signatures for kernel modules is: | openssl cms

Bug#1014093: ITP: vobsubocr -- subtitle converter from DVD VOB to SRT

2022-07-05 Thread Jonas Smedegaard
package from git snapshot 0.0~20211108 still "cheats" by embedding 31 crates (11 missing, 2 broken, 1 outdated, 17 ahead); builds in ~6 minutes; succesfully covnerts a russian subtitle. Main task now is to package more of the crates currently embedded. Here's how you can help: As user running

<    1   2