Bug#865537: stretch-pu: plasma 5.8.7 LTS pre-approval
2017-11-30 7:08 GMT+01:00 Adam D. Barratt : > On Thu, 2017-11-30 at 06:29 +0100, Julien Aubin wrote: > > It turns out that the mix of 5.8.6 and 5.8.7 plasma parts leads to > > some extremely annoying issues, at least for me. The most noticeable > > are : > > - Massive memory leak in ksmserver (bug #881015) > > - From time to time the system does not detect my soundcard anymore. > > > > These issues did not appear prior to Debian 9.2 release so I strongly > > suspect that the mix of 5.8.6 and 5.8.7 libs triggered the issues. > > There were no 5.8.7 packages included in 9.2 so far as I can see. Which > related packages do you believe were updated? > > Regards, > > Adam > Okay my bad. In that case the mem leak must be related to some other component, cannot isolate it. My findings in the dedicated bug report about ksmserver. This bug seems anyway hard to debug, and maybe 5.8.7 contains a fix for this.
Bug#865537: stretch-pu: plasma 5.8.7 LTS pre-approval
On Thu, 2017-11-30 at 06:29 +0100, Julien Aubin wrote: > It turns out that the mix of 5.8.6 and 5.8.7 plasma parts leads to > some extremely annoying issues, at least for me. The most noticeable > are : > - Massive memory leak in ksmserver (bug #881015) > - From time to time the system does not detect my soundcard anymore. > > These issues did not appear prior to Debian 9.2 release so I strongly > suspect that the mix of 5.8.6 and 5.8.7 libs triggered the issues. There were no 5.8.7 packages included in 9.2 so far as I can see. Which related packages do you believe were updated? Regards, Adam
Bug#865537: stretch-pu: plasma 5.8.7 LTS pre-approval
On Sat, 15 Jul 2017 21:23:58 +0100 Ian Jackson < ijack...@chiark.greenend.org.uk> wrote: > (resending with right list address) > > Maximiliano Curia writes ("stretch-pu: plasma 5.8.7 LTS pre-approval"): > > The source packages that I would like to update in stretch are: > > Thanks. I am not a RM but I am trying to help out by providing review > comments. I have reviewed this request. > > tl;dr: Most of them are very good. Two are questionable: >plasma-workspace >plasma-desktop > > One caveat for all the packages: they all had big translation updates. > I ignored these. I assume these are fine for stretch-pu. > > > In each case I have been relying on the accuracy not only of the > provided debdiff but the provided "packaging" diff and upstream > git log. I found the latter particularly helpful - thank you! > > Overall I would like to say that I am impressed with the associated > documentation, and what I saw of upstream relase processes. With the > two exceptions I mention above, I was convinced by the thoroughness of > the approach upstream. Even when I didn't understand the code > etc. myself, upstream seemed to be making decisions on the right basis > and with good review. > > > bluedevil/4:5.8.7-1+deb9u1 > > breeze-gtk/5.8.7-1+deb9u1 > > kde-cli-tools/4:5.8.7-1+deb9u1 > > kscreenlocker/5.8.7-1+deb9u1 > > plasma-pa/4:5.8.7-1+deb9u1 > > user-manager/4:5.8.7-1+deb9u1 > > kwin/4:5.8.7-1+deb9u1 > > libksysguard/4:5.8.7-1+deb9u1 > > systemsettings/4:5.8.7-1+deb9u1 > > These LGTM. I did notice a few things that are IMO not of concern: > > The urls > > https://gnuservers.com.ar/~maxy/debian/plasma_5.8.7_stretch-pu/kscreenlocker_5.8.4_5.8.7.upstream.gitlog > https://gnuservers.com.ar/~maxy/debian/plasma_5.8.7_stretch-pu/systemsettigns_5.8.4_5.8.7.upstream.gitlog > > referred to in the bug report are 404. The urls are wrong and should > be > > https://gnuservers.com.ar/~maxy/debian/plasma_5.8.7_stretch-pu/libksysguard_5.8.4_5.8.7.upstream.gitlog > https://gnuservers.com.ar/~maxy/debian/plasma_5.8.7_stretch-pu/systemsettings_5.8.4_5.8.7.upstream.gitlog > > Do you generate these requests by hand ?! > > Secondly, this in the changelog entry for libksysguard 4:5.8.7-1 is > rather odd: > | * Add new patch: Drop-html-markup-from-polkit-action-file.patch. > | Thanks to Michael Biebl for reporting (Closes: 696905) > ... > | * Drop upstream applied patch: Drop-html-markup-from-polkit-action-file.patch > and it confused me briefly. > Hi, It turns out that the mix of 5.8.6 and 5.8.7 plasma parts leads to some extremely annoying issues, at least for me. The most noticeable are : - Massive memory leak in ksmserver (bug #881015) - From time to time the system does not detect my soundcard anymore. These issues did not appear prior to Debian 9.2 release so I strongly suspect that the mix of 5.8.6 and 5.8.7 libs triggered the issues. For the latter one I must stress that my GPU is detected as a soundcard as well, which is a normal behaviour. (NVidia GPU w/ 375.82 blob) Restarting KDE fixes the issues, but for the issue with ksmserver you have to kill ksmserver manually, and then run kill -9 -1 as the component becomes unresponsive when it stats leaking memory. So could you please make a full transition to 5.8.7 ? Thanks a lot !
NEW changes in stable-new
Processing changes file: python2.7_2.7.13-2+deb9u2_armel.changes ACCEPT
NEW changes in stable-new
Processing changes file: python2.7_2.7.13-2+deb9u2_arm64.changes ACCEPT
Bug#883124: stretch-pu: package golang-github-go-ldap-ldap/2.4.1-1
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Dear stable release managers, I've prepared a fix for CVE-2017-14623, Debian BTS #876404. The security team does not intend to publish a DSA for this minor issue, so I'm asking here if you would accept an upload for stable-proposed-updates. The source debdiff is attached. Please tell me if I should upload the package or if you need further changes. Regards, Tobias diff -Nru golang-github-go-ldap-ldap-2.4.1/debian/changelog golang-github-go-ldap-ldap-2.4.1/debian/changelog --- golang-github-go-ldap-ldap-2.4.1/debian/changelog 2016-08-16 18:19:35.0 +0200 +++ golang-github-go-ldap-ldap-2.4.1/debian/changelog 2017-11-29 23:45:26.0 +0100 @@ -1,3 +1,17 @@ +golang-github-go-ldap-ldap (2.4.1-1+deb9u1) stretch; urgency=medium + + * Team upload. + * Require explicit intention for empty password. +This is normally used for unauthenticated bind, and +https://tools.ietf.org/html/rfc4513#section-5.1.2 recommends: +"Clients SHOULD disallow an empty password input to a Name/Password +Authentication user interface" +This is (mostly) a cherry-pick of 95ede12 from upstream, except +the bit in ldap_test.go, which is unrelated to the security issue. +This fixes CVE-2017-14623. (Closes: #876404) + + -- Dr. Tobias Quathamer Wed, 29 Nov 2017 23:45:26 +0100 + golang-github-go-ldap-ldap (2.4.1-1) unstable; urgency=medium * New upstream version. diff -Nru golang-github-go-ldap-ldap-2.4.1/debian/patches/0002-Require-explicit-intention-for-empty-password.patch golang-github-go-ldap-ldap-2.4.1/debian/patches/0002-Require-explicit-intention-for-empty-password.patch --- golang-github-go-ldap-ldap-2.4.1/debian/patches/0002-Require-explicit-intention-for-empty-password.patch 1970-01-01 01:00:00.0 +0100 +++ golang-github-go-ldap-ldap-2.4.1/debian/patches/0002-Require-explicit-intention-for-empty-password.patch 2017-11-29 23:02:18.0 +0100 @@ -0,0 +1,170 @@ +From: "Dr. Tobias Quathamer" +Date: Wed, 29 Nov 2017 14:34:16 +0100 +Subject: Require explicit intention for empty password. + +This is normally used for unauthenticated bind, and +https://tools.ietf.org/html/rfc4513#section-5.1.2 recommends: + +> Clients SHOULD disallow an empty password input to a Name/Password +> Authentication user interface + +This is (mostly) a cherry-pick of 95ede12 from upstream. I've removed +the bit in ldap_test.go, which is unrelated to the security issue. + +This fixes CVE-2017-14623. + +https://github.com/go-ldap/ldap/commit/95ede1266b237bf8e9aa5dce0b3250e51bfefe66 +--- + bind.go | 80 + error.go | 9 +++ + ldap_test.go | 64 +++- + 3 files changed, 77 insertions(+), 76 deletions(-) + +diff --git a/bind.go b/bind.go +index 26b3cc7..432efa7 100644 +--- a/bind.go b/bind.go +@@ -7,7 +7,7 @@ package ldap + import ( + "errors" + +- "gopkg.in/asn1-ber.v1" ++ ber "gopkg.in/asn1-ber.v1" + ) + + // SimpleBindRequest represents a username/password bind operation +@@ -18,6 +18,9 @@ type SimpleBindRequest struct { + Password string + // Controls are optional controls to send with the bind request + Controls []Control ++ // AllowEmptyPassword sets whether the client allows binding with an empty password ++ // (normally used for unauthenticated bind). ++ AllowEmptyPassword bool + } + + // SimpleBindResult contains the response from the server +@@ -28,9 +31,10 @@ type SimpleBindResult struct { + // NewSimpleBindRequest returns a bind request + func NewSimpleBindRequest(username string, password string, controls []Control) *SimpleBindRequest { + return &SimpleBindRequest{ +- Username: username, +- Password: password, +- Controls: controls, ++ Username: username, ++ Password: password, ++ Controls: controls, ++ AllowEmptyPassword: false, + } + } + +@@ -47,6 +51,10 @@ func (bindRequest *SimpleBindRequest) encode() *ber.Packet { + + // SimpleBind performs the simple bind operation defined in the given request + func (l *Conn) SimpleBind(simpleBindRequest *SimpleBindRequest) (*SimpleBindResult, error) { ++ if simpleBindRequest.Password == "" && !simpleBindRequest.AllowEmptyPassword { ++ return nil, NewError(ErrorEmptyPassword, errors.New("ldap: empty password not allowed by the client")) ++ } ++ + packet := ber.Encode(ber.ClassUniversal, ber.TypeConstructed, ber.TagSequence, nil, "LDAP Request") + packet.AppendChild(ber.NewInteger(ber.ClassUniversal, ber.TypePrimitive, ber.TagInteger, l.nextMessageID(), "MessageID")) + encodedBindRequest := simpleBindRequest.encode() +@@ -97,47 +105,33 @@ func (l *Conn) SimpleBind(simpleBindRequest *SimpleBindRequest) (*SimpleBindResu + return result, nil + } + +-// Bind performs a bind with the given username and password ++// Bind performs a bind with the given username and password.
NEW changes in stable-new
Processing changes file: icu_57.1-6+deb9u1_armel.changes ACCEPT Processing changes file: weechat_1.6-1+deb9u2_armel.changes ACCEPT
NEW changes in stable-new
Processing changes file: lasi_1.1.0-2~deb9u1_armel.changes ACCEPT Processing changes file: weechat_1.6-1+deb9u2_armhf.changes ACCEPT Processing changes file: weechat_1.6-1+deb9u2_mips.changes ACCEPT Processing changes file: weechat_1.6-1+deb9u2_mips64el.changes ACCEPT
NEW changes in stable-new
Processing changes file: python2.7_2.7.13-2+deb9u2_armhf.changes ACCEPT
NEW changes in stable-new
Processing changes file: icu_57.1-6+deb9u1_mips.changes ACCEPT
NEW changes in stable-new
Processing changes file: gdm3_3.22.3-3+deb9u1_mipsel.changes ACCEPT Processing changes file: grok_1.20110708.1-4.3~deb9u1_mipsel.changes ACCEPT Processing changes file: libxkbcommon_0.7.1-2~deb9u1_mipsel.changes ACCEPT Processing changes file: lxc_2.0.7-2+deb9u1_mips64el.changes ACCEPT Processing changes file: lxc_2.0.7-2+deb9u1_mipsel.changes ACCEPT Processing changes file: pdns-recursor_4.0.4-1+deb9u2_mipsel.changes ACCEPT Processing changes file: python2.7_2.7.13-2+deb9u2_i386.changes ACCEPT Processing changes file: qtcurve_1.8.18+git20160320-3d8622c-3+deb9u1_mips64el.changes ACCEPT Processing changes file: qtcurve_1.8.18+git20160320-3d8622c-3+deb9u1_mipsel.changes ACCEPT Processing changes file: ruby-ox_2.1.1-2+deb9u1_mips64el.changes ACCEPT Processing changes file: ruby-ox_2.1.1-2+deb9u1_mipsel.changes ACCEPT
NEW changes in stable-new
Processing changes file: gdm3_3.22.3-3+deb9u1_armhf.changes ACCEPT Processing changes file: gdm3_3.22.3-3+deb9u1_mips64el.changes ACCEPT Processing changes file: grok_1.20110708.1-4.3~deb9u1_mips64el.changes ACCEPT Processing changes file: icu_57.1-6+deb9u1_armhf.changes ACCEPT Processing changes file: icu_57.1-6+deb9u1_mips64el.changes ACCEPT Processing changes file: icu_57.1-6+deb9u1_mipsel.changes ACCEPT Processing changes file: lasi_1.1.0-2~deb9u1_mips64el.changes ACCEPT Processing changes file: lasi_1.1.0-2~deb9u1_mipsel.changes ACCEPT Processing changes file: libxkbcommon_0.7.1-2~deb9u1_armhf.changes ACCEPT Processing changes file: libxkbcommon_0.7.1-2~deb9u1_mips64el.changes ACCEPT Processing changes file: lxc_2.0.7-2+deb9u1_armhf.changes ACCEPT Processing changes file: pdns_4.0.3-1+deb9u2_mips.changes ACCEPT Processing changes file: pdns_4.0.3-1+deb9u2_mips64el.changes ACCEPT Processing changes file: pdns_4.0.3-1+deb9u2_mipsel.changes ACCEPT Processing changes file: pdns-recursor_4.0.4-1+deb9u2_armhf.changes ACCEPT Processing changes file: pdns-recursor_4.0.4-1+deb9u2_mips.changes ACCEPT Processing changes file: pdns-recursor_4.0.4-1+deb9u2_mips64el.changes ACCEPT Processing changes file: python2.7_2.7.13-2+deb9u2_mips.changes ACCEPT Processing changes file: python2.7_2.7.13-2+deb9u2_mips64el.changes ACCEPT Processing changes file: python2.7_2.7.13-2+deb9u2_mipsel.changes ACCEPT Processing changes file: python2.7_2.7.13-2+deb9u2_ppc64el.changes ACCEPT Processing changes file: python2.7_2.7.13-2+deb9u2_s390x.changes ACCEPT Processing changes file: qtcurve_1.8.18+git20160320-3d8622c-3+deb9u1_armhf.changes ACCEPT Processing changes file: qtcurve_1.8.18+git20160320-3d8622c-3+deb9u1_mips.changes ACCEPT Processing changes file: ruby-ox_2.1.1-2+deb9u1_armhf.changes ACCEPT Processing changes file: ruby-ox_2.1.1-2+deb9u1_mips.changes ACCEPT
NEW changes in stable-new
Processing changes file: grok_1.20110708.1-4.3~deb9u1_armhf.changes ACCEPT Processing changes file: grok_1.20110708.1-4.3~deb9u1_ppc64el.changes ACCEPT Processing changes file: lasi_1.1.0-2~deb9u1_armhf.changes ACCEPT Processing changes file: libxkbcommon_0.7.1-2~deb9u1_mips.changes ACCEPT Processing changes file: libxkbcommon_0.7.1-2~deb9u1_ppc64el.changes ACCEPT Processing changes file: lxc_2.0.7-2+deb9u1_armel.changes ACCEPT Processing changes file: lxc_2.0.7-2+deb9u1_mips.changes ACCEPT Processing changes file: lxc_2.0.7-2+deb9u1_ppc64el.changes ACCEPT Processing changes file: pdns_4.0.3-1+deb9u2_armel.changes ACCEPT Processing changes file: pdns_4.0.3-1+deb9u2_armhf.changes ACCEPT Processing changes file: qtcurve_1.8.18+git20160320-3d8622c-3+deb9u1_armel.changes ACCEPT Processing changes file: qtcurve_1.8.18+git20160320-3d8622c-3+deb9u1_ppc64el.changes ACCEPT Processing changes file: ruby-ox_2.1.1-2+deb9u1_armel.changes ACCEPT Processing changes file: ruby-ox_2.1.1-2+deb9u1_ppc64el.changes ACCEPT
NEW changes in stable-new
Processing changes file: gdm3_3.22.3-3+deb9u1_i386.changes ACCEPT Processing changes file: gdm3_3.22.3-3+deb9u1_mips.changes ACCEPT Processing changes file: gdm3_3.22.3-3+deb9u1_ppc64el.changes ACCEPT Processing changes file: grok_1.20110708.1-4.3~deb9u1_armel.changes ACCEPT Processing changes file: grok_1.20110708.1-4.3~deb9u1_mips.changes ACCEPT Processing changes file: icu_57.1-6+deb9u1_s390x.changes ACCEPT Processing changes file: libxkbcommon_0.7.1-2~deb9u1_armel.changes ACCEPT Processing changes file: libxkbcommon_0.7.1-2~deb9u1_i386.changes ACCEPT Processing changes file: lxc_2.0.7-2+deb9u1_arm64.changes ACCEPT Processing changes file: lxc_2.0.7-2+deb9u1_i386.changes ACCEPT Processing changes file: lxc_2.0.7-2+deb9u1_s390x.changes ACCEPT Processing changes file: pdns-recursor_4.0.4-1+deb9u2_armel.changes ACCEPT Processing changes file: pdns-recursor_4.0.4-1+deb9u2_i386.changes ACCEPT Processing changes file: pdns-recursor_4.0.4-1+deb9u2_ppc64el.changes ACCEPT Processing changes file: qtcurve_1.8.18+git20160320-3d8622c-3+deb9u1_arm64.changes ACCEPT Processing changes file: qtcurve_1.8.18+git20160320-3d8622c-3+deb9u1_i386.changes ACCEPT Processing changes file: qtcurve_1.8.18+git20160320-3d8622c-3+deb9u1_s390x.changes ACCEPT Processing changes file: ruby-ox_2.1.1-2+deb9u1_arm64.changes ACCEPT Processing changes file: ruby-ox_2.1.1-2+deb9u1_i386.changes ACCEPT Processing changes file: ruby-ox_2.1.1-2+deb9u1_s390x.changes ACCEPT
NEW changes in stable-new
Processing changes file: doit_0.28.0-1+deb9u1_all.changes ACCEPT Processing changes file: gdm3_3.22.3-3+deb9u1_arm64.changes ACCEPT Processing changes file: gdm3_3.22.3-3+deb9u1_armel.changes ACCEPT Processing changes file: gdm3_3.22.3-3+deb9u1_s390x.changes ACCEPT Processing changes file: grok_1.20110708.1-4.3~deb9u1_amd64.changes ACCEPT Processing changes file: grok_1.20110708.1-4.3~deb9u1_arm64.changes ACCEPT Processing changes file: grok_1.20110708.1-4.3~deb9u1_i386.changes ACCEPT Processing changes file: grok_1.20110708.1-4.3~deb9u1_s390x.changes ACCEPT Processing changes file: icu_57.1-6+deb9u1_arm64.changes ACCEPT Processing changes file: icu_57.1-6+deb9u1_i386.changes ACCEPT Processing changes file: lasi_1.1.0-2~deb9u1_amd64.changes ACCEPT Processing changes file: lasi_1.1.0-2~deb9u1_arm64.changes ACCEPT Processing changes file: lasi_1.1.0-2~deb9u1_i386.changes ACCEPT Processing changes file: lasi_1.1.0-2~deb9u1_mips.changes ACCEPT Processing changes file: lasi_1.1.0-2~deb9u1_ppc64el.changes ACCEPT Processing changes file: lasi_1.1.0-2~deb9u1_s390x.changes ACCEPT Processing changes file: libxkbcommon_0.7.1-2~deb9u1_amd64.changes ACCEPT Processing changes file: libxkbcommon_0.7.1-2~deb9u1_arm64.changes ACCEPT Processing changes file: libxkbcommon_0.7.1-2~deb9u1_s390x.changes ACCEPT Processing changes file: pdns_4.0.3-1+deb9u2_amd64.changes ACCEPT Processing changes file: pdns_4.0.3-1+deb9u2_arm64.changes ACCEPT Processing changes file: pdns_4.0.3-1+deb9u2_i386.changes ACCEPT Processing changes file: pdns_4.0.3-1+deb9u2_ppc64el.changes ACCEPT Processing changes file: pdns_4.0.3-1+deb9u2_s390x.changes ACCEPT Processing changes file: pdns-recursor_4.0.4-1+deb9u2_amd64.changes ACCEPT Processing changes file: pdns-recursor_4.0.4-1+deb9u2_arm64.changes ACCEPT Processing changes file: pdns-recursor_4.0.4-1+deb9u2_s390x.changes ACCEPT Processing changes file: python-diff-match-patch_20121119-3~deb9u1_all.changes ACCEPT Processing changes file: python-inflect_0.2.5-1.1~deb9u1_all.changes ACCEPT Processing changes file: ruby-ox_2.1.1-2+deb9u1_amd64.changes ACCEPT Processing changes file: ruby-pygments.rb_0.6.3-2+deb9u1_all.changes ACCEPT
Bug#883071: [release.debian.org] need to recompile eclipse-titan (6.1.0-1) in stable
2017-11-29 11:55 GMT+01:00 Adam D. Barratt : > > Please use "reportbug release.debian.org" when filing such bugs, it will > automatically set most of the metadata correctly for you. > > I did. After 5 attempts I gave up. It couldn't send the email via my gmail account, and I don't have time to debug it right now.
Bug#883071: [release.debian.org] need to recompile eclipse-titan (6.1.0-1) in stable
severity 883071 normal user release.debian@packages.debian.org usertags 883071 + nmu tags 883071 + stretch retitle 883071 nmu: eclipse-titan thanks On 2017-11-29 9:50, Pilisi Gergely wrote: Package: release.debian.org [1] Severity: grave No. The bug in your package might well be Release Critical, the request to rebuild it is most certainly not. Please use "reportbug release.debian.org" when filing such bugs, it will automatically set most of the metadata correctly for you. The Titan compiler needs the same gcc version (major.minor) which compiled the eclipse/titan binaries. When the package was built for stretch, the gcc version was 6.2.x, now it is 6.3.x Now if the user wants to build a TTCN-3 project with the titan compiler, then it will abort with an error: /usr/include/titan/cversion.h:7:2: error: #error The version of GCC does not match the expected version (GCC 6.2.0) A simple recompile will solve this issue, the new binaries will be created with gcc 6.3.x and Titan will work again. So please, recompile eclipse-titan. Regards, Adam
Bug#883071: [release.debian.org] need to recompile eclipse-titan (6.1.0-1) in stable
Package: release.debian.org Severity: grave --- Please enter the report below this line. --- The Titan compiler needs the same gcc version (major.minor) which compiled the eclipse/titan binaries. When the package was built for stretch, the gcc version was 6.2.x, now it is 6.3.x Now if the user wants to build a TTCN-3 project with the titan compiler, then it will abort with an error: /usr/include/titan/cversion.h:7:2: error: #error The version of GCC does not match the expected version (GCC 6.2.0) A simple recompile will solve this issue, the new binaries will be created with gcc 6.3.x and Titan will work again. So please, recompile eclipse-titan.
NEW changes in stable-new
Processing changes file: doit_0.28.0-1+deb9u1_source.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_source.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_all.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_amd64.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_arm64.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_armel.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_armhf.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_i386.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_mips.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_mips64el.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_mipsel.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_ppc64el.changes ACCEPT Processing changes file: ffmpeg_3.2.9-1~deb9u1_s390x.changes ACCEPT Processing changes file: gdm3_3.22.3-3+deb9u1_amd64.changes ACCEPT Processing changes file: grok_1.20110708.1-4.3~deb9u1_source.changes ACCEPT Processing changes file: icu_57.1-6+deb9u1_amd64.changes ACCEPT Processing changes file: lasi_1.1.0-2~deb9u1_source.changes ACCEPT Processing changes file: libxkbcommon_0.7.1-2~deb9u1_source.changes ACCEPT Processing changes file: lxc_2.0.7-2+deb9u1_amd64.changes ACCEPT Processing changes file: pdns_4.0.3-1+deb9u2_source.changes ACCEPT Processing changes file: pdns-recursor_4.0.4-1+deb9u2_source.changes ACCEPT Processing changes file: python-diff-match-patch_20121119-3~deb9u1_source.changes ACCEPT Processing changes file: python-inflect_0.2.5-1.1~deb9u1_source.changes ACCEPT Processing changes file: python2.7_2.7.13-2+deb9u2_amd64.changes ACCEPT Processing changes file: qtcurve_1.8.18+git20160320-3d8622c-3+deb9u1_amd64.changes ACCEPT Processing changes file: ruby-ox_2.1.1-2+deb9u1_source.changes ACCEPT Processing changes file: ruby-pygments.rb_0.6.3-2+deb9u1_source.changes ACCEPT Processing changes file: xen_4.8.2+xsa245-0+deb9u1_multi.changes ACCEPT Processing changes file: xen_4.8.2+xsa245-0+deb9u1_arm64.changes ACCEPT Processing changes file: xen_4.8.2+xsa245-0+deb9u1_armhf.changes ACCEPT Processing changes file: xen_4.8.2+xsa245-0+deb9u1_i386.changes ACCEPT
Bug#882714: stretch-pu: package ruby-pygments.rb/0.6.3-2
Control: tags -1 + pending On 2017-11-26 13:45, Adam D. Barratt wrote: Control: tags -1 + confirmed On Sun, 2017-11-26 at 00:23 +0100, Cédric Boutillier wrote: the proposed update fixes a reasonable limit to RLIMIT_NOFILE, avoiding closing too many files at a time. This fixes #876768 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876768 Please go ahead. Uploaded and flagged for acceptance. Regards, Adam
Processed: Re: Bug#882714: stretch-pu: package ruby-pygments.rb/0.6.3-2
Processing control commands: > tags -1 + pending Bug #882714 [release.debian.org] stretch-pu: package ruby-pygments.rb/0.6.3-2 Added tag(s) pending. -- 882714: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882714 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Processed: Re: Bug#882837: stretch-pu: package python-inflect/0.2.5-1.1~deb9u1
Processing control commands: > tags -1 + pending Bug #882837 [release.debian.org] stretch-pu: package python-inflect/0.2.5-1.1~deb9u1 Added tag(s) pending. -- 882837: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882837 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Processed: Re: Bug#877342: stretch-pu: package qtcurve/1.8.18+git20160320-3d8622c-3+deb9u1
Processing control commands: > tags -1 + pending Bug #877342 [release.debian.org] stretch-pu: package qtcurve/1.8.18+git20160320-3d8622c-3+deb9u1 Added tag(s) pending. -- 877342: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877342 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Processed: Re: Bug#882621: stretch-pu: package python2.7/2.7.13-2+deb9u2
Processing control commands: > tags -1 + pending Bug #882621 [release.debian.org] stretch-pu: package python2.7/2.7.13-2+deb9u2 Added tag(s) pending. -- 882621: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882621 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#882861: stretch-pu: package python-diff-match-patch/20121119-3~deb9u1
Control: tags -1 + pending On 2017-11-28 21:27, Adam D. Barratt wrote: Control: tags -1 + confirmed On Mon, 2017-11-27 at 17:05 +0100, Andreas Beckmann wrote: Let's fix the python3 dependencies. #867424 Please go ahead. Uploaded and flagged for acceptance. Regards, Adam
Processed: Re: Bug#882861: stretch-pu: package python-diff-match-patch/20121119-3~deb9u1
Processing control commands: > tags -1 + pending Bug #882861 [release.debian.org] stretch-pu: package python-diff-match-patch/20121119-3~deb9u1 Added tag(s) pending. -- 882861: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882861 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Processed: Re: Bug#882724: stretch-pu: package ruby-ox/2.1.1-2+b6
Processing control commands: > tags -1 + pending Bug #882724 [release.debian.org] stretch-pu: package ruby-ox/2.1.1-2+b6 Added tag(s) pending. -- 882724: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882724 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#883067: transition: ntfs-3g
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition Dear Release Team, Mini transition of ntfs-3g which changed the library name from libntfs-3g872 to libntfs-3g88 . These are co-installable and the new version is in experimental, built on all release architectures. The affected packages are[1]: partclone testdisk wimlib All build fine with the new ntfs-3g release as well. Kind regards, Laszlo/GCS [1] https://release.debian.org/transitions/html/auto-ntfs-3g.html
Bug#882837: stretch-pu: package python-inflect/0.2.5-1.1~deb9u1
Control: tags -1 + pending On 2017-11-28 21:29, Adam D. Barratt wrote: Control: tags -1 + confirmed On Mon, 2017-11-27 at 06:50 +0100, Andreas Beckmann wrote: Let's fix the python3 dependencies. #867438 Please go ahead. Uploaded and flagged for acceptance. Regards, Adam
Bug#882724: stretch-pu: package ruby-ox/2.1.1-2+b6
Control: tags -1 + pending On 2017-11-26 13:49, Adam D. Barratt wrote: Control: tags -1 + confirmed On Sun, 2017-11-26 at 01:29 +0100, Cédric Boutillier wrote: this update fixes bug #881445 [CVE-2017-15928] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881445 by cherrypicking a patch from upstream, to crash of the ruby interpreter on a parse error. Debdiff attached. Please go ahead. Uploaded and flagged for acceptance. Regards, Adam
Bug#883066: stretch-pu: package waagent/2.2.18-3~deb9u1
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Dear release team, The Azure agent provides the provisioning part of the Microsoft Azure platform. It is necessary to tell the platform about the state of the systems. Therefor it is part of the "hardware" support for the Azure platform. This updates includes both upstream fixes for sudoer handling, Azure Stack handling and some Debian fixes for state directory permissions. The diff still lacks the changelog entry for the above mentioned version, as no further changes are scheduled and this will be a straight rebuild for Stretch. Please accept the updated waagent package into Stretch. diff --git a/debian/.git-dpm b/debian/.git-dpm index 38f3e41..c773850 100644 --- a/debian/.git-dpm +++ b/debian/.git-dpm @@ -1,8 +1,8 @@ # see git-dpm(1) from git-dpm package -687c1cdd6c70d793d393d80a0406d508259d3b54 -687c1cdd6c70d793d393d80a0406d508259d3b54 -eb1e5132bbec8389a1f4df5fb78022e189c69d41 -eb1e5132bbec8389a1f4df5fb78022e189c69d41 -waagent_2.2.14.orig.tar.xz -b9147e9fd388e3491dea41e09aac98dc9316e5d4 -627124 +d59c00022f4c7d2987a832992c710dd2087e1fec +d59c00022f4c7d2987a832992c710dd2087e1fec +ae7855acb37a6964ac53e78f46103d5684983d33 +ae7855acb37a6964ac53e78f46103d5684983d33 +waagent_2.2.18.orig.tar.xz +e11edff700ee8c6a0d019ce41f92f356da7ada86 +690928 diff --git a/debian/changelog b/debian/changelog index b8169c3..56bfecc 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,8 +1,21 @@ -waagent (2.2.14-1~deb9u1) stretch; urgency=medium +waagent (2.2.18-3) unstable; urgency=medium - * Upload to stretch. + * Move udev rules to /lib/udev. (closes: #856065) + * Set priority to optional. - -- Bastian Blank Wed, 27 Sep 2017 09:34:43 +0200 + -- Bastian Blank Mon, 27 Nov 2017 09:07:13 +0100 + +waagent (2.2.18-2) unstable; urgency=medium + + * Create /var/lib/waagent with mode 0700. (closes: #878951) + + -- Bastian Blank Tue, 21 Nov 2017 09:28:39 +0100 + +waagent (2.2.18-1) unstable; urgency=medium + + * New upstream version. + + -- Bastian Blank Wed, 04 Oct 2017 11:51:29 +0200 waagent (2.2.14-1) unstable; urgency=medium diff --git a/debian/control b/debian/control index 8e74178..1ca8ae2 100644 --- a/debian/control +++ b/debian/control @@ -1,6 +1,6 @@ Source: waagent Section: admin -Priority: extra +Priority: optional Maintainer: Bastian Blank Build-Depends: debhelper (>= 9), diff --git a/debian/patches/agent-command-provision.patch b/debian/patches/agent-command-provision.patch index 66d5d8c..cdd77bc 100644 --- a/debian/patches/agent-command-provision.patch +++ b/debian/patches/agent-command-provision.patch @@ -1,4 +1,4 @@ -From 454a3e0b07b420c0f6015fb41028f572456c20ff Mon Sep 17 00:00:00 2001 +From ab767bf1620144df2372dd957c59b01f3ac8e30c Mon Sep 17 00:00:00 2001 From: Bastian Blank Date: Wed, 4 Jan 2017 18:05:59 +0100 Subject: Add provision command to agent @@ -9,10 +9,10 @@ Patch-Name: agent-command-provision.patch 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/azurelinuxagent/agent.py b/azurelinuxagent/agent.py -index d1ac354..454cc86 100644 +index e99f7be..6144401 100644 --- a/azurelinuxagent/agent.py +++ b/azurelinuxagent/agent.py -@@ -172,6 +172,8 @@ def parse_args(sys_args): +@@ -191,6 +191,8 @@ def parse_args(sys_args): cmd = "deprovision+user" elif re.match("^([-/]*)deprovision", a): cmd = "deprovision" @@ -21,7 +21,7 @@ index d1ac354..454cc86 100644 elif re.match("^([-/]*)daemon", a): cmd = "daemon" elif re.match("^([-/]*)start", a): -@@ -212,7 +214,7 @@ def usage(): +@@ -233,7 +235,7 @@ def usage(): print("") print((("usage: {0} [-verbose] [-force] [-help] " "-configuration-path:" diff --git a/debian/patches/agent-command-resourcedisk.patch b/debian/patches/agent-command-resourcedisk.patch index 879ced4..3f791e5 100644 --- a/debian/patches/agent-command-resourcedisk.patch +++ b/debian/patches/agent-command-resourcedisk.patch @@ -1,4 +1,4 @@ -From f99adfbf08d5b6e40697c1ff44d60cee9546c6d7 Mon Sep 17 00:00:00 2001 +From 4bdfad4279f64b579565d52e9cd8c93d77d2d69e Mon Sep 17 00:00:00 2001 From: Bastian Blank Date: Wed, 4 Jan 2017 18:06:30 +0100 Subject: Add resourcedisk command to agent @@ -9,10 +9,10 @@ Patch-Name: agent-command-resourcedisk.patch 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/azurelinuxagent/agent.py b/azurelinuxagent/agent.py -index 454cc86..00f2861 100644 +index 6144401..843ab2a 100644 --- a/azurelinuxagent/agent.py +++ b/azurelinuxagent/agent.py -@@ -116,6 +116,11 @@ class Agent(object): +@@ -128,6 +128,11 @@ class Agent(object): update_handler = get_update_handler() update_handler.run() @@ -21,19 +21,19 @@ index 454cc86..00f2861 100644 +resourcedisk_handler = get_resourcedisk_handler() +resourcedisk_handler.run() + - def main(args=[]): - """ - Pars
Bug#882621: stretch-pu: package python2.7/2.7.13-2+deb9u2
Control: tags -1 + pending On 2017-11-26 15:25, Moritz Mühlenhoff wrote: On Sun, Nov 26, 2017 at 01:52:04PM +, Adam D. Barratt wrote: Control: tags -1 + confirmed On Fri, 2017-11-24 at 23:18 +0100, Moritz Muehlenhoff wrote: > I'd like to add a fix for a minor security issue in Python 2.7 to the > as a followup update to what's already in spu. debdiff is below. > > This is fixed in unstable in 2.7.13-4. Please go ahead. Thanks, uploaded. Flagged for acceptance. Regards, Adam
Bug#877342: stretch-pu: package qtcurve/1.8.18+git20160320-3d8622c-3+deb9u1
Control: tags -1 + pending On 2017-11-26 15:14, Adam D. Barratt wrote: Control: tags -1 + confirmed On Sat, 2017-09-30 at 20:29 +0300, Boris Pek wrote: I would like to push a fix for qtcurve bug #865765 (crash when using QtCurve widget style with Breeze preset). Debdiff looks big but in fact it is very simple: just s/memcmp/strncmp/ Please go ahead. Uploaded and flagged for acceptance. Regards, Adam
Bug#882958: stretch-pu: package pdns-recursor/4.0.4-1+deb9u2
Control: tags -1 + pending On 2017-11-28 23:35, Christian Hofstaedtler wrote: * Adam D. Barratt [171128 22:22]: Control: tags -1 + confirmed On Mon, 2017-11-27 at 22:29 +, Chris Hofstaedtler wrote: > Security update using upstream patches to fix CVE-2017-15090, > CVE-2017-15092, CVE-2017-15093, CVE-2017-15094. > DSA has marked those as non-DSA but suggested fixing through > a stable update instead. Please go ahead. Uploaded, thanks. Flagged for acceptance. Regards, Adam
Processed: Re: Bug#882958: stretch-pu: package pdns-recursor/4.0.4-1+deb9u2
Processing control commands: > tags -1 + pending Bug #882958 [release.debian.org] stretch-pu: package pdns-recursor/4.0.4-1+deb9u2 Added tag(s) pending. -- 882958: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882958 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#882959: stretch-pu: package pdns/4.0.3-1+deb9u2
Control: tags -1 + pending On 2017-11-28 23:35, Christian Hofstaedtler wrote: * Adam D. Barratt [171128 22:22]: Control: tags -1 + confirmed On Mon, 2017-11-27 at 22:25 +, Chris Hofstaedtler wrote: > Security update using upstream patch, for CVE-2017-15091. > DSA has marked this no-DSA but suggested that this should > be fixed via stable-updates. I assume you mean proposed-updates. Indeed; sorry for that mixup. Please go ahead. Uploaded, thanks. Flagged for acceptance. Regards, Adam
Processed: Re: Bug#882869: stretch-pu: package libxkbcommon/0.7.1-2~deb9u1
Processing control commands: > tags -1 + pending Bug #882869 [release.debian.org] stretch-pu: package libxkbcommon/0.7.1-2~deb9u1 Added tag(s) pending. -- 882869: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882869 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#882869: stretch-pu: package libxkbcommon/0.7.1-2~deb9u1
Control: tags -1 + pending On 2017-11-28 21:26, Adam D. Barratt wrote: Control: tags -1 + confirmed On Mon, 2017-11-27 at 18:28 +0100, Andreas Beckmann wrote: Let's fix a missing dependency by rebuilding the package from sid for stretch. #872874 Please go ahead. Uploaded and flagged for acceptance. Regards, Adam
Processed: Re: Bug#882959: stretch-pu: package pdns/4.0.3-1+deb9u2
Processing control commands: > tags -1 + pending Bug #882959 [release.debian.org] stretch-pu: package pdns/4.0.3-1+deb9u2 Added tag(s) pending. -- 882959: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882959 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#882856: stretch-pu: package lasi/1.1.0-2~deb9u1
Control: tags -1 + pending On 2017-11-28 21:28, Adam D. Barratt wrote: Control: tags -1 + confirmed On Mon, 2017-11-27 at 16:15 +0100, Andreas Beckmann wrote: Let's fix the missing -dev package dependencies. #845497 Please go ahead. Uploaded and flagged for acceptance. Regards, Adam
Bug#880020: stretch-pu: package lxc/1:2.0.7-2+deb9u1
Control: tags -1 + pending On 2017-11-26 16:00, Antonio Terceiro wrote: On Sat, Nov 18, 2017 at 05:59:33PM +, Adam D. Barratt wrote: Control: tags -1 + confirmed On Sat, 2017-10-28 at 11:14 -0200, Antonio Terceiro wrote: > lxc (1:2.0.7-2+deb9u1) stretch; urgency=medium > > * 0003-lxc-debian-don-t-hardcode-valid-releases.patch: don't > hardcode list of valid Debian release. Allows creating stable, > buster, > testing, and unstable containers. > * 0004-lxc-debian-don-t-write-C.-locales-to-etc-locale.gen.patch: > don't > insert C.* locales into /etc/locale.gen (Closes: #879595) Please go ahead. uploaded, thanks. Flagged for acceptance. Regards, Adam
Processed: Re: Bug#880020: stretch-pu: package lxc/1:2.0.7-2+deb9u1
Processing control commands: > tags -1 + pending Bug #880020 [release.debian.org] stretch-pu: package lxc/1:2.0.7-2+deb9u1 Added tag(s) pending. -- 880020: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=880020 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Processed: Re: Bug#882856: stretch-pu: package lasi/1.1.0-2~deb9u1
Processing control commands: > tags -1 + pending Bug #882856 [release.debian.org] stretch-pu: package lasi/1.1.0-2~deb9u1 Added tag(s) pending. -- 882856: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882856 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#880862: stretch-pu: package icu/57.1-6+deb9u1
Control: tags -1 + pending On 2017-11-18 18:26, Adam D. Barratt wrote: Control: tags -1 + confirmed On Sun, 2017-11-05 at 09:19 +0100, László Böszörményi wrote: There's a security vulnerability[1] in ICU - International Components for Unicode, which doesn't warrant a DSA. It's an one line change and would be good to have it for Stretch. Thanks for considering, Laszlo/GCS [1] https://security-tracker.debian.org/tracker/CVE-2017-14952 Please go ahead. Uploaded and flagged for acceptance. Regards, Adam
Processed: Re: Bug#880862: stretch-pu: package icu/57.1-6+deb9u1
Processing control commands: > tags -1 + pending Bug #880862 [release.debian.org] stretch-pu: package icu/57.1-6+deb9u1 Added tag(s) pending. -- 880862: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=880862 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#882863: stretch-pu: package grok/1.20110708.1-4.3~deb9u1
Control: tags -1 + pending On 2017-11-28 21:27, Adam D. Barratt wrote: Control: tags -1 + confirmed On Mon, 2017-11-27 at 17:26 +0100, Andreas Beckmann wrote: Let's fix the missing dependencies. #875422, #779034 And while we are at it, the pointer aliasing bugfix sounded reasonable as well. #841668 So this is a rebuild of the sid package with 2 patches removed. (The gperf patches are not relevant (and not backwards compatible) for stretch.) Please go ahead. Uploaded and flagged for acceptance. Regards, Adam
Processed: Re: Bug#882863: stretch-pu: package grok/1.20110708.1-4.3~deb9u1
Processing control commands: > tags -1 + pending Bug #882863 [release.debian.org] stretch-pu: package grok/1.20110708.1-4.3~deb9u1 Added tag(s) pending. -- 882863: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882863 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Processed: Re: Bug#882836: stretch-pu: package doit/0.28.0-1+deb9u1
Processing control commands: > tags -1 + pending Bug #882836 [release.debian.org] stretch-pu: package doit/0.28.0-1+deb9u1 Added tag(s) pending. -- 882836: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882836 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#882836: stretch-pu: package doit/0.28.0-1+deb9u1
Control: tags -1 + pending On 2017-11-28 21:30, Adam D. Barratt wrote: Control: tags -1 + confirmed On Mon, 2017-11-27 at 06:36 +0100, Andreas Beckmann wrote: This update adds Breaks: nikola (<< 7.6.0-1~) to python-doit, fixing #870162 nikola is neither part of stretch nor any longer in sid, but the jessie version will survive an upgrade to stretch, where it will fail due to a too new version of doit. For details see #870162. Adding the Breaks will cause removal of the old nikola package. Please go ahead. Uploaded and flagged for acceptance. Regards, Adam
Processed: Re: Bug#876527: stretch-pu: package gdm3/3.22.3-3
Processing control commands: > tags -1 + pending Bug #876527 [release.debian.org] stretch-pu: package gdm3/3.22.3-3 Added tag(s) pending. -- 876527: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876527 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#876527: stretch-pu: package gdm3/3.22.3-3
Control: tags -1 + pending On 2017-11-24 11:15, Adam D. Barratt wrote: Control: tags -1 +confirmed -moreinfo On Sat, 2017-10-07 at 15:38 +0200, Laurent Bigonville wrote: Le 29/09/17 à 19:43, Adam D. Barratt a écrit : > Control: tags -1 + moreinfo > > On Sat, 2017-09-23 at 13:04 +0200, Laurent Bigonville wrote: > > XDMCP support in gdm 3.22 is currently completely broken (see: > > #873199) > > > > I've backported some patches from the later releases and from git > > master > > fix this. The majority of the patches are already included in > > sid/buster > > version, the other ones will be included in the 2nd of Octobre > > point > > release. > > > > I've tested this locally with one client (both direct and > > indirect > > connections) and it's working as expected. > > > > Ugh, that's a lot of patches. :-( Yeah :/ [...] I got the feedback from the original bugreporter (#873199) that his bug was fixed with that set of patches > When you say "2nd of October point release", when is that actually > expected to be in unstable? gdm 3.26.1 that is including all these patches is now in unstable. Thanks. Please feel free to upload. Uploaded and flagged for acceptance. Regards, Adam
Bug#882649: stretch-pu: package ruby-httparty/0.13.7-1
On Sat, Nov 25, 2017 at 09:57:45PM +0100, Cédric Boutillier wrote: > On Sat, Nov 25, 2017 at 09:51:52AM +, Adam D. Barratt wrote: > > The metadata for that bug indicates that it also affects the package in > > unstable. Is that correct? > It is correct. I am preparing a newer upstream version for unstable > which also fixes this issue. I uploaded 0.13.7-2 in unstable with the same fix https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864723#12 signature.asc Description: PGP signature