Bug#887719: gnustep-back0.25: Detect freetype2 using pkg-config

[Hugh McMaster]

Package: gnustep-back0.25
Version: 0.25.0-2
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship
the 'freetype-config' script or freetype2.m4.

Please use pkg-config to detect the freetype2 headers
and libraries instead.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages gnustep-back0.25 depends on:
ii  gnustep-back0.25-cairo [gnustep-back0.25-alt]  0.25.0-2+b1

gnustep-back0.25 recommends no packages.

Versions of packages gnustep-back0.25 suggests:
ii  fonts-dejavu  2.37-1
ii  gsfonts-x11   0.24

-- no debconf information

Bug#887597: adonthell: Detect freetype using pkg-config

[Hugh McMaster]

Hi Simon,

On Friday, 19 January 2018 8:07 AM, Simon McVittie wrote:
> On Thu, 18 Jan 2018 at 11:06:09 +0000, Hugh McMaster wrote:
>> The next version of libfreetype6-dev will *not* ship the 'freetype-config'
>> script.

> Is there a version in experimental or something with this script omitted?
Not yet, but there will be.

> In that version, will AC_CHECK_FT2 in /usr/share/aclocal/freetype2 be
> modified to run pkg-config instead?
I don't see a need for this. In fact, freetype2.m4 probably won't be shipped 
either.

> The attached seems to work in a chroot with a symlink
> /usr/local/bin/freetype-config -> /bin/false, so hopefully it'll also
> work with the future freetype package. (Built but otherwise untested.)
Your patch looks fine to me. Thank you for looking into this so promptly.

Bug#887719: gnustep-back0.25: Detect freetype2 using pkg-config

[Hugh McMaster]

On Saturday, 20 January 2018 1:54 AM, Yavor Doganov wrote:
> Hugh McMaster wrote:
>> The next version of libfreetype6-dev will *not* ship
>> the 'freetype-config' script or freetype2.m4.

> Is this a Debian-specific change to properly support multiarch?
Yes. The package recently became Multi-Arch: same, but does not work correctly 
when installed for foreign architectures.

> We'll fix this in experimental first as we're preparing for a
> gnustep-gui transition.

Sounds good. Thank you for doing this.

Bug#887713: fvwm: Detect freetype2 using pkg-config

[Hugh McMaster]

Package: fvwm
Version: 1:2.6.7-3
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship
the 'freetype-config' script or freetype2.m4.

Please use pkg-config to detect the freetype headers
and libraries instead.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages fvwm depends on:
ii  libc6   2.26-4
ii  libcairo2   1.15.8-3
ii  libfontconfig1  2.12.6-0.1
ii  libfreetype62.8.1-1
ii  libfribidi0 0.19.7-2
ii  libgdk-pixbuf2.0-0  2.36.11-1
ii  libglib2.0-02.54.3-1
ii  libice6 2:1.0.9-2
ii  libperl4-corelibs-perl  0.004-1
ii  libpng16-16 1.6.34-1
ii  libreadline77.0-3
ii  librplay3   3.3.2-16+b2
ii  librsvg2-2  2.40.20-2
ii  libsm6  2:1.2.2-1+b3
ii  libstroke0  0.5.1-9
ii  libtinfo5   6.0+20171125-1
ii  libx11-62:1.6.4-3
ii  libxcursor1 1:1.1.15-1
ii  libxext62:1.3.3-1+b2
ii  libxft2 2.3.2-1+b2
ii  libxinerama12:1.1.3-1+b3
ii  libxpm4 1:3.5.12-1
ii  libxrender1 1:0.9.10-1
ii  perl5.26.1-4

Versions of packages fvwm recommends:
ii  lxmenu-data  0.1.5-2
ii  python   2.7.14-4
ii  python-xdg   0.25-4

Versions of packages fvwm suggests:
ii  cpp   4:7.2.0-1d1
ii  libx11-protocol-perl  0.56-7
ii  m41.4.18-1
pn  perl-tk   
pn  stalonetray   

-- no debconf information

Bug#887717: gimp: Detect freetype2 using pkg-config

[Hugh McMaster]

Package: gimp
Version: 2.8.20-1.1
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship
the 'freetype-config' script or freetype2.m4.

Please use pkg-config to detect the freetype2 headers
and libraries instead.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages gimp depends on:
ii  gimp-data2.8.20-1.1
ii  libaa1   1.4p5-44+b1
ii  libatk1.0-0  2.26.1-2
ii  libbabl-0.1-00.1.38-1
ii  libbz2-1.0   1.0.6-8.1
ii  libc62.26-4
ii  libcairo21.15.8-3
ii  libdbus-1-3  1.12.2-1
ii  libdbus-glib-1-2 0.108-3
ii  libexif120.6.21-4
ii  libexpat12.2.5-3
ii  libfontconfig1   2.12.6-0.1
ii  libfreetype6 2.8.1-1
ii  libgdk-pixbuf2.0-0   2.36.11-1
ii  libgegl-0.3-00.3.26-1
ii  libgimp2.0   2.8.20-1.1
ii  libglib2.0-0 2.54.3-1
ii  libgs9   9.22~dfsg-1
ii  libgtk2.0-0  2.24.31-5
ii  libgudev-1.0-0   232-1
ii  libice6  2:1.0.9-2
ii  libjpeg62-turbo  1:1.5.2-2+b1
ii  libjson-glib-1.0-0   1.4.2-3
ii  liblcms2-2   2.9-1
ii  libmng1  1.0.10+dfsg-3.1+b5
ii  libpango-1.0-0   1.40.14-1
ii  libpangocairo-1.0-0  1.40.14-1
ii  libpangoft2-1.0-01.40.14-1
ii  libpng16-16  1.6.34-1
ii  libpoppler-glib8 0.61.1-2
ii  librsvg2-2   2.40.20-2
ii  libsm6   2:1.2.2-1+b3
ii  libtiff5 4.0.9-3
ii  libwmf0.2-7  0.2.8.4-12
ii  libx11-6 2:1.6.4-3
ii  libxcursor1  1:1.1.15-1
ii  libxext6 2:1.3.3-1+b2
ii  libxfixes3   1:5.0.3-1
ii  libxmu6  2:1.1.2-2
ii  libxpm4  1:3.5.12-1
ii  libxt6   1:1.1.5-1
ii  python   2.7.14-4
ii  python-gtk2  2.24.0-5.1+b1
ii  python2.72.7.14-4
ii  zlib1g   1:1.2.8.dfsg-5

Versions of packages gimp recommends:
ii  ghostscript  9.22~dfsg-1

Versions of packages gimp suggests:
pn  gimp-data-extras  
pn  gimp-help-en | gimp-help  
ii  gvfs-backends 1.34.1-2
ii  libasound21.1.3-5

-- no debconf information

Bug#887712: libftgl-dev: Detect freetype2 using pkg-config

[Hugh McMaster]

Package: libftgl-dev
Version: 2.1.3~rc5-4+nmu1.2
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship
the 'freetype-config' script or freetype2.m4.

Please use pkg-config to detect the freetype headers and libraries instead.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libftgl-dev depends on:
ii  libfreetype6-dev   2.8.1-1
ii  libftgl2   2.1.3~rc5-4+nmu1.2
ii  libgl1-mesa-dev [libgl-dev]17.3.2-1
ii  libglu1-mesa-dev [libglu-dev]  9.0.0-2.1

libftgl-dev recommends no packages.

libftgl-dev suggests no packages.

-- no debconf information

Bug#887714: g15composer: Detect freetype2 using pkg-config

[Hugh McMaster]

Package: g15composer
Version: 3.2-2+b2
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship
the 'freetype-config' script or freetype2.m4.

Please use pkg-config to detect the freetype headers
and libraries instead.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages g15composer depends on:
ii  libc6 2.26-4
ii  libg15daemon-client1  1.9.5.3-8.3+b1
ii  libg15render1 1.3.0~svn316-2.3

g15composer recommends no packages.

g15composer suggests no packages.

-- no debconf information

Bug#887597: adonthell: Detect freetype using pkg-config

[Hugh McMaster]

On Sunday, 21 January 2018 1:09 AM, Simon McVittie wrote:
> AC_CHECK_FT2 is just as much an API as freetype-config is. If that API
> is to be removed, please do a mass-bug-filing for that too.

Thanks, Simon. I'll do this too.

Bug#887595: RFS: xft/2.3.2-1.1 [NMU]

[Hugh McMaster]

Hi Julien,

On Monday, 22 January 2018 7:49 AM, Julien Cristau wrote:
> IMO this is nothing that warrants a NMU, or an upload on its own.

Sure, perhaps not in the current RFS form. That said, I'm hoping we can 
reach some agreement on releasing a new version of xft. Here are some 
reasons why.

1. Cyril Brulebois is listed in Uploaders, but he hasn't been part of 
   Debian XFS for some years now.
2. The VCS URL in the Package Tracker no longer functions, due to the 
   recent migration to Debian Salsa.
3. The package standards version is 3.9.2 ("ancient").
4. The lack of Multi-Arch awareness blocks multi-arch support for 
   libpango1.0-dev and libfontforge-dev. These packages, in turn, 
   block Wine.
5. As for fixing other bugs, #843837 should be tagged 'wontfix', 
   since it is an upstream issue (fixed some time ago). I don't know 
   enough about the other three bugs to comment.

Marking libxft-dev Multi-Arch: same is particularly important to me,
so I'm hoping you can update the package with the above points 
in mind.

Thanks for your email.

--
Hugh McMaster

Bug#887595: RFS: xft/2.3.2-1.1 [NMU]

[Hugh McMaster]

Hi Mattia

On Tuesday, 23 January 2018 5:18 AM, Mattia Rizzolo wrote:
> So, in #884176 you attacted a debdiff also fixing #843837 - where did it
> end?
> Anyway, if you want to fix that but by that patch, please first forward
> it upstream and put valid DEP-3 headers on it.

The patch for #843837 is incorrect and no longer needed. The Debian 
motif maintainers patched configure.ac in August 2017 to use the correct 
cflags and libs for freetype2 at compile time.

Also note that the Freetype2 developers no longer recommend using 
#include 
in source files (which was the intent of my patch). The following should be 
used instead:
#include 
#include FT_FREETYPE_H

Developers would then use either freetype-config or pkg-config to 
obtain the cflags etc.

Kind regards,

Hugh

Bug#887595: RFS: xft/2.3.2-1.1 [NMU]

[Hugh McMaster]

Hi Tobias,

On Tuesday, 23 January 2018 6:16 PM, Tobias Frost wrote:

On Mon, Jan 22, 2018 at 10:58:00AM +, Hugh McMaster wrote:
>> 1. Cyril Brulebois is listed in Uploaders, but he hasn't been part of 
>>    Debian XFS for some years now.
>
>Did you ask him if he still is interested in maintaining the package?

Yes, I contacted him shortly after New Year. On 3 January 2018, he 
wrote in an email that he no longer maintained the package:
"I left that team [Debian XFS] a long while ago (several years): 
https://lists.debian.org/debian-x/2013/10/msg00292.html;

>> 2. The VCS URL in the Package Tracker no longer functions, due to the 
>>    recent migration to Debian Salsa.
>
>That is unrelated. alioth is still working. However this is another sign
>that the package is no longer in active maintaince.

Re-reading what I wrote, I can see I wasn't clear. Julien updated the 
VCS URL in xft's repository on Salsa a week ago. [1] I was implying that 
the VCS URL in the Package Tracker would not work until the package 
is updated. (Correct me if I'm wrong, however.) 

> I suggest to mail kibi and just ask him whether it is and maybe (if you
> want) whether you could add yourself as Co-Maintainer.
> (You maybe also want to file a bug the the repository is defunc.)

Julien is in a better place to tell us about xft's status. That said, I'd be 
happy to help with maintenance, if Julien would welcome that.

>> 3. The package standards version is 3.9.2 ("ancient").
>> 4. The lack of Multi-Arch awareness blocks multi-arch support for 
>>    libpango1.0-dev and libfontforge-dev. These packages, in turn, 
>>    block Wine.
>
> Thanks for the explanation, but then this should be documented in the bug and
> the severity increased (IMHO to important).

I'll raise the severity and add information about the lack of multi-arch 
support blocking other packages.

>> 5. As for fixing other bugs, #843837 should be tagged 'wontfix', 
>>    since it is an upstream issue (fixed some time ago). I don't know 
>>    enough about the other three bugs to comment.
>
> How is it fixed upstream? The bug has no info...
> Looking for upstream... It seems that there is no newer release
> at the site mentioned in d/copyright.

Ah, sorry. This was a misuse of terminology. Debian maintainers for 
motif added a patch for #843837 in August last year [2].

Thanks for the advice.

--
Hugh McMaster

[1] 
https://salsa.debian.org/xorg-team/lib/xft/commit/32a69bcd3d9b4919376e00e21dbf17b6672bcef6
[2] 
https://anonscm.debian.org/cgit/collab-maint/motif.git/tree/debian/patches/fix_ac_find_xft.patch

Bug#887595: RFS: xft/2.3.2-1.1 [NMU]

[Hugh McMaster]

Hi Tobi,

Julien downgraded the severity of #884176 to 'wishlist'. [1] So it looks like 
this could be 'wontfix'.

That said, I'm still unclear whether Julien is going to fix this himself or 
not, as he never said.

I can still do the NMU, but if it's going to get rejected, there seems little 
point.

Hugh

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=884176

Bug#887481: RFS: freetype/2.8.1-1.1 [NMU]

[Hugh McMaster]

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for an NMU of the package "freetype".

* Package name: freetype
  Version : 2.8.1-1.1
  Upstream Author : The FreeType Project
* URL : https://www.freetype.org/
* License : FreeType License / GPLv2
  Section : libs

It builds the following binary packages:
  * freetype2-demos - FreeType 2 demonstration programs
  * libfreetype6 - FreeType 2 font engine, shared library files
  * libfreetype6-dev - FreeType 2 font engine, development files
  * libfreetype6-udeb - FreeType 2 font engine for the debian-installer (udeb)

To access further information about this package, please visit the following 
URL:
https://mentors.debian.net/package/freetype

Alternatively, download the package with 'dget' using this command:
dget -x 
https://mentors.debian.net/debian/pool/main/f/freetype/freetype_2.8.1-1.1.dsc

More information about hello can be obtained from https://www.freetype.org

Changes since the last upload:
  * Non-maintainer upload.
  * debian/rules:
- Update a 'sed' expression to prevent it replacing all occurrences
  of SIZEOF_LONG in ftconfig.h (Closes: #887087).

Regards,
Hugh McMaster

Bug#843837: libxft-dev: Xft/Xft.h header incorrectly includes ft2build.h

[Hugh McMaster]

Hi Graham,

Sorry for the delayed reply.

On Wednesday, 31 January 2018 5:23 PM, Graham Inggs wrote:
> I saw this message in bug #887595 [1] and thought it would be relevant here:
>
> On Tue, Jan 23, 2018 at 11:56:38AM +0000, Hugh McMaster wrote:
>> Also note that the Freetype2 developers no longer recommend using
>> #include 
>> in source files (which was the intent of my patch). The following should be
>> used instead:
>> #include 
>> #include FT_FREETYPE_H
>>
>> Developers would then use either freetype-config or pkg-config to
>> obtain the cflags etc.
>
> Hugh, do you have a reference for the above?

The freetype-2.8 API reference shows this #include usage.  Look at the 
documentation
provided with libfreetype6-dev in 
/usr/share/doc/libfreetype6/documentation.html,
particulary Tutorial #1 and Example #1.

Freetype-2.9 (the most recent upstream version) also has this information.
See [1] for information on freetype2's header inclusion scheme and [2] for the 
tutorial.

[1] https://www.freetype.org/freetype2/docs/reference/ft2-header_inclusion.html
[2] https://www.freetype.org/freetype2/docs/tutorial/step1.html
[3] 
https://anonscm.debian.org/cgit/collab-maint/motif.git/tree/debian/patches/fix_ac_find_xft.patch

Bug#882785: Move gdk-pixbuf-csource to a Multi-Arch: foreign package

[Hugh McMaster]

On Sunday, 26 Nov 2017 21:03:45 +0100, Helmut Grohne wrote:
> [...]
> Thus I request moving gdk-pixbuf-csource into a Multi-Arch:
> foreign package. Unfortunately, satisfying this request means adding a
> new binary package and thus going through the NEW queue.

Yes, agreed.

Maintainers, please commit Helmut's patch, as fixing this bug will 
help cross-building and the ongoing multi-arch effort.

Hugh

Bug#890898: RFS: exif/0.6.21-2

[Hugh McMaster]

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for a Team Upload of the package "exif".

* Package name: exif
  Version : 0.6.21-2
  Upstream Author : Dan Fandrich <d...@coneharvesters.com>,
Lutz Müller <u...@rz.uni-karlsruhe.de>
* URL : https://libexif.github.io
* License : GNU LGPL 2.1
  Section : graphics

It builds those binary packages:
  exif - command-line utility to show EXIF information in JPEG files

To access further information about this package, please visit the following 
URL:
https://mentors.debian.net/package/exif

Alternatively, one can download the package with dget using this command:
  dget -x https://mentors.debian.net/debian/pool/main/e/exif/exif_0.6.21-2.dsc

More information about "exif" can be obtained from https://www.example.com.

Changes since the last upload:

  * Team upload.
  * debhelper update:
- Update package compatibility to level 11. 
  * debian/control:
- Build-Depend on debhelper version 11.
- Build-Depend on libexif-dev 0.6.21.
- Remove dh-autoreconf and autotools-dev from the Build-Depends list.
- Raise Standards-Version from 3.9.4 to 4.1.3.
- Update the Homepage field to point to https://libexif.github.io.
- Update the Vcs fields to point to https://salsa.debian.org.
- Mark exif Multi-Arch: foreign.
  * debian/copyright:
- Update the Format specification URI.
- Update the Source URL field to point to https://libexif.github.io.
  * debian/patches:
- add-am_prog_ar.patch: Add the AM_PROG_AR macro to configure.ac to avoid
  an automake warning.
- cross-build-pkg-config.patch: Replace the macro GP_PKG_CONFIG with
  PKG_PROG_PKG_CONFIG to allow exif to cross-compile from source
  (thanks to Helmut Grohne for the patch) (Closes: #858102).
- fix-hyphens-in-manpage.patch: Add .patch file extension and
  update the patch description.
- fix-size_t-warnings.patch: Cast size_t precision and width specifiers
  to unsigned int to avoid compile-time warnings with printf().
  * debian/rules:
- Add 'hardening=+all' to DEB_BUILD_MAINT_OPTIONS.
- Remove '--with autotools_dev,autoreconf', as these options are now
  handled by debhelper level 11.
  * debian/source/options:
- Remove from package. Debhelper handles the specified options by default.

Regards,
Hugh McMaster

Bug#885324: libfreetype6-dev: freetype-config is missing all calls to pkg-config

[Hugh McMaster]

Package: libfreetype6-dev
Version: 2.8.1-0.1
Severity: important

Dear Maintainer,

freetype-config does not contain any calls to pkg-config,
despite it supporting that logic (see the 'if' block).

Looking in the source, autoconf substitues %PKG_CONFIG%
at compile-time, but freetype-config only contains a blank space.

pkg-config should be a Build-Dependency of freetype. This is due
to an upstream change that was missed.

I will provide a fix for this bug in an upcoming NMU.

Hugh



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.14.0-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libfreetype6-dev depends on:
ii  libc6-dev [libc-dev]   2.25-5
ii  libfreetype6   2.8.1-0.1
ii  libpng-dev 1.6.34-1
ii  zlib1g-dev [libz-dev]  1:1.2.8.dfsg-5

libfreetype6-dev recommends no packages.

libfreetype6-dev suggests no packages.

-- no debconf information

Bug#870618: Revised NMU debdiff for freetype-2.8.1-0.2

[Hugh McMaster]

Hi Steve,

Good to hear from you.

On Thursday, 28 December 2017 5:11 PM, Steve Langasek wrote:
>> -DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
>> -DEB_HOST_ARCH  ?= $(shell dpkg-architecture -qDEB_HOST_ARCH)
>> -DEB_BUILD_ARCH ?= $(shell dpkg-architecture -qDEB_BUILD_ARCH)
>> +include /usr/share/dpkg/architecture.mk
>
> nack on this.  makefile includes for debian/rules are an antipattern, and
> this is definitely not a minimal necessary change.

Sure. It's your call.

> The actual changes to freetype-config look reasonable, and I would be happy
> to incorporate these into a maintainer upload.

Perfect. I'm also hoping you can include fixes for the bugs listed in my NMU 
changelog.
Those bugs are #666761, #883698 and #885324. Feel free to use my changes if you 
like.

When are you planning to release your version? I'm hoping it will be soon.  :-)

Kind regards,
Hugh

Bug#884769: RFS: freetype/2.8.1-0.2 [NMU]

[Hugh McMaster]

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am once again looking for a sponsor for an NMU of the package "freetype".
This version addresses concerns raised by Adam Borowski and Gianfranco 
Costamagna, 
and removes the arch-dependent libdir output instead of freetype-config itself.

* Package name: freetype
  Version: 2.8.1-0.2
  Upstream Author: Werner Lemberg/Freetype Team, freetype-de...@nongnu.org
* URL: https://www.freetype.org
* License: FTL or GNU GPLv2
  Section: libs

The source builds the following binary packages:
* freetype2-demos - FreeType 2 demonstration programs
* libfreetype6 - FreeType 2 font engine, shared library files
* libfreetype6-dev - FreeType 2 font engine, development files
* libfreetype6-udeb - FreeType 2 font engine for the debian-installer (udeb)

To access further information about this package, please visit the following 
URL:
https://mentors.debian.net/package/freetype

Alternatively, you can download the package with dget using this command:
dget -x 
https://mentors.debian.net/debian/pool/main/f/freetype/freetype_2.8.1-0.2.dsc

More information about freetype can be obtained from https://www.freetype.org.

Changes since the last upload:
* Non-maintainer upload.
* debian/control:
  - Add pkg-config to the Build-Depends list (Closes: #885324).
  - Mark libfreetype6-dev Multi-Arch: same (Closes: #666761).
  - Remove the deprecated Priority: extra field from libfreetype6-udeb.
* debian/patches/patches-*: Refresh existing patches.
* debian/patches/patches-freetype/freetype-config-multi-arch.patch:
  - Remove the arch-dependent output of `freetype-config --libs`.
  - Exit with an error if freetype-config is called with --libtool.
* debian/rules:
  - Include /usr/share/dpkg/architecture.mk.
  - Dynamically generate the shlibs dependency version (Closes: #883698).
  - Replace the autoconf definition of SIZEOF_LONG with the compile-time
constant __SIZEOF_LONG__ to make libfreetype6-dev multi-arch compatible.

Regards,
Hugh McMaster

Bug#870618: Revised NMU debdiff for freetype-2.8.1-0.2

[Hugh McMaster]

Hi Steve,

I've revised my NMU in response to feedback from Adam Borowski and Gianfranco 
Costamagna.

This version far less invasive.

Hugh

freetype2.debdiff
Description: freetype2.debdiff

Bug#883698: freetype: incorrect shlibs file generation

[Hugh McMaster]

Hi Cyril,

On Thursday, 21 December 2017 11:53 PM, Cyril Brulebois wrote:
> Yeah, that would look good to me, provided there's nothing added in a
> x.y.z version that would make the udeb depend on x.y (in the metadata
> section) while it actually depends on a feature introduced in a x.y.z
> (on a shared object level).

This shouldn't happen, since freetype uses x.y.z as major.minor.patch.
So a release incrementing z should only fix bugs, not alter the API.

> FWIW dh_makeshlibs supports being called with a -V option. Excerpt of
> its manpage:
> [snip]
> That might be a safer approach?

Yes, but it is conservative, perhaps. 'dh_makeshlibs -V' then depends on 2.8.1.
Given what we know about freetype's versioning, this doesn't seem necessary IMO.

On another note, I was wondering if using 'cut' is simpler than 'sed'?
$(shell echo "$(ver)" | cut -f-2 -d'.')

Thanks,
Hugh

Bug#884978: libcups2-dev: Please depend on libtiff5-dev

[Hugh McMaster]

Package: libcups2-dev
Version: 2.2.6-2
Severity: normal

Dear Maintainer,

The package libtiff-dev is now a transitional package
and is no longer marked Multi-Arch: same.

This means libcups2-dev is no longer multi-arch installable.

Please depend on libtiff5-dev to re-enable multi-arch support.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armhf

Kernel: Linux 4.13.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libcups2-dev depends on:
ii  dpkg-dev   1.19.0.4
ii  libcups2   2.2.6-2
ii  libcupsimage2-dev  2.2.6-2

libcups2-dev recommends no packages.

libcups2-dev suggests no packages.

-- no debconf information

Bug#884769: RFS: freetype/2.8.1-0.2 [NMU]

[Hugh McMaster]

Hi Gianfranco,

On Friday, 22 December 2017 3:11 AM, Gianfranco Costamagna wrote:
> ok, so fix all the reverse dependencies *before* dropping it, not after.
> We don't usually "break stuff and let maintainers fixup things", but:
> 1) open bugs (maybe with patches)

Okay, I'll start filing bugs to encourage the use of pkg-config to detect 
freetype2.
IIRC, some of the 33 already use pkg-config for other packages.

> Anyhow, we are really blocked by Steve, I pinged him on irc, maybe we can fix 
> this old bug
> now!

We should keep trying, but I don't want to pressure him to respond.

On another note, when should I prepare an NMU fixing #883698 (an RC bug)?
I'd also like to try removing the libdir code from freetype-config to make the 
package
multi-arch compatible.

Thanks,
Hugh

Bug#901052: Bug#898983: freetype: diff for NMU version 2.9.1-0.1

[Hugh McMaster]

Hi Steve,

On Wednesday, 25 July 2018 3:04 AM, Steve Langasek wrote:
> I am open to having you, or someone, fully take over maintainership of
> freetype.  But I do not believe that the changes proposed here are proper
> for an NMU.

Having given this a lot of thought over the past week, I'd be happy to
co-maintain freetype with you, as I believe I can benefit from your
experience with this package. However, should you wish to fully hand
over the package, that is okay too.

On Tuesday, 24 July 2018 11:08:35 -0700, Steve Langasek wrote:
> As long as you are the one dealing with whatever the regression of the day
> is across the distro as a result of the new upstream version, that's fine
> with me.

I will take care of any bugs that arise from the move to version 2.9.1.

If you have no objections, I'll add myself to the Uploaders list and begin
updating the package. Please let me know by Monday if you would like 
to make other arrangements.

--
Hugh McMaster

Bug#901052: freetype: Please update to 2.9.1

[Hugh McMaster]

Hi Adrian,

On Monday, 23 July 2018 09:18:02 +1000, John Paul Adrian Glaubitz wrote:
> I would be happy to help with the review and the sponsorship
> of this NMU if Steve is unable to go ahead and do it himself.

Thank you for the offer to review and (potentially) sponsor my NMU of FreeType 
2.
Mattia Rizzolo has taken ownership of the RFS bug and has provided an initial
review of the NMU [1].

I have since updated the package on Debian Mentors to fix the issues identified.

I believe Mattia is busy until Tuesday evening, but I hope the package
can be uploaded to the NEW queue soon.

> I'm particularly interested in the new freetype version to
> fix alignment issues on sparc64 which have been fixed upstream
> in the newer versions.

Kind regards,

Hugh

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904028

Bug#907792: libfribidi-dev: Please mark libfribidi-dev Multi-Arch: same

[Hugh McMaster]

Package: libfribidi-dev
Version: 1.0.5-3
Severity: wishlist

Dear Maintainer,

Multi-arch support in libfribidi-dev is needed for packages such as
libgtk2.0-dev to become co-installable on different architectures.

libgtk2.0-dev has recently become Multi-Arch: same and libfribidi-dev
is now a blocker.

libfribidi-dev has no conflicting files preventing it from becoming multi-arch
co-installable.

Please mark the package Multi-Arch: same.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.17.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libfribidi-dev depends on:
ii  libfribidi0  1.0.5-3

libfribidi-dev recommends no packages.

libfribidi-dev suggests no packages.

-- no debconf information

Bug#907794: libtiff-doc: Please mark libtiff-doc Multi-Arch: foreign

[Hugh McMaster]

Package: libtiff-doc
Version: 4.0.9-6
Severity: wishlist

Dear Maintainer,

Please mark libtiff-doc Multi-Arch: foreign in accordance with Debian's multi-
arch hinter.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.17.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-- no debconf information

Bug#862119: Please mark libgstreamer-plugins-base1.0-dev Multi-Arch: same

[Hugh McMaster]

Dear maintainer,

The package libgstreamer-plugins-base1.0-dev is not currently multi-arch 
compatible.

Multi-arch support is needed to allow other packages, such as Wine, to build 
using
architecture-specific development files.

There are no file conflicts in libgstreamer-plugins-baase1.0-dev preventing it 
from becoming multi-arch co-installable.

Please mark the package Multi-Arch: same.

Also, please let me know if you would like me to prepare a patch for this.

Thank you

Bug#884176: libxft-dev: Please mark the package Multi-Arch: same

[Hugh McMaster]

Control: severity -1 important

I am raising this bug's severity to 'important', following advice from #887595.

Also, the lack of multi-arch awareness in this package blocks multi-arch 
support in 
libpango1.0-dev and libfontforge-dev. These packages, in turn, block multi-arch 
support in Wine (i.e. wine-development).

Marking libxft-dev as Multi-Arch: same will benefit many package, including 
packages depending on libpango1.0-dev and libfontforge-dev. So fixing
this bug is important.

Bug#887087: ftconfig.h:113:26: warning: "__SIZEOF_LONG__4" is not defined, evaluates to 0 [-Wundef]

[Hugh McMaster]

Control: severity -1 important

Hi Daniel,

Thank you for your bug report. This is my fault.  :-(

A sed expression was overly lenient in what it matched, resulting in the 
breakage you saw.

@Steve, an appropriate fix is attached. Please try to push this out ASAP.

--
Hugh McMaster

freetype2.diff
Description: freetype2.diff

Bug#887601: libcamlimages-ocaml: Detect freetype using pkg-config

[Hugh McMaster]

Package: libcamlimages-ocaml
Version: 1:4.2.0-1.1+b3
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship the 'freetype-config'
script.

Please use pkg-config to detect the freetype headers and libraries instead.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libcamlimages-ocaml depends on:
ii  libc62.26-4
ii  libfreetype6 2.8.1-1
ii  libgif7  5.1.4-1
ii  libjpeg62-turbo  1:1.5.2-2+b1
ii  liblablgtk2-ocaml [liblablgtk2-ocaml-il3k6]  2.18.5+dfsg-1+b1
ii  libpng16-16  1.6.34-1
ii  libtiff5 4.0.9-3
ii  libx11-6 2:1.6.4-3
ii  libxpm4  1:3.5.12-1
ii  ocaml-base [ocaml-base-4.05.0]   4.05.0-10
ii  ocaml-base-nox [ocaml-base-nox-4.05.0]   4.05.0-10
ii  zlib1g   1:1.2.8.dfsg-5

libcamlimages-ocaml recommends no packages.

libcamlimages-ocaml suggests no packages.

-- no debconf information

Bug#887602: dia: Detect freetype via pkg-config

[Hugh McMaster]

Package: dia
Version: 0.97.3+git20160930-7
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship the 'freetype-config'
script.

Please use pkg-config to detect the freetype headers and libraries instead.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dia depends on:
ii  dia-common   0.97.3+git20160930-7
ii  libart-2.0-2 2.3.21-3
ii  libatk1.0-0  2.26.1-2
ii  libc62.26-4
ii  libcairo21.15.8-3
ii  libfontconfig1   2.12.6-0.1
ii  libfreetype6 2.8.1-1
ii  libgdk-pixbuf2.0-0   2.36.11-1
ii  libglib2.0-0 2.54.3-1
ii  libgtk2.0-0  2.24.31-5
ii  libpango-1.0-0   1.40.14-1
ii  libpangocairo-1.0-0  1.40.14-1
ii  libpangoft2-1.0-01.40.14-1
ii  libpng16-16  1.6.34-1
ii  libpython2.7 2.7.14-4
ii  libxml2  2.9.4+dfsg1-6.1
ii  libxslt1.1   1.1.29-5
ii  zlib1g   1:1.2.8.dfsg-5

Versions of packages dia recommends:
pn  dia-shapes   
ii  gsfonts-x11  0.24

dia suggests no packages.

-- no debconf information

Bug#887606: dvipng: Detect freetype using pkg-config

[Hugh McMaster]

Package: dvipng
Version: 1.15-1
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship the 'freetype-config'
script.

Please use pkg-config to detect the freetype headers and libraries instead.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dvipng depends on:
ii  ghostscript  9.22~dfsg-1
ii  libc62.26-4
ii  libfreetype6 2.8.1-1
ii  libgd3   2.2.5-4
ii  libkpathsea6 2017.20170613.44572-8
ii  libpng16-16  1.6.34-1
ii  texlive-binaries [texlive-base-bin]  2017.20170613.44572-8
ii  zlib1g   1:1.2.8.dfsg-5

dvipng recommends no packages.

dvipng suggests no packages.

-- no debconf information

Bug#887604: dvi2ps: Detect freetype using pkg-config

[Hugh McMaster]

Package: dvi2ps
Version: 5.1j-1.2+b2
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship the 'freetype-config'
script.

Please use pkg-config to detect the freetype headers and libraries instead.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dvi2ps depends on:
ii  debconf [debconf-2.0]1.5.65
ii  libc62.26-4
ii  libfreetype6 2.8.1-1
ii  libkpathsea6 2017.20170613.44572-8
ii  texlive-binaries [texlive-base-bin]  2017.20170613.44572-8
ii  vflib3   3.6.14.dfsg-3+nmu4

dvi2ps recommends no packages.

Versions of packages dvi2ps suggests:
pn  dvi2ps-fontdata-ja  

-- debconf information:
  dvi2ps/configk:
  dvi2ps/fontdesc:

Bug#887600: asc: Detect freetype using pkg-config

[Hugh McMaster]

Package: asc
Version: 2.6.1.0-3
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship the 'freetype-config'
script.

Please use pkg-config to detect the freetype headers and libraries instead.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages asc depends on:
ii  asc-data  2.6.1.0-3
ii  libboost-regex1.62.0  1.62.0+dfsg-5
ii  libbz2-1.01.0.6-8.1
ii  libc6 2.26-4
ii  libexpat1 2.2.5-3
ii  libfreetype6  2.8.1-1
ii  libgcc1   1:7.2.0-19
ii  liblua5.1-0   5.1.5-8.1+b2
ii  libphysfs13.0.1-1
ii  libpng16-16   1.6.34-1
ii  libsdl-image1.2   1.2.12-7
ii  libsdl-mixer1.2   1.2.12-14
ii  libsdl-sound1.2   1.0.3-8
ii  libsdl1.2debian   1.2.15+dfsg2-0.1
ii  libsigc++-2.0-0v5 2.10.0-1
ii  libstdc++67.2.0-19
ii  libwxbase3.0-0v5  3.0.3.1+dfsg2-1

Versions of packages asc recommends:
ii  asc-music  1.3-3

asc suggests no packages.

-- no debconf information

Bug#887595: RFS: xft/2.3.2-1.1 [NMU]

[Hugh McMaster]

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for an NMU of the package "xft".

* Package name: xft
  Version : 2.3.2-1.1
  Upstream Author : Keith Packard
* URL : https://freedesktop.org/wiki/Software/Xft/
* License : BSD
  Section : devel

The source builds the following binary packages:
 * libxft-dev - FreeType-based font drawing library for X (development files)
 * libxft2- FreeType-based font drawing library for X
 * libxft2-dbg - FreeType-based font drawing library for X (unstripped)
 * libxft2-udeb - FreeType-based font drawing library for X (udeb)

To access further information about this package, please visit the following 
URL:
  https://mentors.debian.net/package/xft

Alternatively, you can download the package with dget using this command:
dget -x https://mentors.debian.net/debian/pool/main/x/xft/xft_2.3.2-1.1.dsc

More information about xft can be obtained from 
https://www.freedesktop.org/wiki/Software/Xft/.

Changes since the last upload:
  * Non-maintainer upload.
  * debian/control:
- Mark libxft-dev Multi-Arch: same (Closes: #884176).

Regards,

Hugh McMaster

Bug#887597: adonthell: Detect freetype using pkg-config

[Hugh McMaster]

Package: adonthell
Version: 0.3.6-1+b1
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship the 'freetype-config'
script.

Please use pkg-config to detect freetype.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages adonthell depends on:
ii  libc62.26-4
ii  libfreetype6 2.8.1-1
ii  libgcc1  1:7.2.0-19
ii  libpython3.6 3.6.4-3
ii  libsdl2-2.0-02.0.7+dfsg1-3
ii  libsdl2-mixer-2.0-0  2.0.2+dfsg1-2
ii  libsdl2-ttf-2.0-02.0.14+dfsg1-2
ii  libstdc++6   7.2.0-19
ii  libvorbis0a  1.3.5-4.1
ii  libvorbisfile3   1.3.5-4.1
ii  python3  3.6.4-1
ii  zlib1g   1:1.2.8.dfsg-5

Versions of packages adonthell recommends:
ii  adonthell-data  0.3.7-1

adonthell suggests no packages.

-- no debconf information

Bug#887599: afterstep: Detect freetype using pkg-config

[Hugh McMaster]

Package: afterstep
Version: 2.2.12-11
Severity: important

Dear Maintainer,

The next version of libfreetype6-dev will *not* ship the 'freetype-config'
script.

Please use pkg-config to detect the freetype headers and libraries instead.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages afterstep depends on:
ii  afterstep-data2.2.12-11
ii  debianutils   4.8.4
ii  dpkg  1.19.0.5
ii  gnome-terminal [x-terminal-emulator]  3.26.2-2
ii  imagemagick   8:6.9.7.4+dfsg-16
ii  imagemagick-6.q16 [imagemagick]   8:6.9.7.4+dfsg-16
ii  libafterimage02.2.12-11
ii  libafterstep1 2.2.12-11
ii  libc6 2.26-4
ii  libdbus-1-3   1.12.2-1
ii  libglib2.0-0  2.54.3-1
ii  libgtk2.0-0   2.24.31-5
ii  libreadline7  7.0-3
ii  libx11-6  2:1.6.4-3
ii  libxext6  2:1.3.3-1+b2
ii  menu  2.1.47+b1
ii  menu-xdg  0.5
ii  perl  5.26.1-4
ii  ucf   3.0036
ii  xterm [x-terminal-emulator]   331-1

Versions of packages afterstep recommends:
ii  gnome-themes-standard  3.22.3-4

Versions of packages afterstep suggests:
pn  asclock | wmitime  
pn  asmail 
pn  asmon  
pn  mc 
pn  wmcpuload  
pn  xscreensaver   

-- no debconf information

Bug#892339: inkscape: Please use 'pkg-config' to find FreeType 2

[Hugh McMaster]

On Friday, 9 March 2018 3:00 AM, Mattia Rizzolo wrote:
> mhh, no usertags.
> How are you going to track these bugs without usertags?

I've now marked each relevant bug with my usertag 'freetype-config'.

> The next release of libfreetype6-dev will *not* ship
> `freetype-config', as the script has now been deprecated in favour of
> `pkg-config'.

> I can't see any package in experimental featuring this change.  Usually
> there would be a package in experimental, used to test other packages
> against, before MBFing.

There is no package in experimental for various reasons, including that
upstream FreeType has not yet released that version (unless you clone
the git repository). But you can easily simulate the relevant change yourself.

> I haven't looked deep, but I believe the inkscape is not affected:
> the version currently in debian contains a double build system
> autoconf+cmake: the autoconf one seems to be alling `freetype-config`,
> whereas cmake seems be doing something else (possibly pkg-config, or
> not); and we're using the cmake build system.
> FTR, the next major upstream release (0.93) will have only cmake.

Thanks for the explanation.

--
Hugh McMaster

Bug#892436: pygame: Please use 'pkg-config' to find FreeType 2

[Hugh McMaster]

Hi René,

Thanks for looking on this bug.

On Tue, 3 Apr 2018 11:19:20 +0200, René Dudfield wrote:
> I wonder if you know how portable pkg-config is for this?
>
> Will using pkg-config work for getting config on older versions of Debian?
>
> Or will we have to try and use both of the scripts? freetype-config for
> older, and pkg-config for newer?

pkg-config has been part of Debian-based distros for many years.
The current release 0.29-4 is also part of Stretch, with Jessie using 0.28-1.

Also, freetype-config has been deprecated for many years, with pkg-config
being the preferred method of obtaining CFLAGS and libs for several years now.

In fact, freetype-config has been a wrapper for pkg-config since February 2017.

FreeType has also had pkg-config support since version 2.1.5 was released in 
2003, so
pkg-config support is comfortably available everywhere.

In addition, freetype-config(1) has recommended developers use pkg-config since 
March 2014.

Hope that helps.

Hugh

Bug#818544: sane-backends: diff for NMU version 1.0.25-4.2

[Hugh McMaster]

Hi Jörg,

It looks like you forgot to CC me in your response to Mattia.

On Thu, 05 Apr 2018 20:24:55 +0200, Jörg Frings-Fürst wrote:
> Reasons:
> * Use of a directory (tmp/sane-backends) outside the build directory 

I don't believe there any policy preventing the use of a external directory.
But it is possible to use the build directory, if a bit more difficult.

> * The announcement of the NMU took place in a Whishlist bug, which has
>   nothing to do with the NMU.

You closed the relevant bug (#877691) immediately after it was filed, and 
did not respond to my follow-up question. That was five months ago. Given
that #877691 was the third bug filed for the same problem, that should 
have signalled a need to upload a new Unstable release at that time.

In any case, opening a new bug for the NMU did not seem appropriate.

When making the decision to NMU, I saw there had been no activity in
the git repository for many months. Also, you had not responded to my
post in the BTS (at that time) or to any other recently filed bugs.

The intent of the NMU was clear, although re-reading it now, I can see
that I wasn't clear about which multi-arch bug I was fixing.

> * In my response[1] I have clearly stated that my version is available
>   for review with my mentor.

The NMU was prepared before your response -- and then the Easter
holidays were upon on.

But moving on, I share Mattia's opinion that the transition will take
a long time. And this is assuming your (unreleased) Experimental v4
build is ready.

If it is not, can we at least fix the original (sane.ps) multi-arch bug
in Unstable? We've all been waiting at least five months.
After all, this regression is also blocking other packages.

> * dh_autoreconf is used for update the upstream m4 files with the
>   newest one. The "dh_autoreconf -X.m4" command prevents this for all
>   upstream data.

You misunderstand how the -X (exclude) option works. The m4 files
*are* updated by autoreconf. You can check yourself by running
md5sum, the same way dh_autoreconf prepares the files
debian/autoreconf.{before, after}.

But to save you some time, here is the comparison:

--- Before dh_autoreconf -X.m4 ---
683cd3c258e06224f678acb0de1bee91  ./aclocal.m4
5d52b79aa623048ec0a6aa07cb6edfa7  m4/libtool.m4
47d420a13f9ba4e171772c3e3eee3e63  m4/lt~obsolete.m4
67d5ebceaac562ddf0dde4e5cdffbe09  m4/ltoptions.m4
bc2f6032c98896249eadb56177c7d357  m4/ltsugar.m4
91dd5e1355d100dbdab7d71244ed2625  m4/ltversion.m4

--- After dh_autoreconf -X.m4 ---
d917e3caafae426a955b49c16738e00f  ./aclocal.m4
2cc70ef55adb11e355f6e8c30dcab090  m4/libtool.m4
22aa295bf5320aec7fba6756ff11058a  m4/lt~obsolete.m4
064af1799febaa676203302bbf359180  m4/ltoptions.m4
fa2891f9060865871cbbaa1c6e2d96f4  m4/ltsugar.m4
d936fd6b2025c9b5322f826117d7f30c  m4/ltversion.m4

The -X option prevents dh_autoreconf from adding the excluded
files (in this case, any filename with '.m4' anywhere in it) to the
debian/autoreconf.{before, after} files.

In turn, this exclusion prevents dh_autoreconf_clean from
removing the altered files when doing a rebuild.

(Due to problems in the upstream source, these files need 
to be restored to their original versions, otherwise debhelper
errors out, as the files differ from those in the original source.
This is why we copy the files back.)

--
Hugh McMaster

Bug#888968: unixODBC 2.3.6 prepared

[Hugh McMaster]

On Thursday, 12 April 2018 11:18 PM, Hugh McMaster wrote:
> * This is an NMU release (2.3.6-0.1). So you will need to fix d/control.

Sorry, that should say d/changelog.

Hugh

Bug#888968: unixODBC 2.3.6 prepared

[Hugh McMaster]

Control: tags 422207 + patch
Control: tags 675058 + patch
Control: tags 888968 + patch
Control: tags 891596 + patch
Control: tags 893891 + patch

Hi Steve,

I've prepared unixODBC 2.3.6 and uploaded it to d.mentors.
https://mentors.debian.net/debian/pool/main/u/unixodbc/unixodbc_2.3.6-0.1.dsc

I've given everything a massive overhaul, so this is definitely a maintainer 
release
(unless you want to ack the changes for a different sponsor).

Two things to note:
* This is an NMU release (2.3.6-0.1). So you will need to fix d/control.
* I've moved the Vcs-* fields to Salsa, using your username in the path.
The unixodbc repository doesn't exist yet, so it will need to be created.
(Let me know if you want me to host the repository.)

Hugh

unixodbc-debian.diff
Description: unixodbc-debian.diff

Bug#888968: Updated version of unixODBC 2.3.6 on d.mentors

[Hugh McMaster]

Hi Steve,

Due to an oversight -- not installing the pkg-config files -- I've uploaded a 
new version of unixODBC to Debian Mentors.

Hugh

Bug#884176: libxft-dev: Please mark the package Multi-Arch: same

[Hugh McMaster]

Hi,

Could this bug be fixed in Unstable, please?

Alternatively, if you would like, I am happy to prepare a NMU.

I don’t believe upstream will release another version (given the lack of 
activity), so fixing outstanding bugs is ideal. In particular, the previous 
maintainer bug (#889301) and switching the Vcs-fields to Salsa.

Thank you

Bug#894183: libexif: outdated Homepage, moved to github

[Hugh McMaster]

Control: tag -1 pending

Hi Paul,

Thanks for the reminder. This will be fixed soon.

Thanks,

Hugh

Bug#879845: sane-backends: please release 1.0.27 to unstable (not only experimental)

[Hugh McMaster]

Hi,

What is your timeline for releasing 1.0.27 to unstable?
I don't see any changes in the git repository since November last year.

If the release is still distant, I'd like to do an NMU fixing the multi-arch
incompatibility, so that the package is useable in this way again.
It's currently been many months since it worked.

Thanks

Bug#891547: cairo: test runs into buildd timeout without fpu

[Hugh McMaster]

Hi,

Where are we at with this bug? As things are, it is blocking migration to 
testing.

Thanks

Bug#894615: RFS: libexif/0.6.21-5

[Hugh McMaster]

Package: sponsorship-requests
Severity: normal

Dear mentors and Debian PhotoTools Team,

I am looking for a sponsor for a Team Upload of the package "libexif".

* Package name: libexif
  Version : 0.6.21-5
  Upstream Author : Dan Fandrich <d...@coneharvesters.com>
* URL : https://libexif.github.io
* License : LGPL-2.1+
  Section : libs

The source builds the following binary packages:

* libexif12  - library to parse EXIF files
* libexif-dev - library to parse EXIF files (development files)
* libexif-doc - library to parse EXIF files (documentation)

To access further information about this package, please visit the following 
URL:

https://mentors.debian.net/package/libexif

Alternatively, you can download the package with dget using this command:

dget -x 
https://mentors.debian.net/debian/pool/main/libe/libexif/libexif_0.6.21-5.dsc

More information about libexif can be obtained from https://libexif.github.io

Changes since the last upload:

  * Team upload.
  * debhelper update:
- Update package compatibility to level 11.
  * debian/changelog:
- Remove trailing whitespace.
  * debian/control:
- Build-Depend on debhelper version 11.
- Raise Standards-Version from 4.1.1 to 4.1.3 (no changes needed).
- Update the Homepage field to point to https://libexif.github.io
  (Closes: #894183).
- Update the Vcs fields to point to https://salsa.debian.org.
  * debian/copyright:
- Update the Source URL field to point to https://libexif.github.io.
  * debian/patches:
- Add .patch file extensions to existing patches.
- add-am_prog_ar.patch: Add the AM_PROG_AR macro to configure.ac to avoid
  an automake warning.
- ac_lang_source-macro.patch: Use AC_LANG_SOURCE macros to avoid several
  automake warnings in configure.ac.
- fix-size_t-warnings.patch: Cast %u format specifiers to unsigned long to
  prevent compiler warnings on 32-bit and 64-bit platforms.
  * debian/rules:
- Update dh_installdocs overrides.
- Remove '--parallel' (now handled by debhelper >= level 11).
  * debian/source/options:
- Remove from package. Debhelper handles the specified options by default.
  * debian/watch:
- Update to version 4 and switch to upstream's github repository.

Regards,

Hugh McMaster

Bug#894615: RFS: libexif/0.6.21-5

[Hugh McMaster]

Hi Andreas,

Thank you for sponsoring libexif.

On Tuesday, 3 April 2018 2:44 AM, Andreas Metzler wrote:
> looks good except for the watchfile, you need uversionmangle
> instead of oversionmangle.

Right. I did wonder about using the oversionmangle option. I've fixed
the watch file options to use uversionmangle in the latest build on d.mentors.

https://mentors.debian.net/debian/pool/main/libe/libexif/libexif_0.6.21-5.dsc

> Also I have searched in vain for your gnupg key, is it aailable
> somewhere?

Sorry about this. I've now published my public key to the key servers
listed under Step 3 of https://wiki.debian.org/Keysigning

Kind regards,

Hugh

Bug#893491: RFS: libexif-gtk/0.4.0-1

[Hugh McMaster]

Package: sponsorship-requests
Severity: normal

Dear mentors and Debian PhotoTools Team,
  
I am looking for a sponsor for a Team Upload of the package "libexif-gtk".

 * Package name: libexif-gtk
   Version : 0.4.0-1
   Upstream Author : Dan Fandrich <d...@coneharvesters.com>
 * URL : https://libexif.github.io
 * License : LGPL-2.1+
   Section : libs

The source builds the following binary packages:

 * libexif-gtk-dev - Library providing GTK+ widgets to display/edit EXIF tags 
(develop
 * libexif-gtk5 - Library providing GTK+ widgets to display/edit EXIF tags

To access further information about this package, please visit the following 
URL:

  https://mentors.debian.net/package/libexif-gtk

Alternatively, you can download the package with dget using this command:

dget -x 
https://mentors.debian.net/debian/pool/main/libe/libexif-gtk/libexif-gtk_0.4.0-1.dsc

More information about libexif-gtk can be obtained from 
https://libexif.github.io

Changes since the last upload:

  * Team upload.

  [ Emmanuel Bouthenot ]
  * Remove the DM-Upload-Allowed field from debian/control.

  [ Hugh McMaster ]
  * New upstream release.
  * debhelper update:
- Update package compatibility to level 11.
  * Package libexif-gtk5 symbols.
  * debian/*.docs:
- Package the NEWS file.
  * debian/*.install:
- Use multi-arch directories.
  * debian/control:
- Build-Depend on debhelper version 11.
- Build-Depend on libexif-dev 0.6.21.
- Remove dh-autoreconf from the Build-Depends list.
- Raise Standards-Version from 3.9.2 to 4.1.3.
- Update the Homepage field to point to https://salsa.debian.org.
- Update the Vcs-fields to point to https://salsa.debian.org.
- Update the package order.
- Mark libexif-gtk5 and libexif-gtk-dev Multi-Arch: same.
  * debian/copyright:
- Update the Format specification URI.
- Update the Source URL field to point to https://libexif.github.io.
- Update copyright information for libexif-gtk 0.4.0.
- Switch to LGPL-2.1+ for libexif-gtk 0.4.0.
  * debian/patches:
- Drop patches superseded upstream: use_autoreconf, use_deprecated_gtk,
  french_translation and german_translation.
- Rebase pkgconfig_require_gtk2.patch for libexif-gtk 0.4.0.
- add-am_prog_ar.patch: Add the AM_PROG_AR macro to configure.ac to avoid
  some automake warnings.
  * debian/rules:
- Remove excess whitespace.
- Remove '--with autoreconf' (now handled by debhelper >= level 10).
- Remove dh_auto_build overrides.
- Override dh_auto_clean to remove left-over build files.
- Add 'hardening=+all' to DEB_BUILD_MAINT_OPTIONS.
  * debian/source/options:
- Remove from package. Debhelper handles the specified options by default.
  * debian/watch:
- Update to version 4 and switch to upstream's github repository.

Regards,

Hugh McMaster

Bug#888968: Update to latest release

[Hugh McMaster]

Hi Josh,

Since unixODBC 2.3.6 was released this week, I'll look into preparing an NMU 
for it, unless Steve beats me to it.  :-)

There were a large number of changes in 2.3.5, while 2.3.6 has the nice 
addition of pkg-config files.

Bug#893855: libxkbcommon-dev: Please split the documentation into libxkbcommon-doc

[Hugh McMaster]

Package: libxkbcommon-dev
Version: 0.8.0-1
Severity: normal

Dear Maintainer,

The package libxkbcommon-dev is not multi-arch installable, as the PNG
files differ in timestamp between package variants.

Please split the documentation files from libxkbcommon-dev into a new
package, e.g. libxkbcommon-doc, which will be Architecture: all and Multi-Arch:
foreign.

While this split requires a trip through NEW, it will allow the development
package to be Multi-Arch: same.

Also, please note that md5 files should not be packaged (see, for example, the
corresponding lintian warning).

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libxkbcommon-dev depends on:
ii  libxkbcommon0  0.8.0-1

libxkbcommon-dev recommends no packages.

libxkbcommon-dev suggests no packages.

-- no debconf information

Bug#887606: Preparing NMU for dvipng

[Hugh McMaster]

Hi Varun,

I’m preparing an NMU for #887606 and was wondering if you’d like me to convert 
the package to debhelper at the same time? dvipng is currently using cdbs.

Regards,

Hugh

Bug#897982: tasksel: Please drop tamil-gtk2im from the task-tamil-gnome-desktop Recommends list

[Hugh McMaster]

> On 1 Oct 2018, at 4:21 am, Holger Wansing wrote:
> Hugh McMaster wrote:
>> How will switching to ibus-m17n affect the user experience or installation?
> 
> That's out of my skills, sorry.

No problem. If no one else has any objections, then I’m happy for you to drop 
the Recommends and/or replace it.

Bug#909778: libsdl2-dev: SDL_config.h no longer in cflags provided by pkg-config/sdl2-config

[Hugh McMaster]

> On 30 Sep 2018, at 12:01 am, Adrian Bunk  wrote:
> 
>> On Sat, Sep 29, 2018 at 01:39:05PM +, Hugh McMaster wrote:
>>> On Saturday, 29 September 2018 5:06 AM, Adrian Bunk wrote:
>>> The following fixes it properly:
>>> - revert the override_dh_install change, and
>>> - add --includedir=\$${prefix}/include/$(DEB_HOST_MULTIARCH) to confflags
>> 
>> This won't do what you think it will. Unfortunately:
>> 
>> 1. All headers end up being installed into /usr/include//SDL2.
>>   -- Not what we want.
> 
> This is not a problem.

True, but not ideal.

>> 2. /usr/include//SDL2 is hard-coded into sdl2-config, causing a file
>>conflict for multi-arch installations.
>> ...
> 
> This is actually a problem.
> 
> The minimal fix for that problem would be to add a dependency on 
> pkg-config to libsdl2-dev, and then do
> --cflags)
> -  echo -I@includedir@/SDL2 @SDL_CFLAGS@
> +  pkg-config --cflags sdl2
>   ;;

I’m not able to check right now, but I believe this will cause problems when 
libsdl2-dev is installed for a foreign architecture, because sdl2-config will 
call pkg-config for the native architecture instead. It would need to be 
qualified with the GNU triplet.

Bug#917611: idzebra: Please Build-Depend on libyaz-dev

[Hugh McMaster]

Source: idzebra
Version: 2.0.59-1
Severity: important

Dear Maintainer,

idzebra currently has a build-dependency on libyaz4-dev. However, this package
will soon be replaced by libyaz-dev during an upcoming transition.

Testing with libyaz-dev 5.27.1-1 installed results in idzebra FTBFS, as it
cannot satisfy its build-dependency on libyaz4-dev.

Please patch idzebra's build-dependency list to use libyaz-dev:

  -  libyaz4-dev | libyaz3-dev (>= 3.0.17), libexpat1-dev, tcl8.6-dev,
libxslt1-dev,
  +  libyaz-dev, libexpat1-dev, tcl8.6-dev, libxslt1-dev,

With this change made, idzebra builds successfully.

Note that libyaz4-dev currently provides libyaz-dev.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Bug#917614: libnet-z3950-simpleserver-perl: Please Build-Depend on libyaz-dev

[Hugh McMaster]

Package: libnet-z3950-simpleserver-perl
Version: 1.15-1+b7
Severity: important

Dear Maintainer,

Your package currently build-depends on libyaz4-dev. However, this package
will soon be replaced by libyaz-dev during an upcoming transition.

Testing with libyaz-dev 5.27.1-1 installed results in your package FTBFS, as it
cannot satisfy its build-dependency on libyaz4-dev.

Please patch your package's Build-Depends list to use libyaz-dev.

With this change made, libnet-z3950-simpleserver-perl builds successfully.

Note that libyaz4-dev currently provides libyaz-dev.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libnet-z3950-simpleserver-perl depends on:
ii  libc6   2.28-3
ii  libxml2 2.9.4+dfsg1-7+b3
ii  libxslt1.1  1.1.32-2
ii  libyaz4 4.2.30-4+b8
ii  perl5.28.1-3
pn  perlapi-5.28.0  

libnet-z3950-simpleserver-perl recommends no packages.

libnet-z3950-simpleserver-perl suggests no packages.

-- no debconf information

Bug#915714: gnustep-base: Please use pkg-config to detect icu

[Hugh McMaster]

Control: severity -1 serious
Control: tags -1 + patch

Dear maintainer,

As the removal of icu-config from Debian is imminent, I have prepared a
patch for gnustep-base so its build system uses pkg-config to detect icu.

Please apply it as soon as possible.

I have also forwarded the patch upstream, but they have not yet responded.

Kind regards,

Hugh


icu_pkg-config.patch
Description: Binary data

Bug#915394: Bug#915369: New upstream version 5.27.1

[Hugh McMaster]

Hi Vincent,

On Monday, 17 December 2018 8:04 PM, Vincent Danjean wrote:
> I started to work on 5.27.0 and just imported 5.27.1 with "gbp import-orig 
> --uscan".
> All of this is on salsa. Any help to go further is welcome (with push request
> or even direct commit)

Nice! Thank you for doing this so quickly.

I'll start working on the package, but will check the Salsa repo regularly, in 
case
you have pushed some commits.

Kind regards,

Hugh

Bug#915380: an: Please use pkg-config to detect icu

[Hugh McMaster]

X-Debbugs-CC: p...@debian.org

I forgot to add in the patch that an will need to build-depend on pkg-config as 
well.

Hugh

Bug#915259: ucto: Please update the package to version 0.14

[Hugh McMaster]

Source: ucto
Version: 0.9.6-1
Severity: wishlist

Dear Maintainer,

The current version of ucto is nearly two years old and is missing out on many
upstream fixes and enhancements.

This version is also incompatible with icu 63.1, currently in testing.

Please update ucto to the latest upstream version - 0.14.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.18.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Bug#915264: libfolia: Please upgrade to version 1.15

[Hugh McMaster]

Package: libfolia6
Version: 1.6-2+b1
Severity: wishlist

Dear Maintainer,

The current version of libfolia is almost two years old and is missing several
bug fixes and enhancements.

It also does not work with icu 63.1.

Please upgrade to the latest upstream version - 1.15.

Thank you



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.18.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libfolia6 depends on:
ii  libc62.28-1
ii  libgcc1  1:8.2.0-10
ii  libgomp1 8.2.0-10
ii  libicu60 60.2-6
ii  libstdc++6   8.2.0-10
ii  libticcutils2v5  0.14-1+b2
ii  libxml2  2.9.4+dfsg1-7+b2

libfolia6 recommends no packages.

libfolia6 suggests no packages.

-- no debconf information

Bug#898820: libicu-dev is not Multi-Arch compatible

[Hugh McMaster]

Hi László,

What help do you need to resolve this bug?

Hugh

Bug#898820: libicu-dev is not Multi-Arch compatible

[Hugh McMaster]

389-ds-base has been uploaded to unstable.

On Wed, 2 Jan 2019 at 21:11, Hugh McMaster  wrote:
>
> Hi László,
>
> All of the packages you listed in message #15 are fixed or pending
> upload. Most are fixed upstream as well.
>
> * 389-ds-base is pending upload.
> * yaz is in the NEW queue.
> * gnustep-base is patched to use pkg-config, although it is compiled
> with --disable-icu-config, so
>   not actually affected.
>
> What is the next step?
>
> Hugh

Bug#942439: libfont-freetype-perl: Regression test failing against FreeType 2.10

[Hugh McMaster]

Package: libfont-freetype-perl
Version: 0.12-1+b2
Severity: important
Tags: patch

Dear Maintainer,

Dear Maintainer,

The logic for computing the global ascender, descender and height of OpenType
fonts was slightly adjusted in FreeType 2.10.

This change is causing regression tests 22, 23 and 24 in libfont-freetype-perl
to fail.

While the Font::FreeType Perl module does actually return the correct values
for the above metrics (as calculated by FreeType), these values do not match
the expected values in the regression tests.

This failure, in turn, is blocking the migration of FreeType 2.10.1 to Testing.

Please apply the below patch to resolve this.

Thank you



-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.2.0-3-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libfont-freetype-perl depends on:
ii  libc6   2.29-2
ii  libfreetype62.10.1-2
ii  perl5.30.0-7
ii  perl-base [perlapi-5.30.0]  5.30.0-7

libfont-freetype-perl recommends no packages.

libfont-freetype-perl suggests no packages.

-- no debconf information
Description: Fix font metrics broken by an upstream FreeType change
 The logic for computing the global ascender, descender and height of OpenType
 fonts was slightly adjusted in FreeType 2.10. This change causes regression
 tests 22, 23 and 24 to fail.

Author: Hugh McMaster 
Bug: https://rt.cpan.org/Public/Bug/Display.html?id=129788
Last-Update: 2019-10-16

--- libfont-freetype-perl-0.12.orig/t/10metrics_oldstandart.t
+++ libfont-freetype-perl-0.12/t/10metrics_oldstandart.t
@@ -57,9 +57,9 @@ is($font->units_per_em, 1000, '$face->un
 my $underline_position = $font->underline_position;
 ok $underline_position <= -178 || $underline_position >= -198, 'underline 
position';
 is($font->underline_thickness, 40, 'underline thickness');
-is($font->height, 1482, 'text height');
-is($font->ascender, 952, 'ascender');
-is($font->descender, -294, 'descender');
+is($font->height, 1236, 'text height');
+is($font->ascender, 762, 'ascender');
+is($font->descender, -238, 'descender');
 
 subtest "charmaps" => sub {
 subtest "default charmap" => sub {

Bug#942855: RFS: yaz/5.27.2-1 -- utilities for YAZ Z39.50 toolkit

[Hugh McMaster]

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for my package "yaz"

 * Package name: yaz
   Version : 5.27.2-1
   Upstream Author : Adam Dickmeiss 
 * URL : https://www.indexdata.com/resources/software/yaz/
 * License : YAZ
 * Vcs : https://salsa.debian.org/debian/yaz
   Section : utils

The source builds the following binary packages:

  libyaz5 - YAZ Z39.50 toolkit (runtime files)
  yaz - utilities for YAZ Z39.50 toolkit
  yaz-doc - YAZ Z39.50 toolkit (documentation)
  libyaz-dev - YAZ Z39.50 toolkit (development files)
  yaz-illclient - utility for ISO ILL of YAZ
  yaz-icu - command line utility for ICU utilities of YAZ

To access further information about this package, please visit the
following URL:

  https://mentors.debian.net/package/yaz

Alternatively, you can download the package with dget using this command:

  dget -x https://mentors.debian.net/debian/pool/main/y/yaz/yaz_5.27.2-1.dsc

Changes since the last upload:

   * New upstream release.
   * debian/control:
 - Add Hugh McMaster as an Uploader.
 - Use debhelper-compat level 12.
 - Raise Standards-Version to 4.4.1 from 4.3.0 (no changes needed).
 - Add Rules-Requires-Root: no.
   * debian/copyright:
 - Update upstream copyright to 2019.
 - Add Hugh McMaster to the 'debian' block.
   * debian/patches:
 - Drop yaz-spelling-fixes.patch (merged upstream).
 - Fix more spelling errors (spelling-fixes.patch).
   * Add debian/upstream/metadata file.

Regards,

--
  Hugh McMaster

Bug#948792: [PATCH] Please use PKG_CHECK_MODULES to detect libxml2 and libslt

[Hugh McMaster]

Control: tags -1 + patch

Dear maintainer,

I have attached a patch to allow the `configure` routine to use
PKG_CHECK_MODULES to detect the libxml2 and libxslt libraries.

Thank you,

Hugh


0001-pkg_check_modules.patch
Description: Binary data

Bug#949490: raptor2: FTBFS with libxml2 not shipping xml2-config

[Hugh McMaster]

This bug is triggered by Debian's build system. When using upstream
source, libxml2 is detected via pkg-config.

That said, the underlying configure.ac code is overly complex. While
xml2-config (and xslt-config) still exist, pkg-config is far easier to
use for detection.

I'm happy to patch the source. Are you happy to replace all calls to
xml2-config (and xslt-config) with the PKG_CHECK_MODULES macro? Given
that it's 2020, and many foo-config scripts have or are being
deprecated/removed, it's probably time to do so in raptor2 as well.

Bug#945948: [Pkg-phototools-devel] Bug#945948: libexif: diff for NMU version 0.6.21-5.2

[Hugh McMaster]

Hi Salvatore,

On Thu, 23 Jan 2020 at 02:18, Salvatore Bonaccorso wrote:

> I've prepared an NMU for libexif (versioned as 0.6.21-5.2) based on
> the upstream commit and uploaded it to DELAYED/5. Please feel free to
> tell me if I should delay it longer.


Thank you for preparing another NMU. I have already prepared 0.6.21-6 with
that upstream patch and some other changes.

Unfortunately, I mistyped the CVE ID in the changelog, so will fix that and
re-upload to d-mentors when I get home.

Hugh

>

Bug#920900: libicu-dev: icu-config is only deprecated

[Hugh McMaster]

On Tue, 26 Nov 2019 03:33:02 +0100, Alexander Prokoshev wrote:
> I would like to note that pkgdata is now broken because it tries to
> use [nonexistent] icu-config.

Upstream merged a patch [1] I sent to fix the pkgdata breakage earlier today.

László, can you please consider including it in a new Debian release?

Thank you,

Hugh


icu-pkgdata.patch
Description: Binary data

Bug#954981: libnet-z3950-simpleserver-perl: FTBFS without yaz-config

[Hugh McMaster]

On Fri, 27 Mar 2020 at 04:56, gregor herrmann wrote:
>
> On Thu, 26 Mar 2020 21:05:23 +1100, Hugh McMaster wrote:
> Fixed in git, waits for YAZ 5.29.0 to enter unstable (for the
> yaz-server.pc file).

YAZ 5.29.0-2 is now in unstable, so feel free to upload
libnet-z3950-simpleserver-perl when you have time.

Thank you for fixing this issue so quickly.

Hugh

Bug#960199: libexif: CVE-2020-12767

[Hugh McMaster]

Control: tags -1 + pending

This is already fixed upstream. I'll push it to Debian shortly.

Hugh

Bug#961020: stretch-pu: package libexif/0.6.21-2+deb9u2

[Hugh McMaster]

Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu

libexif 0.6.21-2+deb9u1 contains five security vulnerabilities currently marked
as "no DSA".

The attached debdiff fixes these vulnerabilities.

CVE-2020-12767 - division-by-zero errors
CVE-2020-0093  - read buffer overflow
CVE-2018-20030 - denial of service by wasting CPU
CVE-2017-7544  - out-of-bounds heap read
CVE-2016-6328  - integer overflow

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.6.0-1-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8),
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
diff -Nru libexif-0.6.21/debian/changelog libexif-0.6.21/debian/changelog
--- libexif-0.6.21/debian/changelog 2020-02-02 07:54:38.0 +1100
+++ libexif-0.6.21/debian/changelog 2020-05-19 18:41:18.0 +1000
@@ -1,3 +1,19 @@
+libexif (0.6.21-2+deb9u2) stretch; urgency=medium
+
+  * Team upload.
+  * Add upstream patches to fix multiple security issues:
+- cve-2016-6328.patch: Fix an integer overflow while parsing the MNOTE
+  entry data of the input file (CVE-2016-6328) (Closes: #873022).
+- cve-2017-7544.patch: Fix an out-of-bounds heap read in the function
+  exif_data_save_data_entry() (CVE-2017-7544) (Closes: #876466).
+- cve-2018-20030.patch: Improve deep recursion detection in the function
+  exif_data_load_data_content() (CVE-2018-20030) (Closes: #918730).
+- cve-2020-12767.patch: Prevent some possible division-by-zero errors
+  in exif_entry_get_value() (CVE-2020-12767) (Closes: #960199).
+- cve-2020-0093.patch: Prevent read buffer overflow (CVE-2020-0093).
+
+ -- Hugh McMaster   Tue, 19 May 2020 19:40:10 +1000
+
 libexif (0.6.21-2+deb9u1) stretch-security; urgency=high
 
   * Non-maintainer upload by the Security Team.
diff -Nru libexif-0.6.21/debian/patches/cve-2016-6328.patch 
libexif-0.6.21/debian/patches/cve-2016-6328.patch
--- libexif-0.6.21/debian/patches/cve-2016-6328.patch   1970-01-01 
10:00:00.0 +1000
+++ libexif-0.6.21/debian/patches/cve-2016-6328.patch   2020-05-19 
18:36:53.0 +1000
@@ -0,0 +1,53 @@
+Description: Fixes an integer overflow while parsing the MNOTE entry data of 
the input file (CVE-2016-6328)
+Author: Marcus Meissner 
+Bug-Debian: http://bugs.debian.org/873022
+Last-Update: 2017-07-25
+
+Index: libexif-0.6.21/libexif/pentax/mnote-pentax-entry.c
+===
+--- libexif-0.6.21.orig/libexif/pentax/mnote-pentax-entry.c
 libexif-0.6.21/libexif/pentax/mnote-pentax-entry.c
+@@ -425,24 +425,34 @@ mnote_pentax_entry_get_value (MnotePenta
+   case EXIF_FORMAT_SHORT:
+ {
+   const unsigned char *data = entry->data;
+-  size_t k, len = strlen(val);
++  size_t k, len = strlen(val), sizeleft;
++
++  sizeleft = entry->size;
+   for(k=0; kcomponents; k++) {
++  if (sizeleft < 2)
++  break;
+   vs = exif_get_short (data, entry->order);
+   snprintf (val+len, maxlen-len, "%i ", vs);
+   len = strlen(val);
+   data += 2;
++  sizeleft -= 2;
+   }
+ }
+ break;
+   case EXIF_FORMAT_LONG:
+ {
+   const unsigned char *data = entry->data;
+-  size_t k, len = strlen(val);
++  size_t k, len = strlen(val), sizeleft;
++
++  sizeleft = entry->size;
+   for(k=0; kcomponents; k++) {
++  if (sizeleft < 4)
++  break;
+   vl = exif_get_long (data, entry->order);
+   snprintf (val+len, maxlen-len, "%li", (long 
int) vl);
+   len = strlen(val);
+   data += 4;
++  sizeleft -= 4;
+   }
+ }
+ break;
+@@ -455,5 +465,5 @@ mnote_pentax_entry_get_value (MnotePenta
+   break;
+   }
+ 
+-  return (val);
++  return val;
+ }
diff -Nru libexif-0.6.21/debian/patches/cve-2017-7544.patch 
libexif-0.6.21/debian/patches/cve-2017-7544.patch
--- libexif-0.6.21/debian/patches/cve-2017-7544.patch   1970-01-01 
10:00:00.0 +1000
+++ libexif-0.6.21/debian/patches/cve-

Bug#969536: libfreetype6-dev: It was found that the package does not contain freetype-config

[Hugh McMaster]

Control: tags -1 - a11y
Control: tags -1 + wontfix

On Sat, 5 Sep 2020 at 00:48, 欧阳春晖 wrote:
> It is found that the package does not contain freetype config, while
> that of Ubuntu contains freetype config. This may be a packaging error.
> Please fix it

I'm removing the a11y tag, since your bug report has nothing do to
with accessibility.

While you are correct that libfreetype-dev doesn't contain
freetype-config, the fact the script isn't installed is not a bug.

The upstream developers deprecated freetype-config around 2.5 years
ago. Debian hasn't packaged freetype-config since. In fact, the most
recent Debian package to contain freetype-config is 2.6.3-3.2+deb9u1
in Debian Stretch (oldstable).

All of this is to say that freetype-config won't be coming back. You
need to use pkg-config to detect the FreeType 2 library.

PKG_CHECK_MODULES([FT2], [freetype2]) will work as a starting point.

Bug#972085: gtkam: Build-Depends on libexif-gtk, which is moving to GTK3

[Hugh McMaster]

Source: gtkam
Version: 1.0-3
Severity: serious
Tags: ftbfs
Justification: Policy 7.7

Dear Maintainer,

libexif-gtk is moving to GTK3 in response to #967573.

gtkman also only supports GTK2, which means it blocks the introduction of
libexif-gtk built on GTK3.

Upstream gtkam has seen no activity since October 2016 and appears dead.

If this is not the case, please ask them to convert the source to GTK2.

gtkam may need to be removed from Debian if no action is taken.

Thank you



-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.8.0-2-amd64 (SMP w/2 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-- no debconf information

Bug#971899: armagetronad: Please package 0.2.9.0.1

[Hugh McMaster]

Package: armagetronad
Version: 0.2.8.3.5-1
Severity: normal
Tags: upstream

Dear Maintainer,

armagetronad is now at version 0.2.9.0.1 upstream. It would be good to have the
latest version in Debian.

In addition, your d/watch file is out of date. Upstream has moved to gitlab:
https://gitlab.com/armagetronad/armagetronad.

Finally, please mark armagetronad-common Multi-Arch: foreign.

Thank you



-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.8.0-2-amd64 (SMP w/2 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages armagetronad depends on:
ii  armagetronad-common 0.2.8.3.5-1
ii  libc6   2.31-3
ii  libgcc-s1   10.2.0-13
ii  libgl1  1.3.2-1
ii  libglu1-mesa [libglu1]  9.0.1-1
ii  libpng16-16 1.6.37-3
ii  libsdl-image1.2 1.2.12-12
ii  libsdl1.2debian 1.2.15+dfsg2-5
ii  libstdc++6  10.2.0-13
ii  libxml2 2.9.10+dfsg-6

armagetronad recommends no packages.

armagetronad suggests no packages.

-- no debconf information

Bug#971067: RFS: libexif-gtk/0.5.0-1

[Hugh McMaster]

Hi Andreas,

On Thu, 1 Oct 2020 at 02:49, Andreas Metzler wrote:
> Runtime library are generally installed as a dependency, when the
> depending package is rebuilt against the newer library apt will pull it
> in and the old library can be autoremoved.

Very nice.

> > I’m also targeting experimental to be safe, as I expected some breakage
> > from this change.
> [...]
>
> Also library transition will need to be coordinated with Debian release,
> pre-upload to sid.

Thanks for reminding me. :)

I've uploaded a new version of libexif-gtk to Debian Mentors, fixing
the issues discussed in this thread.

Thanks for your help with this.

Hugh

Bug#961020: Updated debdiff for libexif/0.6.21-2+deb9u2

[Hugh McMaster]

I've updated the debdiff for this release to include the changelog
entries for the sponsored upload.


libexif_0.6.21-2+deb9u3.debdiff
Description: Binary data

Bug#961020: Updated debdiff for libexif/0.6.21-2+deb9u2

[Hugh McMaster]

On Mon, 25 May 2020 at 22:18, Hugh McMaster wrote:
>
> I've updated the debdiff for this release to include the changelog
> entries for the sponsored upload.

Apologies. This is the correct debdiff.


libexif_0.6.21-2+deb9u2.debdiff
Description: Binary data

Bug#961803: buster-pu: package libexif/0.6.21-5.1+deb10u3

[Hugh McMaster]

Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu

Three additional CVEs were found in the upstream source after libexif
0.6.21-5.1+deb10u2 was uploaded.

This +deb10u3 version fixes those CVEs.

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.6.0-2-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8),
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Version in base suite: 0.6.21-5.1+deb10u1

Base version: libexif_0.6.21-5.1+deb10u1
Target version: libexif_0.6.21-5.1+deb10u3
Base file: 
/srv/ftp-master.debian.org/ftp/pool/main/libe/libexif/libexif_0.6.21-5.1+deb10u1.dsc
Target file: 
/srv/ftp-master.debian.org/policy/pool/main/libe/libexif/libexif_0.6.21-5.1+deb10u3.dsc

 changelog  |   28 
 patches/Improve-deep-recursion-detection-in-exif_data_load_d.patch |   13 
 patches/Reduce-maximum-recursion-depth-in-exif_data_load_dat.patch |7 
 patches/cve-2020-0093.patch|   24 
 patches/cve-2020-12767.patch   |   34 +
 patches/cve-2020-13112.patch   |  296 
++
 patches/cve-2020-13113.patch   |   52 +
 patches/cve-2020-13114.patch   |   63 ++
 patches/extra_colorspace_check.patch   |2 
 patches/fix-CVE-2019-9278.patch|   15 
 patches/series |5 
 11 files changed, 513 insertions(+), 26 deletions(-)

diff -Nru libexif-0.6.21/debian/changelog libexif-0.6.21/debian/changelog
--- libexif-0.6.21/debian/changelog 2020-02-01 20:43:18.0 +
+++ libexif-0.6.21/debian/changelog 2020-05-25 12:01:18.0 +
@@ -1,3 +1,31 @@
+libexif (0.6.21-5.1+deb10u3) buster; urgency=medium
+
+  * Add upstream patches to fix multiple security issues:
+- cve-2020-13112.patch: Fix MakerNote tag size overflow issues at
+  read time (CVE-2020-13112) (Closes: #961407).
+- cve-2020-13113.patch: Ensure MakerNote data pointers are
+  NULL-initialized (CVE-2020-13113) (Closes: #961409).
+- cve-2020-13114.patch: Add a failsafe on the maximum number of
+  Canon MakerNote subtags to catch extremely large values in tags
+  (CVE-2020-13114) (Closes: #961410).
+
+ -- Hugh McMaster   Mon, 25 May 2020 22:01:18 +1000
+
+libexif (0.6.21-5.1+deb10u2) buster; urgency=medium
+
+  [ Mike Gabriel ]
+  * Sponsored upload.
+  * debian/patches: Trivial rebase of various patches.
+
+  [ Hugh McMaster ]
+  * Team upload.
+  * Add upstream patches to fix two security issues:
+- cve-2020-12767.patch: Prevent some possible division-by-zero errors
+  in exif_entry_get_value() (CVE-2020-12767) (Closes: #960199).
+- cve-2020-0093.patch: Prevent read buffer overflow (CVE-2020-0093).
+
+ -- Mike Gabriel   Thu, 21 May 2020 11:26:42 +0200
+
 libexif (0.6.21-5.1+deb10u1) buster-security; urgency=high
 
   * Non-maintainer upload by the Security Team.
diff -Nru 
libexif-0.6.21/debian/patches/Improve-deep-recursion-detection-in-exif_data_load_d.patch
 
libexif-0.6.21/debian/patches/Improve-deep-recursion-detection-in-exif_data_load_d.patch
--- 
libexif-0.6.21/debian/patches/Improve-deep-recursion-detection-in-exif_data_load_d.patch
2020-02-01 20:43:18.0 +
+++ 
libexif-0.6.21/debian/patches/Improve-deep-recursion-detection-in-exif_data_load_d.patch
2020-05-21 09:26:15.0 +
@@ -16,8 +16,6 @@
 the identifier CVE-2018-20030.
 ---
 
-diff --git a/libexif/exif-data.c b/libexif/exif-data.c
-index e35403ddba7c..a6f9c94f2fc2 100644
 --- a/libexif/exif-data.c
 +++ b/libexif/exif-data.c
 @@ -35,6 +35,7 @@
@@ -28,7 +26,7 @@
  #include 
  #include 
  #include 
-@@ -350,6 +351,20 @@ if (data->ifd[(i)]->count) {  
\
+@@ -352,6 +353,20 @@
break;  \
  }
  
@@ -49,7 +47,7 @@
  /*! Load data for an IFD.
   *
   * \param[in,out] data #ExifData
-@@ -357,13 +372,13 @@ if (data->ifd[(i)]->count) { 
\
+@@ -359,13 +374,13 @@
   * \param[in] d pointer to buffer containing raw IFD data
   * \param[in] ds size of raw data in buffer at \c d
   * \param[in] offset offset into buffer at \c d at which IFD starts
@@ -66,7 +64,7 @@
  {
ExifLong o, thumbnail_offset = 0, thumbnail_length = 0;
ExifShort n;
-@@ -378,9 +393,20 @@ exif_data_load_data_content (ExifData *data, ExifIfd ifd,
+@@ -380,9 +395,20 @@
if int)ifd) < 0) || ( ((int)ifd) >= EXIF_IFD_COUNT)

Bug#962751: RFS: shotdetect/1.0.86-5.1 [NMU] -- scene change detector

[Hugh McMaster]

Dear mentors,

On Sat, 13 Jun 2020 at 22:45, Hugh McMaster wrote:

> Package: sponsorship-requests
> Severity: normal
>
> Dear mentors,
>
> I am looking for a sponsor for the package "shotdetect"
>
>  * Package name: shotdetect
>Version : 1.0.86-5.1
>Upstream Author : Johan MATHE 
>  * URL : http://shotdetect.nonutc.fr/
>  * License : LGPL-2.1+
>  * Vcs :
> http://anonscm.debian.org/gitweb/?p=pkg-multimedia/shotdetect.git
>Section : video
>
> The source builds the following binary packages:
>
>   shotdetect - scene change detector
>
> To access further information about this package, please visit the
> following URL:
>
>   https://mentors.debian.net/package/shotdetect
>
> Alternatively, one can download the package with dget using this command:
>
>   dget -x
> https://mentors.debian.net/debian/pool/main/s/shotdetect/shotdetect_1.0.86-5.1.dsc
>
> Changes since the last upload:
>
>* Non-maintainer upload.
>* debian/rules:
>  - Include /usr/share/cdbs/1/rules/autoreconf.mk (Closes: #962127).
>  - Add dh-autoreconf and pkg-config to CDBS_BUILD_DEPENDS.
>* d/p/pkg-config.patch: Use PKG_CHECK_MODULES to find the libxml2 and
>  libxslt libraries (Closes: #948871, #949496).


I am still looking for a sponsor for shotdetect. :)

Kind regards,

Hugh

>

Bug#962755: exif: FTBFS on s390x: test failure

[Hugh McMaster]

Hi Nelson,

On Sun, 14 Jun 2020 at 11:51, Hugh McMaster wrote:
> On Sun, 14 Jun 2020 at 08:32, Nelson H. F. Beebe  wrote:
>> That is not the same version of exiftool that Boyuan reported, but there was 
>> no URL for his version.  I someone cares to send me a suitable source URL 
>> off list, I'll do another build with it on my new S/390 VM.

> Thank you. The software is exif, not exiftool.

Just wondering if you've had time to investigate the exif test failure
any further?

I'm trying to get some time to log in to a ppc64 machine, as that
architecture also has the failure.

Hugh

Bug#963694: buster-pu: package libexif/0.6.21-5.1+deb10u4

[Hugh McMaster]

Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu

Dear release managers,

Two further security vulnerabilities were discovered in libexif, including
libexif 0.6.21-5.1+deb10u3.

This proposed update adds upstream patches to fix these vulnerabilities.

The package replaces the existing accepted version.

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.6.0-2-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8),
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
diff -Nru libexif-0.6.21/debian/changelog libexif-0.6.21/debian/changelog
--- libexif-0.6.21/debian/changelog 2020-05-25 22:01:18.0 +1000
+++ libexif-0.6.21/debian/changelog 2020-06-24 23:31:09.0 +1000
@@ -1,3 +1,12 @@
+libexif (0.6.21-5.1+deb10u4) buster; urgency=medium
+
+  * Add upstream patches to fix two security issues:
+- Fix a buffer read overflow in exif_entry_get_value() (CVE-2020-0182).
+- Fix an unsigned integer overflow in libexif/exif-data.c (CVE-2020-0198)
+  (Closes: #962345).
+
+ -- Hugh McMaster   Wed, 24 Jun 2020 23:31:09 +1000
+
 libexif (0.6.21-5.1+deb10u3) buster; urgency=medium
 
   * Add upstream patches to fix multiple security issues:
diff -Nru libexif-0.6.21/debian/patches/cve-2020-0182.patch 
libexif-0.6.21/debian/patches/cve-2020-0182.patch
--- libexif-0.6.21/debian/patches/cve-2020-0182.patch   1970-01-01 
10:00:00.0 +1000
+++ libexif-0.6.21/debian/patches/cve-2020-0182.patch   2020-06-24 
23:27:49.0 +1000
@@ -0,0 +1,28 @@
+Description: Fix a buffer read overflow in exif_entry_get_value() 
(CVE-2020-0182)
+ While parsing EXIF_TAG_FOCAL_LENGTH it was possible to read 8 bytes past
+ the end of a heap buffer. This was detected by the OSS Fuzz project.
+Origin: commit:f9bb9f263fb00f0603ecbefa8957cad24168cbff
+Author: Dan Fandrich 
+Last-Update: 2020-06-13
+
+---
+ libexif/exif-entry.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+--- a/libexif/exif-entry.c
 b/libexif/exif-entry.c
+@@ -1043,12 +1043,12 @@
+   d = 0.;
+   entry = exif_content_get_entry (
+   e->parent->parent->ifd[EXIF_IFD_0], EXIF_TAG_MAKE);
+-  if (entry && entry->data &&
++  if (entry && entry->data && entry->size >= 7 &&
+   !strncmp ((char *)entry->data, "Minolta", 7)) {
+   entry = exif_content_get_entry (
+   e->parent->parent->ifd[EXIF_IFD_0],
+   EXIF_TAG_MODEL);
+-  if (entry && entry->data) {
++  if (entry && entry->data && entry->size >= 8) {
+   if (!strncmp ((char *)entry->data, "DiMAGE 7", 
8))
+   d = 3.9;
+   else if (!strncmp ((char *)entry->data, "DiMAGE 
5", 8))
diff -Nru libexif-0.6.21/debian/patches/cve-2020-0198.patch 
libexif-0.6.21/debian/patches/cve-2020-0198.patch
--- libexif-0.6.21/debian/patches/cve-2020-0198.patch   1970-01-01 
10:00:00.0 +1000
+++ libexif-0.6.21/debian/patches/cve-2020-0198.patch   2020-06-24 
23:28:53.0 +1000
@@ -0,0 +1,52 @@
+Description: Fix an unsigned integer overflow in libexif/exif-data.c 
(CVE-2020-0198)
+ Use a more generic overflow check method and also check the second overflow 
instance.
+Origin: commit:ce03ad7ef4e8aeefce79192bf5b6f69fae396f0c
+Author: Marcus Meissner 
+Bug-Debian: https://bugs.debian.org/962345
+Last-Update: 2020-06-08
+
+---
+ libexif/exif-data.c | 10 ++
+ 1 file changed, 6 insertions(+), 4 deletions(-)
+
+--- a/libexif/exif-data.c
 b/libexif/exif-data.c
+@@ -47,6 +47,8 @@
+ #undef JPEG_MARKER_APP1
+ #define JPEG_MARKER_APP1 0xe1
+ 
++#define CHECKOVERFLOW(offset,datasize,structsize) (( offset >= datasize) || 
(structsize > datasize) || (offset > datasize - structsize ))
++
+ static const unsigned char ExifHeader[] = {0x45, 0x78, 0x69, 0x66, 0x00, 
0x00};
+ 
+ struct _ExifDataPrivate
+@@ -327,7 +329,7 @@
+   exif_log (data->priv->log, EXIF_LOG_CODE_DEBUG, "ExifData", 
"Bogus thumbnail offset (%u).", o);
+   return;
+   }
+-  if (s > ds - o) {
++  if (CHECKOVERFLOW(o,ds,s)) {
+   exif_log (data->priv->log, EXIF_LOG_CODE_DEBUG, "ExifData", 
"Bogus thumbnail size (%u), max would be %u.", s, ds-o);
+   return;
+   }
+@@ -420,9 +422,9 @@
+   }
+ 
+   /* Read the num

Bug#962044: RFS: xmlstarlet/1.6.1-2.1 [NMU] -- command line XML toolkit

[Hugh McMaster]

Dear mentors,

On Tue, 2 Jun 2020 at 23:16, Hugh McMaster wrote:
> I am looking for a sponsor for my package "xmlstarlet"
>
>  * Package name: xmlstarlet
>Version : 1.6.1-2.1
>Upstream Author : Mikhail Grushinskiy 
>  * URL : http://xmlstar.sourceforge.net/
>  * License : Expat
>  * Vcs : 
> https://anonscm.debian.org/cgit/collab-maint/xmlstarlet.git
>Section : text
>
> Alternatively, one can download the package with dget using this command:

I am still looking for a sponsor for xmlstarlet. All help appreciated. :)

Hugh

Bug#962755: exif: FTBFS on s390x: test failure

[Hugh McMaster]

On Sun, 14 Jun 2020 at 08:32, Nelson H. F. Beebe  wrote:

> [...]
> That is not the same version of exiftool that Boyuan reported, but there
> was no URL for his version.  I someone cares to send me a suitable source
> URL off list, I'll do another build with it on my new S/390 VM.


Thank you. The software is exif, not exiftool.

I’ll send you an upstream source link separately.

Hugh

>

Bug#972085: gtkam: Build-Depends on libexif-gtk, which is moving to GTK3

[Hugh McMaster]

Hi Adrian,

On Tue, 17 Nov 2020 at 03:53, Adrian Bunk wrote:

> What is the point of moving libexif-gtk to GTK3 when the only package
> using it does not support it?
>
> This sounds like a mistake that should be reverted.


I already have. When I realised gtkam was an issue, I updated libexif-gtk
to build both GTK 2 and 3.

Unfortunately, gtkam is dead upstream, so nothing will change there.
However, several good alternatives exist.

The Debian QA team is also reluctant to remove gtkam due to its popcon
installation numbers.

That said, as libexif-gtk will have GTK 2 support for some time, this bug
severity can probably be downgraded.

If smcv does manage to remove GTK 2 during the next development cycle,
however, we will need to revisit this bug.

>

Bug#973413: RFS: idzebra/2.2.0-1 -- IDZebra documentation

[Hugh McMaster]

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for my package "idzebra":

 * Package name: idzebra
   Version : 2.2.0-1
   Upstream Author : Adam Dickmeiss 
 * URL : https://www.indexdata.com/resources/software/zebra/
 * License : GPL-2+, Expat-X, FSFULLR, FSFUL and GPL-2+,
FSFULLR and GPL-2+, FSFULLR and GPL-2+ and FSFUL
 * Vcs : https://salsa.debian.org/debian/idzebra
   Section : text

The source builds the following binary packages:

  idzebra-2.0-doc - IDZebra documentation
  libidzebra-2.0-mod-grs-xml - IDZebra filter grs.xml (XML filter)
  libidzebra-2.0-mod-grs-regx - IDZebra filters grs.regx, grs.tcl
  libidzebra-2.0-mod-grs-marc - IDZebra filter grs.marc (ISO2709 MARC reader)
  libidzebra-2.0-mod-text - IDZebra filter text
  libidzebra-2.0-mod-safari - IDZebra filter 'safari' (DBC)
  libidzebra-2.0-mod-dom - IDZebra filter 'dom' (XML DOM internal
document model with XSLT)
  libidzebra-2.0-mod-alvis - IDZebra filter alvis (XSLT filter for XML)
  libidzebra-2.0-0 - IDZebra libraries
  libidzebra-2.0-dev - IDZebra development
  idzebra-2.0-utils - IDZebra utility programs
  idzebra-2.0-examples - IDZebra example configurations
  idzebra-2.0-common - IDZebra common files
  libidzebra-2.0-modules - IDZebra modules
  idzebra-2.0 - IDZebra metapackage (the works)

To access further information about this package, please visit the
following URL:

  https://mentors.debian.net/package/idzebra/

Alternatively, one can download the package with dget using this command:

  dget -x 
https://mentors.debian.net/debian/pool/main/i/idzebra/idzebra_2.2.0-1.dsc

Changes since the last upload:

 idzebra (2.2.0-1) unstable; urgency=medium
 .
   [ Debian Janitor ]
   * debian/copyright: Use spaces rather than tabs to start continuation lines.
   * Set upstream metadata fields: Repository.
 .
   [ Hugh McMaster ]
   * New upstream version 2.2.0
 - Upstream now ships a pkg-config file (zebra.pc).
 - idzebra-config-2.0 is no longer packaged.
   * debian/control:
 - Use debhelper-compat version 13.
 - Build-Depend on libncurses-dev instead of libncurses5-dev.
 - Build-Depend on tcl-dev instead of tcl8.6-dev.
 - Mark libidzebra-2.0-dev Multi-Arch: same.
 - Drop Breaks+Replaces on very old binary version of idzebra-2.0-utils.
   * debian/copyright: Update for idzebra 2.2.0.
   * debian/not-installed: Add idzebra-config script, man page and symlinks.
   * debian/patches:
 - Remove idzebra-config-no-build-path.patch (no longer needed since
   idzebra-config-2.0 is no longer installed).
 - Remove pkg-config.patch (no longer needed).
 - Add patch to clean up left-over test files.
 - Add patch to convert upstream files encoded as ISO-8859-1 to UTF-8.
   * debian/rules:
 - Use pkg-config to detect the yaz library.
 - Set package install path for upstream examples.
 - Regenerate upstream documentation on each build.
 - Remove unneeded DEB_CCACHE_DIR export, git repository check,
   dh_auto_clean override and dh_shlibdeps override.
 - Remove unneeded 'clean' target and manual clean-up of auto-generated
   build files and test files.
   * debian/source/options: Ignore changes to auto-generated documentation.
   * idzebra-2.0-common: Add lintian override for national-encoding warning.
   * idzebra-2.0-doc: Install documentation in a subdirectory of the
 main package (idzebra-2.0).
   * idzebra-2.0-utils:
 - Install upstream binaries, man pages and symlinks.
 - Remove prerm and postinst maintenance scripts.
 - Add preinst maintenance script to remove update-alternatives symlinks.
   * libidzebra-2.0-dev:
 - No longer install idzebra-config-2.0 or its man page.
 - Remove prerm and postinst maintenance scripts.
 - Add preinst maintenance script to remove update-alternatives symlinks.
 - Install pkg-config file (zebra.pc).
   * idzebra-2.0-examples.install: Rename to idzebra-2.0-examples.examples.
   * idzebra-2.0-doc.install: Rename to idzebra-2.0-doc.docs

Regards,
--
  Hugh McMaster

Bug#993585: devscripts: uscan attempts to use the filenamemangle'd name with pgpsigurlmangle

[Hugh McMaster]

Package: devscripts
Version: 2.21.4
Severity: important

Dear Maintainer,

When using uscan to download the latest version of FreeType and its component
tarballs, uscan fails.

scan: Newest version of ft2docs on remote site is 2.11.0, specified
download version is 2.11.0
gpgv: can't open
'../https://download.savannah.gnu.org/releases/freetype/freetype-2.11.0-ft2docs.tar.xz.sig':
No such file or directory

It seems uscan is using the filenamemangle'd name as input to pgpsigurlmangle.

While I can (and will) update my string replacement pattern in d/watch, the
rules as they are now have previously worked without issue.


-- Package-specific info:

--- /etc/devscripts.conf ---
Empty.

--- ~/.devscripts ---
Not present

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-8-amd64 (SMP w/2 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages devscripts depends on:
ii  dpkg-dev  1.20.9
ii  fakeroot  1.25.3-1.1
ii  file  1:5.39-3
ii  gnupg 2.2.27-2
ii  gpgv  2.2.27-2
ii  libc6 2.31-17
ii  libfile-dirlist-perl  0.05-2
ii  libfile-homedir-perl  1.006-1
ii  libfile-touch-perl0.11-1
ii  libfile-which-perl1.23-1
ii  libipc-run-perl   20200505.0-1
ii  libmoo-perl   2.005004-2
ii  libwww-perl   6.53-1
ii  patchutils0.4.2-1
ii  perl  5.32.1-5
ii  python3   3.9.2-3
ii  sensible-utils0.0.17
ii  wdiff 1.2.2-2+b1

Versions of packages devscripts recommends:
ii  apt 2.3.8
ii  dctrl-tools 2.24-3+b1
ii  debian-keyring  2021.07.26
ii  dput1.1.0
ii  equivs  2.3.1
ii  libdistro-info-perl 1.0
ii  libdpkg-perl1.20.9
ii  libencode-locale-perl   1.05-1.1
ii  libgit-wrapper-perl 0.048-1
ii  libgitlab-api-v4-perl   0.26-1
ii  liblist-compare-perl0.55-1
ii  liblwp-protocol-https-perl  6.10-1
ii  libsoap-lite-perl   1.27-1
ii  libstring-shellquote-perl   1.04-1
ii  libtry-tiny-perl0.30-1
ii  liburi-perl 5.08-1
ii  licensecheck3.2.11-1
ii  lintian 2.104.0
ii  man-db  2.9.4-2
ii  patch   2.7.6-7
ii  pristine-tar1.49
ii  python3-apt 2.2.1
ii  python3-debian  0.1.39
ii  python3-magic   2:0.4.20-3
ii  python3-requests2.25.1+dfsg-2
ii  python3-unidiff 0.5.5-2
ii  python3-xdg 0.27-2
ii  strace  5.10-1
ii  unzip   6.0-26
ii  wget1.21-1+b1
ii  xz-utils5.2.5-2

Versions of packages devscripts suggests:
ii  adequate 0.15.6
pn  at   
ii  autopkgtest  5.16
pn  bls-standalone   
pn  bsd-mailx | mailx
ii  build-essential  12.9
pn  check-all-the-things 
pn  cvs-buildpackage 
ii  debhelper13.5.1
pn  devscripts-el
pn  diffoscope   
pn  disorderfs   
pn  dose-extra   
pn  duck 
pn  faketime 
pn  gnuplot  
pn  how-can-i-help   
ii  libauthen-sasl-perl  2.1600-1.1
pn  libdbd-pg-perl   
ii  libfile-desktopentry-perl0.22-2
pn  libnet-smtps-perl
pn  libterm-size-perl
ii  libtimedate-perl 2.3300-2
pn  libyaml-syck-perl
pn  mmdebstrap   
pn  mozilla-devscripts   
pn  mutt 
ii  openssh-client [ssh-client]  1:8.4p1-6
ii  piuparts 1.1.4
pn  postgresql-client
pn  pristine-lfs 
ii  quilt0.66-2.1
pn  ratt 
pn  reprotest
pn  svn-buildpackage 
pn  w3m  

-- no debconf information

Bug#1000512: psqlodbc: autopkgtests should Depend on odbcinst

[Hugh McMaster]

Source: psqlodbc
Version: 1:13.02.-1
Severity: important

The recent upload of unixodbc 2.3.9-2 to unstable triggered psqlodbc's
autopkgtests, which fail because odbcinst is not installed.

In previous versions of unixodbc, odbcinst was installed via odbcinst1debian2,
which was a dependency of unixodbc-dev.

odbcinst is no longer a dependency due to the creation of new binary packages
and file movement.

Please add odbcinst to your package's autopkgtest control file as soon as
possible to help unixodbc to migrate.


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.15.0-1-amd64 (SMP w/2 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Bug#997870: unixodbc-dev: libltdl-dev really required?

[Hugh McMaster]

Control: tags -1 pending

Hi Alexander,

Thank you for filing this bug report.

On Tue, 26 Oct 2021 at 23:09, Alexander Traud wrote:
>
> Package: unixodbc-dev
> Version: 2.3.6-0.1build2
>
> In salsa [1], I see that the dependency on libltdl-dev was added to the -dev 
> package in the year 2004 already. On the first glance, I found no 
> use/reference to libltdl-dev (except at build time). Therefore, I am curios 
> why this dependency exists on the -dev package (and is even a required 
> dependency).
>
> I found a reference of ltdl.h in odbcinstext.h. However, that part is guarded 
> with a compile-time-only define UNIXODBC_SOURCE. Is/was that the reason? If 
> yes, I created a Pull Request upstream to discuss or fix this: 
> 

I've had a look into the use of ltdl.h and UNIXODBC_SOURCE, and I've
come to the same conclusion you have: Debian builds don't use or
#define UNIXODBC_SOURCE at all.

I saw upstream had confirmed your thinking around UNIXODBC_SOURCE
being a compile-time define and merged your patch. I can't see or find
any reason for unixodbc-dev to depend on libltdl-dev, so I'll remove
that dependency when I release the next version.

I'll be starting a transition to unixodbc 2.3.9 soon, so this change
will need to wait until after that.

Bug#998103: RFS: loudgain/0.6.8+ds-2 [RC] -- ReplayGain 2.0 loudness normalizer

[Hugh McMaster]

Package: sponsorship-requests
Severity: important

Dear mentors,

I am looking for a sponsor for my package "loudgain":

 * Package name: loudgain
   Version : 0.6.8+ds-2
   Upstream Author : Matthias C. Hormann 
 * URL : https://github.com/Moonbase59/loudgain
 * License : BSD-2-Clause
 * Vcs : https://salsa.debian.org/hmc-guest/loudgain
   Section : sound

The source builds the following binary packages:

  loudgain - ReplayGain 2.0 loudness normalizer based on the EBU R128 standard

To access further information about this package, please visit the
following URL:

  https://mentors.debian.net/package/loudgain/

Alternatively, one can download the package with dget using this command:

  dget -x 
https://mentors.debian.net/debian/pool/main/l/loudgain/loudgain_0.6.8+ds-2.dsc

Changes since the last upload:

 loudgain (0.6.8+ds-2) unstable; urgency=medium
 .
   [ Debian Janitor ]
   * Remove version constraints on build-dependencies unnecessary since Buster.
 .
   [ Hugh McMaster ]
   * debian/gbp.conf: Use DEP-14 branch naming.
   * debian/control:
 - Build-Depend on zlib1g-dev | libz-dev (Closes: #997233).
 - Raise Standards-Version to 4.6.0 from 4.5.0 (no changes needed).
   * debian/source/lintian-overrides: Silence a line-length warning in
the upstream README.md file.

Regards,

-- 
  Hugh McMaster

Bug#998064: sm: fails to display text containing letter 'e' due to errors in libfreetype after upgrade

[Hugh McMaster]

Hi Paul,

On Fri, 29 Oct 2021 at 21:21, Paul Wise wrote:
>
> Not sure if this issue is a bug in sm or freetype, please reassign.
>
> Since the upgrade of freetype from 2.10.4+dfsg-1 to 2.11.0+dfsg-1,
> whenever I attempt to display a string in sm containing letter e,
> either via the command-line or by typing it into the text input,
> the entire string does not display, I get errors in the terminal
> and I cannot type any more input except for pressing Esc twice.
>
>$ sm e
>(sm:2529177): Gtk-WARNING **: 13:23:34.553: drawing failure for widget 
> 'GtkDrawingArea': error occurred in libfreetype
>
>(sm:2529177): Gtk-WARNING **: 13:23:34.574: drawing failure for widget 
> 'GtkBox': error occurred in libfreetype
>
>(sm:2529177): Gtk-WARNING **: 13:23:34.574: drawing failure for widget 
> 'GtkWindow': error occurred in libfreetype
>
> The problem stops happening if I downgrade freetype to 2.10.4+dfsg-1.
>
> The problem happens with some fonts but not every single font.

With which fonts are you seeing the problem?

> The problem happens for rotating 180° or 360° but not 90° or 270°.
>
> The problem happens with "e" "ea" "eaa" "eaaa" but not "e".
>
> The problem happens for me with GNOME Wayland and if I force X11.

I'm not seeing any issues or warnings using Cinnamon and X11 on Debian
Sid on these letter combinations or rotations.

I'll spin up a GNOME VM and report back.

> The problem only happens with my existing user account, not a new one.
>
> The problem still happens if I delete my fontconfig cache files.
>
> Folks on IRC say this does not happen in X11 KDE/MATE/Xfce/openbox/dwm
> and Wayland/X11 GNOME. One person found it does happen in X11 LXQt.
>
> When I compare the ltrace output, when the issue occurs, the function
> pango_cairo_show_layout returns 40 while it returns 0 otherwise.
>
> I tried recompiling freetype with support for the FT2_DEBUG environment
> variable but I can't find the error in the log output.

Bug#998169: transition: unixodbc

[Hugh McMaster]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Due to various changes, unixodbc's libraries, libodbc, libodbccr and libodbccr
have a new soversion.

Test results after rebuilding all reverse dependencies and reverse-build
dependencies:

The following packages FTBFS for reasons unrelated to unixodbc:
  * asterisk; see #997136
  * libghc-hdbc-odbc-dev (src:hdbc-odbc); not in testing
  * libmyodbc (src:myodbc); not in testing
  * pike8.0-odbc (src:pike8.0); not in testing
  * w1retap-odbc (src:w1retap); not in testing

tdbcodbc will require a source or NMU upload; see #997057, where the maintainer
says he will take care of this.

grass, vtk7, mysql-workbench and saga all require rebuilds once gdal is
rebuilt.


Ben file:

title = "unixodbc";
is_affected = .depends ~ "libodbc1" | .depends ~ "odbcinst1debian2" | .depends
~ "libodbc2" | .depends ~ "libodbccr2" | .depends ~ "libodbcinst2";
is_good = .depends ~ "libodbc2" | .depends ~ "libodbccr2" | .depends ~
"libodbcinst2";
is_bad = .depends ~ "libodbc1" | .depends ~ "odbcinst1debian2";

Bug#998064: sm: fails to display text containing letter 'e' due to errors in libfreetype after upgrade

[Hugh McMaster]

On Sun, 31 Oct 2021 at 01:36, Paul Wise wrote:
>
> I figured out that this command causes the issue:
>
>$ gsettings set org.gnome.desktop.interface font-antialiasing rgba
>
> and this command fixes the issue:
>
>$ gsettings set org.gnome.desktop.interface font-antialiasing grayscale

'grayscale' was the default font-antialiasing value on my test VM. I
also tested 'rgba' out of interest.

I didn't encounter any rendering issues with either value (note: I
restarted between test runs).

I also didn't get any terminal output with any combination of text or rotation.

I'll keep investigating. There's a few options to try yet.

Bug#997057: tdbcodbc: Build-Depend on unixodbc-dev

[Hugh McMaster]

Source: tdbcodbc
Version: 1.1.2-1
Severity: important
Tags: ftbfs

Dear Maintainer,

I will soon be starting a transition with unixODBC that will cause a build
failure with src:tdbcodbc due to its hard-coded build-dependencies of libodbc1
and odbcinst1debian2.

To avoid issues with the transition to new the new packages, please update your
debian/control file to build-depend on unixodbc-dev. This will give you the
libraries required: libodbc2, libodbccr2 and libodbcinst2.

The binary tcl8.6-tdbc-odbc should also be updated to depend on unixodbc-dev.

Thank you


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.14.0-3-amd64 (SMP w/2 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Bug#1007238: apwal: diff for NMU version 0.4.5-1.2

[Hugh McMaster]

Source: apwal
Version: 0.4.5-1.1
Severity: normal
Tags: patch

Dear maintainer,

I've prepared an NMU for apwal (versioned as 0.4.5-1.2).

I intend to seek sponsorship for this upload.

Please feel free to let me know if you wish to handle this.

Kind regards,

Hugh


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.16.0-4-amd64 (SMP w/2 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
diff -Nru apwal-0.4.5/debian/changelog apwal-0.4.5/debian/changelog
--- apwal-0.4.5/debian/changelog2022-03-14 22:17:36.0 +1100
+++ apwal-0.4.5/debian/changelog2022-03-14 22:04:23.0 +1100
@@ -1,3 +1,32 @@
+apwal (0.4.5-1.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Switch package to 3.0 (quilt) format.
+  * Use 'dh' format to avoid missing build-arch and/or build-indep
+targets in debian/rules (Closes: #999315).
+  * debian/changelog: Remove trailing whitespace.
+  * debian/control:
+- Use debian-compat v13.
+- Raise Standards-Version to 4.6.0 (no changes needed).
+- Declare Rules-Requires-Root: no.
+- Drop duplicate Section field.
+- Declare package Multi-Arch: foreign.
+  * debian/copyright: Use DEP-5 format and update for 2022.
+  * debian/patches:
+- Fix cross-building and other issues (Closes: #929646).
+  Thanks to Helmut Grohne for supplying a patch.
+- Don't override build system CFLAGS, CPPFLAGS or LDFLAGS.
+- Use pkg-config to detect libxml2 (Closes: #949051).
+- Don't manually strip the binary (Closes: #436940).
+- Fix install path to work with dh_auto_install.
+- Multiple spelling fixes (Lintian).
+  * debian/rules:
+- Switch to `dh' format.
+- Export hardening flags.
+  * Add debian/watch file.
+
+ -- Hugh McMaster   Mon, 14 Mar 2022 22:04:23 +1100
+
 apwal (0.4.5-1.1) unstable; urgency=medium
 
   * Non-maintainer upload.
@@ -19,4 +48,3 @@
   * Initial release (Closes: #230373).
 
  -- Sam Hocevar (Debian packages)   Wed, 25 Feb 2004 11:18:16 
+0100
-
diff -Nru apwal-0.4.5/debian/compat apwal-0.4.5/debian/compat
--- apwal-0.4.5/debian/compat   2022-03-14 22:17:36.0 +1100
+++ apwal-0.4.5/debian/compat   1970-01-01 10:00:00.0 +1000
@@ -1 +0,0 @@
-9
diff -Nru apwal-0.4.5/debian/control apwal-0.4.5/debian/control
--- apwal-0.4.5/debian/control  2022-03-14 22:17:36.0 +1100
+++ apwal-0.4.5/debian/control  2022-03-14 21:43:17.0 +1100
@@ -2,13 +2,14 @@
 Section: gnome
 Priority: optional
 Maintainer: Sam Hocevar (Debian packages) 
-Build-Depends: debhelper (>= 9), libgtk2.0-dev, libxml2-dev
-Standards-Version: 3.6.1.0
+Build-Depends: debhelper-compat (= 13), libgtk2.0-dev, libxml2-dev
+Standards-Version: 4.6.0
 Homepage: http://apwal.free.fr/
+Rules-Requires-Root: no
 
 Package: apwal
-Section: gnome
 Architecture: any
+Multi-Arch: foreign
 Depends: ${shlibs:Depends}, ${misc:Depends}
 Description: icon-based floating application launcher with transparency
  Apwal is a simple icon-based application launcher. It consists of two
diff -Nru apwal-0.4.5/debian/copyright apwal-0.4.5/debian/copyright
--- apwal-0.4.5/debian/copyright2022-03-14 22:17:36.0 +1100
+++ apwal-0.4.5/debian/copyright2022-03-13 19:57:41.0 +1100
@@ -1,25 +1,49 @@
-This package was downloaded from http://apwal.free.fr/ by Sam Hocevar
- on Wed, 25 Feb 2004 11:18:16 +0100.
-
-Upstream Author: Pascal Eberhard 
-
-Copyright (C) 2002-2004 Pascal Eberhard 
-
-  This program is free software; you can redistribute it and/or
-  modify it under the terms of the GNU General Public License as
-  published by the Free Software Foundation; either version 2 of the
-  License, or (at your option) any later version.
-
-  This program is distributed in the hope that it will be useful,
-  but WITHOUT ANY WARRANTY; without even the implied warranty of
-  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-  General Public License for more details.
-
-  You should have received a copy of the GNU General Public
-  License along with this program; if not, write to the
-  Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-  Boston, MA 02111-1307, USA.
-
-On Debian GNU/Linux systems, the complete text of the GNU General
-Public License can be found in `/usr/share/common-licenses/GPL'.
-
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: Apwal
+Upstream-Contact: Pascal Eberhard 
+Source: http://apwal.free.fr
+Comment: This package was downloaded from http://apwal.free.fr by Sam Hocevar
+ on Wednesday, 25 February 2004 at 11:18:16 +0100.
+
+Files: *
+Copyright: 2002-2004 Pascal Eberh

Bug#1005887: unixodbc-dev does not contain unixodbc_conf.h

[Hugh McMaster]

Hallo Jan,

On Tue, 22 Feb 2022 at 07:06, Jan Wielemaker wrote:
>
> Thanks for your answer.  I'm not convinced.  You are telling that we
> must define macros to make sql.h get the right type for SQLBIGINT.
> Getting the right type (some alias for int64_t or a struct) is IMO
> something that should be done by unixodb such that the application
> gets a working SQLBIGINT that matches the library.  That is how it
> used to be as long as we use unixodbc.   sql.h used to do so by
> including the platform dependent type configuration file.  As it
> is working now, we actually have to know which of the HAVE_* and
> SIZEOF_* macros we must define before including sql.h.
> If this is no longer how it works, do you happen to know the
> motivation why not?


This is how the headers should ideally be used. However, most programs
don't #define SIZEOF_LONG_INT and rely on the presence of
unixodbc_conf.h to #define all relevant macros (generally, just
SIZEOF_LONG_INT and HAVE_LONG_LONG). This is much easier and most
likely the expected behaviour.

If you look at sqltypes.h, you'll notice #ifndef SIZEOF_LONG_INT then
#includes unixodbc_conf.h.

unixodbc_conf.h is an arch-specific header, which mostly contains
information on how unixodbc was built. Most of this information is not
relevant to downstream packages. I'm working with upstream to split
unixodbc_conf.h into a public header that contains relevant #defines
and a private header with the build-system information.

In the meantime, I'll update the Debian package to avoid this issue by
including the relevant macros from unixodbc_conf.h. That way, defining
SIZEOF_LONG_INT will not be required and everything should work as it
did previously.

Bug#1008872: dia2code: diff for NMU version 0.8.3-4.2

[Hugh McMaster]

Package: dia2code
Version: 0.8.3-4.1
Severity: normal
Tags: patch  pending

Dear maintainer,

I've prepared an NMU for dia2code (versioned as 0.8.3-4.2).

I intend to seek sponsorship for this upload.

Please feel free to tell me if you can assist.

Regards,

Hugh

diff -Nru dia2code-0.8.3/debian/changelog dia2code-0.8.3/debian/changelog
--- dia2code-0.8.3/debian/changelog	2022-04-03 19:49:30.0 +1000
+++ dia2code-0.8.3/debian/changelog	2022-04-03 17:55:21.0 +1000
@@ -1,3 +1,27 @@
+dia2code (0.8.3-4.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Use package format 3.0 (quilt).
+  * Use debhelper-compat v13 (Closes: #965485).
+  * Switch from 'cdbs' to 'dh' format.
+  * debian/changelog: Trim trailing whitespace.
+  * debian/control:
+- Drop versioned dependency on libxml2.
+- Drop cdbs, autotools-dev and patchutils from the Build-Depends list.
+- Build-Depend on pkg-config.
+- Raise Standards-Version to 4.6.0 from 3.7.3 (no changes needed).
+- Declare Rules-Requires-Root: no.
+- Add Homepage field.
+- Remove alternative recommends on dia-gnome (Closes: #878587).
+- Add ${misc:Depends} to the binary package Depends list.
+  * debian/copyright: Use DEP-5 format and update for 2022.
+  * debian/patches: Add descriptions and other metadata.
+  * debian/rules: Add hardening flags to DEB_BUILD_MAINT_OPTIONS.
+  * Use pkg-config to find libxml2 (Closes: #949091).
+  * Update debian/watch file.
+
+ -- Hugh McMaster   Sun, 03 Apr 2022 17:55:21 +1000
+
 dia2code (0.8.3-4.1) unstable; urgency=medium
 
   * Non-maintainer upload.
@@ -26,7 +50,7 @@
   * debian/control: updated standards version to 3.7.3
   * debian/control: removed build-dep on doc-to-man and added cdbs, patchutils
   * debian/rules: switched to cdbs
-  * debian/compat: updated to 5 
+  * debian/compat: updated to 5
   * debian/patches: managed patches by cdbs simple-patchsys
   * Fixed manpage: added some options missing
   * debian/dia2code.sgml: removed this file because it was used for to generate
@@ -75,7 +99,7 @@
 
 dia2code (0.8.1-2) unstable; urgency=low
 
-  * Prevent a crash in lolipop_implementation(). Patch from Patrice Neff 
+  * Prevent a crash in lolipop_implementation(). Patch from Patrice Neff
  (also forwarded upstream) (Closes: #19)
 
  -- Cyrille Chepelov   Fri, 15 Feb 2002 00:07:06 +0100
@@ -96,7 +120,7 @@
 dia2code (0.7-1) unstable; urgency=low
 
   * New upstream release
-  
+
  -- Cyrille Chepelov   Fri,  7 Dec 2001 14:39:15 +0100
 
 dia2code (0.5-11) unstable; urgency=low
@@ -120,9 +144,9 @@
 behaviour of core tools are quite in disagreement...)
   * new maintainer address (same maintainer, but NM)
   * bumped up the standards version number in debian/control.
-  * debian/dia2code.sgml: bumped up to DocBook 4.1 (hopefully). 
+  * debian/dia2code.sgml: bumped up to DocBook 4.1 (hopefully).
   changed the manpage author's address (mine).
-  
+
  -- Cyrille Chepelov   Sat, 24 Mar 2001 21:17:06 +0100
 
 dia2code (0.5-8) unstable; urgency=low
@@ -138,7 +162,7 @@
   * removed obsolete call to dh_testversion in debian/rules
   * removed call to dh_installmenu, as this program doesn't make sense
 without command-line arguments.
-  
+
  -- Cyrille Chepelov   Fri,  9 Mar 2001 09:52:28 +0100
 
 dia2code (0.5-6) unstable; urgency=low
@@ -176,8 +200,5 @@
 dia2code (0.5-1) unstable; urgency=low
 
   * Initial Release.
-  * 
 
  -- Cyrille Chepelov   Fri,  2 Mar 2001 21:32:10 +0100
-
-
diff -Nru dia2code-0.8.3/debian/compat dia2code-0.8.3/debian/compat
--- dia2code-0.8.3/debian/compat	2022-04-03 19:49:30.0 +1000
+++ dia2code-0.8.3/debian/compat	1970-01-01 10:00:00.0 +1000
@@ -1,2 +0,0 @@
-5
-
diff -Nru dia2code-0.8.3/debian/control dia2code-0.8.3/debian/control
--- dia2code-0.8.3/debian/control	2022-04-03 19:49:30.0 +1000
+++ dia2code-0.8.3/debian/control	2022-04-03 17:55:21.0 +1000
@@ -1,14 +1,20 @@
 Source: dia2code
 Section: devel
 Priority: optional
-Build-Depends: debhelper (>= 5), cdbs, libxml2-dev (>= 2.4.10), autotools-dev, automake, patchutils
+Build-Depends:
+ debhelper-compat (= 13),
+ automake,
+ libxml2-dev,
+ pkg-config
 Maintainer: Francesco Aloe 
-Standards-Version: 3.7.3
+Standards-Version: 4.6.0
+Rules-Requires-Root: no
+Homepage: https://sourceforge.net/projects/dia2code/
 
 Package: dia2code
 Architecture: any
-Depends: ${shlibs:Depends}
-Recommends: dia | dia-gnome
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Recommends: dia
 Description: a dia-UML code generator
  dia2code is a code generator which uses UML diagrams produced by dia,
  and turns them into C, C++, Java, Ada, PHP, Python, Shapefile, SQL,
diff -Nru dia2code-0.8.3/debian/copyright dia2code-0.8.3/debian/copyright
--- dia2code-0.8.3/debian/copyright	2022-04-03 19:49:30.0 +1000
+++ dia2code-0.8.3/debian/copyright	2022-04-03 17:09:51.0 +1000
@@ -1,17 +1,90 @@
-This package was debianized by Cyrille Chepelov  on
-Tue, 20 Feb 2001

Bug#1008485: cpm: diff for NMU version 0.32-1.4

[Hugh McMaster]

Package: cpm
Version: 0.32-1.3
Severity: normal
Tags: patch  pending

Dear maintainer,

I've prepared an NMU for cpm (versioned as 0.32-1.4).

I intend to seek sponsorship for this package. Please let me know
if my sponsor should delay the upload or if you can assist.

Regards,

Hugh
diff -Nru cpm-0.32/debian/changelog cpm-0.32/debian/changelog
--- cpm-0.32/debian/changelog	2020-08-19 04:15:38.0 +1000
+++ cpm-0.32/debian/changelog	2022-03-27 22:15:18.0 +1100
@@ -1,3 +1,31 @@
+cpm (0.32-1.4) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Switch to debhelper-compat v13.
+  * debian/changelog: Remove trailing whitespace.
+  * debian/copyright: Switch to DEP-5 format and update for 2022.
+  * debian/control:
+- Priority: extra -> optional.
+- Update Build-Depends:
+  + libgpgme11-dev -> libgpgme-dev.
+  + libncurses5-dev -> libncurses-dev (Closes: #851594).
+  + Require pkg-config.
+  + Remove autotools-dev and dh_autoreconf (no longer needed).
+  + Remove duplicate libcdk5-dev entry.
+- Declare Rules-Requires-Root: binary-targets.
+- Update Vcs-Git and homepage fields.
+- Raise Standards-Version to 4.6.0 (no changes needed).
+- Remove trailing whitespace.
+  * debian/patches:
+- Use pkg-config to find libxml2 (Closes: #949088).
+- Remove non-POSIX features from configure.in (Closes: #998786).
+- Rename 'ftbfs.patch' to fix-ftbfs-gcc-10.patch'.
+  * debian/rules: Remove unneeded dh arguments --parallel --with=autoreconf.
+  * Add debian/upstream/metadata file.
+  * Update debian/watch and point to GitHub.
+
+ -- Hugh McMaster   Sun, 27 Mar 2022 22:15:18 +1100
+
 cpm (0.32-1.3) unstable; urgency=medium
 
   * Non-maintainer upload.
@@ -17,7 +45,7 @@
 
   * Non-maintainer upload.
   * Fix ftbfs due to cdk.h moved from /usr/include/cdk to /usr/include
-(Closes: #802221) 
+(Closes: #802221)
 
  -- YunQiang Su   Sun, 18 Oct 2015 23:14:34 +0800
 
@@ -74,6 +102,6 @@
 
 cpm (0.25-1) unstable; urgency=low
 
-  * Initial release (Closes: #55, #588526) 
+  * Initial release (Closes: #55, #588526)
 
  -- Stig Sandbeck Mathisen   Mon, 17 Jan 2011 17:40:55 +0100
diff -Nru cpm-0.32/debian/compat cpm-0.32/debian/compat
--- cpm-0.32/debian/compat	2020-08-19 04:05:18.0 +1000
+++ cpm-0.32/debian/compat	1970-01-01 10:00:00.0 +1000
@@ -1 +0,0 @@
-9
diff -Nru cpm-0.32/debian/control cpm-0.32/debian/control
--- cpm-0.32/debian/control	2020-08-19 04:05:18.0 +1000
+++ cpm-0.32/debian/control	2022-03-27 22:03:31.0 +1100
@@ -1,32 +1,30 @@
 Source: cpm
 Section: utils
-Priority: extra
+Priority: optional
 Maintainer: Kacper Wysocki (Redpill-Linpro) 
 Uploaders: Stig Sandbeck Mathisen 
 Build-Depends:
- debhelper (>= 9~),
- autotools-dev,
- dh-autoreconf,
+ debhelper-compat (= 13),
  libcdk5-dev,
  libcrack2-dev,
  libdotconf-dev,
- libgpgme11-dev,
- libncurses5-dev,
- libncursesw5-dev,
+ libgpgme-dev,
+ libncurses-dev,
  libxml2-dev,
+ pkg-config,
  txt2man,
- zlib1g-dev,
- libcdk5-dev,
-Standards-Version: 3.9.5
-Vcs-Git: git://github.com/comotion/cpm.git
+ zlib1g-dev
+Standards-Version: 4.6.0
+Rules-Requires-Root: binary-targets
+Homepage: https://github.com/comotion/cpm
 Vcs-Browser: https://github.com/comotion/cpm
-Homepage: http://github.com/comotion/cpm
+Vcs-Git: https://github.com/comotion/cpm.git
 
 Package: cpm
 Architecture: any
 Depends: ${misc:Depends}, ${shlibs:Depends},
  libxml2-utils
-Description: Curses based password manager using PGP-encryption 
+Description: Curses based password manager using PGP-encryption
  This program is a ncurses based console tool to manage passwords
  and store them public key encrypted in a file - even for more than
  one person. The encryption is handled via GnuPG so the programs data
diff -Nru cpm-0.32/debian/copyright cpm-0.32/debian/copyright
--- cpm-0.32/debian/copyright	2020-08-19 04:05:18.0 +1000
+++ cpm-0.32/debian/copyright	2022-03-27 21:54:53.0 +1100
@@ -1,37 +1,34 @@
-This package was debianized by Lars Bahner  on
-Fri, 03 Apr 2009 14:59:19 +0200.
-
-It was downloaded from http://www.harry-b.de/dokuwiki/doku.php?id=harry:cpm
-
-Upstream Author:
-
-Harry Brueckner 
-
-Copyright:
-
-Copyright (C) 2005-2009 Harry Brueckner
-Copyright (C) 2010 Kacper Wysocki
-
-License:
-
-This package is free software; you can redistribute it and/or modify
-it under the terms of the GNU General Public License as published by
-the Free Software Foundation; either version 2 of the License, or
-(at your option) any later version.
-
-This package is distributed in the hope that it will be useful,
-but WITHOUT ANY WARRANTY; without even the implied warranty of
-MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-GNU General Public License for more details.
-
-You should have received a copy of the GNU General Public License
-along with this package; if not, write to the F