Bug#706895: marked as done (transition: db5.3)

[Debian Bug Tracking System]

Your message dated Mon, 25 Aug 2014 23:45:25 -0700
with message-id <20140826064525.ga17...@betterave.cristau.org>
and subject line Re: Bug#658829: transition: db-defaults
has caused the Debian Bug report #658829,
regarding transition: db5.3
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
658829: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658829
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Hi,

it's that time again we should prepare to switch to new Berkeley DB
upstream version.

This time it's the 5.1 to 5.3 transition.  I expect that there might
be another upstream release before jessie is out, but since the
Berkeley DB transitions are so painful, I think it's a good idea to
practice it a bit, since we only did it correctly once for wheezy.

I won't be uploading new db-defaults to unstable before you ack this
transition.

O.

Ben file:

title = "db5.3";
is_affected = .depends ~ /libdb5\.1.*/ | .depends ~ /libdb5\.3.*/;
is_good = .depends ~ /libdb5\.3.*/;
is_bad = .depends ~ /libdb5\.1.*/;


-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
On Mon, Feb  6, 2012 at 09:55:47 +0100, Ondřej Surý wrote:

> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: transition
> 
> Hi,
> 
> as announce earlier (5.1->5.2->5.3), I would like to start
> transition from db5.1 (src:db) to db5.3 (src:db5.3) in unstable.
> 
> Hopefully lot of packages have learned from last time and the
> transition will be smoothier then the on from db4.{6,7,8} to db5.1.
> 
> I would like to ship the wheezy with db5.3 and get rid of db5.1
> completely.
> 
It's for jessie, but libdb5.1 is finally gone from testing.

Cheers,
Julien


signature.asc
Description: Digital signature
--- End Message ---

Bug#658829: marked as done (transition: db5.3)

[Debian Bug Tracking System]

Your message dated Mon, 25 Aug 2014 23:45:25 -0700
with message-id <20140826064525.ga17...@betterave.cristau.org>
and subject line Re: Bug#658829: transition: db-defaults
has caused the Debian Bug report #658829,
regarding transition: db5.3
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
658829: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658829
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Hi,

as announce earlier (5.1->5.2->5.3), I would like to start
transition from db5.1 (src:db) to db5.3 (src:db5.3) in unstable.

Hopefully lot of packages have learned from last time and the
transition will be smoothier then the on from db4.{6,7,8} to db5.1.

I would like to ship the wheezy with db5.3 and get rid of db5.1
completely.

db4.7 has been reduced just to utils and db4.8 still has some
dependencies left (with most prominent python2.7), but I would
like to try python2.7 with db5.3, maybe it will help the build
failures Martin Pitt is seeing.

The libdb transition tracker[1] has to be changed to:

Affected: .build-depends ~ /libdb((5|4)\..*)?-dev/
Good: .depends ~ /libdb5\.3/ | .pre-depends ~ /libdb5\.3/
Bad: .depends ~ /libdb(4|5\.1)/ | .pre-depends ~ /libdb(4|5\.1)/

O.

1. http://release.debian.org/transitions/html/libdb.html

-- System Information:
Debian Release: 6.0.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


--- End Message ---
--- Begin Message ---
On Mon, Feb  6, 2012 at 09:55:47 +0100, Ondřej Surý wrote:

> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: transition
> 
> Hi,
> 
> as announce earlier (5.1->5.2->5.3), I would like to start
> transition from db5.1 (src:db) to db5.3 (src:db5.3) in unstable.
> 
> Hopefully lot of packages have learned from last time and the
> transition will be smoothier then the on from db4.{6,7,8} to db5.1.
> 
> I would like to ship the wheezy with db5.3 and get rid of db5.1
> completely.
> 
It's for jessie, but libdb5.1 is finally gone from testing.

Cheers,
Julien


signature.asc
Description: Digital signature
--- End Message ---

Bug#753529: marked as done (transition: perl 5.20)

[Debian Bug Tracking System]

Your message dated Mon, 25 Aug 2014 23:37:08 -0700
with message-id <20140826063708.gj4...@betterave.cristau.org>
and subject line Re: Bug#753529: transition: perl 5.20
has caused the Debian Bug report #753529,
regarding transition: perl 5.20
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
753529: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=753529
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
User: release.debian@packages.debian.org
Usertags: transition
X-Debbugs-Cc: debian-p...@lists.debian.org

We'd like to get Perl 5.20 in jessie, so I guess it's best to push this
on the radar now.

Things aren't nearly ready yet, but most of the known blockers should be
easy to fix, with the possible exceptions of #753257 in perl/kfreebsd-amd64
and #750240 in libapache2-mod-perl2.

I've done test rebuilds of lib*-perl packages + libperl5.18 and
perlapi-5.18.* reverse dependencies. Bugs are tracked at

 
https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=perl-5.20-transition;users=debian-p...@lists.debian.org

and we're currently at

58 Outstanding
9 Forwarded
7 Pending Upload
41 Resolved

Ben file (I hope):

title = "perl";
is_affected = .depends ~ /perlapi-5.|libperl5./;
is_good = .depends ~ /perlapi-5.2|libperl5.2/;
is_bad  = .depends ~ /perlapi-5.1|libperl5.1/;

-- 
Niko Tyni   nt...@debian.org
--- End Message ---
--- Begin Message ---
On Wed, Jul  2, 2014 at 22:17:48 +0300, Niko Tyni wrote:

> Package: release.debian.org
> User: release.debian@packages.debian.org
> Usertags: transition
> X-Debbugs-Cc: debian-p...@lists.debian.org
> 
> We'd like to get Perl 5.20 in jessie, so I guess it's best to push this
> on the radar now.
> 
Time to close this:

  perl |  5.20.0-4 |testing | source, amd64, armel, armhf, 
i386, kfreebsd-amd64, kfreebsd-i386, mips, mipsel, powerpc, s390x

Cheers,
Julien


signature.asc
Description: Digital signature
--- End Message ---

Re: [debian-mysql] MariaDB in Jessie

[Otto Kekäläinen]

Hello!

The current plan is to ship MariaDB 5.5.

The next version of MariaDB, numbered 10.0, has been in the NEW queue
for over 4 months:
https://ftp-master.debian.org/new/mariadb-10.0_10.0.10-1.html

If that queue would move any faster there would be an option to ship
10.0. Is there anything that could be done?

Shipping 5.5 isn't anyway a bad option. Upstream is most likely to
publish security releases for 5.5 for many years still, and it is easy
(and well proven) for users to upgrade from current MySQL 5.5 to
MariaDB 5.5. Ubuntu 14.04 has shipped MariaDB 5.5 in the Ubuntu
universe repos.

However, newer is always newer, so shipping MariaDB 10.0 would be nice
if we have time to finalize it after it comes out from the NEW queue..


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/cahj_tldnppmhb3wzawrxwf6kr+59hdmqqjxezxw8y1oh9pg...@mail.gmail.com

Bug#759312: wheezy-pu: package gnubg/0.90+20120429-1

[Russ Allbery]

"Adam D. Barratt"  writes:

> The patch looks fine, thanks. Just for a final confirmation, please
> could we have a debdiff of the proposed upload (against the current
> stable package); please use 0.90+20120429-1+deb7u1 as the version.

The debdiff is attached.  Sorry about the obnoxious patch of a patch; the
unstable version no longer uses single-debian-patch, but I was still using
it then.  Regeneration of the diff of course changed the order of the
modified files, so the diff is particularly ugly.

-- 
Russ Allbery (r...@debian.org)   

diff -Nru gnubg-0.90+20120429/debian/changelog gnubg-0.90+20120429/debian/changelog
--- gnubg-0.90+20120429/debian/changelog	2012-04-28 20:56:29.0 -0700
+++ gnubg-0.90+20120429/debian/changelog	2014-08-25 21:59:14.0 -0700
@@ -1,3 +1,10 @@
+gnubg (0.90+20120429-1+deb7u1) stable; urgency=low
+
+  * Apply upstream patch to prevent a crash on "end game" when gnubg is
+run with the -t option.  (Closes: #754764)
+
+ -- Russ Allbery   Mon, 25 Aug 2014 21:56:34 -0700
+
 gnubg (0.90+20120429-1) unstable; urgency=low
 
   * New upstream development snapshot.
diff -Nru gnubg-0.90+20120429/debian/patches/debian-changes gnubg-0.90+20120429/debian/patches/debian-changes
--- gnubg-0.90+20120429/debian/patches/debian-changes	2012-04-28 20:56:51.0 -0700
+++ gnubg-0.90+20120429/debian/patches/debian-changes	2014-08-25 21:59:59.0 -0700
@@ -7,6 +7,54 @@
 
 For full commit history and separated commits, see the packaging Git
 repository.
+--- gnubg-0.90+20120429.orig/eval.c
 gnubg-0.90+20120429/eval.c
+@@ -652,7 +652,9 @@ extern void EvalInitialise(char *szWeigh
+ 			pbc1 = BearoffInit ( NULL, BO_HEURISTIC, pfProgress );
+ 
+ 		/* read two-sided db from gnubg.bd */
+-		gnubg_bearoff = BuildFilename("gnubg_ts0.bd");
++		/* For Debian, load dynamic databases from /var/lib/gnubg
++		   instead.  -- rra, 2008-02-16 */
++		gnubg_bearoff = BuildVarFilename ( "gnubg_ts0.bd" );
+ 		pbc2 = BearoffInit ( gnubg_bearoff, BO_IN_MEMORY | BO_MUST_BE_TWO_SIDED, NULL );
+ 			g_free(gnubg_bearoff);
+ 
+@@ -667,12 +669,12 @@ extern void EvalInitialise(char *szWeigh
+ 	"You can also generate other bearoff databases; see\n"
+ 	"README for more details\n\n" );
+ 
+-		gnubg_bearoff_os = BuildFilename("gnubg_os.bd");
++		gnubg_bearoff_os = BuildVarFilename ( "gnubg_os.bd" );
+ 		/* init one-sided db */
+ 		pbcOS = BearoffInit ( gnubg_bearoff_os, BO_IN_MEMORY, NULL );
+ 		g_free(gnubg_bearoff_os);
+ 
+-		gnubg_bearoff = BuildFilename("gnubg_ts.bd");
++		gnubg_bearoff = BuildVarFilename("gnubg_ts.bd");
+ 		/* init two-sided db */
+ 		pbcTS = BearoffInit ( gnubg_bearoff, BO_IN_MEMORY, NULL );
+ 		g_free(gnubg_bearoff);
+@@ -683,7 +685,7 @@ extern void EvalInitialise(char *szWeigh
+ char *fn;
+ char sz[10];
+ sprintf(sz, "hyper%1d.bd", i + 1);
+-fn = BuildFilename(sz);
++fn = BuildVarFilename(sz);
+ apbcHyper[i] = BearoffInit(fn, BO_NONE, NULL);
+ g_free(fn);
+ 			}
+--- gnubg-0.90+20120429.orig/gtkwindows.c
 gnubg-0.90+20120429/gtkwindows.c
+@@ -391,7 +391,7 @@ WarningOK ( GtkWidget *pw, warningType w
+ 
+ extern int GTKShowWarning(warningType warning, GtkWidget *pwParent)
+ {
+-	if (warnings[warning].warningEnabled)
++	if (fX && warnings[warning].warningEnabled)
+ 	{
+ 		char *buf;
+ 		GtkWidget *pwDialog, *pwMsg, *pwv, *label;
 --- gnubg-0.90+20120429.orig/mkinstalldirs
 +++ gnubg-0.90+20120429/mkinstalldirs
 @@ -1,21 +1,36 @@
@@ -170,66 +218,6 @@
 +# time-stamp-end: "; # UTC"
  # End:
 -# mkinstalldirs ends here
 gnubg-0.90+20120429.orig/eval.c
-+++ gnubg-0.90+20120429/eval.c
-@@ -652,7 +652,9 @@ extern void EvalInitialise(char *szWeigh
- 			pbc1 = BearoffInit ( NULL, BO_HEURISTIC, pfProgress );
- 
- 		/* read two-sided db from gnubg.bd */
--		gnubg_bearoff = BuildFilename("gnubg_ts0.bd");
-+		/* For Debian, load dynamic databases from /var/lib/gnubg
-+		   instead.  -- rra, 2008-02-16 */
-+		gnubg_bearoff = BuildVarFilename ( "gnubg_ts0.bd" );
- 		pbc2 = BearoffInit ( gnubg_bearoff, BO_IN_MEMORY | BO_MUST_BE_TWO_SIDED, NULL );
- 			g_free(gnubg_bearoff);
- 
-@@ -667,12 +669,12 @@ extern void EvalInitialise(char *szWeigh
- 	"You can also generate other bearoff databases; see\n"
- 	"README for more details\n\n" );
- 
--		gnubg_bearoff_os = BuildFilename("gnubg_os.bd");
-+		gnubg_bearoff_os = BuildVarFilename ( "gnubg_os.bd" );
- 		/* init one-sided db */
- 		pbcOS = BearoffInit ( gnubg_bearoff_os, BO_IN_MEMORY, NULL );
- 		g_free(gnubg_bearoff_os);
- 
--		gnubg_bearoff = BuildFilename("gnubg_ts.bd");
-+		gnubg_bearoff = BuildVarFilename("gnubg_ts.bd");
- 		/* init two-sided db */
- 		pbcTS = BearoffInit ( gnubg_bearoff, BO_IN_MEMORY, NULL );
- 		g_free(gnubg_bearoff);
-@@ -683,7 +685,7 @@ extern void EvalInitialise(char *szWeigh
- char *fn;
- char sz[10];
- sprintf(sz, "hyper%1d.bd", i + 1);
--fn = BuildFilename(sz);
-+fn = BuildVarFilename(sz);
- apbcHyper[i]

Bug#759312: wheezy-pu: package gnubg/0.90+20120429-1

[Adam D. Barratt]

Hi,

On 2014-08-26 5:30, Russ Allbery wrote:

The current gnubg in stable segfaults during "end game" when run with
the -t flag.  I got a request from one user to fix this in stable, at:

http://bugs.debian.org/754764

Upstream provided the relevant patch, which is quite straightforward
(attached).  May I upload this to stable for stable-proposed-updates?
The severity of the bug is rather borderline, but the fix is small
and unlikely to introduce any additional issues.


The patch looks fine, thanks. Just for a final confirmation, please 
could we have a debdiff of the proposed upload (against the current 
stable package); please use 0.90+20120429-1+deb7u1 as the version.


Regards,

Adam


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/1266535691332d5f03d8274aee6f6...@mail.adsl.funky-badger.org

Bug#759312: wheezy-pu: package gnubg/0.90+20120429-1

[Russ Allbery]

Package: release.debian.org
Severity: normal
Tags: wheezy
User: release.debian@packages.debian.org
Usertags: pu

Hello folks,

The current gnubg in stable segfaults during "end game" when run with
the -t flag.  I got a request from one user to fix this in stable, at:

http://bugs.debian.org/754764

Upstream provided the relevant patch, which is quite straightforward
(attached).  May I upload this to stable for stable-proposed-updates?
The severity of the bug is rather borderline, but the fix is small
and unlikely to introduce any additional issues.

Thanks!

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (990, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--- a/gtkwindows.c
+++ b/gtkwindows.c
@@ -391,7 +391,7 @@
 
 extern int GTKShowWarning(warningType warning, GtkWidget *pwParent)
 {
-	if (warnings[warning].warningEnabled)
+	if (fX && warnings[warning].warningEnabled)
 	{
 		char *buf;
 		GtkWidget *pwDialog, *pwMsg, *pwv, *label;
--- a/play.c
+++ b/play.c
@@ -3287,7 +3287,9 @@
 	int fDisplay_store = fDisplay;
 	int fQuiet_store = fQuiet;
 #if USE_BOARD3D
-	BoardData *bd = BOARD(pwBoard)->board_data;
+	BoardData *bd;
+	if (fX && pwBoard)
+		bd = BOARD(pwBoard)->board_data;
 #endif
 	const evalcontext ec_quick = { FALSE, 0, FALSE, TRUE, 0.0 };
 	int manual_dice = (rngCurrent == RNG_MANUAL); 
@@ -3326,7 +3328,8 @@
 	}
 
 #if USE_BOARD3D
-	SuspendDiceRolling(bd->rd);
+	if (fX)
+		SuspendDiceRolling(bd->rd);
 #endif
 
 	fAutoGame = FALSE;
@@ -3373,7 +3376,8 @@
 	}
 
 #if USE_BOARD3D
-	ResumeDiceRolling(bd->rd);
+	if (fX)
+		ResumeDiceRolling(bd->rd);
 #endif
 
 	if (!automaticTask)

Bug#743156: wheezy-pu: package ca-certificates/20130119+deb7u1

[Michael Shuler]

On 08/24/2014 02:12 PM, Adam D. Barratt wrote:

On 2014-03-31 1:25, Michael Shuler wrote:

I would like to upload ca-certificates to stable to include one important
patch to fix duplicate CKA_LABEL certificates, and bring the Mozilla CA
bundle up to date.  The stable debdiff is attached.


Does the upgrade issue you mentioned in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=743259#22 also apply
to this upload?


No, Wheezy does not have the same upgrade problem that Squeeze did.

Thanks,
Michael Shuler


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53fbf29f.60...@pbandjelly.org

Processed: Re: Bug#759300: wheezy-pu: package live-config/3.0.23-1+deb7u1

[Debian Bug Tracking System]

Processing control commands:

> tag -1 confirmed
Bug #759300 [release.debian.org] wheezy-pu: package live-config/3.0.23-1+deb7u1
Added tag(s) confirmed.

-- 
759300: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759300
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/handler.s.b759300.140901793810283.transcr...@bugs.debian.org

Bug#759300: wheezy-pu: package live-config/3.0.23-1+deb7u1

[Jonathan Wiltshire]

Control: tag -1 confirmed

On 2014-08-25 16:13, Luciano Bello wrote:
  After talking with Daniel, we agreed to update the patch for this 
(non-
critical security) bug via spu. This will allow to build the next 
debian-live

without the vulnerability.
  The problem is the following: Debian-live allows to SSH access with 
default

user and password. The patch disable ssh password authentication.
  The debdiff is attached.


Please go ahead.

Thanks,

--
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

 i have six years of solaris sysadmin experience, from
8->10. i am well qualified to say it is made from bonghits
layered on top of bonghits


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/b011f332bcfc45da1103313d00d86...@hogwarts.powdarrmonkey.net

Bug#758249: transition: liblas

[Julien Cristau]

On Sat, Aug 23, 2014 at 22:54:16 +0200, Ross Gammon wrote:

> All that is left is a binNMU for pktools now:
> 
> nmu pktools_2.5.3-1 . ALL . -m "Rebuild against libLAS 1.8.0."

Done for ALL -arm64 -hurd-i386 -ppc64el

Cheers,
Julien


signature.asc
Description: Digital signature

MariaDB in Jessie

[Jonathan Wiltshire]

Hi,

We (the release team) would like to find out your plans for MariaDB in
Jessie - chiefly, which version do you intend to ship?

Currently Jessie has version 5.5, and we would anticipate you shipping 5.6.

Thanks,

For the release team:
-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51



signature.asc
Description: Digital signature

MySQL in Jessie

[Jonathan Wiltshire]

Hi,

We (the release team) would like to find out your plans for MySQL in
Jessie.

Currently Jessie has version 5.5, and we would anticipate you shipping
5.6. Only experimental has seen an upload of 5.6. What's your plan here?

Given the situation with upstream's approach to security releases, the
security team are also in CC in case they have an opinion.

We'd ideally like a situation where we only ship one fork of the codebase,
so let's get your plans and take it from there.

Thanks,

For the release team:
-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51



signature.asc
Description: Digital signature

Processed: tagging 758249

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> tags 758249 + pending
Bug #758249 [release.debian.org] transition: liblas
Added tag(s) pending.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
758249: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758249
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/handler.s.c.140900838522866.transcr...@bugs.debian.org

Bug#759300: wheezy-pu: package live-config/3.0.23-1+deb7u1

[Luciano Bello]

Package: release.debian.org
Severity: normal
Tags: wheezy
User: release.debian@packages.debian.org
Usertags: pu

Hi,
  After talking with Daniel, we agreed to update the patch for this (non-
critical security) bug via spu. This will allow to build the next debian-live 
without the vulnerability.
  The problem is the following: Debian-live allows to SSH access with default 
user and password. The patch disable ssh password authentication.
  The debdiff is attached.

Thanks!

/lucianodiff -Nru live-config-3.0.23/debian/changelog live-config-3.0.23/debian/changelog
--- live-config-3.0.23/debian/changelog	2013-04-25 19:36:15.0 +0200
+++ live-config-3.0.23/debian/changelog	2014-08-26 00:48:24.0 +0200
@@ -1,3 +1,10 @@
+live-config (3.0.23-1+deb7u1) wheezy-proposed-updates; urgency=medium
+
+  * Non-maintainer upload.
+  * Disbaling ssh password authentication by default (Closes: #741678)
+
+ -- Luciano Bello   Tue, 26 Aug 2014 00:44:04 +0200
+
 live-config (3.0.23-1) unstable; urgency=low
 
   * Loading fglrx module with --ignore-install like the nvidia ones too.
diff -Nru live-config-3.0.23/debian/patches/PasswordAuthentication_no live-config-3.0.23/debian/patches/PasswordAuthentication_no
--- live-config-3.0.23/debian/patches/PasswordAuthentication_no	1970-01-01 01:00:00.0 +0100
+++ live-config-3.0.23/debian/patches/PasswordAuthentication_no	2014-08-26 00:43:49.0 +0200
@@ -0,0 +1,11 @@
+--- a/scripts/config/1170-openssh-server
 b/scripts/config/1170-openssh-server
+@@ -35,6 +35,8 @@
+ 		fi
+ 	done
+ 
++	sed -i -e 's|#\(PasswordAuthentication\) yes|\1 no|' /etc/ssh/sshd_config
++
+ 	case "${_SSH}" in
+ 		true)
+ 			# Creating state file
diff -Nru live-config-3.0.23/debian/patches/series live-config-3.0.23/debian/patches/series
--- live-config-3.0.23/debian/patches/series	1970-01-01 01:00:00.0 +0100
+++ live-config-3.0.23/debian/patches/series	2014-08-26 00:43:09.0 +0200
@@ -0,0 +1 @@
+PasswordAuthentication_no

Bug#759284: nmu: evolution_3.12.2-1+b1

[Andreas Henriksson]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: binnmu

Hello!

Because of gtkhtml4.0 shlibs having a strict lowest & highest allowed
versions all reverse dependencies have previously picked up a
<< 4.8 dependency.
Since gtkhtml4.0 4.8.4 was uploaded to the archive this meant that
a bunch of packages became uninstallable unfortunately.

Since the new gtkhtml4.0 includes updated shlibs, just rebuilding
the reverse dependencies should make them installable again.

This includes evolution, mail-notification and on some architectures
also libevolution.
(Also xiphos, but that is not part of testing and RC-buggy FTBFS.)

Lets see if I can get this right:

nmu evolution_3.12.2-1+b1 . ALL . -m "Rebuild to bump gtkhtml4.0 dependencies 
to << 4.10"
nmu mail-notification_5.4.dfsg.1-12 . ALL . -m "Rebuild to bump gtkhtml4.0 
dependencies to << 4.10"
nmu libevolution_3.12.5-1 . amd64 hurd-i386 mips powerpcspe ppc64 . -m "Rebuild 
to bump gtkhtml4.0 dependencies to << 4.10"



-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20140825200341.15096.27304.report...@mbpah.endian.se

Re: Haskell transition status

[Joachim Breitner]

Hi,


Am Montag, den 25.08.2014, 09:30 -0700 schrieb Joachim Breitner:
> Am Sonntag, den 24.08.2014, 18:36 -0700 schrieb Joachim Breitner:
> > small update: I just went through the various transitions problems and
> > discovered that a sizeable number of packages failed to build on
> > kfreebsd-* due to buildd-related error (out of disk) some week ago. I
> > gave them back.
> > 
> > That, and a give back of a failed build of haskell-http-conduit on
> > armel, should clear most, if not all, remaining transition blockers. I’m
> > looking forward to the next britney run.
> 
> looks good, only
> * armel: libghc-hakyll-dev, libghc-hakyll-prof
> remains, and that has built 7h hours ago (presumably not in time for
> this britney run).

and it seems that it went through anyways, probably because of the
glitch earlier that made a few package unininstallable in testing, so
this one issue did not worsen the situation. Or something.

Greetings,
Joachim

-- 
Joachim "nomeata" Breitner
Debian Developer
  nome...@debian.org | ICQ# 74513189 | GPG-Keyid: F0FBF51F
  JID: nome...@joachim-breitner.de | http://people.debian.org/~nomeata



signature.asc
Description: This is a digitally signed message part

Re: Haskell transition status

[Joachim Breitner]

Hi,


Am Sonntag, den 24.08.2014, 18:36 -0700 schrieb Joachim Breitner:
> small update: I just went through the various transitions problems and
> discovered that a sizeable number of packages failed to build on
> kfreebsd-* due to buildd-related error (out of disk) some week ago. I
> gave them back.
> 
> That, and a give back of a failed build of haskell-http-conduit on
> armel, should clear most, if not all, remaining transition blockers. I’m
> looking forward to the next britney run.

looks good, only
* armel: libghc-hakyll-dev, libghc-hakyll-prof
remains, and that has built 7h hours ago (presumably not in time for
this britney run).

Greetings,
Joachim

-- 
Joachim "nomeata" Breitner
Debian Developer
  nome...@debian.org | ICQ# 74513189 | GPG-Keyid: F0FBF51F
  JID: nome...@joachim-breitner.de | http://people.debian.org/~nomeata



signature.asc
Description: This is a digitally signed message part