Bug#939446: buster-pu: package emacs/1:26.1+1-3.2

2019-09-19 Thread Rob Browning
Andreas Beckmann  writes:

> On Mon, 16 Sep 2019 22:02:59 -0500 Rob Browning 
> wrote:
>> Rob Browning  writes:
>> >   emacs (1:26.1+1-3.2+deb10u1) buster; urgency=medium
>> >
>> > * Update the EPLA packaging key (previous key expires 2019-09-23) via
>
> You probably want to include the fixes for #929567 in case that affects
> stable, too.

So for whoever's reviewing this request -- yes, I'd be happy to include
this cherry-pick too if that's acceptable:

  
https://salsa.debian.org/rlb/deb-emacs/commit/d9e0db4bfd4bc34ba4db286acc161a7db77f5309

Thanks
-- 
Rob Browning
rlb @defaultvalue.org and @debian.org
GPG as of 2011-07-10 E6A9 DA3C C9FD 1FF8 C676 D2C4 C0F0 39E9 ED1B 597A
GPG as of 2002-11-03 14DD 432F AE39 534D B592 F9A0 25C8 D377 8C7E 73A4



Processed: tagging 940685

2019-09-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 940685 - security
Bug #940685 [release.debian.org] buster-pu: libsixel/1.8.2-1+deb10u1
Removed tag(s) security.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
940685: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940685
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#940685: buster-pu: libsixel/1.8.2-1+deb10u1

2019-09-19 Thread Takatsugu Nokubi
On Thu, 19 Sep 2019 09:46:30 +0900 NOKUBI Takatsugu  wrote:
> I'll upload a new version of libsixel for buster.
> It contains many security fix reported by #931311

The package is insufficient, so we updated the package source.
https://salsa.debian.org/debian/uim/commit/374d44663f4c477db91ffa1dfb015802398639fb

I'll upload newer version of it.



Bug#940715: stretch-pu: package nodejs-mozilla 8.11.1~dfsg-2~deb9u1

2019-09-19 Thread Emilio Pozuelo Monfort
Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu

Hi,

Another package needed for firefox-esr 68. I didn't want to update src:nodejs to
a newer version, so just like for nasm-mozilla this introduces a newer version
as nodejs-mozilla. The package is based on 8.11.1~dfsg-2~bpo9+1, which has been
available on bpo for quite a while. I'm attaching the debdiff from that version.

Thanks,
Emilio
diff -Nru nodejs-8.11.1~dfsg/debian/changelog 
nodejs-mozilla-8.11.1~dfsg/debian/changelog
--- nodejs-8.11.1~dfsg/debian/changelog 2018-05-02 08:09:28.0 +0200
+++ nodejs-mozilla-8.11.1~dfsg/debian/changelog 2019-09-02 11:21:56.0 
+0200
@@ -1,3 +1,16 @@
+nodejs-mozilla (8.11.1~dfsg-2~deb9u1) stretch; urgency=medium
+
+  * Non-maintainer upload.
+  * Backport to stretch as nodejs-mozilla, to be used for Firefox ESR 68.
+  * Use internal libuv, http-parser and c-ares as the ones in stretch are
+too old.
+  * disable-expired-cert-test.patch: disable a test case that fails due to an
+expired test certificate.
+  * fix-openssl-error-string.patch: update a test expected output for
+openssl 1.1.0j.
+
+ -- Emilio Pozuelo Monfort   Mon, 02 Sep 2019 11:21:56 +0200
+
 nodejs (8.11.1~dfsg-2~bpo9+1) stretch-backports; urgency=medium
 
   * Rebuild for stretch-backports.
diff -Nru nodejs-8.11.1~dfsg/debian/control 
nodejs-mozilla-8.11.1~dfsg/debian/control
--- nodejs-8.11.1~dfsg/debian/control   2018-05-02 08:09:28.0 +0200
+++ nodejs-mozilla-8.11.1~dfsg/debian/control   2019-09-02 11:21:56.0 
+0200
@@ -1,4 +1,4 @@
-Source: nodejs
+Source: nodejs-mozilla
 Section: javascript
 Priority: optional
 Maintainer: Debian Javascript Maintainers 

@@ -14,46 +14,25 @@
  procps,
  zlib1g-dev,
  libicu-dev,
- libc-ares-dev (>= 1.14~),
- libhttp-parser-dev (>= 2.8~),
+# libc-ares-dev (>= 1.14~),
+# libhttp-parser-dev (>= 2.8~),
  libkvm-dev [kfreebsd-any],
  gyp (>= 0.1~svn1773),
  ca-certificates,
  python,
  libssl1.0-dev (>= 1.0.2),
- libuv1-dev (>= 1.15.0)
-Build-Depends-Indep: node-js-yaml,
- node-marked
+# libuv1-dev (>= 1.15.0)
 Standards-Version: 4.1.2
 Homepage: http://nodejs.org/
 Vcs-Browser: https://salsa.debian.org/js-team/nodejs/tree/master-8.x
 Vcs-Git: https://salsa.debian.org/js-team/nodejs.git -b master-8.x
 
-Package: nodejs-dev
-Section: devel
-Architecture: amd64 arm64 armhf i386 kfreebsd-i386 kfreebsd-amd64 mips 
mips64el mipsel ppc64 ppc64el s390x
-Depends: ${cdbs:Depends},
- ${misc:Depends},
- nodejs (= ${binary:Version})
-Suggests: ${cdbs:Suggests}
-Description: evented I/O for V8 javascript (development files)
- Node.js is a platform built on Chrome's JavaScript runtime for easily
- building fast, scalable network applications. Node.js uses an
- event-driven, non-blocking I/O model that makes it lightweight and
- efficient, perfect for data-intensive real-time applications that run
- across distributed devices.
- .
- This package is needed to build plugins.
-
-Package: nodejs
+Package: nodejs-mozilla
 Architecture: amd64 arm64 armhf i386 kfreebsd-i386 kfreebsd-amd64 mips 
mips64el mipsel ppc64 ppc64el s390x
 Depends: ${shlibs:Depends},
  ${misc:Depends}
 Provides: ${cdbs:Provides}
 Recommends: ${cdbs:Recommends},
- nodejs-doc
-Replaces: nodejs-legacy
-Conflicts: nodejs-legacy
 Description: evented I/O for V8 javascript
  Node.js is a platform built on Chrome's JavaScript runtime for easily
  building fast, scalable network applications. Node.js uses an
@@ -66,27 +45,3 @@
  .
  System, Events, Standard I/O, Modules, Timers, Child Processes, POSIX,
  HTTP, Multipart Parsing, TCP, DNS, Assert, Path, URL, Query Strings.
-
-Package: nodejs-doc
-Section: doc
-Architecture: all
-Depends: ${misc:Depends}
-Provides: ${cdbs:Provides}
-Recommends: ${cdbs:Recommends}, nodejs
-Replaces: nodejs (<< 6.11.2~dfsg-3)
-Conflicts: nodejs (<< 6.11.2~dfsg-3)
-Description: API documentation for Node.js, the javascript platform
- Node.js is a platform built on Chrome's JavaScript runtime for easily
- building fast, scalable network applications. Node.js uses an
- event-driven, non-blocking I/O model that makes it lightweight and
- efficient, perfect for data-intensive real-time applications that run
- across distributed devices.
- .
- Node.js is bundled with several useful libraries to handle server
- tasks:
- .
- System, Events, Standard I/O, Modules, Timers, Child Processes, POSIX,
- HTTP, Multipart Parsing, TCP, DNS, Assert, Path, URL, Query Strings.
- .
- This package contains API documentation for nodejs.
-
diff -Nru nodejs-8.11.1~dfsg/debian/dh_nodejs 
nodejs-mozilla-8.11.1~dfsg/debian/dh_nodejs
--- nodejs-8.11.1~dfsg/debian/dh_nodejs 2018-05-02 08:09:28.0 +0200
+++ nodejs-mozilla-8.11.1~dfsg/debian/dh_nodejs 1970-01-01 01:00:00.0 
+0100
@@ -1,55 +0,0 @@
-#!/usr/bin/perl -w
-
-=head1 NAME
-
-dh_nodejs - set nodejs dependencies
-
-=cut
-
-use strict;
-use Debian::Debhelper::Dh_Lib;
-
-=head1 SYNOPSIS
-
-B [S>]
-
-=hea

Bug#940714: stretch-pu: package llvm-toolchain-7 7.0.1-8~deb9u3

2019-09-19 Thread Emilio Pozuelo Monfort
Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian@packages.debian.org
Usertags: pu

Hi,

I have uploaded a new revision of llvm-toolchain-7 to address the s390x and
mips64el build failures. I couldn't properly test the mips64el fix on the
porterbox as I was getting a SIGBUS before the failing point with and without
the attached change, but I'm hopeful it will work on the buildds (where we
didn't get the SIGBUS before this change) as this same flag helped fix this same
build failure on sid a while ago. I tested it on amd64 and the compiler works
fine (built rustc with it without issues).

Thanks,
Emilio
diff -Nru llvm-toolchain-7-7.0.1/debian/changelog 
llvm-toolchain-7-7.0.1/debian/changelog
--- llvm-toolchain-7-7.0.1/debian/changelog 2019-09-02 10:15:04.0 
+0200
+++ llvm-toolchain-7-7.0.1/debian/changelog 2019-09-03 11:51:42.0 
+0200
@@ -1,3 +1,11 @@
+llvm-toolchain-7 (1:7.0.1-8~deb9u3) stretch; urgency=medium
+
+  * Disable the gold linker from s390x.
+  * Bootstrap with -fno-addrsig, stretch's binutils doesn't work with it on
+mips64el.
+
+ -- Emilio Pozuelo Monfort   Tue, 03 Sep 2019 11:51:42 +0200
+
 llvm-toolchain-7 (1:7.0.1-8~deb9u2) stretch; urgency=medium
 
   * Disable ocaml on ppc64el and s390x.
diff -Nru llvm-toolchain-7-7.0.1/debian/rules 
llvm-toolchain-7-7.0.1/debian/rules
--- llvm-toolchain-7-7.0.1/debian/rules 2019-09-02 10:15:00.0 +0200
+++ llvm-toolchain-7-7.0.1/debian/rules 2019-09-03 11:51:42.0 +0200
@@ -113,7 +113,7 @@
 #  CMAKE_EXTRA += -DLLVM_ENABLE_LLD=ON
 # endif
 
-BINUTILS_GOLD_ARCHS := amd64 arm64 armhf i386 ppc64 ppc64el x32 s390x 
hurd-i386 kfreebsd-amd64 kfreebsd-i386
+BINUTILS_GOLD_ARCHS := amd64 arm64 armhf i386 ppc64 ppc64el x32 hurd-i386 
kfreebsd-amd64 kfreebsd-i386
 ifeq ($(shell dpkg --compare-versions $(shell dpkg-query -W -f '$${Version}' 
binutils) ge 2.23.1-1~exp3 ; echo $$?),0)
 ifneq (,$(filter $(DEB_HOST_ARCH),$(BINUTILS_GOLD_ARCHS)))
 # -fused-ld=gold enables the gold linker (but is not supported by all archs / 
distro)
@@ -139,9 +139,9 @@
 # Enable for bootstrap
 LDFLAGS_EXTRA+= -fPIC -Wno-unused-command-line-argument 
-Wno-unknown-warning-option -Wl,--build-id
 CXXFLAGS_EXTRA   += -fPIC -Wno-unused-command-line-argument 
-Wno-unknown-warning-option
-BOOTSTRAP_CXXFLAGS_EXTRA  = $(CXXFLAGS_EXTRA) # Nothing for now. Keeping in 
case we need it
+BOOTSTRAP_CXXFLAGS_EXTRA  = $(CXXFLAGS_EXTRA) -fno-addrsig
 CFLAGS_EXTRA += -fPIC -Wno-unused-command-line-argument 
-Wno-unknown-warning-option
-BOOTSTRAP_CFLAGS_EXTRA= $(CFLAGS_EXTRA) # Nothing for now. Keeping in case 
we need it
+BOOTSTRAP_CFLAGS_EXTRA= $(CFLAGS_EXTRA) -fno-addrsig
 
 # Enable polly (or not)
 POLLY_ENABLE=yes


Bug#940686: buster-pu: package uim_1.8.8-4+deb10u2

2019-09-19 Thread Adam D. Barratt
On Thu, 2019-09-19 at 07:06 +0100, Adam D. Barratt wrote:
> What's your plan for bullseye? If the package is indeed intended to
> be
> transitional then exactly the same scenario will occur once users
> upgrade from buster to bullseye and then purge the package.
> 

Ignore that bit, I obviously needed more coffee - the new package
presumably doesn't have the postrm that causes the issue.

Regards,

Adam