Bug#832495: libreoffice: Extremely slow to redraw UI.

[Rene Engelhard]

Hi,

On Tue, Jul 26, 2016 at 02:28:08PM +0800, Andrew King wrote:
> On 26/07/16 14:14, Rene Engelhard wrote:
> >>... installing libreoffice-gtk3 also fixes this ...
> >OK, interesting. That would even mean that this is not a that important bug 
> >per se
> >because "normal" configurations will have -gtk(3) installed/used.
> would there be a reason that I needed to install it manually? (I run xfce)

Well, maybe, -gnome Recommends -gtk3 (before that it depended on -gtk). But
that of course doesn't help if you don't install libreoffice-gnome. (The tasks
from the installer afaics install -gtk in xfce-desktop, though, as -gnome
and thus -gtk3 for gnome desktops)

But AFAICR LO takes gtk3 in precedence over gtk if both (or obviously if only 
gtk3 is
installed) are installed.

So yes, if you install stuff manually you need to install this one manually, 
too,
especially as it's for a "old" gtk version.

> >>same issues as comment 6 (poor anti-aliasing, and ugly fonts).
> >Subjective :)
> Possibly ;) - (though this is less annoying than the slowness).
> >>The changelog for fedora seems to have a lot of gtk3 related changes. 
> >>https://pkgs.org/fedora-24/fedora-updates-x86_64/libreoffice-5.1.5.1-1.fc24.x86_64.rpm.html#changelog
> >many of whose are already in 5.1.5 rc1 (and will be in 5.2.0). I am not 
> >going to backport
> >changes like this to the dead-end 5.1.5 in any case, 5.2.0 will be uploaded 
> >to unstable
> >soon (~ 2 weeks) because 5.2.x is what is aimed for stretch.
> Fair enough, I'll check again then. Can be closed (for now).

5.2.0 rc3 is in experimental. You can already try.
(only a rc4 is planned until the final, see 
https://wiki.documentfoundation.org/ReleasePlan/5.2)

Regards,

Rene

Bug#817616: perlpanel: Removal of debhelper compat 4

[Logan Rosen]

Control: tags -1 patch

Dear Maintainer,

In Ubuntu, the attached patch was applied to achieve the following:

  * debian/compat: Bump to 9.
  * debian/control:
- Build-depend on debhelper (>= 9).
- Depend on ${misc:Depends}.
  * debian/rules:
- Add recommended build-arch and build-indep targets.
- Use dh_prep instead of dh_clean -k.

Thanks for considering the patch.

Logan Rosen
diff -u perlpanel-0.9.1+cvs20051225/debian/rules perlpanel-0.9.1+cvs20051225/debian/rules
--- perlpanel-0.9.1+cvs20051225/debian/rules
+++ perlpanel-0.9.1+cvs20051225/debian/rules
@@ -2,7 +2,9 @@
 
 TMP=$(CURDIR)/debian/perlpanel
 
-build: patch build-stamp
+build: build-arch build-indep
+build-arch: patch build-stamp
+build-indep: patch build-stamp
 build-stamp:
 	dh_testdir
 	$(MAKE) PREFIX=/usr LIBDIR=/usr/share/perlpanel/
@@ -20,7 +22,7 @@
 install-stamp: build
 	dh_testdir
 	dh_testroot
-	dh_clean -k
+	dh_prep
 	$(MAKE) install DESTDIR=$(TMP) PREFIX=/usr LIBDIR=/usr/share/perlpanel/
 	#Fix b0rken permissions in the upstream tarball:
 	find $(TMP)/usr/share/icons/hicolor/48x48/ -name '*png' -exec chmod 644 \{\} \;
@@ -65 +67 @@
-.PHONY: build clean binary-indep binary-arch binary patch unpatch
+.PHONY: build build-arch build-indep clean binary-indep binary-arch binary patch unpatch
diff -u perlpanel-0.9.1+cvs20051225/debian/control perlpanel-0.9.1+cvs20051225/debian/control
--- perlpanel-0.9.1+cvs20051225/debian/control
+++ perlpanel-0.9.1+cvs20051225/debian/control
@@ -1,13 +1,13 @@
 Source: perlpanel
 Section: x11
 Priority: optional
 Maintainer: Marc 'HE' Brockschmidt 
-Build-Depends: debhelper (>= 4), dpatch, gettext, libgtk2-perl, libgtk2-gladexml-perl, libgnome2-wnck-perl, libxml-simple-perl, liblocale-gettext-perl
+Build-Depends: debhelper (>= 9), dpatch, gettext, libgtk2-perl, libgtk2-gladexml-perl, libgnome2-wnck-perl, libxml-simple-perl, liblocale-gettext-perl
 Standards-Version: 3.7.3
 
 Package: perlpanel
 Architecture: all
-Depends: perl (>= 5.8.0), libglib-perl, libgtk2-perl (>= 1:1.042-2), libgtk2.0-0 (>= 2.4), libgnome2-wnck-perl, libxml-simple-perl, libxml-parser-perl, libgtk2-gladexml-perl, liblocale-gettext-perl, libdate-manip-perl, libx11-freedesktop-desktopentry-perl, hicolor-icon-theme
+Depends: ${misc:Depends}, perl (>= 5.8.0), libglib-perl, libgtk2-perl (>= 1:1.042-2), libgtk2.0-0 (>= 2.4), libgnome2-wnck-perl, libxml-simple-perl, libxml-parser-perl, libgtk2-gladexml-perl, liblocale-gettext-perl, libdate-manip-perl, libx11-freedesktop-desktopentry-perl, hicolor-icon-theme
 Recommends: libaudio-mixer-perl, libgnome2-vfs-perl, libgtk2-traymanager-perl, liburi-perl, libxmms-perl
 Suggests: vorbis-tools, fortune-mod, ssh
 Description: lean menu and launcher panel written in Perl and Gtk2
diff -u perlpanel-0.9.1+cvs20051225/debian/compat perlpanel-0.9.1+cvs20051225/debian/compat
--- perlpanel-0.9.1+cvs20051225/debian/compat
+++ perlpanel-0.9.1+cvs20051225/debian/compat
@@ -1 +1 @@
-4
+9

Bug#832495: libreoffice: Extremely slow to redraw UI.

[Andrew King]

Hi,

Please see more info below. (Also, please note that the url for the 
video has changed to remove the visible docs - 
https://www.dropbox.com/s/hleno1uht054uor/Screencast%202016-07-26%2013%3A19%3A37.mp4?dl=0 
)


Also it seems a workaround is to install libreoffice-gtk3.

On 26/07/16 13:16, Rene Engelhard wrote:

tag 832495 + moreinfo
tag 832495 + unreproducible
thanks

Hi,

On Tue, Jul 26, 2016 at 09:53:07AM +0800, Andrew King wrote:

After upgrading libreoffice, ui is extremely slow to redraw, almost to the 
point of unusable. (Hence - important).
you are aware that the upgrade to 5.1.5 is already > 5 days old and noone 
complained so far? If it was a general problem and/or a problem with
the nvidia drivers probably people would already have filed a bug...

https://bugzilla.redhat.com/show_bug.cgi?id=1303562

The same issue is reported here. - and now that I have found this bug 
report, installing libreoffice-gtk3 also fixes this, but I'm left with 
the same issues as comment 6 (poor anti-aliasing, and ugly fonts).


The changelog for fedora seems to have a lot of gtk3 related changes. 
https://pkgs.org/fedora-24/fedora-updates-x86_64/libreoffice-5.1.5.1-1.fc24.x86_64.rpm.html#changelog

This started happening after an apt-get upgrade. Now opening Libre-office (any 
component) is exceptionally slow. I've uploaded a screencast of how bad is at 
(moved - see above link) . Previous version did not have this problem.

I don't see slowness in your video?
I can see the row numbers drawn in groups of 5 down the side. followed a 
second or more later by the cells themselves. It takes a total of 4 
seconds to draw the UI for calc. (for comparison see 
https://www.dropbox.com/s/c0dyd38hryk2ryk/Screencast%202016-07-26%2013%3A39%3A47.mp4?dl=0 
, which starts instantly as it did in the previous version - but has bad 
anti-aliasing. )


Note that it also has this slowness when editing cells, and moving desktops.

I have reset LO preferences, and tried various options for hardware 
acceleration, etc. No change.

Also OpenGL off?

Yes, have tried all the gl options I could find.

This is on a very high spec'd machine (16 core, 64GB ram, Nvidia Quadro K4200), 
I am using the binary nvidia drivers, but don't have the option to use anything 
else at the moment.

There's always the option of not using those. There's actually no reason to use
those, imho. Try with the free drivers, and if the problem goes away fine.

(Offtopic)

I have previously tried the noveau drivers, and (unfortunately) they're 
not comparable (at all) in performance. I need to visualise 
multi-gigabyte 3d Datasets, which results in tearing, crashes, and hangs 
with the noveau drivers.

Needless to say, works fine here. (Intel.)

moreinfo, unreproducible. I "hate" such type of "bugs" because there's nothing
really to do here, you use a proprietary driver not in Debian and noone really
can do something about it.


I'm not a fan either, but I don't have the choice in this case.

Regards,
Andrew

Bug#832495: libreoffice: Extremely slow to redraw UI.

[Andrew King]

Hi Rene,

On 26/07/16 14:14, Rene Engelhard wrote:

... installing libreoffice-gtk3 also fixes this ...

OK, interesting. That would even mean that this is not a that important bug per 
se
because "normal" configurations will have -gtk(3) installed/used.

would there be a reason that I needed to install it manually? (I run xfce)


same issues as comment 6 (poor anti-aliasing, and ugly fonts).

Subjective :)

Possibly ;) - (though this is less annoying than the slowness).

The changelog for fedora seems to have a lot of gtk3 related changes. 
https://pkgs.org/fedora-24/fedora-updates-x86_64/libreoffice-5.1.5.1-1.fc24.x86_64.rpm.html#changelog

many of whose are already in 5.1.5 rc1 (and will be in 5.2.0). I am not going 
to backport
changes like this to the dead-end 5.1.5 in any case, 5.2.0 will be uploaded to 
unstable
soon (~ 2 weeks) because 5.2.x is what is aimed for stretch.

Fair enough, I'll check again then. Can be closed (for now).

Regards,
Andrew

Bug#832495: libreoffice: Extremely slow to redraw UI.

[Rene Engelhard]

Hi,

On Tue, Jul 26, 2016 at 02:03:30PM +0800, Andrew King wrote:
> >On Tue, Jul 26, 2016 at 09:53:07AM +0800, Andrew King wrote:
> >>After upgrading libreoffice, ui is extremely slow to redraw, almost to the 
> >>point of unusable. (Hence - important).
> >>you are aware that the upgrade to 5.1.5 is already > 5 days old and noone 
> >>complained so far? If it was a general problem and/or a problem with
> >>the nvidia drivers probably people would already have filed a bug...
> https://bugzilla.redhat.com/show_bug.cgi?id=1303562
> 
> The same issue is reported here. - and now that I have found this bug

OK.

> report, installing libreoffice-gtk3 also fixes this, but I'm left with the

OK, interesting. That would even mean that this is not a that important bug per 
se
because "normal" configurations will have -gtk(3) installed/used.

> same issues as comment 6 (poor anti-aliasing, and ugly fonts).

Subjective :)

> The changelog for fedora seems to have a lot of gtk3 related changes. 
> https://pkgs.org/fedora-24/fedora-updates-x86_64/libreoffice-5.1.5.1-1.fc24.x86_64.rpm.html#changelog

many of whose are already in 5.1.5 rc1 (and will be in 5.2.0). I am not going 
to backport
changes like this to the dead-end 5.1.5 in any case, 5.2.0 will be uploaded to 
unstable
soon (~ 2 weeks) because 5.2.x is what is aimed for stretch.

Regards,

Rene

Bug#776963: please document that /etc/default/tmpfs is ignored with systemd

[Nicolas Le Cam]

On Tue, 3 Feb 2015 17:16:35 +0100 Peter Palfrader  wrote:
> Bonus points for pointing the admin to alternative ways of achieving
> what she wants.

# systemctl link /usr/share/systemd/tmp.mount
Created symlink /etc/systemd/system/tmp.mount → /usr/share/systemd/tmp.mount.

See systemd (220-6) and bug #783509 for details
Thanks for pointing this "evolution" to me, didn't noticed my tmpfs disappeared.

regards,
Nicolas

Bug#832495: libreoffice: Extremely slow to redraw UI.

[Rene Engelhard]

tag 832495 + moreinfo
tag 832495 + unreproducible
thanks

Hi,

On Tue, Jul 26, 2016 at 09:53:07AM +0800, Andrew King wrote:
> After upgrading libreoffice, ui is extremely slow to redraw, almost to the 
> point of unusable. (Hence - important). 

>ou are aware that the upgrade to 5.1.5 is already > 5 days old and
noone complained so far? If it was a general problem and/or a problem with
the nvidia drivers probably people would already have filed a bug...

> This started happening after an apt-get upgrade. Now opening Libre-office 
> (any component) is exceptionally slow. I've uploaded a screencast of how bad 
> is at 
> https://www.dropbox.com/s/4a1i99gm1kqc2q6/Screencast%202016-07-26%2009%3A27%3A33.mp4?dl=0
>  . Previous version did not have this problem. 

I don't see slowness in your video?

> I have reset LO preferences, and tried various options for hardware 
> acceleration, etc. No change.

Also OpenGL off?

> This is on a very high spec'd machine (16 core, 64GB ram, Nvidia Quadro 
> K4200), I am using the binary nvidia drivers, but don't have the option to 
> use anything else at the moment.

There's always the option of not using those. There's actually no reason to use
those, imho. Try with the free drivers, and if the problem goes away fine.

Needless to say, works fine here. (Intel.)

moreinfo, unreproducible. I "hate" such type of "bugs" because there's nothing
really to do here, you use a proprietary driver not in Debian and noone really
can do something about it.

Regards,

Rene

Bug#832499: ITP: apertium-mlt-ara -- Apertium translation data for the Maltese-Arabic pair

[Kartik Mistry]

Package: wnpp
Severity: wishlist
Owner: Kartik Mistry 

* Package name: apertium-mlt-ara
  Version : 0.2.0
  Upstream Author : Kevin Brubeck Unhammer ,
Francis M. Tyers ,
Maria Fronczak .
* URL : http://www.apertium.org/
* License : GPL-2+
  Programming Lang: 
  Description : Apertium translation data for the Maltese-Arabic pair

Data package providing Apertium language resources for translating
between the Maltese and Arabic languages.

-- 
Kartik Mistry | IRC: kart_
{0x1f1f, kartikm}.wordpress.com


signature.asc
Description: PGP signature

Bug#832489: tzdata-java: The Debian 8 package tzdata-java without support openjdk8

[Aurelien Jarno]

control: reassign -1 openjdk-8
control: retitle -1 openjdk-8-jre-headless doesn't provide tzdb.dat

On 2016-07-26 07:34, Семёнов Артём Игоревич wrote:
> Package: tzdata-java
> Version: 2016f-0+deb8u1
> Severity: important
> 
> Dear Maintainer,
> 
> 
> The Debian 8 package tzdata-java without support openjdk8. The package 
> doesn't include timezone data-base file tzdb.dat

On stretch/sid this file is provided by openjdk-8-jre-headless. I guess
that should be the same for jessie. Reassigning the bug.

-- 
Aurelien Jarno  GPG: 4096R/1DDD8C9B
aurel...@aurel32.net http://www.aurel32.net

Bug#832498: ITP: apertium-kaz-tat -- Apertium translation data for the Kazakh-Tatar pair

[Kartik Mistry]

Package: wnpp
Severity: wishlist
Owner: Kartik Mistry 

* Package name: apertium-kaz-tat
  Version : 0.2.1
  Upstream Author : Nathan Maxson,
Francis M. Tyers ,
Jonathan N. Washington ,
Ilnar Salimzyan ,
Kevin Brubeck Unhammer ,
Qdinar .
* URL : http://www.apertium.org/
* License : GPL-3
  Programming Lang: 
  Description : Apertium translation data for the Kazakh-Tatar pair

Data package providing Apertium language resources for translating
between the Kazakh and Tatar languages.

-- 
Kartik Mistry | IRC: kart_
{0x1f1f, kartikm}.wordpress.com


signature.asc
Description: PGP signature

Bug#832497: ITP: apertium-is-sv -- Apertium translation data for the Icelandic-Swedish pair

[Kartik Mistry]

Package: wnpp
Severity: wishlist
Owner: Kartik Mistry 

* Package name: apertium-is-sv
  Version : 0.1.0
  Upstream Author : Tihomir Rangelov ,
Francis M. Tyers ,
Kevin Brubeck Unhammer ,
Trond Trosterud 
* URL : http://www.apertium.org/
* License : GPL-2
  Programming Lang: 
  Description : Apertium translation data for the Icelandic-Swedish pair

Data package providing Apertium language resources for translating
between the Icelandic and Swedish languages.

-- 
Kartik Mistry | IRC: kart_
{0x1f1f, kartikm}.wordpress.com


signature.asc
Description: PGP signature

Bug#825342: mips/mipsel: make sure all packages built with fpxx enabled

[YunQiang Su]

On Sat, Jul 23, 2016 at 5:06 PM, Emilio Pozuelo Monfort
 wrote:
> On 09/06/16 21:13, Emilio Pozuelo Monfort wrote:
>> On 07/06/16 19:38, YunQiang Su wrote:
>>> After the 1st step of binNMU of mipsel (mips is still running),
>>
>> mips is finally catching up.
>>
>>> We still have these package having problem:
>>
>>> geoclue: give up
>>> libhtp: give up
>>
>> Not sure what you mean by "give up". Did you see my question in the previous 
>> mail?
>>
>>> libc++: clang not enable FPXX by default 
>>
>> Did you file a bug for this?
>>
>>> The attachment is the list --- more than 3000 packages.
>>> Sorry for the previous wrong estimation.
>>
>> That list contains e.g. gtk+3.0, but that was rebuilt 8 days ago. Why is it 
>> on
>> the list? I thought we had been building with FPXX enabled for months. I'm
>> wondering if this 3k list is accurate or there are many false positives in 
>> there.
>
> Ping?

Yes. It is a problem. It is due to my script detect some wrong files.

While it seems that FPXX doesn't really stop our process to MIPS32r2,
as we have some more Octeon machines.

So this is out release goal, while not need binNMU now.

>
> Cheers,
> Emilio



-- 
YunQiang Su

Bug#832456: elfutils: improve handling of DEB_BUILD_OPTIONS=nocheck

[Helmut Grohne]

Hi Kurt,

On Mon, Jul 25, 2016 at 08:36:41PM +0200, Kurt Roeckx wrote:
> This all looks fine.  I'm just wondering why gcc-multilib is a
> problem in your case since it was already any-amd64.  I'm also
> wondering if any other arches need it, like x32 and ppc64el.

Well, kfreebsd-amd64 matches any-amd64 and I'm cross building for that.

As far as I understand, Debian's ppc64el doesn't do -m32.

x32 does understand -m32.

Given that the most recent libtool build succeeded on both amd64 and x32
and that both builds skipped 22 tests, I guess that -m32 is not needed
on x32 (and maybe no longer needed on amd64 either).

Helmut

Bug#832496: gdk-pixbuf: ico loader crashes when loading crafted file ico loader crashes when loading crafted file

[Salvatore Bonaccorso]

Source: gdk-pixbuf
Version: 2.31.1-1
Severity: important
Tags: security upstream
Forwarded: https://bugzilla.gnome.org/show_bug.cgi?id=769170

>From upstream bug report, and since there is no CVE assigned, for
better trackability:

> There's a crash when loading specially crafted ico files.
> 
> See http://seclists.org/oss-sec/2016/q3/61
> 
> I have reproduced this with 2.30.7, 2.31.1 and 2.35.2. It doesn't
> happen with 2.26.1. It's easily reproducible with tests/pixbuf-read.
> 
> Here's the backtrace for 2.35.2:
> 
> Program received signal SIGSEGV, Segmentation fault.
> 0x754ea414 in OneLine32 (context=0x611f50) at io-ico.c:596
> 596Pixels[X * 4 + 0] = context->LineBuf[X * 4 + 2];
> (gdb) bt
> #0  0x754ea414 in gdk_pixbuf__ico_image_load_increment 
> (context=0x611f50) at io-ico.c:596
> #1  0x754ea414 in gdk_pixbuf__ico_image_load_increment 
> (context=0x611f50) at io-ico.c:807
> #2  0x754ea414 in gdk_pixbuf__ico_image_load_increment 
> (data=0x611f50, buf=0x60fc52 "", size=0, error=0x7fffe438) at io-ico.c:898
> #3  0x77bc4695 in gdk_pixbuf_loader_load_module 
> (loader=loader@entry=0x60f400 [GdkPixbufLoader], 
> image_type=image_type@entry=0x0, error=error@entry=0x7fffe438) at 
> gdk-pixbuf-loader.c:443
> #4  0x77bc4f20 in gdk_pixbuf_loader_close 
> (loader=loader@entry=0x60f400 [GdkPixbufLoader], 
> error=error@entry=0x7fffe488)
> at gdk-pixbuf-loader.c:808
> #5  0x00400ac6 in main (err=0x7fffe488, len=70, bytes=0x60cdf0 
> "") at pixbuf-read.c:35
> #6  0x00400ac6 in main (argc=, argv=) 
> at pixbuf-read.c:75

Regards,
Salvatore

Bug#827111: jessie-pu: package exim4/4.84.2-2

[Salvatore Bonaccorso]

Hi Adam,

On Mon, Jul 25, 2016 at 08:50:47PM +0200, Salvatore Bonaccorso wrote:
> Hi Adam,
> 
> On Mon, Jul 25, 2016 at 07:28:33PM +0100, Adam D. Barratt wrote:
> > Hi,
> > 
> > On Mon, 2016-07-25 at 20:14 +0200, Salvatore Bonaccorso wrote:
> > > Hi Adam,
> > > 
> > > On Mon, Jul 25, 2016 at 06:54:08PM +0100, Adam D. Barratt wrote:
> > > > [CC += team@security]
> > > > 
> > > > On Mon, 2016-07-25 at 19:35 +0200, Andreas Metzler wrote:
> > > > > now we have 4.84.2-1+deb8u1 in stable security and 4.84.2-2 in spu 
> > > > > would
> > > > > overwrite it at the next stable release. How do I fix this properly?
> > [...]
> > > Since we claimed 4.84.2-2+deb8u1 in the DSA, would it help if we just
> > > redo the update, push the packages? (without further announce, since
> > > that was the claimed version)?
> > > 
> > > Attached how that would look like with debdiff against 4.84.2-2.
> > 
> > If you're happy to do so, that looks good to me; thanks.
> 
> I just have uploaded 4.84.2-2+deb8u1 and will dak install the builds.
> Hope no user will complain.

FTR, this has been done. 

Regards,
Salvatore

Bug#832494: aqemu: Description need to be updated

[Ignace Mouzannar]

Hi,

On Mon, Jul 25, 2016 at 9:51 PM, Zhang Jingqiang  wrote:
>
> Hello,
>The Qt4 based description need to be replaced.

Nice catch. I will update this right away.

Cheers,
 Ignace M

Bug#832062:

[Jacob's PC Tune-up]

I don't think it came from modarchive in the first place, it was added 
to the media repo in 2002. 
(https://sourceforge.net/p/supertuxkart/code/492/log/?path=/trunk/tuxkart/mods/Boom_boom_boom.mod)
 
If it was, the terms might have been different 13 years ago, the terms 
from back then should be checked. 
(http://wayback.archive.org/web/2002*/http://www.modarchive.com/)

Bug#817632: ptex-base: Removal of debhelper compat 4

[Logan Rosen]

Control: tags -1 patch

Dear Maintainer,

In Ubuntu, the attached patch was applied to achieve the following:

  * debian/compat: Bump to 9.
  * debian/control: Build-depend on debhelper (>= 9).
  * debian/rules:
- Use dh_prep instead of dh_clean -k.
- Add recommended build-arch and build-indep targets.

Thanks for considering the patch.

Logan Rosen
diff -u ptex-base-2.5/debian/rules ptex-base-2.5/debian/rules
--- ptex-base-2.5/debian/rules
+++ ptex-base-2.5/debian/rules
@@ -22,7 +22,9 @@
 
 	touch configure-stamp
 
-build: configure-stamp build-stamp
+build: build-arch build-indep
+build-arch: configure-stamp build-stamp
+build-indep: configure-stamp build-stamp
 build-stamp:
 	dh_testdir
 
@@ -42,7 +44,7 @@
 install: build
 	dh_testdir
 	dh_testroot
-	dh_clean -k
+	dh_prep
 	dh_installdirs
 
 	# Add here commands to install the package into debian/ptex-base.
@@ -120 +122 @@
-.PHONY: build clean binary-indep binary-arch binary install configure
+.PHONY: build build-arch build-indep clean binary-indep binary-arch binary install configure
diff -u ptex-base-2.5/debian/control ptex-base-2.5/debian/control
--- ptex-base-2.5/debian/control
+++ ptex-base-2.5/debian/control
@@ -2,7 +2,7 @@
 Section: tex
 Priority: optional
 Maintainer: Masayuki Hatta (mhatta) 
-Build-Depends: debhelper (>> 4.0.0), tex-common
+Build-Depends: debhelper (>= 9), tex-common
 Standards-Version: 3.7.3
 
 Package: ptex-base
diff -u ptex-base-2.5/debian/compat ptex-base-2.5/debian/compat
--- ptex-base-2.5/debian/compat
+++ ptex-base-2.5/debian/compat
@@ -1 +1 @@
-4
+9

Bug#823868: closed by Yves-Alexis Perez (Bug#823868: fixed in greybird-gtk-theme 3.18.0+20160720.7b72fea.gtk320-1)

[Jeremy Bicha]

Control: fixed -1 murrine-themes/0.98.11

On Mon, Jul 25, 2016 at 4:08 PM, Karagkiaouris Diamantis
 wrote:
> Unfortunately the problem exist in the latest available in stretch repo:
>
> Package: murrine-themes
> Version: 0.98.10

Yes, bugs are fixed in unstable and take several days before the fixes
make it to "testing" ("stretch" currently). In this case, the Greybird
theme will most likely be fixed in stretch in about 5 days.

https://wiki.debian.org/DebianTesting

Thanks,
Jeremy

Bug#817631: psignifit: Removal of debhelper compat 4

[Logan Rosen]

Control: tags -1 patch

Dear Maintainer,

In Ubuntu, the attached patch was applied to achieve the following:

  * debian/compat: Bump to 9.
  * debian/control:
- Build-depend on debhelper (>= 9).
- Depend on ${misc:Depends}.
  * debian/rules: Switch to dh sequencer.

Thanks for considering the patch.

Logan Rosen
diff -u psignifit-2.5.6/debian/compat psignifit-2.5.6/debian/compat
--- psignifit-2.5.6/debian/compat
+++ psignifit-2.5.6/debian/compat
@@ -1 +1 @@
-4
+9
diff -u psignifit-2.5.6/debian/rules psignifit-2.5.6/debian/rules
--- psignifit-2.5.6/debian/rules
+++ psignifit-2.5.6/debian/rules
@@ -2,66 +2,2 @@
-
-#export DH_VERBOSE=1
-
-CFLAGS = -Wall -g
-
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
-	CFLAGS += -O0
-else
-	CFLAGS += -O2
-endif
-
-configure: configure-stamp
-configure-stamp:
-	dh_testdir
-	touch configure-stamp
-
-
-build: build-stamp
-
-build-stamp: configure-stamp
-	dh_testdir
-
-	cd psig-src && $(MAKE)
-	cd ..
-	touch build-stamp
-
-clean:
-	dh_testdir
-	dh_testroot
-	rm -f build-stamp configure-stamp
-	-cd psig-src && $(MAKE) clean
-	cd ..
-	dh_clean
-
-install: build
-	dh_testdir
-	dh_testroot
-	dh_clean -k
-	dh_installdirs
-	cd psig-src && $(MAKE) install DESTDIR=$(CURDIR)/debian/psignifit
-	cd ..
-
-
-binary-indep: build install
-# We have nothing to do by default.
-
-binary-arch: build install
-	dh_testdir
-	dh_testroot
-	dh_installchangelogs
-	dh_installdocs
-	dh_installexamples
-	dh_installman
-	dh_install runexampledata usr/share/doc/psignifit/tests
-	dh_link
-	dh_strip
-	dh_compress
-	dh_fixperms
-	dh_installdeb
-	dh_shlibdeps
-	dh_gencontrol
-	dh_md5sums
-	dh_builddeb
-
-binary: binary-indep binary-arch
-.PHONY: build clean binary-indep binary-arch binary install configure
+%:
+	dh $@ --sourcedirectory=psig-src
diff -u psignifit-2.5.6/debian/control psignifit-2.5.6/debian/control
--- psignifit-2.5.6/debian/control
+++ psignifit-2.5.6/debian/control
@@ -3,7 +3,7 @@
 Priority: optional
 Maintainer: Experimental Psychology Maintainers 
 Uploaders: Michael Hanke 
-Build-Depends: debhelper (>= 4.0.0)
+Build-Depends: debhelper (>= 9)
 Standards-Version: 3.7.2
 Homepage: http://www.bootstrap-software.org
 Vcs-Browser: http://svn.debian.org/wsvn/pkg-exppsy/psignifit/?rev=0&sc=0
@@ -11,7 +11,7 @@
 
 Package: psignifit
 Architecture: any
-Depends: ${shlibs:Depends}
+Depends: ${misc:Depends}, ${shlibs:Depends}
 Description: Fitting and testing hypotheses about psychometric functions
  Psignifit allows fitting of psychometric functions to datasets while
  maintaining full control over a large number of parameters. Data
only in patch2:
unchanged:
--- psignifit-2.5.6.orig/debian/install
+++ psignifit-2.5.6/debian/install
@@ -0,0 +1 @@
+runexampledata usr/share/doc/psignifit/tests

Bug#822502: nemiver: FTBFS: error: cannot convert 'const sigc::slot_base' to 'bool' in return

[Logan Rosen]

Control: tags -1 patch

Dear Maintainer,

In Ubuntu, the attached patch was applied to achieve the following:

  * debian/patches/bool-conversion.patch: Grab patch from upstream Git to fix
FTBFS due to bool conversion.

Thanks for considering the patch.

Logan Rosen
diff -Nru nemiver-0.9.6/debian/patches/bool-conversion.patch nemiver-0.9.6/debian/patches/bool-conversion.patch
--- nemiver-0.9.6/debian/patches/bool-conversion.patch	1969-12-31 19:00:00.0 -0500
+++ nemiver-0.9.6/debian/patches/bool-conversion.patch	2016-07-25 21:29:11.0 -0400
@@ -0,0 +1,26 @@
+From e0e42221ceb77d88be64fac1c09792dc5c9e2f43 Mon Sep 17 00:00:00 2001
+From: Ben Iofel 
+Date: Thu, 17 Mar 2016 18:28:02 -0400
+Subject: Fix compiliation warnings & errors
+
+---
+ src/dbgengine/nmv-dbg-common.h| 2 +-
+ src/dbgengine/nmv-i-var-list-walker.h | 2 +-
+ 2 files changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/dbgengine/nmv-dbg-common.h b/src/dbgengine/nmv-dbg-common.h
+index ad3cc00..0edac7c 100644
+--- a/src/dbgengine/nmv-dbg-common.h
 b/src/dbgengine/nmv-dbg-common.h
+@@ -171,7 +171,7 @@ public:
+ 
+ bool has_slot () const
+ {
+-return m_slot;
++return static_cast (m_slot);
+ }
+ 
+ template
+-- 
+cgit v0.12
+
diff -Nru nemiver-0.9.6/debian/patches/series nemiver-0.9.6/debian/patches/series
--- nemiver-0.9.6/debian/patches/series	2015-10-03 15:16:43.0 -0400
+++ nemiver-0.9.6/debian/patches/series	2016-07-25 21:29:16.0 -0400
@@ -1,2 +1,3 @@
 # List of currently applied Debian patches
 missing-files.patch
+bool-conversion.patch

Bug#832495: libreoffice: Extremely slow to redraw UI.

[Andrew King]

Package: libreoffice
Version: 1:5.1.5~rc1-1
Severity: important

Dear Maintainer,

After upgrading libreoffice, ui is extremely slow to redraw, almost to the 
point of unusable. (Hence - important). 

This started happening after an apt-get upgrade. Now opening Libre-office (any 
component) is exceptionally slow. I've uploaded a screencast of how bad is at 
https://www.dropbox.com/s/4a1i99gm1kqc2q6/Screencast%202016-07-26%2009%3A27%3A33.mp4?dl=0
 . Previous version did not have this problem. 
I have reset LO preferences, and tried various options for hardware 
acceleration, etc. No change. This is on a very high spec'd machine (16 core, 
64GB ram, Nvidia Quadro K4200), I am using the binary nvidia drivers, but don't 
have the option to use anything else at the moment.
 
Regards,
Andrew



-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.6.0-1-amd64 (SMP w/16 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libreoffice depends on:
ii  dpkg   1.18.9
ii  fonts-dejavu   2.36-1
ii  fonts-sil-gentium-basic1.1-7
ii  libreoffice-avmedia-backend-gstreamer  1:5.1.5~rc1-1
ii  libreoffice-base   1:5.1.5~rc1-1
ii  libreoffice-calc   1:5.1.5~rc1-1
ii  libreoffice-core   1:5.1.5~rc1-1
ii  libreoffice-draw   1:5.1.5~rc1-1
ii  libreoffice-impress1:5.1.5~rc1-1
ii  libreoffice-java-common1:5.1.5~rc1-1
ii  libreoffice-math   1:5.1.5~rc1-1
ii  libreoffice-report-builder-bin 1:5.1.5~rc1-1
ii  libreoffice-writer 1:5.1.5~rc1-1
ii  python3-uno1:5.1.5~rc1-1

libreoffice recommends no packages.

Versions of packages libreoffice suggests:
ii  cups-bsd2.1.4-4
ii  default-jre [java5-runtime] 2:1.8-57
ii  gstreamer1.0-libav  1:1.8.2-dmo1
ii  gstreamer1.0-plugins-bad1:1.8.2-dmo2
ii  gstreamer1.0-plugins-base   1.8.2-1
ii  gstreamer1.0-plugins-good   1.8.2-1
ii  gstreamer1.0-plugins-ugly   1.8.2-1
ii  hunspell-en-gb [hunspell-dictionary]1:5.1.3-2
ii  hunspell-en-us [hunspell-dictionary]20070829-6
ii  hyphen-en-us [hyphen-hyphenation-patterns]  2.8.8-3
ii  icedove 1:45.2.0-1
ii  iceweasel   45.2.0esr-1
ii  imagemagick 8:6.8.9.9-7.2
ii  libgl1-mesa-glx [libgl1]11.2.2-1
pn  libreoffice-gnome | libreoffice-kde 
pn  libreoffice-grammarcheck
ii  libreoffice-help-en-us [libreoffice-help-5.1]   1:5.1.5~rc1-1
pn  libreoffice-l10n-5.1
pn  libreoffice-officebean  
ii  libsane 1.0.25-2+b1
ii  libxrender1 1:0.9.9-2
ii  myspell-en-au [myspell-dictionary]  2.1-5.4
ii  mythes-en-us [mythes-thesaurus] 1:5.1.3-2
pn  openclipart2-libreoffice | openclipart-libreoffice  
ii  openjdk-8-jre [java5-runtime]   8u91-b14-3
ii  pstoedit3.70-1.1
pn  unixodbc

Versions of packages libreoffice-core depends on:
ii  fontconfig2.11.0-6.4
ii  fonts-opensymbol  2:102.7+LibO5.1.5~rc1-1
ii  libboost-date-time1.58.0  1.58.0+dfsg-5.1
ii  libc6 2.23-2
ii  libcairo2 1.14.6-1+b1
ii  libclucene-contribs1v52.3.3.4-4.1
ii  libclucene-core1v52.3.3.4-4.1
ii  libcmis-0.5-5v5   0.5.1-4
ii  libcups2  2.1.4-4
ii  libcurl3-gnutls   7.47.0-1
ii  libdbus-1-3   1.10.8-1
ii  libdbus-glib-1-2  0.106-1
ii  libdconf1 0.26.0-1
ii  libeot0   0.01-3
ii  libexpat1 2.2.0-1
ii  libexttextcat-2.0-0   3.4.4-1
ii  libfontconfig12.11.0-6.4
ii  libfreetype6  2.6.3-3+b1
ii  libgcc1   1:6.1.1-9
ii  libgl1-mesa-glx [libgl1]  11.2.2-1
ii  libglew1.13   1.13.0-2
ii  libglib2.0-0  2.48.1-2
ii  libgltf-0.0-0v5   0.0.2-4+b1
ii  libglu1-mesa [libglu1]9.0.0-2.1
ii  libgraphite2-31.3.8-1
ii  libharfbuzz-icu0  1.2.7-1
ii  libharfbuzz0b 1.2.7-1
ii  libhunspell-1.4-0 1.4.1-2
ii  libhyphen02.8.8-3
ii  

Bug#831537: marked as pending

[Roland Hieber]

Hi,

I'm curious and want to understand, so am I right that a binNMU [0]
should be enough here? If not, why not?

[0]: https://wiki.debian.org/binNMU

Cheers,
 - Roland

> commit d3dc4b14057eab6f3bfa09c8388a7c20351ccf95
> Author: Nicholas D Steeves 
> Date:   Sun Jul 17 17:40:59 2016 -0400
> 
> Rebuild against ffmpeg-3.1.1 (Closes: #831537)
> 
> diff --git a/debian/changelog b/debian/changelog
> index 0e3ff7b..1123209 100644
> --- a/debian/changelog
> +++ b/debian/changelog
> @@ -1,3 +1,9 @@
> +mpv (0.18.0-2) UNRELEASED; urgency=medium
> +
> +  * Rebuild against ffmpeg-3.1.1 (Closes: #831537)
> +
> + -- Nicholas D Steeves   Sun, 17 Jul 2016 17:38:39 -0400
> +
>  mpv (0.18.0-1) unstable; urgency=medium
>  
>* Team upload.
> 

Bug#832494: aqemu: Description need to be updated

[Zhang Jingqiang]

Package: aqemu
Version: 0.9.2-1
Severity: normal

Hello,
   The Qt4 based description need to be replaced.

Thanks

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'work'), (500, 'testing'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.6.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=zh_CN.UTF-8, LC_CTYPE=zh_CN.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Bug#832493: flashplugin-nonfree: update-flashplugin-nonfree detect upstream version as 22.0.0.209

[sharuzzaman]

Package: flashplugin-nonfree
Version: 1:3.6.1+b1
Severity: grave
Tags: security
Justification: renders package unusable

Dear Maintainer,

When running the update-flashplugin-nonfree script, the upstream version 
detected is 22.0.0.209

This is wrong and will cause the update to fail to get the update package for 
Linux.

The correct version should be 11.2.202.632 from 
http://www.adobe.com/software/flash/about/


root@debian:~# update-flashplugin-nonfree --verbose --install
options :  --verbose --install --
temporary directory: /tmp/flashplugin-nonfree.sAvyN55r6l
importing public key ...
selected action = --install
installed version = 11.2.202.626
upstream version = 22.0.0.209







-- Package-specific info:
Debian version: stretch/sid
Architecture: i386
Package version: 1:3.6.1+b1
Adobe Flash Player version: LNX 11,2,202,626
MD5 checksums:
160a01dd00527304e5291e65eb0c65e2  
/var/cache/flashplugin-nonfree/get-upstream-version.pl
ddbcf9e06f499a3bc77dad72e90d8dd7  
/var/cache/flashplugin-nonfree/install_flash_player_11_linux.i386.tar.gz
fac0b6ad795d519487b642f4552a8665  
/usr/lib/flashplugin-nonfree/libflashplayer.so
Alternatives:
flash-mozilla.so - auto mode
  link best version is /usr/lib/flashplugin-nonfree/libflashplayer.so
  link currently points to 
/usr/lib/flashplugin-nonfree/libflashplayer.so
  link flash-mozilla.so is /usr/lib/mozilla/plugins/flash-mozilla.so
/usr/lib/flashplugin-nonfree/libflashplayer.so - priority 50
lrwxrwxrwx 1 root root 34 Aug 25  2015 
/usr/lib/mozilla/plugins/flash-mozilla.so -> /etc/alternatives/flash-mozilla.so
/usr/lib/mozilla/plugins/flash-mozilla.so: symbolic link to 
/etc/alternatives/flash-mozilla.so

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 4.6.0-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages flashplugin-nonfree depends on:
ii  binutils   2.26.1-1
ii  ca-certificates20160104
ii  debconf [debconf-2.0]  1.5.59
ii  gnupg  1.4.20-6
ii  libatk1.0-02.20.0-1
ii  libcairo2  1.14.6-1+b1
ii  libcurl3-gnutls7.47.0-1
ii  libfontconfig1 2.11.0-6.4
ii  libfreetype6   2.6.3-3+b1
ii  libgcc11:6.1.1-9
ii  libglib2.0-0   2.48.1-2
ii  libgtk2.0-02.24.30-4
ii  libnspr4   2:4.12-2
ii  libnss32:3.23-2
ii  libpango1.0-0  1.40.1-1
ii  libstdc++6 6.1.1-9
ii  libx11-6   2:1.6.3-1
ii  libxext6   2:1.3.3-1
ii  libxt6 1:1.1.5-1
ii  wget   1.18-2

flashplugin-nonfree recommends no packages.

Versions of packages flashplugin-nonfree suggests:
pn  flashplugin-nonfree-extrasound  
ii  fonts-dejavu2.36-1
pn  hal 
ii  iceweasel   45.2.0esr-1
pn  konqueror-nsplugins 
ii  ttf-mscorefonts-installer   3.6
pn  ttf-xfree86-nonfree 

-- no debconf information

Bug#832492: dolphin: depends on baloo-kf5

[HJ]

Package: dolphin
Version: 4:16.04.2-2
Severity: normal

Dear Maintainer,

the dolphin internal find won't work if there is no package baloo-kf5
installed.



-- System Information:
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages dolphin depends on:
ii  libc6  2.23-2
ii  libdolphinvcs5 4:16.04.2-2
ii  libkf5baloo5   5.23.0-1
ii  libkf5baloowidgets516.04.0-1
ii  libkf5bookmarks5   5.23.0-1
ii  libkf5codecs5  5.23.0-1
ii  libkf5completion5  5.23.0-1
ii  libkf5configcore5  5.23.0-1
ii  libkf5configgui5   5.23.0-1
ii  libkf5configwidgets5   5.23.0-1
ii  libkf5coreaddons5  5.23.0-1
ii  libkf5crash5   5.23.0-1
ii  libkf5dbusaddons5  5.23.0-1
ii  libkf5filemetadata35.23.0-1
ii  libkf5i18n55.23.0-1
ii  libkf5iconthemes5  5.23.0-1
ii  libkf5itemviews5   5.23.0-1
ii  libkf5jobwidgets5  5.23.0-1
ii  libkf5kcmutils55.23.0-1
ii  libkf5kiocore5 5.23.0-1
ii  libkf5kiofilewidgets5  5.23.0-1
ii  libkf5kiowidgets5  5.23.0-1
ii  libkf5newstuff55.23.0-1
ii  libkf5notifications5   5.23.0-1
ii  libkf5parts5   5.23.0-1
ii  libkf5service-bin  5.23.0-1
ii  libkf5service5 5.23.0-1
ii  libkf5solid5   5.23.0-1
ii  libkf5textwidgets5 5.23.0-1
ii  libkf5widgetsaddons5   5.23.0-1
ii  libkf5windowsystem55.23.0-1
ii  libkf5xmlgui5  5.23.0-1
ii  libphonon4qt5-44:4.9.0-3
ii  libqt5core5a   5.6.1+dfsg-3
ii  libqt5dbus55.6.1+dfsg-3
ii  libqt5gui5 5.6.1+dfsg-3
ii  libqt5widgets5 5.6.1+dfsg-3
ii  libqt5xml5 5.6.1+dfsg-3
ii  libstdc++6 6.1.1-9
ii  phonon4qt5 4:4.9.0-3

Versions of packages dolphin recommends:
ii  kio-extras  4:16.04.2-1
pn  ruby

Versions of packages dolphin suggests:
ii  dolphin-plugins  4:16.04.0-1

-- debconf information:
Unescaped left brace in regex is deprecated, passed through in regex; marked by 
<-- HERE in m/^(.*?)(\\)?\${ <-- HERE ([^{}]+)}(.*)$/ at 
/usr/share/perl5/Debconf/Question.pm line 72.
Unescaped left brace in regex is deprecated, passed through in regex; marked by 
<-- HERE in m/\${ <-- HERE ([^}]+)}/ at /usr/share/perl5/Debconf/Config.pm line 
30.

Bug#817526: libdshconfig: Removal of debhelper compat 4

[Logan Rosen]

Control: tags -1 patch

Dear Maintainer,

In Ubuntu, the attached patch was applied to achieve the following:

  * debian/rules:
- Remove legacy DH_COMPAT export.
- Don't allow distclean to ignore errors.
  * debian/compat: Indicate compatibility level of 9.
  * debian/control:
- Build-depend on debhelper (>= 9).
- Depend on ${misc:Depends}.
  * debian/copyright: Don't point to symlink GPL.

Thanks for considering the patch.

Logan Rosen
diff -u libdshconfig-0.20.13/debian/control libdshconfig-0.20.13/debian/control
--- libdshconfig-0.20.13/debian/control
+++ libdshconfig-0.20.13/debian/control
@@ -2,13 +2,13 @@
 Section: libs
 Priority: optional
 Maintainer: Junichi Uekawa 
-Build-Depends: debhelper (>> 4.0.0), dh-autoreconf, d-shlibs (>= 0.4), doxygen
+Build-Depends: debhelper (>= 9), dh-autoreconf, d-shlibs (>= 0.4), doxygen
 Standards-Version: 3.7.2
 
 Package: libdshconfig1
 Architecture: any
 Section: libs
-Depends: ${shlibs:Depends}
+Depends: ${misc:Depends}, ${shlibs:Depends}
 Description: configuration file parser library for dsh - runtime
  Runtime library for configuration file parser,
  required for running programs with dsh config file support.
@@ -18,7 +18,7 @@
 Package: libdshconfig1-dev
 Architecture: any
 Section: libdevel
-Depends: libdshconfig1 (= ${binary:Version}), ${devlibs:Depends}
+Depends: ${misc:Depends}, libdshconfig1 (= ${binary:Version}), ${devlibs:Depends}
 Provides: libdshconfig-dev
 Conflicts: libdshconfig-dev
 Description: configuration file parser library for dsh - development
diff -u libdshconfig-0.20.13/debian/copyright libdshconfig-0.20.13/debian/copyright
--- libdshconfig-0.20.13/debian/copyright
+++ libdshconfig-0.20.13/debian/copyright
@@ -14 +14 @@
-Please see /usr/share/common-licenses/GPL on Debian systems.
+Please see /usr/share/common-licenses/GPL-2 on Debian systems.
diff -u libdshconfig-0.20.13/debian/rules libdshconfig-0.20.13/debian/rules
--- libdshconfig-0.20.13/debian/rules
+++ libdshconfig-0.20.13/debian/rules
@@ -5,9 +5,6 @@
 # Uncomment this to turn on verbose mode.
 #export DH_VERBOSE=1
 
-# This is the debhelper compatability version to use.
-export DH_COMPAT=4
-
 DSH=$(CURDIR)/debian/dsh
 
 configure: configure-stamp
@@ -31,14 +28,14 @@
 	dh_testroot
 	rm -f build-stamp configure-stamp
 	rm -rf $(DSH)
-	-$(MAKE) distclean
+	[ ! -f Makefile ] || $(MAKE) distclean
 	dh_autoreconf_clean
 	dh_clean
 
 install: build
 	dh_testdir
 	dh_testroot
-	dh_clean -k
+	dh_prep
 	dh_installdirs
 
 	# Add here commands to install the package into debian/dsh.
only in patch2:
unchanged:
--- libdshconfig-0.20.13.orig/debian/compat
+++ libdshconfig-0.20.13/debian/compat
@@ -0,0 +1 @@
+9

Bug#832490: gitlab: fails to install if it was previously installed

[Dmitry Smirnov]

Package: gitlab
Version: 8.9.0+dfsg-7
Severity: serious


Creating runtime directories for gitlab...
mkdir: cannot create directory ‘/var/lib/gitlab/.ssh’: File exists


Obviously problem was introduced by the following commit:

https://anonscm.debian.org/cgit/pkg-ruby-extras/gitlab.git/commit/?id=184238ef63376049452d7f86107659f511cb2a85

Could we please avoid introducing new problems with every GitLab upload?
At least until it is stabilised and becomes installable...

-- 
Cheers,
 Dmitry Smirnov
 GPG key : 4096R/52B6BBD953968D1B

---

Lies are the social equivalent of toxic waste: Everyone is potentially
harmed by their spread.
-- Sam Harris


signature.asc
Description: This is a digitally signed message part.

Bug#832491: aboot: please remove build dependency on obsolete package sp

[Neil Roeth]

Package: aboot
Version: 1.0~pre20040408-4
Severity: normal
Tags: patch

Dear maintainer,

The sp package is obsolete and will be removed from Debian.  Please change the
build dependency in aboot accordingly (patch attached) or, if you prefer, I
can NMU it.

Regards.

diff -u aboot-1.0~pre20040408/debian/control 
aboot-1.0~pre20040408/debian/control
--- aboot-1.0~pre20040408/debian/control
+++ aboot-1.0~pre20040408/debian/control
@@ -1,5 +1,5 @@
 Source: aboot
-Build-Depends: debhelper (>= 9), sp, sgmlspl, docbook-utils
+Build-Depends: debhelper (>= 9), opensp, sgmlspl, docbook-utils
 Build-Depends-Indep: sgmltools-lite
 Section: admin
 Priority: standard
diff -u aboot-1.0~pre20040408/srmbootfat/Makefile 
aboot-1.0~pre20040408/srmbootfat/Makefile
--- aboot-1.0~pre20040408/srmbootfat/Makefile
+++ aboot-1.0~pre20040408/srmbootfat/Makefile
@@ -14,10 +14,10 @@
$(CC) $(CFLAGS) $(LDFLAGS) -o srmbootraw srmbootraw.c
 
 srmbootfat.1: srmbootfat.sgml
-   nsgmls srmbootfat.sgml | sgmlspl sgmlspl-specs/docbook2man-spec.pl
+   onsgmls srmbootfat.sgml | sgmlspl sgmlspl-specs/docbook2man-spec.pl
 
 srmbootraw.8: srmbootraw.sgml
-   nsgmls srmbootraw.sgml | sgmlspl sgmlspl-specs/docbook2man-spec.pl
+   onsgmls srmbootraw.sgml | sgmlspl sgmlspl-specs/docbook2man-spec.pl
 
 clean:
rm -f srmbootfat srmbootraw srmbootfat.1 srmbootraw.8 manpage.links 
manpage.log manpage.refs

Bug#832441: devscripts: CVE-2016-1238 fix

[James McCoy]

On Mon, Jul 25, 2016 at 03:48:13PM +0100, Dominic Hargreaves wrote:
> An update for this package has been released as part of our handling for
> the issue described below. This fixes an instance of the dynamic module
> loading vulnerability alluded to.
> 
> I attach the patch I applied for jessie; please could you review this
> and apply something similar for sid?

Thanks for the notice.

> From ec54f8919620d6b064f0c61015af553570c2ee3a Mon Sep 17 00:00:00 2001
> From: Dominic Hargreaves 
> Date: Mon, 25 Jul 2016 10:06:19 +0100
> Subject: [PATCH 1/2] Remove . from @INC when loading modules dynamically
>  [CVE-2016-1238]
> 
> diff --git a/scripts/desktop2menu.pl b/scripts/desktop2menu.pl
> index f97551d..92c99f8 100755
> --- a/scripts/desktop2menu.pl
> +++ b/scripts/desktop2menu.pl
> @@ -64,6 +64,7 @@ use File::Basename;
>  my $progname = basename($0);
>  
>  BEGIN {
> +pop @INC if $INC[-1] eq '.';
>  # Load the File::DesktopEntry module safely
>  eval { require File::DesktopEntry; };
>  if ($@) {

I'm curious why only this script was changed.  From a quick search, it
looks like there are at least a few more that should be changed, if I
understand the problem properly.

$ ag --perl '\{ require'
scripts/desktop2menu.pl:68:eval { require File::DesktopEntry; };
scripts/dcontrol.pl:28:eval { require URI::Escape; };
scripts/dcontrol.pl:37:eval { require LWP::UserAgent; };
scripts/plotchangelog.pl:35:eval { require Date::Parse; import Date::Parse 
(); };
scripts/dscverify.pl:36:eval { require Digest::MD5; };
scripts/rmadison.pl:27:eval { require URI::Escape; };
scripts/uscan.pl:40:eval { require LWP::UserAgent; };
scripts/uscan.pl:59:eval { require LWP::Protocol::https; };
scripts/grep-excuses.pl:32:eval { require Term::Size; };

There are likely a few more not caught by this search, too.

Cheers,
-- 
James
GPG Key: 4096R/91BF BF4D 6956 BD5D F7B7  2D23 DFE6 91AE 331B A3DB


signature.asc
Description: PGP signature

Bug#832489: tzdata-java: The Debian 8 package tzdata-java without support openjdk8

[Семёнов Артём Игоревич]

Package: tzdata-java
Version: 2016f-0+deb8u1
Severity: important

Dear Maintainer,


The Debian 8 package tzdata-java without support openjdk8. The package doesn't 
include timezone data-base file tzdb.dat

-- System Information:
Debian Release: 8.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages tzdata-java depends on:
ii  tzdata  2016f-0+deb8u1

tzdata-java recommends no packages.

tzdata-java suggests no packages.

-- no debconf information

Bug#800168: funny-manpages: Please migrate a supported debhelper compat level

[Logan Rosen]

My apologies, here's an updated patch that removes a command in debian/rules
to copy the Lintian overrides.

Logan
diff -u funny-manpages-1.3/debian/control funny-manpages-1.3/debian/control
--- funny-manpages-1.3/debian/control
+++ funny-manpages-1.3/debian/control
@@ -2,11 +2,12 @@
 Section: doc
 Priority: optional
 Maintainer: Pawel Wiecek 
-Build-Depends-Indep: debhelper (>> 3.0.0)
+Build-Depends: debhelper (>= 9)
 Standards-Version: 3.6.1
 
 Package: funny-manpages
 Architecture: all
+Depends: ${misc:Depends}
 Suggests: asr-manpages (>=1.3-4)
 Description: more funny manpages
  A set of miscellaneous humorous manpages (don't take them too seriously!).
reverted:
--- funny-manpages-1.3/debian/lintian
+++ funny-manpages-1.3.orig/debian/lintian
@@ -1 +0,0 @@
-funny-manpages: link-to-undocumented-manpage usr/share/man/man6/woman.6fun.gz
diff -u funny-manpages-1.3/debian/rules funny-manpages-1.3/debian/rules
--- funny-manpages-1.3/debian/rules
+++ funny-manpages-1.3/debian/rules
@@ -5,9 +5,6 @@
 # Uncomment this to turn on verbose mode.
 #export DH_VERBOSE=1
 
-# This is the debhelper compatability version to use.
-export DH_COMPAT=3
-
 configure: configure-stamp
 configure-stamp:
 	dh_testdir
@@ -39,7 +36,7 @@
 install: build
 	dh_testdir
 	dh_testroot
-	dh_clean -k
+	dh_prep
 	dh_installdirs
 
 	# Add here commands to install the package into debian/tmp.
@@ -67,7 +64,6 @@
 #	dh_installcron
 	dh_installmanpages
 #	dh_installinfo
-	dh_undocumented woman.6fun
 	dh_installchangelogs 
 #	dh_link
 	dh_strip
only in patch2:
unchanged:
--- funny-manpages-1.3.orig/debian/compat
+++ funny-manpages-1.3/debian/compat
@@ -0,0 +1 @@
+9

Bug#800168: funny-manpages: Please migrate a supported debhelper compat level

[Logan Rosen]

Control: tags -1 patch

Dear Maintainer,

In Ubuntu, the attached patch was applied to achieve the following:

  * debian/rules:
- Remove legacy DH_COMPAT export.
- Use dh_prep instead of dh_clean -k.
- Remove obsolete dh_undocumented.
  * debian/compat: Indicate compatibility level of 9.
  * debian/control:
- Build-depend on debhelper (>= 9).
- Depend on ${misc:Depends}.
  * debian/lintian: Remove, since override is no longer used.

Thanks for considering the patch.

Logan Rosen
diff -u funny-manpages-1.3/debian/control funny-manpages-1.3/debian/control
--- funny-manpages-1.3/debian/control
+++ funny-manpages-1.3/debian/control
@@ -2,11 +2,12 @@
 Section: doc
 Priority: optional
 Maintainer: Pawel Wiecek 
-Build-Depends-Indep: debhelper (>> 3.0.0)
+Build-Depends: debhelper (>= 9)
 Standards-Version: 3.6.1
 
 Package: funny-manpages
 Architecture: all
+Depends: ${misc:Depends}
 Suggests: asr-manpages (>=1.3-4)
 Description: more funny manpages
  A set of miscellaneous humorous manpages (don't take them too seriously!).
reverted:
--- funny-manpages-1.3/debian/lintian
+++ funny-manpages-1.3.orig/debian/lintian
@@ -1 +0,0 @@
-funny-manpages: link-to-undocumented-manpage usr/share/man/man6/woman.6fun.gz
diff -u funny-manpages-1.3/debian/rules funny-manpages-1.3/debian/rules
--- funny-manpages-1.3/debian/rules
+++ funny-manpages-1.3/debian/rules
@@ -5,9 +5,6 @@
 # Uncomment this to turn on verbose mode.
 #export DH_VERBOSE=1
 
-# This is the debhelper compatability version to use.
-export DH_COMPAT=3
-
 configure: configure-stamp
 configure-stamp:
 	dh_testdir
@@ -39,7 +36,7 @@
 install: build
 	dh_testdir
 	dh_testroot
-	dh_clean -k
+	dh_prep
 	dh_installdirs
 
 	# Add here commands to install the package into debian/tmp.
@@ -67,7 +64,6 @@
 #	dh_installcron
 	dh_installmanpages
 #	dh_installinfo
-	dh_undocumented woman.6fun
 	dh_installchangelogs 
 #	dh_link
 	dh_strip
only in patch2:
unchanged:
--- funny-manpages-1.3.orig/debian/compat
+++ funny-manpages-1.3/debian/compat
@@ -0,0 +1 @@
+9

Bug#832488: libnpgsql2.2-cil: Client is not registered in machine.config DbProviderFactory.

[Chris Capon]

Package: libnpgsql2.2-cil
Version: 2.2.7+dfsg3-1
Severity: important
Tags: patch


Dear Maintainer,

To provide DbProviderFactory support, the client component needs to be
registered in the machine.config file as well as the GAC.

In the machine.config file for each .NET version supported,
look for section:  and add the following:

  

You will see other database entries already there.

Attached is a program which tests the entry:

   mcs -pkg:dotnet TestFactory.cs
   mono TestFactory.exe


Cheers, and thanks!
Chris.



-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.6.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libnpgsql2.2-cil depends on:
ii  cli-common  0.9+nmu1
ii  libmono-corlib4.5-cil   4.2.1.102+dfsg2-8
ii  libmono-security4.0-cil 4.2.1.102+dfsg2-8
ii  libmono-system-core4.0-cil  4.2.1.102+dfsg2-8
ii  libmono-system-data4.0-cil  4.2.1.102+dfsg2-8
ii  libmono-system-ldap4.0-cil  4.2.1.102+dfsg2-8
ii  libmono-system-transactions4.0-cil  4.2.1.102+dfsg2-8
ii  libmono-system4.0-cil   4.2.1.102+dfsg2-8

libnpgsql2.2-cil recommends no packages.

libnpgsql2.2-cil suggests no packages.

-- no debconf information
using System;
using System.Data;
using System.Data.Common;
namespace TestFactory
{
public class Program
{
const string PROVIDER_ORACLE  = "System.Data.OracleClient";
const string PROVIDER_MYSQL   = "MySql.Data.MySqlClient";
const string PROVIDER_PSQL= "Npgsql";

public static int Main( string[] args )
{
try
{
ListFactories();
TestFactory( PROVIDER_ORACLE );
//  TestFactory( PROVIDER_MYSQL  );
TestFactory( PROVIDER_PSQL   );
}
catch( Exception ex )
{
Console.WriteLine( "..exception: " + ex.Message 
);
}
return 0;
}
static void TestFactory( string name )
{
Console.WriteLine( "..test: {0}", name );
DbProviderFactories.GetFactory( name );
Console.WriteLine( "  ..works" );
}
static void ListFactories()
{
Console.WriteLine( "..available factories:" );
DataTable dt = DbProviderFactories.GetFactoryClasses();
foreach( DataRow dr in dt.Rows )
{
foreach( DataColumn dc in dt.Columns )
{
Console.WriteLine( "   {0}: {1}", 
dc.ColumnName, dr[dc] );
}
Console.WriteLine();
}
}
}
}

Bug#832359: linux-kbuild-4.6: Please include "scripts/headers_install.sh" and "scripts/unifdef", needed by "scripts/Makefile.headersinst"

[Ben Hutchings]

Control: retitle -1 linux-kbuild include useless Makefile.headersinst
Control: severity -1 minor
Control: severity -1 wontfix

On Sun, 2016-07-24 at 17:10 +0200, Jan Luca Naumann wrote:
> Package: linux-kbuild-4.6
> Version: 4.6.4-1
> Severity: normal
> 
> In linux-kbuild-* the Makefile "scripts/Makefile.headersinst" is included.
> The Makefile needs the shell script "scripts/headers_install.sh" which is
> not included in the current version of linux-kbuild-4.6. 
> 
> Can you please include this script "scripts/headers_install.sh" and the tool
> "scripts/unifdef" (needed by scripts/headers_install.sh) in the package?

linux-kbuild exists to support building out-of-tree modules, for which
I believe this Makefile is never needed.

Ben.

-- 

Ben Hutchings
Knowledge is power.  France is bacon.


signature.asc
Description: This is a digitally signed message part

Bug#832487: libmysql6.4-cil: Client is not registered in machine.config DbProviderFactory.

[Chris Capon]

Package: libmysql6.4-cil
Version: 6.4.3-4
Severity: important
Tags: patch

Dear Maintainer,

To provide DbProviderFactory support, the client component needs to be
registered in the machine.config file as well as the GAC.

In the machine.config file for each .NET version supported in /etc/mono,
look for section:  and add the following:

 

You will see other database entries already there.

Attached is a program which tests the entry:

   mcs -pkg:dotnet TestFactory.cs
   mono TestFactory.exe


Cheers, and thanks!
Chris.



-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.6.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libmysql6.4-cil depends on:
ii  cli-common   0.9+nmu1
ii  libmono-corlib4.5-cil4.2.1.102+dfsg2-8
ii  libmono-system-configuration-install4.0-cil  4.2.1.102+dfsg2-8
ii  libmono-system-data4.0-cil   4.2.1.102+dfsg2-8
ii  libmono-system-drawing4.0-cil4.2.1.102+dfsg2-8
ii  libmono-system-transactions4.0-cil   4.2.1.102+dfsg2-8
ii  libmono-system-xml4.0-cil4.2.1.102+dfsg2-8
ii  libmono-system4.0-cil4.2.1.102+dfsg2-8

libmysql6.4-cil recommends no packages.

libmysql6.4-cil suggests no packages.
using System;
using System.Data;
using System.Data.Common;
namespace TestFactory
{
public class Program
{
const string PROVIDER_ORACLE  = "System.Data.OracleClient";
const string PROVIDER_MYSQL   = "MySql.Data.MySqlClient";
const string PROVIDER_PSQL= "Npgsql";

public static int Main( string[] args )
{
try
{
ListFactories();
TestFactory( PROVIDER_ORACLE );
//  TestFactory( PROVIDER_MYSQL  );
TestFactory( PROVIDER_PSQL   );
}
catch( Exception ex )
{
Console.WriteLine( "..exception: " + ex.Message 
);
}
return 0;
}
static void TestFactory( string name )
{
Console.WriteLine( "..test: {0}", name );
DbProviderFactories.GetFactory( name );
Console.WriteLine( "  ..works" );
}
static void ListFactories()
{
Console.WriteLine( "..available factories:" );
DataTable dt = DbProviderFactories.GetFactoryClasses();
foreach( DataRow dr in dt.Rows )
{
foreach( DataColumn dc in dt.Columns )
{
Console.WriteLine( "   {0}: {1}", 
dc.ColumnName, dr[dc] );
}
Console.WriteLine();
}
}
}
}

Bug#832451: ITP: aufs4 -- advanced multi layered unification filesystem version 4.x

[Ben Hutchings]

On Mon, 2016-07-25 at 21:05 +0200, Thomas Goirand wrote:
> On 07/25/2016 06:12 PM, Jan Luca Naumann wrote:
> > Package: wnpp
> > Severity: wishlist
> > Owner: Jan Luca Naumann 
> > 
> > * Package name: aufs4
> >   Version : 4.6+20160523
> >   Upstream Author : Junjiro R. Okajima 
> > * URL : http://aufs.sourceforge.net/
> > * License : GPL2+
> >   Programming Lang: C
> >   Description : advanced multi layered unification filesystem
> > version 4.x
> > 
> > Aufs is a stackable unification filesystem such as Unionfs, which
> > unifies
> > several directories and provides a merged single directory.
> > In the early days, aufs was entirely re-designed and re-implemented
> > Unionfs Version 1.x series. After
> > many original ideas, approaches and improvements, it
> > becomes totally different from Unionfs while keeping the basic
> > features.
> > See Unionfs Version 1.x series for the basic features.
> > Recently, Unionfs Version 2.x series begin taking some of same
> > approaches to aufs's.
> > 
> > I'm intending to package the version 4.x for Debian. The module
> > should use dkms to be build as kernel module.
> > 
> > I hope to do the work as part of the filesystems project on Alioth:
> > https://alioth.debian.org/projects/filesystems/
> > 
> > I need a sponsor for the package.
> 
> We have already overlayfs in modern kernels. Could you explain why we
> need aufs4 as well?

I believe aufs stil has these advantages over overlayfs:

- Can be exported via NFS
- White-outs share an inode rather than
requiring an inode each
- Sparse files remain sparse when copied-up
-
Multiple writeable branches
- Creating a hard link does not require a
copy-up

Ben.

-- 

Ben Hutchings
Knowledge is power.  France is bacon.


signature.asc
Description: This is a digitally signed message part

Bug#832155: New ssh-session-cleanup.service kills ssh user session during upgrade

[Michael Biebl]

Am 24.07.2016 um 17:47 schrieb Colin Watson:
> Compromise proposal: how about I make it do nothing if libpam-systemd is
> installed (e.g. "ConditionPathExists=!/usr/share/pam-configs/systemd",
> which is probably the simplest available check without needing to deal
> with multiarch paths), in which case presumably the hack isn't needed?
> (For backports to jessie, such a check would need to be deleted, unless
> you plan to backport the ordering fix as requested above.)

Counter-proposal: Add libpam-systemd as recommends and ship
ssh-session-cleanup.service only as an example file.
Add a section to README.Debian mentioning that libpam-systemd + UsePAM
yes is highly recommended (for the reasons I mentioned). If people want
to opt out of this proposed default configuration, they should enable
the ssh-session-cleanup.service unit by copying it to
/etc/systemd/system and running systemctl enable
ssh-session-cleanup.service.

This is something I could be ok with, as this would only affect users
which explicitly decide to use a non-default configuration.

Cheers,
Michael

P.S: I'm curious how this was supposed to work under sysvinit? I don't
see any special code which kills SSH user sessions on shutdown, am I
missing something?
-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature

Bug#817574: maloc: Removal of debhelper compat 4

[Logan Rosen]

Control: tags -1 patch

Dear Maintainer,

In Ubuntu, the attached patch was applied to achieve the following:

  * debian/compat: Bump to 9.
  * debian/control:
- Build-depend on debhelper (>= 9).
- Add Homepage field.
  * debian/watch: Add.
  * debian/copyright: Don't point to symlink GPL.

Thanks for considering the patch.

Logan Rosen
diff -u maloc-0.2/debian/compat maloc-0.2/debian/compat
--- maloc-0.2/debian/compat
+++ maloc-0.2/debian/compat
@@ -1 +1 @@
-4
+9
diff -u maloc-0.2/debian/control maloc-0.2/debian/control
--- maloc-0.2/debian/control
+++ maloc-0.2/debian/control
@@ -2,9 +2,10 @@
 Section: devel
 Priority: optional
 Maintainer: Michael Banck 
-Build-Depends: debhelper (>> 4.1.0), cdbs, doxygen, dh-autoreconf
+Build-Depends: debhelper (>= 9), cdbs, doxygen, dh-autoreconf
 Build-Conflicts: libreadline6-dev
 Standards-Version: 3.7.3
+Homepage: http://fetk.org/codes/maloc/
 
 Package: libmaloc1
 Section: libs
diff -u maloc-0.2/debian/copyright maloc-0.2/debian/copyright
--- maloc-0.2/debian/copyright
+++ maloc-0.2/debian/copyright
@@ -28,7 +28,7 @@
Franklin St, Fifth Floor, Boston, MA  02110-1301 USA
 
 On Debian systems, the complete text of the GNU General
-Public License can be found in `/usr/share/common-licenses/GPL'.
+Public License can be found in `/usr/share/common-licenses/GPL-2'.
 
 These files have a different copyright notice:
 
only in patch2:
unchanged:
--- maloc-0.2.orig/debian/watch
+++ maloc-0.2/debian/watch
@@ -0,0 +1,2 @@
+version=3
+http://www.fetk.org/codes/download/maloc-(.+).tar.gz

Bug#832470: nmu: deal.ii_8.4.1-1

[Matthias Maier]

On Mon, Jul 25, 2016, at 16:05 CDT, Emilio Pozuelo Monfort  
wrote:

> What's the bug number?

There is no reported bug so far.

> A binNMU to workaround an ABI break is usually the wrong approach,
> unless there has been a SONAME bump.

libtrilinos-teuchos12 changed ABI from 12.6.3-1 to 12.6.3-2 without a
SONAME bump. In particular, the symbol store_stacktrace was removed:

  tamiko@jackdaw 12.6.3-1 % objdump -TC 
usr/lib/x86_64-linux-gnu/libtrilinos_teuchos*.so.12 | grep store_stacktrace
    DF *UND*    
Teuchos::store_stacktrace()
  00023c00 gDF .text  0110  Base
Teuchos::store_stacktrace()
    DF *UND*    
Teuchos::store_stacktrace()
    DF *UND*    
Teuchos::store_stacktrace()
    DF *UND*    
Teuchos::store_stacktrace()
  tamiko@jackdaw 12.6.3-1 %

  tamiko@jackdaw 12.6.3-2 % objdump -TC 
usr/lib/x86_64-linux-gnu/libtrilinos_teuchos*.so.12 | grep store_stacktrace
  tamiko@jackdaw 12.6.3-2 %

It seems that libdeal.ii-8.4.1 was compiled against 12.6.3-1 for
amd64. Unfortunately, this leads to a linker error when using the
library:

  /usr/lib/x86_64-linux-gnu/libdeal.ii.g.so.8.4.1: error: undefined reference 
to 'Teuchos::store_stacktrace()'

Consequently, libdeal.ii-8.4.1 has to be recompiled against 12.6.3-2 to
resolve this problem.

I know that trilinos should have simply changed SONAME in this
case. Given the fact that deal.ii is the only reverse dependency so far,
it seems easier for me to just do a binNMU.

Best,
Matthias

Bug#832062: supertuxkart: source for GPL song Boom_boom_boom.ogg missing

[James Cowgill]

Hi,

On Mon, 2016-07-25 at 22:44 +, Jacob's PC Tune-up wrote:
>  > The source of the .ogg file is missing.
> 
> The mod is actually in the media repo: 
> https://svn.code.sf.net/p/supertuxkart/code/media/trunk/music/mods/Boom_boom_boom.mod

It's still a bug - the source has to be in the archive somewhere so
that it can't disappear.

> 
> The license of modarchive modules prohibits modification, so the file
> would be non-free for Debian anyway (even if the "source" was
> included).
> 
> modarchive licensing should not be an issue, since it is in the media
> repo.

I disagree:

[This all assumes the mod was downloaded from the modarchive and you
didn't get any extra permission from the module author]

If the OGG is under the GPL, then Debian has to redistribute the source
somewhere - which it can't because the source is non-free.

The original license ONLY permits unmodified redistribution. Converting
the mod to another format isn't covered and is therefore a license
violation (so the OGG can't be redistributed period).

James

signature.asc
Description: This is a digitally signed message part

Bug#832470: nmu: deal.ii_8.4.1-1

[Graham Inggs]

Hi Emilio

The bug in trilinos is #830681.

There wasn't a SONAME bump, libtrilinos_teuchoscore.so was dynamically
linked against libbfd-2.26-system.so which is not allowed.  This
latest of version of deal.ii is the only reverse dependency of
trilinos and only the amd64 build which I uploaded is affected.

Regards
Graham

Bug#832237: [Pkg-javascript-devel] Bug#832237: libjs-mousetrap: Section should not be “ruby”

[Ben Finney]

On 25-Jul-2016, Alexandre Viau wrote:

> I wonder where the issue is from? I can confirm that the section
> shows as ruby by running apt-get show.

I don't know an ‘apt-get show’ command, that gives an error.

Both ‘aptitude show’ and ‘apt show’ report that the section is “ruby”.

> Perhaps a bit more history is needed to understand the issue.
> libjs-mousetrap was originally shipped by another source package
> (ruby-mousetrap-rails), which I had hijacked inadvertently.

Yes, you will need to request an override in the archive. See the
first message in this bug report.

-- 
 \  “Holy rising hemlines, Batman!” —Robin |
  `\   |
_o__)  |
Ben Finney 


signature.asc
Description: PGP signature

Bug#832452: twinkle: Crashes during call when switching desktop

[Rob van der Putten]

Hi there


On Tue, 26 Jul 2016, Geert Stappers wrote:


Date: Tue, 26 Jul 2016 00:35:03
From: Geert Stappers 
To: Rob van der Putten , 832...@bugs.debian.org
Subject: Re: Bug#832452: twinkle: Crashes during call when switching desktop

On Mon, Jul 25, 2016 at 11:30:07PM +0200, Rob van der Putten wrote:

On Mon, 25 Jul 2016, Geert Stappers wrote:

Please elaborate that, describe how to reproduce the crash.


- Start twinkle
- Call someone
- Press Ctrl-Fn to switch workspace.
- Wait a few seconds.
This will crash twinkle.

- It will also crash if the above is combined with minimised
- It will also crash if the above is combined with always on
  visible workspace.

It doesn't crash while calling without pressing Ctrl-Fn.
It doesn't crash while pressing Ctrl-Fn without calling.






And that is with which graphical desktop environment?


Xfxe


What happens when switching workspace is done withOUT Ctrl-Fn keystrokes?


With the mouse: Crash.
BTW: You can actually switch workspace while calling without causing a 
crash, as long as the other end doesn't pick up the phone.



Regards,
Rob

Bug#832476: addition

[Helios Solaris]

Addition: "Automatic" was probably broken by the intel driver before 
too. I just found an entry I made in /etc/X11/Xsessions.d which set "RGB 
Broadcast" to full, which now didn't worked anymore because the 
device/port is now DP-1 instead of DP1.


Nevertheless, somewhere is a bug, either in RGB-range detection or my 
monitor is reporting a wrong range.


edid-decode output below:

header:  00 ff ff ff ff ff ff 00
serial number:   15 c3 68 20 01 01 01 01 14 15
version: 01 04
basic params:a5 33 1d 78 e2
chroma info: ee 95 a3 54 4c 99 26 0f 50 54
established: a1 08 00
standard:81 80 81 40 b3 00 81 c0 01 01 01 01 01 01 01 01
descriptor 1:02 3a 80 18 71 38 2d 40 58 2c 45 00 fe 1f 11 00 00 1e
descriptor 2:00 00 00 ff 00 37 34 36 39 37 30 35 31 0a 20 20 20 20
descriptor 3:00 00 00 fd 00 3b 3d 1f 44 0f 00 0a 20 20 20 20 20 20
descriptor 4:00 00 00 fc 00 45 56 32 33 33 33 57 0a 20 20 20 20 20
extensions:  01
checksum:42

Manufacturer: ENC Model 2068 Serial Number 16843009
Made week 20 of 2011
EDID version: 1.4
Digital display
8 bits per primary color channel
DisplayPort interface
Maximum image size: 51 cm x 29 cm
Gamma: 2.20
DPMS levels: Standby Suspend Off
Supported color formats: RGB 4:4:4
First detailed timing is preferred timing
Established timings supported:
  720x400@70Hz
  640x480@60Hz
  800x600@60Hz
  1024x768@60Hz
Standard timings supported:
  1280x1024@60Hz
  1280x960@60Hz
  1680x1050@60Hz
  1280x720@60Hz
Detailed mode: Clock 148.500 MHz, 510 mm x 287 mm
   1920 2008 2052 2200 hborder 0
   1080 1084 1089 1125 vborder 0
   +hsync +vsync
Serial number: 74697051
Monitor ranges (GTF): 59-61Hz V, 31-68kHz H, max dotclock 150MHz
Monitor name: EV2333W
Has 1 extension blocks
Checksum: 0x42 (valid)

CEA extension block
Extension version: 3
20 bytes of CEA data
  Video data block
VIC 01 640x480@60Hz
VIC 02 720x480@60Hz
VIC 03 720x480@60Hz
VIC 04 1280x720@60Hz
  Audio data block
Linear PCM, max channels 1
Supported sample rates (kHz): 192 176.4 96 88.2 48 44.1 32
Supported sample sizes (bits): 24 20 16
  Speaker allocation data block
  Vendor-specific data block, OUI 000c03 (HDMI)
Source physical address 1.0.0.0
Supports_AI
Underscans PC formats by default
Basic audio support
0 native detailed modes
Detailed mode: Clock 25.170 MHz, 510 mm x 287 mm
640  656  752  800 hborder 0
480  490  492  525 vborder 0
   -hsync -vsync
Detailed mode: Clock 27.000 MHz, 510 mm x 287 mm
720  736  798  858 hborder 0
480  489  495  525 vborder 0
   -hsync -vsync
Detailed mode: Clock 27.000 MHz, 510 mm x 287 mm
720  736  798  858 hborder 0
480  489  495  525 vborder 0
   -hsync -vsync
Detailed mode: Clock 74.250 MHz, 510 mm x 287 mm
   1280 1390 1430 1650 hborder 0
720  725  730  750 vborder 0
   +hsync +vsync
Checksum: 0x33 (valid)

Bug#832062: supertuxkart: source for GPL song Boom_boom_boom.ogg missing

[Jacob's PC Tune-up]

 > The source of the .ogg file is missing.

The mod is actually in the media repo: 
https://svn.code.sf.net/p/supertuxkart/code/media/trunk/music/mods/Boom_boom_boom.mod

 > The license
of modarchive modules prohibits modification, so the file would be non-
free for Debian anyway (even if the "source" was included).

modarchive licensing should not be an issue, since it is in the media repo.

Bug#832222: foodcritic: Section should not be “ruby”

[Ben Finney]

On 25-Jul-2016, Stefano Rivera wrote:
> Hi Ben (2016.07.23_05:17:01_-0700)
> > The package ‘foodcritic’ installs primarily an application, of
> > interest regardless of the programming language. It should not be in
> > the “ruby” section.
> 
> foodcritic is a linter for chef cookbooks, which are written in ruby.
> Well, chef cookbooks are a ruby-based DSL, but it's essentially ruby.

The Section for a package is meant to guide people in finding
packages.

Someone looking for Chef tools is less likely to be looking in the Ruby
language section, and more likely to be looking in the system
administration section. Would you agree?

-- 
 \ “I wrote a song, but I can't read music so I don't know what it |
  `\is. Every once in a while I'll be listening to the radio and I |
_o__)say, ‘I think I might have written that.’” —Steven Wright |
Ben Finney 


signature.asc
Description: PGP signature

Bug#832192: [Python-modules-team] Bug#832192: celeryd: Section should not be “python”

[Brian May]

To: Debian-Devel

Any ideas what section this package should go into?

I don't really care myself, however don't want to move it somewhere and
find that I need to move it again.

Thanks.

Ben Finney  writes:

> Well, it seems at least a good fit: Celery is a “system resource” as
> much as any other daemon that provides services to applications behind
> the scenes.
>
> The sections aren't going to fit all packages perfectly, though. If
> you can justify the package fitting some other section by functional
> description, go for it.
-- 
Brian May 

Bug#832452: twinkle: Crashes during call when switching desktop

[Geert Stappers]

On Mon, Jul 25, 2016 at 11:30:07PM +0200, Rob van der Putten wrote:
> On Mon, 25 Jul 2016, Geert Stappers wrote:
> >Please elaborate that, describe how to reproduce the crash.
> 
> - Start twinkle
> - Call someone
> - Press Ctrl-Fn to switch workspace.
> - Wait a few seconds.
> This will crash twinkle.
> 
> - It will also crash if the above is combined with minimised
> - It will also crash if the above is combined with always on
>   visible workspace.
> 
> It doesn't crash while calling without pressing Ctrl-Fn.
> It doesn't crash while pressing Ctrl-Fn without calling.
> 

And that is with which graphical desktop environment?

What happens when switching workspace is done withOUT Ctrl-Fn keystrokes?


Groeten
Geert Stappers

P.S.
XFCE, Gnome, KDE,  https://wiki.debian.org/DesktopEnvironment

As Far As I Know is  "Ctrl-Fn" available on {,some,most,all} laptops.

Bug#832486: Please package yabause 0.19.15

[Markus Koschany]

Package: yabause
Version: 0.9.14-1
Severity: wishlist


Please package the latest version of yabause 0.19.15.

I have forwarded Michael's message to pkg-games-devel. Perhaps his files
are of use for a future update.


 Forwarded Message 
Subject:yabause 0.19.15
Date:   Mon, 25 Jul 2016 18:16:39 -0400
From:   mikey d 
To: pkg-games-de...@lists.alioth.debian.org



I fixed up the debian files for the newest tagged yabuase 0.19.15 (noted
in their changelog). Below is the link to my files. feel free to use
them if you wish. I didn't know if they would be of value to you to push
a new Sid version.

https://github.com/ProfessorKaos64/LibreGeek-Packaging/tree/brewmaster/yabause/debian

-- 
Michael DeGuzis
Email: mdegu...@gmail.com 
Website: http://www.libregeek.org 
Linked In Resume/Profile

Projects: GitHub Projects 
___
Pkg-games-devel mailing list
pkg-games-de...@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-games-devel


signature.asc
Description: OpenPGP digital signature

Bug#832460: World readable .rediscli_history

[kpcyrd]

> > Another bug report by @denisvm, this time on the linenoise library:
> > https://github.com/antirez/linenoise/issues/121
> 
> Indeed this looks like it might affect some other packages in Debian:
> 
>  https://codesearch.debian.net/search?q=int+linenoiseHistorySave&perpkg=1
> 
> Can you check these? I'm about to get on a flight and won't be able to
> work on this for perhaps 24h.

I can confirm the same bug is present in mongodb:

cat /home/*/.dbshell

I'm looking into the other packages tomorrow.

Bug#832485: task-xfce-desktop: uninstallable on kfreebsd due to dependency on light-locker

[Adam Borowski]

Package: task-xfce-desktop
Version: 3.35
Severity: important

Hi!
I'm afraid that the xfce task can't be currently installed on kfreebsd. 
This is especially nasty as xfce is the default DE on that arch.

The reason is that it depends on light-locker, which is Linux only.
A possible solution is to change that dependency to:
Depends: light-locker|xscreensaver
which would have the extra benefit of kind of alleviating #827562,
with light-locker as the first alternative per the XFCE's team wishes.
If you think that's a bad idea, the dependency could be arch specific.



-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: kfreebsd-amd64 (x86_64)

Kernel: kFreeBSD 10.1-0-amd64
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages task-xfce-desktop depends on:
ii  lightdm   1.18.2-2
ii  task-desktop  3.34
ii  tasksel   3.34
ii  xfce4 4.12.3

Versions of packages task-xfce-desktop recommends:
ii  dbus-x111.10.8-1
ii  evince  3.20.0-1
ii  evince-gtk  3.20.0-1
pn  gnome-orca  
ii  hunspell-en-us  20070829-6
ii  hyphen-en-us2.8.8-3
ii  iceweasel   45.2.0esr-1
pn  libreoffice 
ii  libreoffice-gtk 1:5.0.2-1
ii  libreoffice-help-en-us  1:5.0.2-1
ii  mousepad0.4.0-4
ii  mythes-en-us1:5.1.3-2
pn  network-manager-gnome   
ii  orage   4.12.1-2
ii  quodlibet   3.6.2-1
ii  synaptic0.83+b1
ii  system-config-printer   1.5.7-1
ii  tango-icon-theme0.8.90-6
pn  vlc 
ii  xfce4-goodies   4.12.2
pn  xfce4-mixer 
ii  xfce4-power-manager 1.4.4-4
ii  xfce4-terminal  0.6.3-2
pn  xsane   

task-xfce-desktop suggests no packages.

-- no debconf information

Bug#832484: xserver-xorg-core: modesetting on some Intel hw causes hangs on xscreensaver (and on VT switches)

[Francesco Poli (wintermute)]

Package: xserver-xorg-core
Version: 2:1.18.4-1
Severity: normal

Hello X Strike Force,
thanks for taking the step to use the modesetting X video driver by default
on most Intel graphics hardware. I hope this move will help in solving
the issues that many users have been facing in recent times with the Intel
X video driver.


I have been giving this modesetting driver a try since this morning.
Unfortunately, I am experiencing some new issues on one box (these
issues do not seem to show on another box with more recent Intel
graphics hardware...).

After leaving the display locked (with xscreensaver) for the lunch
break, I came back to the box and found the screen in dpmsOff state
(as usual), I pressed [Shift] on the keyboard in order to wake up
the display (as usual) and found a hanged screensaver (as has often
happened in the last year or two, with the Intel X video driver).

By "hanged screensaver" I mean that you see a static image (one of the
frames generated by the screensaver under consideration) which is
completely frozen and, if you hit a key, you do not get the usual
login dialog window, but you instead see the mouse pointer which
you can move inside an invisible rectangle (exactly where the login
dialog window is supposed to be displayed).

For a long time, my usual workaround has been the following:
  * switch to another virtual terminal (VT) with [Ctrl+Alt+F2]
  * switch back to the original VT with [Ctrl+Alt+F1] (I use startx
from tty1, with no display manager)
After this workaround, everything used to come back to normal (another
screensaver running, login dialog window, entering password unlocks the
display, and so forth...).

A very different behavior was exhibited by the modesetting driver
on the box under consideration.

The VT switch did not produce any visible result. My attempt to switch
back to the original VT produced a completely frozen screensaver:
static image, no login dialog, no mouse pointer, no sign of life.

After a worrying wait of many seconds (perhaps tens of seconds,
I haven't measured), during which I desperately tried to enter my
password anyway, everything came back to normal: the display was
unlocked and my X session was working again.

I found a number of kernel traces in /var/log/kern.log (attached).
The times showed that the first traces were experienced well before
I came back to the box, while the last ones were obtained during
my attempts to re-gain control of my X session...

I also noticed that switching VT back and forth (without a running
screensaver or a locked display) generates new traces in
/var/log/kern.log ...


Please investigate this bug and fix it and/or forward my bug report
upstream, as appropriate.

Thanks for your time.



-- Package-specific info:
X server symlink status:

lrwxrwxrwx 1 root root 13 Nov  6  2009 /etc/X11/X -> /usr/bin/Xorg
-rwxr-xr-x 1 root root 274 Jul 20 05:00 /usr/bin/Xorg

VGA-compatible devices on PCI bus:
--
00:02.0 VGA compatible controller [0300]: Intel Corporation 4 Series Chipset 
Integrated Graphics Controller [8086:2e22] (rev 03)

/etc/X11/xorg.conf does not exist.

/etc/X11/xorg.conf.d does not exist.

KMS configuration files:

/etc/modprobe.d/i915-kms.conf:
  options i915 modeset=1
/etc/modprobe.d/radeon-kms.conf:
  options radeon modeset=1

Kernel version (/proc/version):
---
Linux version 4.6.0-1-amd64 (debian-ker...@lists.debian.org) (gcc version 5.4.0 
20160609 (Debian 5.4.0-6) ) #1 SMP Debian 4.6.4-1 (2016-07-18)

No Xorg X server log files found.

udev information:
-
P: /devices/LNXSYSTM:00/LNXPWRBN:00/input/input7
E: DEVPATH=/devices/LNXSYSTM:00/LNXPWRBN:00/input/input7
E: EV=3
E: ID_FOR_SEAT=input-acpi-LNXPWRBN_00
E: ID_INPUT=1
E: ID_INPUT_KEY=1
E: ID_PATH=acpi-LNXPWRBN:00
E: ID_PATH_TAG=acpi-LNXPWRBN_00
E: KEY=10 0
E: MODALIAS=input:b0019vp0001e-e0,1,k74,ramlsfw
E: NAME="Power Button"
E: PHYS="LNXPWRBN/button/input0"
E: PRODUCT=19/0/1/0
E: PROP=0
E: SUBSYSTEM=input
E: TAGS=:seat:
E: USEC_INITIALIZED=12889923

P: /devices/LNXSYSTM:00/LNXPWRBN:00/input/input7/event4
N: input/event4
E: BACKSPACE=guess
E: DEVNAME=/dev/input/event4
E: DEVPATH=/devices/LNXSYSTM:00/LNXPWRBN:00/input/input7/event4
E: ID_INPUT=1
E: ID_INPUT_KEY=1
E: ID_PATH=acpi-LNXPWRBN:00
E: ID_PATH_TAG=acpi-LNXPWRBN_00
E: LIBINPUT_DEVICE_GROUP=19/0/1/0:LNXPWRBN/button
E: MAJOR=13
E: MINOR=68
E: SUBSYSTEM=input
E: TAGS=:power-switch:
E: USEC_INITIALIZED=13081371
E: XKBLAYOUT=us
E: XKBMODEL=pc104
E: XKBOPTIONS=compose:menu

P: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input6
E: DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input6
E: EV=3
E: ID_FOR_SEAT=input-acpi-PNP0C0C_00
E: ID_INPUT=1
E: ID_INPUT_KEY=1
E: ID_PATH=acpi-PNP0C0C:00
E: ID_PATH_TAG=acpi-PNP0C0C_00
E: KEY=10 0
E: MODALIAS=input:b0019vp0001e-e0,1,k74,ramlsfw
E: NAME="Power Button"
E: PHYS="PNP0C0C/butt

Bug#832482: WPG file security bug

[Bastien ROUCARIES]

commit 4042a65de0e0bc4402bdb63538bbb54587cbfb7a
Author: dirk 
Date:   Sat Feb 6 12:10:10 2016 +0100

Out of bound in wpg file

This is a partial fix

bug: https://github.com/ImageMagick/ImageMagick/issues/102
origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/d9b2209a69ee90d8df81fb124eb66f593eb9f599
bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1539050
bug-debian: https://bugs.debian.org/832482

commit db0df3cb39c6df6c779f65670cd3e67a0bf4f715
Author: Cristy 
Date:   Fri Feb 5 21:07:12 2016 -0500

Out of bound in wpg file

This is a partial fix

bug: https://github.com/ImageMagick/ImageMagick/issues/102
bug: https://github.com/ImageMagick/ImageMagick/issues/122
origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/a251039393f423c7858e63cab6aa98d17b8b7a41
bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1539050
bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1542115
bug-debian: https://bugs.debian.org/832482

Bug#832483: Fix out of bound for viff file

[Bastien ROUCARIES]

Package: imagemagick
Version: 8:6.7.7.10-5
Severity: grave
Tags: patch security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org


Bug: https://github.com/ImageMagick/ImageMagick/issues/99
Origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/ca0c886abd6d3ef335eb74150cd23b89ebd17135
bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537425
bug-debian: https://bugs.debian.org/823750

Bug#832482: WPG file security bug

[Bastien ROUCARIES]

Package: imagemagick
Version: 8:6.7.7.10-5
Severity: grave
Tags: patch security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org

 Out of bound in wpg file

This is a partial fix

bug: https://github.com/ImageMagick/ImageMagick/issues/102
origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/b6ae2f9e0ab13343c0281732d479757a8e8979c7
bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1539050
bug-debian: https://bugs.debian.org/823750

Bug#832481: Please remove "local stratum 10" from default config file

[Juliusz Chroboczek]

Package: chrony
Version: 1.30-2+deb8u2
Severity: minor

The default config file contains the line

  local stratum 10

When run on a node with no RTC, this line causes chrony to disrupt the
other nodes until the node manages to synchronise with a network node.
I suggest commenting it out in the default configuration.

-- Juliusz

Bug#832480: Fix head buffer overflow in psd file

[Bastien ROUCARIES]

Package: imagemagick
Version: 8:6.7.7.10-5
Severity: grave
Tags: patch security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org


bug: https://github.com/ImageMagick/ImageMagick/issues/98
origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/5f16640725b1225e6337c62526e6577f0f88edb8
bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537424
bug-debian: https://bugs.debian.org/823750

Bug#832478: [Pkg-gmagick-im-team] Bug#832478: Fix meta file outofbound access

[Bastien ROUCARIES]

   Fix meta file outofbound access

This is a partial fix

bug: https://github.com/ImageMagick/ImageMagick/issues/96
origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/5a34d7ac889bd6645f6cfd164636e3efb56dbb2f
bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537420
bug-debian: https://bugs.debian.org/823750

On Mon, Jul 25, 2016 at 11:30 PM, Bastien ROUCARIES
 wrote:
> Package: imagemagick
> Version: 8:6.7.7.10-5
> Severity: grave
> Tags: patch security
> X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org
>
>
>
> This is a partial fix
>
>
>
> bug: https://github.com/ImageMagick/ImageMagick/issues/96
>
> origin: upstream,
> https://github.com/ImageMagick/ImageMagick/commit/f8c318d462270b03e77f082e2a3a32867cacd3c6
>
> bug-ubuntu:
> https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537420
>
> bug-debian: https://bugs.debian.org/823750
>
> ___
> Pkg-gmagick-im-team mailing list
> pkg-gmagick-im-t...@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-gmagick-im-team

Bug#832478: [Pkg-gmagick-im-team] Bug#832478: Fix meta file outofbound access

[Bastien ROUCARIES]

outofbound-LP1537420.meta
Description: Binary data

Bug#832479: ValueError: Namespace Poppler not available

[Mark Caglienzi]

Package: mat
Version: 0.6.1-2
Severity: important

Dear Maintainer,
I just installed mat, and doing a simple

$ mat -c image.jpg

gives this error:

Traceback (most recent call last):
  File "/usr/bin/mat", line 10, in 
from libmat import mat
  File "/usr/lib/python2.7/dist-packages/libmat/mat.py", line 22, in 
import strippers  # this is loaded here because we need LOGGING_LEVEL
  File "/usr/lib/python2.7/dist-packages/libmat/strippers.py", line 9, in

import office
  File "/usr/lib/python2.7/dist-packages/libmat/office.py", line 15, in

gi.require_version('Poppler', '0.18')
  File "/usr/lib/python2.7/dist-packages/gi/__init__.py", line 102, in
require_version
raise ValueError('Namespace %s not available' % namespace)
ValueError: Namespace Poppler not available


However after manual installation of gir1.2-poppler-0.18 the problem is solved.

Maybe the mat package must ensure that the gir1.2-poppler-0.18 package is 
installed,
or install it otherwise.

Kind regards,
Mark



-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.6.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages mat depends on:
ii  python-gi   3.20.1-1
ii  python-mutagen  1.33.2-1
ii  python-pdfrw0.2-2
pn  python:any  

Versions of packages mat recommends:
ii  gir1.2-gdkpixbuf-2.02.34.0-1
ii  gir1.2-glib-2.0 1.48.0-3
ii  gir1.2-gtk-3.0  3.20.6-2
pn  gir1.2-nautilus-3.0 
pn  gir1.2-poppler-0.18 
ii  libimage-exiftool-perl  10.20-1
ii  python-gi-cairo 3.20.1-1
pn  python-nautilus 

mat suggests no packages.

-- no debconf information

-- 
. ''`.  | GPG Public Key  : 0xCD542422 - Download it from http://is.gd/fOa7Vm
: :'  : | GPG Fingerprint : 0823 A40D F31B 67A8 5621 AD32 E293 A2EB CD54 2422
`. `'`  | Powered by Debian GNU/Linux, http://www.debian.org
  `-| Try not. Do, or do not. There is no try. - Master Yoda, TESB.


signature.asc
Description: PGP signature

Bug#757331: buggy magic: mistakes HTML as unified diff

[Christoph Biedl]

tags 757331 confirmed upstream
thanks

LB wrote...

> the problem occurs with a file from the bzr-doc package:
> 
> $ file /usr/share/doc/bzr/html/en/user-guide/shelving_changes.html 
> /usr/share/doc/bzr/html/en/user-guide/shelving_changes.html: unified diff 
> output, UTF-8 Unicode text
> 
> whereas the file is HTML with some unified diff inside.

Jepp, and the embedded diff takes precedence. This shouldn't happen, I'll
try to fix this upstream.

Christoph


signature.asc
Description: Digital signature

Bug#832478: Fix meta file outofbound access

[Bastien ROUCARIES]

Package: imagemagick
Version: 8:6.7.7.10-5
Severity: grave
Tags: patch security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org



This is a partial fix



bug: https://github.com/ImageMagick/ImageMagick/issues/96

origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/f8c318d462270b03e77f082e2a3a32867cacd3c6

bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537420

bug-debian: https://bugs.debian.org/823750

Bug#832452: twinkle: Crashes during call when switching desktop

[Rob van der Putten]

Hi there


On Mon, 25 Jul 2016, Geert Stappers wrote:


Please elaborate that, describe how to reproduce the crash.


- Start twinkle
- Call someone
- Press Ctrl-Fn to switch workspace.
- Wait a few seconds.
This will crash twinkle.

- It will also crash if the above is combined with minimised
- It will also crash if the above is combined with always on
  visible workspace.

It doesn't crash while calling without pressing Ctrl-Fn.
It doesn't crash while pressing Ctrl-Fn without calling.


Regards,
Rob

Bug#832476: xserver-common: "Broadcast RGB" auto fails on Intel HD + DisplayPort

[helios]

Package: xserver-common
Version: 2:1.18.4-1
Severity: normal
Tags: newcomer

Dear Maintainer,

This has been a problem earlier with the intel driver. If "Broadcast RGB" was
set to auto, my screen connected via displayport was set to limited color space
(16-235).
I changed this by running "xrandr --output DP1 --set "Broadcast
RGB" "Full""
Somewhen later this was fixed in the driver and the command wasn't required
anymore.

However without the intel driver now, this command seems to be required again.
The display name is now DP-1 instead of DP1:
xrandr --output DP-1 --set "Broadcast RGB" "Full"


It would be better of course if the autodetection was fixed at first, but I
don't know how any of this works.
I don't think there is any DisplayPort device that requires limited color space
(Or DP-HDMI-Converters maybe?)

Intel Haswell i5-4690K
Intel HD 4600 graphics.



~$ xrandr --verbose
Screen 0: minimum 320 x 200, current 1920 x 1080, maximum 8192 x 8192

DP-1 connected 1920x1080+0+0 (0x48) normal (normal left inverted right x axis y
axis) 510mm x 287mm
Identifier: 0x43
Timestamp:  4296682
Subpixel:   unknown
Gamma:  1.0:1.0:1.0
Brightness: 1.0
Clones: HDMI-1
CRTC:   0
CRTCs:  0 1 2
Transform:  1.00 0.00 0.00
0.00 1.00 0.00
0.00 0.00 1.00
   filter:
EDID:
000015c3682001010101
14150104a5331d78e2ee95a3544c9926
0f5054a1080081808140b30081c00101
010101010101023a801871382d40582c
4500fe1f111e00ff00373436
39373035310a2020202000fd003b
3d1f440f000a20202020202000fc
0045563233570a20202020200142
020318c0440102030423097f07830100
0066030c00100080d50980a020e02d10
1060a200fe1f11188c0ad08a20e0
2d10103e9600fe1f11188c0ad08a
20e02d10103e9600fe1f1118011d
007251d01e206e285500fe1f111e

0033
Broadcast RGB: Full
supported: Automatic, Full, Limited 16:235
audio: auto
supported: force-dvi, off, auto, on



-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.6.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages xserver-common depends on:
ii  x11-common 1:7.7+16
ii  x11-xkb-utils  7.7+3
ii  xkb-data   2.17-1

Versions of packages xserver-common recommends:
ii  xauth1:1.0.9-1
ii  xfonts-base  1:1.0.4+nmu1

xserver-common suggests no packages.

-- no debconf information

Bug#829292: autoconf-archive: new upstream version 2016.03.20

[roucaries bastien]

Will do please reprod in end of august if not done

On Sat, Jul 2, 2016 at 7:40 AM, Paul Wise  wrote:
> Package: autoconf-archive
> Version: 20150925-1
> Severity: wishlist
>
> The latest upstream version 2016.03.20 has some changes to AX_CHECK_GL
> that would appear to fix macOS support. The MacPorts/chromium-bsu
> maintainer encountered bugs in the version in Debian unstable:
>
> https://sourceforge.net/p/chromium-bsu/bugs/26/
>
> -- System Information:
> Debian Release: stretch/sid
>   APT prefers testing-debug
>   APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 
> 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 
> 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 4.6.0-1-amd64 (SMP w/4 CPU cores)
> Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
>
> Versions of packages autoconf-archive depends on:
> ii  dpkg  1.18.7
>
> Versions of packages autoconf-archive recommends:
> ii  autoconf  2.69-10
>
> autoconf-archive suggests no packages.
>
> -- no debconf information
>
> --
>
> bye,
> pabs
>
> https://wiki.debian.org/PaulWise

Bug#832477: pu: libtool

[Kurt Roeckx]

Package: release.debian.org
Tags: jessie
User: release.debian@packages.debian.org
Usertags: pu

Hi,

I would like to fix #800446 in stable.  It was caused by the
uploader not using the current version of automake when uploading
the binary package.  The i386 and amd64 version need to be build
using the same version.

So I see 2 solutions:
- We binNMU it on both i386 and amd64
- I upload a new version with no changes


Kurt

Bug#832475: Fix a outofbound access for psd file

[Bastien ROUCARIES]

Package: imagemagick
Version: 8:6.7.7.10-5
Severity: grave
Tags: patch security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org

Split of 823750
Fix a outofbound access for psd file

Added extra check to fix
https://github.com/ImageMagick/ImageMagick/issues/93

origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/4b1b9c0522628887195bad3a6723f7000b0c9a58
bug: https://github.com/ImageMagick/ImageMagick/issues/93
bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537419

Bug#832433: [Pkg-erlang-devel] Bug#832433: CVE-2016-1000108

[Moritz Mühlenhoff]

On Mon, Jul 25, 2016 at 06:04:50PM +0300, Sergei Golovan wrote:
> Hi Moritz,
> 
> On Mon, Jul 25, 2016 at 5:03 PM, Moritz Muehlenhoff  wrote:
> > Source: yaws
> > Severity: normal
> > Tags: security
> >
> > http://seclists.org/oss-sec/2016/q3/95 claims that yaws sets
> > HTTP_PROXY based a passed Proxy: header. I don't see any
> > evidence for that in the source, but maybe I'm missing something?
> 
> Actually, it does set HTTP_PROXY if the Proxy: header is passed to it.
> You can see in src/yaws.erl (lines 2537-2542 in 2.0.3) it collects all
> unknown headers to the "other" headers collection:
> 
> %% auxiliary headers we don't have builtin support for
> {ok, X} ->
> ?Debug("OTHER header ~p~n", [X]),
> http_collect_headers(CliSock, Req,
>  H#headers{other=[X|H#headers.other]},
>  SSL, Count+1);
> 
> And in src/yaws_cgi.erl (lines 370-373 in 2.0.3) it passes all the "other"
> headers to the CGI script environment (with HTTP_ prepended, so Proxy
> becomes HTTP_PROXY, the tohttp function does exaclty that):
> 
> {"HTTP_COOKIE", flatten_val(make_cookie_val(H#headers.cookie))}
>]++lists:map(fun({http_header,_,Var,_,Val})->{tohttp(Var),Val} end,
> H#headers.other)
>   )) ++
> 
> So, YAWS is vulnerable. How do you think we should fix this?

Oh, you're right I missed that code section!

> Appears that this bug is already fixed upstream (in VCS, not in any
> release yet):
> 
> https://github.com/klacke/yaws/commit/9d8fb070e782c95821c90d0ca7372fc6d7316c78#diff-54053c47eb173a90c26ed19bd9d106c1
>
> I could take this patch and prepare the fixes for sid and jessie.

The impact is still fairly limited, so I think it's sufficient if
we fix this through the next jessie point release.

Cheers,
Moritz

Bug#832460: World readable .rediscli_history

[Chris Lamb]

> Another bug report by @denisvm, this time on the linenoise library:
> https://github.com/antirez/linenoise/issues/121

Indeed this looks like it might affect some other packages in Debian:

 https://codesearch.debian.net/search?q=int+linenoiseHistorySave&perpkg=1

Can you check these? I'm about to get on a flight and won't be able to
work on this for perhaps 24h.


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-

Bug#832474: Fix a heap buffer overflow in psd file handling

[Bastien ROUCARIES]

Package: imagemagick
Version: 8:6.7.7.10-5
Severity: grave
Tags: patch security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org

Split of 823750

  Fix a heap buffer overflow in psd file handling

Bug: https://github.com/ImageMagick/ImageMagick/issues/92.
Origin: 
https://github.com/ImageMagick/ImageMagick/commit/30eec879c8b446b0ea9a3bb0da1a441cc8482bc4
Bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537418

Bug#832452: twinkle: Crashes during call when switching desktop

[Geert Stappers]

On Mon, Jul 25, 2016 at 06:15:10PM +0200, Rob van der Putten wrote:
> Twinkle works OK until I switch vertual desktop.

Please elaborate that, describe how to reproduce the crash.


Groeten
Geert Stappers
-- 
Leven en laten leven

Bug#828886: lintian: error on .js file even though its .min.js co-exist in the same folder

[Bastien ROUCARIES]

On Tue, Jun 28, 2016 at 9:19 PM, Andrew Lee  wrote:
> Package: lintian
> Version: 2.5.44~bpo8+1
> Severity: normal
>
> Dear Maintainer,
>
> I am packaging a new package ruby-flot-rails. Lintian complains
> source-is-missing error on it's .js files. But it has both .js and
> .min.js files in the same vendor/assets/javascripts/ folder.
>
> For example:
> E: ruby-flot-rails source: source-is-missing
> vendor/assets/javascripts/jquery.flot.resize.js line length is 1674
> characters (>512)


The min.js link to js file is found but js file include some long line...
> $ ls vendor/assets/javascripts/jquery.flot.resize*
> vendor/assets/javascripts/jquery.flot.resize.js
> vendor/assets/javascripts/jquery.flot.resize.min.js
>
> Best regards,
>
> -Andrew
>

Bug#832470: nmu: deal.ii_8.4.1-1

[Emilio Pozuelo Monfort]

On 25/07/16 22:51, Matthias Maier wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: binnmu
> 
> nmu deal.ii_8.4.1-1 . amd64 . unstable . -m "Rebuild against trilinos 
> 12.6.3-2 due to ABI change"

What's the bug number? A binNMU to workaround an ABI break is usually the wrong
approach, unless there has been a SONAME bump.

Cheers,
Emilio

Bug#751281: icedove send (with ntlm) results in SIGSEGV

[Glenn Serre]

Good afternoon Carsten,

On Mon, Jul 25, 2016 at 1:17 PM, Carsten Schoenert
 wrote:
> Hello Glenn,
>
> On Wed, Jun 11, 2014 at 10:52:56AM -0700, Glenn Serre wrote:
>> Package: icedove
>> Version: 30.0~b1-1
>> Severity: important
>>
>> Dear Maintainer,
>>
>> Starting about 2014-06-10 after a dist-upgrade, when I do:
>>
>> start icedove
>> write a test email to myself (or anyone)
>> click send
>>
>> The result is that icedove crashes (gdb trace below).
>> It also crashes when run in safemode.
>> Restarting the system doesn't help.
>
> this issue is still present?

Hard to say, as I am now at a different company with different email
setup (ntlm authentication not required).

> Then so, can please a little bit more your setup explain?

It was a while ago, but the summary was that I had to use ntlm
authentication to access my email from a linux box (in icedove, at
least).

I am happily using icedove in my new company, though.

Thanks,
--Glenn S.

>
> Regards
> Carsten

Bug#831529: gstreamer1.0-libav: segfault when trying to play h264 video

[Philip Rinn]

Hi,

I was hit by the same bug (which is not restricted to h264 video for me). I can
fix it if I set LANG to C, so

LANG=C gst-launch-1.0 -v playbin uri=file:///path/to/video.mp4

works for me.Is this the same bug or should I file a new bug?

Hope that helps,
Philip



signature.asc
Description: OpenPGP digital signature

Bug#669859: closed by Guido Günther (Re: Bug#669859: icedove startup: user flooded with overlapping reminder and password prompts)

[Daniel Pocock]

On 25/07/16 22:09, Carsten Schoenert wrote:
> Hello Daniel,
> 
> is this issue still present in recent versions?

I'm running icedove 38.7.0-1~deb8u1 and iceowl-extension
38.7.0-1~deb8u1, I didn't see the prompt for CalDAV credentials at all
last time I started icedove

I still see multiple prompts for the master password though

Bug#734213: [file] Please detect silverlight xac

[Christoph Biedl]

retitle 734213 Missing magic: silverlight
tags 734213 moreinfo
thanks

bastien ROUCARIES wrote...

> I wish for lintian to detect silverlight file. 

Hello,

it's been a long time, sorry for that. The file program has evolved a
lot since your request, can you please re-check with a recent version?
Also, since I don't have access to such files, can you provide one for
further investigation? Preferably a download link.

Christoph


signature.asc
Description: Digital signature

Bug#832469: HDR file overflow

[Bastien ROUCARIES]

Package: imagemagick
Version: 8:6.7.7.10-5
Severity: grave
Tags: patch security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org

Split of 823750



bug: https://github.com/ImageMagick/ImageMagick/issues/90
bug-ubuntu: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537213
origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/14e606db148d6ebcaae20f1e1d6d71903ca4a556
Bug-debian: https://bugs.debian.org/823750

Bug#832469: HDR file overflow

[Bastien ROUCARIES]

Test case

Bug#832473: synaptic: Cannot change mark from "complete removal" to "removal"

[Kyanos]

Package: synaptic
Version: 0.83+b1
Severity: minor

Dear Maintainer,

If I mark a package for complete removal, I cannot change the mark
directly to simple removal.

Steps to reproduce:

1. Select a package.

2. Mark the package for complete removal.[1]

3. Mark the package for removal.[1]

[1] This can be done by either right-clicking and selecting the
appropriate option, going to the Package menu and selecting the option,
or using a keyboard shortcut. Any of these will yield the same result.

Actual result:

The package is still marked for complete removal. There is still a
yellow cross on the package mark, and the summary that is shown after
clicking "Apply" lists the package under "To be completely removed
(including configuration files)".

Expected result:

The package should be marked for removal. There should be a red cross on
the package mark, and the summary that is shown after clicking "Apply"
should list the package under "To be removed"

Thank you for your consideration.

Kyanos

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing'), (300, 'oldstable-updates'), (300,
'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.6.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages synaptic depends on:
ii  hicolor-icon-theme   0.15-1
ii  libapt-inst2.0   1.3~pre2
ii  libapt-pkg5.01.3~pre2
ii  libatk1.0-0  2.20.0-1
ii  libc62.23-2
ii  libcairo-gobject21.14.6-1+b1
ii  libcairo21.14.6-1+b1
ii  libept1.5.0  1.1+nmu3
ii  libgcc1  1:6.1.1-9
ii  libgdk-pixbuf2.0-0   2.34.0-1
ii  libglib2.0-0 2.48.1-2
ii  libgnutls30  3.4.14-1
ii  libgtk-3-0   3.20.6-2
ii  libpango-1.0-0   1.40.1-1
ii  libpangocairo-1.0-0  1.40.1-1
ii  libstdc++6   6.1.1-9
ii  libvte-2.91-00.44.2-1
ii  libx11-6 2:1.6.3-1
ii  libxapian22v51.2.23-1
ii  zlib1g   1:1.2.8.dfsg-2+b1

Versions of packages synaptic recommends:
pn  libgtk2-perl   
ii  policykit-10.105-15
ii  rarian-compat  0.8.1-6
ii  xdg-utils  1.1.1-1

Versions of packages synaptic suggests:
ii  apt-xapian-index 0.48
pn  deborphan
pn  dwww 
pn  menu 
pn  software-properties-gtk  
ii  tasksel  3.35

-- no debconf information

Bug#820583: flashplugin-nonfree: should notify when an update is not yet available, not just reinstall current version

[Peter Gervai]

Package: flashplugin-nonfree
Version: 1:3.6.1+b1
Followup-For: Bug #820583

And again. This time, however, this is a major update, which may or may not 
justify some delay,
but still the install re-downloads the same version happily and makes no noise 
about it. 

This should be fixed; either don't do this or do complain about it. (I have 
tried to check your script
but your detailed comments in the code aren't always clear. :-P)
Thanks.

~# update-flashplugin-nonfree --status
Flash Player version installed on this system  : 11.2.202.626
Flash Player version available on upstream site: 22.0.0.209

Bug#827941: more hash sum of lena image

[Bastien ROUCARIES]

control: tags -1 + moreinfo

On Thu, Jun 23, 2016 at 5:44 PM, Jakub Wilk  wrote:
> * Lumin , 2016-06-23, 01:50:
>>
>> $ dpkg -L python-matplotlib-data | grep lena | xargs sha224sum
>
>
> The current Lintian code requires SHA-256 digest, not SHA-224.
>
> (I've never understood why can't we use MD5 alone. Oh well...)
>
> --
> Jakub Wilk
>

Bug#832471: RM: deal.ii [arm64 armhf i386 mips mips64el mipsel hppa ppc64 sh4 x32] -- ROM; build-depends (trilinos-all-dev, petsc-dev, libtbb-dev) not available on all architectures

[Matthias Maier]

Package: ftp.debian.org
Severity: normal

Bug#832472: RFS: django-memoize/2.0.0+dfsg-1 [ITP]

[Christopher Hoskin]

Package: sponsorship-requests
Severity: wishlist

Dear Mentors,

  I am looking for a sponsor for my package "django-memoize"

 * Package name: django-memoize
   Version : 2.0.0+dfsg-1
   Upstream Author : Thadeus Burgess, Thomas Vavrys 
 * URL : https://pythonhosted.org/django-memoize/
 * License : BSD-3-clause
   Section : python

  It builds those binary packages:

 python-django-memoize - implementation of memoization technique for Django 
(Python 2)
 python-django-memoize-doc - implementation of memoization technique for Django 
(common documentation)
 python3-django-memoize - implementation of memoization technique for Django 
(Python 3)

  To access further information about this package, please visit the following 
URL:

  https://mentors.debian.net/package/django-memoize


  Alternatively, one can download the package with dget using this command:

dget -x 
https://mentors.debian.net/debian/pool/main/d/django-memoize/django-memoize_2.0.0+dfsg-1.dsc

  More information about django-memoize can be obtained from 
https://pythonhosted.org/django-memoize/.

  The VCS for the package is:

  https://anonscm.debian.org/cgit/python-modules/packages/django-memoize.git/

  Regards,
   Christopher Hoskin

Bug#832470: nmu: deal.ii_8.4.1-1

[Matthias Maier]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: binnmu

nmu deal.ii_8.4.1-1 . amd64 . unstable . -m "Rebuild against trilinos 12.6.3-2 
due to ABI change"

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.4.5-gentoo (SMP w/8 CPU cores; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Bug#832460: World readable .rediscli_history

[kpcyrd]

> > I've contacted upstream on 2016-05-30 without any reaction at all and
> > discovered this bug was first reported 3 years ago, still unfixed.
> > @RedisLabs keeps referring to their paid support on twitter.
> 
> Boo. Is there an upstream bug# for this or was this reported privately?

My report:
https://github.com/antirez/redis/issues/3284

Patch by @denisvm:
https://github.com/antirez/redis/pull/3322

Another bug report by @denisvm, this time on the linenoise library:
https://github.com/antirez/linenoise/issues/121

Another patch by @denisvm:
https://github.com/antirez/linenoise/pull/122

Report + patch by @georgenicolaou, 2013 (discovered that today):
https://github.com/antirez/redis/pull/1418

Bug#832418: gmap: no longer builds on all little-endian architectures

[Graham Inggs]

Hi Alexandre

Thanks for the fast upload!
I'm sorry, I made a typo in my bug report and it ended up in your
debian/changelog.

   * Add patch from Graham Inggs fixing FTBFS on armf and amd64

Should be:

   * Add patch from Graham Inggs fixing FTBFS on armhf and arm64

The description in the patch is correct though.
I suggest you fix it in git so that it can be corrected in a future upload.

Regards
Graham

Bug#832467: Fix multiple out of bound problem

[Bastien ROUCARIES]

commit 033c060a1ec8bf8df6b863208a08eaa8edc0656e
Author: Cristy 
Date:   Thu Jan 14 19:55:03 2016 -0500

Fix out of bound access in sun file

This is a partial fix for sun file.

Bug: https://github.com/ImageMagick/ImageMagick/issues/81
Bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533447
Bug-debian: https://bugs.debian.org/832467
Origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/27174368653c698f0ae16119b56fa14ce5994893

Bug#832468: bgpdump: FTBFS on s390x, ppc64, sparc64

[Christoph Biedl]

Package: bgpdump
Version: 1.4.99.15+hg127-2
Severity: important

The bgpdump fails to build on big-endian archs where 

sizeof(time_t) == sizeof(long) == sizeof(void *) == 8

Reason is the loader for 32 bit timestamps in bgpdump_lib.c:144 that
stuffs the data into the first bytes (but is endianness aware). For LE
this works as long as the remaining bytes are zero. For BE this
creates insanely huge time values where "It may return NULL when the
year does not fit into an integer" (gmtime manpage) applies. Things go
downhill from there.

Christoph


signature.asc
Description: Digital signature

Bug#832433: [Pkg-erlang-devel] Bug#832433: Bug#832433: CVE-2016-1000108

[Sergei Golovan]

Hi again,

Appears that this bug is already fixed upstream (in VCS, not in any
release yet):

https://github.com/klacke/yaws/commit/9d8fb070e782c95821c90d0ca7372fc6d7316c78#diff-54053c47eb173a90c26ed19bd9d106c1

I could take this patch and prepare the fixes for sid and jessie.

Cheers!
-- 
Sergei Golovan

Bug#832466: ITP: python-ubjson -- Universal Binary JSON encoder/decoder

[Orestis Ioannou]

Package: wnpp
Severity: wishlist
Owner: Orestis Ioannou 

* Package name: python-ubjson
  Version : 0.8.5
  Upstream Author : 2016 Iotic Labs Ltd vilnis.terma...@iotic-labs.com
* URL : https://github.com/Iotic-Labs/py-ubjson
* License : Apache-2.0
  Programming Lang: Python
  Description : Universal Binary JSON encoder/decoder

Universal Binary JSON encoder/decoder based on the draft-12 specification.
It’s meant to behave very much like Python’s built-in JSON module

Limitations

* The No-Op type is not supported. (This should arguably be a protocol-
level rather than serialisation-level option.)
* Strongly-typed containers are only supported by the decoder (apart from
for bytes/bytearray).
* Encoder/decoder extensions are not supported at this time.
* cython optimizations could be improved.

Last off-archive dependency for crossbar which i want to package

Bug#832467: Fix multiple out of bound problem

[Bastien ROUCARIES]

Package: imagemagick
Version: 8:6.7.7.10-5
Severity: grave
Tags: patch security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org


Split 823750

Fix an out of bound access in rle file.

Fix an out of bound access in pict file.

Fix an out of bound access in viff file.

This is a partial fix for sun file.

Adapted 
https://github.com/ImageMagick/ImageMagick/commit/2174484dfa68a594e2f9ad17f46217b6120db18d

Origin: upstream, https://github.com/ImageMagick/ImageMagick/issues/82
Bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533445
Origin: upstream, https://github.com/ImageMagick/ImageMagick/issues/81
Bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533447
Origin: upstream, https://github.com/ImageMagick/ImageMagick/issues/80
Bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533449
Origin: upstream, https://github.com/ImageMagick/ImageMagick/issues/77
Bug-ubuntu:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533452
Bug-debian: https://bugs.debian.org/823750

Bug#505638: mailman: Mailman dies on log rotation

[Tony Middleton]

Sorry - finger trouble.

Version should have said 2.1.18.

Regards

Tony



signature.asc
Description: OpenPGP digital signature

Bug#763822: Moving towards buildinfo on the archive network

[Jonathan McDowell]

Having been impressed by the current status of reproducible builds and
the fact it looks like we're close to having the important pieces in
Debian proper, I have started to have a look at how I could help out
with this bug. I've done some poking around in the dak code, and think I
have a vague idea of how to achieve what I think is wanted.

First, it is helpful to describe what I think is wanted. What I think we
need is the archive network to have, alongside the binary packages it
contains, details of exactly how to build those binaries. This is, I
believe, the information contained in the .buildinfo files.

This bug has previously talked about a tarball of .buildinfo files,
presented as Buildinfos.tgz alongside the Packages file. From looking at
the current architecture of dak I do not believe that this is an easy
option.

I propose instead a Buildinfo.xz (or gz or whatever) file, which is
single text file with containing all of the buildinfo information that
corresponds to the Packages list. What is lost by this approach are the
OpenPGP signatures that .buildinfo files can have on them. I appreciate
this is an important part of the reproducible builds aim, but I believe
one of its strengths is the ability for multiple separate package builds
to attest that they have used that buildinfo information to build the
exact same set of binary artefacts. This is not something that easily
scales on the archive network and I think it is better served by a
separate service; it would be possible to take the package snippet from
the buildinfo file and sign that alone, uploading the signature to the
attestation service. For "normal" Debian operation the usual archive
signatures would provide a basic level of attestation of chain of build
information.

The rest of this mail continues on the above assumptions. If you do not
agree with the above the below is probably null and void, so ignore it
and instead educate me about what the requirements are and I'll try and
adjust my ideas based on that.

So. If a single Buildinfo.xz file is acceptable, with the attestation
being elsewhere, I think this is doable without too much hackery in dak.
There are some trade-offs to make though, and I need to check which are
acceptable and which are viewed as too much.

Firstly, there is currently no concept of "build ids" that I can see;
essentially the primary key for a build is (source-package,
architecture, version). This assumes we never have the same version of a
package with different binaries produced; I understand there is
sometimes skew between security + the main archive but it's not clear to
me if this will continue to be the case when we're doing things
reproducibly. Even if it's not adding a simple build id doesn't actually
help AFAICT.

Secondly, buildinfo files that I've seen so far include arch all .debs
with the architecture .debs. I believe on the archive these should be
separate; so a build + upload that includes arch all + arch amd64 (for
example) debs will actually end up with an entry (for just the all debs)
in the all Buildinfo.xz and an entry (for just the amd64 debs) in the
amd64 Buildinfo.xz. Why? Binary NMUs, which don't rebuild the all .debs.
Otherwise you end up changing the buildinfo information (to drop the
rebuild amd64 debs) or keeping around old buildinfo information (+ you
have to track the fact you need it and know when to clean it up).

Thirdly, as the information is generated from a database, there needs to
be a defined order in which the fields are generated. This is purely to
ensure that the buildinfo information for each package is generated in a
reproducible fashion so any external signatures remain valid over time.

If these are acceptable I think that projectb needs 2 additional tables,
buildinfo_keys, similar to metadata_keys, and binaries_buildinfo, which
would have a 3 column primary key of (source-package, architecture,
version), and then key_id/value fields (similar to binaries_metadata) to
hold the buildinfo information that is not already present elsewhere in
the database. At present the main information these will hold is
Installed-Build-Depends field - the rest that I've actively seen are
available already.

Have I missed anything? I don't think the code to implement the above
ends up particularly complex in dak, and the resulting Buildinfo.xz
files should not add a particularly large amount of new data to the
mirror network. The main loss is that of the attestation information as
part of the mirror network (and actually, I can see a way we could add
that as a buildinfo field that wasn't part of the signature at some
point in the future).

(Additionally it is not clear to me where the dpkg status for
buildinfo creation is; I have heard that it's close to happening, but I
can't find anything on recent list archives about it - pointers
appreciated!)

J.

-- 
/-\ |  I get the feeling that I've been
|@/  Debian GNU/Linux Developer |  cheated.
\-  

Bug#832465: SUN file ABRT signal

[Bastien ROUCARIES]

Avoid a SIGABRT in sun file handling

This is a partial fix for malformed sun file

Bug: http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26857
Bug-debian: https://bugs.debian.org/832465
Origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/8ea44b48a182dd46d018f4b4f09a5e2ee9638105

Bug#810913: mesa: Enable OpenCL on ppc64el

[Timothy Pearson]

> As I understand your first mail in this report, this requires a fix
> somewhere first?  (I wouldn't want to apply a "temporary" patch in
> Debian.)

Unfortunately it doesn't look like upstream is going to patch their code. 
There is a protracted "blame game" going on between mesa and gcc:
https://bugs.freedesktop.org/show_bug.cgi?id=93687
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=58241

Master Khronos bug report (unfortunately largely ignored):
https://www.khronos.org/bugzilla/show_bug.cgi?id=1449

I suspect this won't be dealt with unless downstream distributions patch
the codebase themselves.

Thanks!

Bug#832465: SUN file ABRT signal

[Bastien ROUCARIES]

Test case

Bug#505638: mailman: Mailman dies on log rotation

[Tony Middleton]

I still seem to have this problem on Debian Mailman 2.18.2.  I've only
ever noticed it happening on a Sunday but can't be sure that is always
the case. 

Regards

Tony

qrunner log:

ul 24 03:31:09 2016 (7179) Master watcher caught SIGHUP.  Re-opening log
files.
Jul 24 03:31:10 2016 (7180) ArchRunner qrunner caught SIGHUP.  Reopening
logs.
Jul 24 03:31:10 2016 (7187) RetryRunner qrunner caught SIGHUP. 
Reopening logs.
Jul 24 03:31:10 2016 (7181) BounceRunner qrunner caught SIGHUP. 
Reopening logs.
Jul 24 03:31:10 2016 (7183) IncomingRunner qrunner caught SIGHUP. 
Reopening logs.
Jul 24 03:31:10 2016 (7182) CommandRunner qrunner caught SIGHUP. 
Reopening logs.
Jul 24 03:31:10 2016 (7185) OutgoingRunner qrunner caught SIGHUP. 
Reopening logs.
Jul 24 03:31:10 2016 (7184) NewsRunner qrunner caught SIGHUP.  Reopening
logs.
Jul 24 03:31:10 2016 (7183) IncomingRunner qrunner caught SIGTERM. 
Stopping.
Jul 24 03:31:10 2016 (7180) ArchRunner qrunner caught SIGTERM.  Stopping.
Jul 24 03:31:10 2016 (7187) RetryRunner qrunner caught SIGTERM.  Stopping.
Jul 24 03:31:10 2016 (7181) BounceRunner qrunner caught SIGTERM.  Stopping.
Jul 24 03:31:10 2016 (7182) CommandRunner qrunner caught SIGTERM.  Stopping.
Jul 24 03:31:10 2016 (7185) OutgoingRunner qrunner caught SIGTERM. 
Stopping.
Jul 24 03:31:10 2016 (7184) NewsRunner qrunner caught SIGTERM.  Stopping.
Jul 24 03:31:10 2016 (7187) RetryRunner qrunner exiting.
Jul 24 03:31:10 2016 (7183) IncomingRunner qrunner exiting.
Jul 24 03:31:10 2016 (7180) ArchRunner qrunner exiting.
Jul 24 03:31:10 2016 (7182) CommandRunner qrunner exiting.
Jul 24 03:31:10 2016 (7181) BounceRunner qrunner exiting.
Jul 24 03:31:10 2016 (7184) NewsRunner qrunner exiting.
Jul 24 03:31:10 2016 (7186) VirginRunner qrunner caught SIGHUP. 
Reopening logs.
Jul 24 03:31:10 2016 (7186) VirginRunner qrunner caught SIGTERM.  Stopping.
Jul 24 03:31:10 2016 (7185) OutgoingRunner qrunner exiting.
Jul 24 03:31:10 2016 (7186) VirginRunner qrunner exiting.




signature.asc
Description: OpenPGP digital signature

Bug#832465: SUN file ABRT signal

[Bastien ROUCARIES]

Avoid a SIGABRT in sun file handling

This is a partial fix for malformed sun file

Bug: http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26857
Bug-debian: https://bugs.debian.org/832465
Origin: upstream,
https://github.com/ImageMagick/ImageMagick/commit/6b4aff0f117b978502ee5bcd6e753c17aec5a961