Bug#929597: CVE-2019-12211 CVE-2019-12212 CVE-2019-12213 CVE-2019-12214

2019-05-26 Thread Anton Gladky
Hi Moritz,

thanks for the reporting. As far as I see, there is still
no available fix from upstream.

Cheers

Anton

Am So., 26. Mai 2019 um 21:27 Uhr schrieb Moritz Muehlenhoff :
>
> Source: freeimage
> Severity: grave
> Tags: security
>
> Please see
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12211
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12212
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12213
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12214
>
> Cheers,
> Moritz
>
> --
> debian-science-maintainers mailing list
> debian-science-maintainers@alioth-lists.debian.net
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers

-- 
debian-science-maintainers mailing list
debian-science-maintainers@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers

Bug#929597: CVE-2019-12211 CVE-2019-12212 CVE-2019-12213 CVE-2019-12214

2019-05-26 Thread Moritz Muehlenhoff
Source: freeimage
Severity: grave
Tags: security

Please see
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12211
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12212
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12213
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12214

Cheers,
Moritz

-- 
debian-science-maintainers mailing list
debian-science-maintainers@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers

RFA: qelectrotech -- Electric schematic editor

2019-05-26 Thread Denis Briand
Package: wnpp
Severity: normal

Hello,
I'm no longer interested to maintain this package.
I'm more involved in Debian France Organization now and I haven't enought free 
time to maintain it correctly.
Qeletrotech needs a maintainer with Qt5 and C++ knowledges.

QElectroTech is a Qt5 application written in C++ to design electric diagrams.
It includes a diagram editor and a symbol editor. It uses XML files to store 
the produced contents.
Homepage: http://qelectrotech.org


Denis Briand


signature.asc
Description: PGP signature
-- 
debian-science-maintainers mailing list
debian-science-maintainers@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers

Bug#929586: critterding FTCBFS: does not pass --host to ./configure

2019-05-26 Thread Helmut Grohne
Source: critterding
Version: 1.0-beta12.1-1.3
Tags: patch
User: helm...@debian.org
Usertags: rebootstrap

critterding fails to cross build from source, because it does not pass
--host to ./configure. The easiest way of doing so - using
dh_auto_configure - makes critterding cross buildable. Please consider
applying the attached patch.

Helmut
diff --minimal -Nru critterding-1.0-beta12.1/debian/changelog 
critterding-1.0-beta12.1/debian/changelog
--- critterding-1.0-beta12.1/debian/changelog   2016-07-17 23:11:02.0 
+0200
+++ critterding-1.0-beta12.1/debian/changelog   2019-05-26 20:03:26.0 
+0200
@@ -1,3 +1,10 @@
+critterding (1.0-beta12.1-1.4) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Fix FTCBFS: Let dh_auto_configure pass --host to ./configure. (Closes: #-1)
+
+ -- Helmut Grohne   Sun, 26 May 2019 20:03:26 +0200
+
 critterding (1.0-beta12.1-1.3) unstable; urgency=medium
 
   * Non-maintainer upload.
diff --minimal -Nru critterding-1.0-beta12.1/debian/rules 
critterding-1.0-beta12.1/debian/rules
--- critterding-1.0-beta12.1/debian/rules   2010-03-16 23:09:02.0 
+0100
+++ critterding-1.0-beta12.1/debian/rules   2019-05-26 20:03:22.0 
+0200
@@ -7,7 +7,7 @@
 
 override_dh_auto_build:
autoreconf -fi
-   ./configure --prefix=/usr
+   dh_auto_configure
 
 override_dh_auto_install:
dh_auto_install
-- 
debian-science-maintainers mailing list
debian-science-maintainers@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers

Bug#924186: marked as done (gap-toric: broken symlink: /usr/share/doc/gap-toric/examples/toric.test -> ../../../gap/pkg/toric/toric_examples.test)

2019-05-26 Thread Debian Bug Tracking System
Your message dated Sun, 26 May 2019 08:40:17 +
with message-id 
and subject line Bug#924186: fixed in gap-toric 1.9.4+ds-2
has caused the Debian Bug report #924186,
regarding gap-toric: broken symlink: 
/usr/share/doc/gap-toric/examples/toric.test -> 
../../../gap/pkg/toric/toric_examples.test
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
924186: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924186
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: gap-toric
Version: 1.9.4+ds-1
Severity: normal
User: debian...@lists.debian.org
Usertags: piuparts

Hi,

during a test with piuparts I noticed your package ships (or creates)
a broken symlink.

>From the attached log (scroll to the bottom...):

1m11.7s ERROR: FAIL: Broken symlinks:
  /usr/share/doc/gap-toric/examples/toric.test -> 
../../../gap/pkg/toric/toric_examples.test (gap-toric)

The target file does not seem to exist in any package in sid.


cheers,

Andreas


gap-toric_1.9.4+ds-1.log.gz
Description: application/gzip
--- End Message ---
--- Begin Message ---
Source: gap-toric
Source-Version: 1.9.4+ds-2

We believe that the bug you reported is fixed in the latest version of
gap-toric, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 924...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jerome Benoit  (supplier of updated gap-toric package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sun, 26 May 2019 08:21:47 +
Source: gap-toric
Architecture: source
Version: 1.9.4+ds-2
Distribution: experimental
Urgency: medium
Maintainer: Debian Science Maintainers 

Changed-By: Jerome Benoit 
Closes: 924186
Changes:
 gap-toric (1.9.4+ds-2) experimental; urgency=medium
 .
   * Debianization:
 - debian/gap-toric.links, correct (Closes: #924186);
 - debian/copyright:
   - Copyright field, year tuple, update;
 - debian/control:
   - Standards Version, bump to 4.3.0 (no change);
   - debhelper, bump to 12;
   - Depends fields:
 - gap, bump to 4r10p0;
 - gap-gapdoc, bump to 1.6.2;
 - gap-autodoc, bump to 2018.09.20;
 - debian/compat, discard.
Checksums-Sha1:
 3cd2b3724b74ae73e5474a334d5b1f0887482d06 2831 gap-toric_1.9.4+ds-2.dsc
 3fad45e7f68270ac9b86ebc896701e56a5444260 3568 
gap-toric_1.9.4+ds-2.debian.tar.xz
 3ead69172c451d259c1348152d7dd7c6371c1c8c 9045 
gap-toric_1.9.4+ds-2_source.buildinfo
Checksums-Sha256:
 b2aea7d1661e1c56dfeb8e3a0941b2376e92fe9ae7076b1be5040f9a6492db7c 2831 
gap-toric_1.9.4+ds-2.dsc
 3316ab8899d14c8c10a35ef573917029f8972d26762f7bb3b34d6f5000600ef0 3568 
gap-toric_1.9.4+ds-2.debian.tar.xz
 88f8d0aee60a8214171aa44cafe4a55a0eb90df1bc72781104db1fcf1b78ea55 9045 
gap-toric_1.9.4+ds-2_source.buildinfo
Files:
 27488d550ef76171b6616203d5d97c20 2831 math optional gap-toric_1.9.4+ds-2.dsc
 7e6c7fd1206805b699071f70e7cf17dd 3568 math optional 
gap-toric_1.9.4+ds-2.debian.tar.xz
 daf37e3a597f7ce6c3d6aceba9dfd8e8 9045 math optional 
gap-toric_1.9.4+ds-2_source.buildinfo

-BEGIN PGP SIGNATURE-

iQRJBAEBCgAzFiEEriiuFXEN/x2H5adiP5IZpn82xosFAlzqTrwVHGNhbGN1bHVz
QHJlem96ZXIubmV0AAoJED+SGaZ/NsaLiewf/0OV6Z5ia+wNRJrVKbWa2qrnNpv3
swyAwssZhl31YEFpcFzZATu9dpgb7OBhFIAe2CP3f92fSHbdyWlEclZ6cSJpLY6A
KFQkcXe0a3Hcz/8srf0XcDrCFRo0Ckp66S3SHf/WMAeNJ2CvpLQW2INO9jtqnfKo
T3na52sFZHrUEUkz5D0XgBH3yoUvGGgd4mFqjXj/et+5rXAyJWjhW2GpmejTDUMb
/OYL2tTePq4iO/eYv8mAW5C/OiSg4rGV6zqVTHhGkqHEFp8MMJgCpwxpp0QKS9Tu
3XRrMz9V7LuMotTztd718WoMepByg+2JqMBw2M0YsATA6NMKxcBVP1mB4PcorGaX
mQk30MjvLwEGfAa6dkhj01DWd3RZ3xwE5YgY0lyMDFQapsyPennxiYQX5MkY/luu
ojn5fvaMAps1RKDfbu0sUQn6rF9IjK58fZS1Q7mGfWHRFwedKrrTKYvfJgIEPYDU
zBzEFiOuRkQVjoxcClnAi01nVhHSPB64TdtWw3ovuZekO31lhJeVVR4L0H3lJhSf
Vid9f+aNPZd53mv/Z3HgjeaJtIYjUwGiKOjgIpeJ1zzg/D5o7mVJJAmgqZXRGHeZ
GlPWhh+o7YAAKnFd/paSwto0vC7qhYB2iD6RcOFRf9Wn6odcgFMCtIk2QlwoATzl
xT5tpOxfbVn90eMgIw2vZntnI7B0MCqR5ht/U4fA1J1sSVuaN5YGl2zy6PdobStI
1k+77kjTXqiV/uhW3oRRIpYa8YFAiJzfanPKAQHS0t6Y3/6PmlXmpe4sOGQ+dZjN
CQMFEr6SYIVYcAr/2yNvrGiIIac8DN2hdkexDwaXhqhWnYjS1WoLo3Zuw5cGUJ+t
gc1WNs0jMAVPM+HIOUdGdQPOJ63nKxkjERSIAqJjlModogaOG5vG+V3JmVOpo6Lg
UJ2+93cNWDfHvbSHyLRnmpYFehtXNhScpgk7CWBrkOn6KkCoxvrJIDvI+vaEtl

gap-toric_1.9.4+ds-2_source.changes ACCEPTED into experimental

2019-05-26 Thread Debian FTP Masters


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sun, 26 May 2019 08:21:47 +
Source: gap-toric
Architecture: source
Version: 1.9.4+ds-2
Distribution: experimental
Urgency: medium
Maintainer: Debian Science Maintainers 

Changed-By: Jerome Benoit 
Closes: 924186
Changes:
 gap-toric (1.9.4+ds-2) experimental; urgency=medium
 .
   * Debianization:
 - debian/gap-toric.links, correct (Closes: #924186);
 - debian/copyright:
   - Copyright field, year tuple, update;
 - debian/control:
   - Standards Version, bump to 4.3.0 (no change);
   - debhelper, bump to 12;
   - Depends fields:
 - gap, bump to 4r10p0;
 - gap-gapdoc, bump to 1.6.2;
 - gap-autodoc, bump to 2018.09.20;
 - debian/compat, discard.
Checksums-Sha1:
 3cd2b3724b74ae73e5474a334d5b1f0887482d06 2831 gap-toric_1.9.4+ds-2.dsc
 3fad45e7f68270ac9b86ebc896701e56a5444260 3568 
gap-toric_1.9.4+ds-2.debian.tar.xz
 3ead69172c451d259c1348152d7dd7c6371c1c8c 9045 
gap-toric_1.9.4+ds-2_source.buildinfo
Checksums-Sha256:
 b2aea7d1661e1c56dfeb8e3a0941b2376e92fe9ae7076b1be5040f9a6492db7c 2831 
gap-toric_1.9.4+ds-2.dsc
 3316ab8899d14c8c10a35ef573917029f8972d26762f7bb3b34d6f5000600ef0 3568 
gap-toric_1.9.4+ds-2.debian.tar.xz
 88f8d0aee60a8214171aa44cafe4a55a0eb90df1bc72781104db1fcf1b78ea55 9045 
gap-toric_1.9.4+ds-2_source.buildinfo
Files:
 27488d550ef76171b6616203d5d97c20 2831 math optional gap-toric_1.9.4+ds-2.dsc
 7e6c7fd1206805b699071f70e7cf17dd 3568 math optional 
gap-toric_1.9.4+ds-2.debian.tar.xz
 daf37e3a597f7ce6c3d6aceba9dfd8e8 9045 math optional 
gap-toric_1.9.4+ds-2_source.buildinfo

-BEGIN PGP SIGNATURE-

iQRJBAEBCgAzFiEEriiuFXEN/x2H5adiP5IZpn82xosFAlzqTrwVHGNhbGN1bHVz
QHJlem96ZXIubmV0AAoJED+SGaZ/NsaLiewf/0OV6Z5ia+wNRJrVKbWa2qrnNpv3
swyAwssZhl31YEFpcFzZATu9dpgb7OBhFIAe2CP3f92fSHbdyWlEclZ6cSJpLY6A
KFQkcXe0a3Hcz/8srf0XcDrCFRo0Ckp66S3SHf/WMAeNJ2CvpLQW2INO9jtqnfKo
T3na52sFZHrUEUkz5D0XgBH3yoUvGGgd4mFqjXj/et+5rXAyJWjhW2GpmejTDUMb
/OYL2tTePq4iO/eYv8mAW5C/OiSg4rGV6zqVTHhGkqHEFp8MMJgCpwxpp0QKS9Tu
3XRrMz9V7LuMotTztd718WoMepByg+2JqMBw2M0YsATA6NMKxcBVP1mB4PcorGaX
mQk30MjvLwEGfAa6dkhj01DWd3RZ3xwE5YgY0lyMDFQapsyPennxiYQX5MkY/luu
ojn5fvaMAps1RKDfbu0sUQn6rF9IjK58fZS1Q7mGfWHRFwedKrrTKYvfJgIEPYDU
zBzEFiOuRkQVjoxcClnAi01nVhHSPB64TdtWw3ovuZekO31lhJeVVR4L0H3lJhSf
Vid9f+aNPZd53mv/Z3HgjeaJtIYjUwGiKOjgIpeJ1zzg/D5o7mVJJAmgqZXRGHeZ
GlPWhh+o7YAAKnFd/paSwto0vC7qhYB2iD6RcOFRf9Wn6odcgFMCtIk2QlwoATzl
xT5tpOxfbVn90eMgIw2vZntnI7B0MCqR5ht/U4fA1J1sSVuaN5YGl2zy6PdobStI
1k+77kjTXqiV/uhW3oRRIpYa8YFAiJzfanPKAQHS0t6Y3/6PmlXmpe4sOGQ+dZjN
CQMFEr6SYIVYcAr/2yNvrGiIIac8DN2hdkexDwaXhqhWnYjS1WoLo3Zuw5cGUJ+t
gc1WNs0jMAVPM+HIOUdGdQPOJ63nKxkjERSIAqJjlModogaOG5vG+V3JmVOpo6Lg
UJ2+93cNWDfHvbSHyLRnmpYFehtXNhScpgk7CWBrkOn6KkCoxvrJIDvI+vaEtl2p
YehhjKW7UokHHg9Kmw6RlVHKIBkt3i4yclp3GyTSyWjl29H9vkk3VvlN4zCbw/O3
xWhNZxcv/k4NJq00IxPh/sAsxI8NXPO/DJ8h8J6+/tnWftU3QENcgjCYEYqOUXsA
E9YGFfxtpNW51M5dS4jrzcUN8PHGQ/FW0Yzx1xj0cqE8k7bQKluqkh9kqXbVcf6Z
y/zG+qeVisw0PKumiWsP82KovFezEbKPLMgBtZ7lTuTUExJTvh0kNRdKLxFOEQU6
DqYOmye8XkkWT4H/GBj0yTrhmYueo+sf6vSgplGz9K6ePAQUADl9NRIq10Rf4KaM
wfyGNyzPJpN6Crv3C9IfyZqpZz4w53jLArCbLcDUsY6S58p/b+rQ1t5n/X4=
=Adfj
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

-- 
debian-science-maintainers mailing list
debian-science-maintainers@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers

Processing of gap-toric_1.9.4+ds-2_source.changes

2019-05-26 Thread Debian FTP Masters
gap-toric_1.9.4+ds-2_source.changes uploaded successfully to localhost
along with the files:
  gap-toric_1.9.4+ds-2.dsc
  gap-toric_1.9.4+ds-2.debian.tar.xz
  gap-toric_1.9.4+ds-2_source.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

-- 
debian-science-maintainers mailing list
debian-science-maintainers@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers

mumps_5.2.0-1_amd64.changes is NEW

2019-05-26 Thread Debian FTP Masters
binary:libmumps-5.2.0 is NEW.
binary:libmumps-ptscotch-5.2.0 is NEW.
binary:libmumps-scotch-5.2.0 is NEW.
binary:libmumps-seq-5.2.0 is NEW.
binary:libmumps-ptscotch-5.2.0 is NEW.
binary:libmumps-5.2.0 is NEW.
binary:libmumps-scotch-5.2.0 is NEW.
binary:libmumps-seq-5.2.0 is NEW.

Your package has been put into the NEW queue, which requires manual action
from the ftpteam to process. The upload was otherwise valid (it had a good
OpenPGP signature and file hashes are valid), so please be patient.

Packages are routinely processed through to the archive, and do feel
free to browse the NEW queue[1].

If there is an issue with the upload, you will receive an email from a
member of the ftpteam.

If you have any questions, you may reply to this email.

[1]: https://ftp-master.debian.org/new.html
 or https://ftp-master.debian.org/backports-new.html for *-backports

-- 
debian-science-maintainers mailing list
debian-science-maintainers@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers

Processing of mumps_5.2.0-1_amd64.changes

2019-05-26 Thread Debian FTP Masters
mumps_5.2.0-1_amd64.changes uploaded successfully to localhost
along with the files:
  mumps_5.2.0-1.dsc
  mumps_5.2.0.orig.tar.gz
  mumps_5.2.0-1.debian.tar.xz
  libmumps-5.2.0-dbgsym_5.2.0-1_amd64.deb
  libmumps-5.2.0_5.2.0-1_amd64.deb
  libmumps-dev_5.2.0-1_amd64.deb
  libmumps-ptscotch-5.2.0-dbgsym_5.2.0-1_amd64.deb
  libmumps-ptscotch-5.2.0_5.2.0-1_amd64.deb
  libmumps-ptscotch-dev_5.2.0-1_amd64.deb
  libmumps-scotch-5.2.0-dbgsym_5.2.0-1_amd64.deb
  libmumps-scotch-5.2.0_5.2.0-1_amd64.deb
  libmumps-scotch-dev_5.2.0-1_amd64.deb
  libmumps-seq-5.2.0-dbgsym_5.2.0-1_amd64.deb
  libmumps-seq-5.2.0_5.2.0-1_amd64.deb
  libmumps-seq-dev_5.2.0-1_amd64.deb
  mumps-test-dbgsym_5.2.0-1_amd64.deb
  mumps-test_5.2.0-1_amd64.deb
  mumps_5.2.0-1_amd64.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

-- 
debian-science-maintainers mailing list
debian-science-maintainers@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers