Bug#865235: nmu: tinc_1.1~pre14-16-g15b868e-1

[Shengjing Zhu]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: binnmu

nmu tinc_1.1~pre14-16-g15b868e-1 . ANY . experimental . -m "rebuild against 
readline7"


signature.asc
Description: PGP signature

Bug#865225: stretch-pu: package request-tracker4/4.4.1-3+deb9u2

[Dominic Hargreaves]

Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu

I didn't manage to get the fix for #862426 sorted out for stretch
in time and this will cause annoying breakage for new installs.

It's possible that I will follow up with a fix for #848041 too, but
it's not clear what that is yet.

Debdiff attached.

Thanks,
Dominic.
diff --git a/debian/changelog b/debian/changelog
index a984a89..431eb9c 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+request-tracker4 (4.4.1-3+deb9u2) UNRELEASED; urgency=medium
+
+  * Handle configuration permissions correctly following
+RT_SiteConfig.d changes (Closes: #862426)
+
+ -- Dominic Hargreaves   Tue, 20 Jun 2017 00:22:12 +0100
+
 request-tracker4 (4.4.1-3+deb9u1) stretch-security; urgency=high
 
   * Fix multiple security issues:
diff --git a/debian/postinst b/debian/postinst
index ab05f40..a6f9a56 100644
--- a/debian/postinst
+++ b/debian/postinst
@@ -100,8 +100,10 @@ run_dbconfig () {
 maybe_handle_permissions () {
 if [ "$HANDLE_PERMISSIONS" = "true" ]
 then
-chown root:www-data /etc/request-tracker4/RT_SiteConfig.pm
-chmod 640   /etc/request-tracker4/RT_SiteConfig.pm
+for f in /etc/request-tracker4/RT_SiteConfig.d/50-debconf.pm \
+ /etc/request-tracker4/RT_SiteConfig.d/51-dbconfig-common.pm; 
do
+[ -f "$f" ] && chown root:www-data $f && chmod 640 $f
+done
 fi
 }
 

Re: RFC: merging britney's Heidi output into sets/

[Adam D. Barratt]

On Sat, 2017-06-17 at 19:23 +, Niels Thykier wrote:
> Adam D. Barratt:
> > If no-one comes up with any issues, I'll probably look at applying this
> > within the next day or so.
[...]
> Thanks :)

For the record, this is now live.

Regards,

Adam

Buster thaw

[Jonathan Wiltshire]

Hi,

I have lifted the freeze in a manual britney run; a little over 1500
packages migrated to buster. The usual 4 times daily schedule will now
apply.

--
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

 SaaS == Saunas as a Service
 broonie, more like Sauna as additional Storage

Bug#865214: stretch-pu: package gnuplot/5.0.5+dfsg1-7+deb9u1

[Anton Gladky]

Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu

Dear release team,

the following gnuplot version fixes the CVE-2017-9670. Please let me know,
whether it can be upoaded to proposed-updates.

Diff is provided.

Thanks,

Anton
diff -Nru gnuplot-5.0.5+dfsg1/debian/changelog 
gnuplot-5.0.5+dfsg1/debian/changelog
--- gnuplot-5.0.5+dfsg1/debian/changelog2017-04-03 22:58:59.0 
+0200
+++ gnuplot-5.0.5+dfsg1/debian/changelog2017-06-16 22:35:29.0 
+0200
@@ -1,3 +1,10 @@
+gnuplot (5.0.5+dfsg1-7+deb9u1) stretch; urgency=high
+
+  * [02931b6] Fix memory corruption vulnerability. CVE-2017-9670.
+  (Closes: #864901)
+
+ -- Anton Gladky   Fri, 16 Jun 2017 22:35:29 +0200
+
 gnuplot (5.0.5+dfsg1-6) unstable; urgency=medium
 
   * Team upload.
diff -Nru gnuplot-5.0.5+dfsg1/debian/patches/20_CVE-2017-9670.patch 
gnuplot-5.0.5+dfsg1/debian/patches/20_CVE-2017-9670.patch
--- gnuplot-5.0.5+dfsg1/debian/patches/20_CVE-2017-9670.patch   1970-01-01 
01:00:00.0 +0100
+++ gnuplot-5.0.5+dfsg1/debian/patches/20_CVE-2017-9670.patch   2017-06-16 
22:35:29.0 +0200
@@ -0,0 +1,18 @@
+Description: Fix memory corruption vulnerability. CVE-2017-9670
+Author: Ethan Merritt
+Bug-Debian: https://bugs.debian.org/864901
+Origin: 
https://sourceforge.net/p/gnuplot/bugs/_discuss/thread/44ec637c/af0f/attachment/uninitialized_variables_%28Bug1933%29.patch
+Bug: https://sourceforge.net/p/gnuplot/bugs/1933/
+Reviewed-By: Anton Gladky 
+Last-Update: 2017-06-16
+
+--- gnuplot-5.0.5+dfsg1.orig/src/set.c
 gnuplot-5.0.5+dfsg1/src/set.c
+@@ -5926,6 +5926,7 @@ load_tic_series(AXIS_INDEX axis)
+ 
+ if (!equals(c_token, ",")) {
+   /* only step specified */
++  incr_token = c_token;
+   incr = start;
+   start = -VERYLARGE;
+   end = VERYLARGE;
diff -Nru gnuplot-5.0.5+dfsg1/debian/patches/series 
gnuplot-5.0.5+dfsg1/debian/patches/series
--- gnuplot-5.0.5+dfsg1/debian/patches/series   2017-04-03 22:54:50.0 
+0200
+++ gnuplot-5.0.5+dfsg1/debian/patches/series   2017-06-16 22:35:29.0 
+0200
@@ -6,3 +6,4 @@
 11_fix_linkage_wx.patch
 13_honour_SOURCE_DATE_EPOCH.patch
 14_strip_username_from_output.patch
+20_CVE-2017-9670.patch

Bug#865212: stretch-pu: package qgis/2.14.11+dfsg-3+deb9u1

[Bas Couwenberg]

Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu

As reported in #864695, the qgis packages cause the jessie to stretch
upgrade to fail due to missing Breaks/Replaces for qgis_customwidgets.py
that moved from python-qgis to python-qgis-common.

The proposed update adds the versioned Breaks/Replaces to fix this
issue.

Kind Regards,

Bas
diff -Nru qgis-2.14.11+dfsg/debian/changelog qgis-2.14.11+dfsg/debian/changelog
--- qgis-2.14.11+dfsg/debian/changelog  2017-03-21 12:49:51.0 +0100
+++ qgis-2.14.11+dfsg/debian/changelog  2017-06-19 20:51:12.0 +0200
@@ -1,3 +1,10 @@
+qgis (2.14.11+dfsg-3+deb9u1) stable; urgency=medium
+
+  * Add Breaks/Replaces to python-qgis-common for qgis_customwidgets.py move.
+(closes: #864695)
+
+ -- Bas Couwenberg   Mon, 19 Jun 2017 20:51:12 +0200
+
 qgis (2.14.11+dfsg-3) unstable; urgency=medium
 
   * Add patch to fix GRASS 7.2 support in processing.
diff -Nru qgis-2.14.11+dfsg/debian/control qgis-2.14.11+dfsg/debian/control
--- qgis-2.14.11+dfsg/debian/control2017-03-21 12:49:51.0 +0100
+++ qgis-2.14.11+dfsg/debian/control2017-06-19 20:48:27.0 +0200
@@ -379,6 +379,8 @@
  libqgis-customwidgets (>= ${source:Version}),
  ${python:Depends},
  ${misc:Depends}
+Breaks: python-qgis (<< 2.6.0)
+Replaces: python-qgis (<< 2.6.0)
 Description: Python bindings to QGIS - architecture-independent files
  QGIS is a Geographic Information System (GIS) which manages, analyzes and
  display databases of geographic information.

Bug#865122: stretch-pu: package pulseaudio/10.0-1

[Felipe Sateler]

Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu

I'd like to upload a RC fix for pulseaudio that couldn't make it to the
release. The changes are small and impact only package metadata.
Changelog is as follows:

pulseaudio (10.0-1+deb9u1) stable; urgency=medium

  [ Balint Reczey ]
  * Removing myself from Uploaders.

  [ Scott Leggett ]
  * Move AGPL-3 text into copyright file (Closes: #863082)

 -- Felipe Sateler   Sun, 18 Jun 2017 12:03:31 -0400

Full debdiff is attached.

-- System Information:
Debian Release: 9.0
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'testing'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8), LANGUAGE=en_US:en 
(charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
diff --git a/debian/changelog b/debian/changelog
index 4ac5d4ec3..aeaec93f3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,17 @@
+pulseaudio (10.0-1+deb9u1) stable; urgency=medium
+
+  [ Balint Reczey ]
+  * Removing myself from Uploaders.
+I made a few changes to the package when it badly needed help
+but now it is well maintained and I haven't contributed to it
+for years. Thanks to everyone in the packaging team and everyone
+who improved the package!
+
+  [ Scott Leggett ]
+  * Move AGPL-3 text into copyright file (Closes: #863082)
+
+ -- Felipe Sateler   Sun, 18 Jun 2017 12:03:31 -0400
+
 pulseaudio (10.0-1) unstable; urgency=medium
 
   * New upstream release
diff --git a/debian/control b/debian/control
index 4c48670f1..70fae9016 100644
--- a/debian/control
+++ b/debian/control
@@ -3,7 +3,6 @@ Section: sound
 Priority: optional
 Maintainer: Pulseaudio maintenance team 

 Uploaders: Sjoerd Simons ,
-Balint Reczey ,
 Felipe Sateler 
 Build-Depends: debhelper (>= 9.20141010),
 check,
diff --git a/debian/copyright b/debian/copyright
index ba94fc61c..141ef2910 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -606,15 +606,664 @@ License: LGPL-2.1+
 Files: src/utils/qpaeq
 Copyright: 2009  Jason Newton 
 License: AGPL-3+
- This program is free software: you can redistribute it and/or modify
- it under the terms of the GNU Affero General Public License as
- published by the Free Software Foundation, either version 3 of the
- License, or (at your option) any later version.
- .
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- GNU Affero General Public License for more details.
- .
- On Debian systems, the complete text of the AGPL 3 can be found in
- /usr/share/doc/pulseaudio/AGPL
+ GNU AFFERO GENERAL PUBLIC LICENSE
+Version 3, 19 November 2007
+ .
+  Copyright (C) 2007 Free Software Foundation, Inc. 
+  Everyone is permitted to copy and distribute verbatim copies
+  of this license document, but changing it is not allowed.
+ .
+ Preamble
+ .
+   The GNU Affero General Public License is a free, copyleft license for
+ software and other kinds of works, specifically designed to ensure
+ cooperation with the community in the case of network server software.
+ .
+   The licenses for most software and other practical works are designed
+ to take away your freedom to share and change the works.  By contrast,
+ our General Public Licenses are intended to guarantee your freedom to
+ share and change all versions of a program--to make sure it remains free
+ software for all its users.
+ .
+   When we speak of free software, we are referring to freedom, not
+ price.  Our General Public Licenses are designed to make sure that you
+ have the freedom to distribute copies of free software (and charge for
+ them if you wish), that you receive source code or can get it if you
+ want it, that you can change the software or use pieces of it in new
+ free programs, and that you know you can do these things.
+ .
+   Developers that use our General Public Licenses protect your rights
+ with two steps: (1) assert copyright on the software, and (2) offer
+ you this License which gives you legal permission to copy, distribute
+ and/or modify the software.
+ .
+   A secondary benefit of defending all users' freedom is that
+ improvements made in alternate versions of the program, if they
+ receive widespread use, become available for other developers to
+ incorporate.  Many developers of free software are heartened and
+ encouraged by the resulting cooperation.  However, in 

Bug#864028: stretch-pu: flatpak/0.8.6-1~deb9u1

[Simon McVittie]

On Sun, 18 Jun 2017 at 21:17:33 +0100, Simon McVittie wrote:
> Here is an updated debdiff built for stretch. The only differences are the
> new changelog entry, and the change of git branch in debian/gbp.conf
> (which only affects builds from git).

Er, *here* is an updated debdiff. Filtered to remove translations,
gtk-doc-generated HTML and the worst of the Autotools noise, as before.

The changes in xdp-dbus.[ch] will be overwritten at build time. I've
had a patch accepted upstream to arrange for those generated files to not
appear in upstream tarballs at all - I can ask for that to be included in
0.8.7 if it would make reviews easier.

S
diffstat for flatpak-0.8.5 flatpak-0.8.6

 NEWS|   26 ++
 common/flatpak-dir.c|   70 +
 common/flatpak-run.c|  126 
 configure.ac|4 -
 dbus-proxy/flatpak-proxy.c  |2 
 debian/changelog|   34 
 debian/gbp.conf |2 
 document-portal/xdp-dbus.c  |   20 ++---
 document-portal/xdp-dbus.h  |2 
 lib/flatpak-version-macros.h|2 
 session-helper/flatpak-session-helper.c |2 
 tests/package_version.txt   |2 
 12 files changed, 230 insertions(+), 62 deletions(-)

diff -Nru --exclude configure --exclude po --exclude html flatpak-0.8.5/common/flatpak-dir.c flatpak-0.8.6/common/flatpak-dir.c
--- flatpak-0.8.5/common/flatpak-dir.c	2017-04-03 12:44:28.0 +0100
+++ flatpak-0.8.6/common/flatpak-dir.c	2017-06-05 13:45:47.0 +0100
@@ -3113,6 +3113,9 @@
   "X-Flatpak-Tags",
   (const char * const *) tags, length);
 }
+
+  /* Add a marker so consumers can easily find out that this launches a sandbox */
+  g_key_file_set_string (keyfile, "Desktop Entry", "X-Flatpak", app);
 }
 
   groups = g_key_file_get_groups (keyfile, NULL);
@@ -3408,21 +3411,33 @@
 GCancellable *cancellable,
 GError  **error)
 {
-  gboolean ret = FALSE;
+  const char *exported_subdirs[] = {
+"share/applications",  "../..",
+"share/icons", "../..",
+"share/dbus-1/services",   "../../.."
+  };
+  int i;
 
-  if (!flatpak_mkdir_p (destination, cancellable, error))
-goto out;
+  for (i = 0; i < G_N_ELEMENTS(exported_subdirs); i = i + 2)
+{
+  /* The fds are closed by this call */
+  g_autoptr(GFile) sub_source = g_file_resolve_relative_path (source, exported_subdirs[i]);
+  g_autoptr(GFile) sub_destination = g_file_resolve_relative_path (destination, exported_subdirs[i]);
+  g_autofree char *sub_symlink_prefix = g_build_filename (exported_subdirs[i+1], symlink_prefix, exported_subdirs[i], NULL);
 
-  /* The fds are closed by this call */
-  if (!export_dir (AT_FDCWD, flatpak_file_get_path_cached (source), symlink_prefix, "",
-   AT_FDCWD, flatpak_file_get_path_cached (destination),
-   cancellable, error))
-goto out;
+  if (!g_file_query_exists (sub_source, cancellable))
+continue;
 
-  ret = TRUE;
+  if (!flatpak_mkdir_p (sub_destination, cancellable, error))
+return FALSE;
 
-out:
-  return ret;
+  if (!export_dir (AT_FDCWD, flatpak_file_get_path_cached (sub_source), sub_symlink_prefix, "",
+   AT_FDCWD, flatpak_file_get_path_cached (sub_destination),
+   cancellable, error))
+return FALSE;
+}
+
+  return TRUE;
 }
 
 gboolean
@@ -7292,13 +7307,17 @@
  flatpak_repo_set_* () family of functions) */
   static const char *const supported_params[] = {
 "xa.title",
-"xa.default-branch", NULL
+"xa.default-branch",
+"xa.gpg-keys",
+"xa.redirect-url",
+NULL
   };
 
   g_autoptr(GVariant) summary = NULL;
   g_autoptr(GVariant) extensions = NULL;
   g_autoptr(GPtrArray) updated_params = NULL;
   GVariantIter iter;
+  g_autoptr(GBytes) gpg_keys = NULL;
 
   updated_params = g_ptr_array_new_with_free_func (g_free);
   summary = fetch_remote_summary_file (self, remote, cancellable, error);
@@ -7315,14 +7334,31 @@
 
   while (g_variant_iter_next (, "{sv}", , _var))
 {
-  /* At the moment, every supported parameter are strings */
-  if (g_strv_contains (supported_params, key) &&
-  g_variant_get_type_string (value_var))
+  /* At the moment, every supported parameter except gpg-keys are strings */
+  if (strcmp (key, "xa.gpg-keys") == 0 &&
+  g_variant_is_of_type (value_var, G_VARIANT_TYPE_BYTESTRING))
+{
+  const guchar *gpg_data = g_variant_get_data (value_var);
+  gsize gpg_size = g_variant_get_size (value_var);
+  g_autofree gchar *gpg_data_checksum = 

Bug#864297: unblock: schroot/1.6.10-4

[Raphael Hertzog]

On Mon, 19 Jun 2017, Michael Biebl wrote:
> Given that, I wonder if a stable upload is actually still needed.

The stable upload also fixes the bash completion file and fixes
the dependencies of the service file to not depend on the systemd version
of $network in the LSB dependencies.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: https://www.freexian.com/services/debian-lts.html
Learn to master Debian: https://debian-handbook.info/get/

Bug#865102: jessie-pu: package libdvdnav/5.0.1-1+deb8u1

[Mike Gabriel]

On  Mo 19 Jun 2017 12:43:06 CEST, Mike Gabriel wrote:


Package: release.debian.org
Severity: normal
Tags: jessie
User: release.debian@packages.debian.org
Usertags: pu

Attached is a .debdiff that fixes various crashes when playing DVDs in VLC.
The DVD mostly starts playing for some time, but crashes some 5-10 minutes
after the DVD has been started playing. With the attached change, no crashes
are observed anymore.

The issue is resolved in stretch, but still open in jessie. Please consider
accepting this change via jessie-pu. Thanks.


There is an update for one uploader in the .debdiff. This one is of  
course optional, but preferred.


Mike
--

mike gabriel aka sunweaver (Debian Developer)
mobile: +49 (1520) 1976 148
landline: +49 (4354) 8390 139

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: sunwea...@debian.org, http://sunweavers.net



pgp8uw9OslS_N.pgp
Description: Digitale PGP-Signatur

Bug#864297: unblock: schroot/1.6.10-4

[Michael Biebl]

Am 19.06.2017 um 14:11 schrieb Raphael Hertzog:
> Hello Michael,
> 
> On Sat, 17 Jun 2017, Michael Biebl wrote:
>> I would suggest to simply ship a drop-in snippet for schroot, which sets
>> the Type and Timeout.
> 
> Thanks for the suggestion but I'll skip it. This is what I would have
> expected DSA to do if I had not shipped a systemd service unit. 

Maybe the DSA admins weren't aware that they could simply ship such a
drop-in easily to increase the timeout. Should be trivial to distribute
that via puppet.
Given that, I wonder if a stable upload is actually still needed.

>> It also makes it more obvious that eventually this package should be
>> converted to use proper service files. I always cringe at packages
>> shipping "native" service files which only run the SysV init scripts.
> 
> Feel free to open a separate bug report if you want to make sure that we
> don't forget this.

Done, #865110


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature

Bug#864297: unblock: schroot/1.6.10-4

[Raphael Hertzog]

Hello Michael,

On Sat, 17 Jun 2017, Michael Biebl wrote:
> I would suggest to simply ship a drop-in snippet for schroot, which sets
> the Type and Timeout.

Thanks for the suggestion but I'll skip it. This is what I would have
expected DSA to do if I had not shipped a systemd service unit. But now
I have a full unit in unstable already and I would have to change first in
unstable before being able to backport the change in stretch.

> It also makes it more obvious that eventually this package should be
> converted to use proper service files. I always cringe at packages
> shipping "native" service files which only run the SysV init scripts.

Feel free to open a separate bug report if you want to make sure that we
don't forget this.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: https://www.freexian.com/services/debian-lts.html
Learn to master Debian: https://debian-handbook.info/get/

Bug#864297: pu: schroot/1.6.10-3+deb9u1

[Raphael Hertzog]

Hi Julien,

On Sat, 17 Jun 2017, Julien Cristau wrote:
> > Re-purposing the bug to that end. Let me know when you are happy with an
> > upload to stretch.
> 
> The d/rules change means I'd like to see a binary debdiff
> (--controlfiles ALL).

Here it is:

[The following lists of changes regard files as different if they have
different names, permissions or owners.]

Files in second .changes but not in first
-
-rw-r--r--  root/root   /lib/systemd/system/schroot.service
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/09/32e08e181e9db4b1d7102f3087e135e40f06f8.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/91/825233582dcb5f103068f82ab2f63591f66e49.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/ef/32bd1b322a67b4d060e3643e94c6a264c0807e.debug

Files in first .changes but not in second
-
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/23/96c42ca8c5c7830f113d1de60e42f9b6bfb964.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/37/5561a599aeead2364947c166274dfbcd0ed846.debug
-rw-r--r--  root/root   
/usr/lib/debug/.build-id/7f/4c34360779990b31d4c4c7595feb3f10ad7d31.debug

No differences were encountered between the conffiles files of package schroot

Control files of package schroot: lines which differ (wdiff format)
---
Depends: lsb-base, libboost-filesystem1.62.0, libboost-iostreams1.62.0, 
libboost-program-options1.62.0, libboost-system1.62.0, libc6 (>= 2.14), libgcc1 
(>= 1:3.0), libpam0g (>= 0.99.7.1), libstdc++6 (>= 5.2), libuuid1 (>= 2.16), 
{+init-system-helpers (>= 1.18~),+} schroot-common (= [-1.6.10-3)-] 
{+1.6.10-3+deb9u1)+}
{+Homepage: https://gitlab.com/codelibre/schroot+}
Installed-Size: [-2652-] {+2659+}
Version: [-1.6.10-3-] {+1.6.10-3+deb9u1+}

Postinst files of package schroot: lines which differ (wdiff format)

# Automatically added by {+dh_systemd_enable+}
{+# This will only remove masks created by d-s-h on package removal.+}
{+deb-systemd-helper unmask schroot.service >/dev/null || true+}
{++}
{+# was-enabled defaults to true, so new installations run enable.+}
{+if deb-systemd-helper --quiet was-enabled schroot.service; then+}
{+  # Enables the unit on first installation, creates new+}
{+  # symlinks on upgrades if the unit file has changed.+}
{+  deb-systemd-helper enable schroot.service >/dev/null || true+}
{+else+}
{+  # Update the statefile to add new symlinks (if any), which need to be+}
{+  # cleaned up on purge. Also remove old symlinks.+}
{+  deb-systemd-helper update-state schroot.service >/dev/null || true+}
{+fi+}
{+# End automatically added section+}
{+# Automatically added by+} dh_installinit

Postrm files of package schroot: lines which differ (wdiff format)
--
{+# Automatically added by dh_systemd_enable+}
{+if [ "$1" = "remove" ]; then+}
{+  if [ -x "/usr/bin/deb-systemd-helper" ]; then+}
{+  deb-systemd-helper mask schroot.service >/dev/null+}
{+  fi+}
{+fi+}
{++}
{+if [ "$1" = "purge" ]; then+}
{+  if [ -x "/usr/bin/deb-systemd-helper" ]; then+}
{+  deb-systemd-helper purge schroot.service >/dev/null+}
{+  deb-systemd-helper unmask schroot.service >/dev/null+}
{+  fi+}
{+fi+}
{+# End automatically added section+}

No differences were encountered between the preinst files of package schroot

No differences were encountered between the prerm files of package schroot

Control files of package schroot-common: lines which differ (wdiff format)
--
{+Homepage: https://gitlab.com/codelibre/schroot+}
Installed-Size: [-511-] {+512+}
Version: [-1.6.10-3-] {+1.6.10-3+deb9u1+}

Control files of package schroot-dbgsym: lines which differ (wdiff format)
--
Build-Ids: [-2396c42ca8c5c7830f113d1de60e42f9b6bfb964 
375561a599aeead2364947c166274dfbcd0ed846 
7f4c34360779990b31d4c4c7595feb3f10ad7d31-] 
{+0932e08e181e9db4b1d7102f3087e135e40f06f8 
91825233582dcb5f103068f82ab2f63591f66e49 
ef32bd1b322a67b4d060e3643e94c6a264c0807e+}
Depends: schroot (= [-1.6.10-3)-] {+1.6.10-3+deb9u1)+}
{+Homepage: https://gitlab.com/codelibre/schroot+}
Installed-Size: [-14334-] {+14339+}
Version: [-1.6.10-3-] {+1.6.10-3+deb9u1+}

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: https://www.freexian.com/services/debian-lts.html
Learn to master Debian: https://debian-handbook.info/get/

Bug#865102: jessie-pu: package libdvdnav/5.0.1-1+deb8u1

[Mike Gabriel]

Package: release.debian.org
Severity: normal
Tags: jessie
User: release.debian@packages.debian.org
Usertags: pu

Attached is a .debdiff that fixes various crashes when playing DVDs in VLC.
The DVD mostly starts playing for some time, but crashes some 5-10 minutes
after the DVD has been started playing. With the attached change, no crashes
are observed anymore.

The issue is resolved in stretch, but still open in jessie. Please consider
accepting this change via jessie-pu. Thanks.


-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru libdvdnav-5.0.1/debian/changelog libdvdnav-5.0.1/debian/changelog
--- libdvdnav-5.0.1/debian/changelog2014-08-30 22:38:40.0 +0200
+++ libdvdnav-5.0.1/debian/changelog2017-06-19 10:26:30.0 +0200
@@ -1,3 +1,11 @@
+libdvdnav (5.0.1-1+deb8u1) jessie-proposed-updates; urgency=medium
+
+  * debian/control: Uploader e-mail address updated
+  * debian/patches/: new patchset started
+- 0001-dvdnav_get_position.patch added (Closes: #763279)
+
+ -- Matteo F. Vescovi   Mon, 19 Jun 2017 10:26:30 +0200
+
 libdvdnav (5.0.1-1) unstable; urgency=medium
 
   [ Benjamin Drung ]
diff -Nru libdvdnav-5.0.1/debian/control libdvdnav-5.0.1/debian/control
--- libdvdnav-5.0.1/debian/control  2014-08-30 21:54:49.0 +0200
+++ libdvdnav-5.0.1/debian/control  2017-06-19 10:26:03.0 +0200
@@ -4,7 +4,7 @@
 Maintainer: Debian Multimedia Maintainers 

 Uploaders: Reinhard Tartler ,
Benjamin Drung ,
-   Matteo F. Vescovi ,
+   Matteo F. Vescovi ,
Balint Reczey 
 Build-Depends: debhelper (>= 9), dh-autoreconf, doxygen, libdvdread-dev
 Standards-Version: 3.9.5
diff -Nru libdvdnav-5.0.1/debian/patches/0001-dvdnav_get_position.patch 
libdvdnav-5.0.1/debian/patches/0001-dvdnav_get_position.patch
--- libdvdnav-5.0.1/debian/patches/0001-dvdnav_get_position.patch   
1970-01-01 01:00:00.0 +0100
+++ libdvdnav-5.0.1/debian/patches/0001-dvdnav_get_position.patch   
2014-12-31 09:24:43.0 +0100
@@ -0,0 +1,26 @@
+From: Jean-Baptiste Kempf 
+Date: Sun, 31 Aug 2014 00:51:40 +0200
+Subject: dvdnav_get_position
+
+Return an error in dvdnav_get_position instead of asserting.
+
+Closes: #763279
+LP: #1236939
+---
+ src/searching.c | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/src/searching.c b/src/searching.c
+index f6e497e..74a16ee 100644
+--- a/src/searching.c
 b/src/searching.c
+@@ -563,7 +563,8 @@ dvdnav_status_t dvdnav_get_position(dvdnav_t *this, 
uint32_t *pos,
+ *len += cell->last_sector - cell->first_sector + 1;
+   }
+ 
+-  assert((signed)*pos != -1);
++  if((signed)*pos == -1)
++return DVDNAV_STATUS_ERR;
+ 
+   pthread_mutex_unlock(>vm_lock);
+ 
diff -Nru libdvdnav-5.0.1/debian/patches/series 
libdvdnav-5.0.1/debian/patches/series
--- libdvdnav-5.0.1/debian/patches/series   1970-01-01 01:00:00.0 
+0100
+++ libdvdnav-5.0.1/debian/patches/series   2014-12-31 09:24:43.0 
+0100
@@ -0,0 +1 @@
+0001-dvdnav_get_position.patch

Re: Accepted thermald 1.5.4-2.1 (source amd64) into testing-proposed-updates

[Adam D. Barratt]

On 2017-06-19 8:51, Colin Ian King wrote:

Hi Adam,

On 18/06/17 12:14, Adam D. Barratt wrote:

On Wed, 2017-06-14 at 08:41 +0100, Adam D. Barratt wrote:
What was the intent of this upload? If it was to try and get the 
updated
package into the release, then a) it's (far) too late and b) it 
should

have been discussed, not just uploaded to t-p-u.


Ping?

As you uploaded the package to t-p-u before the release, it has now
ended up in proposed-updates.

However, it is *still* unfixed in unstable. What's your plan for 
getting

that sorted? We will not be including the package in a stretch point
release until the fix is applied in unstable.


I've double checked and the the version of thermald in unstable 1.6.0-3
contains this upstream fix, this landed in the 1.6.0 release of 
thermald:


Then I'm very confused, and so is the BTS. :-)

You filed #864707 with "Version: 1.6.0-3", which means that you told the 
BTS that the bug is present in that version. So far as the BTS is 
concerned, that bug is still open in unstable.


If it is in fact fixed in unstable, then you want to do something like 
send "notfound 864707 1.6.0-3\nfixed 864707 1.6.0-1" to 
control@bugs.d.o.


Regards,

Adam

Re: Accepted thermald 1.5.4-2.1 (source amd64) into testing-proposed-updates

[Colin Ian King]

Hi Adam,

On 18/06/17 12:14, Adam D. Barratt wrote:
> On Wed, 2017-06-14 at 08:41 +0100, Adam D. Barratt wrote:
>> What was the intent of this upload? If it was to try and get the updated 
>> package into the release, then a) it's (far) too late and b) it should 
>> have been discussed, not just uploaded to t-p-u.
> 
> Ping?
> 
> As you uploaded the package to t-p-u before the release, it has now
> ended up in proposed-updates.
> 
> However, it is *still* unfixed in unstable. What's your plan for getting
> that sorted? We will not be including the package in a stretch point
> release until the fix is applied in unstable.

I've double checked and the the version of thermald in unstable 1.6.0-3
contains this upstream fix, this landed in the 1.6.0 release of thermald:

commit 5f1be4d9d6f3b27d2c9884f833ca05cdcb4428e0
Author: Srinivas Pandruvada 
Date:   Fri Mar 3 22:19:25 2017 -0800

Update release number

(this was to 1.6.0)

commit 91a53d8b7789f45727b7349c8390ff16cc760958
Author: Srinivas Pandruvada 
Date:   Fri Mar 3 22:09:25 2017 -0800

Remove deprecated files

commit 405dcc0a6464d92e656789a5a76bb23f479975ea
Author: Srinivas Pandruvada 
Date:   Fri Mar 3 21:40:45 2017 -0800

Add Kabylake and Broadwell-GT processor models

(the fix in question)

Colin
> 
> (As a side note, given that you are the maintainer of the package, why
> was the upload version -2.1?)

Good point. My fail

> 
> Regards,
> 
> Adam

Colin
> 

Re: Accepted thermald 1.5.4-2.1 (source amd64) into testing-proposed-updates

[Mattia Rizzolo]

On Mon, Jun 19, 2017 at 08:51:21AM +0100, Colin Ian King wrote:
> On 18/06/17 12:14, Adam D. Barratt wrote:
> > However, it is *still* unfixed in unstable. What's your plan for getting
> > that sorted? We will not be including the package in a stretch point
> > release until the fix is applied in unstable.
> 
> I've double checked and the the version of thermald in unstable 1.6.0-3
> contains this upstream fix, this landed in the 1.6.0 release of thermald:

Then you failed to do proper version tracking in the BTS, please take
care of the fixed/found versions there, so they match reality.

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature