Bug#882103: python-pkg-resources: crashing with "ImportError: No module named load_entry_point"

[Marc]

Ok, I discovered a little more I thought was worth sharing.

I did an update just before I noticed the problem. There was a Kernel update 
and apparmor was installed to satisfy a recommended dependency.

I removed apparmor and problem goes away, and I installed apparmor again and 
the problem returns.

So for now I am up and running again, but in the future if apparmor becomes a 
strong dependency the problem will return.

Maybe obfsproxy needs it's own apparmor profile, or the python profile has a 
problem?

Regards

Marc

Bug#882223: Reassign

[Bastien ROUCARIES]

control: assign -1 glibc-doc

Bug#882085: [cowsay] Package includes ASCII representation of Zoophilia

[J. R. Schmid]

You people are beyond me. Why in the world would you want a picture of a 
sheep (?) being forced (??) into sex (???) it quite likely does not want 
() in a distribution of computer programs (?) even if there was 
no legal issue whatsoever. If you can judge by the number of question 
marks, this is a serious question. I'm looking forward to the attempt of 
a serious answer.

Bug#882204: bs1770gain: FTBFS

[James Cowgill]

Hi,

On 20/11/17 12:11, Jaromír Mikeš wrote:
> ​I am build outside from chroot to test build with new libsox.

You should be using sbuild or pbuilder for test builds.

> it builds fine inside of chroot with old libsox.
> 
> ​Can you try please
> $ dpkg-buildpackage -us -uc
> 
> with orig tar.ball obtained from here:
> http://cdn-fastly.deb.debian.org/debian/pool/main/b/bs1770gain/bs1770gain_0.4.12.orig.tar.gz

I did an "apt-get source bs1770gain" and built it outside of a chroot
and it still builds ok.

James



signature.asc
Description: OpenPGP digital signature

Bug#882204: bs1770gain: FTBFS

[Jaromír Mikeš]

2017-11-20 11:15 GMT+01:00 James Cowgill :

> Control: severity -1 serious
> Control: tags -1 moreinfo
> Control: block 882200 by -1
>
> Hi,
>
>
> > your package fails to build with following error:
> > /missing: line 81: aclocal-1.14: command not found
> > WARNING: 'aclocal-1.14' is missing on your system.
> >  You should only need it if you modified 'acinclude.m4' or
> >  'configure.ac' or m4 files included by 'configure.ac'.
> >  The 'aclocal' program is part of the GNU Automake package:
> >  
> >  It also requires GNU Autoconf, GNU m4 and Perl in order to run:
> >  
> >  
> >  
> > Makefile:330: recipe for target 'aclocal.m4' failed
>
> I cannot reproduce this failure, although I notice the package doesn't
> use dh-autoreconf which would prevent a bug such as this. Maybe you
> touched some file which caused automake to try to regenerate everything?
> Do you have the full build log?


​I am build outside from chroot to test build with new libsox.
it builds fine inside of chroot with old libsox.

​Can you try please
$ dpkg-buildpackage -us -uc

with orig tar.ball obtained from here:
http://cdn-fastly.deb.debian.org/debian/pool/main/b/bs1770gain/bs1770gain_0.4.12.orig.tar.gz

best regards

mira

Bug#816874: Bug#816779: Remmina doesn't always honor scale ratio lock

[Dark Penguin]

Yes, this was a bug in 1.1.2, which was buggy. So I moved to 1.2.0, 
which was not in the repo at the time, but without this bug.



--
darkpenguin

Bug#882085: (no subject)

[S.B.]

This depiction of a sodomised cow is not illigal in germany, because it is a 
work of art and so it is even protected by german law. 

Bug#880566: Sponsorship request

[Teus Benschop]

The newest packaging available from [1] fixes this bug.

I am asking for assistance with reviewing and uploading this packaging.

[1] https://anonscm.debian.org/gitweb/?p=pkg-crosswire/bibletime.git

Bug#882222: Document security problems with system.3 and popen.3 (argument injection)

[Bastien ROUCARIES]

Package: manpages-dev
Version: 4.13-3
Severity: grave
Tags: security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org
Justification: more than 20 security bugs filled in other package
control: clone -1 -2
control: reaffect -2 glibc-doc


Please document the implication of system.3 and popen.3, particularly
argument injection.

Please get inspiration from ENV33-C. Do not call system()

Sugest to use execvp and please provide example of secure alternative
for both API

Note that escaping argument is not portable particularly if argument
include control char for a POSIX shell.

https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?pageId=87152177



Use of the system() function can result in exploitable
vulnerabilities, in the worst case allowing execution of arbitrary
system commands. Situations in which calls to system() have high risk
include the following:

When passing an unsanitized or improperly sanitized command string
originating from a tainted source
If a command is specified without a path name and the command
processor path name resolution mechanism is accessible to an attacker
If a relative path to an executable is specified and control over the
current working directory is accessible to an attacker
If the specified executable program can be spoofed by an attacker

Bug#844268: libboost1.62-doc doesn't contain the actual documentation

[Gregor Riepl]

> W: libboost1.65-doc: privacy-breach-generic 
> usr/share/doc/libboost1.65-doc/HTML/libs/assert/doc/html/assert.html 
> (https://fonts.googleapis.com/css?family=open+sans:300,300italic,400,400italic,600,600italic%7cnoto+serif:400,400italic,700,700italic%7cdroid+sans+mono:400,700)

Both Open Sans and Noto are available as Debian packages.

May I suggest adding a
Recommends: fonts-open-sans
if it isn't already there?

This doesn't actually help with the document building process, but at least
the presentation is covered.

Bug#882221: Please drop python-cairo-dev build-dependency

[Laurent Bigonville]

Source: medit
Version: 1.2.0-2
Severity: minor

Hi,

AFAICS, the python-cairo-dev build-dependency is not needed anymore and
can be dropped.

Kind regards,

Laurent Bigonville

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Bug#882220: webkit2gtk: please apply the patch with NetworkStateNotifier implementation

[Andrew Shadura]

Source: webkit2gtk
Severity: wishlist

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Dear Maintainers,

Gustavo Noronha Silva has written an submitted a short patch to WebKit2
to implement NetworkStateNotifier, which solves issues with websockets
timing out and online/offline state not working ([0], [1]).

Please consider applying the patch, it should be pretty straighforward
to do ([2], [3])

Thanks!

[0]: https://blog.kov.eti.br/2017/10/who-knew-we-still-had-low-hanging-fruits/
[1]: https://bugs.webkit.org/show_bug.cgi?id=177741
[2]: https://bugs.webkit.org/attachment.cgi?id=322383=prettypatch
[3]: http://trac.webkit.org/changeset/222723/webkit

- -- 
Cheers,
  Andrew

-BEGIN PGP SIGNATURE-

iQI8BAEBCAAmBQJaErqqHxxhbmRyZXcuc2hhZHVyYUBjb2xsYWJvcmEuY28udWsA
CgkQQWcbs0qEk4H8fw/+MTd24WO8QiNfBPu7Bbwcnli/P6w2CMDPWSQph5AVcYnU
gimrJGUcAyr7W/DnWekbx/qNDzTWtnP87lz4leuYIK/SwVxid+jzyP/nig1kIOec
pkPt72TJQNFpOl2u8AVQbeAKGDCxF1tr9BSTEk18ta2rJPKbCp3dr5x08pmM7CZN
l9/wKCJ9iK4Ok+7Cd9a3HS7vIxkrybahLpARIU5nuhwoGbhhLvPpnqd9sHGNzBnV
YuhJaJ6j8HClzuEWLrCkHBNR5Pavq54//8z+HSImf8A3WYRjyNND9GFCH8LYRhPt
1TCIUMVcIcTuDr99gewPgyA6igV2/L8bezrQrbG/WrSAtViD9jPbMvUfGUhbCI1H
rAyVXIhGGM393GQYZdaCGSuHQqr5rsbrM2XXj4P3wMw7Cn5X5LonefAAQ1akR+kQ
2NW5SbK0MiuC422TMq0arUiO1JMVdYO0/OrowRlOr45CZ2mbGmEhNTosvxD3ePSr
R9Dcm8MMx1nqEilKmcP9t8ITF00sqSy4EJ6Va7c3LISt/iGoQsv4IwKbpp+QOX+s
GOJwRB6xkGol2893koEBDn9dGqN/VaRRfaYJaTh2WC7mLGvXxb2LEQlnEZebr2a+
jAgnbPytDV0ZSCcyKfPJ3x+n+lNG3fBo5YzPrf7KUEMi0ebNjMvY7+sl1n1jTh8=
=n6hr
-END PGP SIGNATURE-

Bug#882219: stretch-pu: package corebird/1.4.1-1+deb9u1

[Philip Rinn]

Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu

Dear release team,

Twitter changed the character limit of tweets to 280 chars (see [1]). The
version of corebird in stretch does only allow to compose tweets with 140
chars. The fix is really trivial[2].

Would you allow an update of corebird?

Best,

Philip


[1]
https://blog.twitter.com/official/en_us/topics/product/2017/tweetingmadeeasier.html

[2]
https://github.com/baedert/corebird/commit/d3cc0b068b4f3b1d0d97e4bd7c9e723d002636c1
diff -Nru corebird-1.4.1/debian/changelog corebird-1.4.1/debian/changelog
--- corebird-1.4.1/debian/changelog 2017-01-09 15:16:58.0 +0100
+++ corebird-1.4.1/debian/changelog 2017-11-20 11:43:37.0 +0100
@@ -1,3 +1,9 @@
+corebird (1.4.1-1+deb9u1) stretch; urgency=medium
+
+  * Allow 280 characters per tweet
+
+ -- Philip Rinn   Mon, 20 Nov 2017 11:43:37 +0100
+
 corebird (1.4.1-1) unstable; urgency=medium
 
   * New upstream release:
diff -Nru corebird-1.4.1/debian/patches/01-allow-280-characters.patch 
corebird-1.4.1/debian/patches/01-allow-280-characters.patch
--- corebird-1.4.1/debian/patches/01-allow-280-characters.patch 1970-01-01 
01:00:00.0 +0100
+++ corebird-1.4.1/debian/patches/01-allow-280-characters.patch 2017-11-16 
12:09:28.0 +0100
@@ -0,0 +1,13 @@
+Description: Twitter changed the limit to 280 characters
+Author: Timm Bäder 
+--- a/src/CbTweet.h
 b/src/CbTweet.h
+@@ -23,7 +23,7 @@
+ #include "CbTypes.h"
+ #include "CbMedia.h"
+ 
+-#define CB_TWEET_MAX_LENGTH 140
++#define CB_TWEET_MAX_LENGTH 280
+ 
+ typedef enum
+ {
diff -Nru corebird-1.4.1/debian/patches/series 
corebird-1.4.1/debian/patches/series
--- corebird-1.4.1/debian/patches/series1970-01-01 01:00:00.0 
+0100
+++ corebird-1.4.1/debian/patches/series2017-11-16 12:09:28.0 
+0100
@@ -0,0 +1 @@
+01-allow-280-characters.patch

Bug#882218: thunderbird: Apparmor doesn't allow personal profiles outside of ~/.{thunderbird,icedove}

[David Picard]

Package: thunderbird
Severity: important

Dear Maintainer,

I store my profiles under $HOME/Archives/.thunderbird with a symlink to
$HOME/.thunderbird to allow easier backup. I recently have had an apparmor
error, with a denial to lock the .parentlock file. This results in
thunderbird/icedove unable to start since no profile can ever be locked.

Creation of the .parentlock file is ok, but I suppose this is because write
permissions are give on the subdirectory from $Home. I don't know why I did not
have that before, since the apparmor profile is not really new.

Switching to the upstream version locally installed in /opt results in correct
operation.

A good way to reproduce would be either create a new profile outise of
~/.thunderbird or to move the entire ~/.thunderbird directory to another
directory (e.g., /tmp/thunderbird) and symlink it back to ~/.thunderbird.

All the best,
David.



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set 
to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages thunderbird depends on:
ii  debianutils   4.8.3
ii  fontconfig2.12.3-0.2
ii  libatk1.0-0   2.26.1-1
ii  libc6 2.24-17
ii  libcairo-gobject2 1.15.8-2
ii  libcairo2 1.15.8-2
ii  libdbus-1-3   1.12.2-1
ii  libdbus-glib-1-2  0.108-3
ii  libevent-2.1-62.1.8-stable-4
ii  libffi6   3.2.1-6
ii  libfontconfig12.12.3-0.2
ii  libfreetype6  2.8.1-0.1
ii  libgcc1   1:7.2.0-16
ii  libgdk-pixbuf2.0-02.36.11-1
ii  libglib2.0-0  2.54.2-1
ii  libgtk-3-03.22.26-1
ii  libhunspell-1.6-0 1.6.2-1
ii  libpango-1.0-01.40.13-2
ii  libpangocairo-1.0-0   1.40.13-2
ii  libpangoft2-1.0-0 1.40.13-2
ii  libpixman-1-0 0.34.0-1
ii  libstartup-notification0  0.12-4+b2
ii  libstdc++67.2.0-16
ii  libvpx4   1.6.1-3
ii  libx11-6  2:1.6.4-3
ii  libx11-xcb1   2:1.6.4-3
ii  libxcb-shm0   1.12-1
ii  libxcb1   1.12-1
ii  libxcomposite11:0.4.4-2
ii  libxdamage1   1:1.1.4-3
ii  libxext6  2:1.3.3-1+b2
ii  libxfixes31:5.0.3-1
ii  libxrender1   1:0.9.10-1
ii  libxt61:1.1.5-1
ii  psmisc23.1-1
ii  x11-utils 7.7+3+b1
ii  zlib1g1:1.2.8.dfsg-5

Versions of packages thunderbird recommends:
ii  hunspell-en-us [hunspell-dictionary]  1:2017.08.24
pn  lightning 
ii  myspell-fr-gut [myspell-dictionary]   1:1.0-32

Versions of packages thunderbird suggests:
ii  apparmor  2.11.1-3
ii  fonts-lyx 2.2.3-2
ii  libgssapi-krb5-2  1.15.2-2

Bug#856473: (no subject)

[Julian Wollrath]

tags 856473 + patch
tags 868059 + patch
tags 878602 + patch
tags 879854 + patch
thanks
diff --git a/debian/changelog b/debian/changelog
index f3853334..bb0101b2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+iproute2 (4.14.1-0.1) UNRELEASED; urgency=medium
+
+  * New upstream release (Closes: #856473, #868059, #878602, #879854)
+
+ -- Julian Wollrath   Mon, 20 Nov 2017 10:51:35 +0100
+
 iproute2 (4.9.0-2) unstable; urgency=medium
 
   * Let uscan verify signature of upstream tarball
diff --git a/debian/compat b/debian/compat
index ec635144..f599e28b 100644
--- a/debian/compat
+++ b/debian/compat
@@ -1 +1 @@
-9
+10
diff --git a/debian/control b/debian/control
index b98fbe81..499e3cf5 100644
--- a/debian/control
+++ b/debian/control
@@ -5,10 +5,9 @@ Maintainer: Alexander Wirt 
 Homepage: https://wiki.linuxfoundation.org/networking/iproute2
 Vcs-Browser: https://anonscm.debian.org/cgit/collab-maint/pkg-iproute.git
 Vcs-Git: https://anonscm.debian.org/git/collab-maint/pkg-iproute.git
-Standards-Version: 3.9.8
+Standards-Version: 4.1.1
 Build-Depends: bison,
-   cm-super-minimal,
-   debhelper (>= 9),
+   debhelper (>= 10),
flex,
iptables-dev,
libatm1-dev,
@@ -17,13 +16,8 @@ Build-Depends: bison,
libmnl-dev,
libselinux1-dev,
linux-libc-dev,
-   linuxdoc-tools,
-   lynx | lynx-cur,
pkg-config,
-   texlive-fonts-recommended,
-   texlive-latex-base,
-   texlive-latex-extra,
-   texlive-latex-recommended
+   zlib1g-dev
 
 Package: iproute2
 Priority: important
@@ -54,23 +48,3 @@ Description: networking and traffic control tools - documentation
  traffic control.
  .
  This package contains the documentation for iproute.
-
-Package: iproute
-Depends: iproute2, ${misc:Depends}
-Architecture: all
-Section: oldlibs
-Priority: extra
-Description: transitional dummy package for iproute2
- This is a transitional dummy package to get upgrading systems to install
- the iproute2 package. It can safely be removed once no other package
- depends on it.
-
-Package: iproute-doc
-Depends: iproute2-doc, ${misc:Depends}
-Architecture: all
-Section: oldlibs
-Priority: extra
-Description: transitional dummy package for iproute2-doc
- This is a transitional dummy package to get upgrading systems to install
- the iproute2-doc package. It can safely be removed once no other package
- depends on it.
diff --git a/debian/doc/htb/htbfaq.htm b/debian/doc/htb/htbfaq.htm
deleted file mode 100644
index 4ab2a78b..
--- a/debian/doc/htb/htbfaq.htm
+++ /dev/null
@@ -1,141 +0,0 @@
-HTB FAQ
-
-HTB FAQ
-
-Martin Devera aka devik (de...@cdi.cz)
-Last updated: 7.7.2003
-
-
-How to set single HTB up for more interfaces or for incoming packets
-
-You need IMQ for this because all qdisc can handle only outgoing
-traffic on single interface. See 
-http://www.linuximq.net/;>http://www.linuximq.net/.
-
-When HTB is used on machine with Apache (FTP, Samba, ...) server running
-   then downloading from it can't be limited precisely
-
-Try to add PFIFO with limit 10 under HTB classes. When you use default
-(much larger PFIFO) or SFQ then TCP stack will back off itself as it
-see too large memory used for outgoing packets. You can also play
-with /proc/sys/net/ipv4/tcp_wmem.
-
-"HTB: mindelay=500, report it please !" messages in syslog
-
-This means that all indicated that some class should be ready
-soon but when we looked for it we haven't found one which will
-be ready in 5 seconds.
-
-After this message you can see lines like
-
-kernel: htb*g j=154480191
-kernel: htb*r7 m=0
-kernel: htb*r6 m=0
-kernel: htb*r5 m=0
-kernel: htb*r4 m=0
-kernel: htb*r3 m=0
-kernel: htb*r2 m=0
-kernel: htb*r1 m=0
-kernel: htb*r0 m=0
-kernel: htb*c20110 m=2 t=636487 c=17888 pq=0 df=483328 ql=0 pa=0 f:
-kernel: htb*c20220 m=1 t=-5999 c=42404 pq=154487461 df=450560 ql=14 pa=40 f:
-kernel: htb*c20001 m=2 t=5131 c=6439 pq=0 df=8192 ql=0 pa=0 f:
-
-If you decide to treat is as real bug then I'll need all of these. They
-are logged under kernel.debug facility so often you need to add it so
-your syslog.conf. These "htb*" are dump of internal state of all classes.
-c20110 means class 2:110. *r lines are states of row activity bitsmasks.
-*c indicates stet of all classes. You are interested in classes
-with m=1 resp. m=0. These will become ready after time -c resp. -t whatever
-is negative and smaller.
-It is 5999 us for class 2:110 above which is 59sec. It is way too much
-and HTB will spill that error because it is  5 sec.
-
-So what is the problem ? Probably you have too small rate or ceil
-for such class - you should use at least 4kbit for realiable operation
-of HTB - it leads to max 3sec of delay for 1500 byte packets which seems
-as reasonable value.
-
-Also try this patch 

Bug#856473: Fixes for 856473, 868059, 878602 and 879854

[Julian Wollrath]

tags 856473 + patch
tags 868059 + patch
tags 878602 + patch
tags 879854 + patch
thanks

Hi,

attached is a patch, that fixes bugs 856473, 868059, 878602 and 879854

Best regards,
Julian

-- 
 ()  ascii ribbon campaign - against html e-mail 
 /\- against proprietary attachments
diff --git a/debian/changelog b/debian/changelog
index f3853334..bb0101b2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+iproute2 (4.14.1-0.1) UNRELEASED; urgency=medium
+
+  * New upstream release (Closes: #856473, #868059, #878602, #879854)
+
+ -- Julian Wollrath   Mon, 20 Nov 2017 10:51:35 +0100
+
 iproute2 (4.9.0-2) unstable; urgency=medium
 
   * Let uscan verify signature of upstream tarball
diff --git a/debian/compat b/debian/compat
index ec635144..f599e28b 100644
--- a/debian/compat
+++ b/debian/compat
@@ -1 +1 @@
-9
+10
diff --git a/debian/control b/debian/control
index b98fbe81..499e3cf5 100644
--- a/debian/control
+++ b/debian/control
@@ -5,10 +5,9 @@ Maintainer: Alexander Wirt 
 Homepage: https://wiki.linuxfoundation.org/networking/iproute2
 Vcs-Browser: https://anonscm.debian.org/cgit/collab-maint/pkg-iproute.git
 Vcs-Git: https://anonscm.debian.org/git/collab-maint/pkg-iproute.git
-Standards-Version: 3.9.8
+Standards-Version: 4.1.1
 Build-Depends: bison,
-   cm-super-minimal,
-   debhelper (>= 9),
+   debhelper (>= 10),
flex,
iptables-dev,
libatm1-dev,
@@ -17,13 +16,8 @@ Build-Depends: bison,
libmnl-dev,
libselinux1-dev,
linux-libc-dev,
-   linuxdoc-tools,
-   lynx | lynx-cur,
pkg-config,
-   texlive-fonts-recommended,
-   texlive-latex-base,
-   texlive-latex-extra,
-   texlive-latex-recommended
+   zlib1g-dev
 
 Package: iproute2
 Priority: important
@@ -54,23 +48,3 @@ Description: networking and traffic control tools - documentation
  traffic control.
  .
  This package contains the documentation for iproute.
-
-Package: iproute
-Depends: iproute2, ${misc:Depends}
-Architecture: all
-Section: oldlibs
-Priority: extra
-Description: transitional dummy package for iproute2
- This is a transitional dummy package to get upgrading systems to install
- the iproute2 package. It can safely be removed once no other package
- depends on it.
-
-Package: iproute-doc
-Depends: iproute2-doc, ${misc:Depends}
-Architecture: all
-Section: oldlibs
-Priority: extra
-Description: transitional dummy package for iproute2-doc
- This is a transitional dummy package to get upgrading systems to install
- the iproute2-doc package. It can safely be removed once no other package
- depends on it.
diff --git a/debian/doc/htb/htbfaq.htm b/debian/doc/htb/htbfaq.htm
deleted file mode 100644
index 4ab2a78b..
--- a/debian/doc/htb/htbfaq.htm
+++ /dev/null
@@ -1,141 +0,0 @@
-HTB FAQ
-
-HTB FAQ
-
-Martin Devera aka devik (de...@cdi.cz)
-Last updated: 7.7.2003
-
-
-How to set single HTB up for more interfaces or for incoming packets
-
-You need IMQ for this because all qdisc can handle only outgoing
-traffic on single interface. See 
-http://www.linuximq.net/;>http://www.linuximq.net/.
-
-When HTB is used on machine with Apache (FTP, Samba, ...) server running
-   then downloading from it can't be limited precisely
-
-Try to add PFIFO with limit 10 under HTB classes. When you use default
-(much larger PFIFO) or SFQ then TCP stack will back off itself as it
-see too large memory used for outgoing packets. You can also play
-with /proc/sys/net/ipv4/tcp_wmem.
-
-"HTB: mindelay=500, report it please !" messages in syslog
-
-This means that all indicated that some class should be ready
-soon but when we looked for it we haven't found one which will
-be ready in 5 seconds.
-
-After this message you can see lines like
-
-kernel: htb*g j=154480191
-kernel: htb*r7 m=0
-kernel: htb*r6 m=0
-kernel: htb*r5 m=0
-kernel: htb*r4 m=0
-kernel: htb*r3 m=0
-kernel: htb*r2 m=0
-kernel: htb*r1 m=0
-kernel: htb*r0 m=0
-kernel: htb*c20110 m=2 t=636487 c=17888 pq=0 df=483328 ql=0 pa=0 f:
-kernel: htb*c20220 m=1 t=-5999 c=42404 pq=154487461 df=450560 ql=14 pa=40 f:
-kernel: htb*c20001 m=2 t=5131 c=6439 pq=0 df=8192 ql=0 pa=0 f:
-
-If you decide to treat is as real bug then I'll need all of these. They
-are logged under kernel.debug facility so often you need to add it so
-your syslog.conf. These "htb*" are dump of internal state of all classes.
-c20110 means class 2:110. *r lines are states of row activity bitsmasks.
-*c indicates stet of all classes. You are interested in classes
-with m=1 resp. m=0. These will become ready after time -c resp. -t whatever
-is negative and smaller.
-It is 5999 us for class 2:110 above which is 59sec. It is way too much
-and HTB will spill that error because it is  5 sec.
-
-So what is the problem ? Probably you have too 

Bug#882217: pglogical: Fails autopkgtests in both Debian and Ubuntu

[Dimitri John Ledkov]

Package: pglogical
Version: 2.1.0-1
Severity: normal

Dear Maintainer,

pglogical is currently failing its autopkgtests on all architectures
in ubuntu, and in debian ci as well.

https://ci.debian.net/packages/p/pglogical/unstable/amd64/

http://autopkgtest.ubuntu.com/packages/pglogical

The tests themselves in pglogical look fine, maybe you can check them
and help pin-pointing where else a regression has appeared?

Currently this failure is holding back postgresql-10 and icu
transtions in Ubuntu.

Regards,

Dimitri.

Bug#882216: gssdp: FTBFS on mips* - sends packets to multicast address

[James Cowgill]

Source: gssdp
Version: 1.0.2-1
Severity: serious
Tags: sid buster

Hi,

gupnp FTBFS on mips* with the error:
> FAIL: test-bugs
> ===
> 
> /bugs/696762: 
> ** (/<>/tests/gtest/.libs/test-bugs:26885): WARNING **: Error 
> sending SSDP packet to 239.255.255.250: Error sending message: Operation not 
> permitted
> FAIL test-bugs (exit status: 133)

This is the same issue as in #882215. I will quote what I wrote there
for reference:

> This happens because sending packets to a multicast address is
> blacklisted from all servers in AQL because suspicious multicast packets
> trip AQL's protection systems and takes all the Debian servers in AQL
> offline.
> 
> These tests also likely violate policy 4.9:
> "For packages in the main archive, no required targets may attempt
> network access."

Thanks,
James





signature.asc
Description: OpenPGP digital signature

Bug#882215: gupnp: FTBFS on mips* - sends packets to multicast address

[James Cowgill]

Source: gupnp
Version: 1.0.2-1
Severity: serious
Tags: sid buster

Hi,

gupnp FTBFS on mips64el and mipsel with the error:
> FAIL: test-bugs
> ===
> 
> /bugs/696762: 
> ** (/<>/tests/gtest/.libs/test-bugs:26885): WARNING **: Error 
> sending SSDP packet to 239.255.255.250: Error sending message: Operation not 
> permitted
> FAIL test-bugs (exit status: 133)

This happens because sending packets to a multicast address is
blacklisted from all servers in AQL because suspicious multicast packets
trip AQL's protection systems and takes all the Debian servers in AQL
offline.

These tests also likely violate policy 4.9:
"For packages in the main archive, no required targets may attempt
network access."

Thanks,
James



signature.asc
Description: OpenPGP digital signature

Bug#882214: pulseaudio: All sounds are muted from the beginning and unable to make them work.

[u1]

Package: pulseaudio
Version: 11.1-2
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation? All system is muted
   * What exactly did you do (or not do) that was effective (or
 ineffective)? Trying to change some controls from the GUI without success
   * What was the outcome of this action? 
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- Package-specific info:
File '/etc/default/pulseaudio' does not exist


-- System Information:
Distributor ID: Devuan
Description:Devuan GNU/Linux unstable (ceres)
Release:unstable
Codename:   ceres
Architecture: x86_64

Kernel: Linux 4.13.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8), LANGUAGE=en_GB (charmap=UTF-8) (ignored: LC_ALL set to 
en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages pulseaudio depends on:
ii  adduser  3.116
ii  libasound2   1.1.3-5
ii  libasound2-plugins   1.1.1-1
ii  libc62.25-1
ii  libcap2  1:2.25-1.1
ii  libdbus-1-3  1.10.18-1+devuan2.3
ii  libgcc1  1:7.2.0-16
ii  libice6  2:1.0.9-2
ii  libltdl7 2.4.6-2
ii  liborc-0.4-0 1:0.4.27-1
ii  libpulse011.1-2
ii  libsm6   2:1.2.2-1+b3
ii  libsndfile1  1.0.28-4
ii  libsoxr0 0.1.2-3
ii  libspeexdsp1 1.2~rc1.2-1+b2
ii  libstdc++6   7.2.0-16
ii  libsystemd0  235-3
ii  libtdb1  1.3.15-2
ii  libudev1 235-3
ii  libwebrtc-audio-processing1  0.3-1
ii  libx11-6 2:1.6.4-3
ii  libx11-xcb1  2:1.6.4-3
ii  libxcb1  1.12-1
ii  libxtst6 2:1.2.3-1
ii  lsb-base 4.1+devuan2
ii  pulseaudio-utils 11.1-2

Versions of packages pulseaudio recommends:
ii  rtkit  0.11-5

Versions of packages pulseaudio suggests:
pn  paman
pn  paprefs  
ii  pavucontrol  3.0-3.1
pn  pavumeter
ii  udev 235-3

-- Configuration Files:
/etc/pulse/daemon.conf changed:
; daemonize = no
; fail = yes
; allow-module-loading = yes
; allow-exit = yes
; use-pid-file = yes
; system-instance = no
; local-server-type = user
; enable-shm = yes
; enable-memfd = yes
; shm-size-bytes = 0 # setting this 0 will use the system-default, usually 64 
MiB
; lock-memory = no
; cpu-limit = no
; high-priority = yes
; nice-level = -11
; realtime-scheduling = yes
; realtime-priority = 5
; exit-idle-time = 20
; scache-idle-time = 20
; dl-search-path = (depends on architecture)
; load-default-script-file = yes
; default-script-file = /etc/pulse/default.pa
; log-target = auto
; log-level = notice
; log-meta = no
; log-time = no
; log-backtrace = 0
; resample-method = speex-float-1
; avoid-resampling = false
; enable-remixing = yes
; remixing-use-all-sink-channels = yes
; enable-lfe-remixing = no
; lfe-crossover-freq = 0
; flat-volumes = yes
; rlimit-fsize = -1
; rlimit-data = -1
; rlimit-stack = -1
; rlimit-core = -1
; rlimit-as = -1
; rlimit-rss = -1
; rlimit-nproc = -1
; rlimit-nofile = 256
; rlimit-memlock = -1
; rlimit-locks = -1
; rlimit-sigpending = -1
; rlimit-msgqueue = -1
; rlimit-nice = 31
; rlimit-rtprio = 9
; rlimit-rttime = 20
; default-sample-format = s16le
; default-sample-rate = 48000
; alternate-sample-rate = 48000
; default-sample-channels = 2
; default-channel-map = front-left,front-right
; default-fragments = 5
; default-fragment-size-msec = 2
; enable-deferred-volume = yes
; deferred-volume-safety-margin-usec = 8000
; deferred-volume-extra-delay-usec = 0


-- no debconf information
# This file is part of PulseAudio.
#
# PulseAudio is free software; you can redistribute it and/or modify
# it under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# PulseAudio is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License
# along with PulseAudio; if not, see .

## Configuration file for PulseAudio clients. See pulse-client.conf(5) for
## more information. Default values are commented out.  Use either ; or # for
## commenting.

; default-sink =
; default-source =
; default-server =
; default-dbus-server =

; autospawn = yes
; daemon-binary = /usr/bin/pulseaudio
; extra-arguments = 

Bug#882213: gvfs-fuse: MTP device still visible after disconnecting

[Michal M.]

Package: gvfs-fuse
Version: 1.34.1-1+b1
Severity: normal

Dear Maintainer,

To reproduce bug:
 - connect any MTP enabled Android Phone to USB
 - run any file manager (Nautilus and Nemo tested). You will see your MTP
device visible in "Devices" section at te left side of file manager window
 - Unmount your device, disconnect USB cable. Device is removed, but item is
still visible in "Devices" section. It's dead item, not possible to remove it
or mount/unmount
 - Connect device to USB again. New item added to "Devices" view.

Multiple connecting/disconnecting devices causes multiple dead items, which is
pretty annoying. I need to reboot system to get them removed.

It seems to be ok when connecting mass storage device (like usb disk, pendrive,
etc), so bug is related to mtp only.



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-0.slh.2-aptosid-amd64 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8), 
LANGUAGE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gvfs-fuse depends on:
ii  fuse  2.9.7-1
ii  gvfs  1.34.1-1+b1
ii  libc6 2.25-1
ii  libfuse2  2.9.7-1
ii  libglib2.0-0  2.54.2-1

gvfs-fuse recommends no packages.

gvfs-fuse suggests no packages.

-- no debconf information

Bug#882204: bs1770gain: FTBFS

[James Cowgill]

Control: severity -1 serious
Control: tags -1 moreinfo
Control: block 882200 by -1

Hi,

On 20/11/17 08:17, Jaromír Mikeš wrote:
> Package: bs1770gain
> Version: 0.4.12-2
> Severity: important
> 
> Dear Maintainer,
> 
> your package fails to build with following error:
> /missing: line 81: aclocal-1.14: command not found
> WARNING: 'aclocal-1.14' is missing on your system.
>  You should only need it if you modified 'acinclude.m4' or
>  'configure.ac' or m4 files included by 'configure.ac'.
>  The 'aclocal' program is part of the GNU Automake package:
>  
>  It also requires GNU Autoconf, GNU m4 and Perl in order to run:
>  
>  
>  
> Makefile:330: recipe for target 'aclocal.m4' failed

I cannot reproduce this failure, although I notice the package doesn't
use dh-autoreconf which would prevent a bug such as this. Maybe you
touched some file which caused automake to try to regenerate everything?
Do you have the full build log?

James



signature.asc
Description: OpenPGP digital signature

Bug#869716: libplexus-containers-java: Wrong scope for junit dependency

[Emmanuel Bourg]

fixed 869716 1.7.1-6
done 869716

Bug#882212: apticron: Should probably depend on bsd-mailx | mailx

[Santiago Vila]

Package: apticron
Version: 1.1.61

Dear maintainer:

After installing apticron I got a lot of unwanted dependencies.
This is because apticron depend on "mailx" which is purely virtual,
and apt choose mailutils and all its dependencies.

For a simple notification tool like this, bsd-mailx is more than enough.

Suggested patch below.

Thanks.

--- a/debian/control
+++ b/debian/control
@@ -11,7 +11,7 @@ Vcs-Git: git://git.debian.org/git/collab-maint/apticron.git
 Package: apticron
 Architecture: all
 Pre-Depends: dpkg (>= 1.15.7.2)
-Depends: mailx, apt (>= 1.1~exp9), ucf (>= 0.28), cron | cron-daemon, bzip2, 
${misc:Depends}
+Depends: bsd-mailx | mailx, apt (>= 1.1~exp9), ucf (>= 0.28), cron | 
cron-daemon, bzip2, ${misc:Depends}
 Recommends: apt-listchanges, iproute2
 Description: Simple tool to mail about pending package updates
  Apticron is a simple script which sends daily emails about pending package

Bug#880474: redis-server: Unknown lvalue 'RunTimeDirectory' in section 'Service'

[Chris Lamb]

severity 880474 minor
tags 880474 + wontfix
thanks

Hi Russell,

> > Sorry for replying earlier but I seemingly did not receive this bug report
> > by mail and have just seen it via my QA page.
> 
> Maybe a DMARC issue.  No big deal.

Ah well, please be assured its just an impassive mail server that
considers your messages "junk" :)

> Probably the best thing to do is keep it open as wontfix until the next 
> stable 
> release so anyone else who has the issue will know the status.

Thanks; good idea. :)


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-

Bug#882085: [cowsay] Package includes ASCII representation of Zoophilia

[Johannes Schriewer]

On Mon, 20 Nov 2017 09:54:34 +0100 Dominik George wrote:
> > In fact, the package was installed since I have turned on install
> > suggests. If this was done on purpose or accident is not open for debate.
> 
> It is. I'm sorry, but in fact, your concern should be that you are obviously 
> unable to control what you install on your system. You can read a handbook on 
> this topic - but please leave unrelated maintainers alone - they are not the 
> support crew for your personal system's administration.

So what about mirrors in countries, where this is illegal (like germany), that 
get all packages automatically? Is there a way to exclude this illegal package? 
Wouldn’t it be easier to just remove that file and be done with it?

> The fix is to purge the package and look and think next time you install 
> packages.

Will you inform the mirrors in countries that this is illegal?

> 
> -nik

Bug#882211: mirror submission for mirror.reismil.ch

[Sebastian Elisa Pfeifer]

Package: mirrors
Severity: wishlist
User: mirr...@packages.debian.org
Usertags: mirror-submission

Submission-Type: new
Site: mirror.reismil.ch
Type: leaf
Archive-architecture: amd64 arm64 armhf i386 mips
Archive-http: /debian/
Maintainer: Sebastian Elisa Pfeifer 
Country: AT Austria
Location: Wien
Sponsor: Cyber Perikarp https://www.cyber-perikarp.eu/en
Comment: There is also a HTTPS Domain that points to the same server: 
https://mirror.cyber-perikarp.eu/




Trace Url: http://mirror.reismil.ch/debian/project/trace/
Trace Url: http://mirror.reismil.ch/debian/project/trace/ftp-master.debian.org
Trace Url: http://mirror.reismil.ch/debian/project/trace/mirror.reismil.ch

Bug#882085: [cowsay] Package includes ASCII representation of Zoophilia

[Felicia Hummel]

> Debian Mirror Operator here. This could bring some legal problems for
> some of us, since we do not only possess it, but also distribute the
> package.. I know this is highly theoretical, but only because law
> enforcement in most countries probably don't know about Debian (<-- as a
> figure of speech of course).

I agree. Whilst the content of the file in question is debatable, the
file name itself is not. In fact, "sodomized-sheep.cow" leaves no bug
room for interpretation of the ASCII representation itself.

A note to all those who try to troll me or the bug report because they
read about it on fefe: It was created to protect unknowingly of legal
actions, especially mirror operators or those who have install suggests
and recommends on.

If you find that "You're wasting the time of the maintainers", please
refer to the Debian Code of Conduct [1], which includes, but is not
limited to, those sections:

- Be respectful
- Assume good faith
- Be open

All the best
Felicia

[1] https://www.debian.org/code_of_conduct

Bug#882085: [cowsay] Package includes ASCII representation of Zoophilia

[Richard Wiedenhöft]

> Look and think next time you install packages

A name like "cowsay-off" doesn't imply it contains obscene content. Executing 
apt-cache show on all packages you install is impractical.

I suggest
* Changing the name of the package to "cowsay-obscene"
* Removing it from suggested packages for cowsay

~Richard

Bug#878216: Bug relating linux-image-3.16.0-4-amd64_3.16.48-1_amd64.deb and hyper-v gen2 vm

[Cristiano Casella]

Hi,

thanks for your support.

Can you provide me the different packages to test?


Cordiali Saluti / Best Regards

Cristiano Casella

---

Register.it S.p.A.



Da: Julien Cristau 
Inviato: domenica 19 novembre 2017 15:56
A: Cristiano Casella; 878...@bugs.debian.org
Oggetto: Re: Bug#878216: Bug relating 
linux-image-3.16.0-4-amd64_3.16.48-1_amd64.deb and hyper-v gen2 vm

Hi,

On Wed, Oct 11, 2017 at 08:45:14 +, Cristiano Casella wrote:

> Upgrading our vm with Debian 8 (also just installed) to last version of 
> linux-image package (linux-image-3.16.0-4-amd64_3.16.48-1_amd64.deb) the 
> virtual machines can't boot anymore.
>
>
> I attached to this email the two kind of error that we can get in the console.
>
>
> Looking at the changelog 
> (https://tracker.debian.org/media/packages/l/linux/changelog-3.16.48-1) I 
> suspect that this changes could be involved in this bug:
tracker.debian.org
tracker.debian.org
linux (3.16.48-1) jessie; urgency=medium * New upstream stable update: 
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.44 - [x86] 
drm/i915: relax ...



>
>
> - [x86] scsi: storvsc: use tagged SRB requests if supported by the device
> - [x86] scsi: storvsc: Fix a bug in the handling of SRB status flags
> - [x86] scsi: storvsc: properly handle SRB_ERROR when sense message is
>   present
> - [x86] scsi: storvsc: properly set residual data length on errors
>
> We can provide you all test environments needed or proceede with your support 
> for a kernel bisect to find the specific error.
>
If you could bisect between 3.16.43 and 3.16.48, that would be most
helpful.

Thanks,
Julien

Bug#882210: RFP: jgmenu -- simple modern standalone X11 menu

[Vladimir K]

Package: wnpp
Severity: wishlist
Version: 0.7.4
URL: https://github.com/johanmalm/jgmenu
License: GPL-2
Description: jgmenu is a simple standalone X11 menu. It is highly customizable, 
can be used as a pipe-menu or XDG applications menu. Plays well with tint2 and 
openbox, can optionally use some appearance settings from XSettings, tint2 or 
GTK.


Upstream already has working debian packaging.

Bug#882085: [cowsay] Package includes ASCII representation of Zoophilia

[Sebastian Elisa Pfeifer]

Morning!

> There are countries in which the possession of certain content is
> enough to be sentenced, in particular for example child pornography but
> also zoophilia. No distribution or "usage" is required.

Debian Mirror Operator here. This could bring some legal problems for
some of us, since we do not only possess it, but also distribute the
package.. I know this is highly theoretical, but only because law
enforcement in most countries probably don't know about Debian (<-- as a
figure of speech of course).

All the best
Sebastian

-- 
Sebastian Elisa Pfeifer

Cyber Perikarp - Verein z. Förderung d. Netzkultur
Wassertalweg 56   |   8670 Krieglach   |   AUSTRIA

Vereinsregisternummer:   712531114
Datenverarbeitungsregister:4016968
PGP Key ID: 0x923719A753677B95
EU-Transparenz-Registernummer: 334990728439-25
D-U-N-S® Nummer: 300530810

Phone: +43 3855 289 10
Fax:  +43 3855 289 10 - 10
Mobile: +43 677 623 144 11
Jabber:  deadd...@fsfe.org



signature.asc
Description: OpenPGP digital signature

Bug#880474: redis-server: Unknown lvalue 'RunTimeDirectory' in section 'Service'

[Russell Coker]

On Monday, 20 November 2017 7:48:18 AM AEDT Chris Lamb wrote:
> Sorry for replying earlier but I seemingly did not receive this bug report
> by mail and have just seen it via my QA page.

Maybe a DMARC issue.  No big deal.

> > redis-server: Unknown lvalue 'RunTimeDirectory' in section 'Service'
> 
> Hm, so this was added for #846350. Not quite clear what I should have
> done - clearly a "Depends" would be wrong, but "Breaks" doesn't seem
> that sensible either..
> 
> Is this actually causing a problem? If not, I'm not sure what we can
> do here; it seems far too minor for a point release update.

Probably the best thing to do is keep it open as wontfix until the next stable 
release so anyone else who has the issue will know the status.

-- 
My Main Blog http://etbe.coker.com.au/
My Documents Bloghttp://doc.coker.com.au/

Bug#882209: zfs-linux: remove manual calls to dpkg-architecture and dpkg-parsechangelog

[Fabian Grünbichler]

Source: zfs-linux
Severity: wishlist
Tags: patch

please see attached patches for cleaning up debian/rules a bit. the
resulting binary packages are bitwise identical.
>From 26ce8e603ede96824db34df8f9ee00a6071be4db Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fabian=20Gr=C3=BCnbichler?= 
Date: Mon, 20 Nov 2017 09:48:08 +0100
Subject: [PATCH 1/3] d/rules: include dpkg's default.mk
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Fabian Grünbichler 
---
 debian/rules | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/debian/rules b/debian/rules
index 800df22e0..bf0c740a9 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,7 @@
 #!/usr/bin/make -f
 
+include /usr/share/dpkg/default.mk
+
 LSB_DISTRIBUTOR := $(shell lsb_release -is)
 NAME := $(shell awk '$$1 == "Name:" { print $$2; }' META)
 VERSION := $(shell dpkg-parsechangelog \
-- 
2.14.2

>From 2372033259454f135127ce920bd7e464924a81a7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fabian=20Gr=C3=BCnbichler?= 
Date: Mon, 20 Nov 2017 08:58:41 +0100
Subject: [PATCH 2/3] d/rules: use DEB_VERSION_UPSTREAM
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

instead of manually parsing d/changelog

Signed-off-by: Fabian Grünbichler 
---
 debian/rules | 32 +++-
 1 file changed, 15 insertions(+), 17 deletions(-)

diff --git a/debian/rules b/debian/rules
index bf0c740a9..152b928fc 100755
--- a/debian/rules
+++ b/debian/rules
@@ -4,8 +4,6 @@ include /usr/share/dpkg/default.mk
 
 LSB_DISTRIBUTOR := $(shell lsb_release -is)
 NAME := $(shell awk '$$1 == "Name:" { print $$2; }' META)
-VERSION := $(shell dpkg-parsechangelog \
-  | awk '$$1 == "Version:" { print $$2; }' | cut -d- -f1)
 
 DKMSFILES := module include config zfs.release.in autogen.sh META AUTHORS \
 		DISCLAIMER COPYRIGHT OPENSOLARIS.LICENSE README.markdown
@@ -23,11 +21,11 @@ KVERS=$(shell uname -r)
 endif
 
 ifndef SPL
-SPL=/usr/src/spl-$(VERSION)
+SPL=/usr/src/spl-$(DEB_VERSION_UPSTREAM)
 endif
 
 ifndef SPLOBJ
-SPLOBJ=/var/lib/dkms/spl/$(VERSION)/$(KVERS)/$(shell dpkg-architecture -qDEB_TARGET_GNU_CPU)
+SPLOBJ=/var/lib/dkms/spl/$(DEB_VERSION_UPSTREAM)/$(KVERS)/$(shell dpkg-architecture -qDEB_TARGET_GNU_CPU)
 endif
 
 non_epoch_version=$(shell echo $(KVERS) | perl -pe 's/^\d+://')
@@ -46,7 +44,7 @@ ifeq ($(BUILD_UDEB), true)
 endif
 
 	@# Embed the downstream version in the module.
-	@sed -e 's/^Version:.*/Version:  $(VERSION)/' -i.orig META
+	@sed -e 's/^Version:.*/Version:  $(DEB_VERSION_UPSTREAM)/' -i.orig META
 
 	@# Build the userland, but don't build the kernel modules.
 	dh_auto_configure -- \
@@ -80,34 +78,34 @@ override_dh_auto_install:
 	mv '$(CURDIR)/debian/tmp/sbin/zed' '$(CURDIR)/debian/tmp/usr/sbin/zed'
 
 	@# Get a bare copy of the source code for DKMS.
-	@# This creates the $(CURDIR)/$(NAME)-$(VERSION)/ tree, which does not
+	@# This creates the $(CURDIR)/$(NAME)-$(DEB_VERSION_UPSTREAM)/ tree, which does not
 	@# contain the userland sources. NB: Remove-userland-dist-rules.patch
 	$(MAKE) distdir
 
 	@# Install the DKMS source.
 	@# We only want the files needed to build the modules
-	mkdir -p '$(CURDIR)/debian/tmp/usr/src/$(NAME)-$(VERSION)'
-	$(foreach file,$(DKMSFILES),mv '$(CURDIR)/$(NAME)-$(VERSION)/$(file)' '$(CURDIR)/debian/tmp/usr/src/$(NAME)-$(VERSION)' || exit 1;)
+	mkdir -p '$(CURDIR)/debian/tmp/usr/src/$(NAME)-$(DEB_VERSION_UPSTREAM)'
+	$(foreach file,$(DKMSFILES),mv '$(CURDIR)/$(NAME)-$(DEB_VERSION_UPSTREAM)/$(file)' '$(CURDIR)/debian/tmp/usr/src/$(NAME)-$(DEB_VERSION_UPSTREAM)' || exit 1;)
 	@# Hellish awk line:
 	@#  * Deletes from configure.ac the parts not needed for building the kernel module
 	@# * It deletes from inside AC_CONFIG_FILES([]) everything except:
 	@#(Makefile$|include/|module/|*.release$)
 	@#  * Takes care of spaces and tabs
 	awk '/^AC_CONFIG_FILES\(\[/,/^\]\)/ { if ($$0 !~ /^(AC_CONFIG_FILES\(\[([ \t]+)?$$|\]\)([ \t]+)?$$|([ \t]+)?(include\/|module\/|Makefile([ \t]+)?$$|zfs\.release([ \t]+)?$$))/){next} } {print}' \
-		'$(CURDIR)/$(NAME)-$(VERSION)/configure.ac' > '$(CURDIR)/debian/tmp/usr/src/$(NAME)-$(VERSION)/configure.ac'
+		'$(CURDIR)/$(NAME)-$(DEB_VERSION_UPSTREAM)/configure.ac' > '$(CURDIR)/debian/tmp/usr/src/$(NAME)-$(DEB_VERSION_UPSTREAM)/configure.ac'
 	@# Set "SUBDIRS = module include" for CONFIG_KERNEL and remove SUBDIRS for all other configs.
 	sed '1,/CONFIG_KERNEL/s/SUBDIRS.*=.*//g;s/SUBDIRS.*=.*/SUBDIRS = module include/g;' \
-		'$(CURDIR)/$(NAME)-$(VERSION)/Makefile.am' > '$(CURDIR)/debian/tmp/usr/src/$(NAME)-$(VERSION)/Makefile.am'
+		'$(CURDIR)/$(NAME)-$(DEB_VERSION_UPSTREAM)/Makefile.am' > '$(CURDIR)/debian/tmp/usr/src/$(NAME)-$(DEB_VERSION_UPSTREAM)/Makefile.am'
 	@# Sanity test
-	grep -q 'SUBDIRS = module include' '$(CURDIR)/debian/tmp/usr/src/$(NAME)-$(VERSION)/Makefile.am'
+	grep -q 

Bug#828483: Moving

[Hilko Bengen]

Hi,

This message by Stephen Henson looks like it might be the way to deal
with the STACK_OF(ASN1_OCTET_STRING) and
STACK_OF(SpcAttributeTypeAndOptionalValue) types.

https://mta.openssl.org/pipermail/openssl-users/2016-September/004442.html

Meanwhile, here's a patch for the easy bits:

- Dealing with renamed types
- Allocating opaque structures on the heap.

Cheers,
-Hilko
>From 1fe4ce60fadf202299d4c7e86f380c3bf9051cef Mon Sep 17 00:00:00 2001
From: Hilko Bengen 
Date: Sun, 19 Nov 2017 15:35:04 +0100
Subject: [PATCH] Easy fixes toward OpenSSL 1.1 compatibility

- Rename M_ASN1_* -> ASN1_*
- Allocate EVP_MD_CTX has become opaque, so it needs to be allocated
  on the heap.
---
 osslsigncode.c | 90 +-
 1 file changed, 52 insertions(+), 38 deletions(-)

diff --git a/osslsigncode.c b/osslsigncode.c
index 32e37c8..aea2109 100644
--- a/osslsigncode.c
+++ b/osslsigncode.c
@@ -450,7 +450,7 @@ static SpcSpOpusInfo* createOpus(const char *desc, const char *url)
 	if (desc) {
 		info->programName = SpcString_new();
 		info->programName->type = 1;
-		info->programName->value.ascii = M_ASN1_IA5STRING_new();
+		info->programName->value.ascii = ASN1_IA5STRING_new();
 		ASN1_STRING_set((ASN1_STRING *)info->programName->value.ascii,
 		(const unsigned char*)desc, strlen(desc));
 	}
@@ -458,7 +458,7 @@ static SpcSpOpusInfo* createOpus(const char *desc, const char *url)
 	if (url) {
 		info->moreInfo = SpcLink_new();
 		info->moreInfo->type = 0;
-		info->moreInfo->value.url = M_ASN1_IA5STRING_new();
+		info->moreInfo->value.url = ASN1_IA5STRING_new();
 		ASN1_STRING_set((ASN1_STRING *)info->moreInfo->value.url,
 		(const unsigned char*)url, strlen(url));
 	}
@@ -609,19 +609,20 @@ static int add_timestamp(PKCS7 *sig, char *url, char *proxy, int rfc3161, const
 
 	if (rfc3161) {
 		unsigned char mdbuf[EVP_MAX_MD_SIZE];
-		EVP_MD_CTX mdctx;
+		EVP_MD_CTX* mdctx = EVP_MD_CTX_create();
 
-		EVP_MD_CTX_init();
-		EVP_DigestInit(, md);
-		EVP_DigestUpdate(, si->enc_digest->data, si->enc_digest->length);
-		EVP_DigestFinal(, mdbuf, NULL);
+		EVP_DigestInit(mdctx, md);
+		EVP_DigestUpdate(mdctx, si->enc_digest->data, si->enc_digest->length);
+		EVP_DigestFinal(mdctx, mdbuf, NULL);
+
+		EVP_MD_CTX_destroy(mdctx);
 
 		TimeStampReq *req = TimeStampReq_new();
 		ASN1_INTEGER_set(req->version, 1);
 		req->messageImprint->digestAlgorithm->algorithm = OBJ_nid2obj(EVP_MD_nid(md));
 		req->messageImprint->digestAlgorithm->parameters = ASN1_TYPE_new();
 		req->messageImprint->digestAlgorithm->parameters->type = V_ASN1_NULL;
-		M_ASN1_OCTET_STRING_set(req->messageImprint->digest, mdbuf, EVP_MD_size(md));
+		ASN1_OCTET_STRING_set(req->messageImprint->digest, mdbuf, EVP_MD_size(md));
 		req->certReq = (void*)0x1;
 
 		len = i2d_TimeStampReq(req, NULL);
@@ -924,6 +925,7 @@ static const unsigned char classid_page_hash[] = {
 static unsigned char *calc_page_hash(char *indata, unsigned int peheader, int pe32plus,
 	 unsigned int sigpos, int phtype, unsigned int *phlen);
 
+#if OPENSSL_VERSION_NUMBER < 0x1010
 DECLARE_STACK_OF(ASN1_OCTET_STRING)
 #ifndef sk_ASN1_OCTET_STRING_new_null
 #define sk_ASN1_OCTET_STRING_new_null() SKM_sk_new_null(ASN1_OCTET_STRING)
@@ -931,15 +933,26 @@ DECLARE_STACK_OF(ASN1_OCTET_STRING)
 #define sk_ASN1_OCTET_STRING_push(st, val) SKM_sk_push(ASN1_OCTET_STRING, (st), (val))
 #define i2d_ASN1_SET_OF_ASN1_OCTET_STRING(st, pp, i2d_func, ex_tag, ex_class, is_set) \
 	SKM_ASN1_SET_OF_i2d(ASN1_OCTET_STRING, (st), (pp), (i2d_func), (ex_tag), (ex_class), (is_set))
+#else
+DEFINE_STACK_OF(ASN1_OCTET_STRING)
+#define i2d_sk_ASN1_SET_OF_ASN1_OCTET_STRING(st, pp, i2d_func, ex_tag, ex_class, is_set) \
+	ASN1_SET_OF_i2d(ASN1_OCTET_STRING, (st), (pp), (i2d_func), (ex_tag), (ex_class), (is_set))
+#endif
 #endif
 
+#if OPENSSL_VERSION_NUMBER < 0x1010
 DECLARE_STACK_OF(SpcAttributeTypeAndOptionalValue)
 #ifndef sk_SpcAttributeTypeAndOptionalValue_new_null
 #define sk_SpcAttributeTypeAndOptionalValue_new_null() SKM_sk_new_null(SpcAttributeTypeAndOptionalValue)
 #define sk_SpcAttributeTypeAndOptionalValue_free(st) SKM_sk_free(SpcAttributeTypeAndOptionalValue, (st))
 #define sk_SpcAttributeTypeAndOptionalValue_push(st, val) SKM_sk_push(SpcAttributeTypeAndOptionalValue, (st), (val))
-#define i2d_SpcAttributeTypeAndOptionalValue(st, pp, i2d_func, ex_tag, ex_class, is_set) \
+#define i2d_sk_SpcAttributeTypeAndOptionalValue(st, pp, i2d_func, ex_tag, ex_class, is_set) \
 	SKM_ASN1_SET_OF_i2d(SpcAttributeTypeAndOptionalValue, (st), (pp), (i2d_func), (ex_tag), (ex_class), (is_set))
+#else
+DEFINE_STACK_OF(SpcAttributeTypeAndOptionalValue)
+#define i2d_sk_SpcAttributeTypeAndOptionalValue(st, pp, i2d_func, ex_tag, ex_class, is_set) \
+	ASN1_SET_OF_i2d(SpcAttributeTypeAndOptionalValue, (st), (pp), (i2d_func), (ex_tag), (ex_class), (is_set))
+#endif
 #endif
 
 static SpcLink *get_page_hash_link(int phtype, char *indata, unsigned int peheader, int 

Bug#877206: new release is available, should fix this

[Brian Warner]

I just released foolscap-0.13.0, which ought to fix this.. let me know
if you see any problems, or if I can help with getting it into
debian/ubuntu before the package gets removed. Thanks!

Bug#882208: Please enable CONFIG_FW_CFG_SYSFS

[Piotr Jurkiewicz]

Package: linux-image-amd64
Version: 4.13+86

Please consider enabling CONFIG_FW_CFG_SYSFS=m

This would build QEMU out-of-band configuration forwarding module. It 
allows guest OS to read parameters and config files passed from host via 
QEMU command line.


http://www.contrib.andrew.cmu.edu/~somlo/QEMU_fw_cfg/

https://www.kernel.org/doc/Documentation/ABI/testing/sysfs-firmware-qemu_fw_cfg

Bug#865734: mate-panel: Spacing between icons increases when increasing vertical panel width

[Mike Gabriel]

Control: reopen -1

On  Sa 18 Nov 2017 10:49:59 CET, Vlad Orlov wrote:


Hi,

I don't remember fixing this either in git master or in 1.18 branch...
The upstream report is still open. Well, maybe I missed something.


Ok. Reopening for now on Debian BTS.

Mike
--

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
mobile: +49 (1520) 1976 148
landline: +49 (4354) 8390 139

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de



pgpWCifp_ctQF.pgp
Description: Digitale PGP-Signatur

Bug#881837: Updating the h5py Uploaders list

[Ghislain Vaillant]

Control: tags -1 + fixed pending

On Wed, 15 Nov 2017 18:16:51 +0100 Tobias Frost  wrote:

Source: h5py
Version: 2.6.0-2 2.7.1-2
Severity: minor
User: m...@qa.debian.org
Usertags: mia-teammaint

Soeren Sonnenburg  wishes no longer to be uploader of h5py.

We are tracking their status in the MIA team and would like to ask you
to remove them from the Uploaders list of the package so we can close
that part of the file.


Done. Soeren Sonnenburg has been removed from the Uploaders list of this 
package.



(If the person is listed as Maintainer, what we are asking is to please
step in as a new maintainer.)


I already took over maintenance a while back.

Thanks for your work within the MIA team.

Regards,
Ghis

Bug#828158: caja: backgrounds and emblems dialog does not work

[Mike Gabriel]

Hi Vlad,

On  Sa 18 Nov 2017 10:42:54 CET, Vlad Orlov wrote:


Hi,

The menu item is back, and the dialog works, but you still need to resize it
every time you switch between the categories inside it. Otherwise it  
will show
empty space instead of colors or emblems. That's why I didn't close  
the upstream

report yet.

That's what the original reporter here said:


When I tried the usual procedure (Edit-Backgrounds and Emblems-Colors), it
appears as there are no colors at all! The box is completely empty. This is
very bad for my eye-sight and please be so kind to fix this problem.


So it's not completely fixed, and not everyone knows about the  
workaround with

resizing. But it's up to you to have it closed or not :)


as long as it is dealt with upstream, I think it is ok to close this  
issue on Debian BTS. If anyone feels different, please reopen.


Mike
--

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
mobile: +49 (1520) 1976 148
landline: +49 (4354) 8390 139

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de



pgpacHGWn8iSX.pgp
Description: Digitale PGP-Signatur

Bug#882085: [cowsay] Package includes ASCII representation of Zoophilia

[Felicia Hummel]

> Make cowsay-off only suggested and ask for confirmation on install.

I believe this is a reasonable course of action. I also have to
apologize: I was under the impression that the Zoophilia representation
was in cowsay, when in reality it was in cowsay-off.

All the best
Felicia

Bug#882085: [cowsay] Package includes ASCII representation of Zoophilia

[Dominik George]

> In fact, the package was installed since I have turned on install
> suggests. If this was done on purpose or accident is not open for debate.

It is. I'm sorry, but in fact, your concern should be that you are obviously 
unable to control what you install on your system. You can read a handbook on 
this topic - but please leave unrelated maintainers alone - they are not the 
support crew for your personal system's administration.

The fix is to purge the package and look and think next time you install 
packages.

-nik

Bug#882207: RFP: earlyoom -- Early OOM Daemon for Linux

[Robert Orzanna]

Package: earlyoom
https://github.com/rfjakob/earlyoom

Bug#881988: Filed upstream

[Jonathan Carter (highvoltage)]

I have filed the bug upstream, since it seems like the correct place to
fix it: https://github.com/sivel/speedtest-cli/issues/454

Bug#882187: git-buildpackage: gbp pull: add option to setup missing tracking branches upstream, pristine-tar

[Guido Günther]

Hi,
On Mon, Nov 20, 2017 at 02:09:43AM +0100, Andreas Beckmann wrote:
> Package: git-buildpackage
> Version: 0.9.3
> Severity: normal
> 
> Hi,
> 
> after cloning a repository with debcheckout, I'm missing the upstream
> and pristine-tar branches. It would be nice to have an option for gbp
> pull to set up these missing tracking branches. (upstream branch name
> should of course depend on debian/gbp.conf)

This is imho a bug in debcheckout. Use gbp-clone and you're all set.

> And maybe even better: obsolete debcheckout usage by adding something
> like
> 
> gbp clone [-a] 
> 
> using the repository information from Vcs-Git in Sources, s.t.
> I don't have to lookup the URL myself. Don't forget that there could
> be branch information in Vcs-Git. Should also support URL rewriting from
> anonymous to authenticated like debcheckout -a.

-a is indeed something that could be added.

> 
> 
> And maybe add some option to gbp pull or gbp push to rewrite the
> repository URL from anonymous to authenticated, to allow pushing even if
> one forgot the '-a' option to the initial debcheckout / gbp clone.

Cheers,
 -- Guido



> 
> 
> Andreas
> 
> PS: please clone to as many bugs as you want :-)
> 

Bug#879484: Network-Manager should Default to Non-Random MAC Address on WiFi

[Jérôme]

I was hit by this too.

This is what I understand:

This setting is enabled by default for privacy/security reasons. It 
makes connection fail with some HW/drivers due to the drivers 
themselves, so the rootcause is not in network-manager itself.


This results in poor user experience for impacted users but the devs may 
not be willing to sacrifice security to workaround an issue in buggy 
drivers.


Is this a setting that could be exposed in a GUI such as 
network-manager-gnome? Could it be an acceptable compromise?


The user with a connection issue would open the connection settings 
dialog et found a checkbox:


  [X] Randomize MAC address during scan

There would be a tooltip explaining that while this might be desirable, 
it is known to cause issues on some HW/drivers. The user would uncheck 
it and try again.


Should we open a bug on network-manager-gnome for this?

--
Jérôme

Bug#878685: stretch-pu: package udftools/1.3-2

[Pali Rohár]

On Monday 20 November 2017 08:48:40 Adam D. Barratt wrote:
> On 2017-11-20 8:39, Pali Rohár wrote:
> > On Saturday 18 November 2017 20:13:14 Adam D. Barratt wrote:
> > > Control: tags -1 + pending
> > > 
> > > On Fri, 2017-11-10 at 17:59 +, Adam D. Barratt wrote:
> [...]
> > > > Particularly, I'd have pointed out that the changelog is illogical -
> > > > it should either be 1.3-1, then the 1.3-2 unstable changes, then 1.3-
> > > > 2~deb9u1, or 1.3-1 then 1.3-1+deb9u1.
> > > 
> > > I'm not going to bother with a reject-and-reupload cycle this time,
> > > but
> > > please don't assume that won't happen in future. This:
> > > 
> > > +udftools (1.3-2~deb9u1) stretch; urgency=low
> > > +
> > > +  * Fix path to pktsetup in udftools init script
> > > +
> > > + -- Pali Rohár   Tue, 03 Oct 2017 21:41:57
> > > +0200
> > > +
> > >  udftools (1.3-1) unstable; urgency=low
> > > 
> > > is simply wrong.
> > 
> > Ok, I would like to ask, which version to choose if uploaded package is
> > exactly same as version X in unstable? As in unstable is version 1.3-2 I
> > chose that suffix ~deb9u1. But I have not found any details about this
> > situation in any debian manual.
> 
> The version number is fine. The problem is that the changelog should have
> included the unstable stanza for 1.3-2, with the ~deb9u1 stanza then simply
> being "rebuild for stable" or something similar. This is the same as I'd
> expect if you were uploading the package to stretch-backports.

Ok, thanks for information! I though problem is with version string. Do
you want to reupload it with fix in changelog?

-- 
Pali Rohár
pali.ro...@gmail.com

Bug#880709: Library versions

[Fabian Grünbichler]

On Sun, Nov 19, 2017 at 11:23:30PM -0500, Antonio Russo wrote:
> All upstream testing and development is done with matching library and 
> utility versions.
> I really don't see any advantage to making fine-grained dependencies that 
> expose Debian
> users to unconventional configurations with some possibly non-matching 
> library versions.
> Just my 2 cents.

After a bit more experiments, I tend to agree with you (especially given
the huge number of symbols exported by libzpool!). Attached is a patch
that simply emulates upstreams "break with every release" (tested with
sid and stretch-backport builds). I prefer this approach to hard-coding
the exact versions in d/control, as it also works for other packages
linking with ZFS libraries using the shlibs mechanism.

I think I will start a discussion with upstream regarding their plans
for future ABI guarantees and proper exporting and versioning of public
library symbols. Switching to proper symbols based versioned
dependencies in Debian should be possible without much pain anyway, if
and when upstream decides to declare the library interface (somewhat)
stable.
>From 66e521fba011d68c53d694c1037d13f2068a0c86 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fabian=20Gr=C3=BCnbichler?= 
Date: Mon, 20 Nov 2017 08:10:00 +0100
Subject: [PATCH] build: add implicit version to dh_makeshlibs
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

to mimic upstream's current level of ABI/API stability. this is akin to
"every upstream version breaks compatibility".

Closes: #880709
Signed-off-by: Fabian Grünbichler 
---
 debian/rules | 12 ++--
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/debian/rules b/debian/rules
index 800df22e0..4a2b3213f 100755
--- a/debian/rules
+++ b/debian/rules
@@ -120,13 +120,13 @@ override_dh_dkms:
 	dh_dkms -V $(VERSION)
 
 override_dh_makeshlibs:
-	dh_makeshlibs -a
+	dh_makeshlibs -a -V
 ifeq ($(BUILD_UDEB), true)
-	dh_makeshlibs -plibnvpair1linux --add-udeb=libnvpair1-udeb
-	dh_makeshlibs -plibuutil1linux --add-udeb=libuutil1-udeb
-	dh_makeshlibs -plibzfs2linux --add-udeb=libzfs2-udeb
-	dh_makeshlibs -plibzpool2linux --add-udeb=libzpool2-udeb
-	dh_makeshlibs -pzfsutils-linux --add-udeb=zfsutils-udeb
+	dh_makeshlibs -V -plibnvpair1linux --add-udeb=libnvpair1-udeb
+	dh_makeshlibs -V -plibuutil1linux --add-udeb=libuutil1-udeb
+	dh_makeshlibs -V -plibzfs2linux --add-udeb=libzfs2-udeb
+	dh_makeshlibs -V -plibzpool2linux --add-udeb=libzpool2-udeb
+	dh_makeshlibs -V -pzfsutils-linux --add-udeb=zfsutils-udeb
 endif
 
 override_dh_strip:
-- 
2.14.2

Bug#882206: nheko builds with -march=native

[Adrian Bunk]

Source: nheko
Version: 0.0+git20171116.21fdb26-1
Severity: serious

FTBFS on ppc64el:

https://buildd.debian.org/status/fetch.php?pkg=nheko=ppc64el=0.0%2Bgit20171116.21fdb26-1=1511151504=0

...
c++: error: unrecognized command line option '-march=native'; did you mean 
'-mcpu=native'?


It builds on other architectures but having the program working
only on machines compatible with the build machine is not acceptable.

Please ensure that -march=native is not used.

Bug#878685: stretch-pu: package udftools/1.3-2

[Adam D. Barratt]

On 2017-11-20 8:39, Pali Rohár wrote:

On Saturday 18 November 2017 20:13:14 Adam D. Barratt wrote:

Control: tags -1 + pending

On Fri, 2017-11-10 at 17:59 +, Adam D. Barratt wrote:

[...]

> Particularly, I'd have pointed out that the changelog is illogical -
> it should either be 1.3-1, then the 1.3-2 unstable changes, then 1.3-
> 2~deb9u1, or 1.3-1 then 1.3-1+deb9u1.

I'm not going to bother with a reject-and-reupload cycle this time, 
but

please don't assume that won't happen in future. This:

+udftools (1.3-2~deb9u1) stretch; urgency=low
+
+  * Fix path to pktsetup in udftools init script
+
+ -- Pali Rohár   Tue, 03 Oct 2017 21:41:57 
+0200

+
 udftools (1.3-1) unstable; urgency=low

is simply wrong.


Ok, I would like to ask, which version to choose if uploaded package is
exactly same as version X in unstable? As in unstable is version 1.3-2 
I

chose that suffix ~deb9u1. But I have not found any details about this
situation in any debian manual.


The version number is fine. The problem is that the changelog should 
have included the unstable stanza for 1.3-2, with the ~deb9u1 stanza 
then simply being "rebuild for stable" or something similar. This is the 
same as I'd expect if you were uploading the package to 
stretch-backports.


Regards,

Adam

Bug#882205: Please make openvswitch-switch recommended instead hard dependency

[Piotr Jurkiewicz]

Package: mininet

Open vSwitch is not necessary to run Mininet. There are many use cases 
for Mininet without Open vSwitch. For example we are using it to 
orchestrate nodes running Click Modular Router or in-kernel IP 
forwarding (like in examples/linuxrouter.py).


Changing openvswitch-switch to Recommends instead Depends would allow us 
to build smaller VM images and avoid manual disabling of ovs daemons 
after installation. It would still be installed by default for most 
users who do not use additional --no-install-recommends flag.

Bug#882085: [cowsay] Package includes ASCII representation of Zoophilia

[Tehnic]

Hi,

here are my 2¢:

> Hi,
> you tested it? And you read and understand the description of cowsay-
off
> carefully?
> 
> Explicit: the sheep is not part of the cowsay package - it is part of
> cowsay-off which is described as:

> Ok, it is a little bit tasteless - but no one is forced to install
this
> package.

Unfortunatly cowsay-off is a recommended package of cowsay, this is
definitely questionable (i would consider it to be a bug)!

About the legal issues:

There are countries in which the possession of certain content is
enough to be sentenced, in particular for example child pornography but
also zoophilia. No distribution or "usage" is required.

My suggestion:

Make cowsay-off only suggested and ask for confirmation on install.

Bug#878811: dummy interface in bridge sticks in "configuring", leading to degraded system

[Marc Haber]

found #878811 235-3
thanks

On Tue, Oct 17, 2017 at 07:36:43AM +0200, Marc Haber wrote:
> I apologize, I filed this from a system with the fixed version
> installed. Both 232 from stretch and 235 from sid (and 234 which was the
> current version when the patch was developed) are affected, hence
> the suggestion to bring the fix into stretch through a point release.

I can confirm that 235-3 still has the issue, that the patch applies,
and fixes the issue.

Greetings
Marc

-- 
-
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany|  lose things."Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421

Bug#878685: stretch-pu: package udftools/1.3-2

[Pali Rohár]

On Saturday 18 November 2017 20:13:14 Adam D. Barratt wrote:
> Control: tags -1 + pending
> 
> On Fri, 2017-11-10 at 17:59 +, Adam D. Barratt wrote:
> > On Fri, 2017-11-10 at 12:17 +0100, Pali Rohár wrote:
> > > On Thursday 02 November 2017 21:55:54 Pali Rohár wrote:
> > > > On Sunday 29 October 2017 18:19:53 Adam D. Barratt wrote:
> > > > > Please prepare an upload built and tested on stable, using
> > > > > "stretch" as
> > > > > the changelog distribution, and versioned as either 1.3-
> > > > > 1+deb9u1
> > > > > or
> > > > > 1.3-2~deb9u1, depending on how the changelog is structured, and
> > > > > attach
> > > > > the debdiff to this bug log.
> > > > 
> > > > Ok. I uploaded package version 1.3-2~deb9u1 to mentors, it is
> > > > there:
> > > > https://mentors.debian.net/package/udftools
> > > > 
> > > > debdiff between current version in stretch and 1.3-2~deb9u1 is
> > > > attached.
> > > 
> > > Can you review it?
> > 
> > It will be, when someone next goes through the stable-new queue.
> > 
> > > According to highvoltage comment, Package has been uploaded to
> > > Debian,
> > 
> > Correct. However, it preferably shouldn't have been, because the
> > upload wasn't agreed yet; CCing the uploader.
> 
> I was hoping there'd have been a follow-up there. Ho hum.

CCed Jonathan have not responded. I was waiting too...

> > Particularly, I'd have pointed out that the changelog is illogical -
> > it should either be 1.3-1, then the 1.3-2 unstable changes, then 1.3-
> > 2~deb9u1, or 1.3-1 then 1.3-1+deb9u1.
> 
> I'm not going to bother with a reject-and-reupload cycle this time, but
> please don't assume that won't happen in future. This:
> 
> +udftools (1.3-2~deb9u1) stretch; urgency=low
> +
> +  * Fix path to pktsetup in udftools init script
> +
> + -- Pali Rohár   Tue, 03 Oct 2017 21:41:57 +0200
> +
>  udftools (1.3-1) unstable; urgency=low
> 
> is simply wrong.

Ok, I would like to ask, which version to choose if uploaded package is
exactly same as version X in unstable? As in unstable is version 1.3-2 I
chose that suffix ~deb9u1. But I have not found any details about this
situation in any debian manual.

> Flagged for acceptance.
> 
> Regards,
> 
> Adam

-- 
Pali Rohár
pali.ro...@gmail.com

Bug#869995: fixed in systemd 235-1

[Marc Haber]

found #869995 235-2
found #869995 235-3

On Mon, Oct 16, 2017 at 06:58:54PM +0200, Marc Haber wrote:
> I regret to inform you that the fix given in this bug report didn't make
> it into upstream 235. The issue reappears after the update to systemd
> 235, the patches do still apply to the code (with some fuzz, but without
> rejection), the issue disappears with the patched software.

I can confirm that the issue is also in systemd 235-2 and systemd 235-3,
and that the patches attached to this bug report do still apply, and
that they do fix the issue. Pretty please consider applying them.

Greetings
Marc

-- 
-
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany|  lose things."Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421

Bug#882204: bs1770gain: FTBFS

[Jaromír Mikeš]

Package: bs1770gain
Version: 0.4.12-2
Severity: important

Dear Maintainer,

your package fails to build with following error:
/missing: line 81: aclocal-1.14: command not found
WARNING: 'aclocal-1.14' is missing on your system.
 You should only need it if you modified 'acinclude.m4' or
 'configure.ac' or m4 files included by 'configure.ac'.
 The 'aclocal' program is part of the GNU Automake package:
 
 It also requires GNU Autoconf, GNU m4 and Perl in order to run:
 
 
 
Makefile:330: recipe for target 'aclocal.m4' failed
make[1]: *** [aclocal.m4] Error 127

Your package is also part of ongoing sox transition would be great if you can 
fix this issue in time
to not be blocker of this transition.

best regards,
mira

Bug#881903: Please use angles in From: addr-spec

[Michael Stapelberg]

Thank you very much!

On Sat, Nov 18, 2017 at 3:47 AM, Don Armstrong  wrote:
> On Thu, 16 Nov 2017, Michael Stapelberg wrote:
>> I first noticed this when looking through the archives of some of our
>> lists on master.debian.org, see e.g.:
>
> Yeah, I think mutt just automatically converts these style headers, so I
> personally never notice them.
>
> Sounds reasonable; patch put in.
>
> --
> Don Armstrong  https://www.donarmstrong.com
>
> "That is why I am still tyrant of [Ankh-Morpork]. The way to retain
> power, I have always thought, is to ensure the absolute unthinkability
> of oneself not being there."
>  -- Terry Pratchett _Unseen Academicals_ p391



-- 
Best regards,
Michael

Bug#882203: freedv: FTBFS with sox 14.4.2

[Jaromír Mikeš]

Package: freedv
Version: 1.2.2-2
Severity: important
User: pkg-multimedia-maintain...@lists.alioth.debian.org
Usertags: sox 14.4.2

Dear Maintainer,

your package fails to build with the upcoming sox 14.4.2 which is now in 
"experimental"

Build produce this error:
./Build/src/./src/sox_biquad.c:101: undefined reference to `lsx_biquad_flow'

Please fix the issue to not be blocker for sox ongoing transition

Best regards,
mira

Bug#882202: RFS: pidgin-sipe/1.23.0-2 -- Pidgin plugin for Skype for Business and Microsoft Lync

[Jakub Adam]

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for package "pidgin-sipe", whose source code is at:

  https://anonscm.debian.org/cgit/collab-maint/pidgin-sipe.git

or you may also:

  dget -x 
https://mentors.debian.net/debian/pool/main/p/pidgin-sipe/pidgin-sipe_1.23.0-2.dsc

It builds this binary package:

  pidgin-sipe - Pidgin plugin for Skype for Business and Microsoft Lync

Changes since the last upload:

pidgin-sipe (1.23.0-2) unstable; urgency=medium

  * Remove NSS_SSL_CBC_RANDOM_IV workaround (Closes: #882125).
- Diversion of /usr/bin/pidgin clashes with Pidgin AppArmor profile,
  which is now enabled by default in Debian. The workaround was
  introduced 5 years ago and Lync/SfB servers have since fixed the
  SSL bug so it's reasonably safe to drop it from pidgin-sipe package.
  * Update package description to mention Skype for Business.

 -- Jakub Adam   Mon, 20 Nov 2017 08:44:57 +0100

Regards,

Jakub





signature.asc
Description: OpenPGP digital signature