Bug#1036904: bookworm-pu: package libreoffice/4:7.4.7-1

2023-07-12 Thread Rene Engelhard

Hi,

Am 12.07.23 um 23:01 schrieb Jonathan Wiltshire:

Control: tag -1 confirmed
[...]
The version is fine. It may or may not make it into 12.1 depending on build
times; we'll do our best.


Uploaded, thanks.


Regards,


Rene



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: schleuder-cli_0.1.0-4+deb12u1_all-buildd.changes
  ACCEPT



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: desktop-base_12.0.6+nmu1~deb12u1_all-buildd.changes
  ACCEPT
Processing changes file: 
node-webpack_5.75.0+dfsg+~cs17.16.14-1+deb12u1_all-buildd.changes
  ACCEPT



Processed: bookworm-pu: package sra-sdk/3.0.3+dfsg-6~deb12u1

2023-07-12 Thread Debian Bug Tracking System
Processing control commands:

> affects -1 + src:sra-sdk
Bug #1040953 [release.debian.org] bookworm-pu: package 
sra-sdk/3.0.3+dfsg-6~deb12u1
Added indication that 1040953 affects src:sra-sdk

-- 
1040953: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040953
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1040953: bookworm-pu: package sra-sdk/3.0.3+dfsg-6~deb12u1

2023-07-12 Thread Aaron M. Ucko
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: sra-...@packages.debian.org
Control: affects -1 + src:sra-sdk

[ Reason ]
Per #1039621, the new libngs-jni package accidentally wound up with
bad content (unexpanded variables in the key symlink's source *and*
target) that rendered it useless.

[ Impact ]
This package's reverse dependencies, from libngs-java on up, will be
broken unless libncbi-ngs-dev happens to be installed.

[ Tests ]
Various affected packages have autopkgtests, but they evidently missed
the relevant bug, having presumably wound up running with
libncbi-ngs-dev additionally installed.  (The tests did catch the
need for architecture restrictions that made it into bookworm, FWIW.)

[ Risks ]
Minimal -- trivial fix, working in testing and unstable with no
further changes from stable.

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [v] I reviewed all changes and I approve them
  [v] attach debdiff against the package in (old)stable
  [v] the issue is verified as fixed in unstable

[ Changes ]
Tweak debian/rules to make the necessary substitutions in
libngs-java.links.in.

[ Other info ]
In reviewing the debdiff, I see that one of my teammates pushed a
debian/salsa-ci.yml update without a corresponding changelog note that
consequently slipped into -6 undocumented; what should I do about it
at this point?

I've held off on cleaning up a long-dangling symlink in a different
binary package (sra-toolkit, #1040391) but can readily throw that in
if you'd like.
diff -Nru sra-sdk-3.0.3+dfsg/debian/.gitignore 
sra-sdk-3.0.3+dfsg/debian/.gitignore
--- sra-sdk-3.0.3+dfsg/debian/.gitignore2023-02-24 05:52:27.0 
-0500
+++ sra-sdk-3.0.3+dfsg/debian/.gitignore1969-12-31 19:00:00.0 
-0500
@@ -1,16 +0,0 @@
-*.debhelper
-*.substvars
-.debhelper
-.javahelper_clean
-debhelper-build-stamp
-files
-lib*-dev
-lib*[0-9]
-libngs-java
-libngs-java-doc
-libngs-java-doc.doc-base.javadoc
-libngs-jni
-libngs-jni.links
-python3-ngs
-sra-toolkit
-tmp
diff -Nru sra-sdk-3.0.3+dfsg/debian/changelog 
sra-sdk-3.0.3+dfsg/debian/changelog
--- sra-sdk-3.0.3+dfsg/debian/changelog 2023-02-24 05:52:27.0 -0500
+++ sra-sdk-3.0.3+dfsg/debian/changelog 2023-07-12 22:20:14.0 -0400
@@ -1,3 +1,16 @@
+sra-sdk (3.0.3+dfsg-6~deb12u1) bookworm; urgency=medium
+
+  * Reupload to bookworm (stable).  (Closes: #10n).
+
+ -- Aaron M. Ucko   Wed, 12 Jul 2023 22:20:14 -0400
+
+sra-sdk (3.0.3+dfsg-6) unstable; urgency=high
+
+  * debian/rules: Expand $(DEB_HOST_MULTIARCH) in libngs-java.links.in.
+(Closes: #1039621.)
+
+ -- Aaron M. Ucko   Tue, 27 Jun 2023 22:14:41 -0400
+
 sra-sdk (3.0.3+dfsg-5) unstable; urgency=medium
 
   * Limit libngs-java to those architectures where libs are available
diff -Nru sra-sdk-3.0.3+dfsg/debian/rules sra-sdk-3.0.3+dfsg/debian/rules
--- sra-sdk-3.0.3+dfsg/debian/rules 2023-02-24 05:52:27.0 -0500
+++ sra-sdk-3.0.3+dfsg/debian/rules 2023-07-12 22:19:10.0 -0400
@@ -152,7 +152,10 @@
 execute_before_dh_link:
# Putting the upstream version number (without the dfsg part) at the 
end of
# symlink source in the -jni package.
-   sed 's/\(#STRIPPED_UPSTREAM_VERSION#\)/\1$(DEB_VERSION_UPSTREAM)/; 
s/#STRIPPED_UPSTREAM_VERSION#\(.*\)+dfsg[0-9]*/\1/' debian/libngs-jni.links.in 
> debian/libngs-jni.links
+   sed -e 's/\(#STRIPPED_UPSTREAM_VERSION#\)/\1$(DEB_VERSION_UPSTREAM)/' \
+   -e 's/#STRIPPED_UPSTREAM_VERSION#\(.*\)+dfsg[0-9]*/\1/' \
+   -e 's/\$$[({]DEB_HOST_MULTIARCH[)}]/$(DEB_HOST_MULTIARCH)/g' \
+   debian/libngs-jni.links.in > debian/libngs-jni.links
 
 # require network, not automatically run
 # use it when the pom file must be re-downloaded from maven repo
diff -Nru sra-sdk-3.0.3+dfsg/debian/salsa-ci.yml 
sra-sdk-3.0.3+dfsg/debian/salsa-ci.yml
--- sra-sdk-3.0.3+dfsg/debian/salsa-ci.yml  2023-02-24 05:52:27.0 
-0500
+++ sra-sdk-3.0.3+dfsg/debian/salsa-ci.yml  2023-07-12 22:19:10.0 
-0400
@@ -2,3 +2,7 @@
 include:
   - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml
   - 
https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml
+
+variables:
+# Does not build on i386
+  SALSA_CI_DISABLE_BUILD_PACKAGE_I386: 1


Bug#1040951: bookworm-pu: package dhcpcd5/9.4.1-24+deb12u1

2023-07-12 Thread Andreas Beckmann
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: martin-eric.rac...@iki.fi
Control: affects -1 + src:dhcpcd5

[ Reason ]
The dhcpcd binary package last existed in wheezy with an epoch of 1: and
got reintroduced in bookworm without epoch.
Add back the epoch to have only increasing version numbers in the
archive. At the same time clean up leftovers from the wheezy package.

[ Impact ]
incomplete upgrade if dhcpcd/wheezy is still installed

[ Tests ]
local piuparts upgrade tests

[ Risks ]
low, there are no versioned dependencies within the package that could
be invalidated by adding the epoch

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
  [*] attach debdiff against the package in (old)stable
  [*] the issue is verified as fixed in unstable

[ Changes ]
+  * Backported Wheezy upgrade mitigation from unstable (see #1037190):
++ Include /usr/share/dpkg/pkg-info.mk needed for target version mingling.
++ Add epoch to bin:dhcpcd via override_dh_gencontrol.
+  Wheezy had (1:3.2.3-11+deb7u1) so reintroduce the epoch for one target.
++ Add dhcpcd.preinst by Andreas Beckmann to cleanup upgrade leftovers.

[ Other info ]


Andreas
diff -Nru dhcpcd5-9.4.1/debian/changelog dhcpcd5-9.4.1/debian/changelog
--- dhcpcd5-9.4.1/debian/changelog  2023-05-29 10:45:31.0 +0300
+++ dhcpcd5-9.4.1/debian/changelog  2023-07-09 22:22:47.0 +0300
@@ -1,6 +1,16 @@
+dhcpcd5 (9.4.1-24+deb12u1) stable-proposed-updates; urgency=medium
+
+  * Backported Wheezy upgrade mitigation from unstable (see #1037190):
++ Include /usr/share/dpkg/pkg-info.mk needed for target version mingling.
++ Add epoch to bin:dhcpcd via override_dh_gencontrol.
+  Wheezy had (1:3.2.3-11+deb7u1) so reintroduce the epoch for one target.
++ Add dhcpcd.preinst by Andreas Beckmann to cleanup upgrade leftovers.
+
+ -- Martin-Éric Racine   Sun, 09 Jul 2023 22:22:47 
+0300
+
 dhcpcd5 (9.4.1-24) unstable; urgency=medium
 
-  * Upload to unstable
+  * Upload to unstable.
 
  -- Martin-Éric Racine   Mon, 29 May 2023 15:45:31 
+0800
 
diff -Nru dhcpcd5-9.4.1/debian/copyright dhcpcd5-9.4.1/debian/copyright
--- dhcpcd5-9.4.1/debian/copyright  2023-05-24 16:29:33.0 +0300
+++ dhcpcd5-9.4.1/debian/copyright  2023-07-09 22:09:15.0 +0300
@@ -4,7 +4,7 @@
 Upstream-Contact: Roy Marples 
 
 Files: *
-Copyright: 2006-2018  Roy Marples 
+Copyright: 2006-2023  Roy Marples 
1999, 2016 The NetBSD Foundation, Inc.
2005 Colin Percival
2005 The DragonFly Project.  All rights reserved.
@@ -68,6 +68,7 @@
2015 Daniel Echeverry 
2018 Scott Leggett 
2022-2023 Martin-Éric Racine 
+   2023 Andreas Beckmann 
 License: BSD-2
 
 Files: debian/hooks/*
diff -Nru dhcpcd5-9.4.1/debian/dhcpcd.preinst 
dhcpcd5-9.4.1/debian/dhcpcd.preinst
--- dhcpcd5-9.4.1/debian/dhcpcd.preinst 1970-01-01 02:00:00.0 +0200
+++ dhcpcd5-9.4.1/debian/dhcpcd.preinst 2023-07-09 22:07:22.0 +0300
@@ -0,0 +1,14 @@
+#!/bin/sh
+# As per Debian bug #1037190.
+# Copyright 2023 Andreas Beckmann 
+set -e
+if dpkg --compare-versions "$2" lt-nl "1:9.4.1-24+deb12u1~" ; then
+  # Cleanup leftovers from dhcpcd 1:3.* in Wheezy.
+  # Can be removed after Trixie is released.
+  update-alternatives --remove dhcpcd /sbin/dhcpcd3
+  if [ -d /etc/dhcpc ]; then
+test ! -h /etc/dhcpc/resolv.conf || rm -fv /etc/dhcpc/resolv.conf
+rmdir --ignore-fail-on-non-empty /etc/dhcpc
+  fi
+fi
+#DEBHELPER#
diff -Nru dhcpcd5-9.4.1/debian/rules dhcpcd5-9.4.1/debian/rules
--- dhcpcd5-9.4.1/debian/rules  2023-05-24 16:29:33.0 +0300
+++ dhcpcd5-9.4.1/debian/rules  2023-07-09 22:14:37.0 +0300
@@ -1,4 +1,5 @@
 #!/usr/bin/make -f
+include /usr/share/dpkg/pkg-info.mk
 
 export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 
@@ -12,8 +13,12 @@
--libexecdir=/usr/lib/dhcpcd \
--rundir=/run/dhcpcd
 
-# avoid starting the unconfigured service as it may break connectivity
+# Wheezy had (1:3.2.3-11+deb7u1) so reintroduce the epoch for one target.
+override_dh_gencontrol:
+   dh_gencontrol --package=dhcpcd -- -v1:$(DEB_VERSION_UPSTREAM_REVISION)
+   dh_gencontrol --remaining-packages
 
+# Avoid starting the unconfigured service as it may break connectivity.
 override_dh_installinit:
dh_installinit --name=dhcpcd --no-start
 


Processed: bookworm-pu: package dhcpcd5/9.4.1-24+deb12u1

2023-07-12 Thread Debian Bug Tracking System
Processing control commands:

> affects -1 + src:dhcpcd5
Bug #1040951 [release.debian.org] bookworm-pu: package dhcpcd5/9.4.1-24+deb12u1
Added indication that 1040951 affects src:dhcpcd5

-- 
1040951: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040951
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: node-tough-cookie_4.0.0-2+deb12u1_all-buildd.changes
  ACCEPT
Processing changes file: 
nvidia-modprobe_535.54.03-1~deb12u1_amd64-buildd.changes
  ACCEPT
Processing changes file: 
nvidia-modprobe_535.54.03-1~deb12u1_arm64-buildd.changes
  ACCEPT
Processing changes file: 
nvidia-modprobe_535.54.03-1~deb12u1_armhf-buildd.changes
  ACCEPT
Processing changes file: nvidia-modprobe_535.54.03-1~deb12u1_i386-buildd.changes
  ACCEPT
Processing changes file: 
nvidia-modprobe_535.54.03-1~deb12u1_ppc64el-buildd.changes
  ACCEPT



Bug#1040950: bullseye-pu: package autofs/5.1.7-1+deb11u1

2023-07-12 Thread Mike Gabriel
Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: aut...@packages.debian.org
Control: affects -1 + src:autofs

Two issues have recently been addressed in autofs uploads to unstable.

[ Reason ]

Fixed issues:

  * Don't let NFSv4-only mounts use rpcbind portmapper service.
  * Fix missing unlock in sasl_do_kinit_ext_cc().

[ Impact ]
Fix autofs hanging for LDAP+Kerberos setups. Avoid communication to
rpcbind for NFSv4-only mounts.


[ Tests ]
Manually, on production site, by bug submitters.

[ Risks ]
Regressions in autofs.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]

+  * debian/patches:
++ Add fix-nfs4-only-mounts-should-not-use-rpcbind.patch. Don't let NFSv4-
+  only mounts use rpcbind portmapper service. (Closes: #1034261).
++ Add fix-missing-unlock-in-sasl-do-kinit-ext-cc.patch. Fix missing unlock
+  in sasl_do_kinit_ext_cc(). (Closes: #1039967).


[ Other info ]
Salvatore Bonnacorso (@carnil) will likely follow up this pu with another
pu. Not sure if he gets around to it before the deadline for the next
11.x point release.
diff -Nru autofs-5.1.7/debian/changelog autofs-5.1.7/debian/changelog
--- autofs-5.1.7/debian/changelog   2021-02-04 13:36:20.0 +0100
+++ autofs-5.1.7/debian/changelog   2023-07-10 19:01:17.0 +0200
@@ -1,3 +1,13 @@
+autofs (5.1.7-1+deb11u1) bullseye; urgency=medium
+
+  * debian/patches:
++ Add fix-nfs4-only-mounts-should-not-use-rpcbind.patch. Don't let NFSv4-
+  only mounts use rpcbind portmapper service. (Closes: #1034261).
++ Add fix-missing-unlock-in-sasl-do-kinit-ext-cc.patch. Fix missing unlock
+  in sasl_do_kinit_ext_cc(). (Closes: #1039967).
+
+ -- Mike Gabriel   Mon, 10 Jul 2023 19:01:17 +0200
+
 autofs (5.1.7-1) unstable; urgency=medium
 
   * New upstream release.
diff -Nru 
autofs-5.1.7/debian/patches/fix-missing-unlock-in-sasl-do-kinit-ext-cc.patch 
autofs-5.1.7/debian/patches/fix-missing-unlock-in-sasl-do-kinit-ext-cc.patch
--- 
autofs-5.1.7/debian/patches/fix-missing-unlock-in-sasl-do-kinit-ext-cc.patch
1970-01-01 01:00:00.0 +0100
+++ 
autofs-5.1.7/debian/patches/fix-missing-unlock-in-sasl-do-kinit-ext-cc.patch
2023-07-05 12:14:29.0 +0200
@@ -0,0 +1,45 @@
+From b2571ed0df973a6dc6a8e661874655fa7cecdc37 Mon Sep 17 00:00:00 2001
+From: James Dingwall 
+Date: Wed, 20 Jul 2022 13:22:38 +0800
+Subject: autofs-5.1.8 - fix missing unlock in sasl_do_kinit_ext_cc()
+
+There is a missing mutex unlock in function sasl_do_kinit_ext_cc(),
+fix it.
+
+Signed-off-by: James Dingwall 
+Signed-off-by: Ian Kent 
+---
+# CHANGELOG| 1 +
+ modules/cyrus-sasl.c | 4 
+ 2 files changed, 5 insertions(+)
+
+#diff --git a/CHANGELOG b/CHANGELOG
+#index 1f7c93a..e0b285d 100644
+#--- a/CHANGELOG
+#+++ b/CHANGELOG
+#@@ -27,6 +27,7 @@
+# - add autofs_strerror_r() helper for musl.
+# - update configure.
+# - handle innetgr() not present in musl.
+#+- fix missing unlock in sasl_do_kinit_ext_cc().
+# 
+# 19/10/2021 autofs-5.1.8
+# - add xdr_exports().
+diff --git a/modules/cyrus-sasl.c b/modules/cyrus-sasl.c
+index ae046e0..738e363 100644
+--- a/modules/cyrus-sasl.c
 b/modules/cyrus-sasl.c
+@@ -721,6 +721,10 @@ sasl_do_kinit_ext_cc(unsigned logopt, struct 
lookup_context *ctxt)
+ 
+   debug(logopt, "Kerberos authentication was successful!");
+ 
++  status = pthread_mutex_unlock(&krb5cc_mutex);
++  if (status)
++  fatal(status);
++
+   return 0;
+ 
+ out_cleanup_def_princ:
+-- 
+cgit 
+
diff -Nru 
autofs-5.1.7/debian/patches/fix-nfs4-only-mounts-should-not-use-rpcbind.patch 
autofs-5.1.7/debian/patches/fix-nfs4-only-mounts-should-not-use-rpcbind.patch
--- 
autofs-5.1.7/debian/patches/fix-nfs4-only-mounts-should-not-use-rpcbind.patch   
1970-01-01 01:00:00.0 +0100
+++ 
autofs-5.1.7/debian/patches/fix-nfs4-only-mounts-should-not-use-rpcbind.patch   
2023-07-05 12:14:29.0 +0200
@@ -0,0 +1,97 @@
+From 80845bbcbc264f19c6c6a81d680e1f2b1ea6d3cc Mon Sep 17 00:00:00 2001
+From: Ian Kent 
+Date: Sun, 31 Oct 2021 07:36:16 +0800
+Subject: autofs-5.1.8 - fix nfsv4 only mounts should not use rpcbind
+
+Commit 606795ecfaa1 ("autofs-5.1.7 - also require TCP_REQUESTED when
+setting NFS port" together with commit 26fb6b5408be) caused NFSv4 only
+mounts to also use rpcbind to probe availability which breaks the
+requirememt that this type of mount not use rpcbind at all.
+
+Fix this by treating fstype=nfs4 mounts as a special case which doesn't
+use rpcbind.
+
+Signed-off-by: Ian Kent 
+---
+# CHANGELOG|  1 +
+ include/replicated.h |  2 ++
+ modules/mount_nfs.c  | 13 +++--
+ modules/replicated.c |  4 ++--
+ 4 files changed, 12 insertions(+), 8 deletions(-)
+
+#diff --git a/CHAN

Processed: bullseye-pu: package autofs/5.1.7-1+deb11u1

2023-07-12 Thread Debian Bug Tracking System
Processing control commands:

> affects -1 + src:autofs
Bug #1040950 [release.debian.org] bullseye-pu: package autofs/5.1.7-1+deb11u1
Added indication that 1040950 affects src:autofs

-- 
1040950: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040950
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1040949: bookworm-pu: package gosa/2.8~git20230203.10abe45+dfsg-1+deb12u1

2023-07-12 Thread Mike Gabriel
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: g...@packages.debian.org
Control: affects -1 + src:gosa

GOsa²'s PHP 8.2 support was rather poor at the release time of Debian 12.
This update will amend various issues found while testing GOsa² with
Debian Edu.

[ Reason ]
Various issues could be resolved:

  * deprecation warnings
  * missing smarty template file
  * broken debug support

[ Impact ]
Only GOsa² users will be affected by this upload.

[ Tests ]
Manual tests on Debian Edu TJENER system.

[ Risks ]
Introduction of regressions in GOsa² in Debian 12.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]

+  [ Mike Gabriel ]
+  * debian/patches:
++ Add 1003_php-deprecations.patch. Silence various PHP 8.2 deprecation
+  warnings. (Closes: #1038682).
+
+  [ Daniel Teichmann ]
+  * debian/patches:
++ Add 1004_missing_templates.patch. (Closes: #1039697)
++ Update 1002_php82-allow-dynamic-properties.patch: Tolerate dyn. prop. for
+  ALL PHP classes. (Closes: #1039894)
++ Add 1005_preg_replace_deprecation.patch.
++ Add 1006_fix-overflow-debug-print_a-func.patch. (Closes: #1040839)


[ Other info ]
This might not be the last pu of GOsa² to bookworm. But various noises
should be reduced after this update has landed. We also work with
upstream on amending the patched issues there.
diff -Nru gosa-2.8~git20230203.10abe45+dfsg/debian/changelog 
gosa-2.8~git20230203.10abe45+dfsg/debian/changelog
--- gosa-2.8~git20230203.10abe45+dfsg/debian/changelog  2023-02-06 
20:43:44.0 +0100
+++ gosa-2.8~git20230203.10abe45+dfsg/debian/changelog  2023-07-12 
23:12:05.0 +0200
@@ -1,3 +1,20 @@
+gosa (2.8~git20230203.10abe45+dfsg-1+deb12u1) bookworm; urgency=medium
+
+  [ Mike Gabriel ]
+  * debian/patches:
++ Add 1003_php-deprecations.patch. Silence various PHP 8.2 deprecation
+  warnings. (Closes: #1038682).
+
+  [ Daniel Teichmann ]
+  * debian/patches:
++ Add 1004_missing_templates.patch. (Closes: #1039697)
++ Update 1002_php82-allow-dynamic-properties.patch: Tolerate dyn. prop. for
+  ALL PHP classes. (Closes: #1039894)
++ Add 1005_preg_replace_deprecation.patch.
++ Add 1006_fix-overflow-debug-print_a-func.patch. (Closes: #1040839)
+
+ -- Mike Gabriel   Wed, 12 Jul 2023 23:12:05 +0200
+
 gosa (2.8~git20230203.10abe45+dfsg-1) unstable; urgency=medium
 
   * New upstream Git snapshot.
diff -Nru 
gosa-2.8~git20230203.10abe45+dfsg/debian/patches/1002_php82-allow-dynamic-properties.patch
 
gosa-2.8~git20230203.10abe45+dfsg/debian/patches/1002_php82-allow-dynamic-properties.patch
--- 
gosa-2.8~git20230203.10abe45+dfsg/debian/patches/1002_php82-allow-dynamic-properties.patch
  2023-01-21 20:42:25.0 +0100
+++ 
gosa-2.8~git20230203.10abe45+dfsg/debian/patches/1002_php82-allow-dynamic-properties.patch
  2023-07-12 23:10:08.0 +0200
@@ -1,6 +1,200 @@
-Description: Tolerate dynamic properties in managepws class, deprecated in PHP 
8.2
-Author: Mike Gabriel 
-
+Description: Tolerate dynamic properties in all classes, deprecated in PHP 8.2
+Author: Daniel Teichmann 
+ 
+--- a/include/class_CopyPasteHandler.inc
 b/include/class_CopyPasteHandler.inc
+@@ -22,6 +22,7 @@
+ 
+ define("LDAP_DUMP_PATH","/var/cache/gosa/tmp");
+ 
++#[\AllowDynamicProperties]
+ class CopyPasteHandler {
+ 
+   var $config;
+--- a/include/class_GOsaRegistration.inc
 b/include/class_GOsaRegistration.inc
+@@ -1,5 +1,6 @@
+ "
+ 
+ 
++#[\AllowDynamicProperties]
+ class writeexcel_formula {
+ 
+ 
###
+--- a/include/utils/excel/class.writeexcel_olewriter.inc.php
 b/include/utils/excel/class.writeexcel_olewriter.inc.php
+@@ -24,6 +24,7 @@
+  * Spreadsheet::WriteExcel was written by John McNamara, jmcnam...@cpan.org
+  */
+ 
++#[\AllowDynamicProperties]
+ class writeexcel_olewriter {
+ var $_OLEfilename;
+ var $_OLEtmpfilename; /* ABR */
+--- a/include/utils/excel/class.writeexcel_workbook.inc.php
 b/include/utils/excel/class.writeexcel_workbook.inc.php
+@@ -29,6 +29,7 @@
+ require_once "class.writeexcel_formula.inc.php";
+ require_once "class.writeexcel_olewriter.inc.php";
+ 
++#[\AllowDynamicProperties]
+ class writeexcel_workbook extends writeexcel_biffwriter {
+ 
+ var $_filename;
+--- a/include/utils/excel/class.writeexcel_worksheet.inc.php
 b/include/utils/excel/class.writeexcel_worksheet.inc.php
+@@ -26,6 +26,7 @@
+ 
+ require_once "class.writeexcel_biffwriter.inc.php";
+ 
++#[\AllowDynamicProperties]
+ class writeexcel_worksheet extends writeexcel_biffwriter {
+ 
+ var $_name;
+--- a/plugins/addons/dyngroup/class_DynamicLdapGroup.inc
 b/plugins/addons/dyngroup/class_DynamicLdapGroup.inc
+@@ -25,6 +25,7 @

Processed: bookworm-pu: package gosa/2.8~git20230203.10abe45+dfsg-1+deb12u1

2023-07-12 Thread Debian Bug Tracking System
Processing control commands:

> affects -1 + src:gosa
Bug #1040949 [release.debian.org] bookworm-pu: package 
gosa/2.8~git20230203.10abe45+dfsg-1+deb12u1
Added indication that 1040949 affects src:gosa

-- 
1040949: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040949
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: Re: Bug#1036904: bookworm-pu: package libreoffice/4:7.4.7-1

2023-07-12 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 confirmed
Bug #1036904 [release.debian.org] bookworm-pu: package libreoffice/4:7.4.7-1
Added tag(s) confirmed.

-- 
1036904: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036904
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1036904: bookworm-pu: package libreoffice/4:7.4.7-1

2023-07-12 Thread Jonathan Wiltshire
Control: tag -1 confirmed

Hi,

On Mon, May 29, 2023 at 09:11:14AM +0200, Rene Engelhard wrote:
> [ Reason ]
> Update to "current" version. (Latest version of stable branch)
> 
> Same reasoning as of #1035056.
> 
> This updates LibreOffice to the last version in the (dead, EOL is June 12) 
> 7.4.x line[1]
> to fix a sh*load of bugs. List of bugs fixed: See [2]

Given the comprehensive test suite and upstream's track record of limiting
stable branches to bug fixes only, I have reviewed debian/* but not the
entire diff. Please go ahead with uploading it.

> [ Changes ]
> 1.  upstream update 7.4.5 -> 7.4.7. The two patches removed are security
> fixes which were already in 7.4.6 and 7.4.7 and now of course removed.
> No need to mention that in the changelog, it's implied by "New upstream
> release" that patches upstream are dropped.

Actually it's really helpful to have the dropped patches listed, if
feasible. That allows a review to check that the intended patches, and only
those, have been dropped.

> [ Other info ]
> I can back out the fix for 3. The other two are simply not discussable
> given #1035056.

You can leave 3 in. I'm disappointed by your reluctance to even engage in
discussing the other two but also understand that bug has been the source
of some frustration for you.

> I know this is completely bending the rules, but so is #1035056, too
> If you wish I can make this also -0deb12u1, but as there will be no
> 7.4.7-1 probably thia is not exactly needed.
 
The version is fine. It may or may not make it into 12.1 depending on build
times; we'll do our best.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: desktop-base_12.0.6+nmu1~deb12u1_source.changes
  ACCEPT
Processing changes file: 
libnginx-mod-http-modsecurity_1.0.3-1+b2_amd64-buildd.changes
  ACCEPT
Processing changes file: 
libnginx-mod-http-modsecurity_1.0.3-1+b2_arm64-buildd.changes
  ACCEPT
Processing changes file: 
libnginx-mod-http-modsecurity_1.0.3-1+b2_armel-buildd.changes
  ACCEPT
Processing changes file: 
libnginx-mod-http-modsecurity_1.0.3-1+b2_armhf-buildd.changes
  ACCEPT
Processing changes file: 
libnginx-mod-http-modsecurity_1.0.3-1+b2_i386-buildd.changes
  ACCEPT
Processing changes file: 
libnginx-mod-http-modsecurity_1.0.3-1+b2_mips64el-buildd.changes
  ACCEPT
Processing changes file: 
libnginx-mod-http-modsecurity_1.0.3-1+b2_mipsel-buildd.changes
  ACCEPT
Processing changes file: 
libnginx-mod-http-modsecurity_1.0.3-1+b2_ppc64el-buildd.changes
  ACCEPT
Processing changes file: 
libnginx-mod-http-modsecurity_1.0.3-1+b2_s390x-buildd.changes
  ACCEPT
Processing changes file: 
node-webpack_5.75.0+dfsg+~cs17.16.14-1+deb12u1_sourceonly.changes
  ACCEPT
Processing changes file: schleuder-cli_0.1.0-4+deb12u1_source.changes
  ACCEPT



Processed: desktop-base 12.0.6+nmu1~deb12u1 flagged for acceptance

2023-07-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> package release.debian.org
Limiting to bugs with field 'package' containing at least one of 
'release.debian.org'
Limit currently set to 'package':'release.debian.org'

> tags 1040739 = bookworm pending
Bug #1040739 [release.debian.org] bookworm-pu: package 
desktop-base/12.0.6+nmu1~deb12u1
Added tag(s) pending; removed tag(s) confirmed.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1040739: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040739
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1040739: desktop-base 12.0.6+nmu1~deb12u1 flagged for acceptance

2023-07-12 Thread Jonathan Wiltshire
package release.debian.org
tags 1040739 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==

Package: desktop-base
Version: 12.0.6+nmu1~deb12u1

Explanation: remove emerald alternatives on package uninstallation



Bug#1040678: bookworm-pu: package node-dottie/2.0.2-4+deb12u1

2023-07-12 Thread Jonathan Wiltshire
Hi,

Given the package is blocked from migration to testing at the moment, and
probably won't migrate before we start preparing for 12.1, I've held this
upload back. It'll likely be part of 12.2 instead.

Thanks,

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: node-tough-cookie_4.0.0-2+deb12u1_sourceonly.changes
  ACCEPT
Processing changes file: nvidia-modprobe_535.54.03-1~deb12u1_source.changes
  ACCEPT



Processed: libnginx-mod-http-modsecurity 1.0.3-1+b2 flagged for acceptance

2023-07-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> package release.debian.org
Limiting to bugs with field 'package' containing at least one of 
'release.debian.org'
Limit currently set to 'package':'release.debian.org'

> tags 1040799 = bookworm pending
Bug #1040799 [release.debian.org] nmu: libnginx-mod-http-modsecurity_1.0.3-1+b1
Added tag(s) pending; removed tag(s) moreinfo and confirmed.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1040799: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040799
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: node-webpack 5.75.0+dfsg+~cs17.16.14-1+deb12u1 flagged for acceptance

2023-07-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> package release.debian.org
Limiting to bugs with field 'package' containing at least one of 
'release.debian.org'
Limit currently set to 'package':'release.debian.org'

> tags 1040683 = bookworm pending
Bug #1040683 [release.debian.org] bookworm-pu: package 
node-webpack/5.75.0+dfsg+~cs17.16.14-1+deb12u1
Added tag(s) pending; removed tag(s) confirmed.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1040683: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040683
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: nvidia-modprobe 535.54.03-1~deb12u1 flagged for acceptance

2023-07-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> package release.debian.org
Limiting to bugs with field 'package' containing at least one of 
'release.debian.org'
Limit currently set to 'package':'release.debian.org'

> tags 1040765 = bookworm pending
Bug #1040765 [release.debian.org] bookworm-pu: package 
nvidia-modprobe/535.54.03-1~deb12u1
Added tag(s) pending; removed tag(s) confirmed.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1040765: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040765
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1040799: libnginx-mod-http-modsecurity 1.0.3-1+b2 flagged for acceptance

2023-07-12 Thread Jonathan Wiltshire
package release.debian.org
tags 1040799 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==

Package: libnginx-mod-http-modsecurity
Version: 1.0.3-1+b2

Explanation: binary rebuild with pcre2



Processed: schleuder-cli 0.1.0-4+deb12u1 flagged for acceptance

2023-07-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> package release.debian.org
Limiting to bugs with field 'package' containing at least one of 
'release.debian.org'
Limit currently set to 'package':'release.debian.org'

> tags 1040791 = bookworm pending
Bug #1040791 [release.debian.org] bookworm-pu: package 
schleuder-cli/0.1.0-4+deb12u1
Added tag(s) pending; removed tag(s) confirmed.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1040791: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040791
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1040791: schleuder-cli 0.1.0-4+deb12u1 flagged for acceptance

2023-07-12 Thread Jonathan Wiltshire
package release.debian.org
tags 1040791 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==

Package: schleuder-cli
Version: 0.1.0-4+deb12u1

Explanation: security fix (value escaping)



Bug#1040683: node-webpack 5.75.0+dfsg+~cs17.16.14-1+deb12u1 flagged for acceptance

2023-07-12 Thread Jonathan Wiltshire
package release.debian.org
tags 1040683 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==

Package: node-webpack
Version: 5.75.0+dfsg+~cs17.16.14-1+deb12u1

Explanation: security fix (cross-realm objects) [CVE-2023-28154]



Bug#1040765: nvidia-modprobe 535.54.03-1~deb12u1 flagged for acceptance

2023-07-12 Thread Jonathan Wiltshire
package release.debian.org
tags 1040765 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==

Package: nvidia-modprobe
Version: 535.54.03-1~deb12u1

Explanation: new upstream bugfix release



Processed: node-tough-cookie 4.0.0-2+deb12u1 flagged for acceptance

2023-07-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> package release.debian.org
Limiting to bugs with field 'package' containing at least one of 
'release.debian.org'
Limit currently set to 'package':'release.debian.org'

> tags 1040563 = bookworm pending
Bug #1040563 [release.debian.org] bookworm-pu: package 
node-tough-cookie/4.0.0-2+deb12u1
Added tag(s) pending; removed tag(s) confirmed.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1040563: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040563
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1040563: node-tough-cookie 4.0.0-2+deb12u1 flagged for acceptance

2023-07-12 Thread Jonathan Wiltshire
package release.debian.org
tags 1040563 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==

Package: node-tough-cookie
Version: 4.0.0-2+deb12u1

Explanation: security fix (prototype pollution) [CVE-2023-26136]



Bug#1040001: Role of tibble? (Was: Bug#1040001: Seeking advise how to proceed with the transition / move R stack to testing)

2023-07-12 Thread Dirk Eddelbuettel


Hi Paul,

On 12 July 2023 at 19:47, Paul Gevers wrote:
| On 12-07-2023 16:02, Dirk Eddelbuettel wrote:
| > I can add the Breaks as a 'best of the worse alternative'. And, I presume, I
| > can remove the existing four-year breaks? [1]
| 
| Yes, you only need to carry the Breaks until in the next release. So 
| every Breaks that's present in the r-base package in bookworm can be 
| removed from the r-base package in unstable.

Good point and much less ugly then :)

Dirk

-- 
dirk.eddelbuettel.com | @eddelbuettel | e...@debian.org



Bug#1040001: Role of tibble? (Was: Bug#1040001: Seeking advise how to proceed with the transition / move R stack to testing)

2023-07-12 Thread Paul Gevers

Hi,

On 12-07-2023 16:02, Dirk Eddelbuettel wrote:

I can add the Breaks as a 'best of the worse alternative'. And, I presume, I
can remove the existing four-year breaks? [1]


Yes, you only need to carry the Breaks until in the next release. So 
every Breaks that's present in the r-base package in bookworm can be 
removed from the r-base package in unstable.


Paul


OpenPGP_signature
Description: OpenPGP digital signature


Bug#1040939: bookworm-pu: package rmlint/2.9.0-2.3+deb12u1

2023-07-12 Thread Julian Gilbey
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: rml...@packages.debian.org
Control: affects -1 + src:rmlint

[ Reason ]
This bug has been present for a long time but only just stumbled
upon.  rmlint-gui installs a Python package with an invalid version
number, causing other packages to mysteriously break when rmlint-gui
is installed.  Only spyder has been reported to be affected so far,
but I expect others to be equally impacted.

[ Impact ]
Some other unrelated packages will continue to break in strange ways.
It may well also cause headaches to maintainers of those packages.

[ Tests ]
No tests cover the affected code, unfortunately, to the best of my
knowledge.  However, the package rmlint-gui doesn't work anyway (I
had never used it, but just tried and it crashed immediately with a
SyntaxError).  Nevertheless, its mere presence on a Debian system will
cause the above error.  Upstream is now showing signs of life again,
though the package does not currently have an active Debian
maintainer, so it may be dropped from testing soon; I'll file an RC
bug against the current version in a moment.

[ Risks ]
I cannot see any risks to fixing one bug in a piece of broken
software.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]
Apply an upstream patch to fix the Python version number.

[ Other info ]
This is an NMU because the maintainer is MIA.
diff -Nru rmlint-2.9.0/debian/changelog rmlint-2.9.0/debian/changelog
--- rmlint-2.9.0/debian/changelog   2021-04-15 22:03:37.0 +0100
+++ rmlint-2.9.0/debian/changelog   2023-07-12 16:18:40.0 +0100
@@ -1,3 +1,11 @@
+rmlint (2.9.0-2.3+deb12u1) bookworm; urgency=medium
+
+  * Non-maintainer upload.
+  * Fix error in other packages caused by invalid python package version
+number (cherry-picking upstream patch; closes: #1040179)
+
+ -- Julian Gilbey   Wed, 12 Jul 2023 16:18:40 +0100
+
 rmlint (2.9.0-2.3) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -Nru rmlint-2.9.0/debian/patches/python-version-number.patch 
rmlint-2.9.0/debian/patches/python-version-number.patch
--- rmlint-2.9.0/debian/patches/python-version-number.patch 1970-01-01 
01:00:00.0 +0100
+++ rmlint-2.9.0/debian/patches/python-version-number.patch 2023-07-12 
16:18:40.0 +0100
@@ -0,0 +1,17 @@
+From: Cebtenzzre
+Subject: gui: use PEP 440-compliant version number
+Origin: upstream, 
https://github.com/sahib/rmlint/commit/b5a6d9b359b1fc1ea75bdb6c1ae6cbdc0a304ecf
+Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040179
+
+--- a/gui/setup.py
 b/gui/setup.py
+@@ -14,7 +14,8 @@
+ with open('../.version', 'r') as handle:
+ version_string = handle.read()
+ 
+-return version_string.strip()
++version_numbers, _ = version_string.split(' ', 1)
++return version_numbers
+ 
+ 
+ def get_prefix():
diff -Nru rmlint-2.9.0/debian/patches/series rmlint-2.9.0/debian/patches/series
--- rmlint-2.9.0/debian/patches/series  2021-04-15 22:03:37.0 +0100
+++ rmlint-2.9.0/debian/patches/series  2023-07-12 16:18:40.0 +0100
@@ -8,3 +8,4 @@
 glib-2_62.patch
 0001-fix-link-error-on-compilers-with-fno-common-enabled.patch
 0010-apply-upstream-fix-for-data-loss-bug.patch
+python-version-number.patch


Processed: bookworm-pu: package rmlint/2.9.0-2.3+deb12u1

2023-07-12 Thread Debian Bug Tracking System
Processing control commands:

> affects -1 + src:rmlint
Bug #1040939 [release.debian.org] bookworm-pu: package rmlint/2.9.0-2.3+deb12u1
Added indication that 1040939 affects src:rmlint

-- 
1040939: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040939
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1040938: bookworm-pu: package nvidia-graphics-drivers-tesla/525.125.06-1~deb12u1

2023-07-12 Thread Andreas Beckmann
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu

[ Reason ]
Let's update nvidia-graphics-drivers-tesla in bookworm to a new
upstream release fixing some CVEs.

[ Impact ]
A proprietary graphics driver with more CVEs open.

[ Tests ]
Only module building has been tested. Anything else would require
certain hardware and driver usage.

[ Risks ]
Low. Upgrading to a new nvidia driver release in stable is an
established procedure.

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
  (excluding the blobs)
  [*] attach debdiff against the package in (old)stable
  (excluding the blobs)
  [*] the issue is verified as fixed in unstable

[ Changes ]
This is a rebuild of src:nvidia-graphics-drivers-tesla/sid with no further
changes. It is more or less identical to src:nvidia-graphics-drivers in
sid and bookworm(-pu).

[ Other info ]
The package is already uploaded.

Andreas



Bug#1040932: bookworm-pu: package nvidia-graphics-drivers/525.125.06-1~deb12u1

2023-07-12 Thread Andreas Beckmann
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu

[ Reason ]
Let's update nvidia-graphics-drivers in bookworm to a new
upstream release fixing some CVEs.

[ Impact ]
A proprietary graphics driver with more CVEs open.

[ Tests ]
Only module building has been tested. Anything else would require
certain hardware and driver usage.

[ Risks ]
Low. Upgrading to a new nvidia driver release in stable is an
established procedure.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  (excluding the blobs)
  [x] attach debdiff against the package in (old)stable
  (excluding the blobs)
  [x] the issue is verified as fixed in unstable

[ Changes ]
This is a rebuild of src:nvidia-graphics-drivers/sid with no further
changes.

[ Other info ]
The package is already uploaded.

Andreas
diff --git a/debian/README.source b/debian/README.source
index 05196920..4c3ae0a0 100644
--- a/debian/README.source
+++ b/debian/README.source
@@ -33,8 +33,9 @@ Upstream support timeframes
 Tesla 460 (PB)  01/2022 EoL
 Tesla 470 (LTSB)07/2024
 Tesla 510 (PB)  01/2023 EoL
-Tesla 515 (PB)  05/2023
+Tesla 515 (PB)  05/2023 EoL
 Tesla 525 (PB)  12/2023
+Tesla 535 (LTSB)06/2026
 
 
 The branch structure in the GIT repository
@@ -67,20 +68,15 @@ The branch structure in the GIT repository
 460-tesla   EoL   (bullseye)  470-tesla, tesla-460/main
 tesla-460/main  EoL   (bullseye),(sid)tesla-470/main, 
tesla-460/transition-470
 tesla-460/transition-470  bullseye,sid
-470   bullseye510, 470-tesla
-470-tesla (bullseye)  510-tesla, tesla-470/main
-tesla-470/mainbullseye,bookworm,sid tesla-510/main
-510 EoL   (bookworm),sid  515, 510-tesla
-510-tesla   EoL   (bookworm)  515-tesla, tesla-510/main
-tesla-510/main  EoL   (bookworm),(sid)tesla/510, 
tesla-510/transition
-tesla-510/transition  sid
-tesla/510   EoL   (bookworm),sid  tesla/515
-515   (bookworm),sid  525, 515-tesla
-515-tesla (bookworm)  525-tesla, tesla/515
-tesla/515 (bookworm),sid  tesla/525
-525   (bookworm),sid  YYY, 525-tesla
-525-tesla (bookworm)  ZZZ-tesla, tesla/525
-tesla/525 (bookworm),sid  tesla/ZZZ
+470   bullseye525, 470-tesla
+470-tesla (bullseye)  525-tesla, tesla-470/main
+tesla-470/mainbullseye,bookworm,sid tesla/525
+525   bookworm,sid535, 525-tesla
+525-tesla (bookworm)  535-tesla, tesla/525
+tesla/525 bookworm,sidtesla/535
+535   bookworm,sidYYY, 535-tesla
+535-tesla (bookworm)  ZZZ-tesla, tesla/535
+tesla/535 bookworm,sidtesla/ZZZ
 main  sid YYY
 tesla/mainsid
 YYY   experimentalZZZ, (main)
diff --git a/debian/changelog b/debian/changelog
index dd18087f..edd3661c 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,48 @@
+nvidia-graphics-drivers (525.125.06-1~deb12u1) bookworm; urgency=medium
+
+  * Rebuild for bookworm.
+
+ -- Andreas Beckmann   Wed, 12 Jul 2023 16:16:16 +0200
+
+nvidia-graphics-drivers (525.125.06-1) unstable; urgency=medium
+
+  * New upstream production branch release 525.125.06 (2023-05-09).
+* Fixed CVE-2023-25515, CVE-2023-25516.  (Closes: #1039678)
+  https://nvidia.custhelp.com/app/answers/detail/a_id/5468
+- Fixed a bug which prevented running a Wayland compositor in headless
+  mode on GPUs without display hardware.
+
+  [ Andreas Beckmann ]
+  * Update nv-readme.ids.
+
+ -- Andreas Beckmann   Wed, 12 Jul 2023 09:52:32 +0200
+
+nvidia-graphics-drivers (525.116.04-1) unstable; urgency=medium
+
+  * New upstream production branch release 525.116.04 (2023-05-09).
+  * New upstream production branch release 525.116.03 (2023-04-25).
+- Fixed a regression in Luxmark performance between 525.89.02 and
+  525.105.17.
+- Fixed a bug that could cause an unexpected
+  VK_ERROR_NATIVE_WINDOW_IN_USE_KHR error in certain circumstances when
+  recreating Vulkan surfaces.
+- Fixed a regression that caused brightness control to not vary
+  smoothly across the range of values.
+* Improved compatibility with recent Linux kernels.
+
+  [ Andreas Beckmann ]
+  * Refresh patches.
+  * Update nv-readme.ids.
+
+ -- Andreas Beckmann   Wed, 28 Jun 2023 01:19:51 +0200
+
+nvidia-graphics-drivers (525.105.17-2) unstable; urgency=medium

Bug#1040930: bullseye-pu: package ca-certificates-java/20190909+deb11u1

2023-07-12 Thread Andreas Beckmann
Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: Matthias Klose 

[ Reason ]
The bullseye-security upload of openjdk-17 broke the very fragile
assumption in ca-certificates-java that a jre can be used even
before it was configured for the first time.
As a result new installations of openjdk-17-jre-headless from
bullseye-security (or -pu) (and its circular dependency
ca-certificates-java from bookworm) will fail, #1039472, (but
upgrades seem to work fine, since the jre has been configured at
least once in the past).

[ Impact ]
openjdk will fail on new installations after the next point release

[ Tests ]
local piuparts tests of bullseye with the fixed package installed,
buster->bullseye with the fixed package in the upgrade path and
bullseye->bookworm starting from the fixed package.
All installation/upgrades work fine.

[ Risks ]
The hack may break with the next openjdk-17 upload to oldstable, but
there is no alternative solution as trigger support is not yet prepared
in bullseye.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]
In case ca-certificates-java wants to run with a not-yet-configured-once
jre, try to temporarily place a java.security file to make the java
command runnable again.

[ Other info ]
The patch is a backported variant of the HACK that temporarily appeared
in sid (ca-certificates-java 20230620).


Andreas
>From f020db198e9e96dbc9ddaf4b3dbe3d9247b85ae5 Mon Sep 17 00:00:00 2001
From: Matthias Klose 
Date: Tue, 20 Jun 2023 06:13:02 +0200
Subject: [PATCH]   [ Vladimir Petko ]   * d/ca-certificates-java.postinst:
 Work-around not yet configured jre.

(cherry picked from commit 561054ed46afe59b5996974e168418362c872d20)
---
 debian/changelog | 8 
 debian/postinst  | 7 +++
 2 files changed, 15 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index e35274e..a49805a 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+ca-certificates-java (20190909+deb11u1) bullseye; urgency=medium
+
+  [ Vladimir Petko ]
+  * d/ca-certificates-java.postinst: Work-around not yet configured jre.
+(Closes: #1039472)
+
+ -- Andreas Beckmann   Tue, 27 Jun 2023 01:12:19 +0200
+
 ca-certificates-java (20190909) unstable; urgency=medium
 
   * Team upload.
diff --git a/debian/postinst b/debian/postinst
index 555f87b..7d68036 100644
--- a/debian/postinst
+++ b/debian/postinst
@@ -50,6 +50,13 @@ setup_path()
 if [ -x /usr/lib/jvm/$jvm/bin/java ]; then
 export JAVA_HOME=/usr/lib/jvm/$jvm
 PATH=$JAVA_HOME/bin:$PATH
+   # copy java.security to allow import to function
+   security_conf=/etc/${jvm%-${arch}}/security
+   if [ -f ${security_conf}/java.security.dpkg-new ] \
+   && [ ! -f ${security_conf}/java.security ]; then
+   cp -v ${security_conf}/java.security.dpkg-new \
+   ${security_conf}/java.security
+   fi
 break
 fi
 done
-- 
2.20.1



Bug#1040001: Role of tibble? (Was: Bug#1040001: Seeking advise how to proceed with the transition / move R stack to testing)

2023-07-12 Thread Dirk Eddelbuettel


Hi Paul,

On 11 July 2023 at 20:36, Paul Gevers wrote:
| On 11-07-2023 02:43, Dirk Eddelbuettel wrote:
| I'm totally on board for technical excellence, although I think we have 
| different things in mind when we say that.
| 
| In Debian, with more QA than we ever had before, we're finding a class 
| of issues that often went unnoticed years ago. One of these things is

Of course I am not against testing auto-upgrades. I imagine nobody is.

What I am not happy about is that we fell into a hole we would not need to be
in, ideally.  Please hear me out on this:

 - R has an annual release cycle at the end of April
 - During that cycle the 'next' release (in VCS) is referred to as r-devel.
 - CRAN checks all packages at all uploads, as well as periodically, against
   r-devel.
 - When a change is needed because something would break once r-devel becomes
   'r-release' they contact the package author and request the change, this
   is a hard requirement and non-compliant package are thrown off CRAN. No
 - breakage allowed!
 - What I showed with maldiquant was that its upstream made the change in
   March still well before the R 4.3.0 release requiring it
 - So we could have (we had the freeze, more below) had the package which
   would have passed both 'r-release' then and 'r-devel then' (which is
   'r-release now') and everything would pass. Even under our tests.

That is an ideal I would really like us to move towards with the CRAN
packages in Debian. As CRAN makes it so easy for us to 'always build / build
@HEAD' we really should take the fullest advantage of it.

So I typically roll up my packages the day or week of a CRAN change. (And
maintain 2 x 21k binaries off CRAN in r2u, but that is a different story.)
As it happens, not everybody does, sometimes we have freezes, and other
things happen. Also the number of CRAN packages increases of course and the
net-net of that is that we then have to spend precious manual time picking up
the pieces.

Clearly not ideal, but better than having installation bugs.
 
| that partial upgrades can leave you in a bad state. So more and more we 
| see that packages "have to" add Breaks to tell apt that when you want to 
| upgrade package X, you also have to upgrade package Y if you happen to 
| have that installed. As package Y can not tell that, package X has to 
| add the Breaks on the broken version of Y. As an example, see the list 
| of Breaks in libc6 [1]. While partial upgrades aren't officially

Thanks for that. An impressively long list!

| supported, we rely on them nevertheless (even if only for QA (piuparts, 
| autopkgtest)), and as a Release Team member I consider that class of 
| fixes technical excellence: ensuring as best as we can that the user 
| that upgrades a package keeps a working system.

Yes.
 
| While a rebuild of everything combined with bumping the "api" would 
| achieve that, I'm much more in favor of targeted Breaks, like we have 
| been discussing here. It's typically more work, but it's more correct.

Fully agreed.

| For the future, with the recent change in dh-r, r-base will be much less 
| impacted by this "problem" as the new uploads of reverse dependencies 
| can migrate *before* r-base, and hence this class of issues will

I don't think so. The recent change helps with the (approximately a handful
or two CRAN packages) setting the graphics engine check (out of a total of
maybe 1300 CRAN/BioC packages at Debian leaving the many others unaffected).

| disappear once that happens (autopkgtest failures are retried after a 
| day). So unless somebody investigates the issues in time, the retry will

We will get the same breakage next time will CRAN assumes (and ensures !!)
everything is current at HEAD, we usually have slippage for various reasons
so in practice I fear ... here we are and remain.

| pass after the migration and the issue will no longer block r-base. I 
| can live with that, but I find it a shame nevertheless.

Yep. We should aim to have 'less shame, more technical excellence'. 
 
| So, what do you say: technical excellence and you add the Breaks? Or we 
| let this slip in? I prefer the former, I can live with the latter.

I can add the Breaks as a 'best of the worse alternative'. And, I presume, I
can remove the existing four-year breaks? [1]

Cheers,  Dirk

[1] 
edd@rob:~/deb/r-base(master)$ git blame debian/control | grep -A24 Breaks
52de7d776d (Dirk Eddelbuettel 2019-08-08 19:11:55 -0500  55) Breaks: 
r-bioc-graph (<< 1.62.0-1~),
52de7d776d (Dirk Eddelbuettel 2019-08-08 19:11:55 -0500  56) 
r-cran-bbmle (<< 1.0.20-5~),
52de7d776d (Dirk Eddelbuettel 2019-08-08 19:11:55 -0500  57) 
r-cran-biocmanager (<< 1.30.4+dfsg-2~),
52de7d776d (Dirk Eddelbuettel 2019-08-08 19:11:55 -0500  58) 
r-cran-caret (<< 6.0-84-2~),
52de7d776d (Dirk Eddelbuettel 2019-08-08 19:11:55 -0500  59) 
r-cran-cmprsk (<< 2.2-8-1~),
52de7d776d (Dirk Eddelbuettel 2019-08-08 19:11:55 -0500  60) 
r-cran-coin (<< 1.3-0-

Bug#1040925: bookworm-pu: package ca-certificates-java/20230103+x

2023-07-12 Thread Andreas Beckmann
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: Matthias Klose 

This request comes without a patch since I don't know how to properly
fix it in stable. But it definitively needs to be addressed for the
point release because the bookworm-security upload of openjdk-17 broke
the very fragile assumption in ca-certificates-java that a jre can be
used even before it was configured for the first time.

As a result new installations of openjdk-17-jre-headless from
bookworm-security (or -pu) (and its circular dependency
ca-certificates-java from bookworm) will fail, #1039472, (but
upgrades seem to work fine, since the jre has been configured at
least once in the past).

bookworm had the packages prepared to move the java certificate setup to
trigger processing (after the jre got configured) and break the
dependency loop, but in the end this was not activated before the
bookworm release. It is now enabled in sid.

I tried rebuilding the sid package for bookworm, but that is not
installable since it has Breaks against jre versions newer than what
is in bookworm-security. I'm not sure if the Breaks really need to be
that strict (because some new feature is being used) or whether they
could be relaxed for bookworm.


Andreas



Processed: retitle 1040921 to bookworm-pu: package dkms/3.0.10-8+deb12u1, tagging 1040921

2023-07-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> retitle 1040921 bookworm-pu: package dkms/3.0.10-8+deb12u1
Bug #1040921 [release.debian.org] bullseye-pu: package dkms/3.0.10-8+deb12u1
Changed Bug title to 'bookworm-pu: package dkms/3.0.10-8+deb12u1' from 
'bullseye-pu: package dkms/3.0.10-8+deb12u1'.
> tags 1040921 = bookworm
Bug #1040921 [release.debian.org] bookworm-pu: package dkms/3.0.10-8+deb12u1
Added tag(s) bookworm; removed tag(s) bullseye.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1040921: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040921
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1040921: bullseye-pu: package dkms/3.0.10-8+deb12u1

2023-07-12 Thread Andreas Beckmann
Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian@packages.debian.org
Usertags: pu

[ Reason ]
While earlier dkms versions didn't return an error if dkms failed to
build a kernel module for some kernel (one had to check the log output
to notice this), the version in bookworm does actually indicate that in
the return code. This causes unwanted failures if some cruft *-dkms
packages predating bullseye are still installed and fail to build a
module for the bookworm kernel.
Let's add some Breaks against such *-dkms packages that have no upgrade
path (because there is no newer version in bookworm), to ensure they get
removed early enough during the upgrade.

[ Impact ]
Upgrade from bullseye to bookworm fails if some pre-bullseye cruft
*-dkms in stil installed and needs manual fixup.

[ Tests ]
local piuparts tests starting from ancient releases that exposed these
bugs are now passing again

[ Risks ]
None, the breaks are against package versions neither in bookworm or
bullseye.

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
  [*] attach debdiff against the package in (old)stable
  [*] the issue is verified as fixed in unstable

[ Changes ]
Add Breaks against some ancient *-dkms packages not in bullseye and
bookworm. Versioned in a way to not be broken in case fixed versions
would appear in bookworm-backports.

[ Other info ]
The package is already uploaded.


Andreas
diff --git a/debian/changelog b/debian/changelog
index 24da0ec..a5d87cd 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+dkms (3.0.10-8+deb12u1) bookworm; urgency=medium
+
+  * Add Breaks against obsolete *-dkms packages that are incompatible with the
+Linux 6.1 kernel in bookworm.  (Closes: #1037425)
+
+ -- Andreas Beckmann   Wed, 12 Jul 2023 13:43:22 +0200
+
 dkms (3.0.10-8) unstable; urgency=medium
 
   * Disable tests broken by fix-builtin-archive-dkms-coinstallation.patch.
diff --git a/debian/control b/debian/control
index 73a13db..69d328c 100644
--- a/debian/control
+++ b/debian/control
@@ -28,6 +28,15 @@ Recommends: fakeroot,
  sudo,
  linux-headers-generic | linux-headers-686-pae | linux-headers-amd64 | 
linux-headers,
 Suggests: menu, e2fsprogs
+Breaks:
+# in buster, not in bullseye
+ sl-modem-dkms (<< 2.9.11~20110321-16.0),
+# in stretch, not in buster
+ blktap-dkms (<< 2.0.93-0.10.0),
+# in jessie, not in stretch
+ oss4-dkms (<< 4.2-build2020-1~),
+# in wheezy, not in jessie
+ blcr-dkms (<< 0.8.6~b3-1.0),
 Provides:
  dkms-autopkgtest (= ${binary:Version}),
 Description: Dynamic Kernel Module System (DKMS)
diff --git a/debian/gbp.conf b/debian/gbp.conf
index cec628c..cabf8bc 100644
--- a/debian/gbp.conf
+++ b/debian/gbp.conf
@@ -1,2 +1,3 @@
 [DEFAULT]
 pristine-tar = True
+debian-branch = bookworm


Bug#1040915: bookworm-pu: package dbus/1.14.8-2~deb12u1

2023-07-12 Thread Simon McVittie
On Wed, 12 Jul 2023 at 12:12:47 +0100, Simon McVittie wrote:
> [ Reason ]
> https://bugs.debian.org/1040790
> [ Changes ]
> All changes are part of resolving or testing #1040790.

Debdiff attached.

> [ Tests ]

I should also have mentioned that I'm running the proposed package on
a bookworm desktop system and it works normally.

smcv
diffstat for dbus-1.14.8 dbus-1.14.8

 changelog|   16 +
 dbus-daemon.postinst |4 +--
 tests/control|9 +++
 tests/machine-id |   60 +++
 4 files changed, 87 insertions(+), 2 deletions(-)

diff -Nru dbus-1.14.8/debian/changelog dbus-1.14.8/debian/changelog
--- dbus-1.14.8/debian/changelog	2023-06-11 12:42:56.0 +0100
+++ dbus-1.14.8/debian/changelog	2023-07-11 20:59:33.0 +0100
@@ -1,3 +1,19 @@
+dbus (1.14.8-2~deb12u1) bookworm; urgency=medium
+
+  * Rebuild for bookworm
+
+ -- Simon McVittie   Tue, 11 Jul 2023 20:59:33 +0100
+
+dbus (1.14.8-2) unstable; urgency=high
+
+  * dbus-daemon.postinst: Stop trying to take DPKG_ROOT into account.
+This unintentionally disabled the code path that would copy systemd's
+/etc/machine-id in preference to creating an entirely new machine ID.
+(Closes: #1040790)
+  * d/tests: Add test coverage for #1040790
+
+ -- Simon McVittie   Tue, 11 Jul 2023 18:38:22 +0100
+
 dbus (1.14.8-1~deb12u1) bookworm; urgency=medium
 
   * Rebuild for bookworm
diff -Nru dbus-1.14.8/debian/dbus-daemon.postinst dbus-1.14.8/debian/dbus-daemon.postinst
--- dbus-1.14.8/debian/dbus-daemon.postinst	2023-06-11 12:42:56.0 +0100
+++ dbus-1.14.8/debian/dbus-daemon.postinst	2023-07-11 20:59:33.0 +0100
@@ -7,8 +7,8 @@
 # script does this anyway, but you also have to do this before a session
 # bus will work on non-systemd systems, so we do this here for the
 # benefit of people starting a temporary session bus in a chroot.
-mkdir -p "${DPKG_ROOT:-/}var/lib/dbus"
-dbus-uuidgen --ensure="${DPKG_ROOT:-/}var/lib/dbus/machine-id"
+mkdir -p /var/lib/dbus
+dbus-uuidgen --ensure
 fi
 
 #DEBHELPER#
diff -Nru dbus-1.14.8/debian/tests/control dbus-1.14.8/debian/tests/control
--- dbus-1.14.8/debian/tests/control	2023-06-11 12:42:56.0 +0100
+++ dbus-1.14.8/debian/tests/control	2023-07-11 20:59:33.0 +0100
@@ -25,6 +25,15 @@
 Restrictions: allow-stderr, superficial
 Depends: dbus-daemon
 
+Tests: machine-id
+Restrictions: allow-stderr, needs-root, superficial
+Depends: dbus-daemon
+
+Test-Command: debian/tests/machine-id with-systemd
+Features: test-name=machine-id_with_systemd
+Restrictions: allow-stderr, needs-root, superficial
+Depends: dbus-daemon, systemd
+
 Tests: dbus-session-bus-common
 Restrictions: allow-stderr, superficial
 Depends: dbus-session-bus-common
diff -Nru dbus-1.14.8/debian/tests/machine-id dbus-1.14.8/debian/tests/machine-id
--- dbus-1.14.8/debian/tests/machine-id	1970-01-01 01:00:00.0 +0100
+++ dbus-1.14.8/debian/tests/machine-id	2023-07-11 20:59:33.0 +0100
@@ -0,0 +1,60 @@
+#!/bin/sh
+set -eu
+
+# Regression test for https://bugs.debian.org/1040790
+
+mode="${1-}"
+
+export LC_ALL=C.UTF-8
+fail=
+set -x
+
+# dbus-daemon.deb provides a machine ID
+ls -l /etc/machine-id /var/lib/dbus/machine-id || :
+head /etc/machine-id /var/lib/dbus/machine-id || :
+uuid="$(dbus-uuidgen --get)"
+test -n "$uuid" || fail=yes
+# The machine ID consists of 32 lower-case hex digits (and the file
+# also has a newline)
+test "$uuid" = "$(perl -pe 'print "wrong: " unless /\A[a-z0-9]{32}\n\z/' /var/lib/dbus/machine-id)" || fail=yes
+
+# Intentionally not asserting that /etc/machine-id matches
+# /var/lib/dbus/machine-id: if the test container has both dbus and
+# systemd, and it was generated with a version of dbus that has #1040790,
+# then that assertion could fail.
+
+# If there is a systemd machine ID, installing dbus-daemon should
+# make the D-Bus machine ID be the same as it.
+# Unfortunately nothing currently guarantees that a Debian
+# system will have a machine ID, so this has to be conditional. (See
+# also #745876, #783716).
+if [ -e /etc/machine-id ] || [ "$mode" = with-systemd ]; then
+rm -f /var/lib/dbus/machine-id
+# This is for its side-effect of running the postinst, emulating
+# a fresh installation
+dpkg-reconfigure -fnoninteractive -pcritical dbus-daemon
+ls -l /etc/machine-id /var/lib/dbus/machine-id || :
+head /etc/machine-id /var/lib/dbus/machine-id || :
+uuid="$(dbus-uuidgen --get)"
+test -n "$uuid" || fail=yes
+test "$uuid" = "$(perl -pe 'print "wrong: " unless /\A[a-z0-9]{32}\n\z/' /var/lib/dbus/machine-id)" || fail=yes
+test "$uuid" = "$(perl -pe 'print "wrong: " unless /\A[a-z0-9]{32}\n\z/' /etc/machine-id)" || fail=yes
+fi
+
+# Similarly, if there is a D-Bus machine ID but no systemd machine ID
+# (for example if dbus-daemon happened to be installed before systemd),
+# then we expect systemd-machine-id-setup to copy ours.

Bug#1040915: bookworm-pu: package dbus/1.14.8-2~deb12u1

2023-07-12 Thread Simon McVittie
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: d...@packages.debian.org, debian-b...@lists.debian.org
Control: affects -1 + src:dbus

[ Reason ]
https://bugs.debian.org/1040790

[ Impact ]
A regression in bookworm's dbus packaging led to /etc/machine-id and
/var/lib/dbus/machine-id having different contents in fresh installations
of bookworm or later. The machine ID is an opaque hex string analogous
to a MAC address, intended to identify the machine in contexts where the
hostname would traditionally have been used, but avoiding the risk that
a sysadmin setting an aesthetically appealing hostname will result in
non-uniqueness (either the same hostname on more than one concurrently
used installation, or the same installation having more than one hostname
over time).

Some packages that rely on this interface try /etc/machine-id first and
fall back to /var/lib/dbus/machine-id if it doesn't exist, while others
do the opposite, so this bug leads to those packages disagreeing on what
the machine ID is, and therefore potentially behaving as though they
are running on two different machines with a shared (NFS) home directory.
The full user-visible impact of this is unknown: the machine ID is
intentionally quite a general feature, so we cannot know all the things
that might use it.

pulseaudio, ibus, dbus-x11 and maybe others have autostart protocols that
involve it, so non-uniqueness could result in unintentionally running
two instances of the same service on the same machine.

Conversely, GNOME and maybe others store per-machine data in the user's
home directory (in particular, GNOME screen settings) keyed by the
machine ID, so the apparent machine ID changing could result in apparent
configuration data loss.

[ Tests ]
The majority of the changes are new automated test coverage.

I can reproduce the problem with mmdebstrap, and I have confirmed that
replacing packages from src:dbus with the proposed version resolves it.

I have not attempted to provide the updated dbus to a d-i image and do an
install from first principles.

[ Risks ]
Low-risk change, reverting unnecessary complexity in the postinst and
returning to what we did in bullseye.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]
All changes are part of resolving or testing #1040790.

[ Other info ]
dbus technically has a udeb, but it's essentially unused, and in any case
dbus-udeb.postinst never had this bug (so it has not changed here).

I have not attempted to retroactively fix the machine ID of existing
installations: that would be much higher-risk and will require
considerably more thought. It's entirely possible that the best approach
to existing installations is to ignore the mismatch and hope that it
doesn't cause any user-visible symptoms.



Processed: bookworm-pu: package dbus/1.14.8-2~deb12u1

2023-07-12 Thread Debian Bug Tracking System
Processing control commands:

> affects -1 + src:dbus
Bug #1040915 [release.debian.org] bookworm-pu: package dbus/1.14.8-2~deb12u1
Added indication that 1040915 affects src:dbus

-- 
1040915: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040915
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: pacemaker_2.1.5-1+deb12u1_amd64-buildd.changes
  ACCEPT
Processing changes file: pacemaker_2.1.5-1+deb12u1_i386-buildd.changes
  ACCEPT
Processing changes file: pacemaker_2.1.5-1+deb12u1_s390x-buildd.changes
  ACCEPT



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: pacemaker_2.1.5-1+deb12u1_mipsel-buildd.changes
  ACCEPT



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: pacemaker_2.1.5-1+deb12u1_arm64-buildd.changes
  ACCEPT
Processing changes file: pacemaker_2.1.5-1+deb12u1_armel-buildd.changes
  ACCEPT
Processing changes file: pacemaker_2.1.5-1+deb12u1_mips64el-buildd.changes
  ACCEPT



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: pacemaker_2.1.5-1+deb12u1_armhf-buildd.changes
  ACCEPT



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: pacemaker_2.1.5-1+deb12u1_all-buildd.changes
  ACCEPT
Processing changes file: pacemaker_2.1.5-1+deb12u1_ppc64el-buildd.changes
  ACCEPT



Processed: retitle 1040890 to bookworm-pu: package nvidia-settings-tesla/525.125.06-1~deb12u1, tagging 1040890

2023-07-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> retitle 1040890 bookworm-pu: package 
> nvidia-settings-tesla/525.125.06-1~deb12u1
Bug #1040890 [release.debian.org] bullseye-pu: package 
nvidia-settings-tesla/525.125.06-1~deb12u1
Changed Bug title to 'bookworm-pu: package 
nvidia-settings-tesla/525.125.06-1~deb12u1' from 'bullseye-pu: package 
nvidia-settings-tesla/525.125.06-1~deb12u1'.
> tags 1040890 = bookworm
Bug #1040890 [release.debian.org] bookworm-pu: package 
nvidia-settings-tesla/525.125.06-1~deb12u1
Added tag(s) bookworm; removed tag(s) bullseye.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1040890: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040890
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: pacemaker_2.1.5-1+deb12u1_source.changes
  ACCEPT



NEW changes in stable-new

2023-07-12 Thread Debian FTP Masters
Processing changes file: systemd_252.12-1~deb12u1_mipsel-buildd.changes
  ACCEPT



Processed: pacemaker 2.1.5-1+deb12u1 flagged for acceptance

2023-07-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> package release.debian.org
Limiting to bugs with field 'package' containing at least one of 
'release.debian.org'
Limit currently set to 'package':'release.debian.org'

> tags 1040415 = bookworm pending
Bug #1040415 [release.debian.org] bookworm-pu: package pacemaker/2.1.5-1+deb12u1
Added tag(s) pending; removed tag(s) confirmed.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1040415: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040415
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1040415: pacemaker 2.1.5-1+deb12u1 flagged for acceptance

2023-07-12 Thread Jonathan Wiltshire
package release.debian.org
tags 1040415 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into 
the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==

Package: pacemaker
Version: 2.1.5-1+deb12u1

Explanation: fix reression in the resource scheduler