Bug#898333: CMake trouble

[Ben Westover]

Hello Simon,

On 7/2/22 12:41 AM, Simon Ruderich wrote:

to quote the man-page:


Ignore lines matching the given Perl regex. regex is
automatically anchored at the beginning and end of the line to
prevent false negatives.

NOTE: Not the input lines are checked, but the lines which are
displayed in warnings (which have line continuation resolved).


Something like --ignore-line '/usr/bin/cc.*\S+\.S' should work.


Yes, that worked well. Thanks for the hint about the anchoring; I did 
read the man page, but it seems I missed that part.


There is a new problem, however. I was testing --ignore-line so I could 
eventually put the resulting regex in debian/rules as per this part of 
the man page:



To suppress false positives you can embed the following string in the
build log:

blhc: ignore-line-regexp: REGEXP

All lines fully matching REGEXP (see --ignore-line for details) will
be ignored.

Please use this feature sparingly so that missing flags are not
overlooked. If you find false positives which affect more packages
please report a bug.

To generate this string simply use echo in "debian/rules"; make sure to
use @ to suppress the echo command itself as it could also trigger a
false positive.  If the build process takes a long time edit the
".build" file in place and tweak the ignore string until
blhc --all --debian package.build no longer reports any false positives.


I added this line to debian/rules:
@echo "blhc: ignore-line-regexp: '/usr/bin/cc.*\S+\.S'"
and also confirmed that it was echoed in the build log, but blhc is 
still triggered by those lines even though the regex is identical to one 
that worked with --ignore-line. What am I doing wrong this time?


Thanks,
--
Ben Westover


OpenPGP_signature
Description: OpenPGP digital signature

Bug#1008045: bullseye-pu: package node-mermaid/8.7.0+ds+~cs27.17.17-3+deb11u1

[Yadd]

On 21/06/2022 08:30, Salvatore Bonaccorso wrote:

Hi Yadd,

On Sat, May 28, 2022 at 09:20:40PM +0100, Adam D. Barratt wrote:

Control: tags -1 + confirmed

On Mon, 2022-03-21 at 14:09 +0100, Yadd wrote:

node-mermaid is vulnerable to XSS attack (CVE-2021-23648)



Please go ahead.


Could you fix as well CVE-2021-43861 in the next point release? Should
be then on top of the already uploaded +deb11u1.

Regards,
Salvatore


Hi,

done (8.7.0+ds+~cs27.17.17-3+deb11u2), just pushed to Bullseye queue

Regards,
Yadddiff --git a/debian/changelog b/debian/changelog
index 32f71e8..f566922 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+node-mermaid (8.7.0+ds+~cs27.17.17-3+deb11u2) bullseye; urgency=medium
+
+  * Team upload
+  * Fix for XSS vulnerability in url sanitization (Closes: CVE-2021-43861)
+
+ -- Yadd   Sat, 02 Jul 2022 07:06:05 +0200
+
 node-mermaid (8.7.0+ds+~cs27.17.17-3+deb11u1) bullseye; urgency=medium
 
   * Decode html entities before sanitizing (Closes: CVE-2021-23648)
diff --git a/debian/patches/CVE-2021-43861.patch 
b/debian/patches/CVE-2021-43861.patch
new file mode 100644
index 000..418467e
--- /dev/null
+++ b/debian/patches/CVE-2021-43861.patch
@@ -0,0 +1,306 @@
+Description: Fix for XSS vulnerability in url sanitization
+Author: Knut Sveidqvist 
+Origin: upstream, https://github.com/mermaid-js/mermaid/commit/066b7a0d
+Bug: 
https://github.com/mermaid-js/mermaid/security/advisories/GHSA-p3rp-vmj9-gv6v
+Forwarded: not-needed
+Reviewed-By: Yadd 
+Last-Update: 2022-07-02
+
+--- /dev/null
 b/cypress/platform/xss16.html
+@@ -0,0 +1,106 @@
++
++  
++https://fonts.googleapis.com/css?family=Montserrat=swap;
++  rel="stylesheet"
++/>
++https://unpkg.com/tailwindcss@^1.0/dist/tailwind.min.css; 
rel="stylesheet">
++https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css;>
++https://fonts.googleapis.com/css?family=Noto+Sans+SC=swap; 
rel="stylesheet">
++
++  body {
++/* background: rgb(221, 208, 208); */
++/* background:#333; */
++font-family: 'Arial';
++/* font-size: 18px !important; */
++}
++  h1 { color: grey;}
++  .mermaid2 {
++display: none;
++  }
++  .mermaid svg {
++/* font-size: 18px !important; */
++  }
++  .malware {
++position: fixed;
++bottom:0;
++left:0;
++right:0;
++height: 150px;
++background: red;
++color: black;
++display: flex;
++display: flex;
++justify-content: center;
++align-items: center;
++font-family: monospace;
++font-size: 72px;
++  }
++
++  
++  
++Security check
++
++  
++  
++  
++
++  mermaid.parseError = function (err, hash) {
++// console.error('Mermaid error: ', err);
++  };
++  mermaid.initialize({
++theme: 'forest',
++arrowMarkerAbsolute: true,
++// themeCSS: '.edgePath .path {stroke: red;} .arrowheadPath {fill: 
red;}',
++logLevel: 0,
++state: {
++  defaultRenderer: 'dagre-d3',
++},
++flowchart: {
++  // defaultRenderer: 'dagre-wrapper',
++  nodeSpacing: 10,
++curve: 'cardinal',
++htmlLabels: true,
++},
++htmlLabels: true,
++// gantt: { axisFormat: '%m/%d/%Y' },
++sequence: { actorFontFamily: 'courier', actorMargin: 50, 
showSequenceNumbers: false },
++// sequenceDiagram: { actorMargin: 300 } // deprecated
++// fontFamily: '"times", sans-serif',
++// fontFamily: 'courier',
++fontSize: 18,
++curve: 'basis',
++securityLevel: 'loose',
++startOnLoad: false,
++secure: ['secure', 'securityLevel', 'startOnLoad', 'maxTextSize'],
++// themeVariables: {relationLabelColor: 'red'}
++  });
++  function callback() {
++  alert('It worked');
++}
++  function xssAttack() {
++const div = document.createElement('div');
++div.id = 'the-malware';
++div.className = 'malware';
++div.innerHTML = 'XSS Succeeded';
++document.getElementsByTagName('body')[0].appendChild(div);
++throw new Error('XSS Succeded');
++  }
++
++  var diagram = `sequenceDiagram
++participant Alice
++links Alice: { "Click me!" : "javasjavascript:cript:alert('goose')" }`;
++
++// //   var diagram = "stateDiagram-v2\n";
++// //  diagram += ""]';
++// console.log(diagram);
++// document.querySelector('#diagram').innerHTML = diagram;
++mermaid.render('diagram', diagram, (res) => {
++  console.log(res);
++  document.querySelector('#res').innerHTML = res;
++});
++
++  
++
++
+--- /dev/null
 b/cypress/platform/xss17.html
+@@ -0,0 +1,106 @@
++
++  
++https://fonts.googleapis.com/css?family=Montserrat=swap;
++  rel="stylesheet"
++/>
++

Bug#898333: CMake trouble

[Simon Ruderich]

On Fri, Jul 01, 2022 at 03:28:51AM -0400, Ben Westover wrote:
> I attempted to make blhc ignore this by echoing
> "blhc: ignore-line-regexp: \.S", but it didn't work. I also tried to run
> blhc with the actual --ignore-line flag, but it was still picking up
> those lines. I even did a simplified "--ignore-line asm", but it still
> doesn't work. Just in case, I tried again with "/asm/". This is all
> valid Perl regex, but it seems like blhc just isn't working at all here.
> Am I doing something wrong?

Hi Ben,

to quote the man-page:

> Ignore lines matching the given Perl regex. regex is
> automatically anchored at the beginning and end of the line to
> prevent false negatives.
>
> NOTE: Not the input lines are checked, but the lines which are
> displayed in warnings (which have line continuation resolved).

Something like --ignore-line '/usr/bin/cc.*\S+\.S' should work.

Best,
Simon
-- 
+ privacy is necessary
+ using gnupg http://gnupg.org
+ public key id: 0x92FEFDB7E44C32F9


signature.asc
Description: PGP signature

Bug#1014207: LXQt panel: grouped window popup disappears on mouseover

[Phil Hopkins]

Package: lxpanel
Version: 0.10.1-2
Severity: normal

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate
***

   * What led up to the situation? I using lxpanel when I use the task
manager and I have multiple windows open for a task when I mouse
over the task a popup occurs. When I move the mouse to select the
window I desire the popup list dissapears. This seems to be the
same bug that was reported to LXQT at:
https://github.com/lxqt/lxqt-panel/issues/1600
I ahve run all updates. This problem showed up a few weeks ago and at
least one other user is having the same problem.

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.17.0-3-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages lxpanel depends on:
ii  libasound2   1.2.6.1-2+b1
ii  libc62.33-7
ii  libcairo21.16.0-5
ii  libcurl3-gnutls  7.84.0-1
ii  libfm-gtk4   1.3.2-1
ii  libfm-modules1.3.2-1
ii  libfm4   1.3.2-1
ii  libgdk-pixbuf-2.0-0  2.42.8+dfsg-1
ii  libglib2.0-0 2.72.2-2
ii  libgtk2.0-0  2.24.33-2
ii  libiw30  30~pre9-13.1
ii  libkeybinder00.3.1-2.1
ii  libmenu-cache3   1.1.0-1.1
ii  libpango-1.0-0   1.50.7+ds-1
ii  libwnck222.30.7-6+b1
ii  libx11-6 2:1.7.5-1
ii  libxml2  2.9.14+dfsg-1
ii  lxmenu-data  0.1.5-2.1
ii  lxpanel-data 0.10.1-2

Versions of packages lxpanel recommends:
ii  gnome-alsamixer   0.9.7~cvs.20060916.ds.1-5+b1
ii  gnome-shell [notification-daemon] 42.2-1
ii  gnome-terminal [x-terminal-emulator]  3.44.1-1
ii  libnotify-bin 0.7.12-1
ii  lxqt-notificationd [notification-daemon]  0.16.0-1
ii  lxterminal [x-terminal-emulator]  0.4.0-2
ii  mlterm [x-terminal-emulator]  3.9.0-1+b1
ii  notification-daemon   3.20.0-4+b1
ii  pavucontrol   5.0-2
ii  qterminal [x-terminal-emulator]   0.16.1-1
ii  xfce4-notifyd [notification-daemon]   0.6.3-1
ii  xfce4-terminal [x-terminal-emulator]  1.0.4-1
ii  xiterm+thai [x-terminal-emulator] 1.10-2+b2
ii  xkb-data  2.35.1-1
ii  xterm [x-terminal-emulator]   372-1

Versions of packages lxpanel suggests:
ii  brave-browser [www-browser]  1.40.107
ii  chromium [www-browser]   103.0.5060.53-1
ii  dillo [www-browser]  3.0.5-7+b1
ii  elinks [www-browser] 0.13.2-1+b3
ii  firefox-esr [www-browser]91.11.0esr-1
ii  links [www-browser]  2.27-1
ii  lynx [www-browser]   2.9.0dev.10-1
ii  menu 2.1.49
ii  midori [www-browser] 7.0-2.1+b1
ii  netsurf-gtk [www-browser]3.10-1+b3
ii  w3m [www-browser]0.5.3+git20220429-1+b1

-- no debconf information

Bug#1014206: bullseye-pu: package dpkg/1.20.11

[Guillem Jover]

Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian@packages.debian.org
Usertags: pu

Hi!

[ Reason ]

This request includes several targeted minimal fixes for issues found
in dpkg 1.20.10, including one regression introduced in the security
update.

I mentioned to Adam that I'd prepare two sets of debdiffs, one with just
the regression fix and another one with fixes for the other pending RC
and other fixes. But after checking them, the latter seemed too big for
the amount of time available, and while these have all been in sid for
a while they have not been tested on their own, so I think it's probably
better to postpone those for a next release, that I'll be preparing once
this one is handled. Instead I went with a small set of small targeted
fixes.

[ Impact ]

a) A CI fix, that was causing the branch to fail on salsa.
b) The dpkg-deb change fixes handling for truncated .debs.
c) The virtual fields one fixes a regression in dpkg --showformat.
d) The Dpkg::Source::Package::V2 fixes the regression from the security
   fix. This affects systems with "unusual" umasks.

[ Tests ]

a) The CI for that branch is green again. :)
b) The commit includes functional tests.
c) Running dpkg-deb --showformat with a virtual field now works again.
d) The lintian test suite was executed successfully.

[ Risks ]

The set of changes cherry-picked is focused and easily verifiable.
Any bigger/riskier change has been left out.

[ Checklist ]

  [√] *all* changes are documented in the d/changelog
  [√] I reviewed all changes and I approve them
  [√] attach debdiff against the package in (old)stable
  [√] the issue is verified as fixed in unstable

[ Changes ]

The git log is included in the debdiff, which I'm attaching in its full
compressed form with no filtering applied.

[ Other info ]

None.

Thanks,
Guillem


dpkg-1.20.10-1.20.11.debdiff.xz
Description: application/xz

Bug#717778: checkinstall: mkdir -p fails (fstrans broken again?)

[Geoffrey Hausheer]

Package: checkinstall
Version: 1.6.2+git20170426.d24a630-2
Followup-For: Bug #717778
X-Debbugs-Cc: debianbug...@pblue.org

It appears that the root of this issue may be in instw_setpathrel
Specifically, the 'stat' command that is used to get the length of a symlink 
should
be 'lstat' instead.

Here is a 1 line-patch that addressed the issue for me:

--- a/installwatch/installwatch.c
+++ b/installwatch/installwatch.c
@@ -1691,7 +1691,7 @@
if ( dirfd == AT_FDCWD ) return instw_setpath(instw, relpath);
 
snprintf(proc_path, PROC_PATH_LEN, "/proc/self/fd/%d", dirfd);
-   if(true_stat(proc_path, ) == -1)
+   if(true_lstat(proc_path, ) == -1)
goto out;
if(!(newpath = malloc(s.st_size+strlen(relpath)+2)))
goto out;



-- System Information:
Debian Release: 11.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.67-zfs (SMP w/4 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: unable to detect

Versions of packages checkinstall depends on:
ii  dpkg-dev1.20.10
ii  file1:5.39-3
ii  libc6   2.31-13+deb11u3
ii  sensible-utils  0.0.14

Versions of packages checkinstall recommends:
ii  make  4.3-4.1

Versions of packages checkinstall suggests:
ii  gettext  0.21-4

-- Configuration Files:
/etc/checkinstallrc changed [not included]

-- no debconf information

Bug#1014204: ITP: bellhop -- predict acoustic pressure fields in ocean environments

[Chad Gilbert]

Package: wnpp
Severity: wishlist
Owner: Chad Gilbert 
X-Debbugs-Cc: debian-de...@lists.debian.org debian-scie...@lists.debian.org

* Package name: bellhop
  Version : 2022_4_20
  Upstream Author : Michael Porter 
* URL : http://oalib.hlsresearch.com/AcousticsToolbox/
* License : GPL
  Programming Lang: Fortran 90
  Description : predict acoustic pressure fields in ocean environments.

Bellhop is released as part of the Acoustics Toolbox from Heat, Light,
and Sound Research and released under GPL v3. It runs as a command line
program, taking in a sound-speed profile or field. Outputs can be ray
coordinates, travel time, aplitude, eigenrays, acoustic pressure, or
transmission loss. This is useful for various applications in underwater
acoustics analysis and prediction analysis.

I am interested in packaging this software because I have work
colleagues who use it, whom I am supporting anyway. I am also learning
to use bellhop. It is inconvenient for some to have to build Bellhop
before use, and would seem more reasonable to be distributed as a Debian
package. If I'm going to do that work, why not share it with everyone?

At this point I have no plan to package the rest of the Acoustic
Toolbox. Though if packaging and supporting bellhop does not prove
onerous, and there is demand, I would consider packaging the rest down
the road.

This is my first look at packaging for Debian; however, bellhop seems
like an ideal place to get my feet wet: it is a simple command-line
application that brings in very few dependencies. I am a longtime user
(though admittedly mostly downstream in Ubuntu) and appreciate what
the community does (thank you all). I will need a sponsor to make the
contribution.

Cheers!
Chad

Bug#1011712: olm: diff for NMU version 3.2.11~dfsg-1.1

[Evangelos Ribeiro Tzaras]

Dear maintainer,

I've prepared an NMU for olm (versioned as 3.2.11~dfsg-1.1) and
uploaded it to DELAYED/2. Please feel free to tell me if I
should delay it longer.

This is a second version, because I forgot to remove the autopkgtest suite,
which depends on the removed libjs-olm.

Sorry for any confusion this may have caused.

Regards.

diff -Nru olm-3.2.11~dfsg/debian/changelog olm-3.2.11~dfsg/debian/changelog
--- olm-3.2.11~dfsg/debian/changelog	2022-04-16 10:37:50.0 +0200
+++ olm-3.2.11~dfsg/debian/changelog	2022-07-02 02:57:25.0 +0200
@@ -1,3 +1,11 @@
+olm (3.2.11~dfsg-1.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Remove javascript bindings
+Closes: #1011712 (thanks Lucas Nussbaum)
+
+ -- Evangelos Ribeiro Tzaras   Sat, 02 Jul 2022 02:57:25 +0200
+
 olm (3.2.11~dfsg-1) unstable; urgency=medium
 
   [ upstream ]
diff -Nru olm-3.2.11~dfsg/debian/tests/control olm-3.2.11~dfsg/debian/tests/control
--- olm-3.2.11~dfsg/debian/tests/control	2022-04-16 10:37:50.0 +0200
+++ olm-3.2.11~dfsg/debian/tests/control	1970-01-01 01:00:00.0 +0100
@@ -1,30 +0,0 @@
-Test-Command:
- sed -i -e 's,\.\./olm,@matrix-org/olm,' javascript/test/*.spec.js
- && cd javascript && jasmine --config=test/jasmine.json
-Depends:
- node-jasmine,
- node-matrix-org-olm,
-
-Test-Command: node -e "
- const domino = require('domino');
- const window = domino.createWindow('');
- const document = window.document;
- require('/usr/share/javascript/olm/olm');
- require('/usr/share/javascript/olm/olm.min');
- require('/usr/share/javascript/olm/olm_legacy');
- require('/usr/share/javascript/olm/olm_legacy.min');
- "
-Depends:
- libjs-olm,
- node-domino,
- nodejs,
-Restrictions: superficial
-
-Test-Command:
- cd /usr/share/javascript &&
- eslint --no-eslintrc --format tap --env browser  --parser-options '{ "ecmaVersion": 2015 }' olm/*.js
-Depends:
- eslint,
- libjs-olm,
- node-js-yaml,
-Restrictions: superficial

Bug#1011712: olm: diff for NMU version 3.2.11~dfsg-1.1

[Evangelos Ribeiro Tzaras]

Control: tags 1011712 + patch
Control: tags 1011712 + pending

Dear maintainer,

I've prepared an NMU for olm (versioned as 3.2.11~dfsg-1.1) and
uploaded it to DELAYED/2. Please feel free to tell me if I
should delay it longer.

Regards.

diff -Nru olm-3.2.11~dfsg/debian/changelog olm-3.2.11~dfsg/debian/changelog
--- olm-3.2.11~dfsg/debian/changelog	2022-04-16 10:37:50.0 +0200
+++ olm-3.2.11~dfsg/debian/changelog	2022-07-02 02:57:25.0 +0200
@@ -1,3 +1,11 @@
+olm (3.2.11~dfsg-1.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Remove javascript bindings
+Closes: #1011712 (thanks Lucas Nussbaum)
+
+ -- Evangelos Ribeiro Tzaras   Sat, 02 Jul 2022 02:57:25 +0200
+
 olm (3.2.11~dfsg-1) unstable; urgency=medium
 
   [ upstream ]

Bug#1011712: olm: FTBFS: unsatisfiable build-dependency: binaryen (< 105+) but 106-1 is to be installed

[Evangelos Ribeiro Tzaras]

Hi,

On Sun, 26 Jun 2022 10:18:13 +0200 Hubert Chathi  wrote:
> On Sat, 25 Jun 2022 00:49:15 +0200, Evangelos Ribeiro Tzaras
 said:
> 
> [...]
> 
> > - Drop the javascript bindings for olm (libjs-olm). The only reverse
> > dependency of libjs-olm is libjs-matrix-sdk which itself has no
> > reverse dependencies.
> 
> FWIW, libjs-matrix-js-sdk upstream is looking into switching to the new
> rust implementation of olm, so some future version may stop using
> libjs-olm anyways.  But I'm not sure of the timeline for that.

Good to know :)

> 
> Aside from that, I'd like to look into updating emscripten somehow, but
> I'm currently on VAC so I won't be able to do it for a little while.  So
> in the mean time, I don't have any objection to someone doing something
> to resolve the situation temporarily.

Alright, nmudiff following shortly (which removes the javascript bindings).


-- 
Cheers,

Evangelos
PGP: B938 6554 B7DD 266B CB8E 29A9 90F0 C9B1 8A6B 4A19

Bug#1001820: liblarch: Resurrect package and upload the new available upstream release 0.3.1

[Bastian Germann]

Control: retitle -1 liblarch: Resurrect package and upload the new available 
upstream release

Bug#1014202: pychess: Exits with error upon startup.

[André Caldas]

Package: pychess
Version: 1.0.0-1.2
Severity: important
X-Debbugs-Cc: andre.em.cal...@gmail.com

Dear Maintainer,

If you start pychess from the menu, it does not start.
If you start if from the command line, you get:
> $ pychess
> /usr/games/pychess:17: PyGIWarning: Gtk was imported without specifying a 
> version first. Use gi.require_version('Gtk', '4.0') before import to ensure 
> that the right version gets loaded.
>   from gi.repository import Gtk, Gdk
> Failed to create splash screen
> ERROR: Not all dependencies installed! You can find them in INSTALL
> Namespace Gdk is already loaded with version 4.0

The issue is already fixed upstream 3 years ago:
https://github.com/pychess/pychess/commit/e6091ea11ef4164c9cf14180d782eecba1b6bfcc


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.18.0-2-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=pt_BR:pt:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages pychess depends on:
ii  gaviotatb0.4-2.1
ii  gir1.2-gdkpixbuf-2.0 2.42.8+dfsg-1
ii  gir1.2-glib-2.0  1.72.0-1+b1
ii  gir1.2-gst-plugins-base-1.0  1.20.3-2
ii  gir1.2-gstreamer-1.0 1.20.3-1
ii  gir1.2-gtk-3.0   3.24.34-1
ii  gir1.2-gtksource-3.0 3.24.11-2+b1
ii  gir1.2-pango-1.0 1.50.7+ds-1
ii  gir1.2-rsvg-2.0  2.54.4+dfsg-1
ii  gnome-icon-theme 3.12.0-5
ii  gobject-introspection1.72.0-1+b1
ii  libgaviotatb10.4-2.1
ii  python3  3.10.4-1+b1
ii  python3-cairo1.20.1-3
ii  python3-gi   3.42.1-1
ii  python3-gi-cairo 3.42.1-1
ii  python3-pexpect  4.8.0-3
ii  python3-psutil   5.9.0-1
ii  python3-sqlalchemy   1.4.31+ds1-1
ii  python3-websockets   10.2-1

pychess recommends no packages.

pychess suggests no packages.

-- no debconf information

Bug#815038: sounds

[Matt Barry]

Oops.. real file.
sound/boss/ant_lion/earthquake
sound/boss/ant_lion/eat
sound/boss/armour_boss/clang
sound/boss/armour_boss/die
sound/boss/armour_boss/growl
sound/boss/armour_boss/saw_spin
sound/boss/armour_boss/saw_start
sound/boss/armour_boss/saw_stop
sound/boss/armour_boss/tongue_hit  NOT FOUND
sound/boss/armour_boss/tongue_start  NOT FOUND
sound/boss/awesome_boss/hadouken
sound/boss/azriel/azriel_die
sound/boss/azriel/azriel_lightning_cage
sound/boss/azriel/azriel_scythe_throw
sound/boss/black_book/page
sound/boss/blob_boss/bounce
sound/boss/blob_boss/plop
sound/boss/borer_boss/breathe_in
sound/boss/boulder_boss/roll  NOT FOUND
sound/boss/chaos/breathe_fire
sound/boss/chaos/breathe_in  NOT FOUND
sound/boss/chaos/die
sound/boss/fly_boss/buzz  NOT FOUND
sound/boss/fly_boss/fly_boss_bullet
sound/boss/gargoyle/gargoyle_create_lance
sound/boss/gargoyle/gargoyle_lance_stab
sound/boss/gargoyle/gargoyle_petrify
sound/boss/gargoyle/gargoyle_stone_to_flesh
sound/boss/gargoyle/petrify_shake
sound/boss/grimlore/grimlore_beam
sound/boss/grimlore/grimlore_summon
sound/boss/grub_boss/death  NOT FOUND
sound/boss/grub_boss/fire
sound/boss/grub_boss/roar  NOT FOUND
sound/boss/mataeus/create_knife
sound/boss/mataeus/throw_knife
sound/boss/snake_boss/hiss  NOT FOUND
sound/boss/snake_boss/snake_boss_die
sound/boss/snake_boss/snake_boss_shot
sound/boss/sorceror/electrocute
sound/boss/sorceror/shield_die
sound/common/click
sound/common/crash
sound/common/crumble
sound/common/crunch
sound/common/dink
sound/common/door
sound/common/explosion
sound/common/freeze
sound/common/gib
sound/common/lava
sound/common/massive_explosion
sound/common/mine_lift
sound/common/pop
sound/common/punch  NOT FOUND
sound/common/rock_bounce
sound/common/rock_shatter  NOT FOUND
sound/common/shatter
sound/common/slime
sound/common/spell
sound/common/splash
sound/common/splat1
sound/common/splat2
sound/common/splat3
sound/common/switch
sound/common/teleport
sound/common/throw
sound/common/tick
sound/edgar/arrow
sound/edgar/block
sound/edgar/shield  NOT FOUND
sound/edgar/swing
sound/enemy/armadillo/armadillo_die
sound/enemy/bat/squeak
sound/enemy/bug/buzz
sound/enemy/ceiling_crawler/ceiling_crawler_die
sound/enemy/centipede/centipede_die
sound/enemy/centurion/centurion_die
sound/enemy/centurion/walk
sound/enemy/chicken/cluck
sound/enemy/fireball/fireball
sound/enemy/fire_burner/flame
sound/enemy/floating_snapper/burp
sound/enemy/floating_snapper/chomp
sound/enemy/frog/croak  NOT FOUND
sound/enemy/gazer/flap
sound/enemy/gazer/flash
sound/enemy/gazer/gazer_die
sound/enemy/gazer/growl
sound/enemy/ghost/ghost
sound/enemy/giant_snowball/crumble
sound/enemy/ground_spear/spear
sound/enemy/grub/grub_die
sound/enemy/icicle/smash
sound/enemy/jumping_slime/baby_jump1
sound/enemy/jumping_slime/baby_jump2
sound/enemy/jumping_slime/hatch
sound/enemy/jumping_slime/jump1
sound/enemy/jumping_slime/jump2
sound/enemy/jumping_slime/slime_die
sound/enemy/laser/zap
sound/enemy/mouth_stalk/hiss  NOT FOUND
sound/enemy/pendulum/swing
sound/enemy/rampaging_master_tortoise/stomp
sound/enemy/red_grub/spin  NOT FOUND
sound/enemy/red_grub/thud
sound/enemy/red_sludge/acid
sound/enemy/skeleton/skeleton_die
sound/enemy/skeleton/skeleton_resurrect
sound/enemy/sludge/sludge_die
sound/enemy/snail/snail_die
sound/enemy/snail/spit  NOT FOUND
sound/enemy/spider/spider
sound/enemy/spirit/spirit_explode
sound/enemy/spirit/spirit_scream
sound/enemy/splitter/splat
sound/enemy/thunder_cloud/lightning
sound/enemy/tortoise/tortoise_die
sound/enemy/tortoise/tortoise_electric
sound/enemy/wasp/wasp_die
sound/enemy/whirlwind/ricochet  NOT FOUND
sound/enemy/whirlwind/suck
sound/enemy/whirlwind/whirlwind_die
sound/item/blender
sound/item/block_beep
sound/item/burst
sound/item/buzzer
sound/item/chain
sound/item/charge_beep
sound/item/chop
sound/item/cork
sound/item/crack
sound/item/crossbow  NOT FOUND
sound/item/fill_potion
sound/item/force_field_shutdown  NOT FOUND
sound/item/fuse
sound/item/generator  NOT FOUND
sound/item/inflate
sound/item/magnet  NOT FOUND
sound/item/number_block
sound/item/ping
sound/item/rift
sound/item/spray
sound/item/spring
sound/item/striker_top  NOT FOUND
sound/item/tesla_electrocute
sound/item/trap_close
sound/item/tuning_fork

Bug#815038: sounds

[Matt Barry]

Attached is a report of sound files that are referenced in the source
(see below for how it was created).

I will report this issue upstream.

for i in `grep 'playSoundToMap("' src -R | sed -e
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`; do echo -n $i; if [
! -f $i ]; then echo -n "  NOT FOUND"; fi; echo ""; done > sounds.txt
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/ant_lion/earthquake]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/ant_lion/eat]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/armour_boss/clang]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/armour_boss/die]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/armour_boss/growl]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/armour_boss/saw_spin]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/armour_boss/saw_start]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/armour_boss/saw_stop]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/armour_boss/tongue_hit]0;[ ! -f $i ]]0;echo -n "  NOT FOUND"  
NOT FOUND]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/armour_boss/tongue_start]0;[ ! -f $i ]]0;echo -n "  NOT 
FOUND"  NOT FOUND]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/awesome_boss/hadouken]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/azriel/azriel_die]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/azriel/azriel_lightning_cage]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/azriel/azriel_scythe_throw]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/black_book/page]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/blob_boss/bounce]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/blob_boss/plop]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/borer_boss/breathe_in]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/boulder_boss/roll]0;[ ! -f $i ]]0;echo -n "  NOT FOUND"  NOT 
FOUND]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/chaos/breathe_fire]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/chaos/breathe_in]0;[ ! -f $i ]]0;echo -n "  NOT FOUND"  NOT 
FOUND]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/chaos/die]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/fly_boss/buzz]0;[ ! -f $i ]]0;echo -n "  NOT FOUND"  NOT 
FOUND]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 
$isound/boss/fly_boss/fly_boss_bullet]0;[ ! -f $i ]]0;echo ""
]0;for i in `grep 'playSoundToMap("' src -R | sed -e 
's/.*playSoundToMap("\([^,"]*\)".*/\1/'|sort|uniq`]0;echo -n 

Bug#1014201: spamprobe hangs in libdb; use MySQL instead?

[Frank Heckenbach]

Package: spamprobe
Version: 1.4d-14+b2
Severity: important
Tags: upstream

I posted this upstream at https://sourceforge.net/p/spamprobe/bugs/40/, but as 
expected got no reaction there.

Is anyone here maintaining spamprobe anymore, or am I on my own?

---

I had used spamprobe for many years without major problems. But recently it 
started hanging.

strace shows it blocks on a futex call which is strange enough since it's 
single-threaded and no other instances were running at the same time.

Once it happens, it seems to happen every time. Rebuilding the database helped, 
but only for a short while. After few days, it would hang again.

gdb shows the offending calls come from some libdb functions. Since I don't 
feel like debugging libdb, and you might not either, this got me thinking if 
using a file-based DB such as Berkeley is really the best option here.

Using a DB server such as MySQL might, apart from hopefully avoiding such 
locking bugs, be better for performance since it doesn't have to load the whole 
DB on each invocation, but can cache it if used frequently, as it normally does.

I see a similar request was made recently (well, 17 years ago ;) in 
https://sourceforge.net/p/spamprobe/feature-requests/23/ (with yet another 
reason), but got no replies.

-- System Information:
Debian Release: 11.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
'stable-debug'), (500, 'proposed-updates-debug'), (500, 'proposed-updates'), 
(500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-14-amd64 (SMP w/24 CPU threads)
Kernel taint flags: TAINT_WARN
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages spamprobe depends on:
ii  debconf [debconf-2.0]  1.5.77
ii  libc6  2.31-13+deb11u3
ii  libdb5.3   5.3.28+dfsg1-0.8
ii  libgcc-s1 [libgcc1]10.2.1-6
ii  libgif75.1.9-2
ii  libjpeg62-turbo1:2.0.6-4
ii  libpng16-161.6.37-3
ii  libstdc++6 10.2.1-6

Versions of packages spamprobe recommends:
ii  procmail  3.22-26

spamprobe suggests no packages.

-- debconf-show failed

Bug#1014200: buster-pu: package ublock-origin/1.37.0+dfsg-1~deb10u1

[Markus Koschany]

Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: a...@debian.org

Hello,

I would like to update the ublock-origin add-on for Firefox and
Chromium. This is just a normal update which improves the ability to
block ads, malware and trackers and just brings the package up-to-date
to be useful for users. There is no risk of breaking unrelated
packages. We have done this before and it worked pretty well. The
update also corrects a mistake in debian/changelog (#996249)

Regards,

Markus

Bug#1007714: bullseye-pu: package openssh/1:8.4p1-5+deb11u1

[Colin Watson]

On Wed, Jun 29, 2022 at 10:27:01PM +0100, Adam D. Barratt wrote:
> On Fri, 2022-03-18 at 08:43 +0100, Cyril Brulebois wrote:
> > Adam D. Barratt  (2022-03-17):
> > > As openssh builds a udeb, I'm CCing KiBi and tagging the bug
> > > accordingly.
> > 
> > Making sure upgrades have a chance to work properly seems more
> > important
> > than any possible regressions at install time, for those deploying
> > over
> > SSH, so no objections at all.
> 
> Just a quick reminder on this, as the window for getting changes into
> 11.4 closes over the coming weekend.

Oops, sorry!  I've just uploaded this.

-- 
Colin Watson (he/him)  [cjwat...@debian.org]

Bug#1014199: bullseye-pu: package ublock-origin/1.37.0+dfsg-1~deb11u1

[Markus Koschany]

Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: a...@debian.org

Hello,

I would like to update the ublock-origin add-on for Firefox and
Chromium. This is just a normal update which improves the ability to
block ads, malware and trackers and just brings the package up-to-date
to be useful for users. There is no risk of breaking unrelated
packages. We have done this before and it worked pretty well. The
update also corrects a mistake in debian/changelog (#996249)

Regards,

Markus

Bug#1014198: deepin-movie: binary packages still depend on old libav* packages after rebuild.

[Peter Michael Green]

Package: deepin-movie
Version: 5.7.15-3
Severity: serious

The deepin-movie-reborn source package was recently binnmu'd for the 
ffmpeg transtion,
unfortunately though the resulting binary packages still depend on the 
old libav* packages.

Bug#1014197: zfsutils-linux: zfs-share.service does not depend on smbd.service and does not start samba shares at boot

[Tim Brownawell]

Package: zfsutils-linux
Version: 2.1.5-1
Severity: normal

Dear Maintainer,

zfs-share.service depends on smb.service, which does not exist.

At boot it happens to run before smbd.service (which it does not depend 
on), and

does not share my smb shares.

If I edit /lib/systemd/system/zfs-share.service to depend on (and
declare itself part of) smbd.service rather than smb.service, it does
automatically share my smb shares at boot.


smbd.service is /lib/systemd/system/smbd.service which is from package
samba.


+++-==-===--
ii  samba  2:4.16.2+dfsg-1 amd64    SMB/CIFS file, print, 
and login server for Unix


-- System Information:
Debian Release: bookworm/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
'testing'), (500, 'stable')

Architecture: amd64 (x86_64)

Kernel: Linux 5.18.0-2-amd64 (SMP w/24 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE 
not set

Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages zfsutils-linux depends on:
ii  init-system-helpers  1.63
ii  libblkid1    2.38-4
ii  libc6    2.33-7
ii  libnvpair3linux  2.1.5-1
ii  libuuid1 2.38-4
ii  libuutil3linux   2.1.5-1
ii  libzfs4linux 2.1.5-1
ii  libzpool5linux   2.1.5-1
ii  python3  3.10.4-1+b1

Versions of packages zfsutils-linux recommends:
ii  lsb-base    11.2
ii  zfs-dkms [zfs-modules]  2.1.5-1
ii  zfs-zed 2.1.5-1

Versions of packages zfsutils-linux suggests:
pn  nfs-kernel-server  
ii  samba-common-bin   2:4.16.2+dfsg-1
ii  zfs-initramfs  2.1.5-1

-- Configuration Files:
/etc/sudoers.d/zfs [Errno 13] Permission denied: '/etc/sudoers.d/zfs'

-- no debconf information

Bug#1008166: bullseye-pu: package debian-edu-config/2.11.56+deb11u4

[Mike Gabriel]

Hi,

On  Fr 01 Jul 2022 19:37:54 CEST, Adam D. Barratt wrote:


Control: tags -1 + confirmed

On Wed, 2022-03-23 at 12:33 +, Mike Gabriel wrote:

Hi again,

On  Mi 23 Mär 2022 13:19:54 CET, Mike Gabriel wrote:

> [ Tests ]
> (What automated or manual tests cover the affected code?)

I forgot to mention the nature of the performed tests. All code
changes were tested in the field on at least 2 sometimes 3 Debian
Edu
production sites.

All resolved problems were problems that were encountered in the
field
on one of my production Debian Edu 11 setups. The solutions / bug
fixes were first developed and tested on-premise. Once the wanted
functionality was achieved, the changes were provided for Debian
Edu
testing/unstable and then backported to 2.11.56+deb11u4 of
debian-edu-config. The on-premise solutions were then removed and
replaced by preview versions of debian-edu-config 2.11.56+deb11u4
and
tested again.



Sorry for not getting to this sooner.

Please go ahead, bearing in mind that the window for getting fixes into
11.4 closes this weekend.

Regards,

Adam


Uploaded just now. (Will take some time to land, probably).

Mike
--

mike gabriel aka sunweaver (Debian Developer)
mobile: +49 (1520) 1976 148
landline: +49 (4351) 486 14 27

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: sunwea...@debian.org, http://sunweavers.net



pgpeDYuPWz0L5.pgp
Description: Digitale PGP-Signatur

Bug#1014156: svg?

[Matt Barry]

Looking at the check, it seems there is an exemption for SVG files
built in; would it make any sense to search for a text/* mime type
instead (ala libfile-libmagic-perl)?

Cheers,
Matt

Bug#1014196: RFS: python-pyalsa/1.2.7-1 [Team] -- Official ALSA Python binding library for Python3

[François Mazen]

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for my package "python-pyalsa":

 * Package name    : python-pyalsa
   Version : 1.2.7-1
   Upstream Author : The ALSA Team 
 * URL :
http://www.alsa-project.org/main/index.php/Main_Page
 * License : public-domain, LGPL-2.0+, GPL-2.0+
 * Vcs :
https://salsa.debian.org/python-team/packages/python-pyalsa
   Section : python

The source builds the following binary packages:

  python3-pyalsa - Official ALSA Python binding library for Python3

To access further information about this package, please visit the
following URL:

  https://mentors.debian.net/package/python-pyalsa/

Alternatively, you can download the package with 'dget' using this
command:

  dget -x
https://mentors.debian.net/debian/pool/main/p/python-pyalsa/python-pyalsa_1.2.7-1.dsc

Changes since the last upload:

 python-pyalsa (1.2.7-1) unstable; urgency=medium
 .
   * Team upload
   * Update watch file to new URL and check package signature
   * New upstream version (Closes: #938965)
   * Bump standard version to 4.6.1.0
   * Fix spelling errors
   * Add Rules-Requires-Root: no
   * Set hardening flags.
   * Write Dep5 copyright

Regards,

Bug#1014195: ITP: gtg -- Getting Things Gnome!, an organizer for the GNOME desktop environment

[Francois Mazen]

Package: wnpp
Severity: wishlist
Owner: Francois Mazen 
X-Debbugs-Cc: debian-de...@lists.debian.org, franc...@mzf.fr

* Package name: gtg
  Version : 0.6
  Upstream Author : Lionel Dricot & Bertrand Rousseau
* URL : https://wiki.gnome.org/Apps/GTG
* License : GPLv3
  Programming Lang: Python
  Description : Getting Things Gnome!, an organizer for the GNOME desktop
environment

The purpose of this ITP is to reintroduce the package that have been removed
because of python3 transition. The upstream is now active and new releases are
available.

This package depends on liblarch which needs to be reintroduced first [1].

Getting Things GNOME! (GTG) is a personal tasks and TODO-list items organizer
for the GNOME desktop environment and inspired by the ''Getting Things Done''
(GTD) methodology.

GTG is designed with flexibility, adaptability, and ease of use in mind, so its
user interface and workflow can be used as more than just "GTD" software. GTG
is intended to help you track everything you need to do and need to know, from
small tasks to large projects.


[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014194

Bug#832116: music assets

[Matt Barry]

Hello!

I am looking at the possibility of getting edgar updated and back into
the archive, which obviously involves this bug.

I don't desperately want to dredge up an entirely old discussion, so
I'll just document my starting point here.  My working assumption is 
that existing practice reflects more or less the correct interpretation
of the relevant documents; there are still plenty of games in the
archive with unsourced ogg files.  Fwiw, [0] is roughly my
interpretation; however, the disagreement over this has been going on
for many years; if anyone feels it needs to be relitigated, my humble
suggestion is that you migrate that discussion to one of the mailing
lists.  (You may assume I am subscribed.)

With regard to the actual bug report:

- medcine.ogg is correctly attributed upstream now
- I have reached out to Johan Brodd, requesting a) source, or b) dual
licensing options.. will give it a bit to see if he responds.
- If we cannot reach the author, I believe the next step is to approach
upstream; they are redistributing the file incorrectly as well.

If I have misunderstood anything so far, kindly let me know; again,
larger questions of non-programmatic works really need a larger
audience than a bug report.

Cheers,
Matt

[0] https://lists.debian.org/debian-devel/2014/03/msg00301.html


signature.asc
Description: This is a digitally signed message part

Bug#1013954: transition: opencv

[Sebastian Ramacher]

Control: tags -1 confirmed

On 2022-07-01 22:15:43, Jochen Sprickerhof wrote:
> Control: tags -1 - moreinfo
> 
> Hi Sebastian,
> 
> * Sebastian Ramacher  [2022-06-29 00:18]:
> > Control: tags -1 moreinfo
> > 
> > On 2022-06-28 00:28:04 +0200, Jochen Sprickerhof wrote:
> > > Package: release.debian.org
> > > Severity: normal
> > > User: release.debian@packages.debian.org
> > > Usertags: transition
> > > 
> > > Hi release team,
> > > 
> > > I would like to transition the new opencv version, containing a fix for
> > > building with ffmpeg 5.0 (#1004718).
> > 
> > This version however fails to build on mipsel: 
> > https://buildd.debian.org/status/fetch.php?pkg=opencv=mipsel=4.6.0%2Bdfsg-2=1656417149=0
> > 
> > Please remove the moreinfo tag once this issue is fixed.
> 
> Seems like I only checked against unstable where it was failing already,
> sorry for the confusion. Anyway, it builds again on all release archs and it
> would be great to get a transition slot.

Please go ahead

Cheers

> 
> Cheers Jochen
> 
> 
> > Cheers
> > 
> > > The autogenerated ben tracker looks
> > > fine and I've successfully rebuild all reverse dependencies listed on it
> > > except:
> > > 
> > > already ftbfs due to other changes:
> > > 
> > > digikam #1004769
> > > openimageio #1012176
> > > os-autoinst #1013533
> > > pytorch #1004782
> > > 
> > > newly filled:
> > > 
> > > sight #1013903
> > > 
> > > Cheers Jochen
> > > 
> > 
> > -- 
> > Sebastian Ramacher
> > 



-- 
Sebastian Ramacher

Bug#1013728: mount: exfat filesystem mtime's are wrong

[Salvatore Bonaccorso]

Control: tags -1 + moreinfo

Hi,

On Fri, Jun 24, 2022 at 04:56:12PM -0700, David Christensen wrote:
> Package: src:linux
> Version: 5.10.113-1
> Severity: normal
> X-Debbugs-Cc: dpchr...@holgerdanske.com
> 
> Dear Maintainer,
> 
> Please see:
> 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001306

Thanks for the report. ideally you fill in all the detail in the
bugreport without that we have to jump from one to the other ;-)

That said, I assume you use the exfat driver from the kernel. For that
see the recently commited:

https://git.kernel.org/linus/9b002894b4c252169abc26720452bf3746114b20

Is this applying to you? That is until you can ue sys_tz option with
5.19-rc1 and later, setting time_offset can help.

Regards,
Salvatore

Bug#1004632: wxsvg: FTBFS with ffmpeg 5.0

[Bastian Germann]

Control: tags -1 patch

Patch available at 
https://gitweb.gentoo.org/repo/gentoo.git/tree/media-libs/wxsvg/files/ffmpeg5.patch?id=d6fd9cfb26299c76be7483cac4451a226ab8e37f

Bug#1013954: transition: opencv

[Jochen Sprickerhof]

Control: tags -1 - moreinfo

Hi Sebastian,

* Sebastian Ramacher  [2022-06-29 00:18]:

Control: tags -1 moreinfo

On 2022-06-28 00:28:04 +0200, Jochen Sprickerhof wrote:

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Hi release team,

I would like to transition the new opencv version, containing a fix for
building with ffmpeg 5.0 (#1004718).


This version however fails to build on mipsel: 
https://buildd.debian.org/status/fetch.php?pkg=opencv=mipsel=4.6.0%2Bdfsg-2=1656417149=0

Please remove the moreinfo tag once this issue is fixed.


Seems like I only checked against unstable where it was failing already, 
sorry for the confusion. Anyway, it builds again on all release archs 
and it would be great to get a transition slot.


Cheers Jochen



Cheers


The autogenerated ben tracker looks
fine and I've successfully rebuild all reverse dependencies listed on it
except:

already ftbfs due to other changes:

digikam #1004769
openimageio #1012176
os-autoinst #1013533
pytorch #1004782

newly filled:

sight #1013903

Cheers Jochen



--
Sebastian Ramacher



signature.asc
Description: PGP signature

Bug#1014194: ITP: liblarch -- a Python library to easily handle data structures

[Francois Mazen]

Package: wnpp
Severity: wishlist
Owner: Francois Mazen 
X-Debbugs-Cc: debian-de...@lists.debian.org, franc...@mzf.fr

* Package name: liblarch
  Version : 3.2.0
  Upstream Author : Lionel Dricot & Izidor Matušov
* URL : https://live.gnome.org/liblarch
* License : LGPL-3+
  Programming Lang: Python
  Description : a Python library to easily handle data structures

The purpose of this ITP is to reintroduce liblarch package, in order to
reintroduce the gtg (Getting Things Gnome) package.

Liblarch is a Python module created to easily handle data structure such
as lists, trees and directed acyclic graphs (tree where nodes can have
multiple parents).
Liblarch supports multiple views of one data structure and complex
filtering. That way, you have a clear separation between your data
(Model) and how they are displayed (View).

Bug#1014193: segfault with libssl3

[Klaus Ethgen]

Package: encfs
Version: 1.9.5-1+b4

VERBOSE Root directory: // [main.cpp:686]
VERBOSE Fuse arguments: (daemon) (threaded) (keyCheck) encfs 
/xxx/ -o use_ino -o default_permissions  [main.cpp:687]
VERBOSE found new serialization format [FileUtils.cpp:299]
VERBOSE subVersion = 20100713 [FileUtils.cpp:313]
VERBOSE checking if ssl/aes(3:0:2) implements ssl/blowfish(3:0) 
[Interface.cpp:103]
VERBOSE checking if ssl/blowfish(3:0:2) implements ssl/blowfish(3:0) 
[Interface.cpp:103]
VERBOSE allocated cipher ssl/blowfish, keySize 32, ivlength 8 
[SSL_Cipher.cpp:395]
VERBOSE useStdin: 0 [FileUtils.cpp:1660]
EncFS-Passwort: 
VERBOSE checking if ssl/aes(3:0:2) implements ssl/blowfish(3:0) 
[Interface.cpp:103]
VERBOSE checking if ssl/blowfish(3:0:2) implements ssl/blowfish(3:0) 
[Interface.cpp:103]
VERBOSE allocated cipher ssl/blowfish, keySize 32, ivlength 8 
[SSL_Cipher.cpp:395]

dmesg:
[Fr Jul  1 20:49:01 2022] encfs[3068]: segfault at 78 ip 7f1e98b10fe4 sp 
7ffdea437260 error 4 in libcrypto.so.3[7f1e989cf000+279000]
[Fr Jul  1 20:49:01 2022] Code: 84 00 00 00 00 00 41 54 41 89 f4 55 48 89 fd 48 
81 ec a8 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 98 00 00 00 48 8b 07 
<48> 83 78 78 00 0f 84 e1 00 00 00 66 0f ef c0 48 63 c6 48 89 44 24

No mount is done and error code is 139. Without -v, no output (except
of password) is done.

-- System Information:
Debian Release: bookworm/sid
  APT prefers experimental
  APT policy: (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.16.17 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_FIRMWARE_WORKAROUND, 
TAINT_OOT_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages encfs depends on:
ii  debconf [debconf-2.0]  1.5.79
ii  fuse3 [fuse]   3.11.0-1
ii  libc6  2.33-7
ii  libfuse2   2.9.9-5
ii  libgcc-s1  12.1.0-5
ii  libssl33.0.4-2
ii  libstdc++6 12.1.0-5
ii  libtinyxml2-9  9.0.0+dfsg-3.1
ii  mount  2.38-4devuan1

encfs recommends no packages.

encfs suggests no packages.

-- debconf information:
* encfs/security-information:

-- 
Klaus Ethgen   http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16Klaus Ethgen 
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C


signature.asc
Description: PGP signature

Bug#1014192: RFS: audacious-plugins/4.1-3 [RC] -- Base plugins for audacious

[Mateusz Łukasik]

Package: sponsorship-requests
Severity: important

Dear mentors,

I am looking for a sponsor for my package "audacious-plugins":

 * Package name: audacious-plugins
   Version : 4.1-3
   Upstream Author : [fill in name and email of upstream]
 * URL :https://www.audacious-media-player.org/
 * License : LGPL-2.1+, BSD-2-clause, public-domain, Artistic, GPL-2 or 
GPL-3, ISC, LGPL-2, GPL-2+, Expat, GPL-3+, BSD-3-clause, GPL-3
 * Vcs :https://salsa.debian.org/multimedia-team/audacious-plugins
   Section : sound

The source builds the following binary packages:

  audacious-plugins - Base plugins for audacious
  audacious-plugins-data - Data files for Audacious plugins

To access further information about this package, please visit the following 
URL:

  https://mentors.debian.net/package/audacious-plugins/

Alternatively, you can download the package with 'dget' using this command:

  dget 
-xhttps://mentors.debian.net/debian/pool/main/a/audacious-plugins/audacious-plugins_4.1-3.dsc

Changes since the last upload:

 audacious-plugins (4.1-3) unstable; urgency=medium
 .
   * Add upstream patch for fix FTBFS with ffmpeg 5.0. (Closes: #1004788)

Regards,
--
  Mateusz Łukasik

Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service

[Ben Hutchings]

On Sun, 2022-06-26 at 10:30 -0500, Daniel Lewart wrote:
> Ben, et al,
> 
> On Mon, 13 Jun 2022 18:23:18 +0200 Ben Hutchings  wrote:
> 
> > Since the truncated signatures are in the source packages, this is a
> > problem introduced by the code signing service and will need to be
> > fixed there.
> 
> Assuming that the code-signing service uses the kernel's scripts/sign-file
> and calls PKCS7_sign() ...
> 
> Which version of OpenSSL/libssl is used?

I don't know that; you would have to ask the FTP team.

> Are kernel build logs available for download or viewing?

All package build logs are available from ,
but the code signing step is separate.

Ben.

-- 
Ben Hutchings
Never put off till tomorrow what you can avoid all together.


signature.asc
Description: This is a digitally signed message part

Bug#1013868: nfs-common: Split between Python scripts to separate package

[Ben Hutchings]

Control: severity -1 wishlist

On Sun, 2022-06-26 at 09:47 +0200, Gioele Barabucci wrote:
> Package: nfs-common
> Version: 1:2.6.1-2
> 
> Dear maintainers of nfs-common,
> 
> could you please move the three Python scripts included in nfs-common to 
> a separate -extras package?

No, the postinst may run nfsconvert.py.

> Currently nfs-common Depends on `python3` and, on lean/containerized 
> client systems, it is the only package that requires it. For this 
> reason, in 2019 Fedora moved the scripts `mountstats`, `nfsiostat` and 
> `nfsconvert` to a separate package [1,2], required on servers (for 
> `nfsconver`) but not on clients.

nfsconvert.py is also required on clients.

We can remove nfsconvert.py and revisit this after the bookworm
release.

Ben.

-- 
Ben Hutchings
Never put off till tomorrow what you can avoid all together.


signature.asc
Description: This is a digitally signed message part

Bug#1014115: uninstall does not properly remove enablement symlinks

[Michael Biebl]

Am 30.06.22 um 22:31 schrieb Luca Boccassi:

The problem is some files leftover, no? Just delete them in the
postinst or postrm?


My main motivation is to "stop the bleeding" as quickly as possible.

If we continue to create those broken state files, we'd have to keep 
those postinst/postrm cleanup routines for a possibly long time.


OpenPGP_signature
Description: OpenPGP digital signature

Bug#1001639: bullseye-pu: package python-hbmqtt/0.9.6-1+deb11u1

[Adam D. Barratt]

# BCC control@bugs
user release.debian@packages.debian.org
usertags 1001639 = rm
retitle 1001639 RM: python-hbmqtt -- RoQA; broken; low popcon; unmaintained
tags 1001639 -confirmed +pending
thanks

On Fri, 2022-04-29 at 07:29 +0200, Helmut Grohne wrote:
> Hi Adam,
> 
> On Tue, Mar 15, 2022 at 09:15:16PM +, Adam D. Barratt wrote:
> > Please go ahead; sorry for the delay.
> 
> In the mean time, hbmqtt has been deleted from unstable as
> unmaintained.
> As such, I now prefer spending my time on migrating stuff away from
> hbmqtt and propose removing the (dysfunctional) package from stable.
> The
> sooner we get rid of it, the fewer people will try using something
> that
> isn't sustainable. Do you concur?
> 
> If yes, can you directly turn this bug into an appropriate RM
> request?

Let's do that then.

Regards,

Adam

Bug#1014191: irqbalance: libcap-ng used by "/usr/sbin/irqbalance" failed due to not having CAP_SETPCAP in capng_apply

[Alexandr Podgorniy]

Package: irqbalance
Version: 1.8.0-1
Severity: important
X-Debbugs-Cc: sac...@scaledteam.ru

Service will not start out of box. To get it working, you need to remove
"CapabilityBoundingSet=" from irqbalance.service file.

https://bugzilla.redhat.com/show_bug.cgi?id=1952715
https://github.com/Irqbalance/irqbalance/pull/192

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
 ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: bookworm/sid
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'testing'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.16.0-0.bpo.4-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_USER, TAINT_OOT_MODULE
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages irqbalance depends on:
ii  init-system-helpers  1.63
ii  libc62.33-7
ii  libcap-ng0   0.8.3-1
ii  libglib2.0-0 2.72.2-2
ii  libncursesw6 6.3+20220423-2
ii  libnuma1 2.0.14-3
ii  libsystemd0  251.2-6
ii  libtinfo66.3+20220423-2
ii  runit-helper 2.13.1

irqbalance recommends no packages.

irqbalance suggests no packages.

-- no debconf information

Bug#1014153: libqt5gui5: cannot mouse over "grouped window" set to select -- lxqt panel task manager

[proctor]

thank you for your response, and sorry for the poor quality info.
i wonder how i might have searched for that patch being applied to debian.

i would like to add a piece of info that had originally bolstered my idea
that it was libqt5gui5:
at the time of the panel crash this line was written in the logs

kernel: traps: *lxqt-panel*[27936] general protection fault ip:7f0c3f93f300
sp:7ffd43edba18 error:0 in* libQt5Gui.so.5.15.2*
(deleted)[7f0c3f8e2000+4d]

i believe at that time *libQt5Gui.so.5.15.2* was switched to
libQt5Gui.so.5.15.4 (my guess) -- and that is also when the problem began.

since qt 5.15.2 version was also referenced in the bug that i found i
thought there was a reasonable chance it was related.


let me know if there is anything more i can provide. i am more or less an
advanced user.

On Fri, 1 Jul 2022 at 05:02, Dmitry Shachnev  wrote:

> Control: reassign -1 lxqt-panel 0.16.1-1
>
> Hi!
>
> On Thu, Jun 30, 2022 at 07:45:28PM -0600, proctor wrote:
> > Package: libqt5gui5
> > Version: 5.15.4+dfsg-3
> > Severity: normal
> > X-Debbugs-Cc: damonswir...@gmail.com
> >
> > Dear Maintainer,
> >
> > *** Reporter, please consider answering these questions, where
> appropriate ***
> >
> >* What led up to the situation?
> > panel crashed after clicking on okular grouped set of windows.
> > after panel reloaded the issue manifested.
> > i believe the crash/reload reloaded a new version (5.15.4+dfsg-3) and
> > that is where i think the problem may lie.
> >
> >* What exactly did you do (or not do) that was effective (or
> >  ineffective)?
> > tried rebooting. (not work)
> > tried creating new user and logging in as them. (not work)
> > tried using lxde desktop environment (this works)
> > tried reinstalling lxqt. (not work)
> >
> >* What was the outcome of this action?
> > none of the troubleshooting produced a postitive result.
> >
> >* What outcome did you expect instead?
> >
> > *** End of the template - remove these template lines ***
> >
> > this appears to be the exact same issue as reported here
> > https://github.com/lxqt/lxqt-panel/issues/1600
> > which also seems to have a patch available.
>
> Right, but that patch is for lxqt-panel, not for Qt. So reassigning the
> bug.
>
> The patch is https://github.com/lxqt/lxqt-panel/commit/4c674608c73d
> and
> it is present in versions ≥ 0.17.0. Debian currently has 0.16.1.
>
> --
> Dmitry Shachnev
>


-- 
.this message has been rot26 encrypted for security reasons.
gpg 0x385E2954CE572CADE8C091C09479B105A6770473

Bug#1004459: bullseye-pu: package lxc/1:4.0.6-2+deb11u1

[Adam D. Barratt]

On Sun, 2022-02-20 at 19:38 -0300, Antonio Terceiro wrote:
> On Sat, Feb 19, 2022 at 06:53:52PM +, Adam D. Barratt wrote:
> > Control: tags -1 + confirmed
> > 
> > On Thu, 2022-01-27 at 21:32 -0300, Antonio Terceiro wrote:
> > > This update fixes the download of container images using the
> > > "download"
> > > template. pool.sks-keyservers.net is not active anymore, so the
> > > patch
> > > (already included in the upstream release present in
> > > sid/bookworm)
> > > changes that to keyserver.ubuntu.com.
> > > 
> > 
> > +  * lxc-download: Switch GPG server.
> > +The default server used to download gpg keys from has ben
> > deprecated,
> > 
> > s/ben/been/
> > 
> > Please go ahead.
> 
> Uploaded with that typo fixed. Thanks.

I was just looking through some older p-u bugs, and realised that this
was still open. Looking further, the package never seems to have made
it to stable-new.

I can't find any mention of the upload in the dak logs on ftp-master,
and all I can see on the upload host is:

Feb 20 21:55:04 > rm --searchdirs lxc_4.0.6-2+deb11u1_source.changes
Feb 20 21:55:04 Files removed: lxc_4.0.6-2+deb11u1_source.changes
Feb 20 21:55:04 > rm --searchdirs lxc_4.0.6-2+deb11u1.dsc
Feb 20 21:55:04 Files removed: lxc_4.0.6-2+deb11u1.dsc
Feb 20 21:55:04 > rm --searchdirs lxc_4.0.6-2+deb11u1.debian.tar.xz
Feb 20 21:55:04 Files removed: lxc_4.0.6-2+deb11u1.debian.tar.xz
Feb 20 21:55:04 > rm --searchdirs lxc_4.0.6-2+deb11u1_source.buildinfo
Feb 20 21:55:04 Files removed: lxc_4.0.6-2+deb11u1_source.buildinfo

Regards,

Adam

Bug#1014190: RM: golang-github-gorilla-pat -- RoQA; Upstream discontinued; orphaned for a long time

[Shengjing Zhu]

Package: ftp.debian.org
Severity: normal
X-Debbugs-Cc: z...@debian.org


Hi,

This package's upstream repository https://github.com/gorilla/pat has archived.
Please remove it from Debian archive.

Bug#1014189: devhelp: can't launch DevHelp GUI

[Tim McConnell]

Package: devhelp
Version: 41.2-2
Severity: grave
Justification: renders package unusable
X-Debbugs-Cc: tmcconnell...@gmail.com

Dear Maintainer,

What led up to the situation?Attempt to launch Dev Help from Icon or via
command line.

What exactly did you do (or not do) that was effective (or ineffective)?Attempt
to use the program: Ineffective it fails.

What was the outcome of this action?From Icon nothing happened and program
fails to launch. typing devhelp in command line gives this:
devhelp

(devhelp:735030): devhelp-WARNING **: 12:46:14.787: The file
'file:///usr/share/gtk-doc/html/gtk-faq/gtk-faq.devhelp' uses the Devhelp index
file format version 1, which is deprecated. A future version of Devhelp may
remove the support for the format version 1. The index file should be ported to
the Devhelp index file format version 2.

(devhelp:735030): devhelp-WARNING **: 12:46:14.811: The file
'file:///usr/share/gtk-doc/html/gtk-tutorial/gtk-tutorial.devhelp' uses the
Devhelp index file format version 1, which is deprecated. A future version of
Devhelp may remove the support for the format version 1. The index file should
be ported to the Devhelp index file format version 2.

(devhelp:735030): devhelp-WARNING **: 12:46:14.839: The file
'file:///usr/share/gtk-doc/html/gtkglext/gtkglext.devhelp.gz' uses the Devhelp
index file format version 1, which is deprecated. A future version of Devhelp
may remove the support for the format version 1. The index file should be
ported to the Devhelp index file format version 2.

(devhelp:735030): devhelp-WARNING **: 12:46:15.306: The file
'file:///usr/share/devhelp/books/python3.10/python3.10.devhelp.gz' uses the
Devhelp index file format version 1, which is deprecated. A future version of
Devhelp may remove the support for the format version 1. The index file should
be ported to the Devhelp index file format version 2.
bwrap: Creating new namespace failed: No space left on device
 and still doesn't launch.

What outcome did you expect instead? To be able to use the program.



-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.18.0-2-rt-amd64 (SMP w/1 CPU thread; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages devhelp depends on:
ii  libc6 2.33-7
ii  libdevhelp-3-641.2-2
ii  libglib2.0-0  2.72.2-2
ii  libgtk-3-03.24.34-1
ii  libpango-1.0-01.50.7+ds-1
ii  libwebkit2gtk-4.0-37  2.36.3-1
ii  python3   3.10.4-1+b1

Versions of packages devhelp recommends:
ii  libglib2.0-doc   2.72.2-2
ii  libgtk-3-doc 3.24.34-1
ii  libpango1.0-doc  1.50.7+ds-1

devhelp suggests no packages.

-- no debconf information

Bug#993796: bullseye-pu: package knot-resolver/5.3.1-1

[Adam D. Barratt]

On Fri, 2021-12-03 at 16:59 +0100, Julien Cristau wrote:
> Control: tag -1 confirmed
> 
> On Mon, Sep 06, 2021 at 04:21:15PM +, Jakub Ružička wrote:
> > [ Reason ]
> > Fixing bug #991463 (CVE-2021-40083) - potential DoS.
[...]
> Feel free to go ahead and upload, thank you.

Ping?

Regards,

Adam

Bug#1014188: bubblewrap: attempt to launch a prgram and get bwrap: Creating new namespace failed: No space left on device

[Tim McConnell]

Package: bubblewrap
Version: 0.6.2-1
Severity: important
X-Debbugs-Cc: tmcconnell...@gmail.com

Dear Maintainer,

Attempt to launch Epiphany or DevHelp from a command line and receive this
error:
"bwrap: Creating new namespace failed: No space left on device"

I have no idea why it shows I've use 36.1 GiB of 91.1GiB of disk space, I
should have room?
If I click on the Icon for either program it doesn't even appear to do anything
at all.


-- Package-specific info:
Permissions of /usr/bin/bwrap:
-rwxr-xr-x 1 root root 67984 May 11 09:07 /usr/bin/bwrap
/etc/sysctl.d/*-bubblewrap.conf:
cat: '/etc/sysctl.d/*-bubblewrap.conf': No such file or directory
/usr/lib/sysctl.d/50-bubblewrap.conf:
# Enable unprivileged creation of new user namespaces in older Debian
# kernels.
#
# If this is not desired, copy this file to
# /etc/sysctl.d/50-bubblewrap.conf and change the value of this parameter
# to 0, then use dpkg-statoverride to make /usr/bin/bwrap setuid root.
#
# For more details see https://deb.li/bubblewrap or
# /usr/share/doc/bubblewrap/README.Debian
kernel.unprivileged_userns_clone=1
/proc/sys/kernel/unprivileged_userns_clone:
1
/proc/sys/user/max_cgroup_namespaces:
27347
/proc/sys/user/max_ipc_namespaces:
27347
/proc/sys/user/max_mnt_namespaces:
27347
/proc/sys/user/max_net_namespaces:
27347
/proc/sys/user/max_pid_namespaces:
27347
/proc/sys/user/max_time_namespaces:
27347
/proc/sys/user/max_user_namespaces:
0
/proc/sys/user/max_uts_namespaces:
27347

-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.18.0-2-rt-amd64 (SMP w/1 CPU thread; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages bubblewrap depends on:
ii  libc62.33-7
ii  libcap2  1:2.44-1
ii  libselinux1  3.4-1

Versions of packages bubblewrap recommends:
ii  procps  2:3.3.17-7+b1

bubblewrap suggests no packages.

-- no debconf information

Bug#1012553: bullseye-pu: package apache2/2.4.54-1~deb11u1

[Adam D. Barratt]

Control: tags -1 + confirmed

On Thu, 2022-06-09 at 09:16 +0200, Yadd wrote:
> Apache2 2.4.54 fixes several security issues:
>  * moderate: mod_proxy_ajp: Possible request smuggling (CVE-2022-
> 26377)
>Inconsistent Interpretation of HTTP Requests ('HTTP Request
> Smuggling')
>vulnerability in mod_proxy_ajp of Apache HTTP Server allows an
> attacker
>to smuggle requests to the AJP server it forwards requests to.
>  * low: read beyond bounds in mod_isapi (CVE-2022-28330)
>  * low: read beyond bounds via ap_rwrite() (CVE-2022-28614)
>  * low: Read beyond bounds in ap_strcmp_match() (CVE-2022-28615)
>  * low: Denial of service in mod_lua r:parsebody (CVE-2022-29404)
>  * low: mod_sed denial of service (CVE-2022-30522)
>  * low: Information Disclosure in mod_lua with websockets (CVE-2022-
> 30556)
>  * low: mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
> (CVE-2022-31813)
> 

Please go ahead, bearing in mind that the window for getting uploads
into the 11.4 point release closes during this weekend.

Regards,

Adam

Bug#1013632: [Pkg-raspi-maintainers] Bug#1013632: bullseye-pu: package raspi-firmware/1.20210303+ds-3

[Adam D. Barratt]

Hi Cyril,

On Fri, 2022-06-24 at 14:56 +0200, Cyril Brulebois wrote:
> I'll follow up with an updated patch once I've performed some more
> testing.

Did you have chance to look at that yet? I realise that the above
message was only a week ago, I'm just wondering if we might be looking
at this for 11.4 still, as uploads for that close during this weekend.

Regards,

Adam

Bug#1010203: bullseye-pu: package bind9/1:9.16.28-1~deb11u1

[Adam D. Barratt]

Control: tags -1 + confirmed

On Tue, 2022-04-26 at 11:00 +0200, Ondřej Surý wrote:
> New upstream version update, the upstream CHANGES are:
> 
> --- 9.16.28 released ---
> 
[...]
> FTR I am BIND 9 packager and upstream at the same time.  There were
> no reports
> of regressions from the users using BIND 9.16.28 from ISC provided
> packages or
> compiled from source.

Sorry for the delay in getting to this.

Please go ahead, bearing in mind that the window for getting uploads
into the 11.4 point release closes during this weekend.

Regards,

Adam

Bug#1008166: bullseye-pu: package debian-edu-config/2.11.56+deb11u4

[Adam D. Barratt]

Control: tags -1 + confirmed

On Wed, 2022-03-23 at 12:33 +, Mike Gabriel wrote:
> Hi again,
> 
> On  Mi 23 Mär 2022 13:19:54 CET, Mike Gabriel wrote:
> 
> > [ Tests ]
> > (What automated or manual tests cover the affected code?)
> 
> I forgot to mention the nature of the performed tests. All code  
> changes were tested in the field on at least 2 sometimes 3 Debian
> Edu  
> production sites.
> 
> All resolved problems were problems that were encountered in the
> field  
> on one of my production Debian Edu 11 setups. The solutions / bug  
> fixes were first developed and tested on-premise. Once the wanted  
> functionality was achieved, the changes were provided for Debian
> Edu  
> testing/unstable and then backported to 2.11.56+deb11u4 of  
> debian-edu-config. The on-premise solutions were then removed and  
> replaced by preview versions of debian-edu-config 2.11.56+deb11u4
> and  
> tested again.
> 

Sorry for not getting to this sooner.

Please go ahead, bearing in mind that the window for getting fixes into
11.4 closes this weekend.

Regards,

Adam

Bug#1014187: fruit: Binary file inside package

[Marcos Talau]

Package: fruit
Version: 2.1.dfsg-9
Severity: serious
Justification: Policy 2.1

Dear Maintainer,

The fruit package comes with a binary file named `book_small.bin'. This
binary file does not have a source code.

Discussion about this can be found on debian-legal [1].

[1] https://lists.debian.org/debian-legal/2022/06/threads.html#6


Best Regards,
mt

Bug#1014186: blueman: leaves stray "Connected" and "Disconnected" popup windows

[Celejar]

Package: blueman
Version: 2.2.5-1
Severity: normal

Blueman leaves stray "Connected" and "Disconnected" popup windows, with
no buttons or obvious means of dismissal, on my desktop. I have attached
an example.

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.18.0-2-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages blueman depends on:
ii  adwaita-icon-theme42.0-2
ii  bluez 5.64-2
ii  bluez-obexd   5.64-2
ii  dbus  1.14.0-1
ii  dbus-user-session [default-dbus-session-bus]  1.14.0-1
ii  dconf-gsettings-backend [gsettings-backend]   0.40.0-3
ii  gir1.2-ayatanaappindicator3-0.1   0.5.91-1
ii  gir1.2-gdkpixbuf-2.0  2.42.8+dfsg-1
ii  gir1.2-glib-2.0   1.72.0-1+b1
ii  gir1.2-gtk-3.03.24.34-1
ii  gir1.2-nm-1.0 1.38.2-1
ii  gir1.2-pango-1.0  1.50.7+ds-1
ii  libbluetooth3 5.64-2
ii  libc6 2.33-7
ii  libpulse-mainloop-glib0   15.0+dfsg1-4+b1
ii  librsvg2-common   2.54.4+dfsg-1
ii  notification-daemon   3.20.0-4+b1
ii  policykit-1   0.105-33
ii  python3   3.10.4-1+b1
ii  python3-cairo 1.20.1-3
ii  python3-gi3.42.1-1
ii  python3-gi-cairo  3.42.1-1

Versions of packages blueman recommends:
ii  pulseaudio-module-bluetooth  15.0+dfsg1-4+b1

blueman suggests no packages.

-- no debconf information

Bug#1014185: blueman: please add an "Always deny" button to the authentication popup window

[Celejar]

Package: blueman
Version: 2.2.5-1
Severity: wishlist

I have connected a bluetooth headset to my system, to use as an output
device. It works, but I keep getting "Authorization request" popup
windows from "Bluetooth Authentication" for "Service: Phonebook Access
(PBAP) - PSE". My device doesn't need phonebook access, so I keep
clicking "Deny," but while that dismisses the popup, it keeps coming back
every minutes or two. This is really annoying - it interrupts my
workflow, and the popup steals focus suddenly from whatever I'm doing.
There is an "Always accept" button, so I suggest the addition of an
"Always deny" button.

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.18.0-2-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages blueman depends on:
ii  adwaita-icon-theme42.0-2
ii  bluez 5.64-2
ii  bluez-obexd   5.64-2
ii  dbus  1.14.0-1
ii  dbus-user-session [default-dbus-session-bus]  1.14.0-1
ii  dconf-gsettings-backend [gsettings-backend]   0.40.0-3
ii  gir1.2-ayatanaappindicator3-0.1   0.5.91-1
ii  gir1.2-gdkpixbuf-2.0  2.42.8+dfsg-1
ii  gir1.2-glib-2.0   1.72.0-1+b1
ii  gir1.2-gtk-3.03.24.34-1
ii  gir1.2-nm-1.0 1.38.2-1
ii  gir1.2-pango-1.0  1.50.7+ds-1
ii  libbluetooth3 5.64-2
ii  libc6 2.33-7
ii  libpulse-mainloop-glib0   15.0+dfsg1-4+b1
ii  librsvg2-common   2.54.4+dfsg-1
ii  notification-daemon   3.20.0-4+b1
ii  policykit-1   0.105-33
ii  python3   3.10.4-1+b1
ii  python3-cairo 1.20.1-3
ii  python3-gi3.42.1-1
ii  python3-gi-cairo  3.42.1-1

Versions of packages blueman recommends:
ii  pulseaudio-module-bluetooth  15.0+dfsg1-4+b1

blueman suggests no packages.

-- no debconf information

Bug#1014098: gcc-12 ftbfs on hppa

[John David Anglin]

This bug is not a gcc-12 bug.  It is a kernel cache flush or mmap aliasing 
issue causing corruption
of anonymous pages.

Bug is random and only seen on PA8800/PA8900 machines.

Latest gcc-12 package is now installed.

--
John David Anglin  dave.ang...@bell.net

Bug#1012386: python-seqcluster: FTBFS: ModuleNotFoundError: No module named 'attr'

[Bastian Germann]

Control: notfound -1 python-seqcluster/1.2.8+ds-2
Control: close -1

This was obviously an issue in myst_parser module which is not part of 
python-seqcluster.
It is already fixed, so the FTBFS is as well.

Bug#897138: O: anacron -- cron-like program that doesn't go by time

[Bastian Germann]

Hi Lance,

Your first attempt at this was removed because of a QA upload with the same 
version.
That automation on mentors is sometimes not very intelligent.

Do you want to pursue becoming the anacron maintainer? If not please reset this 
to orphan.

Thanks,
Bastian

Bug#1014184: Please drop golang-context-dev from Build-Depends

[Shengjing Zhu]

Source: snapd
Version: 2.54.3-1
Severity: important
X-Debbugs-Cc: z...@debian.org

Hi,

I intend to remove golang-context from archive, and snapd doesn't
need this legacy library at all. Please remove golang-context-dev
from Build-Depends.

Thanks.

Bug#1014180: src:boost1.74: Cleanup code of boost::asio causes crashes with OpenSSL 3+

[Gianfranco Costamagna]

Hello Hilko
On Fri, 01 Jul 2022 18:03:10 +0200 Hilko Bengen  wrote:

Source: boost1.74
Version: 1.74.0-16
Severity: grave
Tags: patch, upstream
X-Debbugs-Cc: Hilko Bengen 

Dear Maintainer,

I recently received #1013470 (nbdkit FTBFS because of segfaults when
running test suite); this turned out to be caused by #1013931 (segfault
in libtorrent-rasterbar cleanup code), I was able to track the root
cause to an incomplete #ifdef condition in
libs/asio/include//boost/asio/ssl/detail/impl/openssl_init.ipp as of
1.74.0-16 that caused CONF_modules_unload to crash after OpenSSL 3.0+
had done its own cleanup which included calling that function.

(See discussion in .)

Please apply upstream's patch
.

After applying this patch, and rebuilding boost1.74 +
libtorrent-rasterbar, I am no longer able to reproduce the sagfaults.


I found the very same issue on cpprest and websocketpp but I couldn't go deeper 
into asio code and find the patch.

I merged the other bugs to this one, but I don't know how many others are there.

We should NMU ASAP.

G.

Bug#1013472: reassign to openssl package

[Gianfranco Costamagna]

control: reassign -1 src:boost1.74
control: found -1 1.74.0-16
control: forcemerge -1 1014180
control: affects -1 cpprest
control: affects -1 websocketpp

G.

Bug#1014183: golang-github-openshift-imagebuilder FTBFS due to unlisted dependency

[William 'jawn-smith' Wilson]

Package: golang-github-openshift-imagebuilder
Severity: important
Tags: patch
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu kinetic ubuntu-patch

Dear Maintainer,

golang-github-openshift-imagebuilder FTBFS due to
golang-github-docker-distribution-dev not being
listed as a dependency in d/control. It should
also be listed as a runtime dependency to avoid
build failures in other packages that depend on
this package.

In Ubuntu, the attached patch was applied to achieve the following:


  * d/control: Add golang-github-docker-distribution-dev as a
dependency to resolve FTBFS


Thanks for considering the patch.


-- System Information:
Debian Release: bookworm/sid
  APT prefers kinetic
  APT policy: (500, 'kinetic')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.15.0-27-generic (SMP w/32 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
diff -Nru golang-github-openshift-imagebuilder-1.2.3+ds1/debian/control 
golang-github-openshift-imagebuilder-1.2.3+ds1/debian/control
--- golang-github-openshift-imagebuilder-1.2.3+ds1/debian/control   
2022-05-18 21:04:00.0 -0500
+++ golang-github-openshift-imagebuilder-1.2.3+ds1/debian/control   
2022-07-01 10:52:36.0 -0500
@@ -8,6 +8,7 @@
golang-any,
golang-github-containerd-containerd-dev,
golang-github-containers-storage-dev (>= 1.11),
+   golang-github-docker-distribution-dev,
golang-github-docker-docker-dev (>= 18.09.3+dfsg1),
golang-github-fsouza-go-dockerclient-dev,
golang-github-opencontainers-image-spec-dev,
@@ -50,6 +51,7 @@
 Depends: ${misc:Depends},
  golang-github-containerd-containerd-dev,
  golang-github-containers-storage-dev (>> 1.11),
+ golang-github-docker-distribution-dev,
  golang-github-docker-docker-dev (>> 18.09.3+dfsg1),
  golang-github-fsouza-go-dockerclient-dev,
  golang-github-opencontainers-image-spec-dev,

Bug#1014181: bash-completions and bug script assume $XDG_CONFIG_DIR is set

[Ben Hutchings]

On Fri, 2022-07-01 at 18:10 +0200, Ben Hutchings wrote:
> Package: dput
> Version: 1.1.1
> Severity: normal
> 
> The bash-completion script looks for $XDG_CONFIG_DIR/dput/dput.cf but
> should use ${XDG_CONFIG_DIR:-$HOME/.config}/dput/dput.cf.

s/XDG_CONFIG_DIR/XDG_CONFIG_HOME/g

Ben.

-- 
Ben Hutchings
Never put off till tomorrow what you can avoid all together.


signature.asc
Description: This is a digitally signed message part

Bug#1014182: bug script fails

[Ben Hutchings]

Package: dput
Version: 1.1.1
Severity: important

The last command in the bug script is "dput --print", which no longer
works and exits with return code 64.  This becomes the exit code of
the bug script itself, causing reportbug to suggest cancelling the bug
report:

Gathering additional data, this may take a while...
cat: /dput/dput.cf: No such file or directory
cat: /home/ben/.dput.cf: No such file or directory

-- Configuration parsed by ‘dput’ --
The package bug script /usr/share/bug/dput/script exited with an error 
status (return code = 16384). Do you still want to file a report [y|N|q|?]?

Ben.

-- Package-specific info:

-- /etc/dput.cf --
# Example dput.cf that defines the host that can be used
# with dput for uploading.

[DEFAULT]
login   = *
method  = ftp
hash= md5
allow_unsigned_uploads  = 0
allow_dcut  = 0
run_lintian = 0
run_dinstall= 0
check_version   = 0
scp_compress= 0
post_upload_command =
pre_upload_command  =
passive_ftp = 1
default_host_main   =
allowed_distributions   = (?!UNRELEASED)

[ftp-master]
fqdn= ftp.upload.debian.org
incoming= /pub/UploadQueue/
login   = anonymous
allow_dcut  = 1
method  = ftp
# Please, upload your package to the proper archive
# 
https://www.debian.org/doc/manuals/developers-reference/pkgs.html#bug-security-upload
allowed_distributions   = (?!UNRELEASED|.*-security)

# https://lists.debian.org/debian-project/2009/05/msg00036.html
[ftp-eu]
fqdn= ftp.eu.upload.debian.org
method  = ftp
incoming= /pub/UploadQueue/
login   = anonymous
allow_dcut  = 1
# Please, upload your package to the proper archive
# 
https://www.debian.org/doc/manuals/developers-reference/pkgs.html#bug-security-upload
allowed_distributions   = (?!UNRELEASED|.*-security)

# https://lists.debian.org/debian-devel-announce/2008/09/msg7.html
[ssh-upload]
login   = *
# login = another_username
fqdn= ssh.upload.debian.org
method  = scp
incoming= /srv/upload.debian.org/UploadQueue/
allow_dcut  = 1
# Please, upload your package to the proper archive
# 
https://www.debian.org/doc/manuals/developers-reference/pkgs.html#bug-security-upload
allowed_distributions   = (?!UNRELEASED|.*-security)

# And if you want to override one of the defaults, add it here.
# For example, comment out the next line
# post_upload_command   = /path/to/some/script
# pre_upload_command= /path/to/some/script

[security-master]
fqdn= ftp.security.upload.debian.org
method  = ftp
incoming= /pub/SecurityUploadQueue
login   = anonymous
allow_dcut  = 1
# This has been added at the request of the security team.
# Please be sure to know what you are doing before taking it out.
pre_upload_command  = /usr/share/dput/helper/security-warning

[security-master-unembargoed]
fqdn= ftp.security.upload.debian.org
method  = ftp
incoming= /pub/OpenSecurityUploadQueue
login   = anonymous
allow_dcut  = 1
# This has been added at the request of the security team.
# Please be sure to know what you are doing before taking it out.
pre_upload_command  = /usr/share/dput/helper/security-warning

[ubuntu]
fqdn= upload.ubuntu.com
method  = ftp
incoming= /
login   = anonymous

[ppa]
fqdn= ppa.launchpad.net
method  = ftp
# replace  with your Launchpad ID
incoming= ~/ubuntu
login   = anonymous

[mentors]
method  = ftp
fqdn= mentors.debian.net
incoming= /pub/UploadQueue
login   = anonymous

[local]
method  = local
incoming= ~/public_html/debian/mini-dinstall/incoming
run_dinstall= 0
post_upload_command = /usr/bin/mini-dinstall --batch


# Local variables:
# coding: utf-8
# mode: conf
# End:
# vim: fileencoding=utf-8 filetype=config :

-- /dput/dput.cf --

-- /home/ben/.dput.cf --
No package or host has been provided, see dput -h

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'oldstable-updates'), (500, 
'unstable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.18.0-2-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of 

Bug#1014181: bash-completions and bug script assume $XDG_CONFIG_DIR is set

[Ben Hutchings]

Package: dput
Version: 1.1.1
Severity: normal

The bash-completion script looks for $XDG_CONFIG_DIR/dput/dput.cf but
should use ${XDG_CONFIG_DIR:-$HOME/.config}/dput/dput.cf.

While making this report, I found that the bug script has the same
bug.

Ben.

-- Package-specific info:

-- /etc/dput.cf --
# Example dput.cf that defines the host that can be used
# with dput for uploading.

[DEFAULT]
login   = *
method  = ftp
hash= md5
allow_unsigned_uploads  = 0
allow_dcut  = 0
run_lintian = 0
run_dinstall= 0
check_version   = 0
scp_compress= 0
post_upload_command =
pre_upload_command  =
passive_ftp = 1
default_host_main   =
allowed_distributions   = (?!UNRELEASED)

[ftp-master]
fqdn= ftp.upload.debian.org
incoming= /pub/UploadQueue/
login   = anonymous
allow_dcut  = 1
method  = ftp
# Please, upload your package to the proper archive
# 
https://www.debian.org/doc/manuals/developers-reference/pkgs.html#bug-security-upload
allowed_distributions   = (?!UNRELEASED|.*-security)

# https://lists.debian.org/debian-project/2009/05/msg00036.html
[ftp-eu]
fqdn= ftp.eu.upload.debian.org
method  = ftp
incoming= /pub/UploadQueue/
login   = anonymous
allow_dcut  = 1
# Please, upload your package to the proper archive
# 
https://www.debian.org/doc/manuals/developers-reference/pkgs.html#bug-security-upload
allowed_distributions   = (?!UNRELEASED|.*-security)

# https://lists.debian.org/debian-devel-announce/2008/09/msg7.html
[ssh-upload]
login   = *
# login = another_username
fqdn= ssh.upload.debian.org
method  = scp
incoming= /srv/upload.debian.org/UploadQueue/
allow_dcut  = 1
# Please, upload your package to the proper archive
# 
https://www.debian.org/doc/manuals/developers-reference/pkgs.html#bug-security-upload
allowed_distributions   = (?!UNRELEASED|.*-security)

# And if you want to override one of the defaults, add it here.
# For example, comment out the next line
# post_upload_command   = /path/to/some/script
# pre_upload_command= /path/to/some/script

[security-master]
fqdn= ftp.security.upload.debian.org
method  = ftp
incoming= /pub/SecurityUploadQueue
login   = anonymous
allow_dcut  = 1
# This has been added at the request of the security team.
# Please be sure to know what you are doing before taking it out.
pre_upload_command  = /usr/share/dput/helper/security-warning

[security-master-unembargoed]
fqdn= ftp.security.upload.debian.org
method  = ftp
incoming= /pub/OpenSecurityUploadQueue
login   = anonymous
allow_dcut  = 1
# This has been added at the request of the security team.
# Please be sure to know what you are doing before taking it out.
pre_upload_command  = /usr/share/dput/helper/security-warning

[ubuntu]
fqdn= upload.ubuntu.com
method  = ftp
incoming= /
login   = anonymous

[ppa]
fqdn= ppa.launchpad.net
method  = ftp
# replace  with your Launchpad ID
incoming= ~/ubuntu
login   = anonymous

[mentors]
method  = ftp
fqdn= mentors.debian.net
incoming= /pub/UploadQueue
login   = anonymous

[local]
method  = local
incoming= ~/public_html/debian/mini-dinstall/incoming
run_dinstall= 0
post_upload_command = /usr/bin/mini-dinstall --batch


# Local variables:
# coding: utf-8
# mode: conf
# End:
# vim: fileencoding=utf-8 filetype=config :

-- /dput/dput.cf --

-- /home/ben/.dput.cf --
No package or host has been provided, see dput -h

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'oldstable-updates'), (500, 
'unstable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.18.0-2-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dput depends on:
ii  python33.10.4-1+b1
ii  python3-debian 0.1.44
ii  python3-gpg1.17.1-4
ii  python3-pkg-resources  59.6.0-1.2
ii  python3-xdg0.27-2

dput recommends no packages.

Versions of packages dput suggests:
ii  lintian 2.115.2
pn  mini-dinstall   
ii  openssh-client  1:9.0p1-1+b1
ii  rsync  

Bug#1005720: [debian-mysql] Bug#1005720: mysql-8.0: FTBFS with OpenSSL 3.0

[Robie Basak]

On Fri, Jul 01, 2022 at 05:45:12PM +0200, Bastian Germann wrote:
> Lena, please tag the changelog entries accordingly, at least for RC bugs so 
> they do not keep the package from migrating.

Note that mysql-8.0 is permanently blocked from migrating by order of
the release team. They want MariaDB in testing to the exclusion of
MySQL. The maintainers would prefer to have both, but the release team
overrode that.

We will continue fixing bugs against the MySQL packaging, but with no
expectation that it will ever migrate.


signature.asc
Description: PGP signature

Bug#1014180: src:boost1.74: Cleanup code of boost::asio causes crashes with OpenSSL 3+

[Hilko Bengen]

Source: boost1.74
Version: 1.74.0-16
Severity: grave
Tags: patch, upstream
X-Debbugs-Cc: Hilko Bengen 

Dear Maintainer,

I recently received #1013470 (nbdkit FTBFS because of segfaults when
running test suite); this turned out to be caused by #1013931 (segfault
in libtorrent-rasterbar cleanup code), I was able to track the root
cause to an incomplete #ifdef condition in
libs/asio/include//boost/asio/ssl/detail/impl/openssl_init.ipp as of
1.74.0-16 that caused CONF_modules_unload to crash after OpenSSL 3.0+
had done its own cleanup which included calling that function.

(See discussion in .)

Please apply upstream's patch
.

After applying this patch, and rebuilding boost1.74 +
libtorrent-rasterbar, I am no longer able to reproduce the sagfaults.

Cheers,
-Hilko

Bug#1010974: Plans to backport to bullseye

[Bastian Germann]

X-Debbugs-Cc: ond...@debian.org

On Tue, 21 Jun 2022 13:59:54 +0100 Henri Cook  wrote:

Are there any plans to backport this fix to bullseye?


That would be interesting. Ondřej, I guess you are the only Berkeley DB Team 
member.
Please consider filing a RFH for this package. The NMU count is now at 10 for 
the current release!

Bug#1004180: [debian-mysql] Bug#1004180: mysql-8.0: should mysql-8.0 be removed from unstable?

[Bastian Germann]

On Mon, 24 Jan 2022 13:42:29 + Robie Basak  wrote:

FWIW, we started a renewed effort to catch up and stay caught up - for
example I cherry-picked a fix to the master branch in Salsa recently,
and further picks from Ubuntu to catch up security-wise should be coming
soon.

So hopefully we'll be doing much better soon.


#853008 blocks mysql-8.0 from migrating to testing.
If you want to stay true to your promise you might want to have a look at that.

Bug#1005720: mysql-8.0: FTBFS with OpenSSL 3.0

[Bastian Germann]

Control: fixed -1 8.0.29-1
X-Debbugs-Cc: Lena Voytek 

The issue has obviously been fixed with 8.0.29-1.
Lena, please tag the changelog entries accordingly, at least for RC bugs so 
they do not keep the package from migrating.

Bug#1010052: mysql-8.0 FTBFS: error: ‘size_t’ has not been declared

[Bastian Germann]

Control: fixed -1 8.0.28-1

The issue has obviously been fixed with that upload, maybe in an earlier 
version that was not released in Debian.

Bug#1014106: RM: rust-common-failures -- ROM; needs removed rust-failure

[Peter Michael Green]

I just uploaded new package rust-common-failures now sitting in NEW, but
then realized that rust-failure which it depends on is removed from
Debian (see bug#973298).

Please drop rust-common-failures from NEW queue - it is useless.

This is not entirely correct, rust-failure was indeed removed
from unstable, but it was re-instated the next day.

Bug#1004016: pipewire 0.3.43 upgrade automatically selects broken profile

[Alexander Clausen]

Hi Dylan,

On 4/14/22 10:53, Dylan Aïssi wrote:
> Is this issue still present with latest pipewire/wireplumber versions?
> If yes, can you report it to the upstream devs?

It seems that the issue is kind-of fixed: the "Pro Audio" profile is
still selected, but it now works and is selectable as a default input
device. Feel free to close this bug.

Thanks,

Alexander

Bug#1014179: pytango FTBFS on IPV6-only buildds

[Adrian Bunk]

Source: pytango
Version: 9.3.4-2
Severity: serious
Tags: ftbfs

https://buildd.debian.org/status/fetch.php?pkg=pytango=all=9.3.4-2=1656689069=0

...
def get_host_ip():
"""Get the primary external host IP.

This is useful because an explicit IP is required to get
tango events to work properly. Note that localhost does not work
either.
"""
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
# Connecting to a UDP address doesn't send packets
>   s.connect(('8.8.8.8', 0))
E   OSError: [Errno 101] Network is unreachable
...

Bug#1000744: (no subject)

[Luis Guzman]

Hello,

Has this report been confirmed as a bug?

I've been able to replicate the same behavior on ubuntu's downstream
armhf and arm64 using 1:27.1+1-3ubuntu5 with the same error.

Passing the nocheck profile to sbuild did not help much.

Regards.

--
Luis

Bug#1014079: wireless-regdb 2022.04.08-2~deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1014079 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: wireless-regdb
Version: 2022.04.08-2~deb11u1

Explanation: 

Bug#1014054: node-got 11.8.1+~cs53.13.17-3+deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1014054 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: node-got
Version: 11.8.1+~cs53.13.17-3+deb11u1

Explanation: don't allow redirection to Unix socket [CVE-2022-33987]

Bug#1014014: usb.ids 2022.05.20-0+deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1014014 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: usb.ids
Version: 2022.05.20-0+deb11u1

Explanation: new upstream release; update included data

Bug#1013944: cyrus-imapd 3.2.6-2+deb11u2 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1013944 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: cyrus-imapd
Version: 3.2.6-2+deb11u2

Explanation: ensure that all mailboxes have a "uniqueid" field, fixing upgrades 
to version 3.6

Bug#1013755: ganeti 3.0.2-1~deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1013755 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: ganeti
Version: 3.0.2-1~deb11u1

Explanation: new upstream release; fix several upgrade issues; fix live 
migration with QEMU 4 and "security_model" of "user" or "pool"

Bug#1009250: fribidi 1.0.8-2+deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1009250 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: fribidi
Version: 1.0.8-2+deb11u1

Explanation: fix buffer overflow issues [CVE-2022-25308 CVE-2022-25309]; fix 
crash [CVE-2022-25310]

Bug#1012033: gnutls28 3.7.1-5+deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1012033 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: gnutls28
Version: 3.7.1-5+deb11u1

Explanation: fix SSSE3 SHA384 miscalculation; fix null pointer deference issue 
[CVE-2021-4209]

Bug#1010304: freetype 2.10.4+dfsg-1+deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1010304 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: freetype
Version: 2.10.4+dfsg-1+deb11u1

Explanation: fix buffer overflow issue [CVE-2022-27404]; fix crashes 
[CVE-2022-27405 CVE-2022-27406]

Bug#1013418: dbus-broker 26-1+deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1013418 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: dbus-broker
Version: 26-1+deb11u1

Explanation: fix buffer overflow issue [CVE-2022-31212]

Bug#1013306: libsdl2 2.0.14+dfsg2-3+deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1013306 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: libsdl2
Version: 2.0.14+dfsg2-3+deb11u1

Explanation: avoid out-of-bounds read while loading malformed BMP file 
[CVE-2021-33657], and during YUV to RGB conversion

Bug#1013237: phpmyadmin 5.0.4+dfsg2-2+deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1013237 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: phpmyadmin
Version: 5.0.4+dfsg2-2+deb11u1

Explanation: fix some SQL queries generating a server error

Bug#1012140: docker.io 20.10.5+dfsg1-1+deb11u2 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1012140 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: docker.io
Version: 20.10.5+dfsg1-1+deb11u2

Explanation: order docker.service after containerd.service to fix shutdown of 
containers; explicitly pass the containerd socket path to dockerd to make sure 
it doesn't start containerd on its own

Bug#1012047: composer 2.0.9-2+deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1012047 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: composer
Version: 2.0.9-2+deb11u1

Explanation: fix code injection issue [CVE-2022-24828]; update GitHub token 
pattern

Bug#1004580: logrotate 3.18.0-2+deb11u1 flagged for acceptance

[Adam D Barratt]

package release.debian.org
tags 1004580 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==

Package: logrotate
Version: 3.18.0-2+deb11u1

Explanation: skip locking if state file is world-readable [CVE-2022-1348]; make 
configuration parsing stricter in order to avoid parsing foreign files such as 
core dumps

Bug#969147: aubio-tools: FTBFS with doxygen 1.8.19

[Debian/GNU]

hi.

On Fri, 28 Aug 2020 10:05:16 +0200 Paolo Greppi  
wrote:

Package: aubio-tools
Version: 0.4.9-4+b1
Severity: normal

Dear Maintainer,

while rebuilding the build dependencies of doxygen with the upcoming doxygen 
1.8.19 
(https://salsa.debian.org/debian/doxygen/-/wikis/ratt_doxygen_1.8.19-1_amd64-partial)
 this package FTBFS.


i'm not able to reproduce this (anymore?).
currently Debian/unstable ships with doxygen_1.9.1-2 (so way beyond 
1.8.19), and aubio is still at 0.4.9-4(.2), although there have been two 
unrelated NMUs in the meantime.
in any case, aubio builds nicely (and it does not pull in 'graphviz' via 
some other dependency)


i'm also unsure why thisbug report has been filed against "aubio-tools" 
which is a binary package: if it FTBFS, a report against "src:aubio" 
would have been more appropriate.

maybe this bug has been filed against the wrong package?

mfdsa
IOhannes




This is the error:

sh: 1: dot: not found
error: Problems running dot: exit code=127, command='dot', 
arguments='"/<>/doc/web/html/graph_legend.dot" -Tpng -o 
"/<>/doc/web/html/graph_legend.png"'

This should be pretty easy to fix: just add graphviz to the build deps.

Paolo
   
-- System Information:

Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.7.0-1-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages aubio-tools depends on:
ii  libaubio5 0.4.9-4+b1
ii  libc6 2.31-3
ii  libjack-jackd2-0 [libjack-0.125]  1.9.14~dfsg-0.1
ii  python3   3.8.2-3
ii  python3-aubio 0.4.9-4+b1

aubio-tools recommends no packages.

aubio-tools suggests no packages.

-- no debconf information

Bug#1014178: autopkgtest: System state isn't reset between tests (test result depends on earlier tests)

[Guilhem Moulin]

Package: autopkgtest
Version: 5.22
Severity: important

Dear Maintainer,

While running two tests with autopkgtest-build-qemu I was surprised to
see the database created from the first one not being wiped before
running the other test.

$ cat debian/tests/control
Test-Command: date -R | tee /dev/shm/stamp 
Depends: coreutils

Test-Command: date -R && cat /dev/shm/stamp 
Depends: coreutils

$ autopkgtest /tmp/coreutils_8.32-4.1_amd64.deb ./ -- schroot 
sid-amd64-sbuild
[…]
autopkgtest [16:47:12]: test command1: date -R | tee /dev/shm/stamp
autopkgtest [16:47:12]: test command1: [---
Fri, 01 Jul 2022 14:47:12 +
autopkgtest [16:47:12]: test command1: ---]
autopkgtest [16:47:12]: test command1:  - - - - - - - - - - results - - - - 
- - - - - -
command1 PASS
autopkgtest [16:47:12]: test command2: preparing testbed
[…]
autopkgtest [16:47:16]: test command2: date -R && cat /dev/shm/stamp
autopkgtest [16:47:16]: test command2: [---
Fri, 01 Jul 2022 14:47:16 +
Fri, 01 Jul 2022 14:47:12 +
autopkgtest [16:47:16]: test command2: ---]
autopkgtest [16:47:16]: test command2:  - - - - - - - - - - results - - - - 
- - - - - -
command2 PASS
autopkgtest [16:47:16]:  summary
command1 PASS
command2 PASS

With autopkgtest-build-qemu, the VM isn't rebooted and files created by
some autopkgtest are also accessible by subsequent tests in the same
autopkgtest(1) invocation.

$ cat debian/tests/control
Test-Command: uptime -s && date -R | tee /dev/shm/stamp /stamp
Depends: coreutils, procps
Restrictions: needs-root

Test-Command: uptime -s && date -R && cat /dev/shm/stamp /stamp 
Depends: coreutils, procps
Restrictions: needs-root

$ autopkgtest /tmp/coreutils_8.32-4.1_amd64.deb ./ -- qemu 
--overlay-dir=/dev/shm /tmp/debian-unstable.img
[…]
autopkgtest [16:49:47]: test command1: uptime -s && date -R | tee 
/dev/shm/stamp /stamp
autopkgtest [16:49:47]: test command1: [---
2022-07-01 14:49:18
Fri, 01 Jul 2022 14:49:47 +
autopkgtest [16:49:48]: test command1: ---]
autopkgtest [16:49:48]: test command1:  - - - - - - - - - - results - - - - 
- - - - - -
command1 PASS
autopkgtest [16:49:49]: test command2: preparing testbed
[…]
autopkgtest [16:49:59]: test command2: uptime -s && date -R && cat 
/dev/shm/stamp /stamp
autopkgtest [16:49:59]: test command2: [---
2022-07-01 14:49:18
Fri, 01 Jul 2022 14:49:58 +
Fri, 01 Jul 2022 14:49:47 +
Fri, 01 Jul 2022 14:49:47 +
autopkgtest [16:49:59]: test command2: ---]
autopkgtest [16:50:00]: test command2:  - - - - - - - - - - results - - - - 
- - - - - -
command2 PASS
autopkgtest [16:50:00]:  summary
command1 PASS
command2 PASS

Granted the documentation says nothing about state reset/preservation,
but shouldn't each test run a clean environment?  Otherwise the tests
might succeed when run separately but fail in a single autopkgtest
invocation.  (This was indeed the case for me: a test broke due to a
leftover database created during an earlier test, but each test passed
just fine in isolation.)

Thanks for maintaining autopkgtest!
-- 
Guilhem.


signature.asc
Description: PGP signature

Bug#1014177: qemu-user-static: QEMU aarch64 user mode emulation always segfaults

[Jörn Heusipp]

Package: qemu-user-static
Version: 1:7.0+dfsg-7
Severity: important
X-Debbugs-Cc: osm...@problemloesungsmaschine.de

Dear Maintainer,

I am using QEMU user mode emulation to test my software on non-amd64 
architectures. I have qemu-user-static and binfmt-support installed so that I 
can run foreign binaries seamlessly.

On Debian Testing with QEMU 7, aarch64 user mode emulation always segfaults:
```
manx@appendix:~/tmp$ cat nothing.c
int main() {
return 0;
}
manx@appendix:~/tmp$ aarch64-linux-gnu-gcc -std=c18 -O3 -Wall -Wextra 
-Wpedantic nothing.c
manx@appendix:~/tmp$ ./a.out
qemu: uncaught target signal 11 (Segmentation fault) - core dumped
Segmentation fault
manx@appendix:~/tmp$
```

Other architectures like s390x work fine:
```
manx@appendix:~/tmp$ s390x-linux-gnu-gcc -std=c18 -O3 -Wall -Wextra -Wpedantic 
nothing.c
manx@appendix:~/tmp$ ./a.out
manx@appendix:~/tmp$
```

Static linking does not help:
```
manx@appendix:~/tmp$ aarch64-linux-gnu-gcc -std=c18 -O3 -Wall -Wextra 
-Wpedantic -static nothing.c
manx@appendix:~/tmp$ ./a.out
qemu: uncaught target signal 11 (Segmentation fault) - core dumped
Segmentation fault
manx@appendix:~/tmp$
```

relevant versions:
```
manx@appendix:~/tmp$ aarch64-linux-gnu-gcc --version
aarch64-linux-gnu-gcc (Debian 11.3.0-3) 11.3.0
Copyright (C) 2021 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
manx@appendix:~/tmp$ qemu-aarch64-static --version
qemu-aarch64 version 7.0.0 (Debian 1:7.0+dfsg-7)
Copyright (c) 2003-2022 Fabrice Bellard and the QEMU Project developers
manx@appendix:~/tmp$
```

QEMU aarch64 user mode emulation works fine on Debian 11 Bullseye with QEMU 5.2.

Thanks,
Jörn


-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armel, s390x, armhf, arm64, ppc64el

Kernel: Linux 5.18.0-2-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

qemu-user-static depends on no packages.

Versions of packages qemu-user-static recommends:
ii  binfmt-support  2.2.2-1
ii  systemd 251.2-7

qemu-user-static suggests no packages.

-- no debconf information

Bug#1014176: sslh: please package new upstream release

[KenichiroMATOHARA]

Package: sslh
Version: 1.20-1
Severity: wishlist

Dear Maintainer,

Upstream sslh 1.22c seems to support UDP.
It would be useful for Debian.
https://www.rutschle.net/tech/sslh/download.html

Thanks.


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armhf, arm64

Kernel: Linux 5.18.0-1-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=ja_JP.UTF-8, LC_CTYPE=ja_JP.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Bug#1014175: warning: cannot run debian/readme check on package binary:postgresql-15_15~beta2-2+salsaci_amd64

[Christoph Berg]

Package: lintian
Version: 2.115.2
Severity: normal

Hi,

Lintian is currently failing in salsa-ci on postgresql-15:

https://salsa.debian.org/postgresql/postgresql/-/jobs/2941498

lintian --suppress-tags "${SALSA_CI_LINTIAN_SUPPRESS_TAGS}" --display-info 
--pedantic ${SALSA_CI_LINTIAN_FAIL_ARG} --allow-root 
${SALSA_CI_LINTIAN_SHOW_OVERRIDES_ARG} ${WORKING_DIR}/*.changes | tee 
lintian.output || ECODE=$?
Warning in processable 
/builds/postgresql/postgresql/debian/output/postgresql-15_15~beta2-2+salsaci_amd64.deb:
 Cannot open 
/tmp/lintian-pool-WqVHVEiN6s/postgresql-15/postgresql-15_15~beta2-2+salsaci_amd64_binary/unpacked/usr/share/doc/postgresql-15/README.Debian.gz
 at /usr/share/lintian/lib/Lintian/Check/Debian/Readme.pm line 109.
warning: cannot run debian/readme check on package 
binary:postgresql-15_15~beta2-2+salsaci_amd64
skipping check of binary:postgresql-15_15~beta2-2+salsaci_amd64
W: postgresql-15-dbgsym: unknown-field Postgresql-Catversion
[...]

Christoph

Bug#1014174: ITP: node-rollup-plugin-typescript2 -- rollup plugin for typescript with compiler errors

[Yadd]

Package: wnpp
Severity: wishlist
Owner: Yadd 
X-Debbugs-Cc: debian-de...@lists.debian.org

* Package name: node-rollup-plugin-typescript2
  Version : 0.32.1
  Upstream Author : Eugene Zolenko 
* URL : https://github.com/ezolenko/rollup-plugin-typescript2
* License : Expat
  Programming Lang: JavaScript
  Description : rollup plugin for typescript with compiler errors

rollup-plugin-typescript2 is a rewrite of legacy
rollup-plugin-typescript. This version is somewhat slower than original,
but it will print out typescript syntactic and semantic diagnostic messages
(the main reason for using typescript after all).

Debian has already node-rollup-plugin-typescript which provides both
legacy rollup-plugin-typescript and @rollup/plugin-typescript. However
it is sometimes hard to patch upstream code to switch from them to
rollup-plugin-typescript2 because these project diverged.

This package will be maintained under JS Team umbrella.

Bug#1014173: p7zip: Please kindly update to new upstream version

[Roger Shimizu]

Source: p7zip
Version: 16.02+dfsg-8
Severity: wishlist

Dear Maintainer,

https://www.7-zip.org/sdk.html

Upstream has release quite a few releases, some are very interesting:

21.07: Some minor changes and fixes.
21.06: The bug in LZMA encoding function was fixed.
21.03 beta: LZMA dicrionary up to 4 GB. Speed optimizations.
21.02 alpha: macOS and Linux support. Speed optimizations.
19.00: Encryption strength for 7z archives was increased.
18.06: Some speed optimiztions in LZMA/LZMA2 code.
18.05: Some speed optimiztions in LZMA/LZMA2 code.
18.01: Some changes in LZMA2/xz multithreading code for compressing.
Some bugs were fixed.

Latest 22.00 was just out a few weeks ago, I'm not sure whether it's
stable or not.
But 21.07 should be stable enough to package.

Cheers,
--
Roger Shimizu, GMT +9 Tokyo
PGP/GPG: 4096R/6C6ACD6417B3ACB1

Bug#1014163: gdal: libgdal-perl seems to have silently disappeared

[Jonas Smedegaard]

Quoting Sebastiaan Couwenberg (2022-07-01 14:42:38)
> tags 1014163 wontfix
> thanks
> 
> On 7/1/22 14:11, Jonas Smedegaard wrote:
> > I just noticed that the binary package libgdal-perl is no longer provided
> > in Debian testing or unstable.
> 
> GDAL 3.5 removed the Perl bindings, see:
> 
>   https://gdal.org/development/rfc/rfc84_cmake.html#swig-bindings
> 
> > There seems to be no mention in changelog of dropping that package, so I
> > wonder if it was deliberate (and if so I recommend to retroactively add
> > mention of it to changelog.
> 
> Searching elsewhere you'll find:
> 
>   https://lists.debian.org/debian-gis/2021/04/msg4.html
> 
> "
>   - Perl bindings are deprecated. Removal planned for GDAL 3.5.
> Use Geo::GDAL::FFI instead
> "
> https://github.com/OSGeo/gdal/blob/v3.5.0/MIGRATION_GUIDE.TXT#L47
> 
> libgdal-perl has no votes in popcon for quite a while, I'm surprised it 
> affects you.
> 
> If you need Perl bindings for GDAL, consider packaging Geo::GDAL::FFI.

It is not that I (strongly) need the library, only that I wonder where
it went and whether it was accidental or deliberate.

Thanks for sharing the detals of why the Perl bindings was dropped.

Please consider adding something like the below to the appropriate
changelog entry:

  * Drop binary package libgdal-perl: abandoned upstream

That will help others in similar situation as me, wondering where the
package went and looking in packaging changelog for a clue.

(yes, it is perfectly fine to edit past changelog entries)


Kind regards,

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

signature.asc
Description: signature

Bug#1014172: plakativ: pymupdf 1.20 compatibility

[Bastian Germann]

Source: plakativ
Severity: important

Hi josch,

Can you please update plakativ to use the upstream API changes for pymupdf 
1.19.0 and later?
They are needed for pymupdf 1.20 compatiblity and lack of them makes 
autopkgtests fail right now.

As you are the upstream I guess you will make a new upstream release with the 
changes included.

Thanks,
Bastian

Bug#1014171: O: gnuit -- GNU Interactive Tools, a file browser/viewer and process viewer/killer

[Mattia Rizzolo]

Package: wnpp

The current maintainer of gnuit, Ian Beckwith ,
has retired; also, the co-maintainer MJ Ray (Debian)  is
inactive.
Therefore, I orphan this package now.

Maintaining a package requires time and skills. Please only adopt this
package if you will have enough time and attention to work on it.

If you want to be the new maintainer, please see
https://www.debian.org/devel/wnpp/#howto-o for detailed
instructions how to adopt a package properly.

Some information about this package:

Package: gnuit
Binary: gnuit
Version: 4.9.5-3
Maintainer: Ian Beckwith 
Uploaders: MJ Ray (Debian) 
Build-Depends: libncurses-dev, libreadline-dev, texinfo, debhelper (>= 6), 
autotools-dev
Architecture: any
Standards-Version: 3.8.3
Format: 1.0
Files:
 199684725d1f7ebcd7724b0b3cf5e75b 1218 gnuit_4.9.5-3.dsc
 6b88eea39361ead2ad48b33b17a870f5 894362 gnuit_4.9.5.orig.tar.gz
 27210e0f1f5fe5449b25ee2cb018c1a0 12793 gnuit_4.9.5-3.diff.gz
Vcs-Browser: http://git.savannah.gnu.org/gitweb/?p=gnuit.git
Vcs-Git: git://git.savannah.gnu.org/gnuit.git
Checksums-Sha256:
 adaa6d917402050b49b85ad563a2426736e23527c87e65c84f844a472373b75a 1218 
gnuit_4.9.5-3.dsc
 6b6e96db13bafa5ad35c735b2277699d4244088c709a3e134fb1a3e8c8a8557c 894362 
gnuit_4.9.5.orig.tar.gz
 85bf05a526c99a2d172fb6bf7f89276aa3d10f63109f95cdb43a78209adb7e21 12793 
gnuit_4.9.5-3.diff.gz
Homepage: http://www.gnu.org/software/gnuit/
Directory: pool/main/g/gnuit
Priority: source
Section: utils

Package: gnuit
Source: gnuit (4.9.5-3)
Version: 4.9.5-3+b3
Installed-Size: 1246
Maintainer: Ian Beckwith 
Architecture: amd64
Depends: libc6 (>= 2.17), libtinfo6 (>= 6)
Suggests: xdg-utils
Description: GNU Interactive Tools, a file browser/viewer and process 
viewer/killer
Description-md5: c4ab7066d6551e3d3830aa94838f8fcf
Homepage: http://www.gnu.org/software/gnuit/
Tag: role::program, uitoolkit::ncurses
Section: utils
Priority: optional
Filename: pool/main/g/gnuit/gnuit_4.9.5-3+b3_amd64.deb
Size: 256304
MD5sum: ef76662573d3b89368869132a311b8c2
SHA256: ac822aac6da04b664c4b1e595eaf1e4da9c9f19c9c9401cac7859c5ebf0ea948


-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
More about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature

Bug#1014170: O: surfraw -- fast unix command line interface to WWW

[Mattia Rizzolo]

Package: wnpp

The current maintainers of surfraw, Christian Surchi
 and Ian Beckwith ,
either retired or are inactive.
Therefore, I orphan this package now.

Maintaining a package requires time and skills. Please only adopt this
package if you will have enough time and attention to work on it.

If you want to be the new maintainer, please see
https://www.debian.org/devel/wnpp/#howto-o for detailed
instructions how to adopt a package properly.

Some information about this package:

Package: surfraw
Binary: surfraw, surfraw-extra
Version: 2.3.0-0.3
Maintainer: Debian surfraw maintainers 
Uploaders: Christian Surchi , Ian Beckwith 
Build-Depends: debhelper (>= 11~), bash-completion
Architecture: all
Standards-Version: 4.2.1
Format: 3.0 (quilt)
Files:
 b73862d3b2be9eefc1aa5a69fac3e661 2245 surfraw_2.3.0-0.3.dsc
 6f771c5f23d4a06913142996461d7f59 205557 surfraw_2.3.0.orig.tar.gz
 0f64664ca8dc5a988723b5e48bcc01cb 376 surfraw_2.3.0.orig.tar.gz.asc
 3d02f2cb0af7697093c777d45da1ca5b 13480 surfraw_2.3.0-0.3.debian.tar.xz
Vcs-Browser: https://salsa.debian.org/debian/surfraw
Vcs-Git: https://salsa.debian.org/debian/surfraw.git
Checksums-Sha256:
 4303af1cc7c226dffc0c98b663eb59e601ab39508c4b9ffaddf193cfe1cab15c 2245 
surfraw_2.3.0-0.3.dsc
 ad0420583c8cdd84a31437e59536f8070f15ba4585598d82638b950e5c5c3625 205557 
surfraw_2.3.0.orig.tar.gz
 6dfeb09c11a72c7b42aabfacda031997d19265ce045c70b3898e9af94157 376 
surfraw_2.3.0.orig.tar.gz.asc
 ce068fde6e8fb20595f7022680c33c52c9e02551999740c55b1810373555f62f 13480 
surfraw_2.3.0-0.3.debian.tar.xz
Homepage: http://gitlab.com/Surfraw/surfraw
Package-List: 
 surfraw deb web optional arch=all
 surfraw-extra deb web optional arch=all
Directory: pool/main/s/surfraw
Priority: source
Section: web


-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
More about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature

Bug#1014169: rinutils FTBFS

[William Wilson]

Package: rinutils
Version: 0.10.0-1
Severity: high

Dear Maintainer,

rinutils is currently FTBFS due to some missing cmake modules:

```
CMake Warning at cmake/shlomif_common_bootstrap.cmake:7 (MESSAGE):
  Could not find Shlomif_Common.cmake - you can find it here:
  https://github.com/shlomif/shlomif-cmake-modules ; trying to download it
  for you.
Call Stack (most recent call first):
  CMakeLists.txt:4 (INCLUDE)

CMake Error at CMakeLists.txt:5 (SHLOMIF_COMMON_SETUP):
  Unknown CMake command "SHLOMIF_COMMON_SETUP"
```
These cmake modules do not appear to be packaged anywhere in Debian. Since
the builds are done without internet access, the build will continue to
fail until these modules are packaged and added as a dependency to rinutils.

Thank you,

William

Bug#1014164: synaptic: 'Supported' column icon is now giant - too large for space allowed

[Michael Vogt]

Hey,

thanks for your bugreport. I mostly did not change things except for a rebuild 
so I wonder what is going on. Could you please try to move the /root/.synaptic 
folder (temporary) away and start with a fresh profile to see if that also 
shows the problem?

Thanks,
  Michael

On Fri, Jul 1, 2022, at 14:23, Steven Zalek wrote:
> Package: synaptic
> Version: 0.91.1
> Severity: minor
> X-Debbugs-Cc: zalek.ste...@gmail.com
>
> Dear Maintainer,
>
> What led up to the situation >> Updated the application to version 0.91.1
>
> The 'Supported' column icons now appear to be about double the original size.
> It is not possible to resize the column with to show the full icon symbol. The
> new icon size also affects the row height, which now appears to be taller.
>
>
> -- System Information:
> Debian Release: bookworm/sid
>   APT prefers testing
>   APT policy: (800, 'testing'), (500, 'unstable'), (200, 'experimental')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 5.18.0-2-amd64 (SMP w/16 CPU threads; PREEMPT)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not 
> set
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
>
> Versions of packages synaptic depends on:
> ii  hicolor-icon-theme   0.17-2
> ii  libapt-pkg6.02.5.0
> ii  libc62.33-7
> ii  libept1.6.0  1.2.1
> ii  libgcc-s112.1.0-2
> ii  libgdk-pixbuf-2.0-0  2.42.8+dfsg-1
> ii  libglib2.0-0 2.72.2-2
> ii  libgtk-3-0   3.24.34-1
> ii  libpango-1.0-0   1.50.7+ds-1
> ii  libstdc++6   12.1.0-2
> ii  libvte-2.91-00.68.0-1+b1
> ii  libxapian30  1.4.18-4
> ii  policykit-1  0.105-33
>
> Versions of packages synaptic recommends:
> ii  libgtk3-perl  0.038-1
> ii  xdg-utils 1.1.3-4.1
>
> Versions of packages synaptic suggests:
> pn  apt-xapian-index 
> ii  deborphan1.7.35
> pn  dwww 
> pn  software-properties-gtk  
> ii  tasksel  3.69+rebuild
>
> -- no debconf information

-- 
  Michael Vogt
  michaelv...@imap.cc

Bug#950919: cura: AMFReader plugin not loadable due to missing python3-trimesh

[M G Berberich]

Package: cura
Version: 5.0.0-1
Followup-For: Bug #950919

Dear Maintainer,

can confirm this bug for 5.0.0-1

-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.18.5 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), 
LANGUAGE=de:nds:en_GB:en_US
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages cura depends on:
ii  cura-engine  1:5.0.0-1
ii  fdm-materials5.0.0-1
ii  fonts-open-sans  1.11-2
ii  python3  3.10.4-1+b1
ii  python3-certifi  2020.6.20-1
ii  python3-charon   4.13.0-1
ii  python3-cryptography 3.4.8-2
ii  python3-keyring  23.5.1-1
ii  python3-pynest2d 5.0.0-1
ii  python3-pyqt66.3.1-1
ii  python3-requests 2.27.1+dfsg-1
ii  python3-savitar  5.0.0-1
ii  python3-sentry-sdk   1.6.0-1
ii  python3-serial   3.5-1
ii  python3-shapely  1.8.0-1+b1
ii  python3-uranium  5.0.0-1
ii  qml6-module-qt-labs-folderlistmodel  6.2.4+dfsg-6
ii  qml6-module-qtqml-workerscript   6.2.4+dfsg-6
ii  qml6-module-qtquick-controls 6.2.4+dfsg-6
ii  qml6-module-qtquick-dialogs  6.2.4+dfsg-6
ii  qml6-module-qtquick-layouts  6.2.4+dfsg-6
ii  qml6-module-qtquick-templates6.2.4+dfsg-6
ii  qml6-module-qtquick-window   6.2.4+dfsg-6
ii  qt6-qpa-plugins  6.2.4+dfsg-8
ii  uranium-plugins  5.0.0-1

Versions of packages cura recommends:
ii  python3-zeroconf  0.38.7-1

cura suggests no packages.

-- no debconf information

Bug#1013310: jsonnet: FTBFS on several release architectures

[Bastian Germann]

Am 01.07.22 um 11:44 schrieb Daichi Fukui:

Hello Bastian,

Thanks for reporting this.
And apologies for a late reply.

To address this FTBFS issue, I uploaded the following changes to s 
alsa.

   * fix FTBFS on several release architectures
   * fix FTBFS error on armel
   * Remove mipsel, mips64el, s390x as build target

For further information, kindly visit the following URL:
https://salsa.debian.org/dfukui/jsonnet/-/commits/debian/0.18.0+ds-2 





Please first read and address my comments on
https://mentors.debian.net/package/jsonnet/


If you don't mind, I would appreciate it if you sponsor and help me upload this 
package.
The following are some technical comments.

According to the original source code [0], c4core does not support the 
following CPU architectures:
s390x, mipsel, mips64el
Thus, we should drop these ones from the Architecture field on d/control.

Meanwhile, debugbreak should have been successfully built by falling back to raising SIGTRAP [1] for several 
architectures, but build fails due to a bug in upstream.
This issue has already been addressed [2], so a patch [3] was created and added to d/patches based on upstream. In a 
similar story, I fixed FTBFS on armel and filed a patch [4].


Thanks for reading.

[0] https://github.com/biojppm/c4core/blob/52f3ff57b287ce57c2bbf80dc091bd21e4d9f977/src/c4/cpu.hpp 

[1] 
https://github.com/google/jsonnet/blob/v0.18.0/third_party/rapidyaml/rapidyaml/ext/c4core/src/c4/ext/debugbreak/debugbreak.h#L123 

[2] https://github.com/scottt/debugbreak/commit/8b4a755e76717103adc814c0c05ceb3b91befa7d 

[3] https://salsa.debian.org/dfukui/jsonnet/-/commit/1bea08d549c450b8c9624e686df88f025e1d3d5c 

[4] https://salsa.debian.org/dfukui/jsonnet/-/commit/efb346e3ec210104897c38979291ab68e1eead73 



Best,
Fukui

Bug#1014168: lzma: Maybe merge with src:p7zip which shares the same upstream

[Roger Shimizu]

Source: lzma
Version: 9.22-2.2
Severity: normal

Dear Maintainer,

I'm not sure whether you aware that src:lzma shares the same upstream
with src:p7zip:
- https://sourceforge.net/projects/p7zip

I know src:lzma has longer history than src:p7zip, but it has not been
updated for too long time (10+ years). And now there's no accessible
git repository on salsa / github for src:lzma.
BTW. Previous collab-maint archive is still here:
- https://alioth-archive.debian.org/git/collab-maint/lzma.git.tar.xz

Condition of src:p7zip is a bit better, the version in unstable is
16.02, which was initially uploaded on 2016, 6 years ago.
And there's git repo on salsa for src:p7zip:
- https://salsa.debian.org/debian/p7zip

I think maintaining both packages is not necessary, and hope can either
one to update to the latest upstream verion, 22.00.

Thank you!

Cheers,
--
Roger Shimizu, GMT +9 Tokyo
PGP/GPG: 4096R/6C6ACD6417B3ACB1