Bug#1062391: dt-utils: NMU diff for 64-bit time_t transition
Okay. Please feel free to make the unstable upload a QA upload, changing the Maintainer (see #1050494).
Bug#1062704: python-certvalidator: Please make it team-maintained
Source: python-certvalidator python-certvalidator is located in the Python Team's salsa namespace but it is not team-maintained via d/control's Maintainer or Uploaders fields. Please fix that.
Bug#1062706: ITP: python-pyhanko-certvalidator -- Validates X.509 certificates and paths
Package: wnpp Severity: wishlist Owner: Bastian Germann * Package name: python-pyhanko-certvalidator * URL : https://github.com/MatthiasValvekens/certvalidator * License : Expat Programming Lang: Python Description : Validates X.509 certificates and paths A Python library that offers functionality for validating X.509 digital certificates, which are widely used in security systems such as TLS/SSL, email encryption, PDF signatures, and more. The pyhanko-certvalidator library performs the following main tasks: - Certificate Validation: The library checks the validity of X.509 digital certificates. This includes checking the certificate signature, expiration date, issuing authority (CA), certificate revocation, and other important properties. - Chain of Trust: It helps to build and validate the certificate chain, that is, the sequence of certificates that links a specific certificate to a trusted certification authority (root CA). - CRL (Certificate Revocation Lists) Check: The library checks whether a certificate has been revoked by querying Certificate Revocation Lists (CRLs) published by certification authorities. - Online Certificate Status Protocol (OCSP) Check: In addition to CRL checking, certvalidator can check the status of a certificate through the Online Certificate Status Protocol (OCSP) to determine whether the certificate is still valid. - Custom Expiration Policy: You can configure and apply custom validity policies to meet specific certificate validation requirements. - Extensibility: The library is designed to be extensible and customizable. This is a fork of the python-certvalidator package. I need it in order to package pyhanko.
Bug#1062800: RFP: pyside6 -- Qt6 for Python
Package: wnpp Severity: wishlist X-Debbugs-Cc: debian-qt-...@lists.debian.org * Package name: pyside6 * URL : https://doc.qt.io/qtforpython-6/ * License : LGPL-3 Programming Lang: C++ Qt for Python offers the official Python bindings for Qt, which enables you to use Python to write your Qt applications.
Bug#1062808: RFP: python-pyhanko -- Sign and stamp PDF files
Package: wnpp Severity: wishlist Control: block -1 by 1062706 * Package name: python-pyhanko * URL : https://github.com/MatthiasValvekens/pyHanko * License : Expat Programming Lang: Python Description : Validates X.509 certificates and paths The pyHanko library roughly consists of the following components. * The pyhanko.pdf_utils package, which is essentially a (gutted and heavily modified) fork of PyPDF2, with various additions to support the kind of low-level operations that pyHanko needs to support its various signing and validation workflows. * The pyhanko.sign package, which implements the general signature API supplied by pyHanko. * The pyhanko.stamp module, which implements the signature appearance rendering & stamping functionality. * The pyhanko.keys module with utilities to handle key and certificate loading. * Support subpackages to handle CLI and configuration: pyhanko.config and pyhanko.cli. These mostly consist of very thin wrappers around library functionality, and shouldn’t really be considered public API, except for the parts used in the plugin system. The library is needed for xhtml2pdf to update to a newer version.
Bug#1029739: pypdf2 is deprecated, please move from python3-pypdf2 to python3-pypdf
Control: block -1 by 1062808 On Sun, 21 Jan 2024 13:03:44 -0500 Scott Kitterman wrote: If you want this package to be in Trixie, you will need to use pypdf instead of pypdf2. There is a new upstream release that supports this transition, but packaging it will be non-trivial. The pyHanko library is needed, which needs to be packaged.
Bug#1062913: far2l: Undocumented former non-free software now public domain
Source: far2l Severity: important Version: 2.5.3~beta+ds-1 NetRocks/src/Protocol/FTP/FTPParseLIST.* carry the statement: "Commercial use is fine, if you let me know what programs you're using this in." The files would be non-free if the author had not released them into the public domain after the fact, see "What are the distribution terms for ftpparse?" in https://cr.yp.to/distributors.html Please document in debian/copyright that they are distributed under public domain.
Bug#1064380: Aw: Re: Bug#1064380: RFS: jpeginfo/1.7.1-1 [Team] -- Prints information and tests integrity of JPEG/JFIF files
> The string " $Id: hash $" in "jpeginfo.h" file is almost not change in > upstream. > Even this string changed in upstream, it will not affect do deb package. "almost no change" is a change and dpkg-source will not create a source package for me. How are you able to create one from the released tarball?
Bug#1065047: khelpcenter: Update to new upstream version
Source: khelpcenter Version: 4:23.08.3-1 Severity: wishlist Please import khelpcenter's latest version 24.02.0, which does not have the khtml dependency anymore. I would be happy to help with patches if this is not on your priority list.
Bug#1061203: gtkmm2.4: upstream branch is end-of life
Am 03.03.24 um 12:17 schrieb Graham Inggs: I don't believe having a dead upstream is considered Release Critical. If you do not believe so, please set the severity to what you see fit.
Bug#453891: unrar-free doesn't have an option to extract a file to stdout
On Sat, 01 Dec 2007 21:00:03 -0500 Stefan Monnier wrote: As the subject says, there's no easy way to extract one of the files in a rar archive to stdout (or to a specific file). Please import version 0.2.0 which fixes this.
Bug#977321: O: autoconf2.13 -- automatic configure script builder (obsolete version)
On Fri, 18 Dec 2020 02:16:55 +0100 Axel Beckert wrote: Hi Ben, Ben Pfaff wrote: > This package is really obsolete. It has several bug reports but the > right thing to do is probably to get any packages that use autoconf2.13 > updated to use something else. (Or removed; they are antiques > themselves.) While I hoped that you are right, there seem at least two big blockers on a first glance: Firefox and Thunderbird. I tried to make a quick list of affected packages: → grep-dctrl -s Package -FBuild-Depends,Build-Depends-Indep,Build-Depends-Arch autoconf2.13 /var/lib/apt/lists/*Source* | fgrep Package | sort -u Package: firefox Package: firefox-esr Package: gcc-3.3 Package: gcc-m68hc1x Package: grass Package: maxima Package: mozjs52 Package: mozjs78 Package: postgis Package: thunderbird Package: vflib3 Package: xemacs21 And yeah, some packages in this list are really old. gcc-3.3 recently has been orphaned for similar reasons: https://bugs.debian.org/966317 So I tried to figure out which versions of Firefox and Thunderbird exactly are affected and it started to look less bad: The list is now mozjs78 gcc-3.3 mozjs102 xemacs21 gcc-3.3 can be dropped at any time. mozjs78 can be dropped as soon as cjs has moved v5.8.0 to unstable. That leaves mozjs102 and xemacs21. The major problem with this: mozjs102 and probably a future mozjs115 still need autoconf2.13 to reconfigure. The mozjs source contains the built configure, so an alternative would be to just use that. The same goes for xemacs if it is not updated (see #343083). I guess, for trixie it is already too late to hand in Spidermonkey patches to update the build system because trixie will likely release with mozjs115.
Bug#1030322: gnushogi: FTBFS with TeXInfo 7.0.x
I am uploading a NMU to move the experimental version to unstable in order to fix this. The debdiff is attached.diff -Nru gnushogi-1.5~git20140725/debian/changelog gnushogi-1.5~git20140725/debian/changelog --- gnushogi-1.5~git20140725/debian/changelog 2020-04-03 19:54:19.0 +0200 +++ gnushogi-1.5~git20140725/debian/changelog 2023-08-10 23:39:21.0 +0200 @@ -1,3 +1,10 @@ +gnushogi (1.5~git20140725-2.1) unstable; urgency=medium + + * Non-maintainer upload. + * Move to unstable (Closes: #1030322) + + -- Bastian Germann Thu, 10 Aug 2023 23:39:21 +0200 + gnushogi (1.5~git20140725-2) experimental; urgency=medium * Update Vcs-* fields to point to salsa. @@ -35,6 +42,32 @@ -- Yann Dirson Tue, 18 Feb 2014 21:24:46 +0100 +gnushogi (1.4.2-7) unstable; urgency=medium + + * Fix build with gcc-10 (Closes: #957294). + + -- Yann Dirson Mon, 24 Aug 2020 23:15:18 +0200 + +gnushogi (1.4.2-6) unstable; urgency=medium + + * Fix Vcs-git field, broken in 1.4.2-5. + * Remove usage of autotools_dev debhelper tools (lintian). + + -- Yann Dirson Sun, 16 Dec 2018 22:36:56 +0100 + +gnushogi (1.4.2-5) unstable; urgency=medium + + * Update Vcs-* fields to point to salsa. + * Fix URL to Homepage. + + -- Yann Dirson Sun, 12 Aug 2018 23:34:39 +0200 + +gnushogi (1.4.2-4) unstable; urgency=medium + + * Don't ignore failures from sub-makes (Closes: #901539) + + -- Yann Dirson Sun, 12 Aug 2018 14:39:58 +0200 + gnushogi (1.4.2-3) unstable; urgency=medium * Switch to source format 3.0 (quilt).
Bug#1043280: libayatana-appindicator3-0.1-cil: Please drop gtk-sharp3 reverse dependencies
I am uploading a NMU to fix this.diff -Nru libayatana-appindicator-0.5.92/debian/changelog libayatana-appindicator-0.5.92/debian/changelog --- libayatana-appindicator-0.5.92/debian/changelog 2023-06-28 23:28:24.0 +0200 +++ libayatana-appindicator-0.5.92/debian/changelog 2023-08-11 11:42:50.0 +0200 @@ -1,3 +1,11 @@ +libayatana-appindicator (0.5.92-1.2) unstable; urgency=medium + + * Non-maintainer upload. + * Drop CIL packages (Closes: #1043280). + * Drop GTK2 remains. + + -- Bastian Germann Fri, 11 Aug 2023 09:42:50 + + libayatana-appindicator (0.5.92-1.1) unstable; urgency=medium * Non-maintainer upload. diff -Nru libayatana-appindicator-0.5.92/debian/control libayatana-appindicator-0.5.92/debian/control --- libayatana-appindicator-0.5.92/debian/control 2023-06-28 23:28:24.0 +0200 +++ libayatana-appindicator-0.5.92/debian/control 2023-08-11 11:42:30.0 +0200 @@ -8,26 +8,19 @@ cmake-extras (>= 1.5-8~), debhelper-compat (= 13), at-spi2-core, - cli-common-dev [amd64 arm64 armel armhf i386 mipsel ppc64el s390x kfreebsd-amd64 kfreebsd-i386 powerpc ppc64] , gobject-introspection, intltool, gtk-doc-tools, libxml2-utils, - libnunit-cil-dev [amd64 arm64 armel armhf i386 mipsel ppc64el s390x kfreebsd-amd64 kfreebsd-i386 powerpc ppc64] , dbus-test-runner, xvfb, valac, - mono-devel [amd64 arm64 armel armhf i386 mipsel ppc64el s390x kfreebsd-amd64 kfreebsd-i386 powerpc ppc64] , libglib2.0-dev, libgtk-3-dev, procps, - gtk-sharp3-gapi [amd64 arm64 armel armhf i386 mipsel ppc64el s390x kfreebsd-amd64 kfreebsd-i386 powerpc ppc64] , - libgtk3.0-cil-dev [amd64 arm64 armel armhf i386 mipsel ppc64el s390x kfreebsd-amd64 kfreebsd-i386 powerpc ppc64] , libdbus-glib-1-dev, - libayatana-indicator-dev, libayatana-indicator3-dev, libdbusmenu-glib-dev, - libdbusmenu-gtk-dev, libdbusmenu-gtk3-dev, libgirepository1.0-dev, Standards-Version: 4.6.2 @@ -91,28 +84,3 @@ . This package can be used by other packages using the GIRepository format to generate dynamic bindings (GTK-3+ version). - -Package: libayatana-appindicator3-0.1-cil -Section: cli-mono -Architecture: amd64 arm64 armel armhf i386 mipsel ppc64el s390x kfreebsd-amd64 kfreebsd-i386 powerpc ppc64 -Depends: ${shlibs:Depends}, - ${misc:Depends}, - ${cli:Depends}, -Description: CLI bindings for libayatana-appindicator3 - This package provides the appindicator-sharp assembly that allows CLI (.NET) - programs to take menus from applications and place them in the panel. - . - This package contains assemblies to be used by GTK-2+ Mono applications. - -Package: libayatana-appindicator3-0.1-cil-dev -Section: cli-mono -Architecture: amd64 arm64 armel armhf i386 mipsel ppc64el s390x kfreebsd-amd64 kfreebsd-i386 powerpc ppc64 -Depends: ${shlibs:Depends}, - ${misc:Depends}, - ${cli:Depends}, - libayatana-appindicator3-0.1-cil (= ${binary:Version}), -Description: Ayatana Application Indicators for Mono (GTK-3+ variant) - A library and indicator to take menus from applications and place them in - the panel. - . - This package contains files that are needed to build GTK-3+ Mono applications. diff -Nru libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-0.1-cil-dev.install libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-0.1-cil-dev.install --- libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-0.1-cil-dev.install 2022-11-30 10:14:10.0 +0100 +++ libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-0.1-cil-dev.install 1970-01-01 01:00:00.0 +0100 @@ -1 +0,0 @@ -usr/lib/*/pkgconfig/ayatana-appindicator3-sharp-0.1.pc diff -Nru libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-0.1-cil.install libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-0.1-cil.install --- libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-0.1-cil.install 2022-11-30 10:14:10.0 +0100 +++ libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-0.1-cil.install 1970-01-01 01:00:00.0 +0100 @@ -1 +0,0 @@ -usr/lib/*/cli/ayatana-appindicator3-sharp-0.1/* /usr/lib/cli/ayatana-appindicator3-sharp-0.1/ diff -Nru libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-0.1-cil.installcligac libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-0.1-cil.installcligac --- libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-0.1-cil.installcligac 2022-11-30 10:14:10.0 +0100 +++ libayatana-appindicator-0.5.92/debian/libayatana-appindicator3-
Bug#967570: libdbusmenu: depends on deprecated GTK 2
I am uploading a NMU to DELAYED/10 to fix this. The debdiff is attached.diff -Nru libdbusmenu-18.10.20180917~bzr492+repack1/debian/changelog libdbusmenu-18.10.20180917~bzr492+repack1/debian/changelog --- libdbusmenu-18.10.20180917~bzr492+repack1/debian/changelog 2022-11-05 11:04:11.0 +0100 +++ libdbusmenu-18.10.20180917~bzr492+repack1/debian/changelog 2023-08-11 14:59:51.0 +0200 @@ -1,3 +1,12 @@ +libdbusmenu (18.10.20180917~bzr492+repack1-3.1) unstable; urgency=medium + + * Non-maintainer upload + * Replace libgdk-pixbuf2.0-dev with libgdk-pixbuf-2.0-dev (Closes: #1037384) + * Drop GTK2 packages and dbusmenu-dumper tool (Closes: #967570) + * Actually drop build dependency on quilt + + -- Bastian Germann Fri, 11 Aug 2023 12:59:51 + + libdbusmenu (18.10.20180917~bzr492+repack1-3) unstable; urgency=medium * debian/control: diff -Nru libdbusmenu-18.10.20180917~bzr492+repack1/debian/control libdbusmenu-18.10.20180917~bzr492+repack1/debian/control --- libdbusmenu-18.10.20180917~bzr492+repack1/debian/control2022-11-05 11:03:36.0 +0100 +++ libdbusmenu-18.10.20180917~bzr492+repack1/debian/control2023-08-11 14:59:51.0 +0200 @@ -12,15 +12,13 @@ gtk-doc-tools, intltool, libatk1.0-dev, - libgdk-pixbuf2.0-dev (>= 2.22.1-0ubuntu4), + libgdk-pixbuf-2.0-dev, libgirepository1.0-dev (>= 0.9.3), libglib2.0-dev (>= 2.35.4), libgtk-3-dev (>= 2.99.2-1ubuntu2), - libgtk2.0-dev (>= 2.24.4-1~), libjson-glib-dev (>= 0.13.4), libtool, libx11-dev (>= 1.3), - quilt, valac (>= 0.16), valgrind-if-available, xauth, @@ -29,7 +27,7 @@ Rules-Requires-Root: no Homepage: https://launchpad.net/dbusmenu Vcs-Git: https://salsa.debian.org/debian-ayatana-team/libdbusmenu.git -Vcs-Browser: https://salsa.debian.org/debian-edu-ayatana-team/libdbusmenu +Vcs-Browser: https://salsa.debian.org/debian-ayatana-team/libdbusmenu Package: gir1.2-dbusmenu-glib-0.4 Section: introspection @@ -46,21 +44,6 @@ This package can be used by other packages using the GIRepository format to generate dynamic bindings for libdbusmenu-glib4. -Package: gir1.2-dbusmenu-gtk-0.4 -Section: introspection -Architecture: any -Multi-Arch: same -Depends: libdbusmenu-gtk4 (= ${binary:Version}), - ${gir:Depends}, - ${misc:Depends}, -Description: typelib file for libdbusmenu-gtk4 (GTK-2 variant) - libdbusmenu passes a menu structure across DBus so that a program can - create a menu simply without worrying about how it is displayed on the - other side of the bus. - . - This package can be used by other packages using the GIRepository format to - generate dynamic bindings for libdbusmenu-gtk4. - Package: gir1.2-dbusmenu-gtk3-0.4 Section: introspection Architecture: any @@ -114,23 +97,6 @@ . This package contains shared libraries to be used by applications. -Package: libdbusmenu-gtk-dev -Section: libdevel -Architecture: any -Depends: gir1.2-dbusmenu-gtk-0.4 (= ${binary:Version}), - libdbusmenu-glib-dev, - libdbusmenu-gtk4 (= ${binary:Version}), - libgtk2.0-dev (>= 2.12.0), - ${misc:Depends}, - ${shlibs:Depends}, -Multi-Arch: same -Description: library for passing menus over DBus - GTK-2+ version development files - libdbusmenu passes a menu structure across DBus so that a program can - create a menu simply without worrying about how it is displayed on the - other side of the bus. - . - This package contains files that are needed to build GTK-2+ applications. - Package: libdbusmenu-gtk-doc Section: doc Architecture: all @@ -170,17 +136,6 @@ . This package contains files that are needed to build GTK-3+ applications. -Package: libdbusmenu-gtk4 -Architecture: any -Depends: ${misc:Depends}, ${shlibs:Depends} -Multi-Arch: same -Description: library for passing menus over DBus - GTK-2+ version - libdbusmenu passes a menu structure across DBus so that a program can - create a menu simply without worrying about how it is displayed on the - other side of the bus. - . - This package contains shared libraries to be used by GTK-2+ applications. - Package: libdbusmenu-jsonloader-dev Section: libdevel Architecture: any diff -Nru libdbusmenu-18.10.20180917~bzr492+repack1/debian/gir1.2-dbusmenu-gtk-0.4.install libdbusmenu-18.10.20180917~bzr492+repack1/debian/gir1.2-dbusmenu-gtk-0.4.install --- libdbusmenu-18.10.20180917~bzr492+repack1/debian/gir1.2-dbusmenu-gtk-0.4.install 2018-07-16 11:14:39.0 +0200 +++ libdbusmenu-18.10.20180917~bzr492+repack1/debian/gir1.2-dbusmenu-gtk-0.4.install 1970-01-01 01:00:00.0 +0100 @@ -1 +0,0 @@ -usr/lib/*/girepository-1.0/DbusmenuGtk-0.4.typelib diff -Nru libdbusmenu-18.10.20180917~bzr492+repack1/debian/libdbusmenu-gtk4.install libdbusmenu-18.10.20180917~bzr492+repack1/debian/libdbusmenu-gtk4.install --- libdbusmenu-18.10.20180917~bzr492+repack1/debian/libdbusmenu-gtk4.install 2018-07-16 11:14:39.0 +0200 +++ libdbusmenu-18.10.20180917~bzr492+repack1/debian/libdbusmenu-gtk4.install 19
Bug#1043459: qiv: Drop Depends: libwmf0.2-7-gtk
Package: qiv Version: 2.3.3-1 Severity: important Control: block 967591 by -1 Please drop the Depends on libwmf0.2-7-gtk so that we can move forward with the blocked bug.
Bug#1035772:
I am going to NMU this with a git-based upstream version. kmplayer has several (build) dependencies that are deprecated and it blocks their removal unnecessarily. I am not attaching a debdiff because that is several MiB big.
Bug#967639: morla: depends on deprecated GTK 2
morla doe not seem to be used very much (see popcon). I do not think that upstream is going to move to a newer GTK version. Thus I suggest to remove the package.
Bug#1035772: kmplayer: FTBFS: Could NOT find KF5 (missing: DocTools)
Control: reopen -1 Now DocTools seems to be missing. libkf5kdelibs4support-dev should have been replaced with libkf5doctools-dev.
Bug#1035772: kmplayer: FTBFS: Could NOT find KF5 (missing: DocTools)
Uploading another NMU. debdiff is attached.diff -Nru kmplayer-0.12.0b+de96d9e/debian/changelog kmplayer-0.12.0b+de96d9e/debian/changelog --- kmplayer-0.12.0b+de96d9e/debian/changelog 2023-08-11 19:36:49.0 +0200 +++ kmplayer-0.12.0b+de96d9e/debian/changelog 2023-08-11 23:13:32.0 +0200 @@ -1,13 +1,20 @@ +kmplayer (1:0.12.0b+de96d9e-0.2) unstable; urgency=medium + + * Non-maintainer upload. + * Add Build-Depends: libkf5doctools-dev. (Closes: #1035772) + + -- Bastian Germann Fri, 11 Aug 2023 21:13:32 + + kmplayer (1:0.12.0b+de96d9e-0.1) unstable; urgency=medium * Non-maintainer upload. - * Import current git version. (Closes: #1035772) + * Import current git version. [ Simon McVittie ] * Don't build knpplayer. (Closes: #967558, #999459, #997118) * Depend on default-dbus-session-bus | dbus-session-bus (Closes: #836103) - -- Bastian Germann Fri, 11 Aug 2023 17:36:49 + + -- Bastian Germann Fri, 11 Aug 2023 17:36:49 + kmplayer (1:0.12.0b-3) unstable; urgency=medium diff -Nru kmplayer-0.12.0b+de96d9e/debian/control kmplayer-0.12.0b+de96d9e/debian/control --- kmplayer-0.12.0b+de96d9e/debian/control 2023-08-11 19:36:49.0 +0200 +++ kmplayer-0.12.0b+de96d9e/debian/control 2023-08-11 23:13:32.0 +0200 @@ -11,6 +11,7 @@ libphonon4qt5-dev, libkf5config-dev, libkf5coreaddons-dev, + libkf5doctools-dev, libkf5i18n-dev, kinit-dev, libkf5kio-dev,
Bug#967845: yersinia: depends on deprecated GTK 2
Please build with configure --disable-gtk and drop the build dependency.
Bug#967801: whysynth: depends on deprecated GTK 2
Control: tags -1 patch The plugin can be built without the GUI. But additionally to removing the build dependency libgtk2.0-dev you will need the attached patch.Description: AM_PATH_GTK_2_0 is not available without gtk-2.0+ development files --- --- whysynth-a/configure.ac 2017-07-01 22:23:28.0 +0200 +++ whysynth-b/configure.ac 2023-08-12 10:29:55.896200223 +0200 @@ -23,7 +23,6 @@ dnl Check for GTK+ with_gtk=no -AM_PATH_GTK_2_0(2.24.0, with_gtk='yes', AC_MSG_WARN([GUI will not be built; GTK+ 2.24 or later needed])) AM_CONDITIONAL(BUILD_GUI, test "x${with_gtk}" != 'xno') dnl developer functions
Bug#967243: acedb: depends on deprecated GTK 2
As only efetch lands in the binary packages, the build can be modified only to build that tool, which allows to drop libgtk2.0-dev.
Bug#1043510: RM: rox -- RoQA; dead upstream; depends on gtk2
Source: rox Severity: serious Version: 1:2.11-7 rox does not seem to be used a lot anymore. I intend to file a RM bug. If you have any reasons to keep it in Debian please voice them here. To get people's attention, I am filing as a serious bug and will reassign to the FTP team when the package is autoremoved from testing.
Bug#1043511: RM: fped -- RoQA; depends on gtk2; unmaintained; low popcon
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:fped Please remove fped. It is unmaintained both upstream and in Debian and depends on gtk2. It has a low popcon.
Bug#1043512: RM: langdrill -- ROM (team); depends on gtk2; low popcon
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:langdrill X-Debbugs-Cc: nil...@debian.org Please remove langdrill. It depends on gtk2 and has a very low popcon. The listed uploader is not active in Debian anymore.
Bug#1043514: RM: anypaper -- RoQA; depends on gtk2; unmaintained; low popcon
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:anypaper Please remove anypaper. It is unmaintained both upstream and in Debian and depends on gtk2, and has a low popcon.
Bug#967532: hydra: depends on deprecated GTK 2
Looking at its popcon, it seems as if hydra is primarily used via the command line interface. I suggest to drop hydra-gtk.
Bug#1043520: RM: gimp-dds -- RoQA; included in gimp; orphaned
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:gimp-dds Please remove gimp-dds. It is orphaned and was included in gimp as file-dds plugin with version 2.10.10. It is active in Debian's gimp configuration.
Bug#967339: fio: depends on deprecated GTK 2
On Wed, 11 Nov 2020 13:38:54 + Martin Steigerwald wrote: I would like to let Jens Axboe know about it, by replying to the thread, I´d put you on CC: gfio and GTK-3 https://www.spinics.net/lists/fio/msg08875.html Please remove the gfio package from Debian. I do not think anyboy will port to a newer gtk version.
Bug#967299: cwiid: depends on deprecated GTK 2
Please drop the binary package wmgui to get rid of GTK 2. It is by far not as often used as the library.
Bug#967508: gvidm: depends on deprecated GTK 2
Hi Matteo, Please consider removing the entire package. Upstream does not provide any changes since years and it is seldomly used. Thanks, Bastian
Bug#1043523: RM: bitmeter -- RoQA; unmaintained; depends on gtk2
Source: bitmeter Severity: serious Version: 1.2-4 X-Debbugs-Cc: d...@jones.dk bitmeter does not seem to be used a lot anymore. I intend to file a RM bug. If you have any reasons to keep it in Debian please voice them here. To get people's attention, I am filing as a serious bug and will reassign to the FTP team when the package is autoremoved from testing.
Bug#967679: packeth: depends on deprecated GTK 2
Please consider updating to the latest version 2.1 and only building the cli tool.
Bug#1043524: RM: spacezero -- RoQA; depends on gtk2; unmaintained; low popcon
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:spacezero Please remove spacezero. It is unmaintained in Debian (several not imported upstream releases, crash bug reports) and depends on gtk2. It has a low popcon and the Maintainer/Uploaders all appear to be absent.
Bug#1043525: RM: sweep -- RoQA; depends on gtk2; orphaned
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:sweep Please remove sweep. It is unmaintained upstream (last release in 2008) and orphaned, and depends on gtk2.
Bug#967259: depends on gtk2
Peter, I see you are packaging the new version 3. This is not ported to gtk3 either. I suggest to make the package a transitional package to grimripper.
Bug#967706: pommed: depends on deprecated GTK 2
Please just drop gpomme. The rest of the packages seem to be working without it.
Bug#967356: fyre: depends on deprecated GTK 2
Hi Stephen, Is it worth to keep such an ancient program as fyre in Debian? It might be time to drop it. Thanks for your consideration, Bastian
Bug#1043528: RM: tuxcmd -- RoQA; depends on gtk2; orphaned; alternative exists
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:tuxcmd Please remove tuxcmd. It is unmaintained upstream (last release in 2009) and orphaned, and depends on gtk2. With doublecmd, there is a good replacement that is still maintained.
Bug#1043534: RM: tuxcmd-modules -- RoQA; orphaned
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:tuxcmd-modules Control: block -1 by 1043528 Please remove tuxcmd-modules. It is unmaintained upstream (last release in 2009) and orphaned. Please only remove if tuxcmd is also removed.
Bug#967530: hoz: depends on deprecated GTK 2
I am uploading a NMU to DELAYED/10 in order to fix this. The debdiff is attached.diff -Nru hoz-1.65/debian/changelog hoz-1.65/debian/changelog --- hoz-1.65/debian/changelog 2018-10-17 09:47:43.0 + +++ hoz-1.65/debian/changelog 2023-08-12 11:17:35.0 + @@ -1,3 +1,13 @@ +hoz (1.65-3.1) unstable; urgency=medium + + * Non-maintainer upload. + * Remove hoz-gui. Closes: #967530 + * Remove explicit quilt (patches are part of the source format). + * Remove non-existing homepage. + * Clean hoz.1. + + -- Bastian Germann Sat, 12 Aug 2023 11:17:35 + + hoz (1.65-3) unstable; urgency=medium * Fixed partsize miscalculation. Closes: #499318 diff -Nru hoz-1.65/debian/control hoz-1.65/debian/control --- hoz-1.65/debian/control 2018-10-17 09:47:43.0 + +++ hoz-1.65/debian/control 2023-08-12 11:17:35.0 + @@ -2,9 +2,8 @@ Section: utils Priority: optional Maintainer: Miriam Ruiz -Build-Depends: debhelper, quilt, gettext, help2man, libgtk2.0-dev +Build-Depends: debhelper, gettext, help2man Standards-Version: 4.2.1.2 -Homepage: http://hoz.sourceforge.net/ Package: hoz Architecture: any @@ -12,12 +11,3 @@ Description: file splitter that uses the hacha file format HOZ is a file splitter, which uses the same file format as the popular 'Hacha' program. - -Package: hoz-gui -Architecture: any -Depends: hoz (= ${binary:Version}), ${shlibs:Depends}, ${misc:Depends} -Description: file splitter that uses the hacha file format - HOZ is a file splitter, which uses the same file format as the popular - 'Hacha' program. - . - This package includes the GUI interface for the program. diff -Nru hoz-1.65/debian/ghoz.xpm hoz-1.65/debian/ghoz.xpm --- hoz-1.65/debian/ghoz.xpm2018-10-17 09:47:31.0 + +++ hoz-1.65/debian/ghoz.xpm1970-01-01 00:00:00.0 + @@ -1,39 +0,0 @@ -/* XPM */ -static char *hoz[]={ -"32 32 4 1", -". c None", -"# c #00", -"b c #80", -"a c #c0c0c0", -"", -"..###...", -"##aaa##.", -"...#a###aaa###..", -"..###...#a#.", -".#a#", -"..#a#...", -"...#a#..", -"...##...#a#.", -".##aa#..#a#.", -"...##aa..#a#", -"..##.#a#.#a#", -".#aaa##...##.#a#", -".#aa#...#aa#", -"#aaa#...#aa#", -"#aaa#..#aaa#", -"#aaa#.##", -"#aaa###.", -"##..##..", -".##aa#..#aaa#...", -"...#aa###bb#aa##", -"##aaa#..", -".##a##b.", -"..###bb.", -"..bb#bbb", -"....", -"b...", -"...bb.bbb...", -"..b.", -".b..", -"....", -""}; diff -Nru hoz-1.65/debian/h2m/hoz.1 hoz-1.65/debian/h2m/hoz.1 --- hoz-1.65/debian/h2m/hoz.1 2018-10-17 09:47:43.0 + +++ hoz-1.65/debian/h2m/hoz.1 1970-01-01 00:00:00.0 + @@ -1,44 +0,0 @@ -.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.47.4. -.TH HOZ "1" "October 2018" "hoz 1.65" "User Commands" -.SH NAME -hoz \- file splitter that uses the hacha file format -.SH SYNOPSIS -.B hoz [-pvf] [-c size[K|M]] [-o outpath] inputfname -.TP -.B ghoz -.SH DESCRIPTION -HOZ is a file splitter, which uses the same file format as the popular 'Hacha' program. -.SH OPTIONS -.TP -\fB\-c\fR \fB\-\-cut\fR -cut (file\->pieces) -.TP -\fB\-p\fR \fB\-\-paste\fR -paste (pieces\->file) -.TP -\fB\-v\fR \fB\-\-verbose\fR -verbose output -.TP -\fB\-f\fR \fB\-\-force\fR -force overwrite of file when pasting -.TP -\fB\-o\fR \fB\-\-outpath\fR -specify an output directory -.TP -\fB\-h\fR \fB\-\-help\fR -print this help, then exit -.TP -\fB\-\-version\fR -print hoz program version number, then exit -.SH USAGE -There are two basic operations: cut and paste. Cut will 'split' a file in -pieces. The size of each piece is passed as an option. Each piece will have a -numeric extension, starting with 0. So for instance if you 'cut' a file called 'foo.iso', -the pieces will be named 'foo.iso.0', 'foo
Bug#1043398: closed by Bastian Germann (Re: Bug#1043398: bookworm-pu: package filezilla/3.63.0-1+deb12u1)
Am 12.08.23 um 18:52 schrieb Jonathan Wiltshire: Don't close release tracking bugs please; that will happen when the package is actually released. Oh, I am sorry. Actually, I wanted to close the RFS.
Bug#1043542: waybar: FTBFS on mips64el (test fails due to UTC time not available)
Source: waybar Version: 0.9.20-2 Severity: serious The build fails on mips64el due to: test: waybar start time: 15:11:25 duration: 0.02s result: killed by signal 6 SIGABRT command: MALLOC_PERTURB_=25 /<>/obj-mips64el-linux-gnuabi64/test/waybar_test --- stderr --- terminate called after throwing an instance of 'std::runtime_error' what(): UTC not found in timezone database
Bug#856421: RFA: gnokii -- fc4f45003af70b9edaaa93fd24a289b6
Control: retitle -1 ITA: gnokii -- Datasuite for mobile phone management I intend to adopt the package.
Bug#967674: optgeo: depends on deprecated GTK 2
Please consider switching to lcl=qt5 to build with qt5 interface.
Bug#967798: vmg: depends on deprecated GTK 2
Please consider switching to lcl=qt5 to build with qt5 interface.
Bug#967306: ddrescueview: depends on deprecated GTK 2
Please consider switching to lcl=qt5 to build with qt5 interface.
Bug#967318: dozzaqueux: depends on deprecated GTK 2
Please consider switching to lcl=qt5 to build with qt5 interface.
Bug#967782: transgui: depends on deprecated GTK 2
Please consider switching to lcl=qt5 to build with qt5 interface.
Bug#967384: gerbv: depends on deprecated GTK 2
Control: forwarded -1 https://github.com/gerbv/gerbv/pull/187 There is a gtk3 port available now. It will probably be released soon.
Bug#1044138: RM: pcmanx-gtk2 -- RoQA; dead upstream; depends on gtk2
Source: pcmanx-gtk2 Severity: serious Version: 1.3-2 pcmanx-gtk2 does not seem to be used a lot anymore. I intend to file a RM bug. If you have any reasons to keep it in Debian please voice them here. To get people's attention, I am filing as a serious bug and will reassign to the FTP team when the package is autoremoved from testing.
Bug#995339: Clarify complete d/copyright vs extra custom header for applicable licenses
Some months after I filed the bug, this issue was apparently handled by the Go team with https://wiki.debian.org/Static-Built-Using I have just found that by chance and suggest to promote this field via the Policy.
Bug#1072708: openafs: src/rx[gen] contains SUN RPC code under the original license
Am 03.07.24 um 05:23 schrieb Benjamin Kaduk: I do not see how it would be possible to replace this code in Debian before upstream can do so; this code is a core part of the functionality of the software and the files cannot be relicensed without the permission of all copyright holders. Upstream supports more OS than only Linux and most of the changes are portability changes. Trying a compile with the files replaced won't hurt. I am also a bit confused at why you chose to file this as severity: serious -- could you please clarify what part of policy is being violated or how it makes the package unsuitable for release? Assuming the license is non-free (which some people may doubt but this seems to be established in Debian) the package violates Policy §2.2.1 "Every package in main must comply with the DFSG"
Bug#1072708: openafs: src/rx[gen] contains SUN RPC code under the original license
Am 03.07.24 um 23:56 schrieb Benjamin Kaduk: On Wed, Jul 03, 2024 at 11:27:50PM +0200, Bastian Germann wrote: Am 03.07.24 um 05:23 schrieb Benjamin Kaduk: I do not see how it would be possible to replace this code in Debian before upstream can do so; this code is a core part of the functionality of the software and the files cannot be relicensed without the permission of all copyright holders. Upstream supports more OS than only Linux and most of the changes are portability changes. Trying a compile with the files replaced won't hurt. I think it would hurt; some of the chnages relate to security fixes, among other things. Can you point to a specific security fix that is not included in glibc or FreeBSD? I would like to report it to them in that case. I am also a bit confused at why you chose to file this as severity: serious -- could you please clarify what part of policy is being violated or how it makes the package unsuitable for release? Assuming the license is non-free (which some people may doubt but this seems to be established in Debian) the package violates Policy §2.2.1 "Every package in main must comply with the DFSG" Do you have any links handy for "this seems to be established in Debian"? Maybe a statement from ftpmaster? There is a bug waiting for a statement from ftpmaster: #1072165. Starting from scratch I'm only finding https://lists.debian.org/debian-legal/2003/08/msg00667.html from 2003 (and the corresponding bug, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=181493), neither of which really ends with a resounding conclusion, and which are quite old. The conclusion of bug #181493 was upstream's relicensing of the code.
Bug#1072708: openafs: src/rx[gen] contains SUN RPC code under the original license
Am 04.07.24 um 00:28 schrieb Benjamin Kaduk: Sounds like we might want to add this bug to the 'blocks' list for that one, then? Then you should change its title, too.
Bug#1061212: Please upgrade to llvm-toolchain-18
That version was the last to build on llvm-toolchain-17. Now that llvm-toolchain-18 is asked for, it should be a different one. I have update the git master to 3.1.61 but that fails to build currently and would appreciate someone to make the package build.
Bug#1072872: gtans: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. The debdiff is attached. gtans_1.99.0-2.2.debdiff Description: Binary data
Bug#1007621: jtex-base: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the debdiff attached. jtex-base_2.1-1.4.debdiff Description: Binary data
Bug#1072886: netscript-2.4: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the debdiff attached. netscript-2.4_5.5.5+nmu3.debdiff Description: Binary data
Bug#1076014: RM: python-ooolib -- RoQA; explicitly unmaintained; RC-buggy
Package: ftp.debian.org Severity: normal X-Debbugs-Cc: python-ooo...@packages.debian.org, r...@debian.org Control: affects -1 src:python-ooolib User: ftp.debian@packages.debian.org Usertags: remove Please remove python-ooolib from unstable. It did not make it to bookworm because RC fixes were actively removed by the only active uploader, who commented on the two RC bugs: "How is it unclear that noone seriously cares about this package? Old upstream version, popcon 4, ignored by the maintainer." So please remove the package.
Bug#1007062: scalable-cyrfonts: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the debdiff attached. scalable-cyrfonts_4.18+nmu2.debdiff Description: Binary data
Bug#1072883: openoffice.org-thesaurus-pl: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. Pleas find the debdiff attached. openoffice.org-thesaurus-pl_1.5-4.3.debdiff Description: Binary data
Bug#1072884: openoffice.org-hyphenation-pl: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the debdiff attached. openoffice.org-hyphenation-pl_3.0a-4.4.debdiff Description: Binary data
Bug#1051065: weex: d/copyright: Incorrect upstream source
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the debdiff attached. weex_2.8.4.2+really2.8.3-0.1.debdiff Description: Binary data
Bug#1055614: whereami: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the debdiff attached. whereami_0.3.34-0.6.debdiff Description: Binary data
Bug#1007677: libalgorithm-dependency-perl: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the debdiff attached. libalgorithm-dependency-perl_1.110-1.3.debdiff Description: Binary data
Bug#1007340: libapache2-mod-log-slow: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the debdiff attached. libapache2-mod-log-slow_1.0.8-3.1.debdiff Description: Binary data
Bug#1076048: golang-github-mvo5-goconfigparser: Two Maintainers
Source: golang-github-mvo5-goconfigparser Version: 0.2.2-1 Please move one of the contacts in Maintainer field to the Uploaders field.
Bug#1007460: libbiblio-isis-perl: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the debdiff attached. libbiblio-isis-perl_0.24-1.5.debdiff Description: Binary data
Bug#1007368: libclass-csv-perl: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the debdiff attached. libclass-csv-perl_1.03-2.4.debdiff Description: Binary data
Bug#1007520: libclass-pluggable-perl: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the debdiff attached. libclass-pluggable-perl_0.022-2.3.debdiff Description: Binary data
Bug#1007637: libdansguardian-perl: please consider upgrading to 3.0 source format
I am uploading a NMU to DELAYED/10 with the changes in the attached debdiff. libdansguardian-perl_0.6-2.2.debdiff Description: Binary data
Bug#1065335: gdebi: Install closes instantly if launched from .deb file dependency but works if GDebi is opened first
I am uploading a NMU to DELAYED/10 in order to fix this. The debdiff is attached. gdebi_0.9.5.7+nmu8.debdiff Description: Binary data
Bug#1063740: lxqt-archiver: Can't create .zip archive. "Failed to execute command." and "Archive not found" errors
I am uploading a NMU to DELAYED/10 in order to fix this. The debdiff is attached. lxqt-archiver_0.9.1-0.1.debdiff Description: Binary data
Bug#919684: ITP: python-jq -- Python bindings for jq
Control: owner -1 Michael Fladischer X-Debbugs-Cc: mich...@fladi.at Hi Michael, Thanks for packaging this as part of #1076144. Please check existing wnpp bugs before posting new RFP/ITP. I am setting you as the owner instead of Andrej. I guess he is fine with that. Please make sure that this bug is resolved as soon as your package hits the archive. Cheers, Bastian
Bug#1072870: kawari8: Please package with zip converted to orig tarball
I am uploading a NMU to DELAYED/10 in order to fix this. Please find the .debian.tar.xz attached which should be more helpful than a debdiff in this case. kawari8_8.2.8-11.1.debian.tar.xz Description: Binary data
Bug#1076473: bookworm-pu: package reprepro/5.3.1-1+deb12u2
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: repre...@packages.debian.org Control: affects -1 + src:reprepro [ Reason ] Users have asked for the #1056380 fix to be made available on bookworm so that they can use its reprepro version for managing Ubuntu repositories with zstd packages in them. unzstd is executed by reprepreo and can hang because of the way poll() is used. [ Impact ] Trivial patch is added, which changes one function parameter. [ Risks ] None. The change is in testing for quite some time and is reported to work. [ Checklist ] [x] *all* changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in stable [x] the issue is verified as fixed in unstable reprepro_5.3.1-1+deb12u2.debdiff Description: Binary data
Bug#1076543: RM: librm -- RoQA; RC-buggy; end-of-life
Package: ftp.debian.org User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:librm Control: block -1 by 1070701 Please remove librm. It is end-of-life and no longer needed when roger-router is removed.
Bug#1074272: gvm-libs: Depend on libssh's default flavor
I am uploading a NMU to DELAYED/10 in order to fix this. The debdiff is attached. gvm-libs_22.10.0-1.1.debdiff Description: Binary data
Bug#1077610: dnsviz: Drop m2crypto dependency
Source: dnsviz Version: 0.9.4-1 Please drop the (Build-)Depends on python3-m2crypto, which is not strictly needed for dnsviz. m2crypto should be removed from Debian because it is explicitly in maintenance mode. dnsviz is one of the last few reverse dependencies.
Bug#1077610: dnsviz: Drop m2crypto dependency
Control: tags -1 patch Please find a patch for this attached. dnsviz_0.9.4-1.1.debdiff Description: Binary data
Bug#1077849: parlatype-libreoffice-extension: Homepage points to spam site
Source: parlatype-libreoffice-extension Version: 3.1.1-2 Severity: important Please let the Homepage point to https://github.com/gkarsay/parlatype-libreoffice-extension instead of the spam site that it points to currently.
Bug#1074257: bird2: Depend on libssh's default flavor
I am uploading a NMU to fix this. The change is in the git repo.
Bug#1071970: pcre3 should not be part of trixie
pcre3 is still showing up with "reason: priority" as key package in https://udd.debian.org/cgi-bin/key_packages.yaml.cgi So this bug's severity will not take effect to autoremove it even when cfengine3 has migrated to testing. I cannot find the reason why the key packages script assigns a higher priority than optional. The overrides do not seem to raise the priority.
Bug#1071970: pcre3 should not be part of trixie
"Matthew Vernon" : > debian/control retains the now-historic Priority: important for libpcre3 > and libpcre3-udeb ; could that be it? All the pcre3 packages have Priority: optional with #1026214 being solved in the current testing/sid revision. libpcre3-dbg has extra.
Bug#1071970: pcre3 should not be part of trixie
Control: tags -1 d-i Am 06.08.24 um 20:14 schrieb Chris Hofstaedtler: libpcre3-udeb is indeed considered Priority: important and thus key. I'm sure release team will be happy to assist with the removal once cfengine3 has migrated. Thanks for the hint. Is there any reverse dependency in the installer that needs libpcre3-udeb?
Bug#1071970: pcre3 should not be part of trixie
Control: tags -1 patch I am including a patch to drop the libpcre3-udeb. Please consider applying so that the package can be autoremoved.diff -Nru pcre3-8.39/debian/changelog pcre3-8.39/debian/changelog --- pcre3-8.39/debian/changelog 2022-12-22 16:45:21.0 + +++ pcre3-8.39/debian/changelog 2024-08-06 21:21:54.0 + @@ -1,3 +1,10 @@ +pcre3 (2:8.39-15.1) unstable; urgency=medium + + * Non-maintainer upload + * Drop unused libpcre3-udeb that makes the package a key package + + -- Bastian Germann Tue, 06 Aug 2024 21:21:54 + + pcre3 (2:8.39-15) unstable; urgency=medium * Make currently-important packages optional as pcre3 is obsolete diff -Nru pcre3-8.39/debian/control pcre3-8.39/debian/control --- pcre3-8.39/debian/control 2022-12-22 16:45:21.0 + +++ pcre3-8.39/debian/control 2024-08-06 21:18:12.0 + @@ -29,19 +29,6 @@ . This package contains the runtime libraries. -Package: libpcre3-udeb -Section: debian-installer -Package-Type: udeb -Architecture: any -Priority: optional -Depends: ${shlibs:Depends}, ${misc:Depends} -Conflicts: libpcre3-dev (<= 4.3-3) -Description: Old Perl 5 Compatible Regular Expression Library - runtime files (udeb) - This is a library of functions to support regular expressions whose syntax - and semantics are as close as possible to those of the Perl 5 language. - . - This package contains the runtime libraries for the Debian Installer (udeb). - Package: libpcrecpp0v5 Section: libs Architecture: any diff -Nru pcre3-8.39/debian/libpcre3-udeb.install pcre3-8.39/debian/libpcre3-udeb.install --- pcre3-8.39/debian/libpcre3-udeb.install 2022-12-22 16:45:21.0 + +++ pcre3-8.39/debian/libpcre3-udeb.install 1970-01-01 00:00:00.0 + @@ -1,2 +0,0 @@ -debian/tmp/usr/lib/*/libpcre.so.* usr/lib -debian/tmp/usr/lib/*/libpcreposix.so.* usr/lib diff -Nru pcre3-8.39/debian/rules pcre3-8.39/debian/rules --- pcre3-8.39/debian/rules 2022-12-22 16:45:21.0 + +++ pcre3-8.39/debian/rules 2024-08-06 21:20:25.0 + @@ -129,7 +129,7 @@ sed -e 's/JIT/#/' debian/libpcre16-3.symbols.in > debian/libpcre16-3.symbols sed -e 's/JIT/#/' debian/libpcre32-3.symbols.in > debian/libpcre32-3.symbols endif - dh_makeshlibs -plibpcre3 --add-udeb="libpcre3-udeb" -V 'libpcre3 (>= 1:8.35)' -- -c4 + dh_makeshlibs -plibpcre3 -V 'libpcre3 (>= 1:8.35)' -- -c4 dh_makeshlibs -plibpcrecpp0v5 -V 'libpcrecpp0v5 (>= 7.7)' -- -c4 dh_makeshlibs -plibpcre16-3 -plibpcre32-3 -- -c4 dh_installdeb -a
Bug#967267: basilisk2: depends on deprecated GTK 2
The package builds without GTK 2, which will disable the GUI preferences editor. I think it should still be fine to use.
Bug#1056369: RM: glfer -- RoQA; orphaned; dead upstream; depends on gtk2
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:glfer Please remove glfer. I have announced the removal in #1054301. The package is orphaned and upstream also seems to have ceased development. It depends on the obsolete GTK 2.
Bug#1056370: RM: gscanbus -- RoQA; orphaned; dead upstream; depends on gtk2
Package: ftp.debian.org Severity: normal User: ftp.debian@packages.debian.org Usertags: remove Control: affects -1 + src:gscanbus Please remove gscanbus. I have announced the removal in #1054303. The package is orphaned and upstream also has ceased development. It depends on the obsolete GTK 2.
Bug#1056969: bookworm-pu: package swupdate/2022.12+dfsg-4+deb12u1
Package: release.debian.org Control: affects -1 + src:swupdate X-Debbugs-Cc: swupd...@packages.debian.org User: release.debian@packages.debian.org Usertags: pu Tags: bookworm Severity: normal [ Reason ] There is a local privilege escalation in swupdate package because the service's control socket has world-writable file permissions. [ Impact ] The rights of the swupdate daemon, which is usually used to run full system updates, can be aquired by any user on the system. [ Tests ] Run the service and check that the control socket is created with the reduced permission set. Also check that the service user "swupdate" is created. [ Risks ] None. [ Checklist ] [x] *all* changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in (old)stable [x] the issue is verified as fixed in unstablediff -Nru swupdate-2022.12+dfsg/debian/changelog swupdate-2022.12+dfsg/debian/changelog --- swupdate-2022.12+dfsg/debian/changelog 2023-04-04 15:36:06.0 +0200 +++ swupdate-2022.12+dfsg/debian/changelog 2023-11-27 11:10:38.0 +0100 @@ -1,3 +1,10 @@ +swupdate (2022.12+dfsg-4+deb12u1) bookworm; urgency=medium + + * Add swupdate system user + * Create the sockets for group use with SocketMode 0660 + + -- Bastian Germann Mon, 27 Nov 2023 11:10:38 +0100 + swupdate (2022.12+dfsg-4) unstable; urgency=medium * Enable backported libebgenv-dev diff -Nru swupdate-2022.12+dfsg/debian/control swupdate-2022.12+dfsg/debian/control --- swupdate-2022.12+dfsg/debian/control2023-04-04 15:25:36.0 +0200 +++ swupdate-2022.12+dfsg/debian/control2023-11-27 11:10:38.0 +0100 @@ -7,6 +7,7 @@ Build-Depends: debhelper-compat (= 13), dh-lua:native , dh-nodejs | dh-nodejs:any, + dh-sysuser, graphviz , liblua5.3-dev , libfdisk-dev, diff -Nru swupdate-2022.12+dfsg/debian/rules swupdate-2022.12+dfsg/debian/rules --- swupdate-2022.12+dfsg/debian/rules 2023-04-04 15:30:15.0 +0200 +++ swupdate-2022.12+dfsg/debian/rules 2023-11-27 11:10:38.0 +0100 @@ -13,7 +13,7 @@ export LUA_VERSION=5.3 export LUA_MODNAME=lua_swupdate export PKG_NAME=swupdate -export DH_WITH=--with lua +export DH_WITH=,lua export HAVE_LUA=y endif @@ -108,4 +108,4 @@ dh_missing --fail-missing %: - dh $@ $(DH_WITH) + dh $@ --with sysuser$(DH_WITH) diff -Nru swupdate-2022.12+dfsg/debian/swupdate.socket swupdate-2022.12+dfsg/debian/swupdate.socket --- swupdate-2022.12+dfsg/debian/swupdate.socket2023-04-04 14:41:04.0 +0200 +++ swupdate-2022.12+dfsg/debian/swupdate.socket2023-11-27 11:10:38.0 +0100 @@ -6,6 +6,8 @@ [Socket] ListenStream=/tmp/sockinstctrl ListenStream=/tmp/swupdateprog +SocketMode=0660 +SocketGroup=swupdate [Install] WantedBy=sockets.target diff -Nru swupdate-2022.12+dfsg/debian/swupdate.sysuser swupdate-2022.12+dfsg/debian/swupdate.sysuser --- swupdate-2022.12+dfsg/debian/swupdate.sysuser 1970-01-01 01:00:00.0 +0100 +++ swupdate-2022.12+dfsg/debian/swupdate.sysuser 2023-11-27 11:10:38.0 +0100 @@ -0,0 +1 @@ +swupdate defaults
Bug#1056970: bullseye-pu: package swupdate/2020.11-2+deb11u1
Package: release.debian.org Control: affects -1 + src:swupdate X-Debbugs-Cc: swupd...@packages.debian.org User: release.debian@packages.debian.org Usertags: pu Tags: bullseye Severity: normal [ Reason ] There is a local privilege escalation in swupdate package because the service's control socket has world-writable file permissions. [ Impact ] The rights of the swupdate daemon, which is usually used to run full system updates, can be aquired by any user on the system. [ Tests ] Run the service and check that the control socket is created with the reduced permission set. Also check that the service user "swupdate" is created. [ Risks ] None. [ Checklist ] [x] *all* changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in oldstable [x] the issue is verified as fixed in unstablediff -Nru swupdate-2020.11/debian/changelog swupdate-2020.11/debian/changelog --- swupdate-2020.11/debian/changelog 2021-01-19 08:56:14.0 +0100 +++ swupdate-2020.11/debian/changelog 2023-11-27 11:10:38.0 +0100 @@ -1,3 +1,10 @@ +swupdate (2020.11-2+deb11u1) bullseye; urgency=medium + + * Add swupdate system user + * Create the sockets for group use with SocketMode 0660 + + -- Bastian Germann Mon, 27 Nov 2023 11:10:38 +0100 + swupdate (2020.11-2) unstable; urgency=medium [ Bastian Germann ] diff -Nru swupdate-2020.11/debian/control swupdate-2020.11/debian/control --- swupdate-2020.11/debian/control 2021-01-19 08:55:59.0 +0100 +++ swupdate-2020.11/debian/control 2023-11-27 11:10:38.0 +0100 @@ -6,6 +6,7 @@ Nobuhiro Iwamatsu Build-Depends: debhelper-compat (= 13), dh-lua , + dh-sysuser, liblua5.2-dev , libfdisk-dev, latexmk , diff -Nru swupdate-2020.11/debian/rules swupdate-2020.11/debian/rules --- swupdate-2020.11/debian/rules 2020-12-28 09:58:21.0 +0100 +++ swupdate-2020.11/debian/rules 2023-11-27 11:10:38.0 +0100 @@ -13,7 +13,7 @@ export LUA_VERSION=5.2 export LUA_MODNAME=lua_swupdate export PKG_NAME=swupdate -export DH_WITH=--with lua +export DH_WITH=,lua export HAVE_LUA=y endif @@ -87,4 +87,4 @@ dh_missing --fail-missing %: - dh $@ $(DH_WITH) + dh $@ --with sysuser$(DH_WITH) diff -Nru swupdate-2020.11/debian/swupdate.socket swupdate-2020.11/debian/swupdate.socket --- swupdate-2020.11/debian/swupdate.socket 2020-12-28 09:58:21.0 +0100 +++ swupdate-2020.11/debian/swupdate.socket 2023-11-27 11:10:38.0 +0100 @@ -6,6 +6,8 @@ [Socket] ListenStream=/tmp/sockinstctrl ListenStream=/tmp/swupdateprog +SocketMode=0660 +SocketGroup=swupdate [Install] WantedBy=sockets.target diff -Nru swupdate-2020.11/debian/swupdate.sysuser swupdate-2020.11/debian/swupdate.sysuser --- swupdate-2020.11/debian/swupdate.sysuser1970-01-01 01:00:00.0 +0100 +++ swupdate-2020.11/debian/swupdate.sysuser2023-11-27 11:10:38.0 +0100 @@ -0,0 +1 @@ +swupdate defaults
Bug#967568: libayatana-indicator: NMU 0.9.3-1.1
Source: libayatana-indicator Version: 0.9.3-1 I am uploading a NMU to DELAYED/10 with the patch given in #967568, which is copied here.diff -Nru libayatana-indicator-0.9.3/debian/changelog libayatana-indicator-0.9.3/debian/changelog --- libayatana-indicator-0.9.3/debian/changelog 2022-10-26 00:25:25.0 +0200 +++ libayatana-indicator-0.9.3/debian/changelog 2023-11-13 15:27:03.0 +0100 @@ -1,3 +1,10 @@ +libayatana-indicator (0.9.3-1.1) unstable; urgency=medium + + * Non-maintainer upload. + * Drop GTK 2 support. (Closes: #967568). + + -- Bastian Germann Mon, 13 Nov 2023 15:27:03 +0100 + libayatana-indicator (0.9.3-1) unstable; urgency=medium * New upstream release. diff -Nru libayatana-indicator-0.9.3/debian/control libayatana-indicator-0.9.3/debian/control --- libayatana-indicator-0.9.3/debian/control 2022-10-26 00:25:25.0 +0200 +++ libayatana-indicator-0.9.3/debian/control 2023-11-13 15:25:22.0 +0100 @@ -16,7 +16,6 @@ xauth, xvfb, libglib2.0-dev (>= 2.37), - libgtk2.0-dev (>= 2.18), libgtk-3-dev (>= 2.91.3), libayatana-ido3-dev (>= 0.9.0), Standards-Version: 4.6.1 @@ -25,31 +24,6 @@ Vcs-Git: https://salsa.debian.org/debian-ayatana-team/libayatana-indicator.git Vcs-Browser: https://salsa.debian.org/debian-edu-ayatana-team/libayatana-indicator -Package: libayatana-indicator7 -Architecture: any -Depends: ${shlibs:Depends}, - ${misc:Depends}, -Multi-Arch: same -Description: panel indicator applet - shared library (GTK-2+ variant) - The Ayatana Indicators library contains information to build indicators - to go into modern desktops' indicator applets. - . - This package contains the library itself (GTK-2+ variant). - -Package: libayatana-indicator-dev -Section: libdevel -Architecture: any -Depends: ${shlibs:Depends}, - ${misc:Depends}, - libgtk2.0-dev (>= 2.12.0), - libayatana-indicator7 (= ${binary:Version}), -Description: panel indicator applet - library development files (GTK-2+) - The Ayatana Indicators library contains information to build indicators - to go into modern desktops' indicator applets. - . - This package contains files that are needed to build GTK-2+ applications - with Ayatana Indicator support. - Package: libayatana-indicator3-7 Architecture: any Depends: ${shlibs:Depends}, diff -Nru libayatana-indicator-0.9.3/debian/libayatana-indicator7.install libayatana-indicator-0.9.3/debian/libayatana-indicator7.install --- libayatana-indicator-0.9.3/debian/libayatana-indicator7.install 2021-11-18 12:51:24.0 +0100 +++ libayatana-indicator-0.9.3/debian/libayatana-indicator7.install 1970-01-01 01:00:00.0 +0100 @@ -1 +0,0 @@ -usr/lib/*/libayatana-indicator.so.* diff -Nru libayatana-indicator-0.9.3/debian/libayatana-indicator7.symbols libayatana-indicator-0.9.3/debian/libayatana-indicator7.symbols --- libayatana-indicator-0.9.3/debian/libayatana-indicator7.symbols 2019-11-20 15:18:48.0 +0100 +++ libayatana-indicator-0.9.3/debian/libayatana-indicator7.symbols 1970-01-01 01:00:00.0 +0100 @@ -1,36 +0,0 @@ -libayatana-indicator.so.7 libayatana-indicator7 #MINVER# -*Build-Depends-Package: libayatana-indicator-dev - ICON_SIZE@Base 0.6.0 - INDICATOR_NAMES_DATA@Base 0.6.0 - indicator_desktop_shortcuts_get_nicks@Base 0.6.0 - indicator_desktop_shortcuts_get_type@Base 0.6.0 - indicator_desktop_shortcuts_new@Base 0.6.0 - indicator_desktop_shortcuts_nick_exec@Base 0.6.0 - indicator_desktop_shortcuts_nick_exec_with_context@Base 0.6.0 - indicator_desktop_shortcuts_nick_get_name@Base 0.6.0 - indicator_image_helper@Base 0.6.0 - indicator_image_helper_update@Base 0.6.0 - indicator_image_helper_update_from_gicon@Base 0.6.0 - indicator_object_check_environment@Base 0.6.0 - indicator_object_entry_activate@Base 0.6.0 - indicator_object_entry_activate_window@Base 0.6.0 - indicator_object_entry_close@Base 0.6.0 - indicator_object_entry_is_visible@Base 0.6.0 - indicator_object_get_entries@Base 0.6.0 - indicator_object_get_environment@Base 0.6.0 - indicator_object_get_location@Base 0.6.0 - indicator_object_get_position@Base 0.6.0 - indicator_object_get_show_now@Base 0.6.0 - indicator_object_get_type@Base 0.6.0 - indicator_object_new_from_file@Base 0.6.0 - indicator_object_set_environment@Base 0.6.0 - indicator_object_set_visible@Base 0.6.0 - indicator_scroll_direction_get_type@Base 0.6.0 - indicator_service_get_type@Base 0.6.0 - indicator_service_manager_connected@Base 0.6.0 - indicator_service_manager_get_type@Base 0.6.0 - indicator_service_manager_new@Base 0.6.0 - indicator_service_manager_new_version@Base 0.6.0 - indicator_service_manager_set_refresh@Base 0.6.0 - indicator_service_new@Base 0.6.0 - indicator_service_new_version@Base 0.6.0 diff -Nru libayatana-indicator-0.9.3/debian/libayatana-indicator-dev.install libayatana-indicator-0.9.3/debian/libayat
Bug#1057356: pyjunitxml: FTBFS with Python 3.12
Source: pyjunitxml Version: 0.7-2 Severity: serious X-Debbugs-Cc: rosesecurityresea...@proton.me The unit tests fail with Python 3.12: test_xml_output (junitxml.tests.test_runner.TestXMLTestRunner.test_xml_output) Tests that runner properly gives XML output. ... FAIL == FAIL: test_console_output_fail (junitxml.tests.test_runner.TestXMLTestRunner.test_console_output_fail) Tests that failure is reported properly on stderr. -- Traceback (most recent call last): File ".pybuild/cpython3_3.12/build/junitxml/tests/test_runner.py", line 89, in test_console_output_fail self.assertTrue('Ran %d tests in ' % (num_tests,) in value, AssertionError: False is not true : Output was: Ran 5 tests in 0.002s FAILED (failures=1, errors=1, skipped=1, expected failures=1, unexpected successes=1) == FAIL: test_xml_output (junitxml.tests.test_runner.TestXMLTestRunner.test_xml_output) Tests that runner properly gives XML output. -- Traceback (most recent call last): File ".pybuild/cpython3_3.12/build/junitxml/tests/test_runner.py", line 75, in test_xml_output self.assertEqual(document.documentElement.getAttribute('tests'), AssertionError: '5' != '6' - 5 + 6
Bug#1057155: vonsh REJECT on amd64
I am uploading a NMU in order to fix this. The debdiff is attached.diff -Nru vonsh-1.0/debian/changelog vonsh-1.0+ds/debian/changelog --- vonsh-1.0/debian/changelog 2023-10-23 00:25:29.0 +0200 +++ vonsh-1.0+ds/debian/changelog 2023-12-03 22:34:55.0 +0100 @@ -1,3 +1,13 @@ +vonsh (1.0+ds-0.1) unstable; urgency=medium + + * Non-maintainer upload. + * Drop unnecessary version constraints for Build-Dependencies. + * debian/copyright: Align license names with Debian requirements. + * Add version suffix +ds to make the version greater than bookworm's. +(Closes: #1057155) + + -- Bastian Germann Sun, 03 Dec 2023 22:34:55 +0100 + vonsh (1.0-0.1) unstable; urgency=medium * Non-maintainer upload. diff -Nru vonsh-1.0/debian/control vonsh-1.0+ds/debian/control --- vonsh-1.0/debian/control2023-10-23 00:25:26.0 +0200 +++ vonsh-1.0+ds/debian/control 2023-12-03 22:34:41.0 +0100 @@ -2,7 +2,7 @@ Section: games Priority: optional Maintainer: Andrzej Urbaniak -Build-Depends: debhelper (>= 12), libsdl2-dev (>=2.0.9), libsdl2-image-dev (>=2.0.4), libsdl2-mixer-dev (>=2.0.4) +Build-Depends: debhelper (>= 12), libsdl2-dev, libsdl2-image-dev, libsdl2-mixer-dev Standards-Version: 4.3.0 Homepage: https://github.com/aurb/vonsh/ diff -Nru vonsh-1.0/debian/copyright vonsh-1.0+ds/debian/copyright --- vonsh-1.0/debian/copyright 2019-08-25 10:40:07.0 +0200 +++ vonsh-1.0+ds/debian/copyright 2023-12-03 22:34:55.0 +0100 @@ -5,7 +5,7 @@ Files: * Copyright: 2019 Andrzej Urbaniak -License: MIT +License: Expat Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights @@ -26,7 +26,7 @@ Files: inc/pcg_basic.h src/pcg_basic.c Copyright: 2014 Melissa O'Neill -License: Apache-License-Version-2.0 +License: Apache-2.0 /usr/share/common-licenses/Apache-2.0 Files: usr/share/games/vonsh/board_tiles.png
Bug#1055387: jbig2dec: CVE-2023-46361
Control: tags -1 patch Please use the patch at https://git.ghostscript.com/?p=jbig2dec.git;a=commit;h=ee53a7e4bc7819d32e8c0b2057885bcc97586bf3
Bug#1051166: FTBFS with doxygen 1.9.8
Please note that this issue keeps doxygen from migrating to testing, which in turn keeps llvm-toolchain-14 in the key packages and from being removed.
Bug#1053153: RM: gtk-sharp2 -- RoQA; RC-buggy; dead upstream; depends on gtk2
Control: tags -1 - moreinfo Those packages do not matter because they are already removed.
Bug#1053166: RM: nuget -- RoQA; ancient version; orphaned
Control: tags -1 - moreinfo Those packages do not matter because they are already removed.