Bug#928300: shim-signed: secure boot via removable media path unavailable
Package: shim-signed Severity: normal Dear Maintainer, on my up to date buster system I have installed shim-signed and grub-efi- amd64-singed and their dependencies as described on https://wiki.debian.org/SecureBoot/Testing. However, booting with secure boot option on (in firmware) is not possible. I strongly belive that the reason for that is my buggy UEFI implementation on my Intel board, as many people may have: I need to use the removable media path, as the debian installer provides the option. (see https://wiki.debian.org/UEFI#Force_grub- efi_installation_to_the_removable_media_path) Using only grub (without secure boot) this works well, and I can trigger that by dpkg-reconfigure grub-efi-amd64 and using the option force-efi-extra- removable true option. I see no option to do something similar with shim-signed and its companions. Unfortunately, manually cloning shimx64.efi to /boot/efi/EFI/BOOTX64.EFI and copying the rest of the /boot/efi/EFI/debian directory does not help. And, however, this would also be a todo after all packet updates... Thanks, Chris -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.19.0-4-amd64 (SMP w/8 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages shim-signed depends on: ii debconf [debconf-2.0] 1.5.71 ii grub-efi-amd64-bin 2.02+dfsg1-16 ii grub2-common 2.02+dfsg1-16 pn mokutil pn shim-helpers-amd64-signed Versions of packages shim-signed recommends: pn secureboot-db shim-signed suggests no packages.
Bug#908022: xemacs21: xemacs is not in testing/buster repo any more
Package: xemacs21 Severity: normal Dear Maintainer, today 9/5/18 'apt-get dist-upgrade' automatically removed xemacs (xemacs21, xemacs21-bin, ...) automatically from my buster/testing system. Further, necessary packages seem to be not in the repositories any more, such that xemacs can be installed anew. $ apt-cache search xemacs21 xemacs21-basesupport - Editor and kitchen sink -- compiled elisp support files xemacs21-basesupport-el - Editor and kitchen sink -- source elisp support files xemacs21-mulesupport - Editor and kitchen sink -- Mule elisp support files xemacs21-mulesupport-el - Editor and kitchen sink -- source elisp support files However, xemacs21 is listed for sid/unstable in https://packages.debian.org/search?keywords=xemacs21, but not for buster/testing Thanks, Chris -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.17.0-3-amd64 (SMP w/8 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled
Bug#907301: plasma-desktop: no system tray whith task bar and no context menu of desktop
Package: plasma-desktop Version: 4:5.13.4-1 Severity: normal Dear Maintainer, after updating my testing/buster installation (a libvirt vm) on Saturday August 25th, plasma-workspace and plasma-workspace were updated from 5.13.2 to 5.13.4 together with many of their dependencies. Now I have no system tray area (containing sound, update, clipboard, ... icons) any more in the task bar panel. However, the clock is displayed as always. Further, a right click on the empty desktop does not show the context menu any more. Adding the add-on/plasmoid "system tray" (sorry for the naming, I only see the German name "Systemabschnitt der Kontrollleiste") is also not possible, i.e., clicking on it in the chooser side bar does nothing. The chooser shows this add-on as not installed. Logging in with a new test user delivers a desktop without showing a task bar at all. Thanks, Chris -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.17.0-3-amd64 (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de:en_US (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages plasma-desktop depends on: ii breeze 4:5.13.4-1 ii kactivitymanagerd5.13.4-1 ii kde-cli-tools4:5.13.4-1 ii kded55.47.0-1 ii kio 5.47.0-1 ii kpackagetool55.47.0-1 ii libappstreamqt2 0.12.2-2 ii libc62.27-5 ii libcanberra0 0.30-6 ii libfontconfig1 2.13.0-5 ii libfreetype6 2.8.1-2 ii libgcc1 1:8.2.0-4 ii libkf5activities55.47.0-1 ii libkf5activitiesstats1 5.49.0-1 ii libkf5archive5 5.47.0-1 ii libkf5auth5 5.47.0-1 ii libkf5baloo5 5.47.0-1 ii libkf5codecs55.47.0-1 ii libkf5completion55.47.0-1 ii libkf5configcore55.47.0-1 ii libkf5configgui5 5.47.0-1 ii libkf5configwidgets5 5.47.0-1 ii libkf5coreaddons55.47.0-1 ii libkf5dbusaddons55.47.0-1 ii libkf5declarative5 5.47.0-1 ii libkf5emoticons-bin 5.47.0-1 ii libkf5emoticons5 5.47.0-1 ii libkf5globalaccel-bin5.47.0-1 ii libkf5globalaccel5 5.47.0-1 ii libkf5guiaddons5 5.47.0-1 ii libkf5i18n5 5.47.0-1 ii libkf5iconthemes55.47.0-1 ii libkf5itemmodels55.47.0-1 ii libkf5itemviews5 5.47.0-1 ii libkf5jobwidgets55.47.0-1 ii libkf5kcmutils5 5.47.0-1 ii libkf5kdelibs4support5 5.47.0-1 ii libkf5kiocore5 5.47.0-1 ii libkf5kiofilewidgets55.47.0-1 ii libkf5kiowidgets55.47.0-1 ii libkf5newstuff5 5.47.0-1 ii libkf5notifications5 5.47.0-1 ii libkf5notifyconfig5 5.47.0-1 ii libkf5package5 5.47.0-1 ii libkf5parts5 5.47.0-1 ii libkf5people55.47.0-1 ii libkf5peoplewidgets5 5.47.0-1 ii libkf5plasma55.47.0-1 ii libkf5plasmaquick5 5.47.0-1 ii libkf5quickaddons5 5.47.0-1 ii libkf5runner55.47.0-1 ii libkf5service-bin5.47.0-1 ii libkf5service5 5.47.0-1 ii libkf5solid5 5.47.0-1 ii libkf5sonnetui5 5.47.0-1 ii libkf5wallet-bin 5.47.0-1 ii libkf5wallet55.47.0-1 ii libkf5widgetsaddons5 5.47.0-1 ii libkf5windowsystem5 5.47.0-1 ii libkf5xmlgui55.47.0-1+b1 ii libkfontinst54:5.13.4-1 ii libkfontinstui5 4:5.13.4-1 ii libkworkspace5-5 4:5.13.4-1 ii libphonon4qt5-4 4:4.10.1-1 ii libpulse-mainloop-glib0 12.0-1 ii libpulse012.0-1 ii libqt5concurrent55.11.1+dfsg-6 ii libqt5core5a 5.11.1+dfsg
Bug#878169: apt-cacher-cleanup.pl removes all packages not only old ones
Package: apt-cacher Version: 1.7.15 Severity: important Dear Maintainer, executing /usr/share/apt-cacher/apt-cacher-cleanup.pl manually (or automatically by /etc/crond/apt-cacher) removes all deb-packages from /var/cache/apt-cacher, even if there is no newer versions in the debian repositories. According to the documentation and to the used behavior some timne ago, the newest packages should be left untouched. Thx, Chris -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.12.0-2-amd64 (SMP w/8 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de:en_US (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages apt-cacher depends on: ii debconf1.5.63 ii ed 1.10-2.1 ii libdpkg-perl 1.18.24 ii libfilesys-df-perl 0.92-6+b3 ii libio-interface-perl 1.09-1+b4 ii libipc-shareable-perl 0.61-1 ii libnetaddr-ip-perl 4.079+dfsg-1+b2 ii libsys-syscall-perl0.25-6 ii libwww-curl-perl 4.17-4+b2 ii libwww-perl6.15-2 ii lsb-base 9.20170808 ii perl 5.26.0-8 ii ucf3.0036 ii update-inetd 4.44 Versions of packages apt-cacher recommends: ii libberkeleydb-perl0.55-1+b4 ii libio-compress-lzma-perl 2.074-1 Versions of packages apt-cacher suggests: pn libfreezethaw-perl ii libio-socket-inet6-perl 2.72-2 -- debconf information: * apt-cacher/mode: daemon
Bug#866823: samba: does not follow symbolic links
Package: samba Version: 2:4.6.5+dfsg-2 Severity: important Dear Maintainer, setting the option follow symlinks = Yes does not allow to follow symlinks. My (simplified) setup to reconstruct the faulty behavior is as follows. $ cat /etc/samba/smb.conf [global] workgroup = WG netbios name = Sauron follow symlinks = Yes ;wide links = Yes ;allow insecure wide links = Yes [share] path = /tmp $ cd /tmp $ mkdir mydir $ touch mydir/myfile.txt $ ln -s mydir mydirlink Then clicking on mydirlink in Windows Explorer shows an error message instead of listing its content. After enabling the two commented out lines in smb.conf (and restartiing samba) eliminates the problem. However, this is insecure and should not be necessary. Many thanks, Chris -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-3-amd64 (SMP w/8 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages samba depends on: ii adduser 3.115 ii dpkg 1.18.24 ii init-system-helpers 1.48 ii libattr1 1:2.4.47-2+b2 ii libbsd0 0.8.5-1 ii libc62.24-12 ii libldb1 2:1.1.29-2 ii libpam-modules 1.1.8-3.6 ii libpam-runtime 1.1.8-3.6 ii libpopt0 1.16-10+b2 ii libpython2.7 2.7.13-2 ii libtalloc2 2.1.9-2 ii libtdb1 1.3.13-2 ii libtevent0 0.9.31-1 ii libwbclient0 2:4.6.5+dfsg-2 ii lsb-base 9.20161125 ii procps 2:3.3.12-3 ii python 2.7.13-2 ii python-dnspython 1.15.0-1 ii python-samba 2:4.6.5+dfsg-2 ii python2.72.7.13-2 ii samba-common 2:4.6.5+dfsg-2 ii samba-common-bin 2:4.6.5+dfsg-2 ii samba-libs 2:4.6.5+dfsg-2 ii tdb-tools1.3.13-2 ii update-inetd 4.44 Versions of packages samba recommends: ii attr1:2.4.47-2+b2 ii logrotate 3.11.0-0.1 ii samba-dsdb-modules 2:4.6.5+dfsg-2 ii samba-vfs-modules 2:4.6.5+dfsg-2 Versions of packages samba suggests: ii bind9 1:9.10.3.dfsg.P4-12.3 ii bind9utils 1:9.10.3.dfsg.P4-12.3 pn ctdb pn ldb-tools pn ntp | chrony pn smbldap-tools pn ufw pn winbind -- no debconf information
Bug#836436: plasma-desktop: KDE 5.6.5/stretch upgrade on Spetember 2nd makes system tray icons invisible
Package: plasma-desktop Version: 4:5.6.5-1 Severity: normal Dear Maintainer, after a dist-upgrade on September 2nd of my stretch installation, the system tray of KDE 5.6.5 does not show any icons. More precisely, it seams that they are there, however only the background color of the panel is shown. One may see tooltips and trigger the context menues with right click. A left click or double click does nothing, i.e. does not start the volume mixer of plasma-pa (after guessing the right mouse position). The menu of the black up arrow operates as desired and shows some of the tray icons. Thanks, Chris -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.6.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages plasma-desktop depends on: ii breeze 4:5.7.0-1 ii kactivitymanagerd5.7.0-1 ii kde-cli-tools4:5.7.0-1 ii kded55.25.0-1 ii kio 5.25.0-1 ii libc62.23-5 ii libcanberra0 0.30-3 ii libfontconfig1 2.11.0-6.7 ii libgcc1 1:6.1.1-11 ii libkf5activities55.25.0-1 ii libkf5activitiesexperimentalstats1 4:5.6.5-1 ii libkf5archive5 5.25.0-1 ii libkf5auth5 5.25.0-1 ii libkf5baloo5 5.25.0-1 ii libkf5bookmarks5 5.25.0-1 ii libkf5codecs55.25.0-1 ii libkf5completion55.25.0-1 ii libkf5configcore55.25.0-1 ii libkf5configgui5 5.25.0-1 ii libkf5configwidgets5 5.25.0-1 ii libkf5coreaddons55.25.0-1 ii libkf5dbusaddons55.25.0-1 ii libkf5emoticons-bin 5.25.0-1 ii libkf5emoticons5 5.25.0-1 ii libkf5globalaccel5 5.25.0-1 ii libkf5guiaddons5 5.25.0-1 ii libkf5i18n5 5.25.0-1 ii libkf5iconthemes55.25.0-1 ii libkf5itemmodels55.25.0-1 ii libkf5itemviews5 5.25.0-1 ii libkf5jobwidgets55.25.0-1 ii libkf5kcmutils5 5.25.0-1 ii libkf5kdelibs4support5 5.25.0-1 ii libkf5kiocore5 5.25.0-1 ii libkf5kiofilewidgets55.25.0-1 ii libkf5kiowidgets55.25.0-1 ii libkf5newstuff5 5.25.0-1 ii libkf5notifications5 5.25.0-1 ii libkf5notifyconfig5 5.25.0-1 ii libkf5parts5 5.25.0-1 ii libkf5people55.25.0-1 ii libkf5peoplewidgets5 5.25.0-1 ii libkf5plasma55.25.0-1 ii libkf5plasmaquick5 5.25.0-1 ii libkf5quickaddons5 5.25.0-1 ii libkf5runner55.25.0-1 ii libkf5service-bin5.25.0-1 ii libkf5service5 5.25.0-1 ii libkf5solid5 5.25.0-1 ii libkf5sonnetui5 5.25.0-1 ii libkf5wallet-bin 5.25.0-1 ii libkf5wallet55.25.0-1 ii libkf5widgetsaddons5 5.25.0-1 ii libkf5windowsystem5 5.25.0-1 ii libkf5xmlgui55.25.0-1 ii libkfontinst54:5.6.5-1 ii libkfontinstui5 4:5.6.5-1 ii libkworkspace5-5 4:5.6.5.1-1 ii libphonon4qt5-4 4:4.9.0-4 ii libpulse-mainloop-glib0 9.0-2 ii libpulse09.0-2 ii libqt5concurrent55.6.1+dfsg-3+b1 ii libqt5core5a 5.6.1+dfsg-3+b1 ii libqt5dbus5 5.6.1+dfsg-3+b1 ii libqt5gui5 5.6.1+dfsg-3+b1 ii libqt5network5 5.6.1+dfsg-3+b1 ii libqt5printsupport5 5.6.1+dfsg-3+b1 ii libqt5qml5 5.6.1-5 ii libqt5quick5 5.6.1-5 ii libqt5quickwidgets5 5.6.1-5 ii libqt5sql5 5.6.1+dfsg-3+b1 ii libqt5svg5 5.6.1-2 ii libqt5widgets5 5.6.1+dfsg-
Bug#821159: apt-cacher: apt-get reports "Sorry, not allowed to fetch that type of file: icons-64x64.tar.gz"
Package: apt-cacher Version: 1.7.12 Severity: important Dear Maintainer, executing apt-get udate with apt-cacher proxy enabled in apt config under debian testing delivers error messages like Sorry, not allowed to fetch that type of file: icons-64x64.tar.gz After commenting out apt-cacher proxy in the config, apt-get udate and apt-get dist-upgrade works as desired. Then after enabling apt-cacher again, apt-get runs as desired again. However, I believe only as long to the next necessary download of icons-64x64.tar.gz or similar. I had this behavior now twice. I am not the only one: http://askubuntu.com/questions/751271/regexp-config-var-for-apt-cacher-to- allow-repo-files-for-16-04-clients-metadata $ cat /etc/apt/sources.list: deb http://ftp.de.debian.org/debian/ testing main contrib non-free deb-src http://ftp.de.debian.org/debian/ testing main contrib non-free deb http://security.debian.org/ testing/updates main contrib non-free deb-src http://security.debian.org/ testing/updates main contrib non-free $ cat /etc/apt/apt.conf.d/01proxy Acquire::http::proxy "http://betty.q3x.local:3142";; $ dpkg -l | grep apt-cacher ii apt-cacher1.7.12 all Caching proxy server for Debian/Ubuntu software repositories Thanks, Chris -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.4.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages apt-cacher depends on: ii debconf [debconf-2.0] 1.5.59 ii ed 1.10-2.1 ii libdpkg-perl 1.18.4 ii libfilesys-df-perl 0.92-5+b2 ii libfreezethaw-perl 0.5001-1 ii libio-interface-perl 1.09-1+b1 ii libipc-shareable-perl 0.61-1 ii libnetaddr-ip-perl 4.078+dfsg-1+b1 ii libsys-syscall-perl0.25-2 ii libwww-curl-perl 4.17-2+b1 ii libwww-perl6.15-1 ii lsb-base 9.20160110 ii perl 5.22.1-9 ii ucf3.0036 ii update-inetd 4.43 Versions of packages apt-cacher recommends: ii libberkeleydb-perl0.55-1+b1 ii libio-compress-lzma-perl 2.069-1 Versions of packages apt-cacher suggests: ii libio-socket-inet6-perl 2.72-2 -- debconf information: * apt-cacher/mode: daemon
Bug#810924: apt-cacher: GDBM_File tie failed: Permission denied at apt-cacher-cleanup.pl line 620.
Package: apt-cacher Version: 1.7.11 Severity: normal Dear Maintainer, executing /usr/share/apt-cacher/apt-cacher-cleanup-pl causes the error GDBM_File tie failed: Permission denied at ./apt-cacher-cleanup.pl line 620. Old packages are then not deleted in /var/lib/apt-cacher This happen since a couple of days on an up to date Stretch, maybe introduced due to updates of other packages. Say 3 weeks ago I think it was working. I made no config change. My config in /etc/apt-cacher/conf.d/local.conf looks like this: distinct_namespaces = 1 allowed_hosts = 192.168.0.0/24 curl_idle_timeout = 60 data_timeout = 60 Thanks, Chris -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.3.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages apt-cacher depends on: ii debconf [debconf-2.0] 1.5.58 ii ed 1.10-2 ii libdpkg-perl 1.18.4 ii libfilesys-df-perl 0.92-5+b2 ii libfreezethaw-perl 0.5001-1 ii libio-interface-perl 1.09-1+b1 ii libipc-shareable-perl 0.61-1 ii libnetaddr-ip-perl 4.078+dfsg-1+b1 ii libsys-syscall-perl0.25-2 ii libwww-curl-perl 4.17-2+b1 ii libwww-perl6.15-1 ii lsb-base 9.20150917 ii perl 5.22.1-3 ii ucf3.0031 ii update-inetd 4.43 Versions of packages apt-cacher recommends: ii libberkeleydb-perl 0.55-1+b1 Versions of packages apt-cacher suggests: ii libio-socket-inet6-perl 2.72-2 -- debconf information: * apt-cacher/mode: daemon
