Bug#784160: transition: proj
On 05/08/2015 11:26 AM, Emilio Pozuelo Monfort wrote: The current blockers are the cdo/ppc64el build failure (#763691) and the pdl/i386 one. Both cdo pdl are good now too, and so is xastir. For some reason postgis is still marked as bad on mips, but I don't understand why. The mips build for 2.1.7+dfsg-1 depends on libproj9 as expected, so it should be good. Kind Regards, Bas -- GPG Key ID: 4096R/6750F10AE88D4AF1 Fingerprint: 8182 DE41 7056 408D 6146 50D1 6750 F10A E88D 4AF1 -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/555048cc.3040...@xs4all.nl
Bug#784160: transition: proj
On 11/05/15 08:14, Sebastiaan Couwenberg wrote: On 05/08/2015 11:26 AM, Emilio Pozuelo Monfort wrote: The current blockers are the cdo/ppc64el build failure (#763691) and the pdl/i386 one. Both cdo pdl are good now too, and so is xastir. For some reason postgis is still marked as bad on mips, but I don't understand why. The mips build for 2.1.7+dfsg-1 depends on libproj9 as expected, so it should be good. That's because of the old binaries. emilio@tatooine:~$ grep-excuses postgis postgis (2.1.4+dfsg-3 to 2.1.7+dfsg-1) Maintainer: Debian GIS Project Too young, only 3 of 5 days old old binaries left on mips: liblwgeom-2.1.4 (from 2.1.4+dfsg-3) Not considered Depends: postgis proj (not considered) I've requested a decruft for both postgis and proj. Emilio -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/55505be8.8040...@debian.org
Bug#784962: jessie-pu: package caja/1.8.2-3+deb8u1
Control: tags -1 + confirmed On 2015-05-11 9:22, Mike Gabriel wrote: Please pre-approve the following changes for caja in Debian jessie: + * debian/patches: ++ Add 0004_avoid-automounts-while-screen-is-locked.patch. Don't mount + newly added USB flash drives / optical disks / etc. while a session + is locked by the screensaver. Delay the automounting action until the + session has been unlocked again. (Closes: #781608). Please go ahead. Assuming that this has a CVE ID, it's customary to mention that in the changelog. Regards, Adam -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/51328dc29959ee1d9f710ef03ac62...@mowgli.jungle.funky-badger.org
Processed: Re: Bug#784962: jessie-pu: package caja/1.8.2-3+deb8u1
Processing control commands: tags -1 + confirmed Bug #784962 [release.debian.org] jessie-pu: package caja/1.8.2-3+deb8u1 Added tag(s) confirmed. -- 784962: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784962 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/handler.s.b784962.14313396055614.transcr...@bugs.debian.org
Processed: Re: Bug#784964: jessie-pu: package mate-utils/1.8.1+dfsg1-2+deb8u1
Processing control commands: tags -1 + confirmed Bug #784964 [release.debian.org] jessie-pu: package mate-utils/1.8.1+dfsg1-2+deb8u1 Added tag(s) confirmed. -- 784964: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784964 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/handler.s.b784964.1431338949513.transcr...@bugs.debian.org
Bug#784964: jessie-pu: package mate-utils/1.8.1+dfsg1-2+deb8u1
Control: tags -1 + confirmed On 2015-05-11 9:14, Mike Gabriel wrote: Please pre-approve the following changes to mate-utils in Debian jessie: Pre-approve sounds like asking to ask. + * debian/patches: ++ Add 0002_fix-errmsg-text.patch. Show actual error message if loading of the + mate-screenshot UI fails. (Closes: #783162). This will fix a reported error message in mate-screenshot when the UI cannot be loaded. In the previous version, the reported error message was not exact and a wrong failure reason got reported. Please go ahead. Regards, Adam -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/f9cee5e495c0ce97485fc72a7bdab...@mowgli.jungle.funky-badger.org
Bug#784964: jessie-pu: package mate-utils/1.8.1+dfsg1-2+deb8u1
Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Please pre-approve the following changes to mate-utils in Debian jessie: + * debian/patches: ++ Add 0002_fix-errmsg-text.patch. Show actual error message if loading of the + mate-screenshot UI fails. (Closes: #783162). This will fix a reported error message in mate-screenshot when the UI cannot be loaded. In the previous version, the reported error message was not exact and a wrong failure reason got reported. ++ Update 2001_omit-gfdl-licensed-help-files.patch to avoid patch fuzziness. + Obviously, this patch update slipped through in previous builds. light+love, Mike -- System Information: Debian Release: 8.0 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) diff -Nru mate-utils-1.8.1+dfsg1/debian/changelog mate-utils-1.8.1+dfsg1/debian/changelog --- mate-utils-1.8.1+dfsg1/debian/changelog 2015-03-09 09:15:06.0 +0100 +++ mate-utils-1.8.1+dfsg1/debian/changelog 2015-05-11 10:06:47.0 +0200 @@ -1,3 +1,12 @@ +mate-utils (1.8.1+dfsg1-2+deb8u1) jessie-proposed-updates; urgency=medium + + * debian/patches: ++ Add 0002_fix-errmsg-text.patch. Show actual error message if loading of the + mate-screenshot UI fails. (Closes: #783162). ++ Update 2001_omit-gfdl-licensed-help-files.patch to avoid patch fuzziness. + + -- Mike Gabriel sunwea...@debian.org Mon, 11 May 2015 09:59:43 +0200 + mate-utils (1.8.1+dfsg1-2) unstable; urgency=medium * debian/patches: diff -Nru mate-utils-1.8.1+dfsg1/debian/patches/0002_fix-errmsg-text.patch mate-utils-1.8.1+dfsg1/debian/patches/0002_fix-errmsg-text.patch --- mate-utils-1.8.1+dfsg1/debian/patches/0002_fix-errmsg-text.patch 1970-01-01 01:00:00.0 +0100 +++ mate-utils-1.8.1+dfsg1/debian/patches/0002_fix-errmsg-text.patch 2015-05-11 10:06:47.0 +0200 @@ -0,0 +1,45 @@ +From c5e6b092764be2bbe668897fca7d977d5cbba57c Mon Sep 17 00:00:00 2001 +From: Monsta mon...@inbox.ru +Date: Tue, 16 Dec 2014 18:18:14 +0300 +Subject: [PATCH] mate-screenshot: show the actual error message when UI load + fails + +--- + mate-screenshot/screenshot-dialog.c | 11 +++ + 1 file changed, 7 insertions(+), 4 deletions(-) + +--- a/mate-screenshot/screenshot-dialog.c b/mate-screenshot/screenshot-dialog.c +@@ -211,6 +211,7 @@ + gint pos; + GFile *tmp_file; + GFile *parent_file; ++ GError *error = NULL; + guint res; + + tmp_file = g_file_new_for_uri (initial_uri); +@@ -223,8 +224,8 @@ + + dialog = g_new0 (ScreenshotDialog, 1); + +- dialog- ui = gtk_builder_new (); +- res = gtk_builder_add_from_file (dialog-ui, UIDIR /mate-screenshot.ui, NULL); ++ dialog-ui = gtk_builder_new (); ++ res = gtk_builder_add_from_file (dialog-ui, UIDIR /mate-screenshot.ui, error); + dialog-screenshot = screenshot; + + if (res == 0) +@@ -233,9 +234,11 @@ + dialog = gtk_message_dialog_new (NULL, 0, + GTK_MESSAGE_ERROR, + GTK_BUTTONS_OK, +- _(UI definition file for the screenshot program is missing.\n +- Please check your installation of mate-utils)); ++ _(Error loading UI definition file for the screenshot program: \n%s\n\n ++ Please check your installation of mate-utils.), error-message); + gtk_dialog_run (GTK_DIALOG (dialog)); ++ ++ g_error_free (error); + gtk_widget_destroy (dialog); + exit (1); + } diff -Nru mate-utils-1.8.1+dfsg1/debian/patches/2001_omit-gfdl-licensed-help-files.patch mate-utils-1.8.1+dfsg1/debian/patches/2001_omit-gfdl-licensed-help-files.patch --- mate-utils-1.8.1+dfsg1/debian/patches/2001_omit-gfdl-licensed-help-files.patch 2014-05-05 15:36:49.0 +0200 +++ mate-utils-1.8.1+dfsg1/debian/patches/2001_omit-gfdl-licensed-help-files.patch 2015-05-11 10:06:47.0 +0200 @@ -19,7 +19,7 @@ +SUBDIRS = src data pixmaps --- a/configure.ac +++ b/configure.ac -@@ -386,16 +386,13 @@ +@@ -385,16 +385,13 @@ baobab/pixmaps/24x24/Makefile baobab/pixmaps/scalable/Makefile baobab/src/Makefile @@ -36,7 +36,7 @@ gsearchtool/libmateui-deprecated/Makefile mate-dictionary/Makefile -@@ -407,7 +404,6 @@ +@@ -406,7 +403,6 @@ mate-dictionary/docs/reference/Makefile mate-dictionary/docs/reference/gdict/Makefile mate-dictionary/docs/reference/gdict/version.xml diff -Nru mate-utils-1.8.1+dfsg1/debian/patches/series mate-utils-1.8.1+dfsg1/debian/patches/series --- mate-utils-1.8.1+dfsg1/debian/patches/series 2015-03-09 09:13:32.0 +0100 +++ mate-utils-1.8.1+dfsg1/debian/patches/series 2015-05-11 09:58:26.0 +0200 @@ -1,2 +1,3 @@ 0001_mate-dictionary-fix-double-free-error.patch
Bug#784964: jessie-pu: package mate-utils/1.8.1+dfsg1-2+deb8u1
Hi Adam, On Mo 11 Mai 2015 12:09:00 CEST, Adam D. Barratt wrote: Control: tags -1 + confirmed On 2015-05-11 9:14, Mike Gabriel wrote: Please pre-approve the following changes to mate-utils in Debian jessie: Pre-approve sounds like asking to ask. ah right... I meant pre-upload approve, of course. ;-) + * debian/patches: ++ Add 0002_fix-errmsg-text.patch. Show actual error message if loading of the + mate-screenshot UI fails. (Closes: #783162). This will fix a reported error message in mate-screenshot when the UI cannot be loaded. In the previous version, the reported error message was not exact and a wrong failure reason got reported. Please go ahead. Uploaded and accepted in stable-new. light+love, Mike -- mike gabriel aka sunweaver (Debian Developer) fon: +49 (1520) 1976 148 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: sunwea...@debian.org, http://sunweavers.net pgpeFnJRy5iwV.pgp Description: Digitale PGP-Signatur
Bug#784963: jessie-pu: preapproval for gdnsd/2.1.2-1~deb8u1
Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Hi, I'd like to upload new version of gdnsd to spu. This would be a new upstream release, 2.1.2, but this is from the 2.1.x stable maintenance branch which contains only critical fixes. Upstream is using SemVer and has moved major releases to the 2.2.x versioning scheme (2.2.0 was released a few months ago). There are no Debian-related changes between 2.1.0-1 and 2.1.2-1[1]. Upstream-wise, the 2.1.0 - 2.1.2 work is 8 commits[2] which can be documented with the following changelog: 2.1.2 - 2015-05-06 * Cherrypicked manpage title bugfix from v2.2.0 - (was f7672493 there) (Because newer perl pod2man commands fail completely without a valid title) 2.1.1 - 2014-12-30 *** Bugfixes backported from master branch: * Fixed incorrect error-handling code for the sendmmsg() syscall, which could have caused an unecessary additional dropped packet and/or bad error messages after failing to send one or more packets from a set. * The per-address level udp_recv_width option is now correctly limited to a value of 64 (previously it was being incorrectly limited to 32). * plugin_multifo no longer pointlessly limits to 64 addrs per family * plugin_extmon bugfix for bad timeout/interval behavior if either 255s * if the stats http socket failed to bind() on startup, the daemon could carry on anyways, causing it to bind to a different, arbitrary port number * Fixed autoconf 2.63 compat when running autoreconf (broken in 2.1.0) 2.1.2-1 has been upload to unstable and has migrated to testing already. (I can attach a full debdiff if requested, essentially all upstream and same to jessie-stretch diff; let me know) Thanks for the consideration, Faidon 1: https://github.com/paravoid/gdnsd/commits/debian 2: https://github.com/gdnsd/gdnsd/commits/2.1.x -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150511092910.ga6...@dewey.void.home
Processed: Re: Bug#784963: jessie-pu: preapproval for gdnsd/2.1.2-1~deb8u1
Processing control commands: tags -1 + moreinfo Bug #784963 [release.debian.org] jessie-pu: preapproval for gdnsd/2.1.2-1~deb8u1 Added tag(s) moreinfo. -- 784963: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784963 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/handler.s.b784963.14313394024761.transcr...@bugs.debian.org
Bug#784963: jessie-pu: preapproval for gdnsd/2.1.2-1~deb8u1
Control: tags -1 + moreinfo On 2015-05-11 10:29, Faidon Liambotis wrote: I'd like to upload new version of gdnsd to spu. This would be a new upstream release, 2.1.2, but this is from the 2.1.x stable maintenance branch which contains only critical fixes. Upstream is using SemVer and has moved major releases to the 2.2.x versioning scheme (2.2.0 was released a few months ago). [...] 2.1.2-1 has been upload to unstable and has migrated to testing already. (I can attach a full debdiff if requested, essentially all upstream and same to jessie-stretch diff; let me know) Yes, please. (Specifically a full debdiff from Jessie to 2.1.2-1~deb8u1.) Regards, Adam -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/b75c05959a796a5d1ae8f307fc62c...@mowgli.jungle.funky-badger.org
Processed: Re: Bug#784946: jessie-pu: package feed2imap/1.2.3-1+deb8u1
Processing control commands: tags -1 + confirmed Bug #784946 [release.debian.org] jessie-pu: package feed2imap/1.2.3-1+deb8u1 Added tag(s) confirmed. -- 784946: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784946 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/handler.s.b784946.143134008710564.transcr...@bugs.debian.org
Bug#784946: jessie-pu: package feed2imap/1.2.3-1+deb8u1
Control: tags -1 + confirmed On 2015-05-11 0:57, Antonio Terceiro wrote: This fixes 2 regressions with regard to the wheezy version. Both changes are already in unstable as part of new upstream releases. Please go ahead. As a side note, #784591 should really be marked as found in 1.2.3-1. Regards, Adam -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/e61adddc96b0525ba67375d66db19...@mowgli.jungle.funky-badger.org
Bug#784962: jessie-pu: package caja/1.8.2-3+deb8u1
Hi Adam, On Mo 11 Mai 2015 12:19:57 CEST, Adam D. Barratt wrote: Control: tags -1 + confirmed On 2015-05-11 9:22, Mike Gabriel wrote: Please pre-approve the following changes for caja in Debian jessie: + * debian/patches: ++ Add 0004_avoid-automounts-while-screen-is-locked.patch. Don't mount + newly added USB flash drives / optical disks / etc. while a session + is locked by the screensaver. Delay the automounting action until the + session has been unlocked again. (Closes: #781608). Please go ahead. Thanks. Uploaded and accepted in stable-new. Assuming that this has a CVE ID, it's customary to mention that in the changelog. There is no CVE ID assigned afaik / until now. Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb pgpAwf_wqgDoo.pgp Description: Digitale PGP-Signatur
Bug#784998: jessie-pu: package ulogd2/2.0.4-2+deb8u1
Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Hi release team folks, I would like to do an upload to stable (jessie) to correct an important bug in ulogd2, a package I maintain. The bug is an endianness issue that prevents the JSON output plugin in ulogd2 from working correctly on big-endian systems. The bug has been reported to BTS as 784935: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784935 The issue is fixed in upstream version 2.0.5, which I have uploaded to sid today as 2.0.5-1. My upstream was kind enough to report the bug and isolate the necessary patch for stable. I have prepared an upload in a new Git branch on Alioth: http://anonscm.debian.org/cgit/collab-maint/ulogd2.git/log/?h=debian-jessie Here is the debdiff from 2.0.4-2 (current version in jessie) to 2.0.4-2+deb8u1: diff -Nru ulogd2-2.0.4/debian/changelog ulogd2-2.0.4/debian/changelog --- ulogd2-2.0.4/debian/changelog 2015-03-08 15:22:46.0 + +++ ulogd2-2.0.4/debian/changelog 2015-05-11 13:32:43.0 +0100 @@ -1,3 +1,12 @@ +ulogd2 (2.0.4-2+deb8u1) stable; urgency=medium + + * Begin a new debian-jessie branch: update debian/gbp.conf. + * Add upstream patch Fix-JSON-output-on-big-endian-systems.patch: +- Corrects JSON output of integer types on big-endian systems. + (Closes: #784935) + + -- Chris Boot deb...@bootc.net Mon, 11 May 2015 13:32:13 +0100 + ulogd2 (2.0.4-2) unstable; urgency=medium [ Andreas Beckmann ] diff -Nru ulogd2-2.0.4/debian/gbp.conf ulogd2-2.0.4/debian/gbp.conf --- ulogd2-2.0.4/debian/gbp.conf2014-07-27 09:51:25.0 +0100 +++ ulogd2-2.0.4/debian/gbp.conf2015-05-11 13:23:11.0 +0100 @@ -1,4 +1,5 @@ [DEFAULT] -debian-branch = debian +debian-branch = debian-jessie +dist = jessie pristine-tar = True diff -Nru ulogd2-2.0.4/debian/patches/Fix-JSON-output-on-big-endian-systems.patch ulogd2-2.0.4/debian/patches/Fix-JSON-output-on-big-endian-systems.patch --- ulogd2-2.0.4/debian/patches/Fix-JSON-output-on-big-endian-systems.patch 1970-01-01 01:00:00.0 +0100 +++ ulogd2-2.0.4/debian/patches/Fix-JSON-output-on-big-endian-systems.patch 2015-05-11 13:23:11.0 +0100 @@ -0,0 +1,52 @@ +From: Jimmy Jones jimmyjon...@gmx.co.uk +Subject: Fix JSON output on big endian systems +Acked-by: Eric Leblond e...@regit.org +Acked-by: Chris Boot deb...@bootc.net +Origin: upstream, commit:4f267553aede76dc91133ba88c69f8b8faf00b72 +Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784935 +Forwarded: not-needed +Last-Update: 2015-05-11 + +Corrects the output of JSON integers on big-endian systems. + +--- + output/ulogd_output_JSON.c | 11 +++ + 1 file changed, 11 insertions(+) + +diff --git a/output/ulogd_output_JSON.c b/output/ulogd_output_JSON.c +index e7ac642..3ad2620 100644 +--- a/output/ulogd_output_JSON.c b/output/ulogd_output_JSON.c +@@ -158,7 +158,11 @@ static int json_interp(struct ulogd_pluginstance *upi) + break; + case ULOGD_RET_BOOL: + case ULOGD_RET_INT8: ++ json_object_set_new(msg, field_name, json_integer(key-u.value.i8)); ++ break; + case ULOGD_RET_INT16: ++ json_object_set_new(msg, field_name, json_integer(key-u.value.i16)); ++ break; + case ULOGD_RET_INT32: + json_object_set_new(msg, field_name, json_integer(key-u.value.i32)); + break; +@@ -171,10 +175,17 @@ static int json_interp(struct ulogd_pluginstance *upi) + json_object_set_new(msg, action, json_string(blocked)); + break; + } ++ json_object_set_new(msg, field_name, json_integer(key-u.value.ui8)); ++ break; + case ULOGD_RET_UINT16: ++ json_object_set_new(msg, field_name, json_integer(key-u.value.ui16)); ++ break; + case ULOGD_RET_UINT32: ++ json_object_set_new(msg, field_name, json_integer(key-u.value.ui32)); ++ break; + case ULOGD_RET_UINT64: + json_object_set_new(msg, field_name, json_integer(key-u.value.ui64)); ++ break; + default: + /* don't know how to interpret this key. */ + break; +-- +2.1.4 + diff -Nru ulogd2-2.0.4/debian/patches/series ulogd2-2.0.4/debian/patches/series --- ulogd2-2.0.4/debian/patches/series 2014-04-13 11:42:32.0 +0100 +++ ulogd2-2.0.4/debian/patches/series 2015-05-11 13:23:11.0 +0100 @@ -2,3 +2,4 @@ enable-nflog-by-default.patch put-logfiles-in-var-log-ulog.patch ulogd8-ulogd2.patch +Fix-JSON-output-on-big-endian-systems.patch -- System Information: Debian
Bug#785047: jessie-pu: package vsftpd/3.0.2-17
Control: tags -1 + moreinfo On Mon, 2015-05-11 at 20:53 +0200, Jörg Frings-Fürst wrote: I have 2 patches for vsftpd 3.0.2-17+deb8u1: - patch for CVE-2015-1419 - patch for Debian bug #783077 Well, you also included some packaging changes, which I'm not currently happy with. +- Remove systemd files and directories when purging. Why? What is this achieving that isn't already handled by deb-systemd-helper and dpkg? In any case, https://piuparts.debian.org/jessie/pass/vsftpd_3.0.2-17.log indicates that -17 already purges cleanly with no left-over files. Regards Adam -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/1431372448.1995.13.ca...@adam-barratt.org.uk
Processed: Re: Bug#785047: jessie-pu: package vsftpd/3.0.2-17
Processing control commands: tags -1 + moreinfo Bug #785047 [release.debian.org] jessie-pu: package vsftpd/3.0.2-17 Added tag(s) moreinfo. -- 785047: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=785047 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/handler.s.b785047.143137245614988.transcr...@bugs.debian.org
Bug#784588: transition: speech-tools
Samuel Thibault, le Fri 08 May 2015 10:22:52 +0200, a écrit : Emilio Pozuelo Monfort, le Thu 07 May 2015 10:18:28 +0200, a écrit : Please go ahead. festival is currently unbuildable because of the unexisting libestools2.4-dev, and that is blocking another transition. So let's do this now. This is uploaded and waits in the ftp-master NEW queue. It got ACCEPTed, so stardict can be binNMUed. Samuel -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150511183407.ge3...@type.youpi.perso.aquilenet.fr
Bug#785047: jessie-pu: package vsftpd/3.0.2-17
Package: release.debian.org
Severity: normal
Tags: jessie
User: release.debian@packages.debian.org
Usertags: pu
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hi,
I have 2 patches for vsftpd 3.0.2-17+deb8u1:
- - patch for CVE-2015-1419
- - patch for Debian bug #783077
A debdiff is attached.
Thanks.
CU
Jörg
- -- System Information:
Debian Release: stretch/sid
APT prefers testing
APT policy: (900, 'testing'), (800, 'unstable'), (500, 'testing-updates'),
(1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/6 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1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=QBV+
-END PGP SIGNATURE-
diff -Nru vsftpd-3.0.2/debian/changelog vsftpd-3.0.2/debian/changelog
--- vsftpd-3.0.2/debian/changelog 2014-10-07 15:56:49.0 +0200
+++ vsftpd-3.0.2/debian/changelog 2015-05-11 20:51:26.0 +0200
@@ -1,3 +1,19 @@
+vsftpd (3.0.2-17+deb8u1) stable; urgency=medium
+
+ * Add patch debian/patches/0050-CVE-2015-1419.patch from 3.0.2-18:
+- Fix config option deny_file not always being handled correctly
+ CVE-2015-1419 (Closes: #776922).
+ * Add patch debian/patches/0055-set_default_listen.patch from 3.0.2-19:
+- Set the default value of tunable_listen to the same value of listen from
+ the man page vsftpd.conf (Closes: #783077).
+ * Add year 2015 to debian/copyright.
+ * debian/vsftpd.postrm:
+- Remove systemd files and directories when purging.
+- Replace fixed path with a POSIX-compliant shell function to check
+ the existence of a command.
+
+ -- Jörg Frings-Fürst deb...@jff-webhosting.net Mon, 11 May 2015 15:35:19 +0200
+
vsftpd (3.0.2-17) unstable; urgency=medium
* Add debian/patches/0035-address_space_limit.patch to increase the
diff -Nru vsftpd-3.0.2/debian/copyright vsftpd-3.0.2/debian/copyright
--- vsftpd-3.0.2/debian/copyright 2014-08-20 21:56:58.0 +0200
+++ vsftpd-3.0.2/debian/copyright 2015-05-11 15:47:38.0 +0200
@@ -10,7 +10,7 @@
Files: debian/*
Copyright: 2009-2014 Daniel Baumann m...@daniel-baumann.ch
- 2014 Jörg Frings-Fürst deb...@jff-webhosting.net
+ 2014-2015 Jörg Frings-Fürst deb...@jff-webhosting.net
License: GPL-2 with SSL exception
License: GPL-2 with SSL exception
diff -Nru vsftpd-3.0.2/debian/patches/0050-CVE-2015-1419.patch vsftpd-3.0.2/debian/patches/0050-CVE-2015-1419.patch
--- vsftpd-3.0.2/debian/patches/0050-CVE-2015-1419.patch 1970-01-01 01:00:00.0 +0100
+++ vsftpd-3.0.2/debian/patches/0050-CVE-2015-1419.patch 2015-02-24 16:41:52.0 +0100
@@ -0,0 +1,104 @@
+Description: CVE-2015-1419: config option deny_file is not handled correctly
+Author: Marcus Meissner meiss...@suse.com
+Origin: https://bugzilla.novell.com/show_bug.cgi?id=CVE-2015-1419
+Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776922
+Last-Update: 2015-02-24
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+Index: trunk/ls.c
+===
+--- trunk.orig/ls.c
trunk/ls.c
+@@ -7,6 +7,7 @@
+ * Would you believe, code to handle directory listing.
+ */
+
++#include stdlib.h
+ #include ls.h
+ #include access.h
+ #include defs.h
+@@ -243,11 +244,42 @@ vsf_filename_passes_filter(const struct
+ struct mystr temp_str = INIT_MYSTR;
+ struct mystr brace_list_str = INIT_MYSTR;
+ struct mystr new_filter_str = INIT_MYSTR;
++ struct mystr normalize_filename_str = INIT_MYSTR;
++ const char *normname;
++ const char *path;
+ int ret = 0;
+ char last_token = 0;
+ int must_match_at_current_pos = 1;
++
+ str_copy(filter_remain_str, p_filter_str);
+- str_copy(name_remain_str, p_filename_str);
++
++ /* normalize filepath */
++ path = str_strdup(p_filename_str);
++ normname = realpath(path, NULL);
++ if (normname == NULL)
++ goto out;
++ str_alloc_text(normalize_filename_str, normname);
++
++ if (!str_isempty (filter_remain_str) !str_isempty(normalize_filename_str)) {
++if (str_get_char_at(p_filter_str, 0) == '/') {
++ if (str_get_char_at(normalize_filename_str, 0) != '/') {
++str_getcwd (name_remain_str);
++
++if (str_getlen(name_remain_str) 1)
Bug#785047: jessie-pu: package vsftpd/3.0.2-17
Am 11.05.2015 um 21:27 schrieb Adam D. Barratt: Well, you also included some packaging changes, which I'm not currently happy with. +- Remove systemd files and directories when purging. Why? What is this achieving that isn't already handled by deb-systemd-helper and dpkg? Yes, please don't do that. Those deb-systemd-helper files are an implementation detail and should *not* be messed with by individual packages. -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth? signature.asc Description: OpenPGP digital signature
Bug#785047: jessie-pu: package vsftpd/3.0.2-17
Hi Adam,
first thanks for your comments.
Am Montag, den 11.05.2015, 20:27 +0100 schrieb Adam D. Barratt:
Control: tags -1 + moreinfo
On Mon, 2015-05-11 at 20:53 +0200, Jörg Frings-Fürst wrote:
I have 2 patches for vsftpd 3.0.2-17+deb8u1:
- patch for CVE-2015-1419
- patch for Debian bug #783077
Well, you also included some packaging changes, which I'm not currently
happy with.
+- Remove systemd files and directories when purging.
Why? What is this achieving that isn't already handled by
deb-systemd-helper and dpkg?
Yes. I have some piuparts messages about that. I check it again
tomorrow.
The changes at the .postrm file are reverted and a new debdiff is
attached.
In any case, https://piuparts.debian.org/jessie/pass/vsftpd_3.0.2-17.log
indicates that -17 already purges cleanly with no left-over files.
Regards
Adam
CU
Jörg
--
New:
GPG Fingerprint: 63E0 075F C8D4 3ABB 35AB 30EE 09F8 9F3C 8CA1 D25D
GPG key (long) : 09F89F3C8CA1D25D
GPG Key: 8CA1D25D
CAcert Key S/N : 0E:D4:56
Old pgp Key: BE581B6E (revoked since 2014-12-31).
Jörg Frings-Fürst
D-54526 Niederkail
Threema: SYR8SJXB
IRC: j_...@freenode.net
j_...@oftc.net
My wish list:
- Please send me a picture from the nature at your home.
diff -Nru vsftpd-3.0.2/debian/changelog vsftpd-3.0.2/debian/changelog
--- vsftpd-3.0.2/debian/changelog 2014-10-07 15:56:49.0 +0200
+++ vsftpd-3.0.2/debian/changelog 2015-05-11 21:34:05.0 +0200
@@ -1,3 +1,15 @@
+vsftpd (3.0.2-17+deb8u1) stable; urgency=medium
+
+ * Add patch debian/patches/0050-CVE-2015-1419.patch from 3.0.2-18:
+- Fix config option deny_file not always being handled correctly
+ CVE-2015-1419 (Closes: #776922).
+ * Add patch debian/patches/0055-set_default_listen.patch from 3.0.2-19:
+- Set the default value of tunable_listen to the same value of listen from
+ the man page vsftpd.conf (Closes: #783077).
+ * Add year 2015 to debian/copyright.
+
+ -- Jörg Frings-Fürst deb...@jff-webhosting.net Mon, 11 May 2015 15:35:19 +0200
+
vsftpd (3.0.2-17) unstable; urgency=medium
* Add debian/patches/0035-address_space_limit.patch to increase the
diff -Nru vsftpd-3.0.2/debian/copyright vsftpd-3.0.2/debian/copyright
--- vsftpd-3.0.2/debian/copyright 2014-08-20 21:56:58.0 +0200
+++ vsftpd-3.0.2/debian/copyright 2015-05-11 15:47:38.0 +0200
@@ -10,7 +10,7 @@
Files: debian/*
Copyright: 2009-2014 Daniel Baumann m...@daniel-baumann.ch
- 2014 Jörg Frings-Fürst deb...@jff-webhosting.net
+ 2014-2015 Jörg Frings-Fürst deb...@jff-webhosting.net
License: GPL-2 with SSL exception
License: GPL-2 with SSL exception
diff -Nru vsftpd-3.0.2/debian/patches/0050-CVE-2015-1419.patch vsftpd-3.0.2/debian/patches/0050-CVE-2015-1419.patch
--- vsftpd-3.0.2/debian/patches/0050-CVE-2015-1419.patch 1970-01-01 01:00:00.0 +0100
+++ vsftpd-3.0.2/debian/patches/0050-CVE-2015-1419.patch 2015-02-24 16:41:52.0 +0100
@@ -0,0 +1,104 @@
+Description: CVE-2015-1419: config option deny_file is not handled correctly
+Author: Marcus Meissner meiss...@suse.com
+Origin: https://bugzilla.novell.com/show_bug.cgi?id=CVE-2015-1419
+Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776922
+Last-Update: 2015-02-24
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+Index: trunk/ls.c
+===
+--- trunk.orig/ls.c
trunk/ls.c
+@@ -7,6 +7,7 @@
+ * Would you believe, code to handle directory listing.
+ */
+
++#include stdlib.h
+ #include ls.h
+ #include access.h
+ #include defs.h
+@@ -243,11 +244,42 @@ vsf_filename_passes_filter(const struct
+ struct mystr temp_str = INIT_MYSTR;
+ struct mystr brace_list_str = INIT_MYSTR;
+ struct mystr new_filter_str = INIT_MYSTR;
++ struct mystr normalize_filename_str = INIT_MYSTR;
++ const char *normname;
++ const char *path;
+ int ret = 0;
+ char last_token = 0;
+ int must_match_at_current_pos = 1;
++
+ str_copy(filter_remain_str, p_filter_str);
+- str_copy(name_remain_str, p_filename_str);
++
++ /* normalize filepath */
++ path = str_strdup(p_filename_str);
++ normname = realpath(path, NULL);
++ if (normname == NULL)
++ goto out;
++ str_alloc_text(normalize_filename_str, normname);
++
++ if (!str_isempty (filter_remain_str) !str_isempty(normalize_filename_str)) {
++if (str_get_char_at(p_filter_str, 0) == '/') {
++ if (str_get_char_at(normalize_filename_str, 0) != '/') {
++str_getcwd (name_remain_str);
++
++if (str_getlen(name_remain_str) 1) /* cwd != root dir */
++ str_append_char (name_remain_str, '/');
++
++str_append_str (name_remain_str, normalize_filename_str);
++ }
++ else
++ str_copy (name_remain_str, normalize_filename_str);
++} else {
++ if (str_get_char_at(p_filter_str, 0) != '{')
++str_basename (name_remain_str, normalize_filename_str);
++ else
Processed: Add blocks on 784935 by 784998
Processing commands for cont...@bugs.debian.org:
block 784935 by 784998
Bug #784935 {Done: Chris Boot deb...@bootc.net} [ulogd2-json] ulogd2-json:
JSON output is invalid on big endian system
784935 was not blocked by any bugs.
784935 was not blocking any bugs.
Added blocking bug(s) of 784935: 784998
thanks
Stopping processing here.
Please contact me if you need assistance.
--
784935: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784935
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive:
https://lists.debian.org/handler.s.c.143136510930854.transcr...@bugs.debian.org
