Bug#933928: macsyfinder: Port to Python3 needed

2019-08-05 Thread Andreas Tille
Control: tags -1 upstream
COntrol: forwarded -1 https://github.com/gem-pasteur/macsyfinder/issues/21



Bug#932310: apt: --allow-releaseinfo-change-* doesn't work

2019-08-05 Thread David Kalnischkies
On Wed, Jul 17, 2019 at 04:47:53PM +0300, Anton Zhavoronkov wrote:
> Problem:
> Option --allow-releaseinfo-change-version or
> --allow-releaseinfo-change-suite is understood correctly by apt-get, but
> has no any effect.
> 
> $ sudo apt-get update --allow-releaseinfo-change-version
[…]
> N: Repository 'http://ftp.debian.org/debian buster InRelease' changed
> its 'Version' value from '' to '10.0'
> E: Repository 'http://ftp.debian.org/debian buster InRelease' changed
> its 'Suite' value from 'testing' to 'stable'
> N: This must be accepted explicitly before updates for this repository
> can be applied. See apt-secure(8) manpage for details.

--allow-…-version has indeed no effect as the default for version is
allowed – so you would need to change your local default via config or
use the --no-… version to disallow it.

Note that allowed/disallowed just means that the message will the
prefixed with an "N:" (for Notice) or "E:" (for Error), so you will
always see the messages – if you don't want that you have some options
with "quiet" as notices aren't displayed by default with -q>=1.

Of course, the "apt-get" call will fail only if one of these messages is
an error, if they are all notices apt will exit normally (and it will
not show the third line in your example for obvious reasons).


In your example you showed --allow-…-version two times, so I am kinda
happy that the same thing happened for repeated calls… ☺
(you must accept all changes at the same time, they can't be accepted
piecemeal).

So, are you sure your second call was really about suite as your example
wasn't? I had a quick look at the code and can't spot an obvious error
here which would rule out the specialist options to not work (and our
testcase checks them – although only with codename, but the
implementation is pretty loopy so that should work™).


Best regards

David Kalnischkies


signature.asc
Description: PGP signature


Bug#933877: glib2.0: Suspected memory leak in jessie-lts backport of fix for CVE-2019-13012

2019-08-05 Thread mike . gabriel
Hi Simon,

Am Sonntag, 4. August 2019 schrieb Simon McVittie:
> Source: glib2.0
> Version: 2.42.1-1+deb8u2
> Severity: normal
> Tags: jessie
> 
> (This is only from source code inspection, not tested in real use -
> I don't use jessie any more.)
> 
> While looking into a possible stretch update for CVE-2018-16429,
> CVE-2019-12450, CVE-2018-16428 and CVE-2019-13012, I compared my backports
> of the fixes for those vulnerabilities with the ones in jessie-lts to try
> to double-check that I had done them right.
> 
> The upstream fix for CVE-2019-13012 included this change:
> 
> - g_file_make_directory_with_parents (kfsb->dir, NULL, NULL);
> + g_mkdir_with_parents (g_file_peek_path (kfsb->dir), 0700);
> 
> However, g_file_peek_path() was only introduced in GLib 2.56, so that
> won't work for stretch or jessie. The backport in the jessie-lts package
> has this instead:
> 
> - g_file_make_directory_with_parents (kfsb->dir, NULL, NULL);
> + g_mkdir_with_parents (g_file_get_path (kfsb->dir), 0700);
> 
> This is not equivalent. The difference between g_file_peek_path() and the
> older g_file_get_path() is that g_file_get_path() makes a copy, which must
> be freed with g_free() after use. As a result, there is now a memory leak.
> 
> A non-leaky backport would look something like this, which is what I've
> done in a proposed backport for Debian 9 'stretch' at
> :
> 
> + char *dir;
> ...
> - g_file_make_directory_with_parents (kfsb->dir, NULL, NULL);
> + dir = g_file_get_path (kfsb->dir);
> + g_mkdir_with_parents (dir, 0700);
> + g_free (dir);
> 
> The Ubuntu xenial update appears to have the same bug:
> https://bugs.launchpad.net/ubuntu/+source/glib2.0/+bug/1838890
> 
> Regards,
> smcv
>

Thanks for letting us (LTS team) know. Will provide a fix tonight for LTS/ELTS.

Mike

-- 
Gesendet von meinem Fairphone2 (powered by Sailfish OS).

Bug#929185: default soundfonts

2019-08-05 Thread Fabian Greffrath
Control: tags -1 + patch

The following patch will set the default soundfont path for gstreamer
according to our new convention:

--- a/ext/fluidsynth/gstfluiddec.c
+++ b/ext/fluidsynth/gstfluiddec.c
@@ -63,7 +63,7 @@ enum
   LAST_SIGNAL
 };
 
-#define DEFAULT_SOUNDFONT   NULL
+#define DEFAULT_SOUNDFONT   "/usr/share/sounds/sf3/default-GM.sf3"
 #define DEFAULT_SYNTH_CHORUSTRUE
 #define DEFAULT_SYNTH_REVERBTRUE
 #define DEFAULT_SYNTH_GAIN  0.2




signature.asc
Description: This is a digitally signed message part


Bug#933645: transition: libvpx

2019-08-05 Thread Ondrej Novy
Hi,

ne 4. 8. 2019 v 22:45 odesílatel Jonathan Wiltshire  napsal:

> Please go ahead in unstable.
>

uploaded.

Thanks.

-- 
Best regards
 Ondřej Nový


Bug#933929: python-rtslib-fb: New upstream version available

2019-08-05 Thread Sebastien Delafond
Source: python-rtslib-fb
Version: 2.1.66-3
Severity: wishlist
Control: block 933350 by -1


Hello,

2.1.69 is available upstream, and fixes an issue[1] in
ceph-isci-cli. We'd need it so that ceph-iscsi, scheduled to enter
unstable soon[2], can be fully functional.

Would you consider upgrading the version in unstable ? If the idea
sounds reasonable, but you don't have enough time, please let me know
and I'd be happy to do it via NMU.

Cheers,

-- 
Seb

[1] https://github.com/ceph/ceph-iscsi-cli/issues/150
[2] https://bugs.debian.org/933350



Bug#933928: Please port to Python3 (#21)

2019-08-05 Thread Bertrand Néron
We are currently developing a new macsyfinder version  with lot of new 
features. 
Of course this version is running python3.

regards,

Bertrand

-- 
You are receiving this because you authored the thread.
Reply to this email directly or view it on GitHub:
https://github.com/gem-pasteur/macsyfinder/issues/21#issuecomment-518122095

Bug#932943: Missing SHA512 and gpg signature

2019-08-05 Thread Thomas Goirand
On 8/4/19 6:29 PM, Bastian Blank wrote:
> On Sat, Aug 03, 2019 at 03:06:39PM +0100, Chris Boot wrote:
>> - Which checksums should we include? Our Apt repos use MD5 and SHA-256,
>> and our ISOs use MD5, SHA-1, SHA-256 and SHA-512. I'd be inclined to
>> suggest SHA-256 and SHA-512 only, personally.
> 
> Only one of them.  And I would go directly to SHA3 for new stuff.

Unfortunately, OpenStack Glance only shows SHA512, not SHA3, so even if
we do both, we must keep SHA2 512.

Cheers,

Thomas Goirand (zigo)



Bug#933791: gnupg: please document the consequences of not accepting third-party certifications from keyservers

2019-08-05 Thread Francesco Poli
On Sun, 4 Aug 2019 23:56:46 + Georg Faerber wrote:

> Hi,

Hello Georg,
thanks for your comment!

[...]
> FWIW, caff provides an option which might help with this
[...]
> 
>   also-lsign-in-gnupghome [auto|ask|no]
> 
> Whether to locally sign the UIDs in the user's GnuPGHOME, in
> addition to caff's signatures in its own GnuPGHOME.

This is indeed potentially useful...

[...]
> However, note that local signatures will not be deleted once the
> recipient does the upload and the signer refreshes her keyring.

...although it does have its own downsides.


-- 
 http://www.inventati.org/frx/
 There's not a second to spare! To the laboratory!
. Francesco Poli .
 GnuPG key fpr == CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE


pgpV847C4EniM.pgp
Description: PGP signature


Bug#933925: Misspelling in Lintian UDD table

2019-08-05 Thread Chris Lamb
reassign 933925 qa.debian.org
affects 933925 + lintian
user 933925 qa.debian@packages.debian.org
usertag 933925 + udd
thanks

Felix Lechner wrote:

> This bug probably belongs elsewhere, but I could not find a better place.

According to https://wiki.debian.org/UltimateDebianDatabase/, this should
be done as follows:

   You can report bugs against the qa.debian.org pseudo-package, using
   the udd usertag and user qa.debian@packages.debian.org.


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org 🍥 chris-lamb.co.uk
   `-



Bug#933506: Fwd: Re: boost1.67- ppc64el -autopkgtest hangs

2019-08-05 Thread Giovanni Mascellani
Control: retitle -1 coroutine and fiber tests segfault on ppc64el

Hi,

Il 31/07/19 16:03, Roger ha scritto:
> Hi,
> I investigated the current logs from debci/autopkgtest and here are more
> details
> 1 - Apparently there are 3 failures but no hang - please change Subject
> 2 - slow running time seems to be due by compilation time

I could reproduce the failure in a qemu VM. Since I am now packaging a
new upstream version, I will wait to see what happens with the new
version before investigating further.

Thanks for reporting, Giovanni.
-- 
Giovanni Mascellani 
Postdoc researcher - Université Libre de Bruxelles



signature.asc
Description: OpenPGP digital signature


Bug#933858: (no subject)

2019-08-05 Thread Dominick Grift
This is by design. There is a seperation between confined and unconfined.
sysadm_t is the confined equivalent of the unconfined unconfined_t.

It is true though that sysadm_t (and the policy in general) is incomplete, and 
that it needs more attention.

You are ofcourse free and encouranged to tailor the policy to your personal 
requirements.

-- 
Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02
Dominick Grift



Bug#933879: cups: Samsung CLP315 fails after update from Stretch to Buster

2019-08-05 Thread Rudolf Polzer

Try the printer-driver-foo2zjs package.


This works - the printer is running again.

Thank you, Brian!

Rudolf



Bug#933925: Misspelling in Lintian UDD table

2019-08-05 Thread Mattia Rizzolo
Changing that value in the databse is definitely going to break all
users.  But I'm going ahead and doing it anyway, I reckon the possible
breakage will be managable anyway.
Sorry in advance to everybody affected.

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature


Bug#933930: network-manager: Ethernet connection no longer works

2019-08-05 Thread Vincent Lefevre
Package: network-manager
Version: 1.19.90-2
Severity: grave
Justification: renders package unusable

After upgrading to 1.19.90-2 and rebooting my machine, I completely
lost Ethernet connection.

cventin:~> journalctl -b -2 -g network
-- Logs begin at Tue 2016-04-19 07:35:01 CEST, end at Mon 2019-08-05 11:12:14 
CEST. --
Aug 05 10:52:53 cventin kernel: e1000e: Intel(R) PRO/1000 Network Driver - 
3.2.6-k
Aug 05 10:52:53 cventin kernel: e1000e :00:19.0 eth0: Intel(R) PRO/1000 
Network Connection
Aug 05 10:52:53 cventin ifup[485]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-pre-up.d
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-pre-up.d/ethtool
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-pre-up.d/wpasupplicant
Aug 05 10:52:53 cventin ifup[485]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-pre-up.d
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-pre-up.d/ethtool
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-pre-up.d/wpasupplicant
Aug 05 10:52:53 cventin ifup[485]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-up.d
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-up.d/avahi-daemon
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-up.d/ethtool
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-up.d/mountnfs
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-up.d/wpasupplicant
Aug 05 10:52:53 cventin ifup[485]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-up.d
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-up.d/avahi-daemon
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-up.d/ethtool
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-up.d/mountnfs
Aug 05 10:52:53 cventin ifup[485]: run-parts: executing 
/etc/network/if-up.d/wpasupplicant
Aug 05 10:52:54 cventin systemd[1]: Starting Network Time Synchronization...
Aug 05 10:52:55 cventin systemd[1]: Started Network Time Synchronization.
Aug 05 10:52:55 cventin systemd[1]: Starting Network Manager...
Aug 05 10:52:55 cventin NetworkManager[789]:   [1564995175.9222] 
NetworkManager (version 1.19.90) is starting... (for the first time)
Aug 05 10:52:55 cventin NetworkManager[789]:   [1564995175.9223] Read 
config: /etc/NetworkManager/NetworkManager.conf (lib: no-mac-addr-change.conf)
Aug 05 10:52:55 cventin NetworkManager[789]:   [1564995175.9223] config: 
unknown key 'wifi.cloned-mac-address' in section [device-mac-addr-change-wifi] 
of file '/usr/lib/NetworkManager/conf.d/no-mac-addr-change.conf'
Aug 05 10:52:55 cventin NetworkManager[789]:   [1564995175.9223] config: 
unknown key 'ethernet.cloned-mac-address' in section 
[device-mac-addr-change-wifi] of file 
'/usr/lib/NetworkManager/conf.d/no-mac-addr-change.conf'
Aug 05 10:52:55 cventin NetworkManager[789]:   [1564995175.9251] 
bus-manager: acquired D-Bus service "org.freedesktop.NetworkManager"
Aug 05 10:52:55 cventin NetworkManager[789]:   [1564995175.9316] 
monitoring ifupdown state file '/run/network/ifstate'.
Aug 05 10:52:55 cventin dbus-daemon[788]: [system] Activating systemd to 
hand-off: service name='org.freedesktop.hostname1' 
unit='dbus-org.freedesktop.hostname1.service' requested by ':1.5' (uid=0 
pid=789 comm="/usr/sbin/NetworkManager --no-daemon ")
Aug 05 10:52:56 cventin avahi-daemon[780]: Network interface enumeration 
completed.
Aug 05 10:52:56 cventin systemd[1]: Started Network Manager.
Aug 05 10:52:56 cventin systemd[1]: Starting Network Manager Wait Online...
Aug 05 10:52:56 cventin systemd[1]: Reached target Network.
Aug 05 10:52:57 cventin NetworkManager[789]:   [1564995177.3253] Loaded 
device plugin: NMWifiFactory 
(/usr/lib/x86_64-linux-gnu/NetworkManager/1.19.90/libnm-device-plugin-wifi.so)
Aug 05 10:52:57 cventin NetworkManager[789]:   [1564995177.3309] Loaded 
device plugin: NMBluezManager 
(/usr/lib/x86_64-linux-gnu/NetworkManager/1.19.90/libnm-device-plugin-bluetooth.so)
Aug 05 10:52:57 cventin NetworkManager[789]:   [1564995177.3316] Loaded 
device plugin: NMWwanFactory 
(/usr/lib/x86_64-linux-gnu/NetworkManager/1.19.90/libnm-device-plugin-wwan.so)
Aug 05 10:52:57 cventin NetworkManager[789]:   [1564995177.3348] Loaded 
device plugin: NMTeamFactory 
(/usr/lib/x86_64-linux-gnu/NetworkManager/1.19.90/libnm-device-plugin-team.so)
Aug 05 10:52:57 cventin NetworkManager[789]:   [1564995177.3358] Loaded 
device plugin: NMAtmManager 
(/usr/lib/x86_64-linux-gnu/NetworkManager/1.19.90/libnm-device-plugin-adsl.so)
Aug 05 10:52:57 cventin NetworkManager[789]:   [1564995177.3363] manager: 
Networking is enabled by state file
Aug 05 10:52:57 cventin dbus-daemon[788]: [system] Activating via systemd: 
service name='org.freedesktop.nm_dispatcher' 
unit='dbus-org.freedesktop.nm-dispatcher.service' requested by ':1.5' (uid=0 
pid=789 comm="/usr/sbin/NetworkManager --no-daemon 

Bug#933723: Make APT::Keep-Downloaded-Packages configurable

2019-08-05 Thread Johannes Schauer
Control: tag -1 + newcomer

Hi,

Quoting Andrey Rahmatullin (2019-08-02 15:14:23)
> Currently sbuild sets APT::Keep-Downloaded-Packages to false and it doesn't
> look configurable. If sbuild is used with a persistent package cache (e.g.
> bind-mounting the host one) this setting should be set to true to skip
> downloading the same packages on each build.

I guess an entry for your ~/.sbuildrc would be sufficient and you don't need
this as a command line argument?

Patches welcome!

cheers, josch


signature.asc
Description: signature


Bug#933930: network-manager: Ethernet connection no longer works

2019-08-05 Thread Vincent Lefevre
Oops, bad copy-paste for the working old version.
The correct one...

On 2019-08-05 11:20:24 +0200, Vincent Lefevre wrote:
> Downgrading to 1.14.6-2 solved the issue. As a comparison with this working 
> version:

cventin:~> journalctl -b -g network
-- Logs begin at Tue 2016-04-19 07:35:01 CEST, end at Mon 2019-08-05 11:30:01 
CEST. --
Aug 05 11:09:46 cventin kernel: e1000e: Intel(R) PRO/1000 Network Driver - 
3.2.6-k
Aug 05 11:09:46 cventin kernel: e1000e :00:19.0 eth0: Intel(R) PRO/1000 
Network Connection
Aug 05 11:09:46 cventin ifup[544]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-pre-up.d
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-pre-up.d/ethtool
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-pre-up.d/wpasupplicant
Aug 05 11:09:46 cventin ifup[544]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-pre-up.d
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-pre-up.d/ethtool
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-pre-up.d/wpasupplicant
Aug 05 11:09:46 cventin ifup[544]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-up.d
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-up.d/avahi-daemon
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-up.d/ethtool
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-up.d/mountnfs
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-up.d/wpasupplicant
Aug 05 11:09:46 cventin ifup[544]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-up.d
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-up.d/avahi-daemon
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-up.d/ethtool
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-up.d/mountnfs
Aug 05 11:09:46 cventin ifup[544]: run-parts: executing 
/etc/network/if-up.d/wpasupplicant
Aug 05 11:09:47 cventin systemd[1]: Starting Network Time Synchronization...
Aug 05 11:09:48 cventin systemd[1]: Started Network Time Synchronization.
Aug 05 11:09:48 cventin systemd[1]: Starting Network Manager...
Aug 05 11:09:48 cventin NetworkManager[809]:   [1564996188.9412] 
NetworkManager (version 1.14.6) is starting... (for the first time)
Aug 05 11:09:48 cventin NetworkManager[809]:   [1564996188.9413] Read 
config: /etc/NetworkManager/NetworkManager.conf (lib: no-mac-addr-change.conf)
Aug 05 11:09:48 cventin NetworkManager[809]:   [1564996188.9472] 
bus-manager: acquired D-Bus service "org.freedesktop.NetworkManager"
Aug 05 11:09:48 cventin NetworkManager[809]:   [1564996188.9487] 
monitoring ifupdown state file '/run/network/ifstate'.
Aug 05 11:09:48 cventin dbus-daemon[787]: [system] Activating systemd to 
hand-off: service name='org.freedesktop.hostname1' 
unit='dbus-org.freedesktop.hostname1.service' requested by ':1.3' (uid=0 
pid=809 comm="/usr/sbin/NetworkManager --no-daemon ")
Aug 05 11:09:49 cventin avahi-daemon[834]: Network interface enumeration 
completed.
Aug 05 11:09:50 cventin systemd[1]: Started Network Manager.
Aug 05 11:09:50 cventin systemd[1]: Reached target Network.
Aug 05 11:09:50 cventin systemd[1]: Starting Network Manager Wait Online...
Aug 05 11:09:50 cventin dbus-daemon[787]: [system] Activating via systemd: 
service name='org.freedesktop.nm_dispatcher' 
unit='dbus-org.freedesktop.nm-dispatcher.service' requested by ':1.3' (uid=0 
pid=809 comm="/usr/sbin/NetworkManager --no-daemon ")
Aug 05 11:09:50 cventin systemd[1]: Starting Network Manager Script Dispatcher 
Service...
Aug 05 11:09:50 cventin NetworkManager[809]:   [1564996190.6900] 
ifupdown:   interface-parser: parsing file /etc/network/interfaces
Aug 05 11:09:50 cventin NetworkManager[809]:   [1564996190.6900] 
ifupdown:   interface-parser: source line includes interfaces file(s) 
/etc/network/interfaces.d/*
Aug 05 11:09:50 cventin NetworkManager[809]:   [1564996190.6900] 
ifupdown: interfaces file /etc/network/interfaces.d/* doesn't exist
Aug 05 11:09:50 cventin NetworkManager[809]:   [1564996190.6901] 
ifupdown:   interface-parser: finished parsing file /etc/network/interfaces
Aug 05 11:09:50 cventin NetworkManager[809]:   [1564996190.6901] 
settings: Loaded settings plugin: SettingsPluginIfupdown 
("/usr/lib/x86_64-linux-gnu/NetworkManager/1.14.6/libnm-settings-plugin-ifupdown.so")
Aug 05 11:09:50 cventin NetworkManager[809]:   [1564996190.6933] keyfile: 
new connection /etc/NetworkManager/system-connections/Wired connection 1 
(c89d3bc3-8d9e-44f8-ac86-7e6884d08219,"Wired connection 1")
Aug 05 11:09:50 cventin NetworkManager[809]:   [1564996190.6999] manager: 
Networking is enabled by state file
Aug 05 11:09:50 cventin systemd[1]: Started Network Manager Script Dispatcher 
Service.
Aug 05 11:09:50 cventin NetworkManager[809]:   [1564996190.7078] Loaded 
device plugin: NMWifiFactory 
(/usr/lib/x86_64-linux-gnu/NetworkManager/1.14.6/libnm

Bug#693230: Bug#806572: RFS: multimail/0.50~20150922-1 [ITA]

2019-08-05 Thread Mattia Rizzolo
[ dropping #806572 as that bug is closed and archived  ]

Hi,

On Thu, Aug 01, 2019 at 01:47:37PM -0300, Fernando Toledo wrote:
> https://github.com/ftoledo/pkg-multimail
> 
> I upload to mentors:
> https://mentors.debian.net/package/multimail
> 
> I see that the package is orphaned, i can adopt it, but i'm not DD, how
> to can i help and procced to upload to unstable?

The process to adopt a package is described here:
https://www.debian.org/devel/wnpp/#howto-o

Bart Martens already changed the metadata of #693230 to match your
intentions.

The next step for you would be to seek a sponsor to review and upload
your package.  I'm generally happy to do that, however since this would
be your first package in Debian I'd like to understand what is your
knowledge of things like the BTS, what you followed (if anything) to
work with the packaging, etc.

The fact that mentors.d.n is all green on your package is a good sign,
but also I see you are not closing this bug report (#693230) with your
upload, so something is missing.

I'll be happy to review your package once you answer the above; for more
details on my usual workflow and requirements, see
https://people.debian.org/~mattia/sponsoring.html

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature


Bug#932943: Missing SHA512 and gpg signature

2019-08-05 Thread Bastian Blank
On Sun, Aug 04, 2019 at 10:05:32PM +0100, Chris Boot wrote:
> On 04/08/2019 17:29, Bastian Blank wrote:
> > Only one of them.  And I would go directly to SHA3 for new stuff.
> 
> Buster doesn't have any SHA3 tools in coreutils. While I don't have
> anything against calculating such checksums in addition to the usual
> suspects, I want to make sure people with current distros can easily
> check them.

Okay, let's stay with sha-512 for now.  Turns out it is also faster.

> >> 3. Add a new mapping within the "data" mapping called "checksums" with
> >> keys for each algorithm, e.g. "data.checksums.sha256".
> > 
> > The usual way would be something like this:
> > 
> > | data:
> > |   verify:
> > |   - name: sha3_256
> > | content: ABC=
> > |   - name: gpg
> > | content: AAA=
> 
> That kind of structure works for me. That way we *can*[1] have checksums
> for multiple image formats and multiple algorithms, e.g. the raw image,
> qcow2, compressed tarball, or whatever.

We have one upload manifest per image file.  I'm not sure yet why we
would want to have different checksums.

> > No, don't.  Use base64 like everyone else.
> I strongly disagree with this. Practically everyone else uses
> hexadecimal for plain checksums. A GPG signature is its own thing but is
> (generally) plaintext (I'm assuming clearsign). This is what we (as in
> the project) use for the archive and for ISOs.

Everything current switches to base64.  It's shorter and easier to see
changes.  Hex only survives where people tend to read it.

Regards,
Bastian

-- 
You can't evaluate a man by logic alone.
-- McCoy, "I, Mudd", stardate 4513.3



Bug#929185: default soundfonts (was Re: gstreamer1.0-plugins-bad: no midi sound - gstreamer selects wrong soundfont by default)

2019-08-05 Thread Fabian Greffrath
Am Montag, den 20.05.2019, 21:38 + schrieb Thorsten Glaser:
>   it have any users in Depends)? Depending on it would make the
>   local soundfont slightly more difficult. (If it’s just Recommends,
>   no worries.)

I think things would become at lot easier if I would let libfluidsynth1
depend on "timgm6mb-soundfont | sf2-soundfont" instead of merely
recommending it. Does anything speak against this?

 - Fabian



signature.asc
Description: This is a digitally signed message part


Bug#933931: /usr/share/man/cs/man1/sensible-editor.1.gz: mandb parse fails

2019-08-05 Thread Colin Watson
Package: sensible-utils
Version: 0.0.12
Severity: normal
File: /usr/share/man/cs/man1/sensible-editor.1.gz
Tags: l10n

mandb reports:

  mandb: warning: /usr/share/man/cs/man1/sensible-editor.1.gz: whatis parse for 
sensible-editor(1) failed

(You can also see this by running "lexgrog
/usr/share/man/cs/man1/sensible-editor.1.gz".)

This is because the translation of the English NAME section in that page
uses a groff escape:

  .SH N\('AZEV

It's OK to use escapes for non-ASCII characters in other parts of the
page (though it's unnecessary; these days you can just use UTF-8 input).
However, the NAME section is parsed specially by mandb, and escapes
aren't allowed there.  Please write this instead in UTF-8 as:

  .SH NÁZEV

Thanks,

-- 
Colin Watson   [cjwat...@debian.org]



Bug#933932: strongwind: State of the package, remove?

2019-08-05 Thread Samuel Thibault
Source: strongwind
Version: 0.9-2
Severity: serious
Justification: unmaintained

Hello,

The state of the strongwind package is questionable. It has not been
updated since feb 2012, and upstream does not exist any more. It is
still using python2 syntax, and depends on python-pyatspi which is to be
removed.

strongwind happened to be removed from testing in 2018 due to some
pyatspi2 dependency (see #896341), but that was fixed. I'm however
questioning whether we should keep the package at all given its abandon
state?

Samuel

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 
'testing-debug'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), (500, 
'proposed-updates'), (500, 'oldstable-proposed-updates-debug'), (500, 
'oldstable-proposed-updates'), (500, 'oldoldstable'), (500, 'buildd-unstable'), 
(500, 'unstable'), (500, 'stable'), (500, 'oldstable'), (1, 
'experimental-debug'), (1, 'buildd-experimental'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.2.0 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)



Bug#933933: RM: python-tablib -- ROM; Deprecated, unsupported, unused

2019-08-05 Thread Thomas Goirand
Package: ftp.debian.org
Severity: normal


Dear FTP masters,

It used to be that tablib was used by Cliff, but it has migrated away from
tablib, and therefore, there's no user of tablib in Debian anymore. I don't
think anyone will need that package anytime soon. So let's remove it.

Please remove python-tablib package from Debian before it starts to really
gather too much dust.

Cheers,

Thomas Goirand (zigo)



Bug#933921: src:python-tablib: Unsafe use of yaml.load()

2019-08-05 Thread Thomas Goirand
On 8/5/19 7:35 AM, Scott Kitterman wrote:
> Package: src:python-tablib
> Version: 0.12.1-2
> Severity: grave
> Tags: security
> Justification: user security hole
> 
> The new version of pyyaml no longer allows use of yaml.load() without a
> loader being specifed.  This raises a deprecation warning which has
> caused and autopkgtest failure on this package.  These are generally
> trivial to fix, see the upstream guidance [1].
> 
> Scott K
> 
> [1] https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
> 
> 

Hi,

FYI, I have just filed a removal bug for this one, as it's not used by
any OpenStack things anymore.

Cheers,

Thomas Goirand (zigo)



Bug#933821: python-tuskarclient (build-)depends on cruft package.

2019-08-05 Thread Thomas Goirand
On 8/4/19 1:07 AM, Peter Michael Green wrote:
> Package: python-tuskarclient
> Severity: serious
> Version: 0.1.18-1
> Tags: bullseye, sid
> 
> python-tuskarclient depends on the python-cliff, python-keystoneclient,
> python-openstackclient and python-stevedore binary packages which are no
> longer built by the corresponding source packages.
> 
> If this is going to stay around it looks like it needs to migrate to
> python 3.

Hi,

I've filled an RM bug for this package, so it will go away... The Tuskar
project has been retired a long time ago, so this is overdue.

Thomas Goirand (zigo)



Bug#933934: unmount bash completion complains about "awk: line 18: function gensub never defined"

2019-08-05 Thread Laurent Bigonville
Package: mount
Version: 2.34-0.1
Severity: normal
File: /usr/share/bash-completion/completions/umount

Hi,

The unmount bash completion complains about "awk: line 18: function
gensub never defined" when trying to complete a device

This looks new to me

Kind regards,

Laurent Bigonville

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_BE:fr (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages mount depends on:
ii  libblkid1  2.34-0.1
ii  libc6  2.28-10
ii  libmount1  2.34-0.1
ii  libselinux12.9-2
ii  libsmartcols1  2.34-0.1
ii  util-linux 2.34-0.1

mount recommends no packages.

Versions of packages mount suggests:
pn  nfs-common  

-- no debconf information



Bug#933935: RM: python-tuskarclient -- ROM; Deprecated, not used

2019-08-05 Thread Thomas Goirand
Package: ftp.debian.org
Severity: normal


Dear FTP masters,

The Tuskar project was retired long ago, and no package is using
python-tuskarclient anymore. It's time to get this out of Debian.
I probably should have done this before Buster... :/

Thomas Goirand (zigo)



Bug#933936: (u)mount.linux redundant with own mount completion file?

2019-08-05 Thread Laurent Bigonville
Package: bash-completion
Version: 1:2.8-7
Severity: important
File: /usr/share/bash-completion/completions/umount.linux

Hi,

I see that the bash-completion package ships unmount.linux and
mount.linux. But the mount package also ships completion for these
executable, are these redundant?

I see the the changelog that they were once removed:

bash-completion (1:2.1-4.3) unstable; urgency=medium

  * Non-maintainer upload.
  * Stop shipping the mount/umount completions
- will be provided by mount package itself. (See: #820247)

 -- Andreas Henriksson   Tue, 12 Apr 2016 16:03:50 +0200

Why were there readded?

Kind regards,

Laurent Bigonville

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_BE:fr (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-- no debconf information



Bug#933937: biobambam2: /usr/bin/fastaexplode is already provided by exonerate

2019-08-05 Thread Andreas Beckmann
Package: biobambam2
Version: 2.0.95-1
Severity: serious
User: debian...@lists.debian.org
Usertags: piuparts

Hi,

during a test with piuparts I noticed your package failed to install
because it tries to overwrite other packages files.

>From the attached log (scroll to the bottom...):

  Selecting previously unselected package biobambam2.
  Preparing to unpack .../biobambam2_2.0.95-1_amd64.deb ...
  Unpacking biobambam2 (2.0.95-1) ...
  dpkg: error processing archive 
/var/cache/apt/archives/biobambam2_2.0.95-1_amd64.deb (--unpack):
   trying to overwrite '/usr/bin/fastaexplode', which is also in package 
exonerate 2.4.0-4
  Errors were encountered while processing:
   /var/cache/apt/archives/biobambam2_2.0.95-1_amd64.deb


cheers,

Andreas


exonerate=2.4.0-4_biobambam2=2.0.95-1.log.gz
Description: application/gzip


Bug#933723: Make APT::Keep-Downloaded-Packages configurable

2019-08-05 Thread Andrey Rahmatullin
On Mon, Aug 05, 2019 at 11:22:50AM +0200, Johannes Schauer wrote:
> Control: tag -1 + newcomer
> 
> Hi,
> 
> Quoting Andrey Rahmatullin (2019-08-02 15:14:23)
> > Currently sbuild sets APT::Keep-Downloaded-Packages to false and it doesn't
> > look configurable. If sbuild is used with a persistent package cache (e.g.
> > bind-mounting the host one) this setting should be set to true to skip
> > downloading the same packages on each build.
> 
> I guess an entry for your ~/.sbuildrc would be sufficient and you don't need
> this as a command line argument?
Definitely.

-- 
WBR, wRAR


signature.asc
Description: PGP signature


Bug#933938: ifcico: Default /etc/inetd.conf entry for tfido does not specify mode number to -t option

2019-08-05 Thread Björn Wiberg
Package: ifcico
Version: 2.14tx8.10-24
Severity: normal

Dear Maintainer,

The default /etc/inetd.conf entry for "tfido" looks like this:

tfido   stream  tcp nowait  ftn /usr/sbin/tcpd  
/usr/lib/ifmail/ifcico -r 0 -t

However, this yields an error when executing:

user@host:~$ telnet localhost 60177
Trying ::1...
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
ifcico: option requires an argument -- 't'
ifcico ver. 2.14-tx8.10 of Sun Feb 17 18:16:41 2019; (c) Eugene G. Crosser, 
1993-1997
This is free software. You can do what you wish with it
as long as this copyright notice is preserved.

usage: ifcico -h -x -I -r -a -t  ...
-h  get this help
-x set debug level[]
 may be a number from 0 to 32 to set `on'
bits from 1 to number, or a string of letters
('a' - bit 1, 'b' - bit 2, e.t.c. up to bit 26)
-Iuse config file   [/etc/ifmail/config]
-r 0|1  1 - master, 0 - slave   [0]
-n   forced phone number
-l   forced tty device
-ause TCP/IP instead of modem
-t0 - IFC, 1 - telnet [0]
  should be in domain form, e.g. f11.n22.z3
(this implies master mode)

 or: ifcico tsync|yoohoo|**EMSI_INQC816
(this implies slave mode)
Connection closed by foreign host.
user@host:~$

The /etc/inetd.conf entry for "tfido" should probably look like this instead:

tfido   stream  tcp nowait  ftn /usr/sbin/tcpd  
/usr/lib/ifmail/ifcico -r 0 -t 1

I just thought I would mention this.

Best regards,
Björn

-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages ifcico depends on:
ii  ifmail2.14tx8.10-24
ii  libc6 2.28-10
ii  libfl22.6.4-6.2
ii  libgdbm-compat4   1.18.1-4
ii  openbsd-inetd [inet-superserver]  0.20160825-4

ifcico recommends no packages.

ifcico suggests no packages.

-- no debconf information


Bug#918754: /usr/sbin ist still missing in PATH

2019-08-05 Thread Karsten
Hello maintainer,

i have the same problem.
It is really annoying that no root command can be executed after the upgrade to 
Debian 10.

What must be done to alter this manually for the correct standard settings?

After changing with su to user root the PATH to /usr/sbin must be added.
It can't be an solution that everybody must add this manually to the root's 
profile.

Cheers
karsten



Bug#933930: network-manager: Ethernet connection no longer works

2019-08-05 Thread Vincent Lefevre
On 2019-08-05 11:32:59 +0200, Vincent Lefevre wrote:
> On 2019-08-05 11:20:24 +0200, Vincent Lefevre wrote:
> > Downgrading to 1.14.6-2 solved the issue. As a comparison with this working 
> > version:

1.18.0-3 is also working.

cventin:~> journalctl -b -g network
-- Logs begin at Tue 2016-04-19 07:35:01 CEST, end at Mon 2019-08-05 12:21:38 
CEST. --
Aug 05 12:05:44 cventin kernel: e1000e: Intel(R) PRO/1000 Network Driver - 
3.2.6-k
Aug 05 12:05:44 cventin kernel: e1000e :00:19.0 eth0: Intel(R) PRO/1000 
Network Connection
Aug 05 12:05:44 cventin ifup[456]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-pre-up.d
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-pre-up.d/ethtool
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-pre-up.d/wpasupplicant
Aug 05 12:05:44 cventin ifup[456]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-pre-up.d
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-pre-up.d/ethtool
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-pre-up.d/wpasupplicant
Aug 05 12:05:44 cventin ifup[456]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-up.d
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-up.d/avahi-daemon
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-up.d/ethtool
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-up.d/mountnfs
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-up.d/wpasupplicant
Aug 05 12:05:44 cventin ifup[456]: /bin/run-parts --exit-on-error --verbose 
/etc/network/if-up.d
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-up.d/avahi-daemon
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-up.d/ethtool
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-up.d/mountnfs
Aug 05 12:05:44 cventin ifup[456]: run-parts: executing 
/etc/network/if-up.d/wpasupplicant
Aug 05 12:05:45 cventin systemd[1]: Starting Network Time Synchronization...
Aug 05 12:05:46 cventin systemd[1]: Started Network Time Synchronization.
Aug 05 12:05:46 cventin systemd[1]: Starting Network Manager...
Aug 05 12:05:46 cventin NetworkManager[758]:   [1564999546.7164] 
NetworkManager (version 1.18.0) is starting... (for the first time)
Aug 05 12:05:46 cventin NetworkManager[758]:   [1564999546.7166] Read 
config: /etc/NetworkManager/NetworkManager.conf (lib: no-mac-addr-change.conf)
Aug 05 12:05:46 cventin NetworkManager[758]:   [1564999546.7166] config: 
unknown key 'wifi.cloned-mac-address' in section [device-mac-addr-change-wifi] 
of file '/usr/lib/NetworkManager/conf.d/no-mac-addr-change.conf'
Aug 05 12:05:46 cventin NetworkManager[758]:   [1564999546.7166] config: 
unknown key 'ethernet.cloned-mac-address' in section 
[device-mac-addr-change-wifi] of file 
'/usr/lib/NetworkManager/conf.d/no-mac-addr-change.conf'
Aug 05 12:05:46 cventin NetworkManager[758]:   [1564999546.7221] 
bus-manager: acquired D-Bus service "org.freedesktop.NetworkManager"
Aug 05 12:05:46 cventin NetworkManager[758]:   [1564999546.7239] 
monitoring ifupdown state file '/run/network/ifstate'.
Aug 05 12:05:46 cventin dbus-daemon[753]: [system] Activating systemd to 
hand-off: service name='org.freedesktop.hostname1' 
unit='dbus-org.freedesktop.hostname1.service' requested by ':1.4' (uid=0 
pid=758 comm="/usr/sbin/NetworkManager --no-daemon ")
Aug 05 12:05:47 cventin avahi-daemon[787]: Network interface enumeration 
completed.
Aug 05 12:05:47 cventin systemd[1]: Started Network Manager.
Aug 05 12:05:47 cventin systemd[1]: Starting Network Manager Wait Online...
Aug 05 12:05:47 cventin systemd[1]: Reached target Network.
Aug 05 12:05:48 cventin dbus-daemon[753]: [system] Activating via systemd: 
service name='org.freedesktop.nm_dispatcher' 
unit='dbus-org.freedesktop.nm-dispatcher.service' requested by ':1.4' (uid=0 
pid=758 comm="/usr/sbin/NetworkManager --no-daemon ")
Aug 05 12:05:48 cventin systemd[1]: Starting Network Manager Script Dispatcher 
Service...
Aug 05 12:05:48 cventin systemd[1]: Started Network Manager Script Dispatcher 
Service.
Aug 05 12:05:48 cventin NetworkManager[758]:   [1564999548.2743] 
ifupdown:   interface-parser: parsing file /etc/network/interfaces
Aug 05 12:05:48 cventin NetworkManager[758]:   [1564999548.2744] 
ifupdown:   interface-parser: source line includes interfaces file(s) 
/etc/network/interfaces.d/*
Aug 05 12:05:48 cventin NetworkManager[758]:   [1564999548.2744] 
ifupdown: interfaces file /etc/network/interfaces.d/* doesn't exist
Aug 05 12:05:48 cventin NetworkManager[758]:   [1564999548.2745] 
ifupdown:   interface-parser: finished parsing file /etc/network/interfaces
Aug 05 12:05:48 cventin NetworkManager[758]:   [1564999548.2745] 
settings: Loaded settings plugin: SettingsPluginIfupdown 
("/usr/lib/x86_64-linux-gnu/NetworkManager/1.18.0/libnm-settings-plugin-ifupdown.so")
Aug 05 12:05:48 cv

Bug#933939: lxqt-policykit: With two-factor auth the password is displayed in cleartext

2019-08-05 Thread Jörg Kurlbaum
Package: lxqt-policykit
Version: 0.14.1-1
Severity: important
Tags: upstream

Dear Maintainer,

the lxqtpolicykit-agent GUI has a flaw in displaying sensitive
information when using U2F as an additional quth backend.

Patches are available here:

https://github.com/jkur/lxqt-policykit/tree/dontshowpass

The point is, that the QlineEdit still knows about the password in
repeated invocations and displays it as a default text.


   * What led up to the situation?

Using the lxqt-policykit-agent with two-factor auth based on pam-u2f

   * What was the outcome of this action?

The password is displayed in plaintext in the GUI

   * What outcome did you expect instead?

Don't show any sensitive information


-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (1001, 'stable'), (150, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), 
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages lxqt-policykit depends on:
ii  libc6  2.28-10
ii  liblxqt0   0.14.1-1
ii  libpolkit-qt5-1-1  0.112.0-6
ii  libqt5core5a   5.11.3+dfsg1-1
ii  libqt5gui5 5.11.3+dfsg1-1
ii  libqt5widgets5 5.11.3+dfsg1-1
ii  libstdc++6 8.3.0-6
ii  lxqt-session   0.14.1-2

Versions of packages lxqt-policykit recommends:
ii  lxqt-policykit-l10n  0.14.1-1

Versions of packages lxqt-policykit suggests:
pn  lxqt | lxqt-core  

-- no debconf information



Bug#933934: unmount bash completion complains about "awk: line 18: function gensub never defined"

2019-08-05 Thread Chris Hofstaedtler
Hi,

* Laurent Bigonville  [190805 10:20]:
> The unmount bash completion complains about "awk: line 18: function
> gensub never defined" when trying to complete a device

Can you confirm that your /usr/bin/awk is not gawk? If so, which one
is it?

Chris



Bug#933940: lxqt-policykit: Messagebox for auth info is modal, which is user-unfriendly

2019-08-05 Thread Jörg Kurlbaum
Package: lxqt-policykit
Version: 0.14.1-1
Severity: normal
Tags: upstream

Dear Maintainer,
   * What led up to the situation?

Using lxqtpolicykit-agent with U2F (two-factor auth) a modal info box
is displayed. Without clicking the OK-button the authentication cannot
proceed.

This is annoying (at least in my case) when your U2F-Token needs
activation through a button. You have to click and press the button,
which is quite tedious.


Patch is available here:

https://github.com/jkur/lxqt-policykit/tree/nonmodal-infobox


   * What exactly did you do (or not do) that was effective (or
 ineffective)?

Using U2F with this tool

   * What was the outcome of this action?

Pressing a lot of buttons.

   * What outcome did you expect instead?

Fast authentication ;-)


-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (1001, 'stable'), (150, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), 
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages lxqt-policykit depends on:
ii  libc6  2.28-10
ii  liblxqt0   0.14.1-1
ii  libpolkit-qt5-1-1  0.112.0-6
ii  libqt5core5a   5.11.3+dfsg1-1
ii  libqt5gui5 5.11.3+dfsg1-1
ii  libqt5widgets5 5.11.3+dfsg1-1
ii  libstdc++6 8.3.0-6
ii  lxqt-session   0.14.1-2

Versions of packages lxqt-policykit recommends:
ii  lxqt-policykit-l10n  0.14.1-1

Versions of packages lxqt-policykit suggests:
pn  lxqt | lxqt-core  

-- no debconf information



Bug#862226: XeTeX chokes if fontconfig returns a WOFF file to them

2019-08-05 Thread Hilmar Preuße
Control: block 862226 by 863835

Am 10.05.2017 um 00:51 teilte Bobby de Vos mit:

Hi,

> This issue was first filed under the fontconfig package,
> see https://bugs.debian.org/861938 for all the needed details.
> 
As the old bug is blocked y a bug in fontconfig, I'm blocking this one
too. Maybe it can be closed, as the blocker hopefully will solve the issue.

H.
-- 
sigfault
#206401 http://counter.li.org



signature.asc
Description: OpenPGP digital signature


Bug#931855: rpc.rquotad takes 100% CPU

2019-08-05 Thread Casper Gielen
>> It's probably the bug reported below:
>> https://sourceforge.net/p/linuxquota/feature-requests/16/
> 
> Can you try if this patch fixes the problem? That way we could make
> sure there is not something else at play on your system. If it does, we
> should see if we can get an update into a point release.

Hi Michael,
this patch fixed the issue for me with no obvious regressions.
I've installed it on two systems and both work fine.

Thanks!

-- 
Casper Gielen  | LIS UNIX
PGP fingerprint = 16BD 2C9F 8156 C242 F981  63B8 2214 083C F80E 4AF7

Universiteit van Tilburg | Postbus 90153, 5000 LE
Warandelaan 2 | Telefoon 013 466 4100 | G 231 | http://www.uvt.nl





signature.asc
Description: OpenPGP digital signature


Bug#933941: hplip: Amend package description

2019-08-05 Thread Brian Potkin
Package: hplip
Version: 3.18.12+dfsg0-2
Severity: minor
Tags: patch


In the light of the changelog entry:

  * Disable deprecated parallel port support

the line in the package description

  USB, JetDirect (network) and parallel-port devices are supported

should become

  USB and JetDirect (network) devices are supported

Regards,

Brian.



Bug#933795: java build is failing

2019-08-05 Thread Pirate Praveen

When trying to build 3.7.1, it failed with this error,

# Java build.
ant -f debian/java-build.xml jar
Buildfile: /<>/debian/java-build.xml

generate:
[mkdir] Created dir: 
/<>/java/core/target/generated-sources

 [echo] src

compile:
[mkdir] Created dir: /<>/java/core/target/classes
[javac] Using javac -source 1.5 is no longer supported, switching to 
6
[javac] Using javac -target 1.5 is no longer supported, switching to 
6
[javac] Compiling 144 source files to 
/<>/java/core/target/classes
[javac] warning: [options] bootstrap class path not set in 
conjunction with -source 6
[javac] warning: [options] source value 6 is obsolete and will be 
removed in a future release
[javac] warning: [options] target value 1.6 is obsolete and will be 
removed in a future release
[javac] warning: [options] To suppress warnings about obsolete 
options, use -Xlint:-options.
[javac] 
/<>/java/core/src/main/java/com/google/protobuf/RopeByteString.java:584: 
error: diamond operator is not supported in -source 6
[javac] private final ArrayDeque prefixesStack = new 
ArrayDeque<>();
[javac]  
   ^

[javac]   (use -source 7 or higher to enable diamond operator)
[javac] 1 error
[javac] 4 warnings

BUILD FAILED
/<>/debian/java-build.xml:38: Compile failed; see the 
compiler error output for details.




Bug#933942: qtbase-opensource-src won't build a second time

2019-08-05 Thread Mike Bird
Source: qtbase-opensource-src
Version: 5.11.3+dfsg1-1
Severity: normal

"debuild -b -uc -us" works once but if you try it again it breaks while
trying to clean up from the first run.  Here are the last few lines:

cd tests/ && ( test -e Makefile || 
/cache/debian-src/base/qtbase-opensource-src-5.11.3+dfsg1/bin/qmake -o Makefile 
/cache/debian-src/base/qtbase-opensource-src-5.11.3+dfsg1/tests/tests.pro ) && 
/usr/bin/make -f Makefile distclean
make[3]: Entering directory 
'/cache/debian-src/base/qtbase-opensource-src-5.11.3+dfsg1/tests'
cd auto/ && ( test -e Makefile || 
/cache/debian-src/base/qtbase-opensource-src-5.11.3+dfsg1/bin/qmake -o Makefile 
/cache/debian-src/base/qtbase-opensource-src-5.11.3+dfsg1/tests/auto/auto.pro ) 
&& /usr/bin/make -f Makefile distclean
Project ERROR: QtDBus is enabled but session bus is not available. Please check 
the installation.
make[3]: *** [Makefile:55: sub-auto-distclean] Error 3
make[3]: Leaving directory 
'/cache/debian-src/base/qtbase-opensource-src-5.11.3+dfsg1/tests'
make[2]: *** [Makefile:108: sub-tests-distclean] Error 2
make[2]: Leaving directory 
'/cache/debian-src/base/qtbase-opensource-src-5.11.3+dfsg1'
make[1]: *** [debian/rules:128: override_dh_auto_clean] Error 2
make[1]: Leaving directory 
'/cache/debian-src/base/qtbase-opensource-src-5.11.3+dfsg1'
make: *** [debian/rules:72: clean] Error 2
dpkg-buildpackage: error: fakeroot debian/rules clean subprocess returned exit 
status 2
debuild: fatal error at line 1182:
dpkg-buildpackage -us -uc -ui -b failed

The workaround is to delete the working tree, do apt-source again, and
then debuild in the new clean tree.

There is an old bug #782153 with a similar title but that is a different
problem.

--Mike

-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (2000, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/12 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)



Bug#933943: RM: ovito -- ROM; FTBFS for a long time, did not get into the buster

2019-08-05 Thread Anton Gladky
Package: ftp.debian.org
Severity: normal

Dear FTP team,

please remove this package from archive. It does not build for a long
time and did not get into the buster.

Thanks,

Anton



Bug#933934: unmount bash completion complains about "awk: line 18: function gensub never defined"

2019-08-05 Thread Laurent Bigonville

On 5/08/19 12:22, Chris Hofstaedtler wrote:

Hi,

Hey,


* Laurent Bigonville  [190805 10:20]:

The unmount bash completion complains about "awk: line 18: function
gensub never defined" when trying to complete a device

Can you confirm that your /usr/bin/awk is not gawk? If so, which one
is it?

bigon@edoras:~$ ls -la /usr/bin/awk /etc/alternatives/awk
lrwxrwxrwx 1 root root 13 fév  1  2019 /etc/alternatives/awk -> 
/usr/bin/mawk
lrwxrwxrwx 1 root root 21 fév  1  2019 /usr/bin/awk -> 
/etc/alternatives/awk


So I only have "mawk" installed:

ii  mawk 1.3.3-17+b3  amd64    a pattern 
scanning and text processing language




Bug#933937: Exonerate conflicts with biobambam

2019-08-05 Thread Andreas Tille
On Sun, Jul 28, 2019 at 01:40:33AM +0200, Steffen Möller wrote:
> 
> Am 27.07.2019 um 20:09 schrieb Andreas Tille:
> > On Sat, Jul 27, 2019 at 07:40:45PM +0200, Steffen Möller wrote:
> > > dpkg: error processing archive
> > > /var/cache/apt/archives/exonerate_2.4.0-4_amd64.deb (--unpack):
> > >   trying to overwrite '/usr/bin/fastaexplode', which is also in package
> > > biobambam2 2.0.95-1
> > > 
> > > Grummel. Does anybody have any insights on what is going on?
> > Just guessing: You have some local package biobambam2 with a file name
> > conflict?
> 
> This one https://salsa.debian.org/med-team/biobambam2
> 
> I lack insights thought if the two are doing the very same thing or if
> this is some coincidence of some sort. We did not have too many
> conflicts without our community, yet. A stackoverflow entry points to
> the exonerate package:
> 
> https://bioinformatics.stackexchange.com/questions/7326/downloading-fasta-for-each-chromosome-of-a-complete-genome
> 
> I am tempted to put fastaexplode into a separate package . Does anybody
> by chance know if
> https://github.com/gt1/biobambam2/blob/master/src/programs/fastaexplode.cpp
> is doing the same thing? I'd otherwise contact upstream about it.

Any news about this?  We have now bug #933937 and need to care about it.
Did you contacted upstream (of both packages)? 

The fastaexplode from exonerate[1] is definitely a different codebase
than the one from biobambam2[2].  The command line interface is
definitely different when looking at the command line parsing code.  So
serving both software packages with only one pick will most probably
not work.

Kind regards

Andreas.

[1] 
https://salsa.debian.org/med-team/exonerate/blob/master/src/util/fastaexplode.c
[2] 
https://salsa.debian.org/med-team/biobambam2/blob/master/src/programs/fastaexplode.cpp

-- 
http://fam-tille.de



Bug#933944: uswsusp: doesn't try to resume if conf.d/resume isn't set, or kernel parameter resume is not given

2019-08-05 Thread Alejandro González
Package: uswsusp
Version: 1.0+20120915-6.2
Severity: important
Tags: patch

Dear Maintainer,

Before installing the uswsusp package, I configured and activated a 1
GiB swap file inside my root partition, which was encrypted using the
Debian installer, adding it to /etc/fstab. Then I followed the configuration 
wizard, which set up
the correct defaults needed to use my swap file to hibernate, which can
be seen below.

Then I tried to use s2disk as root. The hibernation process worked fine, but
when turning on my computer again, the initramfs didn't seem to bother
resuming from the supposedly created image.

So I started to debug the cause of the problem. I figured out that, if I
manually added the "resume" and "resume_offset" kernel parameters (editing, in 
my case, the /etc/default/grub
file), everything worked fine, and the computer resumed well. However,
from a mantainance perspective, it's uncomfortable to have two settings in two 
different places
set to the same value (kernel parameters and /etc/uswsusp.conf), because it's 
error-prone. Therefore,
I continued inspecting the problem in order to come up with a better
solution.

I figured out, too, that initramfs-tools-core also includes a resume
script in the initramfs. That script is tightly integrated with the
$resume shell variable, which is initialized from the
/usr/share/initramfs-tools/conf.d/resume configuration file, or the
"resume" kernel parameter. That script basically bails out if the
$resume variable is empty, which in my case it was, because the conf.d
file set the RESUME variable to "none" (its default value). Moreover, as
I didn't use a kernel parameter in the first place, it remained empty.

So I tried to set the "resume" configuration file to the same value that
uswsusp correctly calculated, /dev/dm-1 (my encrypted root partition,
which gets properly decrypted by a previous cryptsetup script in the
initramfs). The result was that I was still unable to boot, because I
still had to provide the "resume_offset" kernel parameter... And, to be
honest, messing with this configuration file is still as messy as the
first solution, because configuration values are replicated all over the
place.

Finally, I inspected the uswsusp local-premount script, and observed
the apparently innocent line 24 on it:

[ -n "${resume}" ] || exit 0;

Which basically means that, if $resume is not set, then we bail out of
the script without error. But that's incorrect: uswsusp doesn't have
anything to do with the default resume initramfs script, including that
variable, and the uswsusp hints that things should work fine out
of the box:

"You will need to set up an initramfs which calls the resume program for
this to work. If you use a package distributed with your Linux
distribution, the kernel package which was made with the --initrd
option and you use mkinitramfs-tools, this package should include the
necessary parts on your initramfs."

Therefore, I commented out that line, ran update-initramfs -u, and tried
s2disk again.

Now my machine resumes from hibernation properly, using the
/etc/uswsusp.conf file that gets copied to the initramfs, and all the
resume-related configurations are centralized in a single place :)

-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_USER
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8), 
LANGUAGE=es_ES.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages uswsusp depends on:
ii  debconf [debconf-2.0]  1.5.71
ii  libblkid1  2.33.1-0.1
ii  libc6  2.28-10
ii  liblzo2-2  2.10-0.1
ii  libpci31:3.5.2-1
ii  libx86-1   1.1+ds1-10.2

Versions of packages uswsusp recommends:
ii  initramfs-tools  0.133
ii  mount2.33.1-0.1

uswsusp suggests no packages.

-- debconf information:
  uswsusp/no_snapshot:
* uswsusp/image_size: 1073741824
* uswsusp/encrypt: false
  uswsusp/RSA_key_file: /etc/uswsusp.key
* uswsusp/compress: true
* uswsusp/early_writeout: true
  uswsusp/resume_offset: 1276408
* uswsusp/shutdown_method: platform
* uswsusp/continue_without_swap: false
  uswsusp/RSA_key_bits: 1024
  uswsusp/no_swap:
* uswsusp/snapshot_device:
* uswsusp/resume_device: /dev/dm-1
* uswsusp/max_loglevel: 6
* uswsusp/suspend_loglevel: 6
  uswsusp/create_RSA_key: false
* uswsusp/compute_checksum: true



Bug#806749: ubuntu-dev-tools: [pull-debian-source] Add support for Debian LTS

2019-08-05 Thread Mattia Rizzolo
Control: tag -1 moreinfo

On Mon, Nov 30, 2015 at 03:40:21PM -0500, Scott Kitterman wrote:
> It turns out getting pull-debian-source to pull a squeeze-lts version is not
> complicated.  It will error out if there isn't an LTS package, but I think
> that is OK.  Please see the attached patch.  It would be nice to have this
> available generally.  I am using it for my LTS work locally.

After squeeze lts used the base security archive, without any additional
suite, so I think this bug can now be closed without any action.

Do you agree?

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature


Bug#929185: default soundfonts (was Re: gstreamer1.0-plugins-bad: no midi sound - gstreamer selects wrong soundfont by default)

2019-08-05 Thread Thorsten Glaser
Fabian Greffrath dixit:

>I think things would become at lot easier if I would let libfluidsynth1
>depend on "timgm6mb-soundfont | sf2-soundfont" instead of merely
>recommending it. Does anything speak against this?

No, that’s optimising for the common case, and the local admin
can always use equivs or something. Go ahead ;-)

Thanks,
//mirabilos
-- 
 Beware of ritual lest you forget the meaning behind it.
 yeah but it means if you really care about something, don't
ritualise it, or you will lose it. don't fetishise it, don't
obsess. or you'll forget why you love it in the first place.



Bug#933934: unmount bash completion complains about "awk: line 18: function gensub never defined"

2019-08-05 Thread Chris Hofstaedtler
Control: tags -1 + help confirmed

Hi,

* Laurent Bigonville  [190805 13:19]:
> On 5/08/19 12:22, Chris Hofstaedtler wrote:
> > * Laurent Bigonville  [190805 10:20]:
> > > The unmount bash completion complains about "awk: line 18: function
> > > gensub never defined" when trying to complete a device
> > Can you confirm that your /usr/bin/awk is not gawk? If so, which one
> > is it?
> bigon@edoras:~$ ls -la /usr/bin/awk /etc/alternatives/awk
> lrwxrwxrwx 1 root root 13 fév  1  2019 /etc/alternatives/awk ->
> /usr/bin/mawk
> lrwxrwxrwx 1 root root 21 fév  1  2019 /usr/bin/awk -> /etc/alternatives/awk
> 
> So I only have "mawk" installed:
> 
> ii  mawk 1.3.3-17+b3  amd64    a pattern
> scanning and text processing language

Okay, kinda like I thought.

I'm not sure if, for bash-completion, a Depends: gawk is warranted
from Package: mount, which has Priority: required. This would pull
in gawk on pretty much every system (...).

Carrying a local patch to revert the change doesn't sound
sustainable. I'm not an awk expert to come up with a patch that
would implement the same functionality for mawk.

Whats your viewpoint / your thoughts on this?

Thanks,
Chris



Bug#865121: X session is killed when tty is switched

2019-08-05 Thread raphael . jolly
Similar problem here. Fresh install of buster on a thomson neo14-32wc, gnome 
edition.

There is gnome-wayland and gnome-xorg. In gnome-wayland it works fine : session 
is in tty7, I type ctrl-alt-f2 to 6 and back to ctrl-alt-f7 and get my 
gnome-session back.

In gnome-xorg however, the gnome-session is killed. Not at once. Starting from 
tty7, I type ctrl-alt-f6 (for instance) and ps and gnome-session is still 
there. Then I type ctrl-alt-f7 and the session is killed and I end up on the 
gdm3 login (in tty1).

Any help appreciated.



Bug#895990: has there been any update on this as it still shows up a bug in debian testing

2019-08-05 Thread shirish शिरीष
Dear all,
I have been trying to install the package without much success. I did
read the bug-report but it doesn't tell whether libgjs have been fixed
in testing or not. Can somebody share an update on the situation
please.

-- 
  Regards,
  Shirish Agarwal  शिरीष अग्रवाल
  My quotes in this email licensed under CC 3.0
http://creativecommons.org/licenses/by-nc/3.0/
http://flossexperiences.wordpress.com

E493 D466 6D67 59F5 1FD0 930F 870E 9A5B 5869 609C



Bug#932299: closed by Vincent Danjean (Bug#932299: fixed in owfs 3.2p3+dfsg1-3)

2019-08-05 Thread Bernhard Schmidt
On Thu, Jul 25, 2019 at 10:54:04AM +, Debian Bug Tracking System wrote:

Hi Vincent,

> This is an automatic notification regarding your Bug report
> which was filed against the src:owfs package:
> 
> #932299: owfs: FTBFS: relocation R_X86_64_32 against symbol `_Py_NoneStruct' 
> can not be used
> 
> It has been closed by Vincent Danjean .

It won't migrate to testing because it was not a source-only upload. See 

https://lists.debian.org/debian-release/2019/07/msg00053.html 

second paragraph.

Could you perform a source-only upload?

Thanks,
Bernhard



Bug#933945: bc: Carriage return stopped working between calculations

2019-08-05 Thread Thomas Stewart
Package: bc
Version: 1.07.1-2+b2
Severity: normal

Dear Maintainer,

   * What led up to the situation?

Instead of a normal calculator I use bc for quick calculations. Often
between different calculations I press return a few times to space
things out (and to focus the mind).


   * What outcome did you expect instead?

It seems this functionality does not work anymore. Historically if you
run bc and press enter, newlines are shown on screen scrolling the
output up one line. However now pressing enter does nothing (unless you
are doing an actual calculation).

I expect to be able to press return at a bc(1) prompt and for a newline
to scroll the output up.


   * What I found out.

I think I have narrowed the issue down to the libreadline.so.7 to
libreadline.so.8 update that hit the mirrors on the 22nd July 2019.

If two chroots are created from the 22nd July, one at 03:59 and one at
08:59 with the following commands:
$ sudo debootstrap --variant=minbase --include=bc bullseye 
bullseye-20190722T035916Z 
https://snapshot.debian.org/archive/debian/20190722T035916Z/
$ sudo debootstrap --variant=minbase --include=bc bullseye 
bullseye-20190722T085948Z 
https://snapshot.debian.org/archive/debian/20190722T085948Z/

The first chroot works as expected however the second does not, I tested
as below:
$ sudo chroot bullseye-20190722T035916Z/ bc
$ sudo chroot bullseye-20190722T085948Z/ bc

Looking at the libraries linked and comparing them shows that
libreadline changed version from 7 to 8.
$ ldd bullseye-20190722T035916Z/usr/bin/bc | awk '{print $1}' > 1
$ ldd bullseye-20190722T085948Z/usr/bin/bc | awk '{print $1}' > 2
$ diff -u 1 2
--- 1   2019-08-02 13:45:33.594849157 +0100
+++ 2   2019-08-02 13:45:36.334827465 +0100
@@ -1,5 +1,5 @@
 linux-vdso.so.1
-libreadline.so.7
+libreadline.so.8
 libncurses.so.6
 libtinfo.so.6
 libc.so.6

I'm not sure what to try next.

Kind Regards
--
Tom

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (800, 'testing'), (700, 'unstable'), (600, 'experimental'), (500, 
'unstable-debug'), (500, 'testing-debug'), (1, 'experimental-debug')
Architecture: amd64 (x86_64)
Foreign Architectures: armel, armhf, i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages bc depends on:
ii  libc6 2.28-10
ii  libncurses6   6.1+20190713-1
ii  libreadline8  8.0-2
ii  libtinfo6 6.1+20190713-1

bc recommends no packages.

bc suggests no packages.

-- no debconf information



Bug#929185: default soundfonts (was Re: gstreamer1.0-plugins-bad: no midi sound - gstreamer selects wrong soundfont by default)

2019-08-05 Thread Fabian Greffrath
Am Montag, den 05.08.2019, 11:44 + schrieb Thorsten Glaser:
> can always use equivs or something. Go ahead ;-)

Done, thanks!

 - Fabian



signature.asc
Description: This is a digitally signed message part


Bug#932961: node-acorn: ES module is broken

2019-08-05 Thread Pirate Praveen
On Thu, 25 Jul 2019 12:56:00 +0530 Pirate Praveen  
wrote:
> Package: node-acorn
> Version: 5.5.3+ds3-3
> Severity: important
> 
> When trying to use ES module version of rollup,
> 
> $ node --experimental-modules bin/src/index.js   (node:19235) 
> ExperimentalWarning: The ESM module loader is experimental.   
>  file:///home/praveen/forge/node-rollup/src/Module.js:1   
>import { parse } from 'acorn'; 
>   ^  SyntaxError: The requested module 
> 'acorn' does not provide an export named 'parse'  at 
> ModuleJob._instantiate (internal/modules/esm/module_job.js:93:21) 
>at async ModuleJob.run 
> (internal/modules/esm/module_job.js:108:20)  at 
> async Loader.import (internal/modules/esm/loader.js:134:24)
> 
> It seems the shipped ES module is broken.
> 

We can ignore this bug till ESM loader is declared stable, as it needs an 
upstream change.

Currently node core ESM loader will consider a file as ES module only if 
package.json has "type": " module" field or the file extension is .mjs.
-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

Bug#933331: devscripts: FTBFS in buster (failing tests)

2019-08-05 Thread Mattia Rizzolo
Control: fixed -1 2.19.5+deb10u1
Control: close -1

On Mon, Jul 29, 2019 at 10:22:55AM +, Santiago Vila wrote:
> I tried to build this package in buster but it failed:
> 
> 
> ./test_debchange
> testDebianDistributions
> testDebianIncrement
> testUbuntuIncrement
> testUbuntuRebuild
> testEncoding
> testEmptyMessage
> testGuessedDistribution
> ASSERT:error output of perl -I ./../lib ./../scripts/debchange.pl --no-conf 
> -c "/tmp/shunit.a65OSr/tmp/changelog" --vendor Debian --create -D 
> jessie-backports --package test-package -v 1.0-1 'First upload'\n expected:<> 
> but was: experimental, unstable, testing, stable, oldstable, oldoldstable,
> {bullseye,buster,stretch,jessie,wheezy}-proposed-updates,
> {testing,stable,oldstable,oldoldstable}-proposed-updates,
> {bullseye,buster,stretch,jessie,wheezy}-security,
> {testing,stable,oldstable,oldoldstable}}-security, stretch-backports, 
> buster-backports and UNRELEASED.
> Using your request anyway.
> debchange.pl: Did you see that warning?  Press RETURN to continue...>

I'm not entirely of what happened, but this seems to not happen after
the small patch placing buster-bpo as default --bpo.
So, I'm closing with that version (it's still in stable-new).

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature


Bug#933946: RFP: libtest-fitesque-rdf-perl -- Formulate Test::FITesque fixture tables in RDF

2019-08-05 Thread Kjetil Kjernsmo
Package: wnpp
Severity: wishlist

* Package name: libtest-fitesque-rdf-perl
  Version : 0.011
  Upstream Author : Kjetil Kjernsmo 
* URL : https://metacpan.org/pod/Test::FITesque::RDF
* License : MIT
  Programming Lang: Perl
  Description : Formulate Test::FITesque fixture tables in RDF

This module enables the use of Resource Description Framework to
describe fixture tables. 

The RDF serves to identify the implementation of certain fixtures, and
can also supply parameters that can be used by the tests, e.g. input
parameters or expectations. See Test::FITesque for more on how the
fixtures are implemented.

It serves as the implementation of the Solid project test suite.



Bug#918754: /usr/sbin ist still missing in PATH

2019-08-05 Thread Karsten
reassign 918754 login 1:4.5-1.1

Hello,

i found out that it should be configured in /etc/login.defs
and it is correct configured:


#
# *REQUIRED*  The default PATH settings, for superuser and normal users.
#
# (they are minimal, add the rest in the shell startup files)
ENV_SUPATH  
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
ENV_PATH    PATH=/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games


So /sbin is correct for the root configured.
But it is not working!
Why?

This bug should be addressed to the package login.
I will try to reassign it ...

Cheers
karsten



Bug#933947: contributors: add redirection to the standard name of a user

2019-08-05 Thread Mattia Rizzolo
Package: nm.debian.org
Severity: wishlist

DDPO contains links for every email address to
contributors.d.o/contributor/{{ email }}, so for example my own DDPO
page has a link to both
https://contributors.debian.org/contributor/mattia%40debian.org/
https://contributors.debian.org/contributor/mattia%40mapreri.org/
The latter actually returns a 404, but it should IMHO redirect to the
first one.

contributors itself aims at connecting multiple identities, together
with `carnivore`, so it should already have all the required data.

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature


Bug#926823: executable-not-elf-or-script should consider PE binaries

2019-08-05 Thread Felix Lechner
Hi,

On Thu, May 2, 2019 at 9:27 AM Chris Lamb  wrote:
>
> This begs the question; why cannot the systemd packaging remove the
> executable bits from these files?

On my testing system post-buster, the executable bits are still set:

$ ls -ald /usr/lib/systemd/boot/efi/*
-rwxr-xr-x 1 root root 59730 Jul 18 10:38
/usr/lib/systemd/boot/efi/linuxx64.efi.stub
-rwxr-xr-x 1 root root 91765 Jul 18 10:38
/usr/lib/systemd/boot/efi/systemd-bootx64.efi

May I please assign this bug to package systemd?

Kind regards,
Felix Lechner



Bug#933948: courier-mta randomly stops, cannot restart or start services, it just appears started, but it exists

2019-08-05 Thread Jean Louis
Package: courier-mta
Version: 1.0.6-1
Severity: critical
Justification: causes serious data loss

Dear Maintainer,

   * What led up to the situation?

   I have made dist-upgrade from 9 to Debian 10
   
   * What exactly did you do (or not do) that was effective (or
 ineffective)?

   Just upgraded the system. Courier MTA apparently randomly stops and cannot 
be restarted.
   
This includes courier-imap-ssl

If I use web administrationa and click SAVE on IMAP or incoming ESMTP, and 
install new configuration, services start working.

If I just use service courier-imap-ssl start this does not work, even if 
service is enabled.

Example for courier-imap-ssl

I have restarted from web administration, so this works:

Executing /usr/sbin/imapd-ssl stop ; . /etc/courier/imapd-ssl ; test 
"$IMAPDSSLSTART" != YES || /usr/sbin/imapd-ssl start...
Executing /usr/sbin/imapd stop ; . /etc/courier/imapd ; test "$IMAPDSTART" != 
YES || /usr/sbin/imapd start...


root@stw1:/tmp# service courier-imap-ssl status
● courier-imap-ssl.service - LSB: Courier IMAP server (TLS)
   Loaded: loaded (/etc/init.d/courier-imap-ssl; generated)
   Active: active (exited) since Sun 2019-08-04 11:28:14 MST; 17h ago
 Docs: man:systemd-sysv-generator(8)
Tasks: 0 (limit: 2379)
   Memory: 0B
   CGroup: /system.slice/courier-imap-ssl.service

Warning: Journal has been rotated since unit was started. Log output is 
incomplete or unavailable.
root@stw1:/tmp# lsof -i :993
COMMAND PIDUSER   FD   TYPE DEVICE SIZE/OFF NODE NAME
couriertc 31390root3u  IPv6 332900  0t0  TCP *:imaps (LISTEN)


Now if I do following:


root@stw1:/tmp# service courier-imap-ssl stop
root@stw1:/tmp# service courier-imap-ssl start
root@stw1:/tmp# lsof -i :993
root@stw1:/tmp#

This does not work.

root@stw1:/tmp# service courier-imap-ssl status
● courier-imap-ssl.service - LSB: Courier IMAP server (TLS)
   Loaded: loaded (/etc/init.d/courier-imap-ssl; generated)
   Active: active (exited) since Mon 2019-08-05 05:28:47 MST; 16s ago
 Docs: man:systemd-sysv-generator(8)
  Process: 31976 ExecStart=/etc/init.d/courier-imap-ssl start (code=exited, 
status=0/SUCCESS)

Aug 05 05:28:47 stw1.rcdrun.com systemd[1]: Starting LSB: Courier IMAP serve…...
Aug 05 05:28:47 stw1.rcdrun.com systemd[1]: Started LSB: Courier IMAP server…S).
Hint: Some lines were ellipsized, use -l to show in full.


So if I do simple:

/usr/sbin/imapd-ssl start

This works.

It broke my email system and I need to install third party supervision to make 
sure that services are running.


-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (500, 'stable'), (90, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-8-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages courier-mta depends on:
ii  courier-authlib0.69.0-2
ii  courier-base   1.0.6-1
ii  debconf [debconf-2.0]  1.5.71
ii  libc6  2.28-10
ii  libcourier-unicode42.1-3
ii  libgcc11:8.3.0-6
ii  libgdbm6   1.18.1-4
ii  libidn11   1.33-2.2
ii  libnet-cidr-perl   0.19-1
ii  libperl5.285.28.1-6
ii  libstdc++6 8.3.0-6
ii  sysvinit-utils 2.93-8

courier-mta recommends no packages.

Versions of packages courier-mta suggests:
ii  bsd-mailx [mail-reader]  8.1.2-0.20180807cvs-1
pn  courier-doc  
pn  courier-filter-perl  
pn  couriergrey  
ii  emacs-nox [mail-reader]  1:26.1+1-3.2
ii  mailutils [mail-reader]  1:3.5-3
ii  mutt [mail-reader]   1.10.1-2.1

-- Configuration Files:
/etc/courier/aliases/system changed:
root: postmaster
mailer-daemon: postmaster
MAILER-DAEMON: postmaster
uucp: postmaster
www-data: postmaster
postmaster: admin

/etc/courier/courierd changed:
prefix="/usr"
exec_prefix="/usr"
. /etc/environment
PATH=/usr/bin:/bin:/usr/bin:/usr/local/bin
SHELL=/bin/sh
DSNTOAUTHADDR=0
DYNAMICDELIVERIES=1
DEFAULTDELIVERY="|| /usr/bin/dotforward
./Maildir"
MAILDROPDEFAULT=./Maildir
ESMTP_CORK=1
ESMTP_BLOCKBACKSCATTER=smtp/dsn
UUXFLAGS="-j -g C"
ESMTP_USE_STARTTLS=1
COURIERTLS=/usr/bin/couriertls
ESMTP_TLS_VERIFY_DOMAIN=0
ESMTP_PREFER_IPV6_MX=1
TLS_TRUSTCERTS=/etc/ssl/cert.pem
TLS_VERIFYPEER=NONE

/etc/courier/enablefiltering changed:
esmtp local

/etc/courier/esmtpauthclient [Errno 13] Permission denied: 
'/etc/courier/esmtpauthclient'
/etc/courier/esmtpd changed:
PATH=/usr/bin:/bin:/usr/bin:/usr/local/bin
SHELL=/bin/sh
ULIMIT=32768
BOFHCHECKDNS="1"
BOFHNOEXPN=1
BOFHNOVRFY=1
TARPIT=1
NOADDMSGID="1"
NOADDDATE="1"
NOADDRREWRITE=0
ESMTP_LOG_DIALOG=0
AUTH_REQUIRED="0"
COURIERTLS=/usr/bin/couriertls
TLS_CERTFILE=/etc/courier/esmtpd.pem
TLS_DHPARAMS=/etc/courier/dhparams.pem
TLS_TRUSTCERTS=/etc/ssl/cert.pem
TLS_VERIFYPEER=NONE
MAILUSER=courier
MAILGROUP=courier
PORT=smtp
BLACKLISTS="-block=zen.

Bug#926823: executable-not-elf-or-script should consider PE binaries

2019-08-05 Thread Chris Lamb
Felix Lechner wrote:

> > This begs the question; why cannot the systemd packaging remove the
> > executable bits from these files?
> 
> On my testing system post-buster, the executable bits are still set:
[…]
> May I please assign this bug to package systemd?

Can you clarify whom you are directing this query to? (I am unable to
answer it.)


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org 🍥 chris-lamb.co.uk
   `-



Bug#926823: executable-not-elf-or-script should consider PE binaries

2019-08-05 Thread Felix Lechner
Control: reassign -1 systemd
Control: severity -1 wishlist

Hi,

On Mon, Aug 5, 2019 at 5:48 AM Chris Lamb  wrote:
>
> Can you clarify whom you are directing this query to? (I am unable to
> answer it.)

It was a matter of politeness, I suppose.

Kind regards,
Felix



Bug#933949: RFP: libtest-fitesque-perl -- Formulate test fixture tables in data structures

2019-08-05 Thread Kjetil Kjernsmo
Package: wnpp
Severity: wishlist

* Package name: libtest-fitesque-perl
  Version : 0.04
  Upstream Author : Scott McWhirter 
* URL : https://metacpan.org/pod/Test::FITesque
* License : BSD
  Programming Lang: Perl
  Description : Formulate test fixture tables in data structures

Test::FITesque is a framework designed to emulate the FIT
http://fit.c2.com framework, but with a more perlish touch. While it
is possible to use the FIT framework from within perl, it has a lot of
unnessecary overhead related to its origins in the Java world.

It can be used to formulate tests in a structured manner rather than
rely on doing it within a programming language. Such formulations are
known as fixture tables.

With this, you can
* store fixture tables in whatever format you want (JSON, YAML, Storable, etc)

* simplify the execution process to make it very transparent.

* use the normal Perl testing tools

* save the TAP output to more easily capture test results over time to
track regressions and problematic tests.

It also forms the basis for the Solid project test suite.



Bug#932175: stretch-pu: package openssh/1:7.4p1-10+deb9u7

2019-08-05 Thread Moritz Mühlenhoff
On Sat, Jul 27, 2019 at 12:34:38PM +0200, Cyril Brulebois wrote:
> Adam D. Barratt  (2019-07-26):
> > On 2019-07-16 06:36, Moritz Muehlenhoff wrote:
> > > This update for OpenSSH fixes a dead lock in AuthorizedKeysCommand
> > > (#905226).
> > > 
> > > The fixed package is running fine on a formerly affected Stretch system
> > > (https://phabricator.wikimedia.org)
> > 
> > This looks OK to me, but will need a d-i ack due to the udeb; tagging and
> > CCing accordingly.
> 
> No objections, thanks.

Uploaded.

Cheers,
Moritz



Bug#933950: Newer upstream is available (please assure providing gpuclockctl)

2019-08-05 Thread Yaroslav Halchenko
Package: gamemode
Version: 1.2-6
Severity: normal

Dear Maintainers,

for a new version of psychtoolbox-3 (CCing upstream) we need gpuclockctl which
is provided in newer upstream versions of gamemode. Current latest tag on 
https://github.com/FeralInteractive/gamemode is 1.4

Thank you in advance and please let me know if you need any assistance

Cheers!

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (900, 'testing'), (600, 'unstable'), (300, 'experimental'), (100, 
'unstable-debug')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), 
LANGUAGE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages gamemode depends on:
ii  libc6 2.28-8
ii  libgamemode0  1.2-6
ii  libgamemodeauto0  1.2-6
ii  libsystemd0   241-3

gamemode recommends no packages.

gamemode suggests no packages.

-- debconf-show failed



Bug#512307: texinfo: blank line inconsistency for multitable

2019-08-05 Thread Vincent Lefevre
On 2019-08-04 18:27:28 +0200, Hilmar Preuße wrote:
> Am 01.08.2013 um 16:29 teilte Vincent Lefevre mit:
> > I've tested with texinfo 5.1.dfsg.1-4, and the behavior has changed:
> > the info file now has a blank line, and the HTML file no longer has
> > one.
> > 
> > Thus there are still inconsistencies:
> >   * A blank line in the info and PDF files.
> >   * No blank line in the HTML and XML files.
> > 
> Sorry, I'm not familiar w/ creating files out of texinfo. Which of the
> both behaviors would you expect, i.e. which one is the broken?

IMHO, this is a matter of style. But for each format, the output
should be consistent. Different formats should also have similar
styles.

In the texinfo manual:

 Usually, you should put a blank line between items.  This puts a
  blank line in the Info file.  (TeX inserts the proper vertical space in
  any case.)  Except when the entries are very brief, these blank lines
  make the list look better.

This is confusing, can be inconsistent, and does not cover HTML and XML.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)



Bug#933951: libvirt: upload 5.2 to unstable?

2019-08-05 Thread David Bremner
Source: libvirt
Version: 5.2.0-2
Severity: wishlist

Now that the freeze is over, how about uploading 5.2.0 to unstable? It seems to 
build more places than 5.0.0
(although I haven't looked deeply at either build failure).

My selfish reason is wanting to use libnss_virt_guest, so I guess
backporting packaging change would also be fine with me.


-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 
'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_CA:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled



Bug#933952: qtbase5-examples: many qtbase5-examples fail to compile - w/solution

2019-08-05 Thread Mike Bird
Package: qtbase5-examples
Version: 5.11.3+dfsg1-1
Severity: important
Tags: patch

A directory of files and several dependencies are missing from
qtbase5-examples.  Here is how to fix it.

(1) In the source package, file "examples/vulkan/vulkan.pro", at the
end add a blank line and then a line containing only
"EXAMPLE_FILES = shared" (without the quotes).  The resut will
end up looking like the tail of file "cat examples/network/network.pro".

(2) Add the following miscellaneous dependencies:
  qt5-default c++-compiler make qtbase5-private-dev libqt5opengl5-dev

-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (2000, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/12 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages qtbase5-examples depends on:
ii  libc6 2.28-10
ii  libgl11.1.0-1
ii  libqt5concurrent5 5.11.3+dfsg1-1
ii  libqt5core5a [qtbase-abi-5-11-3]  5.11.3+dfsg1-1
ii  libqt5dbus5   5.11.3+dfsg1-1
ii  libqt5gui55.11.3+dfsg1-1
ii  libqt5network55.11.3+dfsg1-1
ii  libqt5opengl5 5.11.3+dfsg1-1
ii  libqt5printsupport5   5.11.3+dfsg1-1
ii  libqt5sql55.11.3+dfsg1-1
ii  libqt5test5   5.11.3+dfsg1-1
ii  libqt5widgets55.11.3+dfsg1-1
ii  libqt5xml55.11.3+dfsg1-1
ii  libstdc++68.3.0-6

qtbase5-examples recommends no packages.

qtbase5-examples suggests no packages.

-- no debconf information



Bug#932943: Missing SHA512 and gpg signature

2019-08-05 Thread Jeremy Stanley
On 2019-08-05 11:41:34 +0200 (+0200), Bastian Blank wrote:
> On Sun, Aug 04, 2019 at 10:05:32PM +0100, Chris Boot wrote:
> > On 04/08/2019 17:29, Bastian Blank wrote:
[...]
> > > No, don't.  Use base64 like everyone else.
> > 
> > I strongly disagree with this. Practically everyone else uses
> > hexadecimal for plain checksums. A GPG signature is its own
> > thing but is (generally) plaintext (I'm assuming clearsign).
> > This is what we (as in the project) use for the archive and for
> > ISOs.
> 
> Everything current switches to base64. It's shorter and easier to
> see changes. Hex only survives where people tend to read it.

You mentioned Kubernetes (which I haven't really used so have yet to
notice), but who else's "current" software encodes checksums in
base64 besides the Kubernetes ecosystem? I'm honestly curious as I
still only ever see checksums in hexidecimal notation. The
sha512sum(1) manpage makes no mention of having support for
verifying base64-encoded checksums, for example.

There's something to be said for sticking with traditional
standards; newer is not always better.
-- 
Jeremy Stanley



Bug#933954: override: compiz-plugins-main:x11/optional

2019-08-05 Thread Samuel Thibault
Package: ftp.debian.org
Severity: normal

Hello,

(reported for compiz-plugins-extra as well)

During the compiz development, there was a gathering of plugins
into a single repository, compiz-plugins-main was then made a
transitional-only package, thus oldlibs.

On migrating to the compiz-reloaded upstream, we got back to a situation
with separate repositories, so compiz-plugins-main is not a
transitional package any more, so it should be put back to the x11
section.

Samuel



Bug#933953: override: compiz-plugins-extra:x11/optional

2019-08-05 Thread Samuel Thibault
Package: ftp.debian.org
Severity: normal

Hello,

(reported for compiz-plugins-main as well)

During the compiz development, there was a gathering of plugins
into a single repository, compiz-plugins-extra was then made a
transitional-only package, thus oldlibs.

On migrating to the compiz-reloaded upstream, we got back to a situation
with separate repositories, so compiz-plugins-extra is not a
transitional package any more, so it should be put back to the x11
section.

Samuel



Bug#933955: qtgamepad5-examples: examples fail to compile - w/solution

2019-08-05 Thread Mike Bird
Package: qtgamepad5-examples
Version: 5.11.3-2
Severity: important
Tags: patch

Several dependencies are missing from qtgamepad4-examples.  Here is
how to fix it.

(1) Add the following miscellaneous dependencies:
  qt5-default c++-compiler make libqt5gamepad5-dev

--Mike

-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (2000, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/12 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages qtgamepad5-examples depends on:
ii  libc6   2.28-10
ii  libqt5core5a5.11.3+dfsg1-1
pn  libqt5gamepad5  
ii  libstdc++6  8.3.0-6

qtgamepad5-examples recommends no packages.

qtgamepad5-examples suggests no packages.



Bug#926981: golang-1.12-go: Needs /etc/alternatives/go to be useful

2019-08-05 Thread YunQiang Su
On Sat, 13 Apr 2019 00:09:46 -0700 Nye Liu  wrote:
> Package: golang-1.12-go
> Version: 1.12.1-1
> Severity: normal
>
> Without /etc/alternatives/go (and friends), this package is pretty useless.

Please install golang-go, it contains /usr/bin/go.
https://packages.debian.org/sid/amd64/golang-go/filelist

I guess it is what you need.

>
> -- System Information:
> Debian Release: buster/sid
>   APT prefers unstable
>   APT policy: (500, 'unstable')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
>
> Kernel: Linux 4.18.16-x86_64-linode118 (SMP w/4 CPU cores; PREEMPT)
> Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
>
> Versions of packages golang-1.12-go depends on:
> ii  golang-1.12-src  1.12.1-1
> ii  libc62.28-7
>
> Versions of packages golang-1.12-go recommends:
> ii  g++ 4:8.2.0-2
> ii  gcc 4:8.2.0-2
> ii  libc6-dev   2.28-7
> ii  pkg-config  0.29-6
>
> Versions of packages golang-1.12-go suggests:
> pn  bzr | brz
> ii  ca-certificates  20190110
> ii  git  1:2.20.1-2
> pn  mercurial
> ii  subversion   1.10.4-1
>
> -- no debconf information
>
>



Bug#933956: pkg-js-tools: auto_installer does not replace "foo" by "foo.js" in "files" field

2019-08-05 Thread Xavier Guimard
Package: pkg-js-tools
Version: 0.8.10
Severity: normal

To be fixed in 0.8.11



Bug#933957: dh_installman.buster: Cannot find (any matches for) "/tmp/ehbackup/bkstool-add-client.1" (tried in .)

2019-08-05 Thread Jürgen Kuri

Package: debhelper
Version: 12.1.1


Hello,

$ dh_installman
dh_installman.buster: Cannot find (any matches for) 
"/tmp/ehbackup/bkstool-add-client.1" (tried in .)

dh_installman.buster: Aborting due to earlier error

-
$ cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 10 (buster)"
NAME="Debian GNU/Linux"
VERSION_ID="10"
VERSION="10 (buster)"
VERSION_CODENAME=buster
ID=debian
HOME_URL="https://www.debian.org/";
SUPPORT_URL="https://www.debian.org/support";
BUG_REPORT_URL="https://bugs.debian.org/";


Looks like bug #903365.

$ strace -ff dh_installman reveals wrong path string:

read(3, "/tmp/ehbackup/bkstool-add-client"..., 8192) = 4188
lstat(".//tmp/ehbackup/bkstool-add-client.1", 0x7ffebc7f7c20) = -1 ENOENT (No 
such file or directory)
lstat(".//tmp/ehbackup/bkstool-add-client.1", 0x5608717f2478) = -1 ENOENT (No 
such file or directory)
lstat(".//tmp/ehbackup/bkstool-add-client.1", 0x7ffebc7f7c20) = -1 ENOENT (No 
such file or directory)
write(2, "dh_installman: Cannot find (any "..., 96) = 96


Build of the same project works impeccably with Debian Stretch or Jessie but 
not with Buster.

If I copy /usr/bin/dh_installman Perl script from Debian Stretch distribution 
to my Buster build environment it works.



--

Jürgen Kuri



Bug#933958: golang-1.12: ftbfs with golang-1.12

2019-08-05 Thread YunQiang Su
Package: src:golang-1.12
Version: 1.12.7-2
Severity: serious

As golang defaults has been upgrade to golang-1.12.
With the test of build golang-1.12, I meet the same problem on
amd64 as currently mipsel.

failed to initialize build cache at
/sbuild-nonexistent/.cache/go-build: mkdir /sbuild-nonexistent:
permission denied

https://buildd.debian.org/status/fetch.php?pkg=golang-1.12&arch=mipsel&ver=1.12.7-2&stamp=1564842229&raw=0

-- 
YunQiang Su



Bug#933959: xfce4-panel: Option to configure panel placement on external monitor only

2019-08-05 Thread Pavel Reznicek
Package: xfce4-panel
Version: 4.12.2-1
Severity: wishlist
Tags: patch upstream

Dear Maintainer,

The panel "Output" settings does not allow easily to configure option where it 
would be placed on any connected external monitor (regardless of name of the 
monitor), while not shown on the primary laptop monitor when there is no 
external monitor attached. The patch adds and "Non-primary" option to the panel 
preferences "Output" list allowing that behaviour.

Similar wish has been described e.g. here:

http://colinrrobinson.com/technology/linux/xfce/automatically-switch-xfce-panel-layout-plugging-monitor/

(there the solution is quite heavy, using Xubuntu tool xfpanel-switch).

Feel free to forward the bug upstream if you would find it useful.

Best regards,
Pavel




-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (840, 'testing'), (740, 'unstable'), (738, 'experimental'), (540, 
'proposed-updates'), (540, 'stable'), (500, 'oldstable-proposed-updates'), 
(500, 'oldoldstable'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=cs_CZ.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) (ignored: LC_ALL set to 
en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages xfce4-panel depends on:
ii  exo-utils0.12.6-1
ii  libatk1.0-0  2.32.0-2
ii  libc62.28-10
ii  libcairo21.16.0-4
ii  libdbus-1-3  1.12.16-1
ii  libdbus-glib-1-2 0.110-4
ii  libexo-1-0   0.12.6-1
ii  libfontconfig1   2.13.1-2
ii  libfreetype6 2.9.1-4
ii  libgarcon-1-00.6.3-1
ii  libgdk-pixbuf2.0-0   2.38.1+dfsg-1
ii  libglib2.0-0 2.60.6-1
ii  libgtk2.0-0  2.24.32-3
ii  libice6  2:1.0.9-2
ii  libpango-1.0-0   1.42.4-6
ii  libpangocairo-1.0-0  1.42.4-6
ii  libpangoft2-1.0-01.42.4-6
ii  libsm6   2:1.2.3-1
ii  libwnck222.30.7-6
ii  libx11-6 2:1.6.7-1
ii  libxext6 2:1.3.3-1+b2
ii  libxfce4ui-1-0   4.12.1-3
ii  libxfce4util74.12.1-3
ii  libxfconf-0-24.12.1-1+b1

xfce4-panel recommends no packages.

xfce4-panel suggests no packages.

-- no debconf information
--- old/panel/panel-preferences-dialog.c
+++ new/panel/panel-preferences-dialog.c
@@ -506,6 +506,15 @@
   output_selected = TRUE;
   span_monitors_sensitive = TRUE;
 }
+  gtk_list_store_insert_with_values (GTK_LIST_STORE (store), &iter, n++,
+ OUTPUT_NAME, "Non-primary",
+ OUTPUT_TITLE, _("Non-primary"), -1);
+  if (g_strcmp0 (output_name, "Non-primary") == 0)
+{
+  gtk_combo_box_set_active_iter (GTK_COMBO_BOX (object), &iter);
+  output_selected = TRUE;
+  span_monitors_sensitive = TRUE;
+}
 
   if (n_screens > 1)
 {
--- old/panel/panel-window.c
+++ new/panel/panel-window.c
@@ -2040,6 +2040,8 @@
 }
   else
 {
+  gint monitor_num_primary = gdk_screen_get_primary_monitor 
(screen);
+  gboolean is_non_primary = g_strcmp0 (window->output_name, 
"Non-primary") == 0;
   /* detect the monitor number by output name */
   for (n = 0, monitor_num = -1; n < n_monitors && monitor_num == 
-1; n++)
 {
@@ -2065,7 +2067,9 @@
 }
 
   /* check if this is the monitor we're looking for */
-  if (strcmp (window->output_name, name) == 0)
+  if ( is_non_primary && n != monitor_num_primary)
+monitor_num = n;
+  else if (strcmp (window->output_name, name) == 0)
 monitor_num = n;
 
   g_free (name);


Bug#933960: qtbase-opensource-src: .tag files do not belong into doc packages

2019-08-05 Thread Lisandro Damián Nicanor Pérez Meyer
Source: qtbase-opensource-src
Version: 5.11.3+dfsg1-2
Severity: normal

Jonathan Ridell just reported that some KDE packages (and then Scarlett checked
that Qt has the same issue) ship the .tags files within foo-doc packages.

It turns out that the .tags files are used for linking docs, thus more of a
development file.

We need to consider if we have to move this files or not within Qt. If we have
then we might tackle the xml files for examples too (see #933597).

Cheers, Lisandro.

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'unstable-debug'), (500, 
'testing-debug'), (500, 'buildd-unstable'), (500, 'testing'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, arm64, armhf

Kernel: Linux 4.19.0-5-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=es_AR.UTF-8, LC_CTYPE=es_AR.UTF-8 (charmap=UTF-8), 
LANGUAGE=es_AR:es (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled



Bug#933957: Works with symbolic link to /tmp in bild directory

2019-08-05 Thread Jürgen Kuri

If  you create a smylink "ln -s /tmp ." in build directory (same dir level where 
"debian/" exists) it works with dh_installman from Buster distribution.
--

Jürgen Kuri



Bug#933961: gitlab: Viewing diff of a commit results in error 500

2019-08-05 Thread Claudius Steinhauser
Package: gitlab
Version: 11.8.10+dfsg-1
Severity: normal

Dear Maintainer,

   * What led up to the situation?

Some update to the unstable packages in the last two weeks

   * What exactly did you do (or not do) that was effective (or
 ineffective)?

This bug is fixed upstream: 
https://gitlab.com/gitlab-org/gitlab-ce/blob/master/lib/gitlab/gitaly_client/blob_service.rb
If you take the function get_blobs and just paste it into the current file it 
works again.

   * What was the outcome of this action?
   * What outcome did you expect instead?

The lines are identical in experimantal so I guess it would fail there too.

rolling back previously updated packages had no effect:
ruby-gitaly:amd64 (1.27.0+dfsg-2, 1.27.2+dfsg-1) -> nope
ruby-nokogiri:amd64 (1.10.0+dfsg1-2, 1.10.3+dfsg1-2) -> nope
ruby2.5:amd64 (2.5.5-3+b1, 2.5.5-4), libruby2.5:amd64 (2.5.5-3+b1, 2.5.5-4) -> 
nope
ruby-sidekiq:amd64 (5.2.3+dfsg-1, 5.2.7+dfsg-1) -> nope
ruby-pkg-config:amd64 (1.3.4-1, 1.3.7-2) -> nope
ruby-batch-loader:amd64 (1.2.2-1, 1.4.1+dfsg.1-1) -> nope

Here is the full error from production.log:

Started GET "/group/project/commit/b022b4e76636517examplefcf500733c97af52" for 
IP at 2019-08-05 15:25:16 +0200
Processing by Projects::CommitController#show as HTML
  Parameters: {"namespace_id"=>"group", "project_id"=>"project", 
"id"=>"##projectid##"}
Completed 500 Internal Server Error in 44ms (ActiveRecord: 8.5ms)

ActionView::Template::Error (can't modify frozen Array):
24: %a.diff-changed-file{ href: 
"##{hexdigest(diff_file.file_path)}", title: diff_file.new_path }
25:   = sprite_icon(diff_file_changed_icon(diff_file), size: 
16, css_class: "#{diff_file_changed_icon_color(diff_file)} 
diff-file-changed-icon append-right-8")
26:   %span.diff-changed-file-content.append-right-8
27: - if diff_file.blob&.name
28:   %strong.diff-changed-file-name
29: = diff_file.blob.name
30: - else

lib/gitlab/gitaly_client/blob_service.rb:58:in `map!'
lib/gitlab/gitaly_client/blob_service.rb:58:in `get_blobs'
lib/gitlab/git/blob.rb:70:in `batch'
lib/gitlab/git/repository.rb:784:in `batch_blobs'
app/models/repository.rb:530:in `blobs_at'
app/models/blob.rb:84:in `block in lazy'
lib/gitlab/diff/file.rb:136:in `new_blob'
lib/gitlab/diff/file.rb:158:in `blob'
app/views/projects/diffs/_stats.html.haml:27:in `block in 
_app_views_projects_diffs__stats_html_haml__3454639706286172227_47155273729500'
lib/gitlab/git/diff_collection.rb:43:in `each'
lib/gitlab/git/diff_collection.rb:43:in `each'
app/views/projects/diffs/_stats.html.haml:22:in 
`_app_views_projects_diffs__stats_html_haml__3454639706286172227_47155273729500'
app/views/projects/diffs/_diffs.html.haml:22:in 
`_app_views_projects_diffs__diffs_html_haml___304649406669282730_47155274548540'
app/views/projects/commit/show.html.haml:13:in 
`_app_views_projects_commit_show_html_haml___1524022692417963359_47155277999500'
app/controllers/application_controller.rb:113:in `render'
app/controllers/projects/commit_controller.rb:28:in `block (2 levels) in show'
app/controllers/projects/commit_controller.rb:26:in `show'
lib/gitlab/i18n.rb:55:in `with_locale'
lib/gitlab/i18n.rb:61:in `with_user_locale'
app/controllers/application_controller.rb:423:in `set_locale'
lib/gitlab/middleware/multipart.rb:103:in `call'
lib/gitlab/request_profiler/middleware.rb:16:in `call'
lib/gitlab/middleware/go.rb:20:in `call'
lib/gitlab/etag_caching/middleware.rb:13:in `call'
lib/gitlab/middleware/correlation_id.rb:16:in `block in call'
lib/gitlab/correlation_id.rb:15:in `use_id'
lib/gitlab/middleware/correlation_id.rb:15:in `call'
lib/gitlab/middleware/read_only/controller.rb:40:in `call'
lib/gitlab/middleware/read_only.rb:18:in `call'
lib/gitlab/middleware/basic_health_check.rb:25:in `call'
lib/gitlab/request_context.rb:26:in `call'
lib/gitlab/metrics/requests_rack_middleware.rb:29:in `call'
lib/gitlab/middleware/release_env.rb:13:in `call'

this is the patch I applied to make my gitlab work again:
/usr/share/gitlab/lib/gitlab/gitaly_client # diff -C3 blob_service.new.rb 
blob_service.old.rb

*** blob_service.new.rb 2019-08-05 16:44:35.140722915 +0200
--- blob_service.old.rb 2019-08-05 16:44:52.800372340 +0200
***
*** 55,67 
def get_blobs(revision_paths, limit = -1)
  return [] if revision_paths.empty?

! request_revision_paths = revision_paths.map do |rev, path|
Gitaly::GetBlobsRequest::RevisionPath.new(revision: rev, path: 
encode_binary(path))
  end

  request = Gitaly::GetBlobsRequest.new(
repository: @gitaly_repo,
!   revision_paths: request_revision_paths,
limit: limit
  )

--- 55,67 
def get_blobs(revision_paths, limit = -1)
  return [] if revision_paths.empty?

! revision_paths.map! do |rev, path|
Gitaly::GetBlobsRequest::RevisionPath.new

Bug#933962: dpkg --force-confold, does not say anywhere in it's cmdline output why it's overriding --force-confold

2019-08-05 Thread Dreamcat4
Package: dpkg
Version: 1.19.6

Hello,
If I specify --force-confold option to dpkg -i while upgrading /
reinstalling. Then I get the following output:

$ sudo DEBIAN_FRONTEND=noninteractive dpkg -D200 --force-confold -i teleport*deb
(Reading database ... 265903 files and directories currently installed.)
Preparing to unpack
teleport_4.0.0-rc.4-42-8_amd64_43a3d__expires-15.46pm-mon-05-aug-2019.deb
...
D000200: process_archive conffile '/etc/teleport.yaml' in package
teleport:amd64 - conff ?
D000200: pkg_conffiles_mark_old '/etc/teleport.yaml' namenode
'/etc/teleport.yaml' flags 5
Unpacking teleport (4.0.0-rc.4-42-8) over (4.0.0-rc.4-42-7) ...
D000200: conffderef in='/etc/teleport.yaml' current working='/etc/teleport.yaml'
D000200: tarobject conffile extracted
Setting up teleport (4.0.0-rc.4-42-8) ...
D000200: conffderef in='/etc/teleport.yaml' current working='/etc/teleport.yaml'
Installing new version of config file /etc/teleport.yaml ...
id@asrock-z170-ocf:~$


However there is no explanation whatsoever, being reported back to the
user, even with logging level -D200, as to why the behaviour of the
--force-confold flag is being overriden. As to why a newer config file
is being installed.

This was pretty infuriating for me today whilst testing the
correctness of my pkg. To make sure that I wasn't doing something else
wrong myself!

Wheras if the user had edited the config file, then under that other
arbitrary circumstance. Well then dpkg DOES indeed report why it's
decided to either keep or overwrite the config file. With a proper
explanation of what it's detected and what it's doing in this case it
says:


id@asrock-z170-ocf:~$ sudo nano /etc/teleport.yaml

id@asrock-z170-ocf:~$ sudo DEBIAN_FRONTEND=noninteractive dpkg -D200
--force-confold -i teleport*deb
(Reading database ... 265903 files and directories currently installed.)
Preparing to unpack
teleport_4.0.0-rc.4-42-8_amd64_065e1__expires-15.57pm-mon-05-aug-2019.deb
...
D000200: process_archive conffile '/etc/teleport.yaml' in package
teleport:amd64 - conff ?
D000200: pkg_conffiles_mark_old '/etc/teleport.yaml' namenode
'/etc/teleport.yaml' flags 5
Unpacking teleport (4.0.0-rc.4-42-8) over (4.0.0-rc.4-42-8) ...
D000200: conffderef in='/etc/teleport.yaml' current working='/etc/teleport.yaml'
D000200: tarobject conffile extracted
Setting up teleport (4.0.0-rc.4-42-8) ...
D000200: conffderef in='/etc/teleport.yaml' current working='/etc/teleport.yaml'

Configuration file '/etc/teleport.yaml'
 ==> Modified (by you or by a script) since installation.
 ==> Package distributor has shipped an updated version.
 ==> Using current old file as you requested.

This (to me) is an inconsistent behaviour and should be rectified in
the first instance to add more message or logging lines in a similar
fashion to the 2nd case (except to say the opposite, why it's
overwriting the config file despite the --force-confold flag being
specified!)

So I suggest that some additional output string(s), be added, to say:

D000200: conffderef in='/etc/teleport.yaml' current working='/etc/teleport.yaml'
Configuration file '/etc/teleport.yaml'
 ==> Not modified (by you or by a script) since installation.
 ==> Package distributor has shipped an updated version.
 ==> Overriding --force-confold flag, since no user modification(s) to preserve.
 Installing new version of config file /etc/teleport.yaml ...


end of suggestions


Hope the reasons for this request are clear. Please do as per your liking.
Kind Regards / Hava a good day


Dreamcat4
dreamc...@gmail.com



Bug#933785: gitlab: CVE-2019-5470 CVE-2019-5469 CVE-2019-5468 CVE-2019-5466 CVE-2019-5465 CVE-2019-5464 CVE-2019-5463 CVE-2019-5462 CVE-2019-5461

2019-08-05 Thread Pirate Praveen

Control: block -1 by 933795
Control: block -1 by 933778

On Sat, 03 Aug 2019 15:41:53 +0200 Salvatore Bonaccorso wrote:

The following vulnerabilities were published for gitlab, see [9].


Since these fixes are not backported to 11.10 branch, we will have to 
update to 11.11 branch.


Currently blocked by gitaly build failure reported upstream 
https://gitlab.com/gitlab-org/gitaly/issues/1840




Bug#926509: Version 2.4.3 -> also to backports

2019-08-05 Thread Johannes Rohr
And while you are at it: Could you also upload it to backports, given
that it does offer important new functionality, such as auto fill out
TOTP. Currently I am using the official AppImage, because I really rely
on the new functionality. There is also an official snap, but it has
other limitations.




signature.asc
Description: OpenPGP digital signature


Bug#933963: New rtw88 driver missing from 5.2 and above

2019-08-05 Thread thomasw
package: linux
CONFIG_RTW88=m and related options should be set or a bunch of laptops are 
going to lose wifi support.

CONFIG_RTW88_PCI=m
CONFIG_RTW88_8822BE=y
CONFIG_RTW88_8822CE=y



Bug#931544: Arpwatch not working properly (bug) on Debian 10.0 (Buster)

2019-08-05 Thread Dev
 

Hi all

Arpwatch not working properly (bug) on Debian 10.0 (Buster)

For complete : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931544
[1]

I have tested arpwatch on 
- Debian 8.11 (Jessie) 2.1a15-1.3, wors fine
- Debian 9.9 (Strech) 2.1a15-2+b1, works fine
- Debian 10.0 (Buster) 2.1a15-7 Bug (fail to start)

On new debian (10.0 / buster) there is 2 bugs :

1) File " /VAR/LIB/ARPWATCH/ARP.DAT " is not created

[Fix it with]
touch /var/lib/arpwatch/arp.dat
chown arpwatch:arpwatch /var/lib/arpwatch/arp.dat

2) /etc/init.d/arpwatch status display "service is running" but it's not
running

[Fixed Partial]

In " /lib/systemd/system/arpwatch.service " (only in debian 10.x)

Replace:
 ExecStart=/bin/true
With:
 ExecStart=/usr/sbin/arpwatch

This works partially, because " /etc/init.d/arpwatch start " works ...
But igniore Configuration in " /etc/default/arpwatch " (Params ARGS /
RUNAS)

NB: " -u arpwatch -N -p " is default arguments

ps ax | grep arpwatch
1431 ? S 0:00 /usr/sbin/arpwatch 

Instead of: ExecStart=/usr/sbin/arpwatch
I have try : ExecStart=/usr/sbin/arpwatch -u arpwatch -N -p

After restart:
/etc/init.d/arpwatch restart
ps ax | grep arpwatch
1575 ? S 0:00 /usr/sbin/arpwatch -u arpwatch -N -p

This is a temporary solution while waiting for a real fix

Regards 

Links:
--
[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931544


Bug#933964: milkytracker: CVE-2019-14464 CVE-2019-14496 CVE-2019-14497

2019-08-05 Thread Salvatore Bonaccorso
Source: milkytracker
Version: 1.02.00+dfsg-1
Severity: important
Tags: security upstream

Hi,

The following vulnerabilities were published for milkytracker.

CVE-2019-14464[0]:
| XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a
| heap-based buffer overflow.


CVE-2019-14496[1]:
| LoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00
| has a stack-based buffer overflow.


CVE-2019-14497[2]:
| ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in
| MilkyTracker 1.02.00 has a heap-based buffer overflow.


If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2019-14464
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14464
[1] https://security-tracker.debian.org/tracker/CVE-2019-14496
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14496
[2] https://security-tracker.debian.org/tracker/CVE-2019-14497
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14497

Regards,
Salvatore



Bug#933965: ITP: ecbuild -- ECMWF build system based on CMake

2019-08-05 Thread Alastair McKinstry
Package: wnpp
Severity: wishlist
Owner: Alastair McKinstry 

* Package name: ecbuild
  Version : 3.0.3
  Upstream Author : ECMWF
* URL : https://github.com/ecmwf/ecbuild
* License : Apache
  Programming Lang: CMake
  Description : ECMWF build system based on CMake

ecBuild is a build system based on CMake macros that are used as a build system 
for ECMWF software.
ECMWF is the European Centre for Medium-Range Weather Forecasts.

It is a Build-dependency of other ECMWF software being packaged.



Bug#598351: texlive-latex-base: Error when using lmodern fonts together with T1 fontenc

2019-08-05 Thread Hilmar Preuße
Am 04.08.2019 um 21:39 teilte Hilmar Preuße mit:
> Am 28.09.2010 um 14:30 teilte Eugen Dedu mit:

Hi,

> Does this address work?
> 
>> I have an error when using lmodern fonts together with T1 fontenc (as
>> required by French babel to have correct hyphenation on accentuated
>> characters).  When using pdflatex or latex on the following text:
>>
> It is still unclear why the mf files from the EC fonts are used, when
> lmodern fonts are requested. I forwarded the question to tex.sx.
> 
> https://tex.stackexchange.com/questions/502820/lmodern-latex-tries-to-create-tfm-files-for-ec-fonts
> 
Update: add the following line right after loading the lmodern package
then it works:

\fontfamily{\familydefault}\selectfont

I try to clarify if this is a bug in fontenc, which needs to be fixed.

Hilmar
-- 
sigfault
#206401 http://counter.li.org



signature.asc
Description: OpenPGP digital signature


Bug#933966: qtxmlpatterns-opensource-src: FTBFS

2019-08-05 Thread Mike Bird
Source: qtxmlpatterns-opensource-src
Version: 5.11.3-2
Severity: important

I've tried several times to build this source and each time I get
the following error.  This is the Buster version so I don't know
how it got built for shipping in stable.

Most of the paths below are correct but the supposedly missing
file is being looked for in a path which is missing the
"qtxmlpatterns-opensource-src-5.11.3" component.

--Mike

1/1 Test #1: module_includes ..***Failed0.04 sec
Internal cmake changing into directory: /cache/debian-src/xmlpatterns/qtxmlpatte
rns-opensource-src-5.11.3/tests/auto/cmake/build/module_includes/build
Error: cmake execution failed
CMake Error at /cache/debian-src/xmlpatterns/qtxmlpatterns-opensource-src-5.11.3
/lib/cmake/Qt5XmlPatterns/Qt5XmlPatternsConfig.cmake:27 (message):
  The imported target "Qt5::XmlPatterns" references the file

 "/cache/debian-src/xmlpatterns/include/x86_64-linux-gnu/qt5/"

  but this file does not exist.  Possible reasons include:

  * The file was deleted, renamed, or moved to another location.

  * An install or uninstall procedure did not complete successfully.

  * The installation package was faulty and contained

 "/cache/debian-src/xmlpatterns/qtxmlpatterns-opensource-src-5.11.3/lib/cmak
e/Qt5XmlPatterns/Qt5XmlPatternsConfig.cmake"

  but not all the files it references.

Call Stack (most recent call first):
  
/cache/debian-src/xmlpatterns/qtxmlpatterns-opensource-src-5.11.3/lib/cmake/Qt5XmlPatterns/Qt5XmlPatternsConfig.cmake:63
 (_qt5_XmlPatterns_check_file_exists)
  CMakeLists.txt:12 (find_package)


Configuring
Configuring incomplete, errors occurred!
See also 
"/cache/debian-src/xmlpatterns/qtxmlpatterns-opensource-src-5.11.3/tests/auto/cmake/build/module_includes/build/CMakeFiles/CMakeOutput.log".


-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (2000, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/12 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)



Bug#933967: Predictable interface names results in forced deauth of certain usb wifi adapters

2019-08-05 Thread Kathryn Tolsen
package: systemd

I had first observed this issue with Stretch and my Netgear WG111v3
(RTL8168B chipset) using the rtl8168 driver over a year ago, and had a
rough time running down the culprit and had discovered that disabling
predictable ifnames with net.ifnames=0 resolved the issue.

Last night in #debian on freenode, a user came in with issues with a
completely different device using a different driver and the problem had
seemed familiar, and I recommended disabling the predictable ifnames, and
it resolved their issue as well.

Information from this recent issue on Buster is as follows:

lsusb:
Bus 001 Device 008: ID 148f:5372 Ralink Technology, Corp. RT5372 Wireless
Adapter

dmesg:
ieee80211 phy1: rt2x00lib_request_firmware: Info - Loading firmware file
'rt2870.bin'
rt2800usb 1-1:1.0: firmware: direct-loading firmware rt2870.bin
ieee80211 phy1: rt2x00lib_request_firmware: Info - Firmware detected -
version: 0.36

usb 1-1: new high-speed USB device number 8 using xhci_hcd
usb 1-1: New USB device found, idVendor=148f, idProduct=5372, bcdDevice=
1.01
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: 802.11 n WLAN
usb 1-1: Manufacturer: Ralink

wlx9cefd5fdf30b: authenticate with 90:4c:81:01:76:00
wlx9cefd5fdf30b: send auth to 90:4c:81:01:76:00 (try 1/3)
wlx9cefd5fdf30b: authenticated
wlx9cefd5fdf30b: authenticate with 90:4c:81:01:76:00
wlx9cefd5fdf30b: send auth to 90:4c:81:01:76:00 (try 1/3)
wlx9cefd5fdf30b: authenticated
wlx9cefd5fdf30b: authenticate with 90:4c:81:01:76:00
wlx9cefd5fdf30b: send auth to 90:4c:81:01:76:00 (try 1/3)
wlx9cefd5fdf30b: authenticated
wlx9cefd5fdf30b: aborting authentication with 90:4c:81:01:76:00 by local
choice (Reason: 3=DEAUTH_LEAVING)
IPv6: ADDRCONF(NETDEV_UP): wlx9cefd5fdf30b: link is not ready
IPv6: ADDRCONF(NETDEV_UP): wlx9cefd5fdf30b: link is not ready

I am not sure where the problem lies.. in the kernel, firmware, systemd,
udev.. idk.. but I'd had the same symptoms before with the Netgear adapter
and rtl8168 where it would list APs attempt to connect, authenticate then
forcibly deauth citing Reason 3, DEAUTH_LEAVING and say the link was not
ready..

I had spent hours trying to figure it out when I came across an obscure
post online that suggested it was a firmware bug related to predictable
ifnames, and after disabling them and that resolving my issue I had ignored
it as an obscure bug not likely to affect many users.

Now however I am realizing that whatever this issue is, its far more
widespread than I thought and is possibly more central and less related to
specific adapters. Since we are now using systemd/udev predictable ifnames
by default I figured this was something we need to run down.

If I can provide any more information on the subject, please let me know as
I do still have the Netgear WG111v3 adapter that I know causes this issue.


Bug#933968: ghc: FTBFS on hppa - virtual memory exhausted: Cannot allocate memory

2019-08-05 Thread John David Anglin
Source: ghc
Version: 8.6.5+dfsg1-3
Severity: normal

Dear Maintainer,

As the log was too big to upload, here is build problem on hppa:

"inplace/bin/ghc-stage1" -hisuf p_hi -osuf  p_o -hcsuf p_hc -static -prof -event
log  -H32m -O -lffi -optl-pthread -Wall   -Iincludes -Iincludes/dist -Iincludes/
dist-derivedconstants/header -Iincludes/dist-ghcconstants/header   -this-unit-id
 ghc-8.6.5 -hide-all-packages -i -icompiler/backpack -icompiler/basicTypes -icom
piler/cmm -icompiler/codeGen -icompiler/coreSyn -icompiler/deSugar -icompiler/gh
ci -icompiler/hsSyn -icompiler/iface -icompiler/llvmGen -icompiler/main -icompil
er/nativeGen -icompiler/parser -icompiler/prelude -icompiler/profiling -icompile
r/rename -icompiler/simplCore -icompiler/simplStg -icompiler/specialise -icompil
er/stgSyn -icompiler/stranal -icompiler/typecheck -icompiler/types -icompiler/ut
ils -icompiler/stage2/build -Icompiler/stage2/build -icompiler/stage2/build/./au
togen -Icompiler/stage2/build/./autogen -Icompiler/. -Icompiler/parser -Icompile
r/utils -Icompiler/../rts/dist/build -Icompiler/stage2 -Icompiler/stage2/build/.
 -Icompiler/stage2/build/parser -Icompiler/stage2/build/utils 
-Icompiler/stage2/build/../rts/dist/build -Icompiler/stage2/build/stage2   
-optP-DGHCI -optP-include -optPcompiler/stage2/build/./autogen/cabal_macros.h 
-package-id array-0.5.3.0 -package-id base-4.12.0.0 -package-id binary-0.8.6.0 
-package-id bytestring-0.10.8.2 -package-id containers-0.6.0.1 -package-id 
deepseq-1.4.4.0 -package-id directory-1.3.3.0 -package-id filepath-1.4.2.1 
-package-id ghc-boot-8.6.5 -package-id ghc-boot-th-8.6.5 -package-id 
ghc-heap-8.6.5 -package-id ghci-8.6.5 -package-id hpc-0.6.0.3 -package-id 
process-1.6.5.0 -package-id template-haskell-2.14.0.0 -package-id 
terminfo-0.4.1.2 -package-id time-1.8.0.2 -package-id transformers-0.5.6.2 
-package-id unix-2.7.2.2 -Wall -Wno-name-shadowing 
-Wnoncanonical-monad-instances -Wnoncanonical-monadfail-instances 
-Wnoncanonical-monoid-instances -this-unit-id ghc -XHaskell2010 
-XNoImplicitPrelude -DNO_REGS -DNOSMP -optc-DNOSMP -optc-DTHREADED_RTS 
-DSTAGE=2 -Rghc-timing  -Wcpp-undef  -no-user-package-db -rtsopts   
-Wnoncanonical-monad-instances  -odir compiler/stage2/build -hidir 
compiler/stage2/build -stubdir compiler/stage2/build-c 
compiler/codeGen/StgCmmMonad.hs -o compiler/stage2/build/StgCmmMonad.p_o -dyno 
compiler/stage2/build/StgCmmMonad.dyn_o
virtual memory exhausted: Cannot allocate memory
`hppa-linux-gnu-gcc' failed in phase `C Compiler'. (Exit code: 1)
<>
make[3]: *** [compiler/ghc.mk:447: compiler/stage2/build/HsInstances.p_o] Error 
1

Regards,
Dave Anglin

-- System Information:
Debian Release: bullseye/sid
  APT prefers buildd-unstable
  APT policy: (500, 'buildd-unstable'), (500, 'unstable')
Architecture: hppa (parisc64)

Kernel: Linux 5.2.5+ (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

-- no debconf information



Bug#933969: ITP: r-cran-corrplot -- Visualization of a Correlation Matrix

2019-08-05 Thread Steffen Moeller
Package: wnpp
Severity: wishlist
Owner: Steffen Moeller 

* Package name: r-cran-corrplot
* URL : https://cran.r-project.org/package=corrplot
* License : MIT
  Programming Lang: R
  Description : Visualization of a Correlation Matrix

Team maintained on https://salsa.debian.org/r-pkg-team/r-cran-corrplot



Bug#933795: java build is failing

2019-08-05 Thread Pirate Praveen

On Mon, 05 Aug 2019 16:12:03 +0530 Pirate Praveen wrote:

When trying to build 3.7.1, it failed with this error,
# Java build.
ant -f debian/java-build.xml jar


After changind source and target values like this, build is passing





Bug#915270: libgovirt: diff for NMU version 0.3.4-3.1

2019-08-05 Thread Santiago Vila
reopen 915270
found 915270 0.3.4-2
fixed 915270 0.3.4-3.1
thanks

Hi.

Could we please fix this in stretch as well? (Packages in buster must
build in buster, packages in stretch must build in stretch).

Would your diff apply cleanly to the version in stretch?
(I have not tested this yet).

Thanks.



Bug#877496: explib310 FTBFS

2019-08-05 Thread Gianfranco Costamagna
control: tags -1 patch pending

I went ahead and uploaded the patch for this.
Feel free to package the new release on top of this upload!
(at least we can now unblock reverse-deps)

G.
diff -Nru sexplib310-113.33.03/debian/changelog 
sexplib310-113.33.03/debian/changelog
--- sexplib310-113.33.03/debian/changelog   2016-08-19 09:11:38.0 
+0200
+++ sexplib310-113.33.03/debian/changelog   2019-08-05 18:06:14.0 
+0200
@@ -1,3 +1,11 @@
+sexplib310 (113.33.03-3.1) unstable; urgency=medium
+
+  * Non-maintainer upload
+  * Cherry-pick upstream fix for new ocaml (From Ubuntu)
+Closes: #877496
+
+ -- Gianfranco Costamagna   Mon, 05 Aug 2019 
18:06:14 +0200
+
 sexplib310 (113.33.03-3) unstable; urgency=medium
 
   * Team upload
diff -Nru 
sexplib310-113.33.03/debian/patches/1c3df4807e71f39d064941d5fc527fe3c2e2bda7.patch
 
sexplib310-113.33.03/debian/patches/1c3df4807e71f39d064941d5fc527fe3c2e2bda7.patch
--- 
sexplib310-113.33.03/debian/patches/1c3df4807e71f39d064941d5fc527fe3c2e2bda7.patch
  1970-01-01 01:00:00.0 +0100
+++ 
sexplib310-113.33.03/debian/patches/1c3df4807e71f39d064941d5fc527fe3c2e2bda7.patch
  2019-08-05 18:06:14.0 +0200
@@ -0,0 +1,80 @@
+From 1c3df4807e71f39d064941d5fc527fe3c2e2bda7 Mon Sep 17 00:00:00 2001
+From: Thomas Refis 
+Date: Tue, 22 Mar 2016 14:13:51 +
+Subject: [PATCH] 113.33.00+4.03
+
+---
+ CHANGES.md  |  4 
+ _oasis  |  4 ++--
+ opam|  2 +-
+ src/conv.ml | 13 +
+ 4 files changed, 16 insertions(+), 7 deletions(-)
+
+--- a/CHANGES.md
 b/CHANGES.md
+@@ -1,3 +1,7 @@
++## 113.33.00+4.03
++
++Various updates to work with OCaml 4.03.0
++
+ ## 113.33.00
+ 
+ - Changes `Sexp.to_string` to escape all non-ASCII characters.
+--- a/_oasis
 b/_oasis
+@@ -1,5 +1,5 @@
+ OASISFormat:   0.4
+-OCamlVersion:  >= 4.02.3
++OCamlVersion:  >= 4.03.0
+ FindlibVersion:>= 1.3.2
+ Name:  sexplib
+ Version:   113.33.03
+--- a/opam
 b/opam
+@@ -15,4 +15,4 @@
+   "ocamlfind"  {build & >= "1.3.2"}
+   "js-build-tools" {build}
+ ]
+-available: [ ocaml-version = "4.02.3" ]
++available: [ ocaml-version = "4.03.0" ]
+--- a/src/conv.ml
 b/src/conv.ml
+@@ -185,7 +185,7 @@
+ 
+   (* [Obj.extension_id] works on both the exception itself, and the extension 
slot of the
+  exception. *)
+-  let rec clean_up_handler (slot : Obj.t) =
++  let rec clean_up_handler (slot : extension_constructor) =
+ let id = Obj.extension_id slot in
+ let old_exn_id_map = !exn_id_map in
+ let new_exn_id_map = Exn_ids.remove id old_exn_id_map in
+@@ -196,7 +196,7 @@
+   exn_id_map := new_exn_id_map
+ 
+   let add_auto ?(finalise = true) exn sexp_of_exn =
+-let id = Obj.extension_id exn in
++let id = Obj.extension_id (Obj.extension_constructor exn) in
+ let rec loop () =
+   let old_exn_id_map = !exn_id_map in
+   let new_exn_id_map = Exn_ids.add id sexp_of_exn old_exn_id_map in
+@@ -205,13 +205,18 @@
+ loop ()
+   else begin
+ exn_id_map := new_exn_id_map;
+-if finalise then Gc.finalise clean_up_handler (Obj.extension_slot exn)
++if finalise then
++  try
++Gc.finalise clean_up_handler (Obj.extension_constructor exn)
++  with Invalid_argument _ ->
++(* Pre-allocated extension constructors cannot be finalised *)
++()
+   end
+ in
+ loop ()
+ 
+   let find_auto exn =
+-let id = Obj.extension_id exn in
++let id = Obj.extension_id (Obj.extension_constructor exn) in
+ match Exn_ids.find id !exn_id_map with
+ | exception Not_found -> None
+ | sexp_of_exn -> Some (sexp_of_exn exn)
diff -Nru sexplib310-113.33.03/debian/patches/series 
sexplib310-113.33.03/debian/patches/series
--- sexplib310-113.33.03/debian/patches/series  1970-01-01 01:00:00.0 
+0100
+++ sexplib310-113.33.03/debian/patches/series  2019-08-05 18:06:14.0 
+0200
@@ -0,0 +1 @@
+1c3df4807e71f39d064941d5fc527fe3c2e2bda7.patch


Bug#933970: stretch-pu: package unzip/6.0-21+deb9u2

2019-08-05 Thread Santiago Vila
Package: release.debian.org
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu

Hello. I've just uploaded this to fix CVE-2019-13232 by applying the
three available patches from Mark Adler, plus a trivial one-liner in
fileio.c which is also fixed in buster and sid.

Debdiff below.

Thanks.

diff -Nru unzip-6.0/debian/changelog unzip-6.0/debian/changelog
--- unzip-6.0/debian/changelog  2019-04-17 21:23:40.0 +0200
+++ unzip-6.0/debian/changelog  2019-08-05 18:10:06.0 +0200
@@ -1,3 +1,15 @@
+unzip (6.0-21+deb9u2) stretch; urgency=medium
+
+  * Fix incorrect parsing of 64-bit values in fileio.c. Closes: #929502.
+  * Apply three patches by Mark Adler to fix CVE-2019-13232.
+  - Fix bug in undefer_input() that misplaced the input state.
+  - Detect and reject a zip bomb using overlapped entries.
+Bug discovered by David Fifield. Closes: #931433.
+  - Do not raise a zip bomb alert for a misplaced central directory.
+Reported by Peter Green. Closes: #932404.
+
+ -- Santiago Vila   Mon, 05 Aug 2019 18:10:06 +0200
+
 unzip (6.0-21+deb9u1) stretch; urgency=medium
 
   * Fix buffer overflow in password protected ZIP archives. Closes: #889838.
diff -Nru unzip-6.0/debian/patches/21-fix-warning-messages-on-big-files.patch 
unzip-6.0/debian/patches/21-fix-warning-messages-on-big-files.patch
--- unzip-6.0/debian/patches/21-fix-warning-messages-on-big-files.patch 
1970-01-01 01:00:00.0 +0100
+++ unzip-6.0/debian/patches/21-fix-warning-messages-on-big-files.patch 
2019-08-05 17:21:00.0 +0200
@@ -0,0 +1,15 @@
+From: "Steven M. Schweda" 
+Subject: Fix lame code in fileio.c
+Bug-Debian: https://bugs.debian.org/929502
+X-Debian-version: 6.0-23
+
+--- a/fileio.c
 b/fileio.c
+@@ -2477,6 +2477,7 @@
+  */
+ return (((zusz_t)sig[7]) << 56)
+ + (((zusz_t)sig[6]) << 48)
+++ (((zusz_t)sig[5]) << 40)
+ + (((zusz_t)sig[4]) << 32)
+ + (zusz_t)ulg)sig[3]) << 24)
+  + (((ulg)sig[2]) << 16)
diff -Nru 
unzip-6.0/debian/patches/22-cve-2019-13232-fix-bug-in-undefer-input.patch 
unzip-6.0/debian/patches/22-cve-2019-13232-fix-bug-in-undefer-input.patch
--- unzip-6.0/debian/patches/22-cve-2019-13232-fix-bug-in-undefer-input.patch   
1970-01-01 01:00:00.0 +0100
+++ unzip-6.0/debian/patches/22-cve-2019-13232-fix-bug-in-undefer-input.patch   
2019-08-05 17:22:00.0 +0200
@@ -0,0 +1,22 @@
+From: Mark Adler 
+Subject: Fix bug in undefer_input() that misplaced the input state.
+Origin: 
https://github.com/madler/unzip/commit/41beb477c5744bc396fa1162ee0c14218ec12213
+Bug-Debian: https://bugs.debian.org/931433
+X-Debian-version: 6.0-24
+
+Fix bug in undefer_input() that misplaced the input state.
+
+--- a/fileio.c
 b/fileio.c
+@@ -532,8 +532,10 @@
+  * This condition was checked when G.incnt_leftover was set > 0 in
+  * defer_leftover_input(), and it is NOT allowed to touch G.csize
+  * before calling undefer_input() when (G.incnt_leftover > 0)
+- * (single exception: see read_byte()'s  "G.csize <= 0" handling) !!
++ * (single exception: see readbyte()'s  "G.csize <= 0" handling) !!
+  */
++if (G.csize < 0L)
++G.csize = 0L;
+ G.incnt = G.incnt_leftover + (int)G.csize;
+ G.inptr = G.inptr_leftover - (int)G.csize;
+ G.incnt_leftover = 0;
diff -Nru 
unzip-6.0/debian/patches/23-cve-2019-13232-zip-bomb-with-overlapped-entries.patch
 
unzip-6.0/debian/patches/23-cve-2019-13232-zip-bomb-with-overlapped-entries.patch
--- 
unzip-6.0/debian/patches/23-cve-2019-13232-zip-bomb-with-overlapped-entries.patch
   1970-01-01 01:00:00.0 +0100
+++ 
unzip-6.0/debian/patches/23-cve-2019-13232-zip-bomb-with-overlapped-entries.patch
   2019-08-05 17:23:00.0 +0200
@@ -0,0 +1,335 @@
+From: Mark Adler 
+Subject: Detect and reject a zip bomb using overlapped entries.
+Origin: 
https://github.com/madler/unzip/commit/47b3ceae397d21bf822bc2ac73052a4b1daf8e1c
+Bug-Debian: https://bugs.debian.org/931433
+X-Debian-version: 6.0-24
+
+Detect and reject a zip bomb using overlapped entries.
+
+This detects an invalid zip file that has at least one entry that
+overlaps with another entry or with the central directory to the
+end of the file. A Fifield zip bomb uses overlapped local entries
+to vastly increase the potential inflation ratio. Such an invalid
+zip file is rejected.
+
+See https://www.bamsoftware.com/hacks/zipbomb/ for David Fifield's
+analysis, construction, and examples of such zip bombs.
+
+The detection maintains a list of covered spans of the zip files
+so far, where the central directory to the end of the file and any
+bytes preceding the first entry at zip file offset zero are
+considered covered initially. Then as each entry is decompressed
+or tested, it is considered covered. When a new entry is about to
+be processed, its initial offset is checked to s

Bug#933971: linux-image-4.19.0-5-marvell: Kernel fails to parse mtdparts arg in cmdline. Impacts usage of fw_setenv on plug devices to config uboot.

2019-08-05 Thread Evrard, Benjamin
Package: src:linux
Version: 4.19.37-5
Severity: normal
User: debian...@lists.debian.org

Dear maintainer,

After upgrading a Dockstar and a GoflexNet from Debian Stretch to Debian
Buster, it becomes impossible to use the fw_setenv tool to update uboot
settings on the device:

  # fw_setenv test 2
  Can't open /dev/mtd0: Permission denied
  Error: can't write fw_env to flash

The issue is not related to fw_setenv that belongs to the u-boot-tools
package: when using the fw_setenv tool with the kernel provided at
https://forum.doozan.com/read.php?2,12096 (direct link to kernel
package: https://bitly.com/306DVn3), it works as expected:

  # fw_setenv test 2
  # fw_printenv | grep test=
  test=2

With members of the doozan forum, we think we isolated the issue to the
difference of configuration for the kernel between the strech and buster
release: all the MTD related settings were switched from (y)es to
(m)odule.

As a consequence, the mtdparts argument passed to the kernel is ignored,
which result in the kernel using the settings from the DTB file which defaults
to the uboot partition being read-only:

 
https://github.com/torvalds/linux/blob/master/arch/arm/boot/dts/kirkwood-goflexnet.dts
...
 partition@0 {
   label = "u-boot";
   reg = <0x000 0x10>;
   read-only;
 };


  # diff goflex-263BA8.deb9/boot/config-4.9.0-9-marvell
goflex-263BA8.deb10/boot/config-4.19.0-5-marvell | grep -i mtd
  < CONFIG_MTD=y
  > CONFIG_MTD=m
  < CONFIG_MTD_CMDLINE_PARTS=y
  > CONFIG_MTD_CMDLINE_PARTS=m
  < CONFIG_MTD_OF_PARTS=y
  > CONFIG_MTD_OF_PARTS=m
  < CONFIG_MTD_BLKDEVS=y
  < CONFIG_MTD_BLOCK=y
  > CONFIG_MTD_BLKDEVS=m
  > CONFIG_MTD_BLOCK=m
  > CONFIG_MTD_BLOCK_RO=m
  < CONFIG_MTD_CFI=y
  < CONFIG_MTD_JEDECPROBE=y
  < CONFIG_MTD_GEN_PROBE=y
  > CONFIG_MTD_CFI=m
  > CONFIG_MTD_JEDECPROBE=m
  > CONFIG_MTD_GEN_PROBE=m
  < CONFIG_MTD_CFI_INTELEXT=y
  < CONFIG_MTD_CFI_AMDSTD=y
  > CONFIG_MTD_CFI_INTELEXT=m
  > CONFIG_MTD_CFI_AMDSTD=m
  < CONFIG_MTD_CFI_UTIL=y
  > CONFIG_MTD_CFI_UTIL=m
  < CONFIG_MTD_PHYSMAP=y
  > CONFIG_MTD_PHYSMAP=m
  < CONFIG_MTD_PHYSMAP_OF=y
  > CONFIG_MTD_PHYSMAP_OF=m
  > # CONFIG_MTD_MCHP23K256 is not set
  < CONFIG_MTD_NAND_ECC=y
  > # CONFIG_MTD_ONENAND is not set
  > CONFIG_MTD_NAND_ECC=m
  < CONFIG_MTD_NAND=y
  < CONFIG_MTD_NAND_BCH=y
  > CONFIG_MTD_NAND=m
  > CONFIG_MTD_NAND_BCH=m
  < # CONFIG_MTD_NAND_OMAP_BCH_BUILD is not set
  < CONFIG_MTD_NAND_IDS=y
  < # CONFIG_MTD_NAND_PXA3xx is not set
  > # CONFIG_MTD_NAND_MARVELL is not set
  < CONFIG_MTD_NAND_ORION=y
  < # CONFIG_MTD_NAND_HISI504 is not set
  < # CONFIG_MTD_NAND_MTK is not set
  < # CONFIG_MTD_ONENAND is not set
  > CONFIG_MTD_NAND_ORION=m
  > # CONFIG_MTD_SPI_NAND is not set
  > CONFIG_SFC_MTD=y
  > CONFIG_SFC_FALCON_MTD=y
  < CONFIG_SFC_MTD=y

Forcing those modules to be loaded by adding them to /etc/modules and
recreating the uInitrd does not help:

  # cat /etc/modules
  # /etc/modules: kernel modules to load at boot time.
  #
  # This file contains the names of kernel modules that should be loaded
  # at boot time, one per line. Lines beginning with "#" are ignored.
  nand
  cmdlinepart
  orion_nand
  nand_bch
  ofpartx

  # update-initramfs -u
  update-initramfs: Generating /boot/initrd.img-4.19.0-5-marvell

  #cd /boot
  # LINUXVER=$(basename /boot/vm* | head -n 1| sed 's/[\/a-z]*-//') &&
echo $LINUXVER
  4.19.0-5-marvell

  #mkimage -A arm -O linux -T ramdisk -C gzip -a 0x -e
0x -n initramfs-${LINUXVER} -d /boot/initrd.img-${LINUXVER}
/boot/uInitrd
  Image Name:   initramfs-4.19.0-5-marvell
  Created:  Mon Aug  5 08:28:09 2019
  Image Type:   ARM Linux RAMDisk Image (gzip compressed)
  Data Size:14738344 Bytes = 14392.91 KiB = 14.06 MiB
  Load Address: 
  Entry Point:  

  # reboot

  # dmesg | grep -ie mtd -e 0x000 -ie nand -ie orion
  [0.00] Kernel command line: console=ttyS0,115200
root=/dev/nfs rw rootfstype=nfs rootwait
nfsroot=192.168.1.1:/srv/nfs/hosts/goflex-263BA8/,rsize=32768,wsize=32768,hard,intr,udp,v3
ip=192.168.1.14:192.168.1.1:192.168.1.254:255.255.255.0:dockstar:eth0:off
mtdparts=orion_nand:1M(u-boot),4M(uImage),32M(rootfs),-(data)
  [0.00] clocksource: orion_clocksource: mask: 0x
max_cycles: 0x, max_idle_ns: 9556302233 ns
  [0.021114] clocksource: Switched to clocksource orion_clocksource
  [2.488165] libphy: orion_mdio_bus: probed
  [2.732101] ehci-orion: EHCI orion driver
  [2.751887] orion-ehci f105.ehci: EHCI Host Controller
  [2.757519] orion-ehci f105.ehci: new USB bus registered,
assigned bus number 1
  [2.767642] orion-ehci f105.ehci: irq 29, io mem 0xf105
  [2.789133] orion-ehci f105.ehci: USB 2.0 started, EHCI 1.00
  [   23.564249] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xda
  [   23.570678] nand: Micron MT29F2G08AAD
  [   23.574374] nand: 256 MiB, SLC, erase size: 128 KiB, page size:
2048, OOB size: 64
  [   24.813065] 4 fixed-partitions partitions found on MTD device 

Bug#877496: explib310 FTBFS

2019-08-05 Thread Gianfranco Costamagna
control: tags -1 -patch -pending

After updating the chroot, looks like the Ubuntu patch is not enough anymore.

G.



Bug#932945: buster-pu: package passwordsafe/1.06+dfsg-1

2019-08-05 Thread Bill Blough
On Sun, Aug 04, 2019 at 04:43:20PM +0100, Jonathan Wiltshire wrote:
> On Sun, Aug 04, 2019 at 02:42:07PM +, Bill Blough wrote:
> > diff -Nru passwordsafe-1.06+dfsg/debian/changelog 
> > passwordsafe-1.06+dfsg/debian/changelog
> > --- passwordsafe-1.06+dfsg/debian/changelog 2018-08-15 05:32:43.0 
> > -0400
> > +++ passwordsafe-1.06+dfsg/debian/changelog 2019-07-21 18:19:37.0 
> > -0400
> > @@ -1,3 +1,10 @@
> > +passwordsafe (1.06+dfsg-1+deb9u1) buster; urgency=medium
> 
> The change is fine but this version number is not; looks like it might have
> been recycled from the corresponding update to stretch. With it fixed
> (deb10u1) please go ahead.

Ah, yes. Apologies for that.  I've fixed the version number and
uploaded the package.  Thanks!



Bug#933971: linux-image-4.19.0-5-marvell: Kernel fails to parse mtdparts arg in cmdline. Impacts usage of fw_setenv on plug devices to config uboot.

2019-08-05 Thread Ben Hutchings
This appears to be the same as bug #931852, where you will find a
workaround: .

Ben.

-- 
Ben Hutchings
Beware of programmers who carry screwdrivers. - Leonard Brandwein



signature.asc
Description: This is a digitally signed message part


  1   2   3   >