Package: wnpp
Severity: wishlist
Owner: Cordell Bloor
X-Debbugs-Cc: debian-de...@lists.debian.org, c...@slerp.xyz,
debian...@lists.debian.org
* Package name: miopen
Version : 5.5.0
Upstream Author : Advanced Micro Devices, Inc.
* URL :
really, a have cusom libva in /usr/local installed with make install
after removing and reinstall libva2 vlc run successful
thank's. it's not a bug
вс, 11 июн. 2023 г. в 22:27, Debian Bug Tracking System <
ow...@bugs.debian.org>:
> Thank you for filing a new Bug report with Debian.
>
> You
On Sat, 20 May 2023 19:25:41 +0200 Rafal Pietrak wrote:
I've experieced problem after upgrading old (i386) machine to Debian-12
I've upgraded it from Debian-10, through Debian-11 (without testing this
The package got removed from bookworm due to #1027355.
libapreq2 (2.17-3) should migrate to
Package: perltidy
Version: 20220613-1
Severity: wishlist
Tags: upstream
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hi,
Please consider packaging upstream release v20230309.
It is recommended for use with new upstream release of perltidier,
which adopts my patches to support Object::Pad -
Source: macromoleculebuilder
Severity: serious
Version: 4.0.0+dfsg-2
Hello,
macromoleculebuilder FTBFS after recent update of gemmi to 0.6.2+ds-1:
/home/merkys/macromoleculebuilder-4.0.0+dfsg/src/CifOutput.cpp: In
function 'void SimTK::CIFOut::reWriteOutCif(const gemmi::Model&, const
Package: ruby-gollum-lib
Version: 4.2.7.10~gitlab.2+dfsg-1
Severity: important
/usr/lib/ruby/vendor_ruby/rubygems/dependency.rb:313:in `to_specs':
Could not find 'rouge' (~> 3.1) - did find: [rouge-4.1.0]
full log attached. I'd like to reupload ruby-rouge 4.1 to unstable soon.
autopkgtest
Hi all,
Currently, libapache2-mod-qos is still at 11.63 in stable and unstable although
the latest release version is 11.74 from early May 2023 available at SF.net. I
hope that our great packet maintainer Sergey finds some time to build an
updated version, because many users depend on a
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: binnmu
nmu spirv-llvm-translator-16_16.0.0-1 . ANY . experimental . -m "Rebuild
against llvm 16.0.5"
the updated llvm-16/gcc-13 combination causes symbol changes that I'd
like to collect before
Spoke too soon, usrmerge broke my system worse than I could have imagined,
/usr/bin/init went to systemd but in the old place /lib/systemd (the lib folder
was either empty or not there, likely because of the usrmerge), fixing that
didn't really do much as I suspect a whole bunch of other stuff
Package: ftp.debian.org
User: ftp.debian@packages.debian.org
Usertags: remove
Severity: normal
Please remove linux-ftpd. It is orphaned and the only binary package ftpd is
transitional since the bookworm release.
Hi, especially to Pádraig,
I wrote:
> Control: affects -1 aptitude-robot
JFYI: The fix for /etc/cron.daily/aptitude-robot, which triggers the
issue in its non-bash compatibility mode, is to change its shebang
line from "#!/bin/sh" to "#!/bin/bash". (dpkg-reconfigure dash or bash
to switch
Package: ca-certificates-java
Version: 20230103
Severity: serious
Hello,
While updating today, I got the following error:
dpkg: boucle détectée durant le traitement des actions différées :
listes des paquets qui en sont responsables (normalement) :
ca-certificates-java ->
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu
[ Reason ]
In Lomiri's clock app, it is possible to configure alarms with
custom alarm sounds. ayatana-indicator-datetime is responsible
for playing those alarm sounds when the
Control: tags -1 invalid wontfix
> it succeded once I installed the package libgmock-dev.
My crystal ball tells me the compilation error arises somewhere in the
*.cmake ot GTest package.
Since no debuidd machines are failing, closing as invalid.
Thanks
On 13/06/2023 09:38, Axel Beckert wrote:
Hi, especially to Pádraig,
Pádraig Brady wrote:
cksum since v9.0 checks at runtime whether pclmul is supported.
It seems that check is not working appropriately on a Xen DomU.
The routine in question is pclmul_supported() at:
Package: tracker.debian.org
Severity: important
To reproduce:
- Choose a package that exists in all suites with various different
versions (gnome-shell is a good example)
- rmadison gnome-shell
- visit https://tracker.debian.org/pkg/gnome-shell
Expected result:
At the time of writing, here
Hello, unfortunately for me both 0.3.1-2 and 0.3.2-1 still don't work.
I'm experiencing the same issue (thumb button remapping not working);
0.2.4 built from the source works fine.
On Tue, 06 Jun 2023 14:24:30 +0200 Hendrik Tews
wrote:
Hi,
On 2023-06-05 10:22:35, Chow Loong Jin wrote:
>
On Mon, Jun 12, 2023 at 05:03:01PM -0500, Dirk Eddelbuettel wrote:
>
> reassign 1037113 screen-message
> thanks
>
> Binary package 'sm' is from source package 'screen-message'
>
> Binary package 'r-cran-sm' is from source package 'sm', which I maintain, and
> something totally different :-)
Source: easy-rsa
Version: 3.1.0-2
Severity: wishlist
X-Debbugs-Cc: lq27...@gmail.com
Please import the latest easy-rsa version, which is 3.1.5 currently.
Source: molmodel
Severity: serious
Version: 3.1.0-2
Hello,
molmodel FTBFS after recent update of gemmi to 0.6.2+ds-1:
/home/merkys/molmodel-3.1.0/src/PDBReader.cpp: In function
'gemmi::Structure getStructureFromFile(const std::string&)':
/home/merkys/molmodel-3.1.0/src/PDBReader.cpp:98:29:
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition
Hello,
I would like to request a transition slot for openmm
(experimental -> unstable) due to soname bump. Current ben tracker [1]
is OK.
Status of reverse dependencies:
- cpptraj:
Package: ftp.debian.org
User: ftp.debian@packages.debian.org
Usertags: remove
Severity: normal
Please remove netkit-tftp. It is orphaned and the only binary package tftp is
transitional since the bookworm release.
Package: nvidia-driver
Version: 525.105.17-1
Severity: important
Dear Maintainer,
The upgrade to 12 was smooth except the nvidia-driver did not load
after rebooting on my Lenovo P51 with:
01:00.0 VGA compatible controller: NVIDIA Corporation GM206GLM [Quadro M2200
Mobile] (rev a1)
I get a
Package: ruby-kramdown-parser-gfm
Version: 1.1.0-2
Severity: important
I'd like to upload ruby-rouge 4.1 to unstable soon.
1) Failure:
TestFiles#test_gfm_codeblock_fenced_to_html
[/tmp/autopkgtest-lxc.r0kgad0i/downtmp/build.yfB/src/test/test_files.rb:32]:
--- expected
+++ actual
@@ -16,6
On 07/06/2023 22:09, Vincent Bernat wrote:
On 2023-06-07 12:07, Danilo Egea Gondolfo wrote:
* What led up to the situation?
The build is failing on armhf because cmake is not detecting the
architecture correctly as we cross compile on arm64.
Also, after fixing the cmake part, the build
Alban Browaeys wrote:
Why is smartd of type notify? Does it send notification to systemd via
sd_notify?
Yes, otherwise this would not appear in systemctl status output:
Status: "No devices to monitor"
See 'man smartd' for details.
Unfortunately it does not properly work in conjunction
Package: ftp.debian.org
Severity: normal
Icingaweb2-module-ipl is removed from unstable.
This should also be removed from experimental.
Greetings,
David
Package: ocsinventory-reports
Version: 2.8.1+dfsg1+~2.11.1-1
Severity: important
X-Debbugs-Cc: pfrago...@gmail.com
Dear Maintainer,
* What led up to the situation?
apt install ocsinventory-server
http://server/ocsreports/ shows nothing
* What exactly did you do (or not do) that was
Control: tags -1 + wontfix
No, the package is called python3 now, and won't change. There should be no
dependencies on python, these should be fixed by the third parties. I'm unaware
of any 'python' package in the deb packaging ecosystem.
Package: wnpp
Orphaning python-reportlab.
There is now a 4.0.x release, which splits out the accelerators into a separate
source package. See
https://hg.reportlab.com/hg-public/reportlab/
https://hg.reportlab.com/hg-public/rl-accel/
Requires some re-packaging.
Control: tag -1 patch pending
Hi,
And yes, thanks for reporting!
Laura Arjona Reina (2023-06-13):
> Thanks for the report. It seems that our website packages.debian.org
> still doesn't recognize trixie being testing.
It's worse than that: it doesn't know about trixie at all yet. There are
Package: wnpp
Severity: wishlist
Owner: Pierre-Elliott Bécue
X-Debbugs-Cc: debian-de...@lists.debian.org
* Package name: trantor
Version : 1.5.11
Upstream Author : An Tao
* URL : https://github.com/an-tao/trantor
* License : BSD
Programming Lang: C++
Control: tags -1 - wontfix
On Fri, Jun 9, 2023 at 1:39 PM Julian Wollrath wrote:
>
> Hi,
>
> > it seems, like upstream is moving the plugin to use lcms2 [1] which is
> > available in debian.
>
> I tried building a package with a new snapshot and enabled the building
> of the gdk-pixbuf plugin
Package: www.debian.org
Severity: normal
User: www.debian@packages.debian.org
Hi,
Spotted while working on #1037479: we have a bunch of files around that
are no longer useful, because relevant suites are EOL and archived, and
have been dropped from the relevant config files, templates, etc.
Package: wnpp
Severity: wishlist
Owner: Leonardo Held
X-Debbugs-Cc: debian-de...@lists.debian.org
* Package name : libqt6gui6-gles
Version : 6.4.2
Upstream Author : The Qt Company
* URL : https://www.qt.io/developers/
* License : LGPL-3, GPL-2, GFDL-NIV-1.3, GPL-3 with Qt-1.0 exception,
Package: wnpp
Severity: wishlist
Owner: Pierre-Elliott Bécue
X-Debbugs-Cc: debian-de...@lists.debian.org
* Package name: drogon
Version : 1.8.4
Upstream Author : An Tao
* URL : https://github.com/drogonframework/drogon
* License : MIT
Programming Lang: C++
Package: wnpp
Severity: wishlist
Owner: Pierre-Elliott Bécue
X-Debbugs-Cc: debian-de...@lists.debian.org
* Package name: weakforced
Version : 2.8.0
Upstream Author : Neil Cook
* URL : https://github.com/PowerDNS/weakforced
* License : GPL-3
Programming
Package: www.debian.org
User: www.debian@packages.debian.org
Usertag: packages
Severity: normal
X-Debbugs-CC: kevin.torkel...@gmail.com, webmas...@debian.org
Hi Kevin
Thanks for the report. It seems that our website packages.debian.org still
doesn't recognize trixie being testing.
Not
Control: tags -1 moreinfo
Control: serverity -1 important
Hey,
I never had issues with using Nextcloud desktop to connect to my server,
that's why I downgrade the serverity, as it has something to do with your
specific setup.
I expect that the issue is that your server only accepts TLS < 1.3.
Package: open-vm-tools
Version: 11.2.5 or higher versions
Severity: Serious
We noticed that there is no open-vm-tools in Debian 12.0 iso image. We’d like
to learn more about this change, is that by designed? If so, could you please
tell us more about the reason? Thanks a lot.
Package: rspamd
Severity: wishlist
Hi,
thank you so much for maintaining rspamd in debian.
Some time ago, there was a new upstream release with some nice new
features. It would be nice if you could update the package to the
current version (3.5).
Regards,
Daniel
Package: www.debian.org
Severity: normal
User: www.debian@packages.debian.org
Hi,
Spotted while working on #1037479, static/packages-site.css hardcodes
suite names. But digging a little deeper, it doesn't seem to be imported
anymore, after the huge redesign:
commit
Fixed upstream in 9f1ba873637fd6ce4a2d366eafcf41402775852b for 8.4,
pending pick-up together with fix for #1036062 / CVE-2023-31490.
(Would bump to upstream 8.4.4 if that's acceptable?)
-equi
needrestart -vw
[main] eval /etc/needrestart/needrestart.conf
[main] needrestart v3.6
[main] running in root mode
[Core] Using UI 'NeedRestart::UI::stdio'...
[main] systemd detected
[ucode] using NeedRestart::uCode::Intel
[ucode] using NeedRestart::uCode::AMD
[uCode/Intel] #0 current revision:
Source: ycmd
Version: 0+20230103+gitf53e7ac+ds-1
Severity: serious
X-Debbugs-Cc: z...@debian.org
Control: forworded -1 https://github.com/ycm-core/ycmd/commit/01a1f543
I've updated golang-defaults to 1.20 in unstable, your package's autopkgtest
fails with that.
I've sent the fix to upstream,
Package: wnpp
Severity: wishlist
Owner: Leonardo Held
X-Debbugs-Cc: debian-de...@lists.debian.org
* Package name : qt6-base-private-gles-dev
Version : 6.4.2
Upstream Author : The Qt Company
* URL : https://www.qt.io/developers/
* License : LGPL-3, GPL-2, GFDL-NIV-1.3, GPL-3 with Qt-1.0
> On Tue, 13 Jun 2023 14:27:34 +0200, Cyril Brulebois
> said:
> Probably best to finally drop it, to avoid wasting more brain time on
> suite updates (for that particular file)?
Yes, please drop it.
--
viele Grüße Thomas
Package: lxqt
Version: 31
Severity: important
X-Debbugs-Cc: kachat...@hotmail.com
* I like multi-user.target and I like LXQt.
In Debian 11 startx call LXQt, there is no problem.
In Debian 12 startx call MATE,
startxlxqt NOT work: "qt.qpa.xcb could not connect to display"
* lxdm in Debian 12 work
Fixed upstream in 9f1ba873637fd6ce4a2d366eafcf41402775852b on stable/8.4
branch.
Debian fix incoming with bump to 8.4.4 if that's OK? That wouldn't be a
targeted security fix, but FRR minor versions are bugfix-only.
-equi
Argh, wrong bug, previous mail was for 1036061.
On Tue, Jun 13, 2023 at 03:17:52PM +0200, David Lamparter wrote:
> Fixed upstream in 9f1ba873637fd6ce4a2d366eafcf41402775852b on stable/8.4
> branch.
CVE-2023-31489 / 1036062 was fixed upstream on master but not backported
to 8.4 yet; now pending
tags 519558 moreinfo
thanks
Hello,
This bug is more than 10 years old. Please retry with a newer Dar;
ideally 2.7.9 in sid. Failing that, at least the version in bookworm.
It would be very helpful to have a reproducible test case if indeed the
problem can be reproduced.
Thanks,
John
Quoting Pierre-Elliott Bécue (2023-06-13 15:14:15)
> The goal of 'wforce' is to detect brute forcing of passwords across many
> servers, services and instances. In order to support the real world, brute
> force detection policy can be tailored to deal with "bulk, but legitimate"
> users of your
Source: mdadm
Version: 4.2+20230227-1
Severity: normal
Dear Daniel,
SysV initscripts and cron jobs have recently been removed from mdadm. It would
be a great help to users of non-systemd inits if you could restore them. Service
files and initscripts can happily coexist and systemd will use the
Simon,
Thanks for your care and insight with this and apologies for the delay in
replying (mails to elog...@packages.debian.org have been held up on a
mailserver).
On Tue, Jun 06, 2023 at 11:58:07AM +0100, Simon McVittie wrote:
> Exactly. My hope is that if we had:
>
> Package: systemd
>
notfound 1035829 frr/8.4.2-1
stop
On Tue, May 09, 2023 at 09:19:30PM +0200, Moritz Mühlenhoff wrote:
> CVE-2022-43681[0]:
> CVE-2022-40318[1]:
> CVE-2022-40302[2]:
All 3 issues are fixed/not present in 8.4 and thus also 8.4.2-1:
- CVE-2022-43681 - 6c4ca9812976596bf8b5226600269fc4031f1422
-
retitle -1 1037362 usrmerge: fails to run ldd
On Jun 13, Lawrence Bayly wrote:
> Spoke too soon, usrmerge broke my system worse than I could have
> imagined, /usr/bin/init went to systemd but in the old place
> /lib/systemd (the lib folder was either empty or not there, likely
> because of
On Mon, 12 Jun 2023 17:37:12 + Debian FTP Masters wrote:
* debchange: Update to current Debian distributions (Add bookworm and trixie
and drop stretch, jessie, and wheezy) (Closes: #1037336)
This change is also needed in bookworm where `dch --bpo` still uses
bullseye-backports
I have modified the patches to work with Debian 12 Bookworm.
Most noticeable, the "poweroff" command must now be called with the parameter
"-f" to switch off the system while waiting for an input.--- orig/functions 2023-06-12 19:44:03.169739289 +0200
+++ /usr/lib/cryptsetup/functions 2023-06-12
Dear Kai,
Thank you very much for this report and a possible solution. Exactly the
same happened to me on upgrade to bookworm. Can you please elaborate how
you did this in detail? I really would be in trouble if I lose the emails.
I know this is a big ask but I would really appreciate your help.
retitle 1037496 show note about missing boot integration for non-systemd
thanks
Hi Mark,
On 6/13/23 14:28, Mark Hindley wrote:
> It would be a great help to users of non-systemd inits if you could restore
> them.
thanks you for your report.
Personally I'm using systemd, but in general I fully
Fixed upstream: https://www.smartmontools.org/changeset/5475
Package: add-apt-repository
Version: ?
Severity: high
Bug Description:
This command, which no longer allows you to add external repositories, worked
perfectly under Debian 10 & 11, but it no longer works under Debian 12.
Command to add Mozilla Firefox official ppa :
add-apt-repository
Control: reassign -1 software-properties-common
Control: forcemerge 1029766 -1
Hi Philippe,
On Tue, Jun 13, 2023 at 12:41:30PM +0200, pham...@bluewin.ch wrote:
> Package: add-apt-repository
> Version: ?
> Severity: high
>
> Bug Description:
>
> This command, which no longer allows you
Package: wnpp
Severity: wishlist
Owner: Leonardo Held
X-Debbugs-Cc: debian-de...@lists.debian.org
* Package name : qt6-base-gles-dev
Version : 6.4.2
Upstream Author : The Qt Company
* URL : https://www.qt.io/developers/
* License : LGPL-3, GPL-2, GFDL-NIV-1.3, GPL-3 with Qt-1.0 exception,
Package: plasma-discover
Version: 5.27.5-2
Severity: important
X-Debbugs-Cc: ybx...@gmail.com
Dear Maintainer,
* What led up to the situation?
Change the source file from Debian 12 to Debian 13. And upgrade the system.
* What was the outcome of this action?
fetch ratings! false
adding empty
Package: ftp.debian.org
Severity: normal
User: ftp.debian@packages.debian.org
Usertags: remove
X-Debbugs-Cc: django-testproj...@packages.debian.org
Control: affects -1 + src:django-testproject
Please remove src:django-testproject. Is not maintained anymore, and
is not used by anything in the
X-Debbugs-CC: debian-de...@lists.debian.org, debian...@lists.debian.org
Package: wnpp
Severity: wishlist
Owner: Taavi Väänänen
* Package name: golang-github-sherclockholmes-webpush-go
Version : 1.2.0-1
Upstream Author : Ethan Holmes
* URL :
Hi,
Pádraig Brady wrote:
> At this stage it would be good to get the output from `cpuid -1`
Ok, I've attached the output of "cpuid -1" from both affected DomUs
(the outputs slightly differ) as well as of the unaffected hosting
server (same CPU) for comparison.
cpuid-domu1.txt and
Hi Laszlo,
I have uploaded dar 2.7.9 with the change to Maintainer. libthreadar is
also in NEW, and once it is accepted, I will be able to enable curl to
provide FTP/SFTP support and close the bug entirely.
Thank you for your work maintaining dar all this time!
- John
On Mon, Jun 05 2023,
Here it is
root@ghost:~# needrestart -vw
[main] eval /etc/needrestart/needrestart.conf
[main] needrestart v3.6
[main] running in root mode
[Core] Using UI 'NeedRestart::UI::stdio'...
[main] systemd detected
[ucode] using NeedRestart::uCode::Intel
[ucode] using NeedRestart::uCode::AMD
Package: outguess
Version: 1:0.4-2
Severity: important
Hello,
When trying to run OutGuess on Debian 12, I get a "stack smashing detected"
error message and the program is aborted (SIGABRT).
This appears to happen for all JPEG images, i.e. it is not triggered by a
certain image.
Steps to
On Wed, 16 Feb 2022 09:28:13 -0300 Eriberto Mota wrote:
> Hi guys,
>
> I am running Debian Stable (Bullseye) in my desktop and in my local server.
>
> Yesterday I made a backport version of the apt-cacher-ng for me and I put it
> in the server. The problem seems is solved.
>
> Regards,
>
>
On 13 June 2023 at 00:46, Josh Triplett wrote:
| On Mon, Jun 12, 2023 at 05:03:01PM -0500, Dirk Eddelbuettel wrote:
| >
| > reassign 1037113 screen-message
| > thanks
| >
| > Binary package 'sm' is from source package 'screen-message'
| >
| > Binary package 'r-cran-sm' is from source package
Control: tag -1 patch
I've created a MR which fixes these bugs here:
https://salsa.debian.org/xorg-team/lib/mesa/-/merge_requests/27
signature.asc
Description: This is a digitally signed message part.
On Tue, 13 Jun 2023, Russ Allbery wrote:
>namely if you're running anything
>in a chroot that needs directories created in /tmp and /run, the chroot
>either needs to have a persistent /tmp and /run or you have to arrange for
>it to run at least some init scripts during boot.
I very much disagree
Hi
On Mon, 27 Dec 2021 09:47:38 -0500 Michael Meier
wrote:
> I'm using wayland with kde plasma on debian testing. Under wayland
the ssh
> agent doesn't get auto started as it does under x-server. According
to google
> that seems to be a known issue, but I couldn't find any bug report
for
Package: ruby-jekyll-github-metadata
Version: 2.15.0-1
Severity: serious
Tags: patch
Justification: Policy 4.9
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu mantic ubuntu-patch
Hi Daniel,
ruby-jekyll-github-metadata has a test suite that relies on accessing the
github.com website
On 13 June 2023 at 13:15, Steve Langasek wrote:
| Control: reassign -1 r-cran-rstan r-cran-bh
| Control: found -1 r-cran-rstan/2.21.8-1
|
| Unfortunately, at least in Ubuntu it appears the r-cran-rstan build still
| exhausts the 32-bit memory space even with boost 1.81.
|
|
Package: roundcube-core
Version: 1.6.1+dfsg-1
Today, I tried to upgrade my webserver to Debian 12.0 (bookworm).
Everything succeeded but Roundcube. The upgrade of Roundcube fails with
the following:
Installing new version of config file /etc/roundcube/htaccess ...
Installing new version of
Package: multipath-tools
Version: 0.9.4-3
Severity: important
Tags: patch
Dear Maintainer,
Since verison 0.9.4-1, the multipath.rules udev file is no longer included in
the Debian package. Upstream changed from shipping a static file to a
file generated at build time (multipath.rules.in), and
On 2023-06-13 23:18:47 +0200, Vincent Lefevre wrote:
> It seems that something changed on Twitter, which yields the
> "Could not authenticate you." error with Net::Twitter. This
> started to happen a few hours ago.
I think that's it:
https://twitter.com/TwitterDev/status/1621026986784337922
Package: emacs-common
Version: 1:28.2+1-15
Severity: minor
When a comment block is used, i.e.
=begin comment
[code to comment]
=end comment
=cut
as described in the perlfaq7 man page, everything starting at the
"=begin comment" line is in the comment color, even the code after
the "=cut"
Source: golang-github-gin-gonic-gin
Version: 1.8.1-1
Severity: important
Tags: security upstream
Forwarded: https://github.com/gin-gonic/gin/issues/3555
X-Debbugs-Cc: car...@debian.org, Debian Security Team
Hi,
The following vulnerability was published for golang-github-gin-gonic-gin.
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu
[ Reason ]
This upload fixes #1036986 by adding a dependency on the shared library
package to the -dev package. The same fix was applied as part of
1.81.0-5.1 in unstable.
[
Version: Debian12, Bookworm (kernel: 6.1.0-9-cloud-amd64)
Package: libselinux1:amd64
Impact: cosmetic
I have noticed that the kernels shipped with Debian (or at least the flavor
mentioned above) don't provide the CONFIG_SECURITY_SELINUX_BOOTPARAM. This
essentially means that there's no way to
Source: rust-xml-rs
Version: 0.8.3-1
Severity: important
Tags: security upstream
Forwarded: https://github.com/netvl/xml-rs/pull/226
X-Debbugs-Cc: car...@debian.org, Debian Security Team
Hi,
The following vulnerability was published for rust-xml-rs.
CVE-2023-34411[0]:
| The xml-rs crate before
Hi,
On Tue, Jun 13, 2023 at 10:55:24PM +0200, Salvatore Bonaccorso wrote:
> Source: rust-xml-rs
> Version: 0.8.3-1
> Severity: important
> Tags: security upstream
> Forwarded: https://github.com/netvl/xml-rs/pull/226
> X-Debbugs-Cc: car...@debian.org, Debian Security Team
>
>
> Hi,
>
> The
Luca Boccassi writes:
> That essentially means it's fine to use diversions and ship releases
> using them, so that's exactly what will happen as per Murphy's law.
I think we're reaching a consensus that "must" is appropriate for the
systemd configuration files, so this discussion is about how
The fix for this vulnerability (CVE-2021-31924) was backported and included in
the NMU version 1.1.0-1.1.
References:
- https://github.com/Yubico/pam-u2f/issues/175
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987545#39
There are still functionality issues with the version that is
On 2023-06-13 20:10, Thorsten Glaser wrote:
I personally tend to use:
apt-get --purge dist-upgrade
This takes care of purging the configuration files of packages
that get removed (take care, of course, to not let it remove
things you still need, like the old PostgreSQL version until
the
Package: astromenace
Version: 1.3.2+repack-7
Severity: wishlist
Dear Maintainer,
You may consider the following MR:
https://salsa.debian.org/games-team/astromenace/-/merge_requests/2
for that.
Thanks,
Patrice
-- System Information:
Debian Release: trixie/sid
APT prefers unstable-debug
APT
Thorsten Glaser writes:
> what you described of course does not work for /tmp and /run.
> It is viable for /var/tmp etc.
Well, it does work for /tmp and /run as well as anything else can possibly
work for /tmp and /run inside a chroot, namely if you're running anything
in a chroot that needs
On Tue, 2023-06-13 at 20:01 +0100, Matthew Garrett wrote:
> After discussing this at our monthly meeting, we concluded that the
> technical committee isn't going to take action on this at the moment.
> There's a legitimate technical consideration behind the warning, and
> it's necessary for
Package: proofgeneral
Version: 4.4.1~pre170114-1.2
Followup-For: Bug #1016815
Dear Maintainer,
Here is a patch for the d/watch file.
Thanks,
Patrice
-- System Information:
Debian Release: trixie/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1,
Thorsten Glaser writes:
> On Tue, 13 Jun 2023, Russ Allbery wrote:
>> namely if you're running anything in a chroot that needs directories
>> created in /tmp and /run, the chroot either needs to have a persistent
>> /tmp and /run or you have to arrange for it to run at least some init
>> scripts
On Tue, 13 Jun 2023 08:39:24 -0700 Russ Allbery wrote:
> Sean Whitton writes:
>
> > I still find myself feeling queasy about adding this must-with-
caveat.
> > It feels like with the caveat you're trying to get something
between
> > "must" and "should", but then rather than build down from
I believe this can be closed. It worked for me after setting
"--bootloaders syslinux,grub-efi".
--
Confidentiality Notice: The material transmitted herein is intended
only for the use of the addressee and may contain information that
constitutes work product or is confidential and exempt
I think this can be closed. Looking good without the systemd script.
On Mon, May 1, 2023 at 4:29 PM Diederik de Haas
wrote:
> On Monday, 1 May 2023 20:40:11 CEST Rusty Grove wrote:
> > The script is something I did
>
> Can you test without that script then?
> IMO the proper way to deal with
On Tue, Jun 13, 2023 at 09:14:53PM +0200, Ansgar wrote:
> On Tue, 2023-06-13 at 20:01 +0100, Matthew Garrett wrote:
> > After discussing this at our monthly meeting, we concluded that the
> > technical committee isn't going to take action on this at the moment.
> > There's a legitimate technical
On Tue, 13 Jun 2023 at 20:51, Russ Allbery wrote:
>
> Luca Boccassi writes:
>
> > That paragraph is in the context of StateDirectory= and
> > RuntimeDirectory=. These are unit files options, so it's up to
> > alternative init systems to provide alternative and integrate them in
> > the
1 - 100 of 195 matches
Mail list logo
