Bug#844242: RFS: terminology/0.9.1-0.1 [RC] [NMU]

2016-11-21 Thread Ross Vandegrift
On Mon, Nov 21, 2016 at 05:46:24PM -0500, Ross Vandegrift wrote:
> So I'll prepare another version that consists only of the security fix
> backported to jessie.  The new version will wait for experimental.

Here it is, this time just adopting and fixing the security issue:
https://mentors.debian.net/debian/pool/main/t/terminology/terminology_0.7.0-2.dsc

No problems with creating new tabs.  Updated changelog:

 * New Maintainer.  Thanks to Anthony for original work. (Closes: #844244)
 * Fix for "CVE-2015-8971: Escape Sequence Command Execution vulnerability"
   backported from upstream rev b80bedc.  (Closes: #843434)

Thanks again,
Ross



Bug#844242: RFS: terminology/0.9.1-0.1 [RC] [NMU]

2016-11-21 Thread Ross Vandegrift
On Mon, Nov 21, 2016 at 04:53:58PM +0100, Adam Borowski wrote:
> Cool, please move "New maintainer" to the front so it's better visible.
> 
> Alas, I'm afraid it doesn't quite work for me.  In the first run, after
> maximizing it stopped redrawing its window and had to be killed (doesn't
> seem to be reproducible after several tries).  Clicking on "New" segfaults,
> 100% reproducible.

That's a bummer.  I can reproduce the click New segfault, not the other
issue.  It doesn't occur when used with new EFL from experimental.

So I'll prepare another version that consists only of the security fix
backported to jessie.  The new version will wait for experimental.

Thanks for the report,
Ross



Bug#844242: RFS: terminology/0.9.1-0.1 [RC] [NMU]

2016-11-21 Thread Adam Borowski
On Mon, Nov 21, 2016 at 09:43:56AM -0500, Ross Vandegrift wrote:
> I've uploaded an updated package to:
> https://mentors.debian.net/debian/pool/main/t/terminology/terminology_0.9.1-1.dsc
> 
> New changelog:
> 
>  [ Ross Vandegrift ]
>  * New upstream release
>- Fix for "CVE-2015-8971: Escape Sequence Command Execution
>  vulnerability" (Closes: #843434)
>  * fix-minus-signs-manpage.patch: drop patch, fixed upstream
>  * use-system-lz4.patch: defuzz
>  * fix-del-backspace-key.patch: defuzz
>  * Provide x-terminal-emulator alternative (Closes: #774111)
>  * debian/copyright: remove unused ltmain.sh paragraph
>  * Add gbp.conf and notes on usage in README.source
>  * Enable build hardening options
>  * Suggest libemotion-players for media support (Closes: #773057, #766705)
>  * Reformat package descriptions (Closes: #779494, #782082)
>  * Use secure Vcs- URLs in debian/control
>  * Bump Standards-Version to 3.9.8
>  * New Maintainer.  Thanks to Anthony for original work. (Closes: #844244)
> 
>  [ Nicolas Braud-Santoni ]
>  * Normalize links and use HTTPS

Cool, please move "New maintainer" to the front so it's better visible.

Alas, I'm afraid it doesn't quite work for me.  In the first run, after
maximizing it stopped redrawing its window and had to be killed (doesn't
seem to be reproducible after several tries).  Clicking on "New" segfaults,
100% reproducible.

-- 
A true bird-watcher waves his tail while doing so.



Bug#844242: RFS: terminology/0.9.1-0.1 [RC] [NMU]

2016-11-21 Thread Ross Vandegrift
On Fri, Nov 18, 2016 at 05:04:02PM +, Gianfranco Costamagna wrote:
> Hi Ross, can you please fix and answer if  you want to maintain or not
> the package?

I've uploaded an updated package to:
https://mentors.debian.net/debian/pool/main/t/terminology/terminology_0.9.1-1.dsc

New changelog:

 [ Ross Vandegrift ]
 * New upstream release
   - Fix for "CVE-2015-8971: Escape Sequence Command Execution
 vulnerability" (Closes: #843434)
 * fix-minus-signs-manpage.patch: drop patch, fixed upstream
 * use-system-lz4.patch: defuzz
 * fix-del-backspace-key.patch: defuzz
 * Provide x-terminal-emulator alternative (Closes: #774111)
 * debian/copyright: remove unused ltmain.sh paragraph
 * Add gbp.conf and notes on usage in README.source
 * Enable build hardening options
 * Suggest libemotion-players for media support (Closes: #773057, #766705)
 * Reformat package descriptions (Closes: #779494, #782082)
 * Use secure Vcs- URLs in debian/control
 * Bump Standards-Version to 3.9.8
 * New Maintainer.  Thanks to Anthony for original work. (Closes: #844244)

 [ Nicolas Braud-Santoni ]
 * Normalize links and use HTTPS

Thanks!

Ross



Bug#844242: RFS: terminology/0.9.1-0.1 [RC] [NMU]

2016-11-18 Thread Ross Vandegrift
On Fri, Nov 18, 2016 at 05:04:02PM +, Gianfranco Costamagna wrote:
> >   [ Ross Vandegrift ]
> 
> >   * Non-maintainer upload.
> 
> Hi Ross, can you please fix and answer if  you want to maintain or not
> the package?

Sorry for the slow response - I'm planning to fix this weekend,
and adopt in pkg-e-devel.

Ross



Bug#844242: RFS: terminology/0.9.1-0.1 [RC] [NMU]

2016-11-18 Thread Gianfranco Costamagna
control: reopen -1


>   [ Ross Vandegrift ]

>   * Non-maintainer upload.

Hi Ross, can you please fix and answer if  you want to maintain or not
the package?

thanks,

G.



Bug#844242: RFS: terminology/0.9.1-0.1 [RC] [NMU]

2016-11-13 Thread Adam Borowski
On Sun, Nov 13, 2016 at 12:43:28PM -0500, Ross Vandegrift wrote:
> I am looking for a sponsor for my package "terminology"
> 
>  * Package name: terminology
> 
> Changes since the last upload:
> 
>   [ Ross Vandegrift ]
>   * Non-maintainer upload.
>   * New upstream release
> - Fix for "CVE-2015-8971: Escape Sequence Command Execution
>   vulnerability" (Closes: #843434)
>   * Enable build hardening options
>   * Suggest libemotion-players for media support (Closes: #773057, #766705)
>   * Reformat package descriptions (Closes: #779494, #782082)
>   * Use secure Vcs- URLs in debian/control
>   * Bump Standards-Version to 3.9.8
>   * fix-minus-signs-manpage.patch: drop patch, fixed upstream
>   * use-system-lz4.patch: defuzz
>   * fix-del-backspace-key.patch: defuzz
>   * Provide x-terminal-emulator alternative (Closes: #774111)
>   * debian/copyright: remove unused ltmain.sh paragraph
>   * Add gbp.conf and notes on usage in README.source
> 
>   [ Nicolas Braud-Santoni ]
>   * Normalize links and use HTTPS

Such a laundry list of changes is grossly inappropriate for a NMU.

On the other hand, the package got orphaned just 18 minutes after you filed
this RFS.  This means, there's no M to N.U anymore...

Could you please decide whether you'd want to adopt this package, and change
the maintainer field to yourself if yes, or to the QA team if not?

Obviously, in either case this upload won't be a NMU anymore.


Meow!
-- 
A true bird-watcher waves his tail while doing so.



Bug#844242: RFS: terminology/0.9.1-0.1 [RC] [NMU]

2016-11-13 Thread Ross Vandegrift
Package: sponsorship-requests
Severity: important

Dear mentors,

I am looking for a sponsor for my package "terminology"

 * Package name: terminology
   Version : 0.9.1-0.1
   Upstream Author : Enlightenment team
 * URL : https://www.enlightenment.org/about-terminology
 * License : BSD
   Section : x11

It builds those binary packages:

 terminology - Enlightenment efl based terminal emulator
 terminology-data - Enlightenment efl based terminal emulator data

To access further information about this package, please visit the
following URL:

  https://mentors.debian.net/package/terminology

Alternatively, one can download the package with dget using this command:

dget -x 
https://mentors.debian.net/debian/pool/main/t/terminology/terminology_0.9.1-0.1.dsc

Changes since the last upload:

  [ Ross Vandegrift ]
  * Non-maintainer upload.
  * New upstream release
- Fix for "CVE-2015-8971: Escape Sequence Command Execution
  vulnerability" (Closes: #843434)
  * Enable build hardening options
  * Suggest libemotion-players for media support (Closes: #773057, #766705)
  * Reformat package descriptions (Closes: #779494, #782082)
  * Use secure Vcs- URLs in debian/control
  * Bump Standards-Version to 3.9.8
  * fix-minus-signs-manpage.patch: drop patch, fixed upstream
  * use-system-lz4.patch: defuzz
  * fix-del-backspace-key.patch: defuzz
  * Provide x-terminal-emulator alternative (Closes: #774111)
  * debian/copyright: remove unused ltmain.sh paragraph
  * Add gbp.conf and notes on usage in README.source

  [ Nicolas Braud-Santoni ]
  * Normalize links and use HTTPS

Regards,
 Ross Vandegrift