Bug#860022: Bug#859935: Bug#860022: unblock: bsd-mailx/8.1.2-0.20160123cvs-3.1 (pre-approval)

2017-04-14 Thread Robert Luberda
Niels Thykier wrote:
> 
>  * Should we update some documentation to reflect these changes?  Like a
>man page or so?

I've updated man page and added NEWS entry. Attached is full debdiff.
Could you please look at it?

> 
> Re: 7-bit only.  You are right that would be even better in the long run
> as it would not require a 8bit compatible MTA unnecessarily.  Though
> that smells like a post release thing.

Yes, it surely will be too big change to do it now.

Thanks,
robert

Comparing bsd-mailx_8.1.2-0.20160123cvs-3.dsc 
bsd-mailx_8.1.2-0.20160123cvs-4.dsc
diff -Nru bsd-mailx-8.1.2-0.20160123cvs/debian/bsd-mailx.NEWS 
bsd-mailx-8.1.2-0.20160123cvs/debian/bsd-mailx.NEWS
--- bsd-mailx-8.1.2-0.20160123cvs/debian/bsd-mailx.NEWS 1970-01-01 
01:00:00.0 +0100
+++ bsd-mailx-8.1.2-0.20160123cvs/debian/bsd-mailx.NEWS 2017-04-15 
00:35:42.0 +0200
@@ -0,0 +1,10 @@
+bsd-mailx (8.1.2-0.20160123cvs-4) unstable; urgency=medium
+
+   Since this version MIME headers are added to every outgoing mail
+   to indicate the correct local charset (from the POSIX locale)
+   and transfer encoding (always 8bit).
+
+   See "Character sets and MIME" in bsd-mailx(1) man page
+   and Bug#859935 for more information.
+
+ -- Robert Luberda   Sat, 15 Apr 2017 00:11:27 +0200
diff -Nru bsd-mailx-8.1.2-0.20160123cvs/debian/changelog 
bsd-mailx-8.1.2-0.20160123cvs/debian/changelog
--- bsd-mailx-8.1.2-0.20160123cvs/debian/changelog  2016-05-07 
09:34:12.0 +0200
+++ bsd-mailx-8.1.2-0.20160123cvs/debian/changelog  2017-04-15 
00:35:42.0 +0200
@@ -1,3 +1,13 @@
+bsd-mailx (8.1.2-0.20160123cvs-4) unstable; urgency=medium
+
+  * 33-Add-MIME-headers.patch: Add MIME headers to every mail to indicate
+charset and transfer encoding (closes: #859935, LP: #733971), and
+describe the new behavior in the man page.
+Many thanks to Thorsten Glaser for the idea and the initial patch.
+  * Add debian/bsd-mailx.NEWS entry for the above change.
+
+ -- Robert Luberda   Sat, 15 Apr 2017 00:35:42 +0200
+
 bsd-mailx (8.1.2-0.20160123cvs-3) unstable; urgency=medium
 
   * Make the `-b' option work again: update 03-Base-fixes-2.patch to revert
diff -Nru 
bsd-mailx-8.1.2-0.20160123cvs/debian/patches/33-Add-MIME-headers.patch 
bsd-mailx-8.1.2-0.20160123cvs/debian/patches/33-Add-MIME-headers.patch
--- bsd-mailx-8.1.2-0.20160123cvs/debian/patches/33-Add-MIME-headers.patch  
1970-01-01 01:00:00.0 +0100
+++ bsd-mailx-8.1.2-0.20160123cvs/debian/patches/33-Add-MIME-headers.patch  
2017-04-15 00:35:42.0 +0200
@@ -0,0 +1,158 @@
+From: Robert Luberda 
+Date: Thu, 13 Apr 2017 23:39:39 +0200
+Subject: Add MIME headers unless set by user
+
+Generate the three following headers by default:
+  MIME-Version: 1.0
+  Content-Type: text/plain; charset=""
+  Content-Transfer-Encoding: 8bit
+
+However allow a user to override each of them with the -a flag.
+Example:
+   bsd-mailx -a "Content-Type: text/html; charset=UTF-8"
+uses the above user-provided Content-Type, but still adds
+the default MIME-Version and Content-Transfer-Encoding headers.
+
+Bugs-Debian: https://bugs.debian.org/859935
+---
+ mail.1 | 28 +++-
+ main.c |  4 
+ send.c | 43 +++
+ 3 files changed, 74 insertions(+), 1 deletion(-)
+
+diff --git a/mail.1 b/mail.1
+index b1bde8f..88949be 100644
+--- a/mail.1
 b/mail.1
+@@ -67,7 +67,13 @@ The options are as follows:
+ .Bl -tag -width Ds
+ .It Fl a
+ Specify additional header fields on the command line such as "X-Loop:
+-foo@bar" etc.  You have to use quotes if the string contains spaces.
++foo@bar" etc.
++It can be also used to override MIME headers
++.Nm mail
++adds by default to each outgoing mail, see
++.Sx Character sets and MIME
++below.
++You have to use quotes if the string contains spaces.
+ This argument may be specified more than once, the headers will then
+ be concatenated.
+ .It Fl b Ar bcc-addr
+@@ -366,6 +372,26 @@ If the
+ .Ic expandaddr
+ option is not set (the default), no expansion is performed and
+ the recipient is treated as a local or network mail address.
++.Ss Character sets and MIME
++Generally
++.Nm mail
++does not handle neither different character sets nor any other MIME
++feature.  Especially it does not perform any any conversions between
++character sets while displaying or sending mails.
++.Pp
++Starting from April 2017, however, as a Debian extension this version of
++.Nm mail
++adds a few MIME headers to every outgoing mail in order to indicate
++that the mail is sent as 8-bit plain text data that uses character
++set encoding detected from the current
++.Xr locale 7
++settings.
++The
++.Fl a
++command-line option can be used to override those headers, for example:
++.Dl $  mail -a 'Content-Type: text/plain; charset="ISO-8859-1"'
++sets header indicating legacy character encoding.
++.Pp
+ .Ss Network mail (ARPA, UUCP, Berknet)
+ See
+ .Xr mailaddr 7
+diff --git a/main.c b/main.c
+index 07ad856..4cb

Bug#860349: unblock: chromium-browser/57.0.2987.133-1

2017-04-14 Thread Michael Gilbert
package: release.debian.org
user: release.debian@packages.debian.org
usertags: unblock

Please consider unblocking chromium.  This updates to the latest
stable upstream security release with no other changes.

Best wishes,
Mike



Bug#860346: unblock: oce/0.17.2-2

2017-04-14 Thread Anton Gladky
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package oce

The upstream has found and fixed an annoying bug [1] in
oce. Debian and Ubuntu packages are affected. OCE_LIBRARIES
wrongly includes DRAWEX if -DOCE_DRAW=ON.

The attached patch was cherry-picked from upstream repo.

unblock oce/0.17.2-2


[1] https://github.com/tpaviot/oce/issues/660

Thanks,

Anton
diff -Nru oce-0.17.2/debian/changelog oce-0.17.2/debian/changelog
--- oce-0.17.2/debian/changelog 2016-06-16 23:05:45.0 +0200
+++ oce-0.17.2/debian/changelog 2017-04-14 22:35:14.0 +0200
@@ -1,3 +1,10 @@
+oce (0.17.2-2) unstable; urgency=medium
+
+  [ Janus Weil ]
+  * [c25582f] Prevent DRAWEXE from being added to OCE_LIBRARIES.
+
+ -- Anton Gladky   Fri, 14 Apr 2017 22:35:14 +0200
+
 oce (0.17.2-1) unstable; urgency=medium
 
   * [776089c] Imported Upstream version 0.17.2
diff -Nru oce-0.17.2/debian/patches/do_not_add_drawexe.patch 
oce-0.17.2/debian/patches/do_not_add_drawexe.patch
--- oce-0.17.2/debian/patches/do_not_add_drawexe.patch  1970-01-01 
01:00:00.0 +0100
+++ oce-0.17.2/debian/patches/do_not_add_drawexe.patch  2017-04-14 
22:33:04.0 +0200
@@ -0,0 +1,25 @@
+From 340781368c4d1902887fe6a5b7288cce5eb53456 Mon Sep 17 00:00:00 2001
+From: Janus Weil 
+Date: Sun, 12 Mar 2017 16:47:28 +0100
+Subject: [PATCH] prevent DRAWEXE from being added to OCE_LIBRARIES * see issue
+ #660
+
+---
+ CMakeLists.txt | 4 +++-
+ 1 file changed, 3 insertions(+), 1 deletion(-)
+
+diff --git a/CMakeLists.txt b/CMakeLists.txt
+index 19e9705..c379b3c 100644
+--- a/CMakeLists.txt
 b/CMakeLists.txt
+@@ -990,7 +990,9 @@ macro(process_module modulename modules_std)
+   list(APPEND modules ${ARGN})
+   endif(NOT OCE_DISABLE_X11)
+   foreach(module ${modules})
+-  list(APPEND OCE_LIBRARIES ${module})
++  if(NOT module MATCHES ".*EXE")
++  list(APPEND OCE_LIBRARIES ${module})
++  endif()
+   set(TOOLKIT_MODULES "")
+   set(TOOLKIT_DEPENDS "")
+   set(TOOLKIT_INCLUDE_DIRECTORIES "")
diff -Nru oce-0.17.2/debian/patches/series oce-0.17.2/debian/patches/series
--- oce-0.17.2/debian/patches/series2016-01-29 13:01:05.0 +0100
+++ oce-0.17.2/debian/patches/series2017-04-14 22:33:49.0 +0200
@@ -1,2 +1,3 @@
 split-export.patch
 speedup-BRepMesh_test.patch
+do_not_add_drawexe.patch


Bug#860339: marked as done (unblock: mimetic/0.9.8-5)

2017-04-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Apr 2017 19:57:00 +
with message-id 
and subject line Re: Bug#860339: unblock: mimetic/0.9.8-5
has caused the Debian Bug report #860339,
regarding unblock: mimetic/0.9.8-5
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
860339: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860339
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

unblock mimetic/0.9.8-5

I've uploaded a new version of mimetic which fixes #859963.
The -5 upload only contains a small patch to mark a variable as
signed in order to avoid the build failures on architectures where
char is unsigned.

0.9.8-5 successfully built on all architectures (except armel, which
is still Needs-Build …).

Full debdiff attached.

Thanks in advance,
gregor

-BEGIN PGP SIGNATURE-
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=IIGh
-END PGP SIGNATURE-
diff -Nru mimetic-0.9.8/debian/changelog mimetic-0.9.8/debian/changelog
--- mimetic-0.9.8/debian/changelog  2016-01-15 15:29:38.0 +0100
+++ mimetic-0.9.8/debian/changelog  2017-04-14 17:38:11.0 +0200
@@ -1,3 +1,11 @@
+mimetic (0.9.8-5) unstable; urgency=medium
+
+  * Add patch signed-char.patch to fix build failure on architectures
+where char is unsigned.
+Thanks to Adrian Bunk for the bug report. (Closes: #859963)
+
+ -- gregor herrmann   Fri, 14 Apr 2017 17:38:11 +0200
+
 mimetic (0.9.8-4) unstable; urgency=medium
 
   * debian/rules: change dh_strip argument from --ddeb-migration to
diff -Nru mimetic-0.9.8/debian/patches/series 
mimetic-0.9.8/debian/patches/series
--- mimetic-0.9.8/debian/patches/series 1970-01-01 01:00:00.0 +0100
+++ mimetic-0.9.8/debian/patches/series 2017-04-14 17:38:11.0 +0200
@@ -0,0 +1 @@
+signed-char.patch
diff -Nru mimetic-0.9.8/debian/patches/signed-char.patch 
mimetic-0.9.8/debian/patches/signed-char.patch
--- mimetic-0.9.8/debian/patches/signed-char.patch  1970-01-01 
01:00:00.0 +0100
+++ mimetic-0.9.8/debian/patches/signed-char.patch  2017-04-14 
17:38:11.0 +0200
@@ -0,0 +1,31 @@
+Description: fix FTBFS on architectures where char is unsigned
+ Fix error
+   base64.cxx:30:1: error: narrowing conversion of '-1' from 'int' to 'char' 
inside { } [-Wnarrowing]
+ by making Base64::sDecTable a signed char.
+Bug-Debian: https://bugs.debian.org/859963
+Forwarded: via email
+Author: gregor herrmann 
+Last-Update: 2017-04-10
+
+--- a/mimetic/codec/base64.cxx
 b/mimetic/codec/base64.cxx
+@@ -13,7 +13,7 @@
+ "abcdefghijklmnopqrstuvwxyz"
+ "0123456789+/=";
+ 
+-const char Base64::sDecTable[] = {
++const signed char Base64::sDecTable[] = {
+ -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
+ -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
+ -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
+--- a/mimetic/codec/base64.h
 b/mimetic/codec/base64.h
+@@ -20,7 +20,7 @@
+ enum { default_maxlen = 76 };
+ enum { eq_sign = 100 };
+ static const char sEncTable[];
+-static const char sDecTable[];
++static const signed char sDecTable[];
+ static const int sDecTableSz;
+ public:
+ class Encoder; class Decoder;
--- End Message ---
--- Begin Message ---
gregor herrmann:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: unblock
> 
> unblock mimetic/0.9.8-5
> 
> I've uploaded a new version of mimetic which fixes #859963.
> The -5 upload only contains a small patch to mark a variable as
> signed in order to avoid the build failures on architectures where
> char is unsigned.
> 
> 0.9.8-5 successfully built on all arc

Bug#858163: unblock: gitlab/8.13.11+dfsg-6

2017-04-14 Thread Niels Thykier
Control: tags -1 moreinfo

Pirate Praveen:
> Package: release.debian.org
> Severity: normal
> User: release.debian@packages.debian.org
> Usertags: unblock
> 
> Please unblock package gitlab
> 
> This fixes RC bug #857967. Also sine the version in stretch is currently
> not installable, please reduce the age.
> 
> debdiff with 8.13.11+dfsg-5 attached (changes upto this version is
> already approved)
> 
> unblock gitlab/8.13.11+dfsg-6
> 
> [...]

Hi Pirate,

Sorry for the delay in getting back to you.

I have reviewed gitlab and I got some remarks.  Please note that some of
these may be remarks that we should have noticed in earlier reviews.
Apologies for overlooking them previously if this is the case, but I
decided to review some of the files from the original source files
rather than the diff.

 * In the postrm (RC bug):

"""
su ${gitlab_user} -c 'psql gitlab_production -c ""' && \
   su postgres -c "dropdb gitlab_production"
"""

This does not appear to be idempotent.  If the database is dropped but a
later part of the purge fails, then this line will prevent dpkg from
rerunning the purge and reach the desired state (as the code is run
under "set -e")

You probably want something like:

"""
  if su ${gitlab_user} -c 'psql gitlab_production -c ""'; then
 su postgres -c "dropdb gitlab_production"
  fi
"""

A similar remark can be made for the following code where it would be
prudent to apply the same fix:

"""
test -e ${gitlab_log_dir} && rm -rf ${gitlab_log_dir}
test -e ${gitlab_cache_path} && rm -rf ${gitlab_cache_path}
test -e ${gitlab_pid_path} && rm -rf ${gitlab_pid_path}
test -e ${gitlab_data_dir} && rm -rf ${gitlab_data_dir}
[...]
id -u ${gitlab_user} && userdel -r ${gitlab_user}

[...]
test -f ${nginx_site} && echo "Found nginx site"
[...]
# remove the configuration file itself
test -f ${nginx_site} && rm -f ${nginx_site}
test -f ${gitlab_debian_conf} && rm -f ${gitlab_debian_conf}
test -f ${gitlab_yml} && rm -f ${gitlab_yml}
test -f ${gitlab_tmpfiles} && rm -f ${gitlab_tmpfiles}
test -f ${gitlab_shell_config} && rm -f ${gitlab_shell_config}
  [...]
  test -n "${nginx_site}" && ucf --purge ${nginx_site}
  test -n "${gitlab_debian_conf}" && ucf --purge ${gitlab_debian_conf}
  test -n "${gitlab_yml}" && ucf --purge ${gitlab_yml}
  test -n "${gitlab_tmpfiles}" && ucf --purge ${gitlab_tmpfiles}
  test -n "${gitlab_shell_config}" && ucf -purge ${gitlab_shell_config}
  [...]
  test -n "${nginx_site}" && ucfr --purge gitlab ${nginx_site}
  test -n "${gitlab_debian_conf}" && ucfr --purge gitlab
${gitlab_debian_conf}
  test -n "${gitlab_yml}" && ucfr --purge gitlab ${gitlab_yml}
  test -n "${gitlab_tmpfiles}" && ucfr --purge gitlab ${gitlab_tmpfiles}
  test -n "${gitlab_shell_config}" && ucfr -purge gitlab
${gitlab_shell_config}

"""

Note I got a follow up remark for the "id+userdel" line below.  As for
the "test -n", these mean that the script will fail if these values are
not (still) present in the config OR worse - if the gitlab config is
already deleted (this is also listed a separate item below)



 * debian/postrm (RC bug):

The postrm will fail if the admin removes the gitlab config files prior
to purging gitlab.  This happens because then most of the variables are
set and as shown above, this will make several test statements evaluate
to false on the left-hand-side of an && under "set -e".

Admittedly, this is partly mitigated by gitlab providing its own default
as a copy under /var/lib/gitlab/gitlab-debian.defaults.  But in theory,
the machine could fail after removing
"/var/lib/gitlab/gitlab-debian.defaults" but prior to dpkg committing
that it had purged gitlab.

It is an unlikely corner-case, but as it leaves the admin with an
unpurgeable package it is RC.  To my knowledge, it is *not* sufficient
to make the removal of the /var/lib file the last thing.  That just
narrows the window for the issue without fixing it.

 * debian/postrm (important)

As I recall, the general consensus on handling of system users is that
we should lock them rather than remove them.  The gitlab postrm deletes
the user:

"""
id -u ${gitlab_user} && userdel -r ${gitlab_user}
"""

That said, I believe gitlab is not the only package deleting the user,
so it is not RC.

 * debian/config (important/RC bug):

The config file uses the debconf database as a registry.  It should
"pre-seed" itself with the defaults from the configuration files.  See
"man 8 debconf-devel" under "config file handling":

https://manpages.debian.org/jessie/debconf-doc/debconf-devel.7.en.html#ADVANCED_PROGRAMMING_WITH_DEBCONF


 * debian/postinst (RC bug):

"""
  # Override User for systemd services
  for service in mailroom unicorn sidekiq workhorse; do
path=/etc/systemd/system/gitlab-${service}.service.d
mkdir -p $path
printf "[Service]\nUser=${gitlab_user}\n" > $path/

Processed: Re: Bug#858163: unblock: gitlab/8.13.11+dfsg-6

2017-04-14 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 moreinfo
Bug #858163 [release.debian.org] unblock: gitlab/8.13.11+dfsg-7
Added tag(s) moreinfo.

-- 
858163: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858163
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Re: [Piuparts-devel] [stretch] Status on upgrade paths

2017-04-14 Thread Niels Thykier
Andreas Beckmann:
> On 2017-04-12 13:26, Niels Thykier wrote:
>> I see you have been busy filing bugs for issues in the upgrade path.
>> Many thanks for that, it is greatly appreciated. :)
>>
>> Do you have an overview of how the upgrade paths are looking these days?
>>  Like how much have we tested vs. how much is missing?
> 
> I don't think I have much backlog left (usually taking logs from my 
> piuparts instance, we only recently started running more complicated 
> upgrade paths on piuparts.d.o).

Thanks, that is great to hear. :)

> But I don't always catch buggy uploads to sid that are unblocked+aged/2 :-)
> 

Are these bugs something we could (reasonably) stop via the Britney
integration for buster?  Admittedly, it would be "always" on, so we have
to be careful that we have few false positives on the RC bugginess of
the issue spotted by piuparts.

In particular, the the symlink_to_dir/dir_to_symlink migrations bugs
appears to be quite common, so I would be interested in getting them
stopped at Britney if possible.

> Concerning "kept back" packages:
> 
> https://piuparts.debian.org/jessie2stretch/packages_have_been_kept_back_issue.html
> https://piuparts.debian.org/jessie2stretch-rcmd/packages_have_been_kept_back_issue.html
> (these lists are too long, retesting them is queued, most should be
> fixed by libstdc++6 now having Breaks: libopenmpi1.6)
> * ignore packages no longer existing in stretch (version=None)
> * a nasty one is jakuk
   ^

Is that the actual package name?  I cannot find any patches for it in
unstable.

> [...]
> * code-saturne-bin seems to get bitten by libopenmpi1.6 in stretch 
>   carrying a Conflicts: libopenmpi2 (which we have in stretch)
>   that is a bug in apt (but I don't think I even filed that one)
>   see #859986 against libopenmpi1.6 in jessie which must be fixed
>   in the upcoming point release (otherwise it's hopefully too late)
>   but a better solution would be welcome that does not require
>   fixes in stable
> 

Worst case, we will have to document it in the release notes until it is
fixed in jessie.

> [...]
> * gitlab is waiting for migration (hint outdated), sid version is
>   probably not worse than (uninstallable) stretch version
> 

Ok, I got a few remarks for it, so I will follow up with the maintainer.
 But I suspect you are right the that the sid version is better than the
stretch version atm.

> * metaphlan2-data and pv-grub-menu have downgraded bugs, OK for me
> 
> 
> Andreas
> 

Ok, thanks, :)
~Niels





Bug#860339: unblock: mimetic/0.9.8-5

2017-04-14 Thread gregor herrmann
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

unblock mimetic/0.9.8-5

I've uploaded a new version of mimetic which fixes #859963.
The -5 upload only contains a small patch to mark a variable as
signed in order to avoid the build failures on architectures where
char is unsigned.

0.9.8-5 successfully built on all architectures (except armel, which
is still Needs-Build …).

Full debdiff attached.

Thanks in advance,
gregor

-BEGIN PGP SIGNATURE-
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=IIGh
-END PGP SIGNATURE-
diff -Nru mimetic-0.9.8/debian/changelog mimetic-0.9.8/debian/changelog
--- mimetic-0.9.8/debian/changelog  2016-01-15 15:29:38.0 +0100
+++ mimetic-0.9.8/debian/changelog  2017-04-14 17:38:11.0 +0200
@@ -1,3 +1,11 @@
+mimetic (0.9.8-5) unstable; urgency=medium
+
+  * Add patch signed-char.patch to fix build failure on architectures
+where char is unsigned.
+Thanks to Adrian Bunk for the bug report. (Closes: #859963)
+
+ -- gregor herrmann   Fri, 14 Apr 2017 17:38:11 +0200
+
 mimetic (0.9.8-4) unstable; urgency=medium
 
   * debian/rules: change dh_strip argument from --ddeb-migration to
diff -Nru mimetic-0.9.8/debian/patches/series 
mimetic-0.9.8/debian/patches/series
--- mimetic-0.9.8/debian/patches/series 1970-01-01 01:00:00.0 +0100
+++ mimetic-0.9.8/debian/patches/series 2017-04-14 17:38:11.0 +0200
@@ -0,0 +1 @@
+signed-char.patch
diff -Nru mimetic-0.9.8/debian/patches/signed-char.patch 
mimetic-0.9.8/debian/patches/signed-char.patch
--- mimetic-0.9.8/debian/patches/signed-char.patch  1970-01-01 
01:00:00.0 +0100
+++ mimetic-0.9.8/debian/patches/signed-char.patch  2017-04-14 
17:38:11.0 +0200
@@ -0,0 +1,31 @@
+Description: fix FTBFS on architectures where char is unsigned
+ Fix error
+   base64.cxx:30:1: error: narrowing conversion of '-1' from 'int' to 'char' 
inside { } [-Wnarrowing]
+ by making Base64::sDecTable a signed char.
+Bug-Debian: https://bugs.debian.org/859963
+Forwarded: via email
+Author: gregor herrmann 
+Last-Update: 2017-04-10
+
+--- a/mimetic/codec/base64.cxx
 b/mimetic/codec/base64.cxx
+@@ -13,7 +13,7 @@
+ "abcdefghijklmnopqrstuvwxyz"
+ "0123456789+/=";
+ 
+-const char Base64::sDecTable[] = {
++const signed char Base64::sDecTable[] = {
+ -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
+ -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
+ -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
+--- a/mimetic/codec/base64.h
 b/mimetic/codec/base64.h
+@@ -20,7 +20,7 @@
+ enum { default_maxlen = 76 };
+ enum { eq_sign = 100 };
+ static const char sEncTable[];
+-static const char sDecTable[];
++static const signed char sDecTable[];
+ static const int sDecTableSz;
+ public:
+ class Encoder; class Decoder;


Bug#859708: marked as done (unblock: kodi/2:17.1+dfsg1-2)

2017-04-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Apr 2017 17:52:00 +
with message-id 
and subject line Re: Bug#859708: unblock: kodi/2:17.1+dfsg1-2
has caused the Debian Bug report #859708,
regarding unblock: kodi/2:17.1+dfsg1-2
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
859708: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859708
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Dear Release Team,

Current kodi version in Stretch is 2:17.0+dfsg1-3 but upstream
already released Kodi 17.1 which is available from experimental
as 2:17.1+dfsg1-1.

Among many other bugfixes it fixes #847701 which made kodi unusable on
many slower i386 machines.

I believe 17.1 would be a better fit for Stretch, while the diff
between 17.0 and 17.1 contains quite a lot bug fixes:

https://github.com/xbmc/xbmc/compare/a10c5048f2487bd9b2dc1f35d2fee48a2594...fc1619b118f6d503f920a49cf4ac4afcd0dd6b41

At the moment 2:17.1+dfsg1-1 is uploaded to experimental only and I
would like to upload 2:17.0+dfsg1-2 with no new changes to
unstable if it would be allowed to migrate to testing.

Otherwise I will just triage and add the fix for #847701 to
2:17.0+dfsg1-3 and upload that minimal change to unstable as
2:17.0+dfsg1-4, but would prefer going th 17.1 way.

Please share your opinion about the options.

The attached patch contains the packaging changes only because the full debdiff 
is ~400k.

Cheers,
Balint

unblock kodi/2:17.1+dfsg1-2

diff --git a/debian/changelog b/debian/changelog
index cd613f2..5bda691 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,22 @@
+kodi (2:17.1+dfsg1-1) experimental; urgency=medium
+
+  * Depend on fonts-noto-mono package which contains NotoMono-Regular.ttf
+(Closes: #856668)
+  * Fix FTBFS on alpha by not using Intel assempler code (Closes: #856815)
+  * Imported Upstream version 17.1+dfsg1
+See: https://kodi.tv/kodi-v17-1-krypton
+  * Update my Uploader email address to my Ubuntu one
+  * Fix extract-components target in d/rules
+
+ -- Balint Reczey   Sun, 02 Apr 2017 11:01:21 +0200
+
+kodi (2:17.1~rc1+dfsg1-1) experimental; urgency=medium
+
+  * Imported Upstream version 17.1~rc1+dfsg1
+  * Refresh patches
+
+ -- Balint Reczey   Tue, 28 Feb 2017 02:21:54 +0100
+
 kodi (2:17.0+dfsg1-3) unstable; urgency=medium
 
   * Ship disabled systemd service file (Closes: #854985, #801886)
diff --git a/debian/control b/debian/control
index f15679b..bb44790 100644
--- a/debian/control
+++ b/debian/control
@@ -2,7 +2,7 @@ Source: kodi
 Section: video
 Priority: optional
 Maintainer: Debian Multimedia Maintainers 

-Uploaders: Balint Reczey 
+Uploaders: Balint Reczey 
 Build-Depends: autoconf,
  automake,
  autopoint,
@@ -140,6 +140,7 @@ Multi-Arch: foreign
 Depends: mesa-utils,
  x11-utils,
  fonts-noto-hinted,
+ fonts-noto-mono,
  fonts-roboto-hinted,
  libjs-jquery,
  libjs-iscroll,
diff --git a/debian/patches/06-use-external-libraries.patch 
b/debian/patches/06-use-external-libraries.patch
index 2f2952e..01953b0 100644
--- a/debian/patches/06-use-external-libraries.patch
+++ b/debian/patches/06-use-external-libraries.patch
@@ -15,7 +15,7 @@ Forwarded: not-needed
  all: $(BOOTSTRAP_TARGETS)
 --- a/configure.ac
 +++ b/configure.ac
-@@ -2391,18 +2391,11 @@
+@@ -2392,18 +2392,11 @@
  ], [0])
  
  XB_CONFIG_MODULE([lib/gtest], [
diff --git a/debian/patches/10-dont-use-omitted-files.patch 
b/debian/patches/10-dont-use-omitted-files.patch
index 4b018ac..ca1d57d 100644
--- a/debian/patches/10-dont-use-omitted-files.patch
+++ b/debian/patches/10-dont-use-omitted-files.patch
@@ -1,6 +1,6 @@
 --- a/configure.ac
 +++ b/configure.ac
-@@ -2203,7 +2203,6 @@
+@@ -2204,7 +2204,6 @@
  tools/Linux/kodi-standalone.sh \
  tools/Linux/kodi-xsession.desktop \
  tools/EventClients/Makefile \
diff --git a/debian/patches/12-build-cpluff-pic-only.patch 
b/debian/patches/12-build-cpluff-pic-only.patch
index 2668b4f..5b483f1 100644
--- a/debian/patches/12-build-cpluff-pic-only.patch
+++ b/debian/patches/12-build-cpluff-pic-only.patch
@@ -1,6 +1,6 @@
 --- a/configure.ac
 +++ b/configure.ac
-@@ -2385,7 +2385,7 @@
+@@ -2386,7 +2386,7 @@
  --prefix="${prefix}" --includedir="${includedir}" --libdir="${libdir}" 
--datadir="${datadir}" \
  --host=$host_alias \
  --build=$build_alias \
diff --git a/debian/patches/14-ignore-test-results.patch 
b/debian/patches/14-ignore-test-results.patch
index d180146..5dbbc20 100644
--- a/debian/patches/14-igno

Bug#860333: marked as done (unblock: saods9/7.5+repack1-2)

2017-04-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Apr 2017 17:18:00 +
with message-id 
and subject line Re: Bug#860333: unblock: saods9/7.5+repack1-2
has caused the Debian Bug report #860333,
regarding unblock: saods9/7.5+repack1-2
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
860333: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860333
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Dear release team,

please unblock saods9 7.5+repack1-2

This fixes bug  #859777, "saods9: Internal error after enabling
horizontal or vertical graph", priority important.

Relevant changelog:

saods9 (7.5+repack1-2) unstable; urgency=medium

  * Fix ds9 window class in desktop file
  * Fix problem with graphs and image zoomed out
  * Initialize tkblt stubs (Closes: #859777)

 -- Ole Streicher   Fri, 14 Apr 2017 13:42:38 +0200

The second item is also part of the resolution of #859777.

The debdiff is attached. Relevant command:

unblock saods9/7.5+repack1-2

Thank you very much

Ole

diff -Nru saods9-7.5+repack1/debian/changelog 
saods9-7.5+repack1/debian/changelog
--- saods9-7.5+repack1/debian/changelog 2016-12-17 10:31:44.0 +0100
+++ saods9-7.5+repack1/debian/changelog 2017-04-14 13:42:38.0 +0200
@@ -1,3 +1,11 @@
+saods9 (7.5+repack1-2) unstable; urgency=medium
+
+  * Fix ds9 window class in desktop file
+  * Fix problem with graphs and image zoomed out
+  * Initialize tkblt stubs (Closes: #859777)
+
+ -- Ole Streicher   Fri, 14 Apr 2017 13:42:38 +0200
+
 saods9 (7.5+repack1-1) unstable; urgency=medium
 
   * Remove tests, MacOS and windows specific subdirs from tarball
diff -Nru 
saods9-7.5+repack1/debian/patches/Fix-problem-with-graphs-and-image-zoomed-out.patch
 
saods9-7.5+repack1/debian/patches/Fix-problem-with-graphs-and-image-zoomed-out.patch
--- 
saods9-7.5+repack1/debian/patches/Fix-problem-with-graphs-and-image-zoomed-out.patch
1970-01-01 01:00:00.0 +0100
+++ 
saods9-7.5+repack1/debian/patches/Fix-problem-with-graphs-and-image-zoomed-out.patch
2017-04-14 13:41:44.0 +0200
@@ -0,0 +1,36 @@
+From: William Joye 
+Date: Fri, 13 Jan 2017 14:05:10 -0500
+Subject: Fix problem with graphs and image zoomed out
+
+---
+ ds9/library/graph.tcl | 14 ++
+ 1 file changed, 10 insertions(+), 4 deletions(-)
+
+diff --git a/ds9/library/graph.tcl b/ds9/library/graph.tcl
+index 4e42610..ca507e9 100644
+--- a/ds9/library/graph.tcl
 b/ds9/library/graph.tcl
+@@ -261,13 +261,19 @@ proc UpdateGraph {which x y sys} {
+ 
+ if {[$which has fits]} {
+   if {$view(graph,horz)} {
+-  $which get horizontal cut graphHorzX graphHorzY $x $y $sys
+-  $ds9(graph,horz) element configure line1 -hide no
++  if {![catch {$which get horizontal cut graphHorzX graphHorzY $x $y 
$sys}]} {
++  $ds9(graph,horz) element configure line1 -hide no
++  } else {
++  $ds9(graph,horz) element configure line1 -hide yes
++  }
+   }
+ 
+   if {$view(graph,vert)} {
+-  $which get vertical cut graphVertX graphVertY $x $y $sys
+-  $ds9(graph,vert) element configure line1 -hide no
++  if {![catch {$which get vertical cut graphVertX graphVertY $x $y 
$sys}]} {
++  $ds9(graph,vert) element configure line1 -hide no
++  } else {
++  $ds9(graph,vert) element configure line1 -hide yes
++  }
+   }
+ }
+ }
diff -Nru saods9-7.5+repack1/debian/patches/Initialize-tkblt-stubs.patch 
saods9-7.5+repack1/debian/patches/Initialize-tkblt-stubs.patch
--- saods9-7.5+repack1/debian/patches/Initialize-tkblt-stubs.patch  
1970-01-01 01:00:00.0 +0100
+++ saods9-7.5+repack1/debian/patches/Initialize-tkblt-stubs.patch  
2017-04-14 13:41:44.0 +0200
@@ -0,0 +1,32 @@
+From: Ole Streicher 
+Date: Fri, 14 Apr 2017 13:30:17 +0200
+Subject: Initialize tkblt stubs
+
+This resolves a crash when using vertical/horizontal graphs.
+Closes: #859777
+---
+ tksao/saotk.C | 4 
+ 1 file changed, 4 insertions(+)
+
+diff --git a/tksao/saotk.C b/tksao/saotk.C
+index d6b7adb..28fcd17 100644
+--- a/tksao/saotk.C
 b/tksao/saotk.C
+@@ -4,6 +4,8 @@
+ 
+ #include 
+ 
++extern const char* Tkblt_InitStubs(Tcl_Interp*, const char*, int);
++
+ extern int FrameTrueColor8_Init(Tcl_Interp*);
+ extern int FrameTrueColor16_Init(Tcl_Interp*);
+ extern int FrameTrueColor24_Init(Tcl_Interp*);
+@@ -40,6 +42,8 @@ int Tksao_Init(Tcl_Interp* interp) {
+ return TCL_ERROR;
+   if (Tk

Bug#860333: unblock: saods9/7.5+repack1-2

2017-04-14 Thread Ole Streicher
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Dear release team,

please unblock saods9 7.5+repack1-2

This fixes bug  #859777, "saods9: Internal error after enabling
horizontal or vertical graph", priority important.

Relevant changelog:

saods9 (7.5+repack1-2) unstable; urgency=medium

  * Fix ds9 window class in desktop file
  * Fix problem with graphs and image zoomed out
  * Initialize tkblt stubs (Closes: #859777)

 -- Ole Streicher   Fri, 14 Apr 2017 13:42:38 +0200

The second item is also part of the resolution of #859777.

The debdiff is attached. Relevant command:

unblock saods9/7.5+repack1-2

Thank you very much

Ole

diff -Nru saods9-7.5+repack1/debian/changelog 
saods9-7.5+repack1/debian/changelog
--- saods9-7.5+repack1/debian/changelog 2016-12-17 10:31:44.0 +0100
+++ saods9-7.5+repack1/debian/changelog 2017-04-14 13:42:38.0 +0200
@@ -1,3 +1,11 @@
+saods9 (7.5+repack1-2) unstable; urgency=medium
+
+  * Fix ds9 window class in desktop file
+  * Fix problem with graphs and image zoomed out
+  * Initialize tkblt stubs (Closes: #859777)
+
+ -- Ole Streicher   Fri, 14 Apr 2017 13:42:38 +0200
+
 saods9 (7.5+repack1-1) unstable; urgency=medium
 
   * Remove tests, MacOS and windows specific subdirs from tarball
diff -Nru 
saods9-7.5+repack1/debian/patches/Fix-problem-with-graphs-and-image-zoomed-out.patch
 
saods9-7.5+repack1/debian/patches/Fix-problem-with-graphs-and-image-zoomed-out.patch
--- 
saods9-7.5+repack1/debian/patches/Fix-problem-with-graphs-and-image-zoomed-out.patch
1970-01-01 01:00:00.0 +0100
+++ 
saods9-7.5+repack1/debian/patches/Fix-problem-with-graphs-and-image-zoomed-out.patch
2017-04-14 13:41:44.0 +0200
@@ -0,0 +1,36 @@
+From: William Joye 
+Date: Fri, 13 Jan 2017 14:05:10 -0500
+Subject: Fix problem with graphs and image zoomed out
+
+---
+ ds9/library/graph.tcl | 14 ++
+ 1 file changed, 10 insertions(+), 4 deletions(-)
+
+diff --git a/ds9/library/graph.tcl b/ds9/library/graph.tcl
+index 4e42610..ca507e9 100644
+--- a/ds9/library/graph.tcl
 b/ds9/library/graph.tcl
+@@ -261,13 +261,19 @@ proc UpdateGraph {which x y sys} {
+ 
+ if {[$which has fits]} {
+   if {$view(graph,horz)} {
+-  $which get horizontal cut graphHorzX graphHorzY $x $y $sys
+-  $ds9(graph,horz) element configure line1 -hide no
++  if {![catch {$which get horizontal cut graphHorzX graphHorzY $x $y 
$sys}]} {
++  $ds9(graph,horz) element configure line1 -hide no
++  } else {
++  $ds9(graph,horz) element configure line1 -hide yes
++  }
+   }
+ 
+   if {$view(graph,vert)} {
+-  $which get vertical cut graphVertX graphVertY $x $y $sys
+-  $ds9(graph,vert) element configure line1 -hide no
++  if {![catch {$which get vertical cut graphVertX graphVertY $x $y 
$sys}]} {
++  $ds9(graph,vert) element configure line1 -hide no
++  } else {
++  $ds9(graph,vert) element configure line1 -hide yes
++  }
+   }
+ }
+ }
diff -Nru saods9-7.5+repack1/debian/patches/Initialize-tkblt-stubs.patch 
saods9-7.5+repack1/debian/patches/Initialize-tkblt-stubs.patch
--- saods9-7.5+repack1/debian/patches/Initialize-tkblt-stubs.patch  
1970-01-01 01:00:00.0 +0100
+++ saods9-7.5+repack1/debian/patches/Initialize-tkblt-stubs.patch  
2017-04-14 13:41:44.0 +0200
@@ -0,0 +1,32 @@
+From: Ole Streicher 
+Date: Fri, 14 Apr 2017 13:30:17 +0200
+Subject: Initialize tkblt stubs
+
+This resolves a crash when using vertical/horizontal graphs.
+Closes: #859777
+---
+ tksao/saotk.C | 4 
+ 1 file changed, 4 insertions(+)
+
+diff --git a/tksao/saotk.C b/tksao/saotk.C
+index d6b7adb..28fcd17 100644
+--- a/tksao/saotk.C
 b/tksao/saotk.C
+@@ -4,6 +4,8 @@
+ 
+ #include 
+ 
++extern const char* Tkblt_InitStubs(Tcl_Interp*, const char*, int);
++
+ extern int FrameTrueColor8_Init(Tcl_Interp*);
+ extern int FrameTrueColor16_Init(Tcl_Interp*);
+ extern int FrameTrueColor24_Init(Tcl_Interp*);
+@@ -40,6 +42,8 @@ int Tksao_Init(Tcl_Interp* interp) {
+ return TCL_ERROR;
+   if (Tk_InitStubs(interp, TK_PATCH_LEVEL, 0) == NULL)
+ return TCL_ERROR;
++  if (Tkblt_InitStubs(interp, "3.2", 0) == NULL)
++return TCL_ERROR;
+ 
+   if (FrameTrueColor8_Init(interp) == TCL_ERROR)
+ return TCL_ERROR;
diff -Nru saods9-7.5+repack1/debian/patches/series 
saods9-7.5+repack1/debian/patches/series
--- saods9-7.5+repack1/debian/patches/series2016-12-17 10:31:00.0 
+0100
+++ saods9-7.5+repack1/debian/patches/series2017-04-14 13:41:44.0 
+0200
@@ -8,3 +8,5 @@
 saotk_add_psscale.patch
 saotk_avoid_compile_warnings.patch
 saotk_use_system_libs.patch
+Fix-problem-with-graphs-and-image-zoomed-out.patch
+Initialize-tkblt-stubs.patch
diff -Nru saods9-7.5+repack1/debian/saods9.desktop 
saods9-7.5+repack1/debian/saods9.desktop
--- saods9-7.5+repack1/debian/saod

Bug#860323: unblock: dokuwiki/0.0.20160626.a-2

2017-04-14 Thread Tanguy Ortolo
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Please unblock package dokuwiki

I know dokuwiki was autoremoved because of #854592 (grave), which for
personal reasons I was not able to fix in time. Now, if this is final, I
do not want to waste your time, dura lex sed lex.

That said, I think users would be better served by having an up-to-date
and fixed version in the next stable, than keeping an old version from
oldstable, especially considering how tiny the fix is, basically
(simplified diff):
- --- old/debian/control
+++ new/debian/control
- -Depend: php-seclib
+depend: php-seclib (<< 2)

I am attaching the full debdiff from 0.0.20140929.a-1 previously in
testing and the new 0.0.20160626.a-2 in unstable. Thanks for all your
work.

unblock dokuwiki/0.0.20160626.a-2

- -- System Information:
Debian Release: 8.7
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates'), (50, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1
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=PrV9
-END PGP SIGNATURE-
diff -Nru dokuwiki-0.0.20160626.a/debian/changelog dokuwiki-0.0.20160626.a/debian/changelog
--- dokuwiki-0.0.20160626.a/debian/changelog	2016-08-14 13:37:56.0 +0200
+++ dokuwiki-0.0.20160626.a/debian/changelog	2017-04-14 15:40:24.0 +0200
@@ -1,3 +1,10 @@
+dokuwiki (0.0.20160626.a-2) unstable; urgency=medium
+
+  * debian/control: depend on php-seclib (<<2) as the new php-phpseclib
+provides php-seclib (>= 2) which is not compatible. (Closes: #854592)
+
+ -- Tanguy Ortolo   Fri, 14 Apr 2017 15:23:13 +0200
+
 dokuwiki (0.0.20160626.a-1) unstable; urgency=medium
 
   * New upstream release. (Closes: #834150)
diff -Nru dokuwiki-0.0.20160626.a/debian/control dokuwiki-0.0.20160626.a/debian/control
--- dokuwiki-0.0.20160626.a/debian/control	2016-08-14 13:37:56.0 +0200
+++ dokuwiki-0.0.20160626.a/debian/control	2017-04-14 15:19:39.0 +0200
@@ -23,7 +23,7 @@
 libphp-simplepie,
 php,
 php-geshi,
-php-seclib,
+php-seclib (<< 2),
 php-xml,
 ucf,
 Recommends:


Bug#860299: marked as done (unblock: osm2pgsql/0.92.0+ds-2)

2017-04-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Apr 2017 13:16:43 +
with message-id 
and subject line unblock osm2pgsql
has caused the Debian Bug report #860299,
regarding unblock: osm2pgsql/0.92.0+ds-2
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
860299: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860299
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package osm2pgsql

It fixes two important issues reported to me by one of the developers
one was also reported in #860273.

unblock osm2pgsql/0.92.0+ds-2

Kind Regards,

Bas
diff -Nru osm2pgsql-0.92.0+ds/debian/changelog 
osm2pgsql-0.92.0+ds/debian/changelog
--- osm2pgsql-0.92.0+ds/debian/changelog2016-12-16 11:34:24.0 
+0100
+++ osm2pgsql-0.92.0+ds/debian/changelog2017-04-13 23:00:11.0 
+0200
@@ -1,3 +1,18 @@
+osm2pgsql (0.92.0+ds-2) unstable; urgency=medium
+
+  * Add upstream patches from 0.92.x branch to fix two important issues:
+- Ignore relations with more than 32k members.
+  There is a hard restriction in the pgsql middle tables, where
+  relation members are indexed using a smallint. To remain
+  consistent, drop all relations which exceed this size.
+  https://github.com/openstreetmap/osm2pgsql/issues/713
+- Use the same logic for queuing pending ways with multi and pgsql.
+  Fixes ways disappearing from the output table.
+  https://github.com/openstreetmap/osm2pgsql/issues/735
+(closes: #860273)
+
+ -- Bas Couwenberg   Thu, 13 Apr 2017 23:00:11 +0200
+
 osm2pgsql (0.92.0+ds-1) unstable; urgency=medium
 
   * New upstream release.
diff -Nru 
osm2pgsql-0.92.0+ds/debian/patches/0001-ignore-relations-with-more-than-32k-members.patch
 
osm2pgsql-0.92.0+ds/debian/patches/0001-ignore-relations-with-more-than-32k-members.patch
--- 
osm2pgsql-0.92.0+ds/debian/patches/0001-ignore-relations-with-more-than-32k-members.patch
   1970-01-01 01:00:00.0 +0100
+++ 
osm2pgsql-0.92.0+ds/debian/patches/0001-ignore-relations-with-more-than-32k-members.patch
   2017-04-13 22:55:58.0 +0200
@@ -0,0 +1,20 @@
+Description: ignore relations with more than 32k members
+ There is a hard restriction in the pgsql middle tables, where
+ relation members are indexed using a smallint. To remain
+ consistent, drop all relations which exceed this size.
+Author: Sarah Hoffmann 
+Origin: 
https://github.com/openstreetmap/osm2pgsql/commit/ec9c84edbcbd0dafab6d6c30290083e75c023890
+Bug: https://github.com/openstreetmap/osm2pgsql/issues/713
+
+--- a/parse-osmium.cpp
 b/parse-osmium.cpp
+@@ -176,6 +176,9 @@ void parse_osmium_t::relation(osmium::Re
+ if (rel.deleted()) {
+ m_data->relation_delete(rel.id());
+ } else {
++if (rel.members().size() > 32767) {
++return;
++}
+ convert_tags(rel);
+ convert_members(rel.members());
+ if (m_append) {
diff -Nru 
osm2pgsql-0.92.0+ds/debian/patches/0001-Use-the-same-logic-for-queuing-pending-ways-with-mul.patch
 
osm2pgsql-0.92.0+ds/debian/patches/0001-Use-the-same-logic-for-queuing-pending-ways-with-mul.patch
--- 
osm2pgsql-0.92.0+ds/debian/patches/0001-Use-the-same-logic-for-queuing-pending-ways-with-mul.patch
  1970-01-01 01:00:00.0 +0100
+++ 
osm2pgsql-0.92.0+ds/debian/patches/0001-Use-the-same-logic-for-queuing-pending-ways-with-mul.patch
  2017-04-13 23:00:11.0 +0200
@@ -0,0 +1,27 @@
+Description: Use the same logic for queuing pending ways with multi and pgsql
+ Fixes ways disappearing from the output table.
+Author: Paul Norman 
+Origin: 
https://github.com/openstreetmap/osm2pgsql/commit/8ffe16e67da43fd531a5e73b10d31465324f4a91
+Bug: https://github.com/openstreetmap/osm2pgsql/issues/735
+Bug-Debian: https://bugs.debian.org/860273
+
+--- a/output-multi.cpp
 b/output-multi.cpp
+@@ -92,7 +92,7 @@ void output_multi_t::enqueue_ways(pendin
+ }
+ 
+ //make sure to get this one as well and move to the next
+-if(popped == id) {
++if (popped > id) {
+ if (!ways_done_tracker->is_marked(popped) && 
id_tracker::is_valid(popped)) {
+ job_queue.push(pending_job_t(popped, output_id));
+ added++;
+@@ -143,7 +143,7 @@ void output_multi_t::enqueue_relations(p
+ }
+ 
+ //make sure to get this one as well and move to the next
+-if(popped == id) {
++if (popped > id) {
+ if(id_tracker::is_valid(popped)) {
+ job_queue.push(pending_job_t(popped, output_id));
+ added++;

Bug#860288: marked as done (unblock: heimdal/7.1.0+dfsg-12)

2017-04-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Apr 2017 13:11:10 +
with message-id 
and subject line unblock heimdal
has caused the Debian Bug report #860288,
regarding unblock: heimdal/7.1.0+dfsg-12
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
860288: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860288
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package heimdal

Security update from upstream. For CVE-2017-6594. Seee
https://www.h5l.org/releases.html?show=7.3.0

diff -Nru heimdal-7.1.0+dfsg/debian/changelog 
heimdal-7.1.0+dfsg/debian/changelog
--- heimdal-7.1.0+dfsg/debian/changelog 2017-04-08 11:38:13.0 +1000
+++ heimdal-7.1.0+dfsg/debian/changelog 2017-04-10 17:21:35.0 +1000
@@ -1,3 +1,9 @@
+heimdal (7.1.0+dfsg-12) unstable; urgency=high
+
+  * Fix transit path validation CVE-2017-6594.
+
+ -- Brian May   Mon, 10 Apr 2017 17:21:35 +1000
+
 heimdal (7.1.0+dfsg-11) unstable; urgency=medium
 
   * Remove legacy provides/conflicts/replaces headers. Old daemons
diff -Nru heimdal-7.1.0+dfsg/debian/patches/CVE-2017-6594 
heimdal-7.1.0+dfsg/debian/patches/CVE-2017-6594
--- heimdal-7.1.0+dfsg/debian/patches/CVE-2017-6594 1970-01-01 
10:00:00.0 +1000
+++ heimdal-7.1.0+dfsg/debian/patches/CVE-2017-6594 2017-04-10 
17:21:35.0 +1000
@@ -0,0 +1,163 @@
+commit d7bf245e793a9f9ec565e07dae9372597c0ece69
+Author: Viktor Dukhovni 
+Date:   Wed Aug 10 23:31:14 2016 +
+
+Fix transit path validation CVE-2017-6594
+
+Commit f469fc6 (2010-10-02) inadvertently caused the previous hop realm
+to not be added to the transit path of issued tickets.  This may, in
+some cases, enable bypass of capath policy in Heimdal versions 1.5
+through 7.2.
+
+Note, this may break sites that rely on the bug.  With the bug some
+incomplete [capaths] worked, that should not have.  These may now break
+authentication in some cross-realm configurations.
+
+diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c
+index 6048b9c55..98503812f 100644
+--- a/kdc/krb5tgs.c
 b/kdc/krb5tgs.c
+@@ -655,8 +655,12 @@ fix_transited_encoding(krb5_context context,
+ "Decoding transited encoding");
+   return ret;
+ }
++
++/*
++ * If the realm of the presented tgt is neither the client nor the server
++ * realm, it is a transit realm and must be added to transited set.
++ */
+ if(strcmp(client_realm, tgt_realm) && strcmp(server_realm, tgt_realm)) {
+-  /* not us, so add the previous realm to transited set */
+   if (num_realms + 1 > UINT_MAX/sizeof(*realms)) {
+   ret = ERANGE;
+   goto free_realms;
+@@ -737,6 +741,7 @@ tgs_make_reply(krb5_context context,
+  const char *server_name,
+  hdb_entry_ex *client,
+  krb5_principal client_principal,
++   const char *tgt_realm,
+  hdb_entry_ex *krbtgt,
+  krb5_enctype krbtgt_etype,
+  krb5_principals spp,
+@@ -798,7 +803,7 @@ tgs_make_reply(krb5_context context,
+&tgt->transited, &et,
+krb5_principal_get_realm(context, 
client_principal),
+krb5_principal_get_realm(context, 
server->entry.principal),
+-   krb5_principal_get_realm(context, 
krbtgt->entry.principal));
++   tgt_realm);
+ if(ret)
+   goto out;
+ 
+@@ -1519,6 +1524,8 @@ tgs_build_reply(krb5_context context,
+ krb5_keyblock sessionkey;
+ krb5_kvno kvno;
+ krb5_data rspac;
++const char *tgt_realm = /* Realm of TGT issuer */
++krb5_principal_get_realm(context, krbtgt->entry.principal);
+ const char *our_realm = /* Realm of this KDC */
+ krb5_principal_get_comp_string(context, krbtgt->entry.principal, 1);
+ char **capath = NULL;
+@@ -2324,6 +2331,7 @@ server_lookup:
+spn,
+client,
+cp,
++ tgt_realm,
+krbtgt_out,
+tkey_sign->key.keytype,
+spp,
+diff --git a/tests/kdc/check-kdc.in b/tests/kdc/check-kdc.in
+index 235113425..f6e78ccac 100644
+--- a/tests/kdc/check-kdc.in
 b/tests/kdc/check-kdc.in
+@@ -53,6 +53,7 @@ R4=TEST4.H5L.SE
+ R5=SOME-REALM5.FR
+ R6=SOME-REALM6.US
+ R7=SOME-REALM7.UK
++R8=SOME-REALM8.UK
+ 
+ H1=H1.$R
+ H2=H2.$R
+@@ -152,6 +15

Bug#860291: marked as done (unblock: cacti/0.8.8h+ds1-9)

2017-04-14 Thread Debian Bug Tracking System
Your message dated Fri, 14 Apr 2017 13:14:16 +
with message-id 
and subject line unblock cacti
has caused the Debian Bug report #860291,
regarding unblock: cacti/0.8.8h+ds1-9
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
860291: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860291
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Please unblock package cacti

In cacti 0.8.8h+ds1-9 I fixed a regression since PHP 7 became the default. In
the non-default (but relative common) situation where one wants to monitor some
variable with a higher frequency than once per minute, the poller would die on
calling split() which was deprecated in PHP 7, filed in bug 860271.

Debdiff attached.

unblock cacti/0.8.8h+ds1-9

- -- System Information:
Debian Release: 9.0
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing'), (200, 'experimental'), 
(200, 'testing'), (50, 'experimental'), (50, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

-BEGIN PGP SIGNATURE-

iQEzBAEBCAAdFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAljwc5wACgkQnFyZ6wW9
dQo1Jgf+M62bB29LdleyDurk4svA18T2Cuw0ur+Br338xNvg0XplrrqE95Fz/J58
L1BOavJHXN9szM3KUo+0FB3DTi5kvqu2A7bZslbA26J418e1hafq6YDX6TyufpT9
0zZsG4lugaZayspKdDYToTpnVTloHk1/IfEp7p4DUE8uIyDgdRsPK5/H1NKscFsz
oGCUrSLrYknrmz4hwcV58xynaB6/47ZYpdCzmx1RFzP1F19rN/nK8oLxTrNjK33l
O+2ZF1XVbi79cxAN5QCk/BrTD7mzO4kiQOOs2Lmjk3KUjSMl0UusOvgk9oJhrnyf
K9dL0gcJ7Q2x87dX2XmtzMX3g/LLUA==
=eaEQ
-END PGP SIGNATURE-
diff -Nru cacti-0.8.8h+ds1/debian/changelog cacti-0.8.8h+ds1/debian/changelog
--- cacti-0.8.8h+ds1/debian/changelog   2016-12-14 21:20:24.0 +0100
+++ cacti-0.8.8h+ds1/debian/changelog   2017-04-13 22:05:30.0 +0200
@@ -1,3 +1,10 @@
+cacti (0.8.8h+ds1-9) unstable; urgency=medium
+
+  * Add enable_faster_polling_than_cron.patch to replace the use of the
+deprecated split() function (Closes: #860271)
+
+ -- Paul Gevers   Thu, 13 Apr 2017 22:05:30 +0200
+
 cacti (0.8.8h+ds1-8) unstable; urgency=medium
 
   * Depend on libjs-jquery-jstree instead of using embedded version
diff -Nru cacti-0.8.8h+ds1/debian/patches/enable_faster_polling_than_cron.patch 
cacti-0.8.8h+ds1/debian/patches/enable_faster_polling_than_cron.patch
--- cacti-0.8.8h+ds1/debian/patches/enable_faster_polling_than_cron.patch   
1970-01-01 01:00:00.0 +0100
+++ cacti-0.8.8h+ds1/debian/patches/enable_faster_polling_than_cron.patch   
2017-04-13 22:04:42.0 +0200
@@ -0,0 +1,23 @@
+Description: split() is deprecated in PHP 7, causing the code to fail
+Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/cacti/+bug/1662027
+Bug-Debian: https://bugs.debian.org/860271
+Source: 
https://github.com/Cacti/cacti/commit/6b5931130770cdfa5baa68c43a913dcabf1c3970
+
+Index: cacti/poller.php
+===
+--- cacti.orig/poller.php
 cacti/poller.php
+@@ -451,11 +451,9 @@ while ($poller_runs_completed < $poller_
+ 
+   /* sleep the appripriate amount of time */
+   if ($poller_runs_completed < $poller_runs) {
+-  list($micro, $seconds) = split(' ', microtime());
+-  $plugin_start = $seconds + $micro;
++  $plugin_start = microtime(true);
+   api_plugin_hook('poller_bottom');
+-  list($micro, $seconds) = split(' ', microtime());
+-  $plugin_end = $seconds + $micro;
++  $plugin_end = microtime(true);
+   if (($sleep_time - ($plugin_end - $plugin_start)) > 0) {
+   usleep(($sleep_time - ($plugin_end - 
$plugin_start)) * 100);
+   }
diff -Nru cacti-0.8.8h+ds1/debian/patches/series 
cacti-0.8.8h+ds1/debian/patches/series
--- cacti-0.8.8h+ds1/debian/patches/series  2016-12-14 21:16:53.0 
+0100
+++ cacti-0.8.8h+ds1/debian/patches/series  2017-04-13 21:37:14.0 
+0200
@@ -12,3 +12,4 @@
 make_cacti_sql_mode-strict_compatible.patch
 CVE-2016-2313-guest-auth.patch
 fix_export_for_debian_packages.patch
+enable_faster_polling_than_cron.patch
--- End Message ---
--- Begin Message ---
Unblocked cacti.--- End Message ---


Bug#860310: unblock pre-apptoval request for yade/2017.01a-8

2017-04-14 Thread Anton Gladky
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package yade

Yade upstream have found a critical bug in so-called periodic
boundaries contact detection [1]. It would be good to have this
fix in Debian as well. I cherry-picked the upstream's patch,
which is attached to this mail.

unblock yade/2017.01a-8

[1] http://www.mail-archive.com/yade-dev@lists.launchpad.net/msg12355.html


Thanks,

Anton
diff -Nru yade-2017.01a/debian/changelog yade-2017.01a/debian/changelog
--- yade-2017.01a/debian/changelog  2017-02-28 22:03:24.0 +0100
+++ yade-2017.01a/debian/changelog  2017-04-14 12:43:59.0 +0200
@@ -1,3 +1,10 @@
+yade (2017.01a-8) unstable; urgency=medium
+
+  [ Bruno Chareyre ]
+  * [be08409] Critical bugfix for periodic boundaries.
+
+ -- Anton Gladky   Fri, 14 Apr 2017 12:43:59 +0200
+
 yade (2017.01a-7) unstable; urgency=medium
 
   * [31387da] Add missing dependency on python-pyqt5.qtsvg in python-yade.
diff -Nru yade-2017.01a/debian/patches/09_fix_periodic_boundaries.patch 
yade-2017.01a/debian/patches/09_fix_periodic_boundaries.patch
--- yade-2017.01a/debian/patches/09_fix_periodic_boundaries.patch   
1970-01-01 01:00:00.0 +0100
+++ yade-2017.01a/debian/patches/09_fix_periodic_boundaries.patch   
2017-04-14 12:42:33.0 +0200
@@ -0,0 +1,28 @@
+From c7c8e6f62d452c81a31415f05a12587a6cc8c452 Mon Sep 17 00:00:00 2001
+From: bchareyre 
+Date: Fri, 14 Apr 2017 12:04:32 +0200
+Subject: [PATCH] Critical bugfix for collision detection in periodic boundary
+ conditions. Bounds lists were left partially unordered,  then some
+ interactions were never detected (my toughest yade debugging until now).
+
+---
+ pkg/common/InsertionSortCollider.cpp | 6 --
+ 1 file changed, 4 insertions(+), 2 deletions(-)
+
+diff --git a/pkg/common/InsertionSortCollider.cpp 
b/pkg/common/InsertionSortCollider.cpp
+index dc5d7ac..163a4f4 100644
+--- a/pkg/common/InsertionSortCollider.cpp
 b/pkg/common/InsertionSortCollider.cpp
+@@ -410,8 +410,10 @@ Real InsertionSortCollider::cellWrapRel(const Real x, 
const Real x0, const Real
+ void InsertionSortCollider::insertionSortPeri(VecBounds& v, 
InteractionContainer* interactions, Scene*, bool doCollide){
+   assert(periodic);
+   long &loIdx=v.loIdx; const long &size=v.size;
+-  for(long _i=0; _i

Bug#856872: jessie-pu: package gnutls28/3.3.8-6+deb8u5

2017-04-14 Thread Salvatore Bonaccorso
Hi

On Sun, Mar 05, 2017 at 07:08:08PM +0100, Andreas Metzler wrote:
> Package: release.debian.org
> Severity: normal
> Tags: jessie
> User: release.debian@packages.debian.org
> Usertags: pu
> 
> Hello,
> 
> I would like fix a number of minor issues in GnuTLS.

Would still be great to see that in the next point release.

Note there is one more CVE in meanwhile assigned:

> Most of these (notably CVE-2017-533[4567]) are related to the PGP
> support, security does not intend to issue a DSA:
> + 55_13_cdk_pkt_read-enforce-packet-limits.patch Addressed integer
>   overflow resulting to invalid memory write in OpenPGP certificate
>   parsing.  Issue found using oss-fuzz project:
>   https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420
>   [GNUTLS-SA-2017-3A]

This one got CVE-2017-7869 assigned, cf.
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7869

Regards,
Salvatore



Bug#859708: unblock: kodi/2:17.1+dfsg1-2

2017-04-14 Thread Bálint Réczey
Hi Niels,

2017-04-12 19:37 GMT+02:00 Niels Thykier :
> Control: tags -1 confirmed moreinfo
>
> On Thu, 6 Apr 2017 11:20:25 +0200 Balint Reczey 
> wrote:
>> Package: release.debian.org
>> Severity: normal
>> User: release.debian@packages.debian.org
>> Usertags: unblock
>>
>> Dear Release Team,
>>
>> Current kodi version in Stretch is 2:17.0+dfsg1-3 but upstream
>> already released Kodi 17.1 which is available from experimental
>> as 2:17.1+dfsg1-1.
>>
>> Among many other bugfixes it fixes #847701 which made kodi unusable on
>> many slower i386 machines.
>>
>> I believe 17.1 would be a better fit for Stretch, while the diff
>> between 17.0 and 17.1 contains quite a lot bug fixes:
>>
>> https://github.com/xbmc/xbmc/compare/a10c5048f2487bd9b2dc1f35d2fee48a2594...fc1619b118f6d503f920a49cf4ac4afcd0dd6b41
>>
>> At the moment 2:17.1+dfsg1-1 is uploaded to experimental only and I
>> would like to upload 2:17.0+dfsg1-2 with no new changes to
>> unstable if it would be allowed to migrate to testing.
>>
>> Otherwise I will just triage and add the fix for #847701 to
>> 2:17.0+dfsg1-3 and upload that minimal change to unstable as
>> 2:17.0+dfsg1-4, but would prefer going th 17.1 way.
>>
>> Please share your opinion about the options.
>>
>> The attached patch contains the packaging changes only because the full 
>> debdiff is ~400k.
>>
>> Cheers,
>> Balint
>>
>> unblock kodi/2:17.1+dfsg1-2
>>
>
> Ack, please go ahead and let us know once it has been uploaded and
> compiled on all relevant architectures.

Thanks! Done and built.

Cheers,
Balint



Bug#860299: unblock: osm2pgsql/0.92.0+ds-2

2017-04-14 Thread Bas Couwenberg
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

Please unblock package osm2pgsql

It fixes two important issues reported to me by one of the developers
one was also reported in #860273.

unblock osm2pgsql/0.92.0+ds-2

Kind Regards,

Bas
diff -Nru osm2pgsql-0.92.0+ds/debian/changelog 
osm2pgsql-0.92.0+ds/debian/changelog
--- osm2pgsql-0.92.0+ds/debian/changelog2016-12-16 11:34:24.0 
+0100
+++ osm2pgsql-0.92.0+ds/debian/changelog2017-04-13 23:00:11.0 
+0200
@@ -1,3 +1,18 @@
+osm2pgsql (0.92.0+ds-2) unstable; urgency=medium
+
+  * Add upstream patches from 0.92.x branch to fix two important issues:
+- Ignore relations with more than 32k members.
+  There is a hard restriction in the pgsql middle tables, where
+  relation members are indexed using a smallint. To remain
+  consistent, drop all relations which exceed this size.
+  https://github.com/openstreetmap/osm2pgsql/issues/713
+- Use the same logic for queuing pending ways with multi and pgsql.
+  Fixes ways disappearing from the output table.
+  https://github.com/openstreetmap/osm2pgsql/issues/735
+(closes: #860273)
+
+ -- Bas Couwenberg   Thu, 13 Apr 2017 23:00:11 +0200
+
 osm2pgsql (0.92.0+ds-1) unstable; urgency=medium
 
   * New upstream release.
diff -Nru 
osm2pgsql-0.92.0+ds/debian/patches/0001-ignore-relations-with-more-than-32k-members.patch
 
osm2pgsql-0.92.0+ds/debian/patches/0001-ignore-relations-with-more-than-32k-members.patch
--- 
osm2pgsql-0.92.0+ds/debian/patches/0001-ignore-relations-with-more-than-32k-members.patch
   1970-01-01 01:00:00.0 +0100
+++ 
osm2pgsql-0.92.0+ds/debian/patches/0001-ignore-relations-with-more-than-32k-members.patch
   2017-04-13 22:55:58.0 +0200
@@ -0,0 +1,20 @@
+Description: ignore relations with more than 32k members
+ There is a hard restriction in the pgsql middle tables, where
+ relation members are indexed using a smallint. To remain
+ consistent, drop all relations which exceed this size.
+Author: Sarah Hoffmann 
+Origin: 
https://github.com/openstreetmap/osm2pgsql/commit/ec9c84edbcbd0dafab6d6c30290083e75c023890
+Bug: https://github.com/openstreetmap/osm2pgsql/issues/713
+
+--- a/parse-osmium.cpp
 b/parse-osmium.cpp
+@@ -176,6 +176,9 @@ void parse_osmium_t::relation(osmium::Re
+ if (rel.deleted()) {
+ m_data->relation_delete(rel.id());
+ } else {
++if (rel.members().size() > 32767) {
++return;
++}
+ convert_tags(rel);
+ convert_members(rel.members());
+ if (m_append) {
diff -Nru 
osm2pgsql-0.92.0+ds/debian/patches/0001-Use-the-same-logic-for-queuing-pending-ways-with-mul.patch
 
osm2pgsql-0.92.0+ds/debian/patches/0001-Use-the-same-logic-for-queuing-pending-ways-with-mul.patch
--- 
osm2pgsql-0.92.0+ds/debian/patches/0001-Use-the-same-logic-for-queuing-pending-ways-with-mul.patch
  1970-01-01 01:00:00.0 +0100
+++ 
osm2pgsql-0.92.0+ds/debian/patches/0001-Use-the-same-logic-for-queuing-pending-ways-with-mul.patch
  2017-04-13 23:00:11.0 +0200
@@ -0,0 +1,27 @@
+Description: Use the same logic for queuing pending ways with multi and pgsql
+ Fixes ways disappearing from the output table.
+Author: Paul Norman 
+Origin: 
https://github.com/openstreetmap/osm2pgsql/commit/8ffe16e67da43fd531a5e73b10d31465324f4a91
+Bug: https://github.com/openstreetmap/osm2pgsql/issues/735
+Bug-Debian: https://bugs.debian.org/860273
+
+--- a/output-multi.cpp
 b/output-multi.cpp
+@@ -92,7 +92,7 @@ void output_multi_t::enqueue_ways(pendin
+ }
+ 
+ //make sure to get this one as well and move to the next
+-if(popped == id) {
++if (popped > id) {
+ if (!ways_done_tracker->is_marked(popped) && 
id_tracker::is_valid(popped)) {
+ job_queue.push(pending_job_t(popped, output_id));
+ added++;
+@@ -143,7 +143,7 @@ void output_multi_t::enqueue_relations(p
+ }
+ 
+ //make sure to get this one as well and move to the next
+-if(popped == id) {
++if (popped > id) {
+ if(id_tracker::is_valid(popped)) {
+ job_queue.push(pending_job_t(popped, output_id));
+ added++;
diff -Nru osm2pgsql-0.92.0+ds/debian/patches/series 
osm2pgsql-0.92.0+ds/debian/patches/series
--- osm2pgsql-0.92.0+ds/debian/patches/series   1970-01-01 01:00:00.0 
+0100
+++ osm2pgsql-0.92.0+ds/debian/patches/series   2017-04-13 22:55:55.0 
+0200
@@ -0,0 +1,2 @@
+0001-ignore-relations-with-more-than-32k-members.patch
+0001-Use-the-same-logic-for-queuing-pending-ways-with-mul.patch


Bug#860291: unblock: cacti/0.8.8h+ds1-9

2017-04-14 Thread Paul Gevers
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Please unblock package cacti

In cacti 0.8.8h+ds1-9 I fixed a regression since PHP 7 became the default. In
the non-default (but relative common) situation where one wants to monitor some
variable with a higher frequency than once per minute, the poller would die on
calling split() which was deprecated in PHP 7, filed in bug 860271.

Debdiff attached.

unblock cacti/0.8.8h+ds1-9

- -- System Information:
Debian Release: 9.0
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing'), (200, 'experimental'), 
(200, 'testing'), (50, 'experimental'), (50, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

-BEGIN PGP SIGNATURE-

iQEzBAEBCAAdFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAljwc5wACgkQnFyZ6wW9
dQo1Jgf+M62bB29LdleyDurk4svA18T2Cuw0ur+Br338xNvg0XplrrqE95Fz/J58
L1BOavJHXN9szM3KUo+0FB3DTi5kvqu2A7bZslbA26J418e1hafq6YDX6TyufpT9
0zZsG4lugaZayspKdDYToTpnVTloHk1/IfEp7p4DUE8uIyDgdRsPK5/H1NKscFsz
oGCUrSLrYknrmz4hwcV58xynaB6/47ZYpdCzmx1RFzP1F19rN/nK8oLxTrNjK33l
O+2ZF1XVbi79cxAN5QCk/BrTD7mzO4kiQOOs2Lmjk3KUjSMl0UusOvgk9oJhrnyf
K9dL0gcJ7Q2x87dX2XmtzMX3g/LLUA==
=eaEQ
-END PGP SIGNATURE-
diff -Nru cacti-0.8.8h+ds1/debian/changelog cacti-0.8.8h+ds1/debian/changelog
--- cacti-0.8.8h+ds1/debian/changelog   2016-12-14 21:20:24.0 +0100
+++ cacti-0.8.8h+ds1/debian/changelog   2017-04-13 22:05:30.0 +0200
@@ -1,3 +1,10 @@
+cacti (0.8.8h+ds1-9) unstable; urgency=medium
+
+  * Add enable_faster_polling_than_cron.patch to replace the use of the
+deprecated split() function (Closes: #860271)
+
+ -- Paul Gevers   Thu, 13 Apr 2017 22:05:30 +0200
+
 cacti (0.8.8h+ds1-8) unstable; urgency=medium
 
   * Depend on libjs-jquery-jstree instead of using embedded version
diff -Nru cacti-0.8.8h+ds1/debian/patches/enable_faster_polling_than_cron.patch 
cacti-0.8.8h+ds1/debian/patches/enable_faster_polling_than_cron.patch
--- cacti-0.8.8h+ds1/debian/patches/enable_faster_polling_than_cron.patch   
1970-01-01 01:00:00.0 +0100
+++ cacti-0.8.8h+ds1/debian/patches/enable_faster_polling_than_cron.patch   
2017-04-13 22:04:42.0 +0200
@@ -0,0 +1,23 @@
+Description: split() is deprecated in PHP 7, causing the code to fail
+Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/cacti/+bug/1662027
+Bug-Debian: https://bugs.debian.org/860271
+Source: 
https://github.com/Cacti/cacti/commit/6b5931130770cdfa5baa68c43a913dcabf1c3970
+
+Index: cacti/poller.php
+===
+--- cacti.orig/poller.php
 cacti/poller.php
+@@ -451,11 +451,9 @@ while ($poller_runs_completed < $poller_
+ 
+   /* sleep the appripriate amount of time */
+   if ($poller_runs_completed < $poller_runs) {
+-  list($micro, $seconds) = split(' ', microtime());
+-  $plugin_start = $seconds + $micro;
++  $plugin_start = microtime(true);
+   api_plugin_hook('poller_bottom');
+-  list($micro, $seconds) = split(' ', microtime());
+-  $plugin_end = $seconds + $micro;
++  $plugin_end = microtime(true);
+   if (($sleep_time - ($plugin_end - $plugin_start)) > 0) {
+   usleep(($sleep_time - ($plugin_end - 
$plugin_start)) * 100);
+   }
diff -Nru cacti-0.8.8h+ds1/debian/patches/series 
cacti-0.8.8h+ds1/debian/patches/series
--- cacti-0.8.8h+ds1/debian/patches/series  2016-12-14 21:16:53.0 
+0100
+++ cacti-0.8.8h+ds1/debian/patches/series  2017-04-13 21:37:14.0 
+0200
@@ -12,3 +12,4 @@
 make_cacti_sql_mode-strict_compatible.patch
 CVE-2016-2313-guest-auth.patch
 fix_export_for_debian_packages.patch
+enable_faster_polling_than_cron.patch