Bug#1077824: Ubuntu bug link

2024-08-02 Thread Florent 'Skia' Jacquet
The issue is tracked in Ubuntu in the following bug: 
https://bugs.launchpad.net/debian/+source/python-amqplib/+bug/2075183




Bug#1077824: python3-amqplib: Produced binary package is Python2 only

2024-08-02 Thread Florent 'Skia' Jacquet
Package: python3-amqplib
Version: 1.0.2-4
Severity: serious
Justification: 5p
X-Debbugs-Cc: florent.jacq...@canonical.com

The `python3-amqplib/1.0.2-4` package build is broken: it's missing a magical 
2to3 step.

Using it leads to that kind of traceback:
```
  File "/usr/lib/python3/dist-packages/amqplib/client_0_8/connection.py", line 
96, in __init__
login_response.write_table({'LOGIN': userid, 'PASSWORD': password})
  File "/usr/lib/python3/dist-packages/amqplib/client_0_8/serialization.py", 
line 370, in write_table
table_data.write_shortstr(k)
  File "/usr/lib/python3/dist-packages/amqplib/client_0_8/serialization.py", 
line 338, in write_shortstr
if isinstance(s, unicode):
 ^^^
NameError: name 'unicode' is not defined
```

A very quick test to check the Python 3 compatibility is the following:

$ grep 'isinstance.*unicode' 
/usr/lib/python3/dist-packages/amqplib/client_0_8/serialization.py
if isinstance(s, unicode):
if isinstance(s, unicode):
if isinstance(v, unicode):

Those `unicode` invokations should have been converted to `str` during the 
build process, which worked beforehand, but has been broken. I've detected this 
bug on Ubuntu, and it worked correctly at the time of Noble, and has only been 
broken in Oracular.

I did not investigate much further, but a local manual build also produces a 
broken binary package. From what I've seen in the launchpad build logs, 
previous version were installing python3-lib2to3 during the build, and this is 
not the case anymore. I guess it would be similar in Debian's infrastructure.


A quick workaround for anyone affected is to run the following:
sudo 2to3 -w /usr/lib/python3/dist-packages/amqplib/client_0_8/*


-- System Information:
Debian Release: trixie/sid
  APT prefers oracular
  APT policy: (500, 'oracular'), (400, 'oracular-proposed'), (200, 
'noble-updates'), (200, 'noble'), (200, 'jammy-updates'), (200, 'jammy')
Architecture: amd64 (x86_64)

Kernel: Linux 6.8.0-11-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_WARN, TAINT_OOT_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages python3-amqplib depends on:
ii  python3  3.12.3-0ubuntu1

python3-amqplib recommends no packages.

Versions of packages python3-amqplib suggests:
pn  python-amqplib-doc  

-- no debconf information



Bug#1073996: Info received (Bug#1073996: twisted: autopkgtest fails on test_flatten: "builtins.KeyError: 'root'")

2024-06-21 Thread Florent 'Skia' Jacquet

Updated patch with removal of now unused variable.diff -Nru twisted-24.3.0/debian/changelog twisted-24.3.0/debian/changelog
--- twisted-24.3.0/debian/changelog 2024-03-04 15:57:17.0 +0100
+++ twisted-24.3.0/debian/changelog 2024-06-21 11:20:23.0 +0200
@@ -1,3 +1,10 @@
+twisted (24.3.0-2) unstable; urgency=medium
+
+  * Patch: fix test_flatten in autopkgtest. (Closes: #1073996)
+This patch can probably be dropped after next upstream release.
+
+ -- Florent 'Skia' Jacquet   Fri, 21 Jun 2024 
11:20:23 +0200
+
 twisted (24.3.0-1) unstable; urgency=medium
 
   * New upstream release.
diff -Nru twisted-24.3.0/debian/patches/series 
twisted-24.3.0/debian/patches/series
--- twisted-24.3.0/debian/patches/series2024-03-04 15:57:17.0 
+0100
+++ twisted-24.3.0/debian/patches/series2024-06-21 11:20:23.0 
+0200
@@ -15,3 +15,4 @@
 debian-hacks/Drop-dependency-on-typing_extensions.patch
 debian-hacks/reproducible-docs.patch
 tests/skip-test_sendFileDescriptorTriggersPauseProducing.patch
+tests/Tests-Fix-test_flatten.patch
diff -Nru twisted-24.3.0/debian/patches/tests/Tests-Fix-test_flatten.patch 
twisted-24.3.0/debian/patches/tests/Tests-Fix-test_flatten.patch
--- twisted-24.3.0/debian/patches/tests/Tests-Fix-test_flatten.patch
1970-01-01 01:00:00.0 +0100
+++ twisted-24.3.0/debian/patches/tests/Tests-Fix-test_flatten.patch
2024-06-21 11:20:23.0 +0200
@@ -0,0 +1,42 @@
+From: Florent 'Skia' Jacquet 
+Date: Fri, 21 Jun 2024 12:06:48 +0200
+Subject: Test: Fix twisted.web.test.test_flatten
+
+Following some removal from Python itself, the following started to appear in 
autopkgtest:
+
+2993s ---  ---
+2993s   File "/usr/lib/python3/dist-packages/twisted/internet/defer.py", line 
1999, in _inlineCallbacks
+2993s result = context.run(
+2993s   File "/usr/lib/python3/dist-packages/twisted/python/failure.py", line 
519, in throwExceptionIntoGenerator
+2993s return g.throw(self.value.with_traceback(self.tb))
+2993s   File "/usr/lib/python3/dist-packages/twisted/web/_flatten.py", line 
435, in _flattenTree
+2993s roots.append(frame.f_locals["root"])
+2993s builtins.KeyError: 'root'
+
+This is fixed upstream in https://github.com/twisted/twisted/pull/12213
+This patch is a cherry-pick of the needed changes, and can probably be dropped 
next release.
+--- a/src/twisted/web/_flatten.py
 b/src/twisted/web/_flatten.py
+@@ -418,7 +418,6 @@
+ 
+ while stack:
+ try:
+-frame = stack[-1].gi_frame
+ element = next(stack[-1])
+ if isinstance(element, Deferred):
+ # Before suspending flattening for an unknown amount of time,
+@@ -428,11 +427,11 @@
+ except StopIteration:
+ stack.pop()
+ except Exception as e:
+-stack.pop()
+ roots = []
+ for generator in stack:
+-roots.append(generator.gi_frame.f_locals["root"])
+-roots.append(frame.f_locals["root"])
++if generator.gi_frame is not None:
++roots.append(generator.gi_frame.f_locals["root"])
++stack.pop()
+ raise FlattenerError(e, roots, extract_tb(exc_info()[2]))
+ else:
+ stack.append(element)


Bug#1073996: twisted: autopkgtest fails on test_flatten: "builtins.KeyError: 'root'"

2024-06-21 Thread Florent 'Skia' Jacquet

Please find attached the debdiff fixing this bug.diff -Nru twisted-24.3.0/debian/changelog twisted-24.3.0/debian/changelog
--- twisted-24.3.0/debian/changelog 2024-03-04 15:57:17.0 +0100
+++ twisted-24.3.0/debian/changelog 2024-06-21 11:20:23.0 +0200
@@ -1,3 +1,10 @@
+twisted (24.3.0-2) unstable; urgency=medium
+
+  * Patch: fix test_flatten in autopkgtest. (Closes: #1073996)
+This patch can probably be dropped after next upstream release.
+
+ -- Florent 'Skia' Jacquet   Fri, 21 Jun 2024 
11:20:23 +0200
+
 twisted (24.3.0-1) unstable; urgency=medium
 
   * New upstream release.
diff -Nru twisted-24.3.0/debian/patches/series 
twisted-24.3.0/debian/patches/series
--- twisted-24.3.0/debian/patches/series2024-03-04 15:57:17.0 
+0100
+++ twisted-24.3.0/debian/patches/series2024-06-21 11:20:23.0 
+0200
@@ -15,3 +15,4 @@
 debian-hacks/Drop-dependency-on-typing_extensions.patch
 debian-hacks/reproducible-docs.patch
 tests/skip-test_sendFileDescriptorTriggersPauseProducing.patch
+tests/Tests-Fix-test_flatten.patch
diff -Nru twisted-24.3.0/debian/patches/tests/Tests-Fix-test_flatten.patch 
twisted-24.3.0/debian/patches/tests/Tests-Fix-test_flatten.patch
--- twisted-24.3.0/debian/patches/tests/Tests-Fix-test_flatten.patch
1970-01-01 01:00:00.0 +0100
+++ twisted-24.3.0/debian/patches/tests/Tests-Fix-test_flatten.patch
2024-06-21 11:20:23.0 +0200
@@ -0,0 +1,34 @@
+From: Florent 'Skia' Jacquet 
+Date: Fri, 21 Jun 2024 12:06:48 +0200
+Subject: Test: Fix twisted.web.test.test_flatten
+
+Following some removal from Python itself, the following started to appear in 
autopkgtest:
+
+2993s ---  ---
+2993s   File "/usr/lib/python3/dist-packages/twisted/internet/defer.py", line 
1999, in _inlineCallbacks
+2993s result = context.run(
+2993s   File "/usr/lib/python3/dist-packages/twisted/python/failure.py", line 
519, in throwExceptionIntoGenerator
+2993s return g.throw(self.value.with_traceback(self.tb))
+2993s   File "/usr/lib/python3/dist-packages/twisted/web/_flatten.py", line 
435, in _flattenTree
+2993s roots.append(frame.f_locals["root"])
+2993s builtins.KeyError: 'root'
+
+This is fixed upstream in https://github.com/twisted/twisted/pull/12213
+This patch is a cherry-pick of the needed changes, and can probably be dropped 
next release.
+--- a/src/twisted/web/_flatten.py
 b/src/twisted/web/_flatten.py
+@@ -428,11 +427,11 @@
+ except StopIteration:
+ stack.pop()
+ except Exception as e:
+-stack.pop()
+ roots = []
+ for generator in stack:
+-roots.append(generator.gi_frame.f_locals["root"])
+-roots.append(frame.f_locals["root"])
++if generator.gi_frame is not None:
++roots.append(generator.gi_frame.f_locals["root"])
++stack.pop()
+ raise FlattenerError(e, roots, extract_tb(exc_info()[2]))
+ else:
+ stack.append(element)


Bug#1073996: twisted: autopkgtest fails on test_flatten: "builtins.KeyError: 'root'"

2024-06-21 Thread Florent 'Skia' Jacquet
Source: twisted
Version: 24.3.0-1
Severity: serious
Tags: patch
Justification: 6a
X-Debbugs-Cc: florent.jacq...@canonical.com

Hello there,

Following some removal from Python itself, the following started to appear in 
autopkgtest:

2993s ---  ---
2993s   File "/usr/lib/python3/dist-packages/twisted/internet/defer.py", line 
1999, in _inlineCallbacks
2993s result = context.run(
2993s   File "/usr/lib/python3/dist-packages/twisted/python/failure.py", line 
519, in throwExceptionIntoGenerator
2993s return g.throw(self.value.with_traceback(self.tb))
2993s   File "/usr/lib/python3/dist-packages/twisted/web/_flatten.py", line 
435, in _flattenTree
2993s roots.append(frame.f_locals["root"])
2993s builtins.KeyError: 'root'

This is fixed upstream in https://github.com/twisted/twisted/pull/12213

I've cherry-picked the needed changes in a patch. I'll send a debdiff with 
everything shortly.


-- System Information:
Debian Release: trixie/sid
  APT prefers oracular
  APT policy: (500, 'oracular'), (400, 'oracular-proposed'), (200, 
'noble-updates'), (200, 'noble'), (200, 'jammy-updates'), (200, 'jammy')
Architecture: amd64 (x86_64)

Kernel: Linux 6.8.0-31-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_WARN, TAINT_OOT_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
From: Florent 'Skia' Jacquet 
Date: Fri, 21 Jun 2024 12:06:48 +0200
Subject: Test: Fix twisted.web.test.test_flatten

Following some removal from Python itself, the following started to appear in 
autopkgtest:

2993s ---  ---
2993s   File "/usr/lib/python3/dist-packages/twisted/internet/defer.py", line 
1999, in _inlineCallbacks
2993s result = context.run(
2993s   File "/usr/lib/python3/dist-packages/twisted/python/failure.py", line 
519, in throwExceptionIntoGenerator
2993s return g.throw(self.value.with_traceback(self.tb))
2993s   File "/usr/lib/python3/dist-packages/twisted/web/_flatten.py", line 
435, in _flattenTree
2993s roots.append(frame.f_locals["root"])
2993s builtins.KeyError: 'root'

This is fixed upstream in https://github.com/twisted/twisted/pull/12213
This patch is a cherry-pick of the needed changes, and can probably be dropped 
next release.
--- a/src/twisted/web/_flatten.py
+++ b/src/twisted/web/_flatten.py
@@ -428,11 +427,11 @@
 except StopIteration:
 stack.pop()
 except Exception as e:
-stack.pop()
 roots = []
 for generator in stack:
-roots.append(generator.gi_frame.f_locals["root"])
-roots.append(frame.f_locals["root"])
+if generator.gi_frame is not None:
+roots.append(generator.gi_frame.f_locals["root"])
+stack.pop()
 raise FlattenerError(e, roots, extract_tb(exc_info()[2]))
 else:
 stack.append(element)


Bug#1067672: openvas-scanner: Use distro-wide _FORTIFY_SOURCE instead of hard-coded from upstream

2024-03-25 Thread Florent 'Skia' Jacquet
Source: openvas-scanner
Severity: normal
Tags: patch
X-Debbugs-Cc: florent.jacq...@canonical.com

Hi,

We had a recent FTBFS in Ubuntu due to upstream hardcoding the FORTIFY_SOURCE 
flag in its build-system. Would you consider the following patch enabling 
distro-wide hardening, instead of upstream's?

Thanks



-- System Information:
Debian Release: trixie/sid
  APT prefers noble
  APT policy: (500, 'noble'), (500, 'mantic'), (500, 'jammy'), (400, 
'noble-proposed')
Architecture: amd64 (x86_64)

Kernel: Linux 6.8.0-11-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=sh: 0: getcwd() failed: 
No such file or directory
UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
From: Florent 'Skia' Jacquet 
Date: Fri, 22 Mar 2024 17:19:59 +0100
Subject: Don't redefine FORTIFY_SOURCE
Bug-Ubuntu: 
https://bugs.launchpad.net/ubuntu/+source/openvas-scanner/+bug/2058758

Index: openvas-scanner-22.7.9/CMakeLists.txt
===
--- openvas-scanner-22.7.9.orig/CMakeLists.txt
+++ openvas-scanner-22.7.9/CMakeLists.txt
@@ -208,7 +208,7 @@ if (ENABLE_COVERAGE)
   set (COVERAGE_FLAGS "--coverage")
 endif (ENABLE_COVERAGE)
 
-set (HARDENING_FLAGS"-Wformat -Wformat-security 
-D_FORTIFY_SOURCE=2 -fstack-protector")
+set (HARDENING_FLAGS"-Wformat -Wformat-security -fstack-protector")
 set (LINKER_HARDENING_FLAGS "-Wl,-z,relro -Wl,-z,now")
 # The "-D_FILE_OFFSET_BITS=64 -DLARGEFILE_SOURCE=1" is necessary for GPGME!
 set (GPGME_C_FLAGS  "-D_FILE_OFFSET_BITS=64 -DLARGEFILE_SOURCE=1")
Index: openvas-scanner-22.7.9/debian/rules
===
--- openvas-scanner-22.7.9.orig/debian/rules
+++ openvas-scanner-22.7.9/debian/rules
@@ -1,5 +1,7 @@
 #!/usr/bin/make -f
 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
 DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
 
 %:


Bug#1061794: crmsh fails its autopkg tests with Python 3.12

2024-02-13 Thread Florent 'Skia' Jacquet

Hi,

Those two patches should fix autopkgtest.

The importlib one shouldn't be a problem.

The looseversion one, otoh, requires a bit more attention. LooseVersion 
was part of distutils, and got removed with Python 3.12, but there 
doesn't seem to be any replacement anywhere in the standard library.

There are basically two solutions here for now:
  * use that patch since setuptools is already packaged and provide a 
working implementation of LooseVersion. It's still in a `._distutils` 
module, which doesn't make it appear as being officially part of the 
API, meaning it could break eventually if it gets removed from here too.
  * make another patch that would make use of the `looseversion` 
package [1], that is currently not packaged in Debian, but should 
probably be the safer way forward, since the only purpose of that 
package is to provide that API. I haven't yet started the work of 
packaging that `looseversion` module, and don't know if that's the right 
path forward.


Obviously, this also depends on what solution upstream will take to 
support Python 3.12. I've already opened an issue here: 
https://github.com/ClusterLabs/crmsh/issues/1324


I also have that branch that passes autopkgtests locally: 
https://git.launchpad.net/~hyask/ubuntu/+source/crmsh/log/


[1]: https://github.com/effigies/looseversion



Skiadiff --git a/test/unittests/test_utils.py b/test/unittests/test_utils.py
index 77fd14b0b67d..900e8528143a 100644
--- a/test/unittests/test_utils.py
+++ b/test/unittests/test_utils.py
@@ -7,7 +7,7 @@ from __future__ import unicode_literals
 import os
 import socket
 import re
-import imp
+import importlib
 import subprocess
 import unittest
 import pytest
@@ -24,7 +24,7 @@ def setup_function():
 utils._ip_for_cloud = None
 # Mock memoize method and reload the module under test later with imp
 mock.patch('crmsh.utils.memoize', lambda x: x).start()
-imp.reload(utils)
+importlib.reload(utils)
 
 
 @mock.patch("crmsh.utils.get_stdout_stderr")
diff --git a/crmsh/ra.py b/crmsh/ra.py
index 6060ec7a3fd5..fcadc860aa5f 100644
--- a/crmsh/ra.py
+++ b/crmsh/ra.py
@@ -49,15 +49,15 @@ def crm_resource(opts):
 
 @utils.memoize
 def can_use_lrmadmin():
-from distutils import version
+from setuptools._distutils.version import LooseVersion
 # after this glue release all users can get meta-data and
 # similar from lrmd
 minimum_glue = "1.0.10"
 _rc, glue_ver = get_stdout("%s -v" % lrmadmin_prog, stderr_on=False)
 if not glue_ver:  # lrmadmin probably not found
 return False
-v_min = version.LooseVersion(minimum_glue)
-v_this = version.LooseVersion(glue_ver)
+v_min = LooseVersion(minimum_glue)
+v_this = LooseVersion(glue_ver)
 if v_this < v_min:
 return False
 if userdir.getuser() not in ("root", config.path.crm_daemon_user):
diff --git a/crmsh/utils.py b/crmsh/utils.py
index 51ff5b326d56..40c74a9019b5 100644
--- a/crmsh/utils.py
+++ b/crmsh/utils.py
@@ -34,7 +34,7 @@ from . import userdir
 from . import constants
 from . import options
 from . import term
-from distutils.version import LooseVersion
+from setuptools._distutils.version import LooseVersion
 from .constants import SSH_OPTION
 from . import log
 
diff --git a/debian/control b/debian/control
index 8fe560e13935..ea924b952335 100644
--- a/debian/control
+++ b/debian/control
@@ -40,6 +40,7 @@ Depends:
  python3-lxml,
  python3-packaging,
  python3-parallax,
+ python3-setuptools,
  python3-yaml
 Recommends: pacemaker (>= 1.1.12)
 Replaces: pacemaker (<< 1.1.12)


Bug#1055694: klibc-utils: Patch to fix cp warning

2023-12-13 Thread Florent 'Skia' Jacquet

Hi,

There is a Merge Request on Salsa to fix this here (didn't test it yet):
https://salsa.debian.org/kernel-team/klibc/-/merge_requests/12

Also, here is the corresponding Ubuntu bug:
https://bugs.launchpad.net/ubuntu/+source/klibc/+bug/2046336

Cheers
Skia



Bug#1056652: libwlroots10: GTK dropdown menus crashes in sway (in e.g. Thunderbird, Firefox)

2023-11-24 Thread Florent Cayré
Package: libwlroots10
Version: 0.15.1-6
Severity: normal

Dear Maintainer,

   * What led up to the situation?
   Using thunderbird or firefox in sway is enough to reproduce the bug
   consistently.
   * What exactly did you do (or not do) that was effective (or
 ineffective)?
   In thunderbird, compose a message, type content in it, the, clicking
   on the "Choose a font" dropdown (contains "Variable Width" by default)
   immediately crashes the app.
   In Firefox, display the personal bookmark bar, add a folder and
   enough bookmarks in it so that the folder dropdown exceed the screen
   height. Then, when you click on the folder to access a bookmark crashes
   Firefox after some attemps (and the folder content is no more displayed).
   * What was the outcome of this action?
   The application crashes
   * What outcome did you expect instead?
   The dropdown should be displayed.


-- System Information:
Debian Release: 12.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-13-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libwlroots10 depends on:
ii  libc62.36-9+deb12u3
ii  libdrm2  2.4.114-1+b1
ii  libegl1  1.6.0-1
ii  libgbm1  23.1.3-0~tux1
ii  libgles2 1.6.0-1
ii  libinput10   1.22.1-1
ii  libpixman-1-00.42.2-1
ii  libseat1 0.7.0-6
ii  libudev1 252.17-1~deb12u1
ii  libwayland-client0   1.21.0-1
ii  libwayland-server0   1.21.0-1
ii  libxcb-composite01.15-1
ii  libxcb-dri3-01.15-1
ii  libxcb-icccm40.4.1-1.1
ii  libxcb-present0  1.15-1
ii  libxcb-render-util0  0.3.9-1+b1
ii  libxcb-render0   1.15-1
ii  libxcb-res0  1.15-1
ii  libxcb-shm0  1.15-1
ii  libxcb-xfixes0   1.15-1
ii  libxcb-xinput0   1.15-1
ii  libxcb1  1.15-1
ii  libxkbcommon01.5.0-1

libwlroots10 recommends no packages.

libwlroots10 suggests no packages.

-- no debconf information



Bug#1042448: closed by Debian FTP Masters (reply to Valentin Vidic ) (Bug#1042448: fixed in crmsh 4.5.0-1)

2023-10-11 Thread Florent Carli
Hello,

This bug report is about bookworm (stable) version, so the fact that it has
been fixed in unstable is nice, but should not resolve this.
Since it's about a real regression, I think this fix should be eligible for
a backport don't you think?

Thanks.


On Wed, Oct 11, 2023 at 12:21 AM Debian Bug Tracking System <
ow...@bugs.debian.org> wrote:

> This is an automatic notification regarding your Bug report
> which was filed against the crmsh package:
>
> #1042448: crmsh: HA_GROUP permission regression after upgrading bullseye
> to bookworm
>
> It has been closed by Debian FTP Masters 
> (reply to Valentin Vidic ).
>
> Their explanation is attached below along with your original report.
> If this explanation is unsatisfactory and you have not received a
> better one in a separate message then please contact Debian FTP Masters <
> ftpmas...@ftp-master.debian.org> (reply to Valentin Vidic <
> vvi...@debian.org>) by
> replying to this email.
>
>
> --
> 1042448: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1042448
> Debian Bug Tracking System
> Contact ow...@bugs.debian.org with problems
>
>
>
> -- Forwarded message --
> From: Debian FTP Masters 
> To: 1042448-cl...@bugs.debian.org
> Cc:
> Bcc:
> Date: Tue, 10 Oct 2023 22:19:34 +
> Subject: Bug#1042448: fixed in crmsh 4.5.0-1
> Source: crmsh
> Source-Version: 4.5.0-1
> Done: Valentin Vidic 
>
> We believe that the bug you reported is fixed in the latest version of
> crmsh, which is due to be installed in the Debian FTP archive.
>
> A summary of the changes between this version and the previous one is
> attached.
>
> Thank you for reporting the bug, which will now be closed.  If you
> have further comments please address them to 1042...@bugs.debian.org,
> and the maintainer will reopen the bug report if appropriate.
>
> Debian distribution maintenance software
> pp.
> Valentin Vidic  (supplier of updated crmsh package)
>
> (This message was generated automatically at their request; if you
> believe that there is a problem with it please contact the archive
> administrators by mailing ftpmas...@ftp-master.debian.org)
>
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
>
> Format: 1.8
> Date: Tue, 10 Oct 2023 22:57:14 +0200
> Source: crmsh
> Architecture: source
> Version: 4.5.0-1
> Distribution: unstable
> Urgency: medium
> Maintainer: Debian HA Maintainers <
> debian-ha-maintain...@lists.alioth.debian.org>
> Changed-By: Valentin Vidic 
> Closes: 1042448 1044302
> Changes:
>  crmsh (4.5.0-1) unstable; urgency=medium
>  .
>* New upstream version 4.5.0
>* d/patches: refresh for new version
>* d/tests: refresh for new version
>* d/postinst: create a logging directory (Closes: #1042448)
>* d/clean: remove generated files (Closes: #1044302)
>* d/patches: add fix for ssh error
> Checksums-Sha1:
>  23a937b6ba05f7af5df655d919504d0fbdb9006a 2337 crmsh_4.5.0-1.dsc
>  8d0459c4be7346179236be43e009d8eadf37e988 1210069 crmsh_4.5.0.orig.tar.gz
>  f1040bde2b0bcfdd008e013b9c67562e480c696f 30856 crmsh_4.5.0-1.debian.tar.xz
>  1d7ab5a0e5c9f597468e2bde5075b6426f0f3bdf 6984
> crmsh_4.5.0-1_source.buildinfo
> Checksums-Sha256:
>  f7abb8c2ec6ca07af26b1d112c2a5d871ca3e5db45a742769a0037aae3d46444 2337
> crmsh_4.5.0-1.dsc
>  18fbed93d5cee530baabfba9e15c6d1f87465506515c8b7e660a1427fdf5801b 1210069
> crmsh_4.5.0.orig.tar.gz
>  f8e974329a682764b51fb34f1db75d8e7ecaab420453cdc92d33427fd0b16014 30856
> crmsh_4.5.0-1.debian.tar.xz
>  1093dae09b6544a708fd4c0f3faf093e370e33f71f67ed4e216f6a0c5403d00c 6984
> crmsh_4.5.0-1_source.buildinfo
> Files:
>  0256301652adfb4a56c0fb8a7cab4952 2337 admin optional crmsh_4.5.0-1.dsc
>  95c363ec7f7e8e6ffd244ddecbaff125 1210069 admin optional
> crmsh_4.5.0.orig.tar.gz
>  2e0663d6fdff1cfd53448436d344f244 30856 admin optional
> crmsh_4.5.0-1.debian.tar.xz
>  1b9d541cfb38c511931686392d771f7c 6984 admin optional
> crmsh_4.5.0-1_source.buildinfo
>
> -BEGIN PGP SIGNATURE-
>
> iQJGBAEBCgAwFiEExaW53cM9k/u2PWfIMofYmpfNqHsFAmUlyigSHHZ2aWRpY0Bk
> ZWJpYW4ub3JnAAoJEDKH2JqXzah7WugQAKVp8TCeDRjGEpnBmJgQfVqbE9YG0DKD
> k3Zmok3oJziZvAsmOJgFHIOKqihYZ9LdiEGMoTTSMkMch0zujpJW64BtksXmhruV
> EvgsbnQjZYikG13Py9hCb84nnKcAer+TSU5fIWRDpE0mzVk7HuqJxc01+82iWDIX
> mel82k7emDqh27NAXcEQ7zMaTSuSMYD3CoBvT1nyFSRSripSvkKOd5/elFDtNKYV
> tQx9j/JPlRGJrzuwkE3b65JP2cXQvsUG6M8mDgn48Pk7TtcVnhLMlWiVa3N/2yjJ
> V7XNx5/x771htaMKbNpN4mxZ2s7QYrs7OzS2TEB5gLz/PVS3DqpULBspQyZr+iDx
> qy8ThUKWSde9+j0uS02jTr/B090wCSnCGttiSV12CWY/yddIZjQRix0Hhqiphlts
> rV1SUbVuJZsR9VBfe+FYhmXrKWoOlPzyG9a4429nzEf5t/8dEzyy80M9yOfpKm61
> 5JBE9iMISWC/BpQyTvuOZydN4jayBXxyzslQnGjynbXUOXdjnva2VtEiUTdOZThG
> eo9orPWf51xa

Bug#1042968: emacs: Gnus unusable after upgrading to Emacs 29

2023-08-03 Thread Florent Rougon
Hi David,

David Bremner  wrote:

> Please try to duplicate the problem with "emacs -q". I suspect there is
> either some obsolete/broken third party package or just some personal
> configuration causing this problem.

You're right, the problem was in my .gnus.el which had a
(gnus-add-configuration …) call where the passed-in value came in part
from an old default value of `gnus-buffer-configuration' (that is where
the `gnus-carpal' stuff came from). I did that setting once long ago and
didn't remember the details. Sorry I had grepped my ~/.emacs.d and
~/lisp but completely forgot to do it on ~/.gnus.el!

[ BTW, I misunderstood part of the *Backtrace* buffer when I wrote that
  “clicking on the gnus-configure-frame “button” in the backtrace shows
  (defun gnus-configure-frame ...) in
  /usr/share/emacs/29.1/lisp/gnus/gnus-win.el.gz with *different code*”.
  The line of that buffer where I used RET was:

  gnus-configure-frame((cond (gnus-use-trees '(vertical 1.0 (article 1.0) 
(summary 0.25 point) (tree 0.25))) (t '(vertical 1.0 (article 1.0) (summary 
0.25 point) (if gnus-carpal '(summary-carpal 4))

  and I now understand that the big (cond (gnus-use-trees …)) is the
  `split' argument — a callable here — that was passed to
  `gnus-configure-frame'. ]

So, the problem is solved and was actually a PEBKAC case. Many thanks
for your help and sorry for the noise!

Regards

-- 
Florent



Bug#1042968: emacs: Gnus unusable after upgrading to Emacs 29

2023-08-03 Thread Florent Rougon
Package: emacs
Version: 1:29.1+1-2
Severity: normal

Dear maintainer,

This morning, I performed the following upgrade:

[UPGRADE] emacs:amd64 1:28.2+1-16 -> 1:29.1+1-2
[UPGRADE] emacs-bin-common:amd64 1:28.2+1-16 -> 1:29.1+1-2
[UPGRADE] emacs-common:amd64 1:28.2+1-16 -> 1:29.1+1-2
[UPGRADE] emacs-common-non-dfsg:amd64 1:28.2+1-2 -> 1:29.1+1-1
[UPGRADE] emacs-el:amd64 1:28.2+1-16 -> 1:29.1+1-2
[UPGRADE] emacs-gtk:amd64 1:28.2+1-16 -> 1:29.1+1-2

and rebooted because the kernel was also upgraded at the same time.
Since then, Gnus (the version shipped with Emacs) has become unusable
for me because every time I hit RET in the *Summary* buffer in order to
read a message, I get the following error:

gnus-configure-frame: Symbol’s value as variable is void: gnus-carpal

Redoing RET after `toggle-debug-on-error' yields the following
backtrace:

Debugger entered--Lisp error: (void-variable gnus-carpal)
  (if gnus-carpal '(summary-carpal 4))
  gnus-configure-frame((cond (gnus-use-trees '(vertical 1.0 (article 1.0) 
(summary 0.25 point) (tree 0.25))) (t '(vertical 1.0 (article 1.0) (summary 
0.25 point) (if gnus-carpal '(summary-carpal 4))
  gnus-configure-windows(article)
  gnus-summary-scroll-up(1)
  funcall-interactively(gnus-summary-scroll-up 1)
  command-execute(gnus-summary-scroll-up)

Surprisingly, clicking on the gnus-configure-frame “button” in the
backtrace shows (defun gnus-configure-frame ...) in
/usr/share/emacs/29.1/lisp/gnus/gnus-win.el.gz with *different code*:
there are a few (cond ...) forms but none that starts as
(cond (gnus-use-trees...).

$ ls -l /usr/share/emacs/29.1/lisp/gnus/gnus-win.el.gz 
/usr/share/emacs/29.1/lisp/gnus/gnus-win.elc
-rw-r--r-- 1 root root 11128 Aug  1 20:24 
/usr/share/emacs/29.1/lisp/gnus/gnus-win.elc
-rw-r--r-- 1 root root  5006 Jul 30 17:32 
/usr/share/emacs/29.1/lisp/gnus/gnus-win.el.gz
$ sha512sum /usr/share/emacs/29.1/lisp/gnus/gnus-win.el.gz
2fd828896c493913dd63586d39d559df679cda673c154ec5bbf421ff5ddc465815d830495c4aefaad5d306d0b4792bbd1b23754830a8cee83591006fe1ea6ceb
  /usr/share/emacs/29.1/lisp/gnus/gnus-win.el.gz

According to `C-h N', the `gnus-carpal' variable has been obsolete since
Emacs 24 and was removed in Emacs 29.1. If I evaluate
(setq gnus-carpal nil) in the *scratch* buffer, the problem doesn't
happen anymore — until Emacs is restarted, of course.

I tried 'aptitude reinstall emacs-el emacs-common' but this didn't
change anything to the problem.

Thanks for your work and help!

Regards

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.4.0-1-amd64 (SMP w/20 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages emacs depends on:
ii  emacs-gtk  1:29.1+1-2

emacs recommends no packages.

emacs suggests no packages.

-- no debconf information


Bug#1042817: doesn't apply MODE="0664" action to uinput upon boot anymore

2023-08-01 Thread Florent Rougon
Package: udev
Version: 254-1
Severity: normal

Dear maintainer,

The computer this report is sent from runs sid and is upgraded almost
daily. The problem described here appeared on the first boot of
2023-07-20 and is still present today.

This computer has the following rule in
/etc/udev/rules.d/90-local-uinput.rules (and no other rule in that
file):

  SUBSYSTEM=="misc", KERNEL=="uinput", GROUP="a_user_group", MODE="0664"

This has been working fine for years, until 2023-07-20. Now, after
booting, one sees that the MODE="0664" action either hasn't been
applied, or has been cancelled by something else:

  # ls -l /dev/uinput
  crw--- 1 root a_user_group 10, 223 Jul 30 11:04 /dev/uinput
  #

(which causes failures in a program that relies on /dev/uinput being
writable by a_user_group).

If, after boot, I manually run as root:

  udevadm control --reload-rules && udevadm trigger'

then the rule is properly applied:

  # ls -l /dev/uinput
  crw-rw-r-- 1 root a_user_group 10, 223 Jul 30 11:09 /dev/uinput
  #

Many thanks in advance for your help. Regards

Florent

-- Package-specific info:

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.4.0-1-amd64 (SMP w/20 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages udev depends on:
ii  adduser  3.137
ii  libacl1  2.3.1-3
ii  libblkid12.39.1-3
ii  libc62.37-6
ii  libcap2  1:2.66-4
ii  libkmod2 30+20230519-1
ii  libselinux1  3.5-1
ii  libudev1 254-1
ii  systemd-dev  254-1

udev recommends no packages.

udev suggests no packages.

Versions of packages udev is related to:
ii  systemd  254-1

-- debconf information:
  udev/new_kernel_needed: false
  udev/title/upgrade:
  udev/sysfs_deprecated_incompatibility:
  udev/reboot_needed:



Bug#1042448: crmsh: HA_GROUP permission regression after upgrading bullseye to bookworm

2023-07-28 Thread Florent CARLI
Package: crmsh
Version: 4.4.1-1
Severity: normal
X-Debbugs-Cc: fca...@gmail.com

Dear Maintainer,

I encounter a regression with crmsh on debian12. On debian 11, I used
to be able to issue crm commands with a standard user as long as it
was a member of haclient group.
On debian 12, this same user cannot use crm because of some chown that
it's not allowed to do:

virtu@virtu-elabo1:~$ id
uid=1000(virtu) gid=1000(virtu) groups=1000(virtu),110(haclient),118(libvirt)
virtu@virtu-elabo1:~$ crm status
Traceback (most recent call last):
  File "/usr/sbin/crm", line 31, in 
log.setup_logging()
  File "/usr/lib/python3/dist-packages/crmsh/log.py", line 445, in setup_logging
shutil.chown(CRMSH_LOG_FILE, constants.HA_USER, constants.HA_GROUP)
  File "/usr/lib/python3.11/shutil.py", line 1385, in chown
os.chown(path, _user, _group)
PermissionError: [Errno 1] Operation not permitted: '/var/log/crmsh/crmsh.log'


Ferenc Wágner did a first analysis and concluded that:

it's a bug introduced in 4.4.0 by
Fix: log: Change the log file owner as hacluster:haclient (bsc#1194619)
https://github.com/ClusterLabs/crmsh/commit/b4ef13cd8c9a8c37f2bf671abb803b24d93125ee

and fixed in 4.5.0 by
fix: log: fail to open log file even if user is in haclient group (bsc#1204670)
https://github.com/ClusterLabs/crmsh/commit/b4abe21d2fd55ced0f56baff5c4892a4826aa0f7


Thanks.
Florent.


-- System Information:
Debian Release: 12.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: arm64 (aarch64)

Kernel: Linux 5.15.49-linuxkit-pr (SMP w/5 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_RANDSTRUCT
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect

Versions of packages crmsh depends on:
ii  gawk 1:5.2.1-2
ii  iputils-ping 3:20221126-1
ii  pacemaker-cli-utils  2.1.5-1+deb12u1
ii  python3  3.11.2-1+b1
ii  python3-dateutil 2.8.2-2
ii  python3-lxml 4.9.2-1+b1
ii  python3-parallax 1.0.6-4
ii  python3-yaml 6.0-3+b2

Versions of packages crmsh recommends:
ii  pacemaker  2.1.5-1+deb12u1

Versions of packages crmsh suggests:
pn  bash-completion
pn  csync2 
pn  dmidecode  
pn  ocfs2-tools
pn  openssh-server 
pn  parted 
pn  sbd
pn  ufw
ii  util-linux 2.38.1-5+b1
pn  vim-addon-manager  

-- no debconf information


Bug#1040165: pacemaker: Migration regression after upgrading bullseye to bookworm

2023-07-03 Thread Florent Carli
Hello,

I could not reproduce with the packages you mentionned, so it's a good sign.
The version shown in crm status is version 2.1.5-a3f44794f94.

root@virtu-elabo2:~# dpkg -l | grep -E
"(libcib|libcrm|liblrmd|libpe-|libstonit|pacemaker)"
ii  crmsh   4.4.1-1
all  CRM shell for the pacemaker cluster manager
ii  libcib27:amd64
2.1.5-1+salsaci+20230702+262   amd64cluster resource
manager CIB library
ii  libcrmcluster29:amd64
2.1.5-1+salsaci+20230702+262   amd64cluster resource
manager cluster library
ii  libcrmcommon34:amd64
2.1.5-1+salsaci+20230702+262   amd64cluster resource
manager common library
ii  libcrmservice28:amd64
2.1.5-1+salsaci+20230702+262   amd64cluster resource
manager service library
ii  liblrmd28:amd64
2.1.5-1+salsaci+20230702+262   amd64cluster resource
manager LRMD library
ii  libpacemaker1:amd64
2.1.5-1+salsaci+20230702+262   amd64cluster resource
manager utility library
ii  libpe-rules26:amd64
2.1.5-1+salsaci+20230702+262   amd64cluster resource
manager Policy Engine rules library
ii  libpe-status28:amd64
2.1.5-1+salsaci+20230702+262   amd64cluster resource
manager Policy Engine status library
ii  libstonith1 1.0.12-21+b2
amd64Reusable cluster libraries -- libstonith1
ii  libstonithd26:amd64
2.1.5-1+salsaci+20230702+262   amd64cluster resource
manager STONITH daemon library
ii  pacemaker
2.1.5-1+salsaci+20230702+262   amd64cluster resource
manager
ii  pacemaker-cli-utils
2.1.5-1+salsaci+20230702+262   amd64cluster resource
manager command line utilities
ii  pacemaker-common
2.1.5-1+salsaci+20230702+262   all  cluster resource
manager common files
ii  pacemaker-resource-agents
2.1.5-1+salsaci+20230702+262   all  cluster resource
manager general resource agents

root@virtu-elabo2:~# crm status
Status of pacemakerd: 'Pacemaker is running' (last updated 2023-07-03
14:55:59 +02:00)
Cluster Summary:
  * Stack: corosync
  * Current DC: virtu-elabo2 (version 2.1.5-a3f44794f94) - partition with quorum
  * Last updated: Mon Jul  3 14:56:00 2023
  * Last change:  Mon Jul  3 09:50:25 2023 by root via crm_resource on
virtu-elabo2
  * 3 nodes configured
  * 13 resource instances configured (1 DISABLED)

Node List:
  * Online: [ virtu-elabo1 virtu-elabo2 virtu-elabo3 ]

Full List of Resources:
  * Clone Set: cl_ping_test [ping_test]:
* Started: [ virtu-elabo1 virtu-elabo2 virtu-elabo3 ]
  * st-mms(stonith:external/iec61580_mms): Started virtu-elabo2
  * st-ssh(stonith:external/ssh-virtu): Started virtu-elabo1
  * ABB(ocf:seapath:VirtualDomain): Stopped (disabled)
  * Clone Set: cl_ptpstatus_test [ptpstatus_test]:
* Started: [ virtu-elabo1 virtu-elabo2 virtu-elabo3 ]
  * debian(ocf:seapath:VirtualDomain): Started virtu-elabo2
  * debian2(ocf:seapath:VirtualDomain): Started virtu-elabo2
  * debian3(ocf:seapath:VirtualDomain): Started virtu-elabo2
  * TESTVMU(ocf:seapath:VirtualDomain): Started virtu-elabo1

Thanks.
Florent.

On Sun, Jul 2, 2023 at 10:08 PM Ferenc Wágner  wrote:
>
> Hi,
>
> I've pushed the proposed backported fix to
> https://salsa.debian.org/ha-team/pacemaker/-/commits/wferi/debian/bookworm/,
> it would be great if you could test it.  You can download the build
> artifacts from https://salsa.debian.org/ha-team/pacemaker/-/pipelines/547159
> if you don't want to build the packages yourselves.  If they don't
> exhibit the bug, I'll ask for a stable update.
> --
> Regards,
> Feri.



Bug#1037422: spamprobe crashing with signal 11 for some emails

2023-06-12 Thread Florent CUETO
Package: spamprobe
Version: 1.4d-16
Severity: important
X-Debbugs-Cc: fcu...@wanadoo.fr

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

when using spamprobe to score or learn from an email, sometimes it crashes with 
signal 11.
eg. executing "spamprob score mail.txt"
leads to :
caught signal 11: quitting
Aborted

I provide a sample email.

-- System Information:
Debian Release: 12.0
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 6.1.0-9-686-pae (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages spamprobe depends on:
ii  debconf [debconf-2.0]  1.5.82
ii  libc6  2.36-9
ii  libdb5.3   5.3.28+dfsg2-1
ii  libgcc-s1  12.2.0-14
ii  libgif75.2.1-2.5
ii  libjpeg62-turbo1:2.1.5-2
ii  libpng16-161.6.39-2
ii  libstdc++6 12.2.0-14

Versions of packages spamprobe recommends:
ii  procmail  3.22-27

spamprobe suggests no packages.

-- debconf information:
* spamprobe/db51_upgrade:
  spamprobe/db48_upgrade:
* spamprobe/db53_upgrade:
--- Begin Message ---







  
  

  


  

  
  

  


  

  
  

  


  

  
  

  


  

  
Gift 
cards are back.

  
Great 
news,gift cards are now available to trade in 
your country.

Check 
out the full list here.

See 
you on the 
  marketplace!

  

  
  

  


  Start 
  

  
  

  


  

  
  

  


  
Follow 
us for more financial peace of mind

  

  
  








  

  
  

  

  
  

  


  

  
  



  


  

  
  


  

  
  

  


  
Available 
in the App Store and Google Play

  

  
  


  

  
You 
received this email because you have registered an 
account on Paxful.com website.Paxful, Inc., 3422 Old Capitol Trail 
PMB# 989 Wilmington DE 19808, USAUnsubscribe | Paxful.com

--- End Message ---


Bug#1036097: leap-archive-keyring: Packaged GPG keys have expired

2023-05-15 Thread Florent Cayré
Package: leap-archive-keyring
Version: 2017.11.24
Severity: important

Dear Maintainer,

The package contains recently expired keys, as shown below:

$ cat /etc/apt/sources.list.d/leap.list
deb https://deb.leap.se/client release buster

$ apt update
[...]
W: GPG error: https://deb.leap.se/client release InRelease: The following 
signatures were invalid: EXPKEYSIG 1E34A1828E207901 LEAP archive signing key 

E: The repository 'https://deb.leap.se/client release InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore 
disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration 
details.

-- System Information:
Debian Release: 10.13
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable'), (3, 'testing'), 
(1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-0.deb10.16-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages leap-archive-keyring depends on:
ii  gnupg  2.2.12-1+deb10u2

leap-archive-keyring recommends no packages.

leap-archive-keyring suggests no packages.

-- Configuration Files:
/etc/apt/trusted.gpg.d/leap-archive.gpg changed [not included]

-- no debconf information



Bug#1017757: Same error with emacs 28.1+1-2

2022-08-25 Thread Florent Rougon
Since #1017739 is filed on emacs-lucid and I use emacs-gtk, not
emacs-lucid, I don't know how to reassign this bug to merge it with
#1017739; will let this to the Emacs maintainer.

Thanks & regards :-)

-- 
Florent



Bug#1017757: Same error with emacs 28.1+1-2

2022-08-25 Thread Florent Rougon
Thanks for your input, Luis!

TL;DR: this is the same bug as #1017739:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017739

While trying what you suggested, I had again the same error after:
  - quitting Emacs;
  - deleting ~/.emacs.d;
  - upgrading again to the current version of the Emacs packages in sid;
  - restarting Emacs as normal user.

Then I realized I had root-owned files in ~/.emacs.d/eln-cache such as
subr--trampoline-6d616b652d73706172736. I pass you some details like
trying an 'strace -f' and looking if any of the Emacs packages ships
suid binaries... in the end, I understood that it was the *upgrade* to
Emacs 28 that created these files under my home dir, not the emacs
binary run as normal user (yes, I used 'su' without '-'). Pheew! :)

Regards

-- 
Florent



Bug#1017757: emacs: early error: no suitable directory for output in 'comp-native-load-path'

2022-08-19 Thread Florent Rougon
After downgrading to 1:27.1+1-3, the error is gone.

Regards

-- 
Florent



Bug#1017757: emacs: early error: no suitable directory for output in 'comp-native-load-path'

2022-08-19 Thread Florent Rougon
Package: emacs
Version: 1:28.1+1-1
Severity: normal

Dear maintainer,

After performing the following upgrades today on sid:

[UPGRADE] emacs:amd64 1:27.1+1-3.1 -> 1:28.1+1-1
[UPGRADE] emacs-bin-common:amd64 1:27.1+1-3.1+b1 -> 1:28.1+1-1
[UPGRADE] emacs-bin-common-dbgsym:amd64 1:27.1+1-3.1+b1 -> 1:28.1+1-1
[UPGRADE] emacs-common:amd64 1:27.1+1-3.1 -> 1:28.1+1-1
[UPGRADE] emacs-el:amd64 1:27.1+1-3.1 -> 1:28.1+1-1
[UPGRADE] emacs-gtk:amd64 1:27.1+1-3.1+b1 -> 1:28.1+1-1
[UPGRADE] emacs-gtk-dbgsym:amd64 1:27.1+1-3.1+b1 -> 1:28.1+1-1

starting Emacs, even with the -q option, stops very early with a beep
and the following in the *Messages* buffer:

  defalias: Cannot find suitable directory for output in 
'comp-native-load-path'.

Therefore, it is impossible to execute my initialization files
(I would put severity at least serious, but reportbug wants me to
quote Policy sections in this case, so...).

With 'emacs -q --no-site-file', there is no error.

Thanks!

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.18.0-4-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages emacs depends on:
ii  emacs-gtk  1:28.1+1-1

emacs recommends no packages.

emacs suggests no packages.

-- no debconf information



Bug#1007697: xserver-xorg-input-wacom: New release completely breaks Intuos5 touch S

2022-03-15 Thread Florent Rougon
Package: xserver-xorg-input-wacom
Version: 1.0.0-1
Severity: important

Hello,

Yesterday, my xserver-xorg-input-wacom:amd64 package was upgraded from
version 0.34.99.1-1+b1 to 1.0.0-1, which rendered my Wacom Intuos5
touch S tablet completely unusable: moving the finger over the touch pad
has no effect whatsoever on the mouse pointer.

After downgrading from 1.0.0-1 to 0.34.99.1-1+b1 this morning, my tablet
is usable again (the version info below is after the downgrade; the test
of xserver-xorg-input-wacom version 1.0.0-1 was done on a fully
up-to-date sid).

When I was trying to get the tablet to work under
xserver-xorg-input-wacom 1.0.0-1 via unplugging and replugging the USB
cable, I saved the Xorg.log file. It has errors like so:

[46.195] (II) config/udev: Adding input device Wacom Intuos Pro S Pen (/dev/
input/event6)
[46.195] (**) Wacom Intuos Pro S Pen: Applying InputClass "evdev tablet catc
hall"
[46.195] (**) Wacom Intuos Pro S Pen: Applying InputClass "Wacom USB tablet 
class"
[46.195] (**) Wacom Intuos Pro S Pen: Applying InputClass "Wacom tablet clas
s"
[46.195] (II) LoadModule: "wacom"
[46.196] (WW) Warning, couldn't open module wacom
[46.196] (EE) Failed to load module "wacom" (module does not exist, 0)
[46.196] (EE) No input driver matching `wacom'
[46.196] (II) Falling back to input driver `libinput'
[46.196] (II) LoadModule: "libinput"
[46.196] (WW) Warning, couldn't open module libinput
[46.196] (EE) Failed to load module "libinput" (module does not exist, 0)

This is very important to me, as I (have to) use the tablet as my mouse!

Thanks

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.16.0-4-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages xserver-xorg-input-wacom depends on:
ii  libc6  2.33-7
ii  libudev1   250.3-2
ii  libx11-6   2:1.7.2-2+b1
ii  libxext6   2:1.3.4-1
ii  libxi6 2:1.8-1
ii  libxinerama1   2:1.1.4-3
ii  libxrandr2 2:1.5.2-1
ii  xserver-xorg-core [xorg-input-abi-24]  2:21.1.3-2+b1

xserver-xorg-input-wacom recommends no packages.

Versions of packages xserver-xorg-input-wacom suggests:
ii  xinput  1.6.3-1

-- no debconf information


Bug#1005102: sane-utils.postinst: 65: [: /var/lib/saned: unexpected operator

2022-02-07 Thread Florent Rougon
Package: sane-utils
Version: 1.1.1-1
Severity: normal

Hello,

There is a syntax error in /var/lib/dpkg/info/sane-utils.postinst which
causes the following message to be printed:

/var/lib/dpkg/info/sane-utils.postinst: 65: [: /var/lib/saned: unexpected 
operator

I could suggest a fix, however I'm not quite sure of the intent
(regarding the test). The problematic code is the first line of:

if [ ! -d /var/lib/saned saned ] ; then
usermod -d /var/lib/saned saned
fi

AFAIK:

1) The -d test operator takes only one argument.

2) The negation operator '!' should be before ' [' in POSIX shell (note
   the space).

3) I'm not sure you want the '!' at all here (but haven't read the rest
   of this postinst).

Thanks.

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.15.0-3-amd64 (SMP w/8 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages sane-utils depends on:
ii  adduser3.118
ii  debconf [debconf-2.0]  1.5.79
ii  init-system-helpers1.61
ii  libavahi-client3   0.8-5
ii  libavahi-common3   0.8-5
ii  libc6  2.33-5
ii  libieee1284-3  0.2.11-14
ii  libjpeg62-turbo1:2.1.2-1
ii  libpng16-161.6.37-3
ii  libsane1   1.1.1-1
ii  libsystemd0250.3-2
ii  libusb-1.0-0   2:1.0.25-1
ii  libxml22.9.12+dfsg-5+b1
ii  lsb-base   11.1.0
ii  update-inetd   4.51

sane-utils recommends no packages.

Versions of packages sane-utils suggests:
ii  avahi-daemon  0.8-5
ii  unpaper   6.1-2+b2

-- debconf information:
* sane-utils/saned_run: false
* sane-utils/saned_scanner_group: true



Bug#993495: The same here

2021-12-29 Thread Florent DENAT

I got the same bug.

Thanx for the tip.

I commented out the "User=" line and sddm was able to start correctly.

I don't know which log I must upload. Sorry.



Bug#990331: reportbug: cups-browsed printing fails due to apparmor config with message 'No destination host name supplied by cups-browsed for printer'

2021-09-11 Thread Florent Rougon
Hello Brian,

As I wrote in my previous message, the two lines I quoted from my
/var/log/syslog are from **before the fix** (i.e., before I purged
cups-browsed).

Regards

-- 
Florent



Bug#990331: reportbug: cups-browsed printing fails due to apparmor config with message 'No destination host name supplied by cups-browsed for printer'

2021-09-11 Thread Florent Rougon
Hello,

I also had the not-very-helpful message from CUPS:

  No destination host name supplied by cups-browsed for printer, is
  cups-browsed running?

Of course, cups-browsed was well running and I even tried to restart it,
also cups.service, etc. The solution I found, before reading this
report, was inspired by this answer:

  https://askubuntu.com/a/1128869

Here it is. First some context: the printer is connected to 
and printing from  first worked, then failed for the *very
same document* in the *very same Okular instance*---I simply wanted to
print two sets of pages from the same document, oh my...

Solution (everything done on ):

1) I purged the cups-browsed package, even though cups-daemon recommends
   it.

2) Then I figured out I needed to do “Delete Printer” from the CUPS web
   administration page for the printer (otherwise, trying to do step 3
   would fail with the incomprehensible error message “Unable to add
   printer:Cannot change printer-is-shared for remote queues.”—that,
   regardless of whether “Share printer” was being checked).

3) From the CUPS web administration page:

   Administration → Add Printer → Discovered Network Printers: Brother
   DCP-L2550DN (driverless) @  (DCP-L2550DN DCP-L2550DN
   series) → ... → Add Printer (the button).

Finally, I was able to print from .

Even though this solution is quite different from that proposed by
Gabriel, this may very well be the same issue, because now that I've
found this report, I see that my /var/log/syslog on  from
before the fix has entries like:

Sep 11 13:39:09 localhost kernel: [15658.624326] audit: type=1400 audit(...): 
apparmor="DENIED" operation="capable" profile="/usr/sbin/cupsd" pid=6811 
comm="cupsd" capability=12  capname="net_admin"
Sep 11 13:39:09 localhost kernel: [15658.718083] audit: type=1400 audit(...): 
apparmor="DENIED" operation="capable" profile="/usr/sbin/cups-browsed" pid=6814 
comm="cups-browsed" capability=23  capname="sys_nice"

Hope this helps other people. Regards,

-- 
Florent



Bug#980144: mailutils: movemail does not remove start mailbox when moving

2021-01-15 Thread Florent Rougon
Hello,

This appears to be a duplicate of #980042:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=980042

Regards

-- 
Florent



Bug#980042: mailutils: does not remove extracted emails

2021-01-13 Thread Florent Rougon
Package: mailutils
Version: 1:3.11.1-4
Severity: important

Dear maintainer,

Since I upgraded mailutils from 1:3.10-3+b1 to 1:3.11.1-2 a couple of
days ago, movemail doesn't remove extracted emails anymore from the
source mbox file (I do *not* use option --keep-messages).

Example:

  1) Verify that /var/mail/$USER is empty.

  2) echo Bla | mail -s "Test movemail" $USER

  3) 'ls -l /var/mail/$USER' now reports size 573 bytes (it contains the
 test email sent in step 2).

  4) /usr/bin/movemail.mailutils /var/mail/$USER /tmp/extracted-mail

  5) No error reported, test email was properly extracted to
 /tmp/extracted-mail, but /var/mail/$USER is still 573 bytes long.

This has the following consequence when I use my mail client (Gnus,
which can use movemail to read mbox files): since the upgrade to
mailutils 1:3.11.1-2, *every time I check my mail box*, new copies of
every email stored in /var/mail/$USER are retrieved. A nightmare...

I verified yesterday that the following downgrade of mailutils fixes the
problem:

  [REMOVE, NOT USED] libmailutils8:amd64 1:3.11.1-2
  [INSTALL, DEPENDENCIES] libmailutils7:amd64 1:3.10-3+b1
  [DOWNGRADE] mailutils:amd64 1:3.11.1-2 -> 1:3.10-3+b1
  [DOWNGRADE] mailutils-common:amd64 1:3.11.1-2 -> 1:3.10-3

Today, I upgraded to the latest version in unstable (1:3.11.1-4).
Unfortunately, this caused the problem to reappear, hence this report.

Thanks for your work, kind regards.

Florent

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-1-amd64 (SMP w/8 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages mailutils depends on:
ii  libc6 2.31-9
ii  libcrypt1 1:4.4.17-1
ii  libfribidi0   1.0.8-2
ii  libgnutls30   3.7.0-5
ii  libgsasl7 1.10.0-3
ii  libldap-2.4-2 2.4.56+dfsg-1
ii  libmailutils8 1:3.11.1-4
ii  libncurses6   6.2+20201114-2
ii  libpam0g  1.4.0-2
ii  libreadline8  8.1-1
ii  libtinfo6 6.2+20201114-2
ii  libunistring2 0.9.10-4
ii  mailutils-common  1:3.11.1-4

Versions of packages mailutils recommends:
ii  postfix [mail-transport-agent]  3.5.6-1

Versions of packages mailutils suggests:
pn  mailutils-doc  
pn  mailutils-mh   

-- no debconf information



Bug#979685: /usr/share/dict/indonesian

2021-01-09 Thread Florent Monnier
Package: windonesian
Package name: windonesian
Version: 0.01
Upstream Author: Florent Monnier 
URL: https://github.com/fccm/wikt-to-words
License: Zlib
Programming Lang: OCaml
Description: Indonesian dictionary words for /usr/share/dict

Based on: https://packages.debian.org/en/sid/wordlist
it seems that languages currently available for "/usr/share/dict" are:

american, brazilian, british, bulgarian, canadian, catalan, danish, dutch,
esperanto, faroese, french, galician-minimos, german, irish, italian, manx,
norwegian, ogerman, polish, portuguese, spanish, swedish, swiss, ukrainian.

This package provides the equivalent for Indonesian.

Download:
  https://fccm.github.io/wikt-to-words/indonesian

While using the wiktionary dumps to generate it, some other languages
could be done too (please tell me if you want more).



Bug#975919: okular: Back and Forward navigation functions are broken

2020-11-26 Thread Florent Rougon
Package: okular
Version: 4:20.08.3-1
Severity: important
Tags: upstream patch

Dear maintainers,

Recent updates to okular have completely broken its Back and Forward
navigation functions (those found in the Go menu and bound to
Alt-Shift-Left and Alt-Shift-Right by default). This has been reported
upstream at [1] and fixed in commit 585340cef[2] (link found in this
comment[3] by Nate Graham on the bug report page[1]).

I have rebuilt okular 4:20.08.3-1 with the attached debdiff, which
merely applies the patch corresponding to [2]. This fixes the issue for
me. Hope this helps other users.

Thanks & regards

[1] https://bugs.kde.org/show_bug.cgi?id=414701
[2] 
https://invent.kde.org/graphics/okular/commit/585340cef5ca4dd1e26fe3baea1cf396f8de6469
[3] https://bugs.kde.org/show_bug.cgi?id=414701#c24

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.9.0-3-amd64 (SMP w/8 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages okular depends on:
ii  kinit 5.74.0-2
ii  kio   5.74.0-2
ii  libc6 2.31-4
ii  libfreetype6  2.10.2+dfsg-4
ii  libjpeg62-turbo   1:2.0.5-1.1
ii  libkf5activities5 5.74.0-2
ii  libkf5archive55.74.0-2
ii  libkf5bookmarks5  5.74.0-2
ii  libkf5codecs5 5.74.0-2
ii  libkf5completion5 5.74.0-2
ii  libkf5configcore5 5.74.0-2
ii  libkf5configgui5  5.74.0-2
ii  libkf5configwidgets5  5.74.0-2
ii  libkf5coreaddons5 5.74.0-2
ii  libkf5crash5  5.74.0-2
ii  libkf5i18n5   5.74.0-3
ii  libkf5iconthemes5 5.74.0-2
ii  libkf5itemviews5  5.74.0-2
ii  libkf5jobwidgets5 5.74.0-2
ii  libkf5kexiv2-15.0.0   20.04.3-1
ii  libkf5kiocore55.74.0-2
ii  libkf5kiowidgets5 5.74.0-2
ii  libkf5parts5  5.74.0-2
ii  libkf5pty55.74.0-2
ii  libkf5purpose-bin 5.74.0-2
ii  libkf5purpose55.74.0-2
ii  libkf5service-bin 5.74.0-2
ii  libkf5service55.74.0-2
ii  libkf5textwidgets55.74.0-2
ii  libkf5wallet-bin  5.74.0-2
ii  libkf5wallet5 5.74.0-2
ii  libkf5widgetsaddons5  5.74.0-3
ii  libkf5windowsystem5   5.74.0-2
ii  libkf5xmlgui5 5.74.0-2+b1
ii  libokular5core9   4:20.08.3-1
ii  libphonon4qt5-4   4:4.11.1-3
ii  libpoppler-qt5-1  20.09.0-3
ii  libqca-qt5-2  2.3.1-1
ii  libqmobipocket2   4:20.04.3-1
ii  libqt5core5a  5.15.1+dfsg-4
ii  libqt5dbus5   5.15.1+dfsg-4
ii  libqt5gui55.15.1+dfsg-4
ii  libqt5printsupport5   5.15.1+dfsg-4
ii  libqt5svg55.15.1-2
ii  libqt5texttospeech5   5.15.1-2
ii  libqt5widgets55.15.1+dfsg-4
ii  libqt5xml55.15.1+dfsg-4
ii  libspectre1   0.2.9-1
ii  libstdc++610.2.0-19
ii  phonon4qt54:4.11.1-3
ii  zlib1g1:1.2.11.dfsg-2

Versions of packages okular recommends:
ii  cups-bsd  2.3.3-4

Versions of packages okular suggests:
ii  ghostscript9.53.3~dfsg-5
ii  okular-extra-backends  4:20.08.3-1
ii  poppler-data   0.4.10-1
ii  texlive-binaries   2020.20200327.54578-5
ii  unrar  1:5.9.4-1

-- no debconf information
diff -Nru okular-20.08.3/debian/changelog okular-20.08.3/debian/changelog
--- okular-20.08.3/debian/changelog 2020-11-08 13:41:37.0 +0100
+++ okular-20.08.3/debian/changelog 2020-11-25 22:25:47.0 +0100
@@ -1,3 +1,9 @@
+okular (4:20.08.3-2~frougon.0) unstable; urgency=medium
+
+  * Add patch debian/patches/fix-back-and-forward-navigation.patch, which 
corresponds to 
<https://invent.kde.org/graphics/okular/commit/585340cef5ca4dd1e26fe3baea1cf396f8de6469>.
+
+ -- Florent Rougon   Wed, 25 Nov 2020 22:25:47 +0100
+
 okular (4:20.08.3-1) unstable; urgency=medium
 
   * Team upload.
diff -Nru okular-20.08.3/debian/patches/fix-back-and-forward-navigation.patch 
okular-20.08.3/debian/patches/fix-back-and-forward-navigation.patch
--- okular-20.08.3/debian/patches/fix-back-and-forward-navigation.patch 
1970-01-01 01:00:00.0 +0100
+++ okular-20.08.3/debian/patches/fix-back-and-forward-navigation.patch 
2020-11-25 22:24:14.0 +0100
@@ -0,0 +1,11 @@
+--- a/ui/pageview.cpp
 b/ui/pageview.cpp
+@@ -4509,7 +4509,7 @@
+ newViewport.rePos.normalizedY = focusedY;
+ // set the viewport to other observers
+ // do not update history if the viewport is autoscrolling
+-d->document->setViewportWithHistory(newViewport, this, false, 
d->scroller->state() == QScroller::Scrolling);
++d->document->setViewportWithHistory(newViewport, this, false, 
d->scroller->state() != QScroller::Scrolling);
+ }
+ d->document->setVisiblePageRects(visibleRects, this);
+ }

Bug#975520: snmp: Performance refression for snmp commands since .index files removal

2020-11-23 Thread florent . fourcot
Package: snmp
Version: 5.7.3+dfsg-5+deb10u1
Severity: normal

Dear Maintainer,

Since last snmp release 5.7.3+dfsg-5+deb10u1, we detected performance
regressions on snmpget/walk/bulkwalk (probably all commands). We bisected
the regression to this patch:
https://github.com/net-snmp/net-snmp/commit/4fd9a450444a434a993bc72f7c3486ccce41f602

For snmpd daemon, performance impact is probably very slow, the .index file
was not mandatory. However, for our use case (monitoring application) running
a lot of snmp commands, strace show a big change on number of opened files:

grep -c openat snmpget_strace_before
55

And now:
grep -c openat snmpget_strace_new
2197

We are looking for workaround (or to accept this drawback), but if you have
a solution to restore this cache for snmp commands only (probably not
affected by security issues like snmpd), it would be greatly appreciated.

Best regards,

Florent Fourcot

-- System Information:
Debian Release: 10.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-6-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages snmp depends on:
ii  libc6 2.28-10
ii  libsnmp-base  5.7.3+dfsg-5+deb10u1
ii  libsnmp30 5.7.3+dfsg-5+deb10u1
ii  libssl1.1 1.1.1d-0+deb10u3

Versions of packages snmp recommends:
ii  perl  5.28.1-6

snmp suggests no packages.

-- no debconf information



Bug#972885: emacs: Bundled Gnus unable to enter any group

2020-10-27 Thread Florent Rougon
tags 972885 + upstream
thanks

Hi Rob, thanks for your reply.

Rob Browning  wrote:

> Nice catch.  Have you, or are you already planning to post this
> upstream?

Well, I haven't done so but could certainly do it. I assume the Gnus
development list ("ding") would be more appropriate than an Emacs dev
list or Emacs bug report?

Regards

-- 
Florent



Bug#972885: emacs: Bundled Gnus unable to enter any group

2020-10-25 Thread Florent Rougon
retitle 972885 Lexical binding causes regression for gnus-summary-highlight
thanks

The problem appears to be due to the (presumably recent) use of lexical
binding in /usr/share/emacs/27.1/lisp/gnus/gnus-sum.el.gz
(cf. lexical-binding:t on the first line).

It is triggered by this piece of configuration from my .gnus.el:

(eval-after-load "gnus-sum"
  '(add-to-list
'gnus-summary-highlight
'((memq article gnus-newsgroup-processable)
  . flo-gnus-summary-processable-face)))

This code nicely highlights lines in the *Summary* buffer corresponding
to articles that have the process mark set. It has worked perfectly for
years until the aforementioned Emacs upgrade.

The problem can be solved either by me not using the above configuration
bit anymore (which is of course a regression), or by making the
`article' variable use dynamic binding before the failing `funcall' in
`gnus-summary-highlight-line' (see the attached patch; the change could
probably be done earlier in the function, along with the other similar
defvar's, but I've only tested the attached patch).

Regards

-- 
Florent
--- patch/gnus-sum.el.orig	2020-10-26 02:19:24.938566201 +0100
+++ patch/gnus-sum.el	2020-10-26 02:20:18.062310644 +0100
@@ -12834,6 +12834,7 @@
 	 (uncached (and gnus-summary-use-undownloaded-faces
 (memq article gnus-newsgroup-undownloaded)
 (not (memq article gnus-newsgroup-cached)
+(defvar article)
 (let ((face (funcall (gnus-summary-highlight-line-0
   (unless (eq face (gnus-get-text-property-excluding-characters-with-faces beg 'face))
 	(gnus-put-text-property-excluding-characters-with-faces


Bug#972885: emacs: Bundled Gnus unable to enter any group

2020-10-25 Thread Florent Rougon
Package: emacs
Version: 1:27.1+1-2
Severity: normal

Hello,

After upgrading my emacs packages today:

   [UPGRADE] emacs:amd64 1:26.3+1-2 -> 1:27.1+1-2
   [UPGRADE] emacs-bin-common:amd64 1:26.3+1-2 -> 1:27.1+1-2
   [UPGRADE] emacs-bin-common-dbgsym:amd64 1:26.3+1-2 -> 1:27.1+1-2
   [UPGRADE] emacs-common:amd64 1:26.3+1-2 -> 1:27.1+1-2
   [UPGRADE] emacs-el:amd64 1:26.3+1-2 -> 1:27.1+1-2
   [UPGRADE] emacs-gtk:amd64 1:26.3+1-2 -> 1:27.1+1-2
   [UPGRADE] emacs-gtk-dbgsym:amd64 1:26.3+1-2 -> 1:27.1+1-2

Gnus bundled with Emacs 27 can't enter any group anymore (from the
*Group* buffer). If I try to enter a group, I get the following error:

  Symbol's value as variable is void: article

Here is a backtrace of the error:

Debugger entered--Lisp error: (void-variable article)
  #f(compiled-function () #)()
  funcall(#f(compiled-function () #))
  (let ((face (funcall (gnus-summary-highlight-line-0 (if (eq face 
(gnus-get-text-property-excluding-characters-with-faces beg 'face)) nil 
(gnus-put-text-property-excluding-characters-with-faces beg (point-at-eol) 
'face (setq face (if (boundp face) (symbol-value face) face))) (if 
gnus-summary-highlight-line-function (progn (funcall 
gnus-summary-highlight-line-function article face)
  (let* ((beg (point-at-bol)) (article (or (gnus-summary-article-number) 
gnus-current-article)) (score (or (cdr (assq article gnus-newsgroup-scored)) 
gnus-summary-default-score 0)) (mark (or (let ((cl-x (gnus-data-find-in ... 
gnus-newsgroup-data))) (progn (progn (nth 1 cl-x gnus-unread-mark)) 
(inhibit-read-only t) (default gnus-summary-default-score) (default-high 
gnus-summary-default-high-score) (default-low gnus-summary-default-low-score) 
(uncached (and gnus-summary-use-undownloaded-faces (memq article 
gnus-newsgroup-undownloaded) (not (memq article gnus-newsgroup-cached) (let 
((face (funcall (gnus-summary-highlight-line-0 (if (eq face 
(gnus-get-text-property-excluding-characters-with-faces beg 'face)) nil 
(gnus-put-text-property-excluding-characters-with-faces beg (point-at-eol) 
'face (setq face (if (boundp face) (symbol-value face) face))) (if 
gnus-summary-highlight-line-function (progn (funcall 
gnus-summary-highlight-line-function article face))
  gnus-summary-highlight-line()
  gnus-summary-insert-line([0 "" "" "05 Apr 2001 23:33:09 +0400" "" "" 0 0 "" 
nil] 0 nil t 90 t nil "" nil 1)
  gnus-update-summary-mark-positions()
  gnus-summary-setup-buffer("nnml+mail:AUCTeX")
  gnus-summary-read-group-1("nnml+mail:AUCTeX" nil t nil nil nil)
  gnus-summary-read-group("nnml+mail:AUCTeX" nil t nil nil nil nil)
  gnus-group-read-group(nil t)
  gnus-group-select-group(nil)
  gnus-topic-select-group(nil)
  funcall-interactively(gnus-topic-select-group nil)
  call-interactively(gnus-topic-select-group nil nil)
  command-execute(gnus-topic-select-group)

This happens when `gnus-summary-highlight-line' from
/usr/share/emacs/27.1/lisp/gnus/gnus-sum.el.gz calls the byte-compiled
function that `gnus-summary-highlight-line-0' evaluates to. I've used my
nnml+mail:AUCTeX group as an example here, but this happens with all
groups I've tried. Hence, I can't read any mail with this version of the
emacs package. :-|

Thanks for your work!

Regards

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.9.0-1-amd64 (SMP w/8 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages emacs depends on:
ii  emacs-gtk  1:27.1+1-2

emacs recommends no packages.

emacs suggests no packages.

-- no debconf information



Bug#957037: biboumi: ftbfs with GCC-10

2020-08-04 Thread Florent Le Coz

On Fri, 17 Apr 2020 10:57:04 + Matthias Klose  wrote:
> Package: src:biboumi
> Version: 8.3-1
> Severity: normal
> Tags: sid bullseye
> User: debian-...@lists.debian.org
> Usertags: ftbfs-gcc-10
>
> Please keep this issue open in the bug tracker for the package it
> was filed for. If a fix in another package is required, please
> file a bug for the other package (or clone), and add a block in this
> package. Please keep the issue open until the package can be built in
> a follow-up test rebuild.
>
> The package fails to build in a test rebuild on at least amd64 with
> gcc-10/g++-10, but succeeds to build with gcc-9/g++-9. The
> severity of this report will be raised before the bullseye release,
> so nothing has to be done for the buster release.
>

This issue was fixed in biboumi 8.5, see this commit in particular 
https://lab.louiz.org/louiz/biboumi/-/commit/fa905a741fca3bee255b32b09e9e63bd09270560


Also 8.4 fixes a potential crash that can be caused remotely, so it’s 
probably good to upgrade in stable, not just in unstable or testing.



--

louiz’



Bug#958541: (no subject)

2020-07-28 Thread Florent Lévigne
Hi,

There is a fork of redshift for wayland : 
https://gitlab.com/chinstrap/gammastep/-/blob/master/NEWS.md

Best regards,
Florent



Bug#965193: policykit-1: fails to install: chown error on /usr/lib/policykit-1/polkit-agent-helper-1

2020-07-17 Thread Florent Rougon
Hello,

Same problem here, please provide a fix. Thanks.

-- 
Florent



Bug#852108: usbguard: fails to start after installation: "ERROR: Configuration: /etc/usbguard/rules.conf: usbguard::Exception"

2019-12-18 Thread Florent Rougon
Hello,

Thanks for your work on this package! This bug has the 'pending' tag
since January 24, 2017. Maybe the fix is not pending anymore?

Thanks & regards

-- 
Florent



Bug#944006: nginx-extras missing TLS1.3

2019-11-05 Thread Florent CARRÉ
Hi,

I use nginx-extras from buster (Debian official repository)

nginx version: nginx/1.14.2
built with OpenSSL 1.1.1c  28 May 2019 (running with OpenSSL 1.1.1d
10 Sep 2019)
TLS SNI support enabled
configure arguments: --with-cc-opt='-g -O2
-fdebug-prefix-map=/build/nginx-tBUzFN/nginx-1.14.2=.
-fstack-protector-strong -Wformat -Werror=format-security -fPIC
-Wdate-time -D_FORTIFY_SOURCE=2' --with-ld-opt='-Wl,-z,relro
-Wl,-z,now -fPIC' --prefix=/usr/share/nginx
--conf-path=/etc/nginx/nginx.conf
--http-log-path=/var/log/nginx/access.log
--error-log-path=/var/log/nginx/error.log
--lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid
--modules-path=/usr/lib/nginx/modules
--http-client-body-temp-path=/var/lib/nginx/body
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi
--http-proxy-temp-path=/var/lib/nginx/proxy
--http-scgi-temp-path=/var/lib/nginx/scgi
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-debug
--with-pcre-jit --with-http_ssl_module --with-http_stub_status_module
--with-http_realip_module --with-http_auth_request_module
--with-http_v2_module --with-http_dav_module --with-http_slice_module
--with-threads --with-http_addition_module --with-http_flv_module
--with-http_geoip_module=dynamic --with-http_gunzip_module
--with-http_gzip_static_module --with-http_image_filter_module=dynamic
--with-http_mp4_module --with-http_perl_module=dynamic
--with-http_random_index_module --with-http_secure_link_module
--with-http_sub_module --with-http_xslt_module=dynamic
--with-mail=dynamic --with-mail_ssl_module --with-stream=dynamic
--with-stream_ssl_module --with-stream_ssl_preread_module
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/http-headers-more-filter
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/http-auth-pam
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/http-cache-purge
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/http-dav-ext
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/http-ndk
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/http-echo
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/http-fancyindex
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/nchan
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/http-lua
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/rtmp
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/http-uploadprogress
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/http-upstream-fair
--add-dynamic-module=/build/nginx-tBUzFN/nginx-1.14.2/debian/modules/http-subs-filter

Le mar. 5 nov. 2019 à 14:46, Thomas Ward  a écrit :
>
> Can you include the output of `nginx -V` please as well?  Part of TLS support 
> is having a version of NGINX that is compiled against an OpenSSL in the 
> repositories for the version of Debian you're using which supports TLS1.3, 
> but that may not be the case in all releases of Debian.
>
>
> Thomas
>
>
> On 11/2/19 1:15 PM, Florent CARRÉ wrote:
>
> Package: nginx-extras
> Version: 1.14.2-2+deb10u1
>
> When I modify to have exclusively TLS1.2 and TLS1.3, just TLS1.2 is available.
>
> Steps to reproduce :
> - switch to ssl_protocols TLSv1.2 TLSv1.3
> - restart nginx
> - curl -v --tlsv1.3 mydomain.com
>
> I obtain :
> * TLSv1.3 (OUT), TLS handshake, Client hello (1):
> * TLSv1.3 (IN), TLS alert, protocol version (582):
> * error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version
> * Closing connection 0
> curl: (35) error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert
> protocol version
>
> And it's available in openssl : openssl ciphers -v | grep " TLSv1\.3 "
> TLS_AES_256_GCM_SHA384  TLSv1.3 Kx=any  Au=any  Enc=AESGCM(256) Mac=AEAD
> TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=any  Au=any
> Enc=CHACHA20/POLY1305(256) Mac=AEAD
> TLS_AES_128_GCM_SHA256  TLSv1.3 Kx=any  Au=any  Enc=AESGCM(128) Mac=AEAD
>
> Regards
>



Bug#944006: nginx-extras missing TLS1.3

2019-11-02 Thread Florent CARRÉ
Package: nginx-extras
Version: 1.14.2-2+deb10u1

When I modify to have exclusively TLS1.2 and TLS1.3, just TLS1.2 is available.

Steps to reproduce :
- switch to ssl_protocols TLSv1.2 TLSv1.3
- restart nginx
- curl -v --tlsv1.3 mydomain.com

I obtain :
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS alert, protocol version (582):
* error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version
* Closing connection 0
curl: (35) error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert
protocol version

And it's available in openssl : openssl ciphers -v | grep " TLSv1\.3 "
TLS_AES_256_GCM_SHA384  TLSv1.3 Kx=any  Au=any  Enc=AESGCM(256) Mac=AEAD
TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=any  Au=any
Enc=CHACHA20/POLY1305(256) Mac=AEAD
TLS_AES_128_GCM_SHA256  TLSv1.3 Kx=any  Au=any  Enc=AESGCM(128) Mac=AEAD

Regards



Bug#918358: libsane:amd64: Missing permissions for scanner group on usb device

2019-10-17 Thread Florent Rougon
Hello,

Same problem for me as well as for other people at [1]. This happened
after upgrading to 'buster' the machine where the scanner is plugged.
Adding the udev rule fixes the issue. This regression is annoying, it
would be nice for other users if our dear maintainers could fix it. :-)

Thanks & regards

[1] https://www.raspberrypi.org/forums/viewtopic.php?t=243513

-- 
Florent



Bug#936036: fd-find: shell completion does not works

2019-08-29 Thread Florent Lévigne
Package: fd-find
Version: 7.3.0-3
Severity: normal

Hello,

Shell completion does not work (tested in zsh and bash), because of the
executable name in Debian (fdfind and not fd as in upstream).
I have completion when i type fd (which is a command not found), but nothing
with fdfind.



-- System Information:
Debian Release: 10.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages fd-find depends on:
ii  libc62.28-10
ii  libgcc1  1:8.3.0-6

fd-find recommends no packages.

fd-find suggests no packages.

-- no debconf information



Bug#934587: fd-find: shell completion does not work

2019-08-29 Thread Florent Lévigne
Hello,

Thanks for the update, but the completion does not work (tested in zsh and 
bash).
It must be because of the executable name in Debian (fdfind and not fd).
I have completion when i type fd (which is a command not found), but nothing 
with fdfind.



Bug#934587: fd-find: shell completion not provided

2019-08-12 Thread florent
Package: fd-find
Version: 7.2.0-2
Severity: normal

Hello,

The package does not provide files for shell completion. Upstream deb packages
(in github) have files to complete shell commands for bash, zsh and fish.

Can you add them?
Thanck you.



-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages fd-find depends on:
ii  libc62.28-10
ii  libgcc1  1:8.3.0-6

fd-find recommends no packages.

fd-find suggests no packages.

-- no debconf information



Bug#921598: No METAR available since noaa.gov switched to https

2019-02-17 Thread Florent Rougon
Hi again Gabriel, hi Tobias,

"Dr. Tobias Quathamer"  wrote:

> Hi Gabriel and Florent,
>
> thanks for reporting this bug and pointing to the commits! I'm currently
> preparing a new upload of simgear which should still be in time for buster.

The partial revert I foresaw has happened. :)

  
https://sourceforge.net/p/flightgear/flightgear/ci/c2fb01ccb7df6fc893ab79850654cb39153cea3d/

Regards

-- 
Florent



Bug#921598: No METAR available since noaa.gov switched to https

2019-02-16 Thread Florent Rougon
Hello,

"Gabriel F. T. Gomes"  wrote:

> I updated the merge request.
>
> When I first wrote the merge request, upstream did not have a fix for
> the METAR problem.  Now they do [1].  So, I removed the simple patch I
> wrote, and replaced it with this upstream fix.

(...)

> [1]
> https://sourceforge.net/p/flightgear/flightgear/ci/2fdc24c1097955c5d2c88a9cc0be66069b22eebe/

As has been discussed on flightgear-devel and despite the commit
message, commit [1] is not a proper fix and will probably be reverted (I
mean, the "if( responseCode() >= 400 )" part, not the http to https URL
change which is okay though unnecessary now that redirection is fixed in
SimGear's HTTP::Client).

The correct fix is [a]. [b] is also a bug fix in this area, but doesn't
solve the particular METAR fetching problem.

[a] 
https://sourceforge.net/p/flightgear/simgear/ci/34b3c52a288d62779073fc7694344d0658755645/
[b] 
https://sourceforge.net/p/flightgear/simgear/ci/6197098541eceecdb0dcfe8a58b15f0d0773c391/

-- 
Florent



Bug#919522: libqt5webkit5: incorrect page width for plain text messages when using trojita

2019-01-16 Thread Florent Bayle
Package: libqt5webkit5
Version: 5.212.0~alpha2-19
Severity: normal

When using trojita from 

 
http://download.opensuse.org/repositories/home:/jkt-gentoo:/trojita/Debian_9.0/ 

 
I'm encountering the bug described at   

 
https://github.com/annulen/webkit/issues/511 : plain text messages are  

 
incorrectly displayed with a page width of 2 characters.

 


 
If I rebuild the package using the patches specified in the bug thread: 

 
https://github.com/annulen/webkit/commit/6faf11215e1af27d35e921ae669aa0251a01a1ab


and 

 
https://github.com/annulen/webkit/commit/76420459a13d9440b41864c93cb4ebb404bdab55
and install the resulting package, the messages are now displayed
correctly.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE= 
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libqt5webkit5 depends on:
ii  dpkg   1.19.2
ii  libc6  2.28-5
ii  libgcc11:8.2.0-14
ii  libglib2.0-0   2.58.2-3
ii  libgstreamer-plugins-base1.0-0 1.14.4-dmo1
ii  libgstreamer1.0-0  1.14.4-1
ii  libhyphen0 2.8.8-7
ii  libicu63   63.1-5
ii  libjpeg62-turbo1:1.5.2-2+b1
ii  libpng16-161.6.36-3
ii  libqt5core5a [qtbase-abi-5-11-3]   5.11.3+dfsg-2
ii  libqt5gui5 5.11.3+dfsg-2
ii  libqt5network5 5.11.3+dfsg-2
ii  libqt5positioning5 5.11.3+dfsg-2
ii  libqt5printsupport55.11.3+dfsg-2
ii  libqt5qml5 [qtdeclarative-abi-5-11-2]  5.11.3-2
ii  libqt5quick5   5.11.3-2
ii  libqt5sensors5 5.11.3-2
ii  libqt5webchannel5  5.11.3-2
ii  libqt5widgets5 5.11.3+dfsg-2
ii  libsqlite3-0   3.26.0+fossilbc891ac6b-1
ii  libstdc++6 8.2.0-14
ii  libwebp6   0.6.1-2
ii  libwoff1   1.0.2-1
ii  libxml22.9.4+dfsg1-7+b3
ii  libxslt1.1 1.1.32-2
ii  zlib1g 1:1.2.11.dfsg-1

libqt5webkit5 recommends no packages.

libqt5webkit5 suggests no packages.

-- no debconf information



Bug#892275: (No Subject)

2018-06-09 Thread Florent Fayolle
> I can second that with redshift-gtk it is indeed broken.

Same for me,

Cheers,
Florent



Bug#892794: systemd-networkd fails to configure IPv6 without MTU from RA

2018-03-15 Thread Florent Fourcot

Hello,

I confirm that patched package works as well for networks with MTU 
options enabled in RA.


I used nldecap tool (https://github.com/etene/nldecap) to check systemd 
behavior for IPv6 configuration.


232-25+deb9u1 => not reading MTU at all, and it breaks partially IPv6 
connectivity for networks with lower MTU (regression between jessie and 
stretch, since systemd was not configuring IPv6 before and that kernel 
was reading MTU values).


nldecap output (for a link without MTU enabled, but same trace for a 
link with MTU):


[packet 528] route, message 1 (unknown type)
├─header
│ ├─pid : 1
│ ├─length : 92
[...]
│ │ ├─flags : 0
│ │ ├─attrs
│ │ │ ├[0] RTA_GATEWAY : 'fe80::50:43ff:fef5:1c47'
│ │ │ ├[1] RTA_PRIORITY : 0
│ │ │ ├[2] RTA_PREF : '00'
│ │ │ └[3] RTA_OIF : 2
│ │ ├─table : 254



232-25+deb9u2 => working MTU, but no default route anymore for networks 
without MTU option provided. nldecap reports only route provided with 
MTU attribute (not a surprise, consistent with the current bug report), 
routes without MTU are not configured at all.


nldecap output with MTU enabled (see new RTA_METRICS field):

[packet 2] route, message 1 (unknown type)
├─header
│ ├─pid : 1
│ ├─length : 104
[...]
│ │ ├─flags : 0
│ │ ├─attrs
│ │ │ ├[0] RTA_GATEWAY : 'fe80::224:d4ff:fea7:108'
│ │ │ ├[1] RTA_PRIORITY : 0
│ │ │ ├[2] RTA_PREF : '00'
│ │ │ ├[3] RTA_OIF : 2
│ │ │ └[4] RTA_METRICS
│ │ │   └─attrs
│ │ │ └[0] RTAX_MTU : 1480
│ │ ├─table : 254


With version compiled by Cyril Brulebois, both version are working, but 
there is a small difference for link without MTU (RTA_metrics is set, 
even if this is empty):


├─header
│ ├─pid : 1
│ ├─length : 96
[...]
│ │ ├─flags : 0
│ │ ├─attrs
│ │ │ ├[0] RTA_GATEWAY : 'fe80::50:43ff:fef5:1c47'
│ │ │ ├[1] RTA_PRIORITY : 0
│ │ │ ├[2] RTA_PREF : '00'
│ │ │ ├[3] RTA_OIF : 2
│ │ │ └[4] RTA_METRICS   <= this is new
│ │ │   └─attrs : []
│ │ ├─table : 254

For the best of my knowledge, it's safe and should not have any side 
effect. But it's not exactly the same netlink packet than with version 
232-25+deb9u1




Bug#887411: [pkg-fgfs-crew] Bug#887411: fgfs: segfaults when receiving UDP data too early

2018-01-16 Thread Florent Rougon
Hello,

Frank Heckenbach <f.heckenb...@fh-soft.de> wrote:

> When receiving UDP data too early, fgfs segfaults after giving the
> message:
>
>   AI error: updating aircraft without traffic record at ...
>
> I've traced the segfault to trafficcontrol.cxx:984
>
> At this point, "current" is uninitialized, so UB.

Thanks for you report. There was a fix applied in May 2017 that seems to
address the problem you found:

  
https://sourceforge.net/p/flightgear/flightgear/ci/9a64150d57ef2b7a72a3b704e97a0abbaeb10a32/

This fix is present in FlightGear 2017.2.1 and all versions >= 2017.3.0.

Regards

-- 
Florent



Bug#870806: Also fails with 2.1.22

2017-10-09 Thread Florent Rougon
Hi,

The workaround I've found is to put:

  disable-ipv6

in ~/.gnupg/dirmngr.conf. It's a pity that IPv4 isn't supported by
default anymore, because some people disable IPv6 on their boxes
*precisely* for security reasons---following the same logic that leads
one to only install the server software one needs, and only open the
needed ports on a firewall, no more.

Regards

-- 
Florent



Bug#877533: biboumi needs /var/lib/biboumi directory to work properly.

2017-10-03 Thread Florent Le Coz

On 10/02/2017 06:32 PM, Vasudev Kamath wrote:

However, by default (if the option db_name is not set in the biboumi.cfg
file), biboumi will try to open (or create) the database file
$XDR_DATA_HOME/biboumi.sqlite or $HOME/.config/biboumi/biboumi.sqlite if
XDR_DATA_HOME is not defined.

Umm.. Slightly confused, if it is to use those environment variable the
unit should be installed with --user?. Also in the error file I noticed
biboumi complaining about non existent /var/lib/biboumi/biboumi.sqlite.

So am I understanding something wrong?.
I’m not exactly sure how this happened. Maybe the XDG_DATA_PATH or HOME 
for the user “nobody” is /var/lib?
I just checked, and /var/lib is hardcoded nowhere in biboumi’s sources 
(except in the Dockerfile, which is not used at all here, of course).


Note that these env variables are standard ones. I used this 
specification to write the code:

https://standards.freedesktop.org/basedir-spec/basedir-spec-latest.html


You also have to make sure the path is correct, somehow.

I would appreciate some more input as I was planning to add postinst
file which adds /var/lib/biboumi folder and also create user and group
biboumi biboumi.

Cheers,


(Disclaimer: I’m not very familiar with debian’s packaging policy 
regarding users creation, or configuration files)


I don’t know exactly how (and if) debian defines these variables by 
default. But if this is not the case, then we have a few solutions:


- Install the /etc/biboumi/biboumi.cfg file with the package, using the 
example config, with the addition of db_name=/var/lib/biboumi/biboumi.sqlite


- Make sure the environment variable XDG_DATA_HOME is set to /var/lib 
when biboumi is started (in the unit file, or something else?)



And in any case, yes the package should probably create a “biboumi” 
account, and /var/lib/biboumi should be owned by it.



--

louiz’



Bug#877536: Copyright information about the cmake files is outdated

2017-10-02 Thread Florent Le Coz

Package: biboumi
Version: 6.0-1
Severity: minor

Hello,


in debian/copyright we can read the following:

Files: cmake/Modules/FindLITESQL.cmake
 louloulibs/cmake/Modules/FindBOTAN.cmake
 louloulibs/cmake/Modules/FindCARES.cmake
 louloulibs/cmake/Modules/FindICONV.cmake
 louloulibs/cmake/Modules/FindLIBIDN.cmake
 louloulibs/cmake/Modules/FindLIBUUID.cmake
 louloulibs/cmake/Modules/FindSYSTEMD.cmake
Copyright: NONE


However some of these files were removed, one has been added, and the rest has 
been moved into a new directory

It should be:

Files: cmake/Modules/FindBOTAN.cmake
 cmake/Modules/FindGCRYPT.cmake
 cmake/Modules/FindICONV.cmake
 cmake/Modules/FindLIBIDN.cmake
 cmake/Modules/FindLIBIDN.cmake
 cmake/Modules/FindSQLITE3.cmake
 cmake/Modules/FindSYSTEMD.cmake
 cmake/Modules/FindUDNS.cmake
Copyright: NONE

(or maybe simpler

Files: cmake/Modules/*.cmake

With the exception of CodeCoverage.cmake)

--
louiz’



Bug#877533: biboumi needs /var/lib/biboumi directory to work properly.

2017-10-02 Thread Florent Le Coz

On 10/02/2017 06:01 PM, Vasudev Kamath wrote:

Package: biboumi
Version: 6.0-1
Severity: serious

Dear Maintainer,

 From the newer version of biboumi, it needs /var/lib/biboumi directory
to be existing to start the service. This probably changed during version
5.0 or 6.0 (not sure which exactly as I found issue in 6.0).

Please create /var/lib/biboumi during package installation which should be
owned by nobody and nogroup.

For your information, this is new in version 6.0, because the support 
for the database has been enabled in debian only in that version because 
the dependencies have been lightened (it previously required litesql, 
which is not packaged anywhere, now it only depends on sqlite3, which is 
a very light dependency that can already be found in debian).



However, by default (if the option db_name is not set in the biboumi.cfg 
file), biboumi will try to open (or create) the database file  
$XDR_DATA_HOME/biboumi.sqlite or $HOME/.config/biboumi/biboumi.sqlite if 
XDR_DATA_HOME is not defined.


You also have to make sure the path is correct, somehow.

--

louiz’



Bug#873439: [pkg-fgfs-crew] Bug#873439: flightgear: CVE-2017-13709: Incorrect access control

2017-08-28 Thread Florent Rougon
Hi,

For stretch, the last two commits of upstream branch release/2016.4:

  https://sourceforge.net/p/flightgear/flightgear/ci/release/2016.4/~/tree/

should do the job (as already said in other mails, and ditto for
unstable with the release/2017.2 branch).

For jessie (it's also affected), I successfully built FG in a
jessie-amd64 pbuilder chroot with the attached source debdiff. You'll
certainly want to make the patch headers DEP-3-compliant and arrange
debian/changelog (at least the version number), but the C++ side should
be fine with these changes. I only tested the build in this old version:
no runtime test, but I don't expect any particular problem. :)

Regards

-- 
Florent
diff -Nru flightgear-3.0.0/debian/changelog flightgear-3.0.0/debian/changelog
--- flightgear-3.0.0/debian/changelog	2017-07-02 14:39:08.0 +0200
+++ flightgear-3.0.0/debian/changelog	2017-08-28 18:07:28.0 +0200
@@ -1,3 +1,13 @@
+flightgear (3.0.0-5+deb8u3+frougon0) jessie; urgency=high
+
+  * Add two patches for CVE-2017-13709:
+  - call-fgInitAllowedPaths-earlier-c7a2ae.patch (required by the next
+patch)
+  - CVE-2017-13709-FGLogger-2a5e3d.patch
+  * The patch headers are not in the Debian DEP-3 format, this needs fixing.
+
+ -- Florent Rougon <f.rou...@free.fr>  Mon, 28 Aug 2017 18:07:28 +0200
+
 flightgear (3.0.0-5+deb8u2) jessie; urgency=high
 
   * Add patch restrict-save-flightplan-secu-fix-faf872.patch: prevent
diff -Nru flightgear-3.0.0/debian/patches/call-fgInitAllowedPaths-earlier-c7a2ae.patch flightgear-3.0.0/debian/patches/call-fgInitAllowedPaths-earlier-c7a2ae.patch
--- flightgear-3.0.0/debian/patches/call-fgInitAllowedPaths-earlier-c7a2ae.patch	1970-01-01 01:00:00.0 +0100
+++ flightgear-3.0.0/debian/patches/call-fgInitAllowedPaths-earlier-c7a2ae.patch	2017-08-28 18:07:28.0 +0200
@@ -0,0 +1,55 @@
+Author: Florent Rougon <f.rou...@free.fr>
+
+Call fgInitAllowedPaths() earlier: after Options::processOptions()
+
+Call fgInitAllowedPaths() right after Options::processOptions() (which,
+among other things, determines $FG_ROOT and processes
+--allow-nasal-read). This way, fgInitAllowedPaths() can be used in much
+more code, such as when initializing subsystems.
+
+(cherry picked from commit c7a2aef59979af3e9ff22daabb37bdaadb91cd75)
+
+--- a/src/Main/fg_init.cxx
 b/src/Main/fg_init.cxx
+@@ -1023,7 +1023,12 @@
+ fgGetNode("/sim")->removeChild("aircraft-dir");
+ fgInitAircraft(true);
+ flightgear::Options::sharedInstance()->processOptions();
+-
++
++// Rebuild the lists of allowed paths for cases where a path comes from an
++// untrusted source, such as the global property tree (this uses $FG_HOME
++// and other paths set by Options::processOptions()).
++fgInitAllowedPaths();
++
+ render = new FGRenderer;
+ render->setEventHandler(eventHandler);
+ globals->set_renderer(render);
+--- a/src/Main/main.cxx
 b/src/Main/main.cxx
+@@ -461,7 +461,12 @@
+ } else if (configResult == flightgear::FG_OPTIONS_EXIT) {
+ return EXIT_SUCCESS;
+ }
+-
++
++// Set the lists of allowed paths for cases where a path comes from an
++// untrusted source, such as the global property tree (this uses $FG_HOME
++// and other paths set by Options::processOptions()).
++fgInitAllowedPaths();
++
+ // Initialize the Window/Graphics environment.
+ fgOSInit(, argv);
+ _bootstrap_OSInit++;
+--- a/src/Scripting/NasalSys.cxx
 b/src/Scripting/NasalSys.cxx
+@@ -800,9 +800,6 @@
+   .member("singleShot", ::isSingleShot, ::setSingleShot)
+   .member("isRunning", ::isRunning);
+ 
+-// Set allowed paths for Nasal I/O
+-fgInitAllowedPaths();
+-
+ // Now load the various source files in the Nasal directory
+ simgear::Dir nasalDir(SGPath(globals->get_fg_root(), "Nasal"));
+ loadScriptDirectory(nasalDir);
diff -Nru flightgear-3.0.0/debian/patches/CVE-2017-13709-FGLogger-2a5e3d.patch flightgear-3.0.0/debian/patches/CVE-2017-13709-FGLogger-2a5e3d.patch
--- flightgear-3.0.0/debian/patches/CVE-2017-13709-FGLogger-2a5e3d.patch	1970-01-01 01:00:00.0 +0100
+++ flightgear-3.0.0/debian/patches/CVE-2017-13709-FGLogger-2a5e3d.patch	2017-08-28 18:07:28.0 +0200
@@ -0,0 +1,69 @@
+Author: Florent Rougon <f.rou...@free.fr>
+
+Security: don't allow FGLogger to overwrite arbitrary files
+
+Since the paths of files written by FGLogger come from the property
+tree[1], they must be validated before we decide to write to these
+files.
+
+[1] Except for the "empty" case, which uses the default name
+'fg_log.csv'.
+
+This fixes CVE-2017-13709.
+
+(cherry picked from commit 2a5e3d06b2c0d9f831063afe7e7260bca456d679)
+
+--- a/src/Main/logger.cxx
 b/src/Main/logger.cxx
+@@ -11,10 +11,14 @@
+ 
+ #include 
+ #include 
++#include 
+ 
+ #include 
++#in

Bug#869309: [pkg-fgfs-crew] Bug#869309: Bug#869309: Updating the fgo Uploaders list

2017-08-02 Thread Florent Rougon
Hi,

Tobias Frost <t...@debian.org> wrote:

> It's your decission; close the bug, you will be kept as Uploader, 
> keep it open -> you will eventually be removed. (I gues this decission
> should not be delegated to the maintainer, but thats just my 2ct)

This bug is fixed in the Git repository on alioth (I removed myself from
Uploaders).

Regards

-- 
Florent



Bug#869310: Updating the pythondialog Uploaders list

2017-07-24 Thread Florent Rougon
Hallo Tobias,

Tobias Frost <t...@debian.org> wrote:

> Source: pythondialog
> Version: 3.4.0-1
> Severity: minor
> User: m...@qa.debian.org
> Usertags: mia-teammaint
>
> Florent Rougon <f...@debian.org> has retired, so can't work on
> the pythondialog package anymore (at least with this address).
>
> We are tracking their status in the MIA team and would like to ask you
> to remove them from the Uploaders list of the package so we can close
> that part of the file.

As explained in another mail, I announced my retirement from DD status
six years *before* my work on this Debian packaging, so in some way I
semi-resumed after this retirement. Even though I lack time to work on
Debian stuff, I'd like to update the package in the future if RL
permits. If someone wants to actively take over, that is fine with me
and I can get out, otherwise maybe it is okay to stay this way.

Regards

-- 
Florent



Bug#869309: [pkg-fgfs-crew] Bug#869309: Bug#869309: Updating the fgo Uploaders list

2017-07-24 Thread Florent Rougon
Hallo Tobias,

Tobias Frost <t...@debian.org> wrote:

> The database told me you've retired. If that is not the case or you've
> resumed (e.g using your @free.frp email) please appologize and just
> close the "Remove from uploaders" bugs. I absolutly do not want that
> you're being removed from any package as long as you're active!

I retired from DD status in 2008 and semi-resumed in 2014 (semi: without
asking to get this DD status back, because I can't spend enough time to
make it meaningful). It is true I don't have enough time for Debian work
at the moment due to RL difficulties... but I haven't completely given
up.

>>   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787464
>
> package overhauled & uploaded, including your fix. Many thanks for it
> (however I could not test your fix as lacking a joystick)

Very good, thank you! Too bad this came after the stretch release...

As for this bug, I'll let Markus decide. I am not interested in the
software anymore (having myself forked the upstream project years ago
because I couldn't reach the upstream author anymore, and there wasn't
any update either), but since the package is still in the archive, I
*might* be able to help if needed for a specific problem...

To be clear: I won't feel offended if removed from Uploaders.

Regards

-- 
Florent



Bug#869309: [pkg-fgfs-crew] Bug#869309: Updating the fgo Uploaders list

2017-07-22 Thread Florent Rougon
Hello,

Tobias Frost <t...@debian.org> wrote:

> Florent Rougon <f...@debian.org> has retired, so can't work on
> the fgo package anymore (at least with this address).
>
> We are tracking their status in the MIA team and would like to ask you
> to remove them from the Uploaders list of the package so we can close
> that part of the file.

I don't mind being removed from the Uploaders list (FGo! being obsolete
IMHO), but if you want to do useful QA work for the FlightGear ecosystem
that will also benefit any package using libplibjs, I'd rather suggest
to do a QA upload of plib as I suggested (with patch) at:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787464

That was more than two years ago---I agree it is not much if you
consider the upstream bug's honorable age, namely 13 years.

Regards

-- 
Florent



Bug#866225: biboumi: Dependencies on libubsan and libasan

2017-06-28 Thread Florent Le Coz
Package: biboumi
Version: 5.0-1
Severity: normal

Dear Maintainer,

Biboumi output .deb currently depends on libasan3 and libubsan0, but these 
dependencies are only useful in debug mode.
This makes the software slower and heavier (a package without these 
dependencies weighs only 300Ko instead of the current 2.7Mo).

To fix this, I applied this patch on my own copy:

https://lab.louiz.org/louiz/biboumi/commit/76f5fa81f2026770c907bee0e931aae8d8c7a1bd

Biboumi's build process disables the libasan, libubsan and the coverage tools, 
when it is build in Release mode.


I have my own build process where you can see the differences:

Before (as it is in debian sid at the moment):
https://lab.louiz.org/louiz/biboumi/-/jobs/8416/raw
And the output .deb: 
https://lab.louiz.org/louiz/biboumi/-/jobs/8416/artifacts/browse

After (with the patch applied):
https://lab.louiz.org/louiz/biboumi/-/jobs/8418/raw
And the output .deb: 
https://lab.louiz.org/louiz/biboumi/-/jobs/8418/artifacts/browse


So, it should be built with -DCMAKE_BUILD_TYPE=Release


-- System Information:
Debian Release: 9.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.3-200.fc25.x86_64 (SMP w/12 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968), LANGUAGE=C 
(charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect

Versions of packages biboumi depends on:
ii  libasan3 6.3.0-19
ii  libc62.24-11
ii  libexpat12.2.1-2
ii  libgcc1  1:7.1.0-7
ii  libgcrypt20  1.7.6-2
ii  libidn11 1.33-1
ii  libstdc++6   7.1.0-7
ii  libsystemd0  232-25
ii  libubsan07.1.0-7
ii  libudns0 0.4-1+b1
ii  libuuid1 2.29.2-1

biboumi recommends no packages.

biboumi suggests no packages.

-- no debconf information



Bug#856850: biboumi FTBFS on big endian: test failure

2017-06-28 Thread Florent Le Coz

Note that this bug has been fixed upstream, in the 5.0 release.

See the specific commit:

https://lab.louiz.org/louiz/biboumi/commit/99a4ddedaf903d27b781341108433ae2d9533ad1

I see that Buster still contains only version 4.3, but Sid already has 
5.0, so I don’t exactly know if you want to continue supporting the 4.x 
release or not.
If I understand correctly, since buster is not frozen yet, the sid 
(unstable) package should go into testing (buster) automatically in a 
few days/weeks, right?


Anyway, if you want help backporting this fix, let me know. And if you 
want to just package the 5.0, you can probably close this bug report.


--
Florent



Bug#865522: scilab: Segmentation fault at lauch

2017-06-22 Thread Florent Lévigne
Package: scilab
Version: 5.5.2-4
Severity: grave
Justification: renders package unusable

When lanching scilab, I have "Segmentation fault" (no more information). Tested
on a fresh install of Debian Stretch.



-- System Information:
Debian Release: 9.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages scilab depends on:
ii scilab-cli 5.5.2-4
ii scilab-full-bin 5.5.2-4+b1

Versions of packages scilab recommends:
ii scilab-doc 5.5.2-4

Versions of packages scilab suggests:
pn scilab-doc-fr 
pn scilab-doc-ja 
pn scilab-doc-pt-br 

-- no debconf information



Bug#864277: rsyslog not writing to log sockets on debian 8.5

2017-06-06 Thread FLORENT Philippe
Package: rsyslog

Version: 8.4.2-1+deb8u2

Debian : 8.5

Bug: rsyslog does not log any sftp activity even when configured properly

/etc/rsyslog.d/sftp.conf

module(load="imuxsock")
input(type="imuxsock" Socket="/var/ftp/userA/dev/log" CreatePath="on")
input(type="imuxsock" Socket="/var/ftp/userB/dev/log" CreatePath="on")

if $programname == 'internal-sftp' then /var/log/sftp.log
& stop

sockets (same for userB):

ls /var/ftp/userA/dev/ -lha
total 8.0K
drwxr-xr-x 2 root root 4.0K May 31 16:08 .
drw-r-xr-x 4 root root 4.0K May 31 12:00 ..
srw-rw-rw- 1 root root0 May 31 16:08 log

I put the log file in 777 to be sure it's not a permissions problem

ls /var/log/sftp.log  -lha
-rwxrwxrwx 1 root root 0 May 31 14:50 /var/log/sftp.log

/etc/ssh/sshd_config

Subsystem sftp internal-sftp -l INFO -f AUTH
Match Group ftpusers
ChrootDirectory %h
ForceCommand internal-sftp -u 0002
AllowTcpForwarding no
PermitTunnel no
X11Forwarding no

then

$sudo /etc/init.d/ssh restart
[ ok ] Restarting ssh (via systemctl): ssh.service.
$sudo /etc/init.d/rsyslog restart
[ ok ] Restarting rsyslog (via systemctl): rsyslog.service.

I can't find anything usefull in /var/log/messages nor /var/log/syslog




Bug#857050: firefox no longer plays sound without pulseaudio daemon

2017-03-14 Thread Florent Rougon
Hello,

Let me add a “me too” to express my sadness seeing firefox not being
able to use alsa anymore. IMO, this is a clear regression.

Regards

-- 
Florent



Bug#850421: (no subject)

2017-02-07 Thread Florent
Hi,

Upvote. Impacted on *tox too.
Same trace as #5.

Regards,

Florent



Bug#854252: biboumi: systemd unit file references non-existant group

2017-02-05 Thread Florent Le Coz

That’s right, the correct way is to run cmake like this:

cmake .. -DSERVICE_GROUP=nogroup

The biboumi.service file will contain the correct value (idem with 
-DSERVICE_USER, if needed)


--
louiz’



Bug#848114: flightgear: Allows the route manager to overwrite arbitrary files

2016-12-14 Thread Florent Rougon
Markus Wanner <mar...@bluegap.ch> wrote:

> Hello Florent,
>
> thanks a lot for your notification and the patch(es). Uploads to stable
> (security) and unstable should follow, shortly.

Fine, thank you, Markus!

Regards

-- 
Florent



Bug#848114: flightgear: Allows the route manager to overwrite arbitrary files

2016-12-14 Thread Florent Rougon
Source: flightgear
Version: 3.0.0-5
Severity: grave
Tags: security upstream fixed-upstream patch
Justification: user security hole

Hello,

As already stated in several places:

  
https://sourceforge.net/p/flightgear/flightgear/ci/280cd523686fbdb175d50417266d2487a8ce67d2/
  https://sourceforge.net/p/flightgear/mailman/message/35548661/
  
http://lists.alioth.debian.org/pipermail/pkg-fgfs-crew/2016-December/001795.html

and reported to people in charge of FlightGear both upstream (of which I am a
recent addition) and in several Linux distributions, the flightgear package
has a security bug allowing malicious Nasal code[1] to overwrite arbitrary
files the user running FlightGear has write access to, by using the property
tree to cause the route manager to save a flightplan.

This problem is, AFAICT, present in all FlightGear versions released after
October 5, 2009, which largely includes those shipped in Debian stable,
testing and unstable. It is however fixed in the upstream Git repository:

  
https://sourceforge.net/p/flightgear/flightgear/ci/280cd523686fbdb175d50417266d2487a8ce67d2/

and I have backported this fix to FlightGear 3.0.0, i.e., the version shipped
in jessie: cf. two links given above
(<https://sourceforge.net/p/flightgear/mailman/message/35548661/> and
<http://lists.alioth.debian.org/pipermail/pkg-fgfs-crew/2016-December/001795.html>),
the second one being more ready-to-use for Debian since it contains a debdiff
including an additional fix for build failures I encountered while testing the
fix in the jessie package.

Since all parties have already been contacted, this bug report is mainly for
tracking purposes, as advised by
<https://www.debian.org/security/faq#discover>.

I'm attaching here the patch for FlightGear 3.0.0 as well as the mentioned
debdiff for completeness and “self-containedness” of this report. The upstream
fix
(<https://sourceforge.net/p/flightgear/flightgear/ci/280cd523686fbdb175d50417266d2487a8ce67d2/>)
can certainly be used as is for the version in unstable.

Regards

[1] Which can be embedded in aircraft, which can in their turn be installed by
users from various third-party sources.
Description: Security fix: don't allow the route manager to overwrite arbitrary files
 Since the Save function of the route manager can be triggered from Nasal with
 an arbitrary path, we must check the path before overwriting the file.
 .
 (also add a missing include that is directly needed for this commit)
Author: Florent Rougon <f.rou...@free.fr>
Origin: upstream, https://sourceforge.net/p/flightgear/flightgear/ci/280cd523686fbdb175d50417266d2487a8ce67d2/

--- a/src/Autopilot/route_mgr.cxx
+++ b/src/Autopilot/route_mgr.cxx
@@ -47,6 +47,7 @@
 #include 
 #include 
 
+#include 
 #include "Main/fg_props.hxx"
 #include "Navaids/positioned.hxx"
 #include 
@@ -55,6 +56,8 @@
 #include "Airports/runways.hxx"
 #include 
 #include 
+#include // fgValidatePath()
+#include 
 
 #define RM "/autopilot/route-manager/"
 
@@ -707,7 +710,23 @@ void FGRouteMgr::InputListener::valueChanged(SGPropertyNode *prop)
   mgr->loadRoute(path);
 } else if (!strcmp(s, "@SAVE")) {
   SGPath path(mgr->_pathNode->getStringValue());
-  mgr->saveRoute(path);
+  const std::string authorizedPath = fgValidatePath(path.str(),
+true /* write */);
+
+  if (!authorizedPath.empty()) {
+mgr->saveRoute(authorizedPath);
+  } else {
+const SGPath proposedPath = SGPath(globals->get_fg_home()) / "Export";
+std::string msg =
+  "The route manager was asked to write the flightplan to '" +
+  path.str() + "', but this path is not authorized for writing. " +
+  "Please choose another location, for instance in the $FG_HOME/Export "
+  "folder (" + proposedPath.str() + ").";
+
+SG_LOG(SG_AUTOPILOT, SG_ALERT, msg);
+modalMessageBox("FlightGear", "Unable to write to the specified file",
+msg);
+  }
 } else if (!strcmp(s, "@NEXT")) {
   mgr->jumpToIndex(mgr->currentIndex() + 1);
 } else if (!strcmp(s, "@PREVIOUS")) {
diff -Nru flightgear-3.0.0/debian/changelog flightgear-3.0.0/debian/changelog
--- flightgear-3.0.0/debian/changelog	2015-03-18 11:19:39.0 +0100
+++ flightgear-3.0.0/debian/changelog	2016-12-13 12:40:51.0 +0100
@@ -1,3 +1,13 @@
+flightgear (3.0.0-5+deb8u1) jessie; urgency=medium
+
+  * Add patch route-manager-secu-fix-280cd5.patch (security fix preventing
+the route manager from being able to overwrite arbitrary files
+writable by the user running FlightGear).
+  * Add patch fix-missing-lX11-in-link-commands.patch to fix an FTBFS
+failure due to -lX11 missing in two link commands.
+
+ -- Florent Ro

Bug#838371: many bugs on phpmyadmin with mysql 5.7

2016-09-20 Thread FLORENT Philippe
My mysql server (official community version) is up to date

apt-cache policy mysql-community-server
mysql-community-server:
  Installed: 5.7.12-1debian8
  Candidate: 5.7.12-1debian8
  Version table:
 *** 5.7.12-1debian8 0
100 /var/lib/dpkg/status


Apparently it is fixed in phpmyadmin 4.4.1

https://github.com/phpmyadmin/phpmyadmin/commit/f3b7d693ec83c076a4e407907d4f99cd133f62b3


how can I install version  4.4.1 on debian ?











-Original Message-
From: Michal Čihař [mailto:mic...@cihar.com]
Sent: mardi 20 septembre 2016 15:33
To: FLORENT Philippe; 838...@bugs.debian.org
Subject: Re: Bug#838371: many bugs on phpmyadmin with mysql 5.7

Hi

FLORENT Philippe píše v Út 20. 09. 2016 v 12:54 +:
> Package: phpmyadmin
>  
> Version: 4.2.12-2+deb/u1
>  
> Debian : 2.5
>  
> Bug: phpmyadmin (users tabs) does not display any user, just the
> message:
>  
> Your privilege table structure seems to be older than this MySQL 
> version!
> Please run the mysql_upgrade command(mysql_fix_privilege_tables on 
> older systems) that should be included in your MySQL server 
> distribution to solve this problem!
>  
> Bug2: clicking on “new database”
>  
> SELECT
>     s.SCHEMA_NAME,
>     s.DEFAULT_COLLATION_NAME
>    FROM `information_schema`.SCHEMATA s
>     GROUP BY BINARY s.SCHEMA_NAME
>     ORDER BY BINARY `SCHEMA_NAME` ASC
> #1055 - Expression #1 of SELECT list is not in GROUP BY clause and 
> contains nonaggregated column 'information_schema.s.SCHEMA_NAME'
> which is not functionally dependent on columns in GROUP BY clause; 
> this is incompatible with sql_mode=only_full_group_by
>  
>  
> These bugs should be fixed but debian packages are not up to date

The Debian package works fine with MySQL version shipped in Debian. If you have 
upgraded MySQL from elsewhere, please upgrade phpMyAdmin as well.

-- 
Michal Čihař | https://cihar.com/ | https://weblate.org/



Bug#838371: many bugs on phpmyadmin with mysql 5.7

2016-09-20 Thread FLORENT Philippe
Package: phpmyadmin

Version: 4.2.12-2+deb/u1

Debian : 2.5

Bug: phpmyadmin (users tabs) does not display any user, just the message:

Your privilege table structure seems to be older than this MySQL version!
Please run the mysql_upgrade command(mysql_fix_privilege_tables on older 
systems) that should be included in your MySQL server distribution to solve 
this problem!

Bug2: clicking on "new database"

SELECT
s.SCHEMA_NAME,
s.DEFAULT_COLLATION_NAME
   FROM `information_schema`.SCHEMATA s
GROUP BY BINARY s.SCHEMA_NAME
ORDER BY BINARY `SCHEMA_NAME` ASC
#1055 - Expression #1 of SELECT list is not in GROUP BY clause and contains 
nonaggregated column 'information_schema.s.SCHEMA_NAME' which is not 
functionally dependent on columns in GROUP BY clause; this is incompatible with 
sql_mode=only_full_group_by


These bugs should be fixed but debian packages are not up to date


apt-cache policy phpmyadmin
phpmyadmin:
  Installed: 4:4.2.12-2+deb8u1
  Candidate: 4:4.2.12-2+deb8u2
  Version table:
 4:4.2.12-2+deb8u2 0
500 http://ftp.fr.debian.org/debian/ jessie/main amd64 Packages
500 http://security.debian.org/ jessie/updates/main amd64 Packages
500 http://http.us.debian.org/debian/ stable/main amd64 Packages
*** 4:4.2.12-2+deb8u1 0
100 /var/lib/dpkg/status

So I upgraded phpmyadmin . but stil the same bug appears

sudo apt-get --only-upgrade install phpmyadmin
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be upgraded:
  phpmyadmin
1 upgraded, 0 newly installed, 0 to remove and 65 not upgraded.
Need to get 3,853 kB of archives.
After this operation, 10.2 kB of additional disk space will be used.
Get:1 http://ftp.fr.debian.org/debian/ jessie/main phpmyadmin all 
4:4.2.12-2+deb8u2 [3,853 kB]
Fetched 3,853 kB in 0s (23.9 MB/s)
Reading changelogs... Done
Preconfiguring packages ...
(Reading database ... 64214 files and directories currently installed.)
Preparing to unpack .../phpmyadmin_4%3a4.2.12-2+deb8u2_all.deb ...
Unpacking phpmyadmin (4:4.2.12-2+deb8u2) over (4:4.2.12-2+deb8u1) ...
Processing triggers for man-db (2.7.0.2-5) ...
Processing triggers for hicolor-icon-theme (0.13-1) ...
Setting up phpmyadmin (4:4.2.12-2+deb8u2) ...
dbconfig-common: writing config to /etc/dbconfig-common/phpmyadmin.conf
dbconfig-common: flushing administrative password
apache2_invoke phpmyadmin: already enabled

I tried upgrading mysql 5.7

sudo mysql_upgrade -p
Enter password:
Checking if update is needed.
This installation of MySQL is already upgraded to 5.7.12, use --force if you 
still need to run mysql_upgrade


Bug#833326: pulseaudio: Lenovo Ideapad 300 - volume of the internal microphone is very low

2016-08-11 Thread Florent Mazzone
Ok thanks for your help. 
Link for the Alsa information : 
http://www.alsa-project.org/db/?f=42dbb27b8cefa74c1a6b837f7d80cd51523c5167
Best Regards,
Florent Mazzone
 

Le Jeudi 11 août 2016 5h37, Felipe Sateler <fsate...@debian.org> a écrit :
 

 Control: reassign -1 linux-image-4.6.0-1-amd64


On 10 August 2016 at 14:16, Florent Mazzone <ftmazz...@yahoo.fr> wrote:
>
> Hello Felipe,
>
> Thanks for your answer. I'm currently  using pavucontrol, as soon as I
> disable one channel from the microphone (for example the left chanel level
> is 0%), the microphone will work normally. I've found on the Ubuntu an issue
> that looks similar to the one I've noticed with this laptop (
> https://bugs.launchpad.net/ubuntu/+source/alsa-driver/+bug/1002978 ). Maybe
> the problem is specific to this type of microphone ?

So, it looks like that problem indeed. Reassigning to the kernel then,
as the problem is there.

Please attach the alsa-info as documented at
https://wiki.ubuntu.com/Audio/AlsaInfo

-- 

Saludos,
Felipe Sateler


  
!!
!!ALSA Information Script v 0.4.64
!!

!!Script ran on: Wed Aug  3 06:43:18 UTC 2016


!!Linux Distribution
!!--

Debian GNU/Linux stretch/sid \n \l PRETTY_NAME="Debian GNU/Linux stretch/sid" 
NAME="Debian GNU/Linux" ID=debian HOME_URL="https://www.debian.org/; 
SUPPORT_URL="https://www.debian.org/support; 
BUG_REPORT_URL="https://bugs.debian.org/;


!!DMI Information
!!---

Manufacturer:  LENOVO
Product Name:  80Q6
Product Version:   Lenovo ideapad 300-14ISK
Firmware Version:  D5CN28WW


!!Kernel Information
!!--

Kernel release:4.6.0-1-amd64
Operating System:  GNU/Linux
Architecture:  x86_64
Processor: unknown
SMP Enabled:   Yes


!!ALSA Version
!!

Driver version: k4.6.0-1-amd64
Library version:1.1.1
Utilities version:  1.1.1


!!Loaded ALSA modules
!!---

snd_hda_intel


!!Sound Servers on this system
!!

Pulseaudio:
  Installed - Yes (/usr/bin/pulseaudio)
  Running - Yes


!!Soundcards recognised by ALSA
!!-

 0 [PCH]: HDA-Intel - HDA Intel PCH
  HDA Intel PCH at 0xa132 irq 131


!!PCI Soundcards installed in the system
!!--

00:1f.3 Audio device: Intel Corporation Sunrise Point-LP HD Audio (rev 21)


!!Advanced information - PCI Vendor/Device/Subsystem ID's
!!---

00:1f.3 0403: 8086:9d70 (rev 21)
Subsystem: 17aa:3808


!!Modprobe options (Sound related)
!!

snd_pcsp: index=-2
snd_usb_audio: index=-2
snd_atiixp_modem: index=-2
snd_intel8x0m: index=-2
snd_via82xx_modem: index=-2


!!Loaded sound module options
!!---

!!Module: snd_hda_intel
align_buffer_size : -1
bdl_pos_adj : 
-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
beep_mode : 
Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y
enable : Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y,Y
enable_msi : -1
id : 
(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null)
index : 
-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
jackpoll_ms : 
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
model : 
(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null)
patch : 
(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null),(null)
position_fix : 
-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
power_save : 0
power_save_controller : Y
probe_mask : 
-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
probe_only : 
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
single_cmd : N
snoop : -1


!!HDA-Intel Codec information
!!---
--startcollapse--

Codec: Conexant CX20751/2
Address: 0
AFG Function Id: 0x1 (unsol 1)
Vendor Id: 0x14f1510f
Subsystem Id: 0x17aa3821
Revision Id: 0x100100
No Modem Function Group found
Default PCM:
rates [0x160]: 44100 48000 96000
bits [

Bug#833326: pulseaudio: Lenovo Ideapad 300 - volume of the internal microphone is very low

2016-08-10 Thread Florent Mazzone
 
Hello Felipe,
Thanks for your answer. I'm currently  using pavucontrol, as soon as I disable 
one channel from the microphone (for example the left chanel level is 0%), the 
microphone will work normally. I've found on the Ubuntu an issue that looks 
similar to the one I've noticed with this laptop ( 
https://bugs.launchpad.net/ubuntu/+source/alsa-driver/+bug/1002978 ). Maybe the 
problem is specific to this type of microphone ?

Best Regards,
Florent Mazzone



Le Mercredi 3 août 2016 22h00, Felipe Sateler <fsate...@debian.org> a écrit 
:
 

 Control: tags -1 moreinfo

On 3 August 2016 at 03:28, Florent Mazzone <ftmazz...@yahoo.fr> wrote:
> Package: pulseaudio
> Version: 9.0-1.1
> Severity: normal
>
> Dear Maintainer,
>
> When using Skype, I've noticed that the volume of the internal microphone is
> very low.
>
> Configuring different volume levels for the two channels of the microphone
> resolves the problem temporarily (for ex: left 0% right 100%). But as soon as 
> a
> software such as Skype tries to adapt the volume of the microphone, the volume
> decreases again and the microphone becomes unusable.

What happens if you use pavucontrol to control the microphone volume?
Could you attach the output of `pactl list sources` both when the
volume is low and after the volume is up? Also, a verbose log[1] of
the problem occurring may be useful.

[1] wiki.ubuntu.com/PulseAudio/Log

-- 

Saludos,
Felipe Sateler


  pactl list sources
Source #0
State: SUSPENDED
Name: alsa_output.pci-_00_1f.3.analog-stereo.monitor
Description: Monitor of Audio interne Stéréo analogique
Driver: module-alsa-card.c
Sample Specification: s16le 2ch 44100Hz
Channel Map: front-left,front-right
Owner Module: 6
Mute: no
Volume: front-left: 65536 / 100% / 0,00 dB,   front-right: 65536 / 100% 
/ 0,00 dB
balance 0,00
Base Volume: 65536 / 100% / 0,00 dB
Monitor of Sink: alsa_output.pci-_00_1f.3.analog-stereo
Latency: 0 usec, configured 0 usec
Flags: DECIBEL_VOLUME LATENCY 
Properties:
device.description = "Monitor of Audio interne Stéréo 
analogique"
device.class = "monitor"
alsa.card = "0"
alsa.card_name = "HDA Intel PCH"
alsa.long_card_name = "HDA Intel PCH at 0xa132 irq 131"
alsa.driver_name = "snd_hda_intel"
device.bus_path = "pci-:00:1f.3"
sysfs.path = "/devices/pci:00/:00:1f.3/sound/card0"
device.bus = "pci"
device.vendor.id = "8086"
device.vendor.name = "Intel Corporation"
device.product.id = "9d70"
device.product.name = "Sunrise Point-LP HD Audio"
device.form_factor = "internal"
device.string = "0"
module-udev-detect.discovered = "1"
device.icon_name = "audio-card-pci"
Formats:
pcm

Source #1
State: SUSPENDED
Name: alsa_input.pci-_00_1f.3.analog-stereo
Description: Audio interne Stéréo analogique
Driver: module-alsa-card.c
Sample Specification: s16le 2ch 44100Hz
Channel Map: front-left,front-right
Owner Module: 6
Mute: no
Volume: front-left: 31203 /  48% / -19,34 dB,   front-right: 41350 /  
63% / -12,00 dB
balance 0,25
Base Volume: 13076 /  20% / -42,00 dB
Monitor of Sink: n/d
Latency: 0 usec, configured 0 usec
Flags: HARDWARE HW_MUTE_CTRL HW_VOLUME_CTRL DECIBEL_VOLUME LATENCY 
Properties:
alsa.resolution_bits = "16"
device.api = "alsa"
device.class = "sound"
alsa.class = "generic"
alsa.subclass = "generic-mix"
alsa.name = "CX20751/2 Analog"
alsa.id = "CX20751/2 Analog"
alsa.subdevice = "0"
alsa.subdevice_name = "subdevice #0"
alsa.device = "0"
alsa.card = "0"
alsa.card_name = "HDA Intel PCH"
alsa.long_card_name = "HDA Intel PCH at 0xa132 irq 131"
alsa.driver_name = "snd_hda_intel"
device.bus_path = "pci-:00:1f.3"
sysfs.path = "/devices/pci:00/:00:1f.3/sound/card0"
device.bus = "pci"
device.vendor.id = "8086"
device.vendor.name = "Intel 

Bug#833365: libapache2-mpm-itk: installation fails when apache2 is not running

2016-08-05 Thread Florent Bervas
Hi,

Thanks for your feedback and your work on the mpm-itk packaging.

You are right, the empty result occurred when I wrote the bug report, but
today I can't reproduce it anymore. So the apache2 status is not the
condition that triggers the bug.

Regarding your script (libapache2-mpm-itk.postinst), the returned value
doesn't seem to be handled correctly (line 9), so should the suggested
patch be considered as a (small and modest) improvement? I also forward it
to Apache maintainers for the apache2-maintscript-helper.

Best,

On Wed, Aug 3, 2016 at 5:04 PM, Steinar H. Gunderson <sgunder...@bigfoot.com
> wrote:

> On Wed, Aug 03, 2016 at 04:43:38PM +0200, Florent Bervas wrote:
> > In both case, a command's result is not handled correctly as a string.
> When
> > the command "a2query -M" is executed while the apache2 server is not
> > running, the command returns an empty string and bash fails the
> comparison.
>
> Hi,
>
> This doesn't seem correct to me; a2query runs just fine even with no
> running
> Apache:
>
>   klump:~> ps auxw | grep '[a]pache2'
>   klump:~> /usr/sbin/a2query -M
>   event
>
> Are you really sure your analysis is correct?
>
> Also /usr/share/apache2/apache2-maintscript-helper comes from apache2, not
> mpm-itk.
>
> /* Steinar */
> --
> Homepage: https://www.sesse.net/
>


Bug#833509: phpmyadmin

2016-08-05 Thread FLORENT Philippe
Package: phpmyadmin

Version: 4.2.12

Debian 2.5

(request for update or infos to do it manually)


1-  Clicking on the user tabs gives:



"Your privilege table structure seems to be older than this MySQL version!"


2-  Clicking on the "new database" option gives:

"SELECT
s.SCHEMA_NAME,
s.DEFAULT_COLLATION_NAME
   FROM `information_schema`.SCHEMATA s
GROUP BY BINARY s.SCHEMA_NAME
ORDER BY BINARY `SCHEMA_NAME` ASC

MySQL said: Documentation
#1055 - Expression #1 of SELECT list is not in GROUP BY clause and contains 
nonaggregated column 'information_schema.s.SCHEMA_NAME' which is not 
functionally dependent on columns in GROUP BY clause; this is incompatible with 
sql_mode=only_full_group_by"



-  Can someone update phpmyadmin to its last version ?



-  Or give me hints to what files need to be put  in wich folder, on 
debian there are many places where phpmyadmin can be found



Do I update them all ?



sudo find / -name phpmyadmin

/etc/phpmyadmin

/usr/share/doc/phpmyadmin

/usr/share/phpmyadmin

/usr/share/doc-base/phpmyadmin

/usr/share/dbconfig-common/data/phpmyadmin

/usr/share/lintian/overrides/phpmyadmin

/var/lib/phpmyadmin

/var/lib/apache2/conf/enabled_by_maint/phpmyadmin

/var/lib/mysql/phpmyadmin



Bug#833365: libapache2-mpm-itk: installation fails when apache2 is not running

2016-08-03 Thread Florent Bervas
Package: libapache2-mpm-itk
Version: 2.4.7-02-1.1+deb8u1
Severity: normal
Tags: patch

Hi,

I have been faced to an installation issue of the package. During
installation process, postinst script failed 2 times:

== Error messages ==

/var/lib/dpkg/info/libapache2-mpm-itk.postinst: 9: [: !=: unexpected
operator
/var/lib/dpkg/info/libapache2-mpm-itk.postinst: 291: [: !=: unexpected
operator

== Explanation ==

In both case, a command's result is not handled correctly as a string. When
the command "a2query -M" is executed while the apache2 server is not
running, the command returns an empty string and bash fails the comparison.

== Patch ==

Suggested patch that have fixed my issue:

/var/lib/dpkg/info/libapache2-mpm-itk.postinst:9
-if [ $(a2query -M) != 'prefork' ] ; then
+if [ "$(a2query -M)" != "prefork" ] ; then

/usr/share/apache2/apache2-maintscript-helper:291
-if [ $CUR_MPM != "$MPM" ] ; then
+if [ "$CUR_MPM" != "$MPM" ] ; then


Thank you for taking care of this bug.

Best,

Florent


-- System Information:
Debian Release: 8.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.3.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libapache2-mpm-itk depends on:
ii  apache2-bin [apache2-api-20120211]  2.4.10-10+deb8u5
ii  libc6   2.19-18
ii  libcap2 1:2.24-8

libapache2-mpm-itk recommends no packages.

libapache2-mpm-itk suggests no packages.


Bug#833326: pulseaudio: Lenovo Ideapad 300 - volume of the internal microphone is very low

2016-08-03 Thread Florent Mazzone
Package: pulseaudio
Version: 9.0-1.1
Severity: normal

Dear Maintainer,

When using Skype, I've noticed that the volume of the internal microphone is
very low.

Configuring different volume levels for the two channels of the microphone
resolves the problem temporarily (for ex: left 0% right 100%). But as soon as a
software such as Skype tries to adapt the volume of the microphone, the volume
decreases again and the microphone becomes unusable.

Information about the configuration : http://www.alsa-
project.org/db/?f=42dbb27b8cefa74c1a6b837f7d80cd51523c5167

Sincerely,

Florent Mazzone



-- Package-specific info:
File '/etc/default/pulseaudio' does not exist


-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.6.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages pulseaudio depends on:
ii  adduser  3.115
ii  libasound2   1.1.1-2
ii  libasound2-plugins   1.1.1-1
ii  libc62.23-4
ii  libcap2  1:2.25-1
ii  libdbus-1-3  1.10.8-1
ii  libfftw3-single3 3.3.4-2+b1
ii  libgcc1  1:6.1.1-10
ii  libice6  2:1.0.9-1+b1
ii  libltdl7 2.4.6-0.1
ii  liborc-0.4-0 1:0.4.25-1
ii  libpulse09.0-1.1
ii  libsm6   2:1.2.2-1+b1
ii  libsndfile1  1.0.25-10
ii  libsoxr0 0.1.2-1
ii  libspeexdsp1 1.2~rc1.2-1
ii  libstdc++6   6.1.1-10
ii  libsystemd0  230-7
ii  libtdb1  1.3.9-1
ii  libudev1 230-7
ii  libwebrtc-audio-processing1  0.3-1
ii  libx11-6 2:1.6.3-1
ii  libx11-xcb1  2:1.6.3-1
ii  libxcb1  1.11.1-1
ii  libxtst6 2:1.2.2-1+b1
ii  lsb-base 9.20160629
ii  pulseaudio-utils 9.0-1.1

Versions of packages pulseaudio recommends:
ii  pulseaudio-module-udev  9.0-1.1
ii  pulseaudio-module-x11   9.0-1.1
ii  rtkit   0.11-4

Versions of packages pulseaudio suggests:
pn  paman
pn  paprefs  
ii  pavucontrol  3.0-3+b2
pn  pavumeter

-- no debconf information
# This file is part of PulseAudio.
#
# PulseAudio is free software; you can redistribute it and/or modify
# it under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# PulseAudio is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License
# along with PulseAudio; if not, see <http://www.gnu.org/licenses/>.

## Configuration file for PulseAudio clients. See pulse-client.conf(5) for
## more information. Default values are commented out.  Use either ; or # for
## commenting.

; default-sink =
; default-source =
; default-server =
; default-dbus-server =

; autospawn = yes
; daemon-binary = /usr/bin/pulseaudio
; extra-arguments = --log-target=syslog

; cookie-file =

; enable-shm = yes
; shm-size-bytes = 0 # setting this 0 will use the system-default, usually 64 
MiB

; auto-connect-localhost = no
; auto-connect-display = no
# This file is part of PulseAudio.
#
# PulseAudio is free software; you can redistribute it and/or modify
# it under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# PulseAudio is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License
# along with PulseAudio; if not, see <http://www.gnu.org/licenses/>.

## Configuration file for the PulseAudio daemon. See pulse-daemon.conf(5) for
## more information. Default values are commented out.  Use either ; or # for
## commenting.

; daemonize = no
; fail = yes
; allow-module-loading = yes
; allow-exit = yes
; use-pid-file = yes
; system-instance = no
; local-server-type = user
; enable-shm = yes
; shm-size-bytes = 0 # setting this 0 will use the system-default, usually 64 
MiB
; lock-memory = no
; cpu-limit = no

; high-priority = yes
; nice-level = -11

; realtime-scheduling = yes
; realtime-priority = 5

; exit-idle-time = 20
; scache-idle-time = 20

; dl-search-pat

Bug#832425: apache2-bin: Apache segfault when ltrace is attached to it

2016-07-25 Thread Florent Mendoza
Package: apache2-bin
Version: 2.4.10-10+deb8u5
Severity: normal


hello, we found that apache occasionally segfault if a ltrace is running on
it.
I managed to reproduce this with default config.
A simple way to reproduce :
start apache with /usr/sbin/apache2 -X
attach a ltrace on it : ltrace -p  -o 
do some request (I run ab -c 1 -n 100 http://hostname/)
After a few seconds, a segfault occurs.

Let me know if you need any additional information.

-- Package-specific info:

-- System Information:
Debian Release: 8.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages apache2-bin depends on:
ii  libapr1  1.5.1-3
ii  libaprutil1  1.5.4-1
ii  libaprutil1-dbd-sqlite3  1.5.4-1
ii  libaprutil1-ldap 1.5.4-1
ii  libc62.19-18+deb8u4
ii  libldap-2.4-22.4.40+dfsg-1+deb8u2
ii  liblua5.1-0  5.1.5-7.1
ii  libpcre3 2:8.35-3.3+deb8u4
ii  libssl1.0.0  1.0.1t-1+deb8u2
ii  libxml2  2.9.1+dfsg1-5+deb8u2
ii  perl 5.20.2-3+deb8u5
ii  zlib1g   1:1.2.8.dfsg-2+b1

apache2-bin recommends no packages.

Versions of packages apache2-bin suggests:
pn  apache2-doc  
pn  apache2-suexec-pristine | apache2-suexec-custom  
ii  lynx-cur [www-browser]   2.8.9dev1-2+deb8u1
ii  w3m [www-browser]0.5.3-19

Versions of packages apache2 depends on:
ii  apache2-data   2.4.10-10+deb8u5
ii  apache2-utils  2.4.10-10+deb8u5
ii  dpkg   1.17.27
ii  lsb-base   4.1+Debian13+nmu1
ii  mime-support   3.58
ii  perl   5.20.2-3+deb8u5
ii  procps 2:3.3.9-9

Versions of packages apache2 recommends:
pn  ssl-cert  

Versions of packages apache2 suggests:
pn  apache2-doc  
pn  apache2-suexec-pristine | apache2-suexec-custom  
ii  lynx-cur [www-browser]   2.8.9dev1-2+deb8u1
ii  w3m [www-browser]0.5.3-19

Versions of packages apache2-bin is related to:
ii  apache2  2.4.10-10+deb8u5
ii  apache2-bin  2.4.10-10+deb8u5

-- no debconf information


Bug#831876: When sending a mail to a local machine user, I get “Unroutable address” in exim logs

2016-07-20 Thread FLORENT Philippe
Package: exim4

Version: 4.84.2-1

Debian: 8.5

Related ? : #626011

Bug : When sending a mail to a local machine user, I get “Unroutable address” 
in exim logs

How to :  echo “mail body” |  mail -s "subject" remoteuser@remotemachine

Details:


nsswitch.conf:



...

hosts:  files dns

...



And  /etc/host.conf:



orderhosts,bind  added +  network restarted

multi on



so it should work but exim does not seem to take that into consideration



sudo exim -bP |grep lookup_order

host_lookup_order = bydns:byaddr




Bug#827276: cannot install snmp-mibs-downloaders

2016-06-14 Thread FLORENT Philippe
Package: snmp-mibs-downloader
Version: 

I cannot install snmp-mibs-downloader

Installation:

Added  "deb http://http.us.debian.org/debian  main non-free" to 
/etc/apt/sources.list

"sudo apt-get update" gave this error

W: Failed to fetch 
http://http.us.debian.org/debian/dists/main/non-free/binary-amd64/Packages  404 
 Not Found [IP: 64.50.236.52 80]


Debian 2.5,


Bug#785606: linux-image-4.0.0-1-amd64: DragonRise joystick support broken in 4.0.2-1

2016-06-06 Thread Florent Rougon
It seems the bug was fixed by this upstream commit:

commit 18339f59c3a6698ee17d32970c9e1e450b16e7c3
Author: Maciej Zuk
Date:   Thu Sep 3 21:46:39 2015 +0200

HID: dragonrise: fix HID Descriptor for 0x0006 PID

Fixed HID descriptor for DragonRise Joystick.  Replaced default descriptor
which doubles Z axis and causes mixing values of X and Z axes.

This means the first release incorporating the fix is v4.4 (v4.4-rc1
already contains it).

-- 
Florent



Bug#785606: linux-image-4.0.0-1-amd64: DragonRise joystick support broken in 4.0.2-1

2016-06-01 Thread Florent Rougon
Update:
  - upstream kernel 4.3.3 (most probably Debian also) and many kernels
(probably all) between, at least and inclusive on both ends, versions
4.0.2 and 4.3.3 are affected by this bug;
  - upstream kernel 4.5.5 is *not affected*; Debian kernels 4.5.4-1 and
4.5.5-1 are *not affected* either (the axes numbers have changed
since 3.16.7, I believe, but this is a minor inconvenience);
  - Benjamin Tissoires replied to me;
  - why recent kernels are not affected is still unclear, because the
code from commit 79346d620e9de87912de73337f6df8b7f9a46888 is still
there---I imagine that some change between 4.3.3 and 4.5.4 maybe
causes the DragonRise joypad to use a code path that doesn't go
through the lines added by said commit;
  - I offered to build a patched kernel with debug statements to clarify
this point.

-- 
Florent



Bug#825201: debian 2.4 - mysqlnd_ms not loading

2016-05-24 Thread FLORENT Philippe
Package: mysqlnd_ms
Version: 1.6.0-1+b1

Load balancer plugin for php does not work and reports a symbol missing on 
debian 2.4 with the most basic config

Unable to load dynamic library '/usr/lib/php5/20131226/mysqlnd_ms.so' - 
/usr/lib/php5/20131226/mysqlnd_ms.so: undefined symbol: mysqlnd_global_stats in 
Unknown on line 0

Installation:

sudo apt-get install apache2 php5 php5-mysqlnd php5-mysqlnd-ms

php.ini :
...
extension=mysqlnd_ms.so
mysqlnd_ms.enable=1
mysqlnd_ms.config_file=/var/www/mysqlnd_ms.json
mysqlnd_ms.force_config_usage=1
...

php5-mysqlnd-ms:
  Installed: 1.6.0-1+b1
  Candidate: 1.6.0-1+b1
  Version table:
*** 1.6.0-1+b1 0
500 http://ftp.belnet.be/debian/ jessie/main amd64 Packages
100 /var/lib/dpkg/status


Debian 2.4,
kernel 3.16.0-4-amd64
php 5.6.20+dfsg-0+deb8u1





Bug#823062: Resolution

2016-04-30 Thread Florent

Upgrade to 1.2.0-2 solved the issue



Bug#823062: network-manager-gnome: nm-applet fails to load openvpn and vpnc modules

2016-04-30 Thread Florent
Package: network-manager-gnome
Version: 1.1.93-1
Severity: important

Dear Maintainer,


   * What led up to the situation?
Install network-manager-(pptp|vpnc|openvpn)-gnome, restart applet and create a 
new connection
   * What exactly did you do (or not do) that was effective (or
 ineffective)?
   * What was the outcome of this action?
Display only PPTP VPN connection
   * What outcome did you expect instead?
Display all VPN connections: PPTP, VPNC, OpenVPN

Here is the logs I get when I manually load nm-applet:
** (nm-connection-editor:4526): WARNING **: vpn: 
(vpnc,/usr/lib/NetworkManager/VPN/nm-vpnc-service.name) could not load plugin: 
path is not absolute (libnm-vpn-plugin-vpnc.so)

** (nm-connection-editor:4526): WARNING **: vpn: 
(openvpn,/usr/lib/NetworkManager/VPN/nm-openvpn-service.name) could not load 
plugin: path is not absolute (libnm-vpn-plugin-openvpn.so)



-- System Information:
Debian Release: stretch/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.5.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages network-manager-gnome depends on:
ii  dbus-x11 1.10.8-1
ii  dconf-gsettings-backend [gsettings-backend]  0.26.0-1
ii  gnome-icon-theme 3.12.0-1
ii  libatk1.0-0  2.20.0-1
ii  libc62.22-7
ii  libcairo21.14.6-1+b1
ii  libgdk-pixbuf2.0-0   2.34.0-1
ii  libglib2.0-0 2.48.0-1
ii  libgtk-3-0   3.18.9-1
ii  libmm-glib0  1.4.14-1
ii  libnm0   1.1.94-1
ii  libnma0  1.1.93-1
ii  libnotify4   0.7.6-2
ii  libpango-1.0-0   1.40.1-1
ii  libpangocairo-1.0-0  1.40.1-1
ii  libsecret-1-00.18.3-1
ii  network-manager  1.1.94-1
ii  policykit-1-gnome0.105-2

Versions of packages network-manager-gnome recommends:
ii  gnome-keyring3.18.3-1
ii  iso-codes3.67-1
ii  mobile-broadband-provider-info   20140317-1
ii  xfce4-notifyd [notification-daemon]  0.2.4-3+b1

Versions of packages network-manager-gnome suggests:
pn  network-manager-openconnect-gnome  
ii  network-manager-openvpn-gnome  1.2.0-1
ii  network-manager-pptp-gnome 1.2.0-1
ii  network-manager-vpnc-gnome 1.2.0-1

-- no debconf information



Bug#806918: Master password asked multiple times

2016-04-21 Thread Florent

Hi,

Same issue here with icedove 38.7.0.
Password is asked 3 times for 5 accounts. Emails are retrieved when 
master password is provided the first time.


Workaround:
Delete all saved passwords and wait for Icedove to ask them again.

Florent



Bug#818394: mutter: Mouse pointer is invisible over gnome-shell overview and top bar

2016-03-19 Thread Florent Le Saout

Package: mutter
Version: 3.18.3-1
Severity: normal

Dear Maintainer,

   * What led up to the situation? Update of mutter package
   * What exactly did you do (or not do) that was effective (or
 ineffective)? i've updated manually to mutter 3.18.3-2 from sid 
package

   * What was the outcome of this action? Fix the issue

It's exactly the same issue as described here, and the same fix apply too :
https://bugzilla.redhat.com/show_bug.cgi?id=1316010

Maybe just including 3.18.3-2 from sid to testing should be ok.

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.3.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages mutter depends on:
ii  gsettings-desktop-schemas  3.18.1-1
ii  libc6  2.21-9
ii  libclutter-1.0-0   1.24.2-1
ii  libglib2.0-0   2.46.2-3
ii  libmutter0g3.18.3-1
ii  libx11-6   2:1.6.3-1
ii  libxcomposite1 1:0.4.4-1
ii  mutter-common  3.18.3-1
ii  zenity 3.18.1.1-1

Versions of packages mutter recommends:
ii  gnome-session [x-session-manager]  3.18.1.2-1

Versions of packages mutter suggests:
ii  gnome-control-center  1:3.18.2-1
ii  xdg-user-dirs 0.15-2

-- no debconf information



Bug#816385: aptitude: Regression with 0.7.7: "aptitude -u" no more works

2016-03-01 Thread Florent
Package: aptitude
Version: 0.7.7-1
Followup-For: Bug #816385

Dear Maintainer,


I confirm the bug with different command arguments.

This command works and gives no error:

  sudo aptitude update


This command gives same error as reported before:

  sudo aptitude update -q

  E: The package cache is not available; unable to download and install 
packages.


-- 
Florent

-- Package-specific info:
Terminal: xterm-256color
$DISPLAY is set.
which aptitude: /usr/bin/aptitude

aptitude version information:
aptitude 0.7.7
Compiler: g++ 5.3.1 20160224
Compiled against:
  apt version 5.0.0
  NCurses version 6.0
  libsigc++ version: 2.6.2
  Gtk+ support disabled.
  Qt support disabled.

Current library versions:
  NCurses version: ncurses 6.0.20160213
  cwidget version: 0.5.17
  Apt version: 5.0.0

aptitude linkage:
linux-vdso.so.1 (0x7ffd013d1000)
libapt-pkg.so.5.0 => /usr/lib/x86_64-linux-gnu/libapt-pkg.so.5.0 
(0x7ff5d4b91000)
libncursesw.so.5 => /lib/x86_64-linux-gnu/libncursesw.so.5 
(0x7ff5d4961000)
libtinfo.so.5 => /lib/x86_64-linux-gnu/libtinfo.so.5 
(0x7ff5d4736000)
libsigc-2.0.so.0 => /usr/lib/x86_64-linux-gnu/libsigc-2.0.so.0 
(0x7ff5d453)
libcwidget.so.3 => /usr/lib/x86_64-linux-gnu/libcwidget.so.3 
(0x7ff5d4233000)
libsqlite3.so.0 => /usr/lib/x86_64-linux-gnu/libsqlite3.so.0 
(0x7ff5d3f5c000)
libboost_iostreams.so.1.58.0 => 
/usr/lib/x86_64-linux-gnu/libboost_iostreams.so.1.58.0 (0x7ff5d3d42000)
libboost_filesystem.so.1.58.0 => 
/usr/lib/x86_64-linux-gnu/libboost_filesystem.so.1.58.0 (0x7ff5d3b29000)
libboost_system.so.1.58.0 => 
/usr/lib/x86_64-linux-gnu/libboost_system.so.1.58.0 (0x7ff5d3924000)
libxapian.so.22 => /usr/lib/x86_64-linux-gnu/libxapian.so.22 
(0x7ff5d352)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 
(0x7ff5d3303000)
libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 
(0x7ff5d2f87000)
libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x7ff5d2c82000)
libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 
(0x7ff5d2a6c000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x7ff5d26c7000)
libutil.so.1 => /lib/x86_64-linux-gnu/libutil.so.1 (0x7ff5d24c4000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x7ff5d22c)
libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 
(0x7ff5d20a8000)
libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x7ff5d1e8d000)
libbz2.so.1.0 => /lib/x86_64-linux-gnu/libbz2.so.1.0 
(0x7ff5d1c7d000)
liblzma.so.5 => /lib/x86_64-linux-gnu/liblzma.so.5 (0x7ff5d1a59000)
liblz4.so.1 => /usr/lib/x86_64-linux-gnu/liblz4.so.1 
(0x7ff5d1847000)
librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x7ff5d163e000)
libuuid.so.1 => /lib/x86_64-linux-gnu/libuuid.so.1 (0x7ff5d1439000)
/lib64/ld-linux-x86-64.so.2 (0x56441e15f000)

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (900, 'unstable'), (400, 'testing'), (300, 'unstable'), (110, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.3-6.dmz.2-liquorix-amd64 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages aptitude depends on:
ii  aptitude-common0.7.7-1
ii  libapt-pkg5.0  1.2.3
ii  libboost-filesystem1.58.0  1.58.0+dfsg-5+b1
ii  libboost-iostreams1.58.0   1.58.0+dfsg-5+b1
ii  libboost-system1.58.0  1.58.0+dfsg-5+b1
ii  libc6  2.21-9
ii  libcwidget3v5  0.5.17-4+b1
ii  libgcc11:5.3.1-10
ii  libncursesw5   6.0+20160213-1
ii  libsigc++-2.0-0v5  2.6.2-1
ii  libsqlite3-0   3.11.0-2
ii  libstdc++6 5.3.1-10
ii  libtinfo5  6.0+20160213-1
ii  libxapian22v5  1.2.22-3

Versions of packages aptitude recommends:
pn  aptitude-doc-en | aptitude-doc  
ii  libparse-debianchangelog-perl   1.2.0-8
ii  sensible-utils  0.0.9

Versions of packages aptitude suggests:
pn  apt-xapian-index  
pn  debtags   
ii  tasksel   3.34

-- no debconf information



Bug#816227: ping: socket: Address family not supported by protocol (raw socket required by specified options).

2016-03-01 Thread Florent Rougon
Hello,

Noah Meyerhans <no...@debian.org> wrote:

> Confirmed that this breaks ping when run without an explicit address
> family. This is actually already fixed upstream, but not in a tagged
> snapshot. It'll be fixed in the next upload, by cherry-picking that
> commit or syncing a new snapshot.

Good news, thank you. :-)

-- 
Florent



Bug#815864: python3-venv: unable to create a virtual environment

2016-02-29 Thread Florent Rougon
Simple workaround for this bug:

  1) Create the venv with --without-pip. For instance:

   /usr/bin/python3.5 -m venv --without-pip 

  2) Download https://bootstrap.pypa.io/get-pip.py as ~/tmp/get-pip.py.

  3) Bootstrap pip "manually" in your venv:

   /bin/python ~/tmp/get-pip.py

HTH

-- 
Florent



Bug#816227: ping: socket: Address family not supported by protocol (raw socket required by specified options).

2016-02-29 Thread Florent Rougon
Hello,

On Sun, 28 Feb 2016 22:38:05 + Jamie Heilman <ja...@audible.transient.net> 
wrote:

> Noah Meyerhans wrote:
> > I cannot reproduce this on a host with no ipv6 connectivity. Does 
> > 'ping -4 127.0.0.1' work any differently?
> 
> Yeah, that works.

Same here. 'ping -4 ' works fine but 'ping '
doesn't (I tried with 127.0.0.1, with the address of a local Ethernet
interface, with the address of a host I can ssh to on the local
network...).

> > By "no ipv6 support", do you mean you're running a custom kernel with a
> > different configuration than provided by Debian?

For me, the kernel is that from linux-image-4.4.0-1-amd64 version
4.4.2-3 (recently updated from unstable), rebuilt with one tiny patch
that is not network-related in any way, and which I have been using
since June 2015 without any problem: it is just reverting upstream Linux
kernel commit 79346d620e9de87912de73337f6df8b7f9a46888 ("HID: input:
force generic axis to be mapped to their user space axis"; I
unfortunately have to apply this patch to every kernel release since
then, because nobody bothered to even answer bug #785606 despite my
'git bisect'ing it).

Apart from that, I use:

  GRUB_CMDLINE_LINUX="init=/bin/systemd ipv6.disable=1"

in /etc/default/grub, which effectively disables IPv6, AFAICT.

My aptitude.log shows:

  [UPGRADE] iputils-ping:amd64 3:20121221-5+b2 -> 3:20150815-1

on Fri, Feb 26 2016 20:48:43 +0100, and I only noticed the problem
today.

Thanks for considering!

-- 
Florent



Bug#815864: python3-venv: unable to create a virtual environment

2016-02-25 Thread Florent Rougon
Some more info:

Inserting a 'print(cmd)' at line 259 showed that the direct cause of
the error message is the command:

  ['/home/flo/python-venv/testdir/bin/python3.5',
   '-Im', 'ensurepip', '--upgrade', '--default-pip']

exiting with a non-zero exit status. Running this command by hand after
the venv creation failed yields:

~/python-venv % /home/flo/python-venv/testdir/bin/python3.5 -Im ensurepip 
--upgrade --default-pip; echo $?
Traceback (most recent call last):
  File "/usr/lib/python3.5/runpy.py", line 184, in _run_module_as_main
"__main__", mod_spec)
  File "/usr/lib/python3.5/runpy.py", line 85, in _run_code
exec(code, run_globals)
  File "/usr/lib/python3.5/ensurepip/__main__.py", line 4, in 
ensurepip._main()
  File "/usr/lib/python3.5/ensurepip/__init__.py", line 218, in _main
version="pip {}".format(version()),
  File "/usr/lib/python3.5/ensurepip/__init__.py", line 74, in version
assert len(wheel_names) == 1, wheel_names
AssertionError: []
1
~/python-venv %

The assertion error comes from this in
/usr/lib/python3.5/ensurepip/__init__.py:

wheel_names = glob.glob('/usr/share/python-wheels/pip-*.whl')
assert len(wheel_names) == 1, wheel_names

and indeed:

~/python-venv % ls /usr/share/python-wheels/pip-*.whl
zsh: no matches found: /usr/share/python-wheels/pip-*.whl
~/python-venv % apt-file search /usr/share/python-wheels/pip-
virtualenv: /usr/share/python-wheels/pip-8.0.2-py2.py3-none-any.whl
~/python-venv %

I then installed the 'virtualenv' package, which does provide the
mentioned file, and tried to recreate the venv from scratch after adding
a 'print(os.getcwd())' right after the previously-added 'print(cmd)' in
/usr/lib/python3.5/venv/__init__.py (lines 259-260, before the 'try'
statement in EnvBuilder._setup_pip()):

~/python-venv % rm -rf testdir
~/python-venv % /usr/bin/python3.5 -m venv testdir
['/home/flo/python-venv/testdir/bin/python3.5', '-Im', 'ensurepip', 
'--upgrade', '--default-pip']
/home/flo/python-venv
The virtual environment was not created successfully because ensurepip is not
available.  On Debian/Ubuntu systems, you need to install the python3-venv
package using the following command.

apt-get install python3-venv

You may need to use sudo with that command.  After installing the python3-venv
package, recreate your virtual environment.

~/python-venv % /usr/bin/python3.5 -c "import subprocess; 
subprocess.check_output(['/home/flo/python-venv/testdir/bin/python3.5', '-Im', 
'ensurepip', '--upgrade', '--default-pip'])"
Traceback (most recent call last):
  File 
"/tmp/tmpicb907db/pip-8.0.2-py2.py3-none-any.whl/pip/_vendor/__init__.py", line 
33, in vendored
ImportError: No module named 'pip._vendor.cachecontrol'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3.5/runpy.py", line 184, in _run_module_as_main
"__main__", mod_spec)
  File "/usr/lib/python3.5/runpy.py", line 85, in _run_code
exec(code, run_globals)
  File "/usr/lib/python3.5/ensurepip/__main__.py", line 4, in 
ensurepip._main()
  File "/usr/lib/python3.5/ensurepip/__init__.py", line 269, in _main
default_pip=args.default_pip,
  File "/usr/lib/python3.5/ensurepip/__init__.py", line 175, in bootstrap
_run_pip(args + _PROJECTS, additional_paths)
  File "/usr/lib/python3.5/ensurepip/__init__.py", line 65, in _run_pip
import pip
  File "/tmp/tmpicb907db/pip-8.0.2-py2.py3-none-any.whl/pip/__init__.py", line 
12, in 
  File "/tmp/tmpicb907db/pip-8.0.2-py2.py3-none-any.whl/pip/exceptions.py", 
line 6, in 
  File 
"/tmp/tmpicb907db/pip-8.0.2-py2.py3-none-any.whl/pip/_vendor/__init__.py", line 
52, in 
  File 
"/tmp/tmpicb907db/pip-8.0.2-py2.py3-none-any.whl/pip/_vendor/__init__.py", line 
35, in vendored
ImportError: No module named 'cachecontrol'
Traceback (most recent call last):
  File "", line 1, in 
  File "/usr/lib/python3.5/subprocess.py", line 626, in check_output
**kwargs).stdout
  File "/usr/lib/python3.5/subprocess.py", line 708, in run
output=stdout, stderr=stderr)
subprocess.CalledProcessError: Command 
'['/home/flo/python-venv/testdir/bin/python3.5', '-Im', 'ensurepip', 
'--upgrade', '--default-pip']' returned non-zero exit status 1
~/python-venv %

-- 
Florent



Bug#815864: python3-venv: unable to create a virtual environment

2016-02-24 Thread Florent Rougon
Package: python3-venv
Version: 3.5.1-2
Severity: serious
Justification: renders the package unusable

Hello,

It seems current Python 3 packages in Debian unstable don't allow
creating a virtual environment anymore with pyvenv and friends:

~/python-venv % /usr/bin/python3.5 -m venv testdir
The virtual environment was not created successfully because ensurepip is not
available.  On Debian/Ubuntu systems, you need to install the python3-venv
package using the following command.

apt-get install python3-venv

You may need to use sudo with that command.  After installing the python3-venv
package, recreate your virtual environment.

~/python-venv % dpkg -l python3-venv
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name   Version  Architecture Description
+++-==---=
ii  python3-venv   3.5.1-2  amd64pyvenv-3 binary for python3 (defa
~/python-venv %

Thanks in advance for looking into this.

Regards

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.4.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages python3-venv depends on:
ii  python3 3.5.1-2
ii  python3.5-venv  3.5.1-7

python3-venv recommends no packages.

python3-venv suggests no packages.

-- no debconf information



Bug#814787: linux-grsec: GRKERNSEC_RANDSTRUCT shouldn't be enabled

2016-02-15 Thread Florent Daigniere
On Mon, 2016-02-15 at 13:25 +0100, Yves-Alexis Perez wrote:
> > 
> > 2) It prevents users from rebuilding kernel modules as the
> >  source packaged is distributed "cleaned".
> 
> I fail to parse this. Did you try DKMS modules with RANDKSTRUCT=n and
> did it work?

It won't work as long as the packaged binary (my running kernel) has it
enabled. I'd need to rebuild both the package and the module with it
disabled to try it out... and I haven't tried it yet.

>  Because I sure didn't do anything to support external modules, so
> I'd be surprised if that worked, RANDKSTRUCT or not.

You're right; I should focus on documenting what doesn't work rather
than guessing. I should have filled in two bugs:

1) the binary package shouldn't have it enabled because it's useless
security wise, does incur runtime cost and obviously breaks stuff (see
2) (https://en.wikibooks.org/wiki/Grsecurity/Appendix/Grsecurity_and_Pa
X_Configuration_Options#Randomize_layout_of_sensitive_kernel_structures
).

2) with the binary package, DKMS-built modules (but I suspect that it
stands true for all modules) won't insert into the running kernel. This
needs fixing, one way or another.

Do you want me to do the bug-filling/renaming or can you do it?

Florent

signature.asc
Description: This is a digitally signed message part


Bug#814787: linux-grsec: GRKERNSEC_RANDSTRUCT shouldn't be enabled

2016-02-15 Thread Florent Daigniere
Source: linux-grsec
Severity: important

GRKERNSEC_RANDSTRUCT shouldn't be enabled on binary distro packages.

1) It's compile-time randomization, making it useless security wise
 (the attacker can fetch the binary from a mirror too!).

2) It prevents users from rebuilding kernel modules as the
 source packaged is distributed "cleaned".


On my systems, it prevents DKMS from working altogether.

# modprobe vboxdrv
[ 3841.583856] : version magic '4.3.0-1-grsec-amd64 SMP mod_unload
modversions KERNEXEC_BTS UDEREF REFCOUNT GRSEC ' should be '4.3.0-1-
grsec-amd64 SMP mod_unload modversions KERNEXEC_BTS UDEREF REFCOUNT
CONSTIFY_PLUGIN STACKLEAK_PLUGIN GRSEC
RANDSTRUCT_PLUGIN_643b63e2ae54ebcf23cb3cb1ea94ff2584bab4387b91fadf06a1b
7fd2f2ad003'

Please disable GRKERNSEC_RANDSTRUCT.

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.3.0-1-grsec-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)



Bug#811479: boot fails in "run-init -n ..."

2016-01-20 Thread Florent Rougon
Hello,

Same problem here after yesterday's upgrade. The 0.122~a.test
initramfs-tools and initramfs-tools-core packages mentioned by Ben at
<https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=811479#19> allowed my
system to boot, thank you!

(along with the Debian jessie installation DVD in rescue mode, its
option to automatically assemble RAID arrays, followed by mounting the
/, /usr and /var filesystems of my normal system at temporary mount
points, chrooting into the temporarily-mounted root before running dpkg
-i the_deb_files [maybe simply booting with the previous kernel to
install the test packages would have worked, too?..])

Regards

-- 
Florent



Bug#810068: 11: Some fonts are missing in the default install (verdana, ...)

2016-01-06 Thread Florent Le Saout
Package: 11
Severity: important
Tags: patch

Dear Maintainer,

   * What led up to the situation? I installed basic Debian testing from 
netinstall
 Then I installed gnome3, icedove and iceweasel and others. On some pages 
or email
 some text are replaced by square, for instance on gitlab. (I have screen 
capture if needed)
   * What exactly did you do (or not do) that was effective (or
 ineffective)? I installed fonts-arkpandora which contains font replacement 
for verdana, arial, etc..
   * What was the outcome of this action? It fixes the issue
   * What outcome did you expect instead?
   * Fix proposal : I propose that this package package or similar becomes a 
dependency of any window manager


-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.3.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)



Bug#808762: 'remote: error: unable to update info/refs+' when pushing to a repo on alioth

2015-12-22 Thread Florent Rougon
Package: tracker.debian.org
Severity: normal

Hello,

I got the error cited in the subject when doing 'git push' for the fgo Git
repo hosted on alioth:

% git push
Counting objects: 4, done.
Delta compression using up to 8 threads.
Compressing objects: 100% (4/4), done.
Writing objects: 100% (4/4), 664 bytes | 0 bytes/s, done.
Total 4 (delta 3), reused 0 (delta 0)
remote: Sending notification emails to: dispatch+fgo_...@tracker.debian.org
remote: error: unable to update info/refs+
To git+ssh://f...@scm.alioth.debian.org//git/collab-maint/fgo.git
   413b26a..73f1c15  master -> master
%

The commit seems to have worked, but I thought it would be good to know what
caused this error message. My apologies if this is not the right place for
such a report.

Thanks

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.3.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)



Bug#805964: geographiclib: Please provide a package for Python 3

2015-12-05 Thread Florent Rougon
Hi Bas,

> I've just uploaded geographiclib (1.45-2) which adds
> python3-geographiclib using pybuild for all python versions.
>
> Because python3-geographiclib is a new package it will have to pass the
> NEW queue before it will be available in the archive.

That's great, thank you very much! :-)

-- 
Florent



Bug#805964: geographiclib: Please provide a package for Python 3

2015-11-24 Thread Florent Rougon
Source: geographiclib
Severity: wishlist

Hello,

I am using GeographicLib under Python 3 for FFGo[1], and it works fine
for what I ask it to do. It would be nice for users if you could ship a
package for Python 3 in addition to the Python 2 package. Not to mention
that Python 2 is progressively being phased out...

Thank you.

Regards

  [1] http://people.via.ecp.fr/~flo/projects/FFGo/

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)



Bug#802234: Useless "Deleting" messages with remove-all-inc-of-but-n-full option

2015-10-18 Thread Florent Fourcot
Package: duplicity
Version: 0.6.24-1
Severity: normal
Tags: patch


Hello,

I'm using duplicity with the remove-all-inc-of-but-n-full option.

The old full backups are badly detected as "to delete", even if there is
nothing to do. It is not dangerous (the full backup is not deleted), but
can be confusing for user.

Output example in my case:

$ duplicity remove-all-inc-of-but-n-full 20 --force $URL
[...]
Deleting backup chains at times:
Mon Apr  6 21:53:43 2015
Sun Apr 12 03:05:03 2015
Sat Apr 18 03:05:03 2015
Sat Apr 25 03:05:04 2015
[...]
Deleting incremental signature chain Sat Apr 25 03:05:04 2015
Deleting incremental signature chain Sat Apr 25 03:05:04 2015
Deleting incremental signature chain Sat Apr 18 03:05:03 2015
Deleting incremental signature chain Sat Apr 18 03:05:03 2015
Deleting incremental signature chain Sun Apr 12 03:05:03 2015
Deleting incremental signature chain Sun Apr 12 03:05:03 2015
Deleting incremental signature chain Mon Apr  6 21:53:43 2015
Deleting incremental signature chain Mon Apr  6 21:53:43 2015
[...]
Deleting incremental backup chain Sat Apr 25 03:05:04 2015
Deleting incremental backup chain Sat Apr 18 03:05:03 2015
Deleting incremental backup chain Sun Apr 12 03:05:03 2015
Deleting incremental backup chain Mon Apr  6 21:53:43 2015

With the collection status:


Found 27 secondary backup chains.
Secondary chain 1 of 27:
-
Chain start time: Mon Apr  6 21:53:43 2015
Chain end time: Mon Apr  6 21:53:43 2015
Number of contained backup sets: 1
Total number of contained volumes: 2
 Type of backup set:Time:  Num volumes:
Full Mon Apr  6 21:53:43 2015 2
-

Secondary chain 2 of 27:
-
Chain start time: Sun Apr 12 03:05:03 2015
Chain end time: Sun Apr 12 03:05:03 2015
Number of contained backup sets: 1
Total number of contained volumes: 2
 Type of backup set:Time:  Num volumes:
Full Sun Apr 12 03:05:03 2015 2
-
[...]

The attached patch fix this issue, by adding a rule to not consider
chains with only full backups when remove_all_inc_of_but_n_full_mode is
enabled.

Best regards,

Florent Fourcot.

-- System Information:
Debian Release: 8.2
  APT prefers stable
  APT policy: (990, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages duplicity depends on:
ii  libc62.19-18+deb8u1
ii  librsync10.9.7-10
ii  python   2.7.9-1
ii  python-lockfile  1:0.8-2

Versions of packages duplicity recommends:
pn  python-oauthlib  
pn  python-paramiko  
ii  python-urllib3   1.9.1-3
ii  rsync3.1.1-3

Versions of packages duplicity suggests:
ii  lftp4.6.0-1+deb8u1
pn  ncftp   
pn  python-boto 
pn  python-cloudfiles   
ii  python-gdata2.0.18+dfsg1-2
pn  python-swiftclient  
pn  tahoe-lafs  

-- no debconf information
--- duplicity	2014-06-10 13:24:51.0 +0200
+++ duplicity.now	2015-10-18 17:57:14.912781530 +0200
@@ -938,6 +938,8 @@
"manually purge the repository."))
 
 chainlist = col_stats.get_chains_older_than(globals.remove_time)
+if globals.remove_all_inc_of_but_n_full_mode:
+chainlist = [e for e in chainlist if len(e.incset_list) > 0]
 if not chainlist:
 log.Notice(_("No old backup sets found, nothing deleted."))
 return


  1   2   3   4   5   6   7   >