blender 2.78.c+dfsg0-2 MIGRATED to testing

2017-07-02 Thread Debian testing watch
FYI: The status of the blender source package
in Debian's testing distribution has changed.

  Previous version: 2.78.a+dfsg0-4
  Current version:  2.78.c+dfsg0-2

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


frei0r 1.6.1-1 MIGRATED to testing

2017-07-02 Thread Debian testing watch
FYI: The status of the frei0r source package
in Debian's testing distribution has changed.

  Previous version: 1.6.0-1
  Current version:  1.6.1-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


qmidinet 0.4.3-2 MIGRATED to testing

2017-07-02 Thread Debian testing watch
FYI: The status of the qmidinet source package
in Debian's testing distribution has changed.

  Previous version: 0.4.2-2
  Current version:  0.4.3-2

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


rtkit 0.11-5 MIGRATED to testing

2017-07-02 Thread Debian testing watch
FYI: The status of the rtkit source package
in Debian's testing distribution has changed.

  Previous version: 0.11-4
  Current version:  0.11-5

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


csoundqt 0.9.4-1 MIGRATED to testing

2017-07-02 Thread Debian testing watch
FYI: The status of the csoundqt source package
in Debian's testing distribution has changed.

  Previous version: 0.9.3-1
  Current version:  0.9.4-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See https://release.debian.org/testing-watch/ for more information.

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


qsampler_0.4.3-1_amd64.changes ACCEPTED into unstable

2017-07-02 Thread Debian FTP Masters


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Mon, 03 Jul 2017 01:35:42 +0200
Source: qsampler
Binary: qsampler
Architecture: source amd64
Version: 0.4.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers 

Changed-By: Jaromír Mikeš 
Description:
 qsampler   - LinuxSampler GUI frontend based on the Qt toolkit
Changes:
 qsampler (0.4.3-1) unstable; urgency=medium
 .
   * Patch forwarded.
   * Drop autoreconf - not needed with compat 10.
   * New upstream version 0.4.3
   * Sign tags.
   * Bump Standards.
   * Revert fix dh version.
   * Update copyright file.
   * Restore .gitignore file.
   * Patch applied upstream - removed.
   * Add override file.
   * Avoid useless linking.
   * Install upstream man pages.
   * Install upstream icons only.
Checksums-Sha1:
 a9618ddb4cf9de412910d0ca8b35d18fa7f086db 2185 qsampler_0.4.3-1.dsc
 aa3776f7afa90a0ce20ba71edd848fdbec8a8b8b 246314 qsampler_0.4.3.orig.tar.gz
 04cbcbd5585e8c0e9fbf3471a7518e53381f3755 3948 qsampler_0.4.3-1.debian.tar.xz
 8dc3b77cef8bae495a195321543e6c9990003aab 4323466 
qsampler-dbgsym_0.4.3-1_amd64.deb
 2cad0bd726936aaca247fe5da4ce4d859191b82f 10534 qsampler_0.4.3-1_amd64.buildinfo
 88abd3df64e8dc8130a862da6fc912fadd638a0e 245692 qsampler_0.4.3-1_amd64.deb
Checksums-Sha256:
 d5495ec861cfc4e3df614ada4ff912aca835455a7da453eeedc1df3ea0d0ade7 2185 
qsampler_0.4.3-1.dsc
 d1857eed701f6a58be2c5d2cce318b58fcf467daca5d9b6646fefb270448e1f1 246314 
qsampler_0.4.3.orig.tar.gz
 b9839dabb228d359b9763d5712a374d446a7a21e8c6ed142443fcc6f4c513b74 3948 
qsampler_0.4.3-1.debian.tar.xz
 4be7a05f504f2f19bd78f46375e50ffac1397edee45cbcffe438cb3c48bef541 4323466 
qsampler-dbgsym_0.4.3-1_amd64.deb
 12337fe6340351704bc37f18fd958de6d6d1556663817b1d3645a05c232f21c8 10534 
qsampler_0.4.3-1_amd64.buildinfo
 4bee4c0e129bf935f3aaa85d00624fde22a273b3e7d54a5398a096ae1dfddd28 245692 
qsampler_0.4.3-1_amd64.deb
Files:
 a9f42f8925572665ce6016fa878db67b 2185 sound optional qsampler_0.4.3-1.dsc
 c83aa6cc153a471a151a9cf5a2a24fe4 246314 sound optional 
qsampler_0.4.3.orig.tar.gz
 dbf79c578f5f882ee52f636d6e81c305 3948 sound optional 
qsampler_0.4.3-1.debian.tar.xz
 da0d0881195a6bfe2f9f8a2f5e962eea 4323466 debug extra 
qsampler-dbgsym_0.4.3-1_amd64.deb
 fc25c49d88126268e44d2cea2b5d8a9e 10534 sound optional 
qsampler_0.4.3-1_amd64.buildinfo
 8b97bda87a1b3ec79d3251902094f3e7 245692 sound optional 
qsampler_0.4.3-1_amd64.deb

-BEGIN PGP SIGNATURE-

iQJJBAEBCAAzFiEESlQ1E9LfY1GoF46jWwGUVeK4T6UFAllZhHoVHG1pcmEubWlr
ZXNAc2V6bmFtLmN6AAoJEFsBlFXiuE+lb+MQALOvT9H2J5Pr7bE2K3JKIkOqvR1U
mTLeqa/l+LxnFFGilMOZkzyUzLgAlJ4f7AWsuvRzxMWplHGM5YpaJPrNXn6zh4fA
fF27a3LGGIFb71CcPRLWzdDo+/kHBfHC4JPR8Pomi5TzJ4URBydmZePMWte5G8xr
sbEgdQl2h/QfP3rHk1HO3oeTHFrZiyQVmDVewEwvUOzQqWNdOaGCoAjekq1F6gTK
0qpurQAkTDYfGeqY658WvP+f/GkIrIl1VH8hrIRwrC6t4TObvvV9HPioecdVIIO1
n8AEnR++Z9Lm3iRyQN5g3ttUr05vaXRUGQQVoNukgeUQwqEkY2I6AiQaGMQFDd2O
VZxcVqBu3C3aJSiEsMBUi3/2JDAS/DDMffkQc1dfDd15aW2ZR1vXZWHw6Linoini
IWQT8cdkIiuwuWcYAHvmDW7Xxk3jQHvO8+EG6aQJ+0BwmDBz2gsThOYEr2izFckN
LiAr8AVDoLQ8vFGLNjG9DVJ00fCASH1n8oAZYaKppa4GOrX0adl2hwzE9SRwKFMa
dORgyVhywZjAV2XziM/iQBiKa8Oou31UFB+8blRd72Oy2R5TuXbXSXl1LGMwGNA+
xLlqTZQD7JU6MfTHguKR+3yDwjr2DgA20DxQYD+kyBQpiiBJgrjVYJ86+pWGAw1P
KtHkDSLWZEe5K0OT
=k7vh
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Processing of qsampler_0.4.3-1_amd64.changes

2017-07-02 Thread Debian FTP Masters
qsampler_0.4.3-1_amd64.changes uploaded successfully to localhost
along with the files:
  qsampler_0.4.3-1.dsc
  qsampler_0.4.3.orig.tar.gz
  qsampler_0.4.3-1.debian.tar.xz
  qsampler-dbgsym_0.4.3-1_amd64.deb
  qsampler_0.4.3-1_amd64.buildinfo
  qsampler_0.4.3-1_amd64.deb

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


ardour_5.10.0~dfsg-1_amd64.changes ACCEPTED into unstable

2017-07-02 Thread Debian FTP Masters


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 02 Jul 2017 23:45:55 +0200
Source: ardour
Binary: ardour ardour-data ardour-video-timeline ardour3 ardour-i686 
ardour-altivec
Architecture: source all amd64
Version: 1:5.10.0~dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers 

Changed-By: Jaromír Mikeš 
Description:
 ardour - the digital audio workstation
 ardour-altivec - transitional dummy package for (altivec-optimized) ardour
 ardour-data - digital audio workstation (data)
 ardour-i686 - transitional dummy package for (i686 optimized) ardour
 ardour-video-timeline - digital audio workstation - video timeline
 ardour3- transitional dummy package for ardour
Changes:
 ardour (1:5.10.0~dfsg-1) unstable; urgency=medium
 .
   * Avoid useless linking.
   * New upstream version 5.10.0~dfsg
   * Update copyright_hints file.
   * Update copyright file.
   * Update override file.
   * More spelling fixes in new patch.
   * Fix one more spelling.
   * Update copyright_hints file.
   * Update d/README.source file.
Checksums-Sha1:
 47a402e79a292a3a742d42e729062daaec7d474e 3301 ardour_5.10.0~dfsg-1.dsc
 5892a5c002ba73c9724d8f792db0b97fbc51b794 8808555 
ardour_5.10.0~dfsg.orig.tar.bz2
 99f6e7123f6921b1c4c0bc9cef37b1ea33d2ff92 169836 
ardour_5.10.0~dfsg-1.debian.tar.xz
 d0811c02a2834341e262402ed3f1e2d4cde2e155 36432 
ardour-altivec_5.10.0~dfsg-1_all.deb
 dd66e181f4b531b38e470e5558674bb27ef0922b 1517428 
ardour-data_5.10.0~dfsg-1_all.deb
 f615132f263c997f1d251aa7762d7125d400fe01 151480800 
ardour-dbgsym_5.10.0~dfsg-1_amd64.deb
 19aa248c5d867cbff7e3df333e6c0a41b849ae4c 36444 
ardour-i686_5.10.0~dfsg-1_all.deb
 d94eb0f1b87d924b646f92bba5ee48f9b644aaf6 36566 
ardour-video-timeline_5.10.0~dfsg-1_all.deb
 84d5c6eef430b7e75de38f9e874c4021c7a0f193 36398 ardour3_5.10.0~dfsg-1_all.deb
 8fa3319ae0238d7caa20576689c5a600ba8fbe71 20212 
ardour_5.10.0~dfsg-1_amd64.buildinfo
 1bc6c2c3be21f993f3588d730c2ec1ac7f2170dc 8418860 ardour_5.10.0~dfsg-1_amd64.deb
Checksums-Sha256:
 bddbd402a4efb384ff3b1a5450dde0db70c423b729d9b3813d25a9342ba46a1e 3301 
ardour_5.10.0~dfsg-1.dsc
 bc6f8d4b9f9155ff41a30d251894c06fd4e970bda0fec9562a7415bf68c28e67 8808555 
ardour_5.10.0~dfsg.orig.tar.bz2
 5aa32279eb6743e1253d6f719f8f7f7b5fade55b9395d54fbd25f8c88b9e87bf 169836 
ardour_5.10.0~dfsg-1.debian.tar.xz
 f70914b5674ce0798b4fc819196a56082a33a1f4d3bd9d72b7fd2bde8d6ab8d6 36432 
ardour-altivec_5.10.0~dfsg-1_all.deb
 2e9b638f9d0979051718806128247d54ee7c557231b50b34518a39ff1cf67312 1517428 
ardour-data_5.10.0~dfsg-1_all.deb
 c2f466e8957f4e6bf6bfb99bda0fe3d5b21ec535ac0f9451e4234e48432a9e57 151480800 
ardour-dbgsym_5.10.0~dfsg-1_amd64.deb
 85cc735241b0c990476ac8f359ff736cceef2a6c133c2a1d85d05b99b10c7795 36444 
ardour-i686_5.10.0~dfsg-1_all.deb
 170079bf12602eeb0e55ff72e83d4d8d6cfb3c009bb144391933690103cc03de 36566 
ardour-video-timeline_5.10.0~dfsg-1_all.deb
 db8a4508b8ba1a464063573951476496a69ea82531f5bf6371cf63284a7db349 36398 
ardour3_5.10.0~dfsg-1_all.deb
 ec874220800cc5eb9c3a26db1af9d7e64042bf268ab80f04683359b62d30b4c4 20212 
ardour_5.10.0~dfsg-1_amd64.buildinfo
 79f4edc887b245a98045c5c918491d79853b2e24314b5c20da586bf3bea58d57 8418860 
ardour_5.10.0~dfsg-1_amd64.deb
Files:
 0fcac945f7ed662837b3b5c9c2120a8b 3301 sound optional ardour_5.10.0~dfsg-1.dsc
 5d106b62237bfc45552e955a226e001d 8808555 sound optional 
ardour_5.10.0~dfsg.orig.tar.bz2
 4e65a711e4ccbfb8382ea02d27ed650c 169836 sound optional 
ardour_5.10.0~dfsg-1.debian.tar.xz
 31caf14dc8f83d0e64aa33eeaf1f74de 36432 oldlibs extra 
ardour-altivec_5.10.0~dfsg-1_all.deb
 325ac6e622f6c03d9f861f180e197852 1517428 sound optional 
ardour-data_5.10.0~dfsg-1_all.deb
 1a792f9605e60fa56a61d66ec9c462f0 151480800 debug extra 
ardour-dbgsym_5.10.0~dfsg-1_amd64.deb
 05cae8074098a07afaf916382bd206d9 36444 oldlibs extra 
ardour-i686_5.10.0~dfsg-1_all.deb
 17cb9558abb24d6927afc8945fee 36566 sound optional 
ardour-video-timeline_5.10.0~dfsg-1_all.deb
 ba918d7a0e4e1f67012b878e66434b19 36398 oldlibs extra 
ardour3_5.10.0~dfsg-1_all.deb
 2ee6dc952e3a077d73951bbaa8b850ce 20212 sound optional 
ardour_5.10.0~dfsg-1_amd64.buildinfo
 fa6673db3d97bf73a977fa62f899aad8 8418860 sound optional 
ardour_5.10.0~dfsg-1_amd64.deb

-BEGIN PGP SIGNATURE-
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Processing of ardour_5.10.0~dfsg-1_amd64.changes

2017-07-02 Thread Debian FTP Masters
ardour_5.10.0~dfsg-1_amd64.changes uploaded successfully to localhost
along with the files:
  ardour_5.10.0~dfsg-1.dsc
  ardour_5.10.0~dfsg.orig.tar.bz2
  ardour_5.10.0~dfsg-1.debian.tar.xz
  ardour-altivec_5.10.0~dfsg-1_all.deb
  ardour-data_5.10.0~dfsg-1_all.deb
  ardour-dbgsym_5.10.0~dfsg-1_amd64.deb
  ardour-i686_5.10.0~dfsg-1_all.deb
  ardour-video-timeline_5.10.0~dfsg-1_all.deb
  ardour3_5.10.0~dfsg-1_all.deb
  ardour_5.10.0~dfsg-1_amd64.buildinfo
  ardour_5.10.0~dfsg-1_amd64.deb

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Processed: Re: Bug#863925: kodi not work

2017-07-02 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 unreproducible moreinfo
Bug #863925 [kodi] kodi not work
Added tag(s) moreinfo and unreproducible.

-- 
863925: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863925
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Bug#863925: kodi not work

2017-07-02 Thread Bálint Réczey
Control: tags -1 unreproducible moreinfo

Hi Susu,

2017-06-02 3:54 GMT+02:00 susu <0x73757...@gmail.com>:
> Package: kodi
> Version: version 2:17.1+dfsg1-3
> Severity: important
>
> Dear Maintainer,
>
> Dear Maintainer,
>
> oh ,my kodi not work.
> $kodi
> /usr/lib/x86_64-linux-gnu/kodi/kodi.bin: error while loading shared libraries:
> libmariadbclient.so.18: cannot open shared object file: No such file or
> directory
> $sudo apt install libmariadbclient18
> $ dpkg -L libmariadbclient18
> /.
> /usr
> /usr/lib
> /usr/lib/libmysqlclient.so.18.0.0
> /usr/lib/mysql
> /usr/lib/mysql/plugin
> /usr/lib/mysql/plugin/dialog.so
> /usr/lib/mysql/plugin/mysql_clear_password.so
> /usr/share
> /usr/share/doc
> /usr/share/doc/libmariadbclient18
> /usr/share/doc/libmariadbclient18/changelog.Debian.gz
> /usr/share/doc/libmariadbclient18/copyright
> /usr/lib/libmysqlclient.so.18
> /usr/lib/libmysqlclient_r.so.18
> /usr/lib/libmysqlclient_r.so.18.0.0

This looks interesing and does not match my system's files:

rbalint@sid-test:~$ dpkg -L libmariadbclient18
/.
/usr
/usr/lib
/usr/lib/x86_64-linux-gnu
/usr/lib/x86_64-linux-gnu/libmariadbclient.so.18.0.0
/usr/lib/x86_64-linux-gnu/mariadb18
/usr/lib/x86_64-linux-gnu/mariadb18/plugin
/usr/lib/x86_64-linux-gnu/mariadb18/plugin/client_ed25519.so
/usr/lib/x86_64-linux-gnu/mariadb18/plugin/dialog.so
/usr/lib/x86_64-linux-gnu/mariadb18/plugin/mysql_clear_password.so
/usr/share
/usr/share/doc
/usr/share/doc/libmariadbclient18
/usr/share/doc/libmariadbclient18/changelog.Debian.gz
/usr/share/doc/libmariadbclient18/copyright
/usr/lib/x86_64-linux-gnu/libmariadbclient.so.18

rbalint@sid-test:~$ dpkg -l libmariadbclient18 |
catDesired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version  Architecture Description
+++----=
ii  libmariadbclient18:amd64 10.1.24-6amd64MariaDB
database client library

Could you please upgrade all your packages and if kodi still does not
work copy the output of "dpkg -l libmariadbclient18 | cat" ?

Thanks,
Balint

>
> i don't know why it is not work.
>
>
>
> -- System Information:
> Debian Release: 9.0
>   APT prefers unstable
>   APT policy: (500, 'unstable')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
>
> Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
> Locale: LANG=zh_CN.UTF-8, LC_CTYPE=zh_CN.UTF-8 (charmap=UTF-8), 
> LANGUAGE=zh_CN.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
>
> Versions of packages kodi depends on:
> ii  init-system-helpers  1.48
> ii  kodi-bin 2:17.1+dfsg1-3
> ii  kodi-data2:17.1+dfsg1-3
>
> Versions of packages kodi recommends:
> ii  kodi-visualization-spectrum  1.1.1-1
>
> kodi suggests no packages.

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Processed: reassign 851748 to menu-cache, fixed 851748 in 1.0.2-2, affects 851748, notfixed 495915 in 1.8.2-1 ...

2017-07-02 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> # fixing up bug metadata to allow archival
> reassign 851748 menu-cache
Bug #851748 {Done: Andriy Grytsenko } [libfm-extra4] 
libfm-extra4 in debian/testing kills LXDE menus
Bug reassigned from package 'libfm-extra4' to 'menu-cache'.
No longer marked as found in versions libfm/1.2.5-1.
No longer marked as fixed in versions menu-cache/1.0.2-2.
> fixed 851748 1.0.2-2
Bug #851748 {Done: Andriy Grytsenko } [menu-cache] 
libfm-extra4 in debian/testing kills LXDE menus
There is no source info for the package 'menu-cache' at version '1.0.2-2' with 
architecture ''
Unable to make a source version for version '1.0.2-2'
Marked as fixed in versions 1.0.2-2.
> affects 851748 + libfm-extra4
Bug #851748 {Done: Andriy Grytsenko } [menu-cache] 
libfm-extra4 in debian/testing kills LXDE menus
Added indication that 851748 affects libfm-extra4
> notfixed 495915 1.8.2-1
Bug #495915 {Done: "Barak A. Pearlmutter" } [stopmotion] 
stopmotion: messagebox with a warning appears.
There is no source info for the package 'stopmotion' at version '1.8.2-1' with 
architecture ''
Unable to make a source version for version '1.8.2-1'
No longer marked as fixed in versions stopmotion/1.8.2-1.
> fixed 495915 0.8.2-1
Bug #495915 {Done: "Barak A. Pearlmutter" } [stopmotion] 
stopmotion: messagebox with a warning appears.
Marked as fixed in versions stopmotion/0.8.2-1.
> fixed 859502 3.0.2+ds-1~exp1
Bug #859502 {Done: Roger Shimizu } [shadowsocks-libev] 
shadowsocks-libev: typos in manpages
Marked as fixed in versions shadowsocks-libev/3.0.2+ds-1~exp1.
> reassign 796490 texlive-bin
Bug #796490 {Done: Norbert Preining } [texlive-latex-base] 
[texlive-latex-base] pdflatex does not create reproducible pdfs with multiple 
images
Bug reassigned from package 'texlive-latex-base' to 'texlive-bin'.
No longer marked as found in versions texlive-base/2014.20141024-2.
No longer marked as fixed in versions texlive-bin/2016.20160513.41080.dfsg-2.
> fixed 796490 2016.20160513.41080.dfsg-2
Bug #796490 {Done: Norbert Preining } [texlive-bin] 
[texlive-latex-base] pdflatex does not create reproducible pdfs with multiple 
images
There is no source info for the package 'texlive-bin' at version 
'2016.20160513.41080.dfsg-2' with architecture ''
Unable to make a source version for version '2016.20160513.41080.dfsg-2'
Marked as fixed in versions 2016.20160513.41080.dfsg-2.
> reassign 711470 src:open-ath9k-htc-firmware
Bug #711470 {Done: Oleksij Rempel } 
[firmware-linux-free] ath9k_htc updated firmware for firmware-linux-free
Bug #810047 {Done: Oleksij Rempel } 
[firmware-linux-free] firmware-linux-free: ath9k_htc firmware (now fully free) 
not provided by package
Bug #810672 {Done: Oleksij Rempel } 
[firmware-linux-free] firmware-linux-free should include the ath9k_htc firmware
Bug reassigned from package 'firmware-linux-free' to 
'src:open-ath9k-htc-firmware'.
Bug reassigned from package 'firmware-linux-free' to 
'src:open-ath9k-htc-firmware'.
Bug reassigned from package 'firmware-linux-free' to 
'src:open-ath9k-htc-firmware'.
No longer marked as found in versions firmware-free/3.3, firmware-free/3.2, and 
firmware-free/3.4.
No longer marked as found in versions firmware-free/3.2, firmware-free/3.4, and 
firmware-free/3.3.
No longer marked as found in versions firmware-free/3.3, firmware-free/3.2, and 
firmware-free/3.4.
No longer marked as fixed in versions 
open-ath9k-htc-firmware/1.4.0-81-gf206e56+dfsg-1.
No longer marked as fixed in versions 
open-ath9k-htc-firmware/1.4.0-81-gf206e56+dfsg-1.
No longer marked as fixed in versions 
open-ath9k-htc-firmware/1.4.0-81-gf206e56+dfsg-1.
> fixed 711470 1.4.0-81-gf206e56+dfsg-1
Bug #711470 {Done: Oleksij Rempel } 
[src:open-ath9k-htc-firmware] ath9k_htc updated firmware for firmware-linux-free
Bug #810047 {Done: Oleksij Rempel } 
[src:open-ath9k-htc-firmware] firmware-linux-free: ath9k_htc firmware (now 
fully free) not provided by package
Bug #810672 {Done: Oleksij Rempel } 
[src:open-ath9k-htc-firmware] firmware-linux-free should include the ath9k_htc 
firmware
Marked as fixed in versions open-ath9k-htc-firmware/1.4.0-81-gf206e56+dfsg-1.
Marked as fixed in versions open-ath9k-htc-firmware/1.4.0-81-gf206e56+dfsg-1.
Marked as fixed in versions open-ath9k-htc-firmware/1.4.0-81-gf206e56+dfsg-1.
> affects 711470 + firmware-linux-free
Bug #711470 {Done: Oleksij Rempel } 
[src:open-ath9k-htc-firmware] ath9k_htc updated firmware for firmware-linux-free
Bug #810047 {Done: Oleksij Rempel } 
[src:open-ath9k-htc-firmware] firmware-linux-free: ath9k_htc firmware (now 
fully free) not provided by package
Bug #810672 {Done: Oleksij Rempel } 
[src:open-ath9k-htc-firmware] firmware-linux-free should include the ath9k_htc 
firmware
Added indication that 711470 affects firmware-linux-free
Added indication that 810047 affects firmware-linux-free
Added indication that 810672 affects firmware-linux-free
> reassign 688280 src:android-platform-system-core
Bug #688280 {Done: Hans-Christoph St

qtractor_0.8.3-1_amd64.changes ACCEPTED into unstable

2017-07-02 Thread Debian FTP Masters


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 02 Jul 2017 23:47:49 +0200
Source: qtractor
Binary: qtractor
Architecture: source amd64
Version: 0.8.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers 

Changed-By: Jaromír Mikeš 
Description:
 qtractor   - MIDI/Audio multi-track sequencer application
Changes:
 qtractor (0.8.3-1) unstable; urgency=medium
 .
   * New upstream version 0.8.3
Checksums-Sha1:
 2484414d36382ccaac8ac97d4be7886310f7c566 2405 qtractor_0.8.3-1.dsc
 cf27d0477561e2fccefe2cb124c1b9243fa28b28 1750869 qtractor_0.8.3.orig.tar.gz
 82738e90c77f44c28486ddfa4c471d7983a5f79a 7052 qtractor_0.8.3-1.debian.tar.xz
 8fc83a6ee0f4a2bc79014dd33c44d211fd9f7688 14197 qtractor_0.8.3-1_amd64.buildinfo
 f127640d8ac8d042eddbd1f90710122ef4512a51 1579272 qtractor_0.8.3-1_amd64.deb
Checksums-Sha256:
 61484f344dd91779878a51728169806da1d2923e40a8f5d498a5ca1f1496ab45 2405 
qtractor_0.8.3-1.dsc
 6852facb08c1a38c9c4bf5bf9922b0b9a050a00b85c6b5aeda1764f3afb8f83d 1750869 
qtractor_0.8.3.orig.tar.gz
 10c8b0d11468355f2a4fbe10434b34e6ca19f3056f968191740d381ce4163ef7 7052 
qtractor_0.8.3-1.debian.tar.xz
 36500a1297103b8c48e6218fd073e3fc1a2b62d36b6044b3407cbb9c4bbd44c6 14197 
qtractor_0.8.3-1_amd64.buildinfo
 8c709f978b18aa7e5d576f1d16ad683327c7c7261e131cdcf37b675d6e95f88d 1579272 
qtractor_0.8.3-1_amd64.deb
Files:
 efe2d6ffbcb8ef1e1aedb1d3faec38d1 2405 sound optional qtractor_0.8.3-1.dsc
 f944e6ac1af3760cd92648658d4b 1750869 sound optional 
qtractor_0.8.3.orig.tar.gz
 0aeedf9f7b711155077c047e3d83c0f6 7052 sound optional 
qtractor_0.8.3-1.debian.tar.xz
 87922b694c3431663bed041e5cdc87e2 14197 sound optional 
qtractor_0.8.3-1_amd64.buildinfo
 d17ef7f8a7e0543f03ca2e8ebb88239e 1579272 sound optional 
qtractor_0.8.3-1_amd64.deb

-BEGIN PGP SIGNATURE-
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=fSba
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Bug#866532: marked as done (inkscape: Fails to start because of libgsl.so.0 can't be found)

2017-07-02 Thread Debian Bug Tracking System
Your message dated Mon, 3 Jul 2017 00:06:12 +0200
with message-id <20170702220610.7l3key27dukkp...@mapreri.org>
and subject line Re: Bug#866532: inkscape: Fails to start because of 
libgsl.so.0 can't be found
has caused the Debian Bug report #866532,
regarding inkscape: Fails to start because of libgsl.so.0 can't be found
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
866532: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=866532
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: inkscape
Version: 0.92.1-1
Severity: grave
Justification: renders package unusable

Dear Maintainer,

Inkscape fails to start with the following error message:

$ inkscape
inkscape: error while loading shared libraries: libgsl.so.0: cannot open shared 
object file: No such file or directory

The problem appeared after I upgraded my system from jessie to stretch.

Best,

Greg

-- System Information:
Debian Release: 9.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US:en 
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages inkscape depends on:
ii  libaspell150.60.7~20110707-3+b2
ii  libatk1.0-02.22.0-1
ii  libatkmm-1.6-1v5   2.24.2-2
ii  libc6  2.24-11+deb9u1
ii  libcairo2  1.14.8-1
ii  libcairomm-1.0-1v5 1.12.0-1+b1
ii  libcdr-0.1-1   0.1.3-3+b1
ii  libdbus-1-31.10.18-1
ii  libdbus-glib-1-2   0.108-2
ii  libfontconfig1 2.11.0-6.7+b1
ii  libfreetype6   2.6.3-3.2
ii  libgc1c2   1:7.4.2-8
ii  libgcc11:6.3.0-18
ii  libgdk-pixbuf2.0-0 2.36.5-2
ii  libglib2.0-0   2.50.3-2
ii  libglibmm-2.4-1v5  2.50.0-1
ii  libgomp1   6.3.0-18
ii  libgsl22.3+dfsg-1
ii  libgtk2.0-02.24.31-2
ii  libgtkmm-2.4-1v5   1:2.24.5-1
ii  libgtkspell0   2.0.16-1.1
ii  libjpeg62-turbo1:1.5.1-2
ii  liblcms2-2 2.8-4
ii  libmagick++-6.q16-78:6.9.7.4+dfsg-11
ii  libmagickcore-6.q16-3  8:6.9.7.4+dfsg-11
ii  libmagickwand-6.q16-3  8:6.9.7.4+dfsg-11
ii  libpango-1.0-0 1.40.5-1
ii  libpangocairo-1.0-01.40.5-1
ii  libpangoft2-1.0-0  1.40.5-1
ii  libpangomm-1.4-1v5 2.40.1-3
ii  libpng16-161.6.28-1
ii  libpoppler-glib8   0.48.0-2
ii  libpoppler64   0.48.0-2
ii  libpopt0   1.16-10+b2
ii  libpotrace01.13-3
ii  librevenge-0.0-0   0.0.4-6
ii  libsigc++-2.0-0v5  2.10.0-1
ii  libstdc++6 6.3.0-18
ii  libvisio-0.1-1 0.1.5-4+b1
ii  libwpg-0.3-3   0.3.1-3
ii  libx11-6   2:1.6.4-3
ii  libxml22.9.4+dfsg1-2.2
ii  libxslt1.1 1.1.29-2.1
ii  python 2.7.13-2
ii  zlib1g 1:1.2.8.dfsg-5

Versions of packages inkscape recommends:
ii  aspell   0.60.7~20110707-3+b2
ii  fig2dev [transfig]   1:3.2.6a-2
ii  imagemagick  8:6.9.7.4+dfsg-11
ii  imagemagick-6.q16 [imagemagick]  8:6.9.7.4+dfsg-11
ii  libimage-magick-perl 8:6.9.7.4+dfsg-11
ii  libwmf-bin   0.2.8.4-10.6
ii  python-lxml  3.7.1-1
ii  python-numpy 1:1.12.1-3
ii  python-scour 0.32-2
ii  transfig 1:3.2.6a-2

Versions of packages inkscape suggests:
pn  dia | dia-gnome  
pn  libsvg-perl  
pn  libxml-xql-perl  
ii  pstoedit 3.70-3+b2
pn  python-uniconvertor  
ii  ruby 1:2.3.3

-- no debconf information
--- End Message ---
--- Begin Message ---
On Sun, Jul 02, 2017 at 11:55:44PM +0200, greg masliah wrote:
> I was actually a bit hesitant to submit this report, and indeed I should
> have investigated a bit more.

Ah, don't broom over it too much :)

> You were right: I wasn't executing version 0.92.1-1 from stretch, but a
> self-compiled version, which was linked to libgsl.so.0. Everything works
> fine now. All my apologies.

Cool!  Good to know there was nothing so bad going on :)

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/de

Processing of qtractor_0.8.3-1_amd64.changes

2017-07-02 Thread Debian FTP Masters
qtractor_0.8.3-1_amd64.changes uploaded successfully to localhost
along with the files:
  qtractor_0.8.3-1.dsc
  qtractor_0.8.3.orig.tar.gz
  qtractor_0.8.3-1.debian.tar.xz
  qtractor_0.8.3-1_amd64.buildinfo
  qtractor_0.8.3-1_amd64.deb

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Bug#866532: inkscape: Fails to start because of libgsl.so.0 can't be found

2017-07-02 Thread greg masliah
Hi Mattia,

I was actually a bit hesitant to submit this report, and indeed I should
have investigated a bit more.
You were right: I wasn't executing version 0.92.1-1 from stretch, but a
self-compiled version, which was linked to libgsl.so.0. Everything works
fine now. All my apologies.
Best,

Greg

On Sun, Jul 2, 2017 at 4:55 PM, Mattia Rizzolo  wrote:

> Control: tag -1 moreinfo unreproducible
>
> On Fri, Jun 30, 2017 at 12:33:44AM +0200, greggy wrote:
> > Inkscape fails to start with the following error message:
> >
> > $ inkscape
> > inkscape: error while loading shared libraries: libgsl.so.0: cannot open
> shared object file: No such file or directory
> >
> > The problem appeared after I upgraded my system from jessie to stretch.
>
> Of course I can't reproduce it…
> I given how widespread inkscape is and you're the only one reporting it
> makes me believe there is something wrong on your side.
>
> For example, are you sure you are running the binary coming from the
> Debian archive?
> Our inkscape should be built against libgsl.so.19, not libgsl.so.0 as
> your error message reports.
>
> It makes me believe you somehow have the binary coming from jessie,
> which was built against libgsl.so.0 indeed.
>
> --
> regards,
> Mattia Rizzolo
>
> GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
> more about me:  https://mapreri.org : :'  :
> Launchpad user: https://launchpad.net/~mapreri  `. `'`
> Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
>
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Bug#861362: marked as done (src:jsusfx: unnecessary versioned b-d on php7.0-cli?)

2017-07-02 Thread Debian Bug Tracking System
Your message dated Sun, 02 Jul 2017 19:20:09 +
with message-id 
and subject line Bug#861362: fixed in jsusfx 0.3.1-3
has caused the Debian Bug report #861362,
regarding src:jsusfx: unnecessary versioned b-d on php7.0-cli?
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
861362: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861362
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: jsusfx
Severity: minor

Dear Maintainer,

While not critical, the line in d/control

php7.0-cli [amd64] | php-cli [amd64],

seems unnecessary? That is, can't it just be php-cli?

Thanks,
Nish

-- 
Nishanth Aravamudan
Ubuntu Server
Canonical Ltd
--- End Message ---
--- Begin Message ---
Source: jsusfx
Source-Version: 0.3.1-3

We believe that the bug you reported is fixed in the latest version of
jsusfx, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 861...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
IOhannes m zmölnig (Debian/GNU)  (supplier of updated 
jsusfx package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 02 Jul 2017 20:54:58 +0200
Source: jsusfx
Binary: pd-jsusfx
Architecture: source
Version: 0.3.1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers 

Changed-By: IOhannes m zmölnig (Debian/GNU) 
Description:
 pd-jsusfx  - Jesusonic FX scripting language for audio DSP (Pure Data)
Closes: 861362
Changes:
 jsusfx (0.3.1-3) unstable; urgency=medium
 .
   * Drop B-D on php7.0-cli (replaced by php-cli) (Closes: #861362)
   * Bumped standards to 4.0.0
Checksums-Sha1:
 c07526ba3cd828194107ababbed57f091481ca09 1993 jsusfx_0.3.1-3.dsc
 9c1f843047ecd85aada58ca630bf22f4fddb174b 3236 jsusfx_0.3.1-3.debian.tar.xz
 63375f1ecf854378d4e993967c080b9b3e5c90cd 6144 jsusfx_0.3.1-3_amd64.buildinfo
Checksums-Sha256:
 ae8ca20fc00b444ee0fd9cbb53a0ccb0f6487b3ddfb91eca9c6de1d3ebaa589b 1993 
jsusfx_0.3.1-3.dsc
 01e0fa23b408475bad22aa73bd11a4309304c97e9bff807010150b9c4cd37390 3236 
jsusfx_0.3.1-3.debian.tar.xz
 b07d8d41315659f8f91c8fd7e5cbeb23b15e0dfacd30e413ca30617e36a52079 6144 
jsusfx_0.3.1-3_amd64.buildinfo
Files:
 6d552741a9e79cb3abb84904034a7789 1993 sound optional jsusfx_0.3.1-3.dsc
 c991a15f8d44d3c796e537f821886579 3236 sound optional 
jsusfx_0.3.1-3.debian.tar.xz
 cdd5810548811230dea7512b61db1dd8 6144 sound optional 
jsusfx_0.3.1-3_amd64.buildinfo

-BEGIN PGP SIGNATURE-
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=2tWV
-END PGP SIGNATURE End Message ---
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

jsusfx_0.3.1-3_amd64.changes ACCEPTED into unstable

2017-07-02 Thread Debian FTP Masters


Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Sun, 02 Jul 2017 20:54:58 +0200
Source: jsusfx
Binary: pd-jsusfx
Architecture: source
Version: 0.3.1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers 

Changed-By: IOhannes m zmölnig (Debian/GNU) 
Description:
 pd-jsusfx  - Jesusonic FX scripting language for audio DSP (Pure Data)
Closes: 861362
Changes:
 jsusfx (0.3.1-3) unstable; urgency=medium
 .
   * Drop B-D on php7.0-cli (replaced by php-cli) (Closes: #861362)
   * Bumped standards to 4.0.0
Checksums-Sha1:
 c07526ba3cd828194107ababbed57f091481ca09 1993 jsusfx_0.3.1-3.dsc
 9c1f843047ecd85aada58ca630bf22f4fddb174b 3236 jsusfx_0.3.1-3.debian.tar.xz
 63375f1ecf854378d4e993967c080b9b3e5c90cd 6144 jsusfx_0.3.1-3_amd64.buildinfo
Checksums-Sha256:
 ae8ca20fc00b444ee0fd9cbb53a0ccb0f6487b3ddfb91eca9c6de1d3ebaa589b 1993 
jsusfx_0.3.1-3.dsc
 01e0fa23b408475bad22aa73bd11a4309304c97e9bff807010150b9c4cd37390 3236 
jsusfx_0.3.1-3.debian.tar.xz
 b07d8d41315659f8f91c8fd7e5cbeb23b15e0dfacd30e413ca30617e36a52079 6144 
jsusfx_0.3.1-3_amd64.buildinfo
Files:
 6d552741a9e79cb3abb84904034a7789 1993 sound optional jsusfx_0.3.1-3.dsc
 c991a15f8d44d3c796e537f821886579 3236 sound optional 
jsusfx_0.3.1-3.debian.tar.xz
 cdd5810548811230dea7512b61db1dd8 6144 sound optional 
jsusfx_0.3.1-3_amd64.buildinfo

-BEGIN PGP SIGNATURE-

iQIzBAEBCAAdFiEEdAXnRVdICXNIABVttlAZxH96NvgFAllZQgYACgkQtlAZxH96
Nvjb2Q//Q4ts5j0Y56V/dfCwkEtm75oRIzHNCGT7umEiyXyQ3HqSEgRUEXPF1iXg
gSI2fKYJR1sp9T1hmRte1buHerqg4qGO1OAsgF2vib2DyRLFBagqDqh/OnCymp8n
2pJ1MsowRFibS6yX4siIpxeNEN7W7Mxr4v2nCr6lImBEyK1ZjgFpE7ksY0N8DDma
1j5GoJ4ziqvyBJ5QjxTchCHK5k7Fkbzf5YCgS4Z+ZuE3hNz4FaGBMGmRPUX5aZjs
1HXCoW/3mXryZmBbO5w9dAvDF4vbd7Ng0SkNqOelcCZDa42DoQFbFci1xSx2GGK7
tzBf20ivyAdLzMGtsiy3VUjZclo6NHOz5O6dN3Gq3/s0+sB0Ux/kIzHYmhVquxGT
QqkI7l+JOYqUGPBaqUqHUIWCnF9jxqFLIeeQon6g35we/TPrYTVrQhm6Zk2clk6Y
2Xgh3By9dHdIpNHRirwEDl1FgC5KHTvmci3uEE53oNc5SXWzhYG8SdHK+VXPxi7A
up6d8oGF70rqSHI/BfCoROin7ovyeCvqQbWEHpUVkLd5FFROw0Xbl5k8TFk6e5j+
NvWr3NegoXtCYywiE1k4vXTln/svmjid8slBvFM6G9aJf3yxYjlqIPnDOl1e6n/J
U/zPXbXk1vr96N1ap7882juVv57HGuTFsbzzY9C7Db6GW2J2iLM=
=2tWV
-END PGP SIGNATURE-


Thank you for your contribution to Debian.

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Processing of jsusfx_0.3.1-3_amd64.changes

2017-07-02 Thread Debian FTP Masters
jsusfx_0.3.1-3_amd64.changes uploaded successfully to localhost
along with the files:
  jsusfx_0.3.1-3.dsc
  jsusfx_0.3.1-3.debian.tar.xz
  jsusfx_0.3.1-3_amd64.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Processed: Bug#861362 marked as pending

2017-07-02 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tag 861362 pending
Bug #861362 [src:jsusfx] src:jsusfx: unnecessary versioned b-d on php7.0-cli?
Added tag(s) pending.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
861362: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861362
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Bug#864415: [inkscape] crash while rotating with snap to path

2017-07-02 Thread Mattia Rizzolo
Control: forwarded -1 https://bugs.launchpad.net/inkscape/+bug/1701930
Control: tag -1 upstream
Control: severity -1 normal


Sorry, it slipped past me…

On Fri, Jun 09, 2017 at 07:45:16PM +0200, Carsten Knoll wrote:
> See the attached file. It crashes in 100% of cases, if I rotate the
> dashed line as shown in the video. However there seem to be two
> different types:

Thanks for the reproducer, forwarded upstream in a new bug (linked
above).
The other bugs I could find seemed similar but different variation of
this, I'll let upstream decide whether they are different or the same
and in such case merge them.

> a) slow rotation -> snap is indicated, then inkscape crashes but at
> least creates a backup (that saved me a lot of time the other day!)

Couldn't reproduce this, tbh.  For how slow I could rotate it it always
crashed hard as in case b.

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Processed: Re: Bug#864415: [inkscape] crash while rotating with snap to path

2017-07-02 Thread Debian Bug Tracking System
Processing control commands:

> forwarded -1 https://bugs.launchpad.net/inkscape/+bug/1701930
Bug #864415 [inkscape] [inkscape] crash while rotating with snap to path
Set Bug forwarded-to-address to 
'https://bugs.launchpad.net/inkscape/+bug/1701930'.
> tag -1 upstream
Bug #864415 [inkscape] [inkscape] crash while rotating with snap to path
Added tag(s) upstream.
> severity -1 normal
Bug #864415 [inkscape] [inkscape] crash while rotating with snap to path
Severity set to 'normal' from 'important'

-- 
864415: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864415
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Bug#866532: inkscape: Fails to start because of libgsl.so.0 can't be found

2017-07-02 Thread Mattia Rizzolo
Control: tag -1 moreinfo unreproducible

On Fri, Jun 30, 2017 at 12:33:44AM +0200, greggy wrote:
> Inkscape fails to start with the following error message:
> 
> $ inkscape
> inkscape: error while loading shared libraries: libgsl.so.0: cannot open 
> shared object file: No such file or directory
> 
> The problem appeared after I upgraded my system from jessie to stretch.

Of course I can't reproduce it…
I given how widespread inkscape is and you're the only one reporting it
makes me believe there is something wrong on your side.

For example, are you sure you are running the binary coming from the
Debian archive?
Our inkscape should be built against libgsl.so.19, not libgsl.so.0 as
your error message reports.

It makes me believe you somehow have the binary coming from jessie,
which was built against libgsl.so.0 indeed.

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Processed: Re: Bug#866532: inkscape: Fails to start because of libgsl.so.0 can't be found

2017-07-02 Thread Debian Bug Tracking System
Processing control commands:

> tag -1 moreinfo unreproducible
Bug #866532 [inkscape] inkscape: Fails to start because of libgsl.so.0 can't be 
found
Added tag(s) unreproducible and moreinfo.

-- 
866532: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=866532
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Wheezy update of mpg123?

2017-07-02 Thread Thorsten Alteholz

Dear maintainer(s),

The Debian LTS team would like to fix the security issues which are
currently open in the Wheezy version of mpg123:
https://security-tracker.debian.org/tracker/CVE-2017-10683

Would you like to take care of this yourself?

If yes, please follow the workflow we have defined here:
https://wiki.debian.org/LTS/Development

If that workflow is a burden to you, feel free to just prepare an
updated source package and send it to debian-...@lists.debian.org
(via a debdiff, or with an URL pointing to the source package,
or even with a pointer to your packaging repository), and the members
of the LTS team will take care of the rest. Indicate clearly whether you
have tested the updated package or not.

If you don't want to take care of this update, it's not a problem, we
will do our best with your package. Just let us know whether you would
like to review and/or test the updated package before it gets released.

You can also opt-out from receiving future similar emails in your
answer and then the LTS Team will take care of mpg123 updates
for the LTS releases.

Thank you very much.

Thorsten Alteholz,
  on behalf of the Debian LTS team.

PS: A member of the LTS team might start working on this update at
any point in time. You can verify whether someone is registered
on this update in this file:
https://anonscm.debian.org/viewvc/secure-testing/data/dla-needed.txt?view=markup



___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Bug#866738: marked as done (vlc-bin: fails to upgrade from 'stretch' - trying to overwrite /usr/bin/cvlc)

2017-07-02 Thread Debian Bug Tracking System
Your message dated Sun, 2 Jul 2017 16:30:21 +0200
with message-id <8e00a4e3-7498-50e8-25ac-348b48c70...@debian.org>
and subject line Re: Bug#866738: vlc-bin: fails to upgrade from 'stretch' - 
trying to overwrite /usr/bin/cvlc
has caused the Debian Bug report #866738,
regarding vlc-bin: fails to upgrade from 'stretch' - trying to overwrite 
/usr/bin/cvlc
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
866738: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=866738
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: vlc-bin
Version: 2.2.6-2
Severity: serious
User: debian...@lists.debian.org
Usertags: piuparts
Control: affects -1 + kmplayer

Hi,

during a test with piuparts I noticed your package fails to upgrade from
'stretch'.
It installed fine in 'stretch', then the upgrade to 'buster' fails
because it tries to overwrite other packages files without declaring a
Breaks+Replaces relation.

See policy 7.6 at
https://www.debian.org/doc/debian-policy/ch-relationships.html#s-replaces

>From the attached log (scroll to the bottom...):

  Selecting previously unselected package vlc-bin.
  Preparing to unpack .../vlc-bin_2.2.6-2_amd64.deb ...
  Unpacking vlc-bin (2.2.6-2) ...
  dpkg: error processing archive 
/var/cache/apt/archives/vlc-bin_2.2.6-2_amd64.deb (--unpack):
   trying to overwrite '/usr/bin/cvlc', which is also in package vlc-nox 
2.2.5-1~deb8u1
  dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)


cheers,

Andreas


kmplayer_1:0.12.0b-1.log.gz
Description: application/gzip
--- End Message ---
--- Begin Message ---
On 2017-07-02 16:21, Sebastian Ramacher wrote:
> No, the provided log installs jessie and then directly upgrades to buster/sid
> and skips stretch. This isn't a supported upgrade path.

Oops, my fault. That should have been an upgrade from stretch to sid,
skipping buster.


Andreas--- End Message ---
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Processed: Re: Bug#866738: vlc-bin: fails to upgrade from 'stretch' - trying to overwrite /usr/bin/cvlc

2017-07-02 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + moreinfo
Bug #866738 [vlc-bin] vlc-bin: fails to upgrade from 'stretch' - trying to 
overwrite /usr/bin/cvlc
Added tag(s) moreinfo.

-- 
866738: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=866738
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Bug#866738: vlc-bin: fails to upgrade from 'stretch' - trying to overwrite /usr/bin/cvlc

2017-07-02 Thread Sebastian Ramacher
Control: tags -1 + moreinfo

On 2017-07-01 13:23:16, Andreas Beckmann wrote:
> Package: vlc-bin
> Version: 2.2.6-2
> Severity: serious
> User: debian...@lists.debian.org
> Usertags: piuparts
> Control: affects -1 + kmplayer
> 
> Hi,
> 
> during a test with piuparts I noticed your package fails to upgrade from
> 'stretch'.
> It installed fine in 'stretch', then the upgrade to 'buster' fails
> because it tries to overwrite other packages files without declaring a
> Breaks+Replaces relation.

No, the provided log installs jessie and then directly upgrades to buster/sid
and skips stretch. This isn't a supported upgrade path.

Did you attach an incorrect log?

Cheers

> 
> See policy 7.6 at
> https://www.debian.org/doc/debian-policy/ch-relationships.html#s-replaces
> 
> >From the attached log (scroll to the bottom...):
> 
>   Selecting previously unselected package vlc-bin.
>   Preparing to unpack .../vlc-bin_2.2.6-2_amd64.deb ...
>   Unpacking vlc-bin (2.2.6-2) ...
>   dpkg: error processing archive 
> /var/cache/apt/archives/vlc-bin_2.2.6-2_amd64.deb (--unpack):
>trying to overwrite '/usr/bin/cvlc', which is also in package vlc-nox 
> 2.2.5-1~deb8u1
>   dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)
> 
> 
> cheers,
> 
> Andreas


> ___
> pkg-multimedia-maintainers mailing list
> pkg-multimedia-maintainers@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


-- 
Sebastian Ramacher


signature.asc
Description: PGP signature
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Bug#866860: mpg123: CVE-2017-10683

2017-07-02 Thread Thomas Orgis
Am Sun, 02 Jul 2017 11:12:36 +0200
schrieb Salvatore Bonaccorso : 

> CVE-2017-10683[0]:
> | In mpg123 1.25.0, there is a heap-based buffer over-read in the
> | convert_latin1 function in libmpg123/id3.c. A crafted input will lead
> | to a remote denial of service attack.

I don't oppose the creation of a CVE for that, although I wouldn't have
bothered myself and also the description seems overly dramatic. So far
I have only seen valgrind and an enabled AddressSanitizer complaining.
In practice, I did not see one crash because of this in normal builds.

This is one byte read too much, but to get denial of service, that
extra byte should be outside mpg123's address space. That does not
strike me as very likely in this context. Maybe one can construct such
a case, but the test bitstream I got doesn't do it. Even if that one
byte too much is successfully read and finds its way into a string
buffer, my paranoia had me explicitly append an (additional) zero after
it anyway.

I'd phrase the last CVE sentence as:

A crafted input will lead to a remote denial of service attack
if the user asked for it by enabling compiler instrumentation.

;-)

That being said, I won't claim that it is impossible to craft a file
that would trigger serious invalid reads (p.ex. by an strlen() in an
adjacent code path, _not_ in the text processing the triggered test
case covers), and possibly actual DoS instead of possibly just sligthly
bogus ID3 data from invalid input. I just havent's seen it yet.


Anyway, the officially fixed version 1.25.1 will be released
today/night. So you might want to just update to that one instead of
pulling out the single patch. I am still waiting for a complete report
for another issue that I'd like to fix in the release, too.


Alrighty then,

Thomas


pgpD6zg0OaqBP.pgp
Description: Digitale Signatur von OpenPGP
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Processed: found 866860 in 1.20.1-2

2017-07-02 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> found 866860 1.20.1-2
Bug #866860 [src:mpg123] mpg123: CVE-2017-10683
Marked as found in versions mpg123/1.20.1-2.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
866860: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=866860
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Bug#866860: mpg123: CVE-2017-10683

2017-07-02 Thread Salvatore Bonaccorso
Control: tags -1 + patch

On Sun, Jul 02, 2017 at 11:12:36AM +0200, Salvatore Bonaccorso wrote:
> Source: mpg123
> Version: 1.25.0-1
> Severity: important
> Tags: upstream security
> 
> Hi,
> 
> the following vulnerability was published for mpg123.
> 
> CVE-2017-10683[0]:
> | In mpg123 1.25.0, there is a heap-based buffer over-read in the
> | convert_latin1 function in libmpg123/id3.c. A crafted input will lead
> | to a remote denial of service attack.
> 
> This was reported at [1], but Hanno Boeck recently reported [2] as
> well.
> 
> Looking at both cases i think those should be the same issues, and
> upstream has a patch for the issue.
> 
> If you fix the vulnerability please also make sure to include the
> CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
> 
> For further information see:
> 
> [0] https://security-tracker.debian.org/tracker/CVE-2017-10683
> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10683
> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1465819
> [2] https://sourceforge.net/p/mpg123/bugs/252/

Attaching the extracted patch.

Regards,
Salvatore
Index: NEWS
===
--- NEWS	(revision 4251)
+++ NEWS	(revision 4252)
@@ -2,6 +2,9 @@
 ---
 - libmpg123:
 -- Avoid memset(NULL, 0, 0) to calm down the paranoid.
+-- Fix bug 252, invalid read of size 1 in ID3v2 parser due to forgotten
+   offset from the frame flag bytes (unnoticed in practice for a long
+   time).
 
 1.25.0: MP3 now patent-free worldwide!
 ---
Index: src/libmpg123/id3.c
===
--- src/libmpg123/id3.c	(revision 4251)
+++ src/libmpg123/id3.c	(revision 4252)
@@ -700,6 +700,8 @@
 
 	/* length-10 or length-20 (footer present); 4 synchsafe integers == 28 bit number  */
 	/* we have already read 10 bytes, so left are length or length+10 bytes belonging to tag */
+	/* Note: This is an 28 bit value in 32 bit storage, plenty of space for */
+	/* length+x for reasonable x. */
 	if(!synchsafe_to_long(buf+2,length))
 	{
 		if(NOQUIET) error4("Bad tag length (not synchsafe): 0x%02x%02x%02x%02x; You got a bad ID3 tag here.", buf[2],buf[3],buf[4],buf[5]);
@@ -764,13 +766,16 @@
 	char id[5];
 	unsigned long framesize;
 	unsigned long fflags; /* need 16 bits, actually */
+	/* bytes of frame title and of framesize value */
+	int head_part = fr->id3v2.version > 2 ? 4 : 3;
+	int flag_part = fr->id3v2.version > 2 ? 2 : 0;
 	id[4] = 0;
 	/* pos now advanced after ext head, now a frame has to follow */
-	while(tagpos < length-10) /* I want to read at least a full header */
+	/* I want to read at least one full header now. */
+	while(tagpos <= length-head_part-head_part-flag_part)
 	{
 		int i = 0;
 		unsigned long pos = tagpos;
-		int head_part = fr->id3v2.version == 2 ? 3 : 4; /* bytes of frame title and of framesize value */
 		/* level 1,2,3 - 0 is info from lame/info tag! */
 		/* rva tags with ascending significance, then general frames */
 		enum frame_types tt = unknown;
@@ -801,7 +806,7 @@
 			}
 			if(VERBOSE3) fprintf(stderr, "Note: ID3v2 %s frame of size %lu\n", id, framesize);
 			tagpos += head_part + framesize; /* the important advancement in whole tag */
-			if(tagpos > length)
+			if(tagpos > length-flag_part)
 			{
 if(NOQUIET) error("Whoa! ID3v2 frame claims to be larger than the whole rest of the tag.");
 break;
Index: .
===
--- .	(revision 4251)
+++ .	(revision 4252)

Property changes on: .
___
Modified: svn:mergeinfo
## -0,0 +0,1 ##
   Merged /trunk:r4249
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Processed: Re: Bug#866860: mpg123: CVE-2017-10683

2017-07-02 Thread Debian Bug Tracking System
Processing control commands:

> tags -1 + patch
Bug #866860 [src:mpg123] mpg123: CVE-2017-10683
Added tag(s) patch.

-- 
866860: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=866860
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers


Bug#866860: mpg123: CVE-2017-10683

2017-07-02 Thread Salvatore Bonaccorso
Source: mpg123
Version: 1.25.0-1
Severity: important
Tags: upstream security

Hi,

the following vulnerability was published for mpg123.

CVE-2017-10683[0]:
| In mpg123 1.25.0, there is a heap-based buffer over-read in the
| convert_latin1 function in libmpg123/id3.c. A crafted input will lead
| to a remote denial of service attack.

This was reported at [1], but Hanno Boeck recently reported [2] as
well.

Looking at both cases i think those should be the same issues, and
upstream has a patch for the issue.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-10683
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10683
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1465819
[2] https://sourceforge.net/p/mpg123/bugs/252/

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers