Bug#849800: debhelper: dh_systemd_start --no-start has no effect

2016-12-30 Thread Peter Colberg
Package: debhelper Version: 10.2.2 Severity: normal Dear Maintainer, I would like to add a systemd service and timer to acmetool that is to be explicitly enabled by the user. debian/rules looks as follows: ~~~ override_dh_systemd_enable: dh_systemd_enable --no-enable acmetool.timer

Bug#849799: libpng1.6: CVE-2016-10087: NULL pointer dereference in png_set_text_2()

2016-12-30 Thread Salvatore Bonaccorso
Source: libpng1.6 Version: 1.6.26-6 Severity: important Tags: security upstream patch Hi, the following vulnerability was published for libpng1.6. CVE-2016-10087[0]: NULL pointer dereference Upstream commits referenced in security-tracker. If you fix the vulnerability please also make sure to

Bug#849631: dnscrypt-proxy 1.8.1-4 fails to start

2016-12-30 Thread Eric Dorland
Control: tags + moreinfo unreproducible I'm not seeing this on my system. If you upgrade what does your dnscrypt-proxy.socket, dnscrypt-proxy.service and /etc/dnscrypt-proxy/dnscrypt-proxy.conf files look like? * Perl (zer0.div...@yahoo.fr) wrote: > Package: dnscrypt-proxy > Version:

Bug#849798: qemu: CVE-2016-10028: display: virtio-gpu-3d: OOB access while reading virgl capabilities

2016-12-30 Thread Salvatore Bonaccorso
Source: qemu Version: 1:2.8+dfsg-1 Severity: important Tags: upstream security Hi, the following vulnerability was published for qemu. CVE-2016-10028[0]: display: virtio-gpu-3d: OOB access while reading virgl capabilities If you fix the vulnerability please also make sure to include the CVE

Bug#849797: mutt: lost key name for

2016-12-30 Thread Adam Borowski
Package: mutt Version: 1.7.1-5 Severity: normal Hi! In stretch's mutt, the key no longer works by default. I see that it fails to recognize its code and assign it the name. Trying ":exec what-key", the values reported for letter-Enter and arrows-Enter respectively are: jessie: Char = , Octal =

Bug#849796: unblock: libphp-phpmailer/(5.2.14+dfsg-2.1

2016-12-30 Thread Salvatore Bonaccorso
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Hi Please unblock package libphp-phpmailer/lower the age it needs to transition to testing. libphp-phpmailer as uploaded by Thijs fixes a vulnerability CVE-2016-10033 (and making sure tha

Bug#849700: [Pkg-mc-devel] Bug#849700: Bug#849700: mcedit does not more work

2016-12-30 Thread Yury V. Zaytsev
On Fri, 30 Dec 2016, Michelle Konzack wrote: So, if I have copied some things in mcedit, where in $HOME is this informatiuon stored? ~/.local/share/mc -- Sincerely yours, Yury V. Zaytsev

Bug#830472: can't reproduce, not serious

2016-12-30 Thread Russell Coker
severity 830472 normal thanks I can't reproduce this. Version 0.74 fixed all the GCC6 related bugs that occur on my system. Version 0.75 should stay in testing because the amd64 package I uploaded compiled without any serious warnings. I'll fix this bug if I can reproduce it, but it's not a

Bug#849795: mgba: new upstream version available (0.5.1)

2016-12-30 Thread Ryan Tandy
Source: mgba Version: 0.4.1+dfsg1-1 Severity: wishlist Dear maintainer, Thank you for packaging mgba. A new upstream bugfix release is available: 0.5.1. I built an updated package locally and it seems to work fine. It would be great if we could have this version in stretch. If you are short

Bug#831391: [Pkg-ime-devel] Bug#831391: U+2601 CLOUD 反而像電信桿而非雲

2016-12-30 Thread Paul Hardy
I just examined the latest Wen Quan Yi source files. An incorrect cloud glyph (U+2601) appears in two Wen Quan Yi BDF files: the 10pt and 11pt files. The BDF source font files get converted into PCF files for Debian installation. Here is a breakdown of the cloud glyph in the BDF source files:

Bug#849699: [mtr] Please package v0.87

2016-12-30 Thread Robert Woodcock
On 12/29/2016 02:21 PM, Samuel Henrique wrote: Source: mtr Version: 0.86-1 Severity: wishlist Tags: patch Hello, while having a general look for packages who might need updates for Stretch, i found out that mtr was outdated and decided to take a look at it. I have made several changes to

Bug#849794: qtwebengine-opensource-src: FTBFS on buildd machines

2016-12-30 Thread Boyuan Yang
Source: qtwebengine-opensource-src Severity: important Version: 5.7.1+dfsg-1 Hi, (temporarily not raising this bug to RC-level to allow initial testing migration) This package could not be built on (any) official buildd machine other than amd64 (which was a binary upload). This problem needs

Bug#778412: Henry Spencer regular expressions (regex) library contains a heap overflow vulnerability

2016-12-30 Thread Colin Watson
On Mon, Feb 16, 2015 at 07:37:19PM +0100, Moritz Mühlenhoff wrote: > On Sat, Feb 14, 2015 at 03:41:21PM +0100, Luciano Bello wrote: > > The security team received a report from the CERT Coordination Center that > > the > > Henry Spencer regular expressions (regex) library contains a heap

Bug#849793: xpad: "restore to previous state" fails to open notes

2016-12-30 Thread Mike Kupfer
Package: xpad Version: 4.8.0-1 Severity: normal Dear Maintainer, In the Startup tab for Xpad preferences, if I set "Display pads" to "Restore to previous state", it doesn't work for open pads. That is, if I have pads open and then restart Xpad, the pads are not reopened. "Open all pads" does

Bug#844707: plasma-workspace: plasmadesktop - excessive cpu usage, slow desktop operation

2016-12-30 Thread Ignacio R. Morelle
The patch was merged into the LTS branch upstream yesterday: https://cgit.kde.org/plasma-workspace.git/commit/?h=Plasma/5.8=e43b89e2b9f3ff9bf6299488e82a365cbfde2b2a As I mentioned in the upstream report, it's been working nicely for me on Sid against Plasma 5.8.4, for the past few days.

Bug#849792: xpad: selection not visible when using custom colors

2016-12-30 Thread Mike Kupfer
Package: xpad Version: 4.8.0-1 Severity: normal Dear Maintainer, If I configure xpad to use specific text and background colors (rather than "colors from theme"), there's no visible feedback when I select text in a note (e.g., doing click and drag). The text is selected (I can copy and paste

Bug#802604: fvwm: focus is not given to the window when changing page with invisible mouse pointer

2016-12-30 Thread Dominik Vogt
On Fri, Dec 30, 2016 at 08:24:07PM -0700, Jaimos Skriletz wrote: > Hello, > > This was reported by a Debian user. Please retain the CC to > 802604-forwar...@bugs.debian.org in your response, so that > the Debian BTS has a record. > > In short if the mouse cursor is over the root window and

Bug#849748: dbus is translating SE Linux contexts when it's not appropriate

2016-12-30 Thread Laurent Bigonville
forwarded 849748 https://bugs.freedesktop.org/show_bug.cgi?id=99234 thanks Hi, I've open a bug upstream for this, see https://bugs.freedesktop.org/show_bug.cgi?id=99234

Bug#802604: fvwm: focus is not given to the window when changing page with invisible mouse pointer

2016-12-30 Thread Jaimos Skriletz
Hello, This was reported by a Debian user. Please retain the CC to 802604-forwar...@bugs.debian.org in your response, so that the Debian BTS has a record. In short if the mouse cursor is over the root window and hidden with unclutter, when switching pages (and maybe desks), focus is not given to

Bug#849791: override: diaspora:net/optional, diaspora-installer:net/optional, diaspora-common:net/optional, diaspora-installer-mysql:net/optional,

2016-12-30 Thread Pirate Praveen
package: ftp.debian.org control: block 832219 by -1 signature.asc Description: OpenPGP digital signature

Bug#843956: override: gitlab:section:web

2016-12-30 Thread Pirate Praveen
Control: retitle -1 override: gitlab:net/optional On closer look, I feel "Daemons and clients to connect your system to the world." is better suited than "Web servers, browsers, proxies, download tools etc." signature.asc Description: OpenPGP digital signature

Bug#849790: Cannot load system exclude list

2016-12-30 Thread Jamie McClelland
Package: owncloud-client-cmd Version: 2.2.4+dfsg-1~bpo8+1 Dear Maintainer, Since upgrading to 2.2.4+dfsg-1~bpo8+1 running the client fails with: Set proxy configuration to use system configuration Cannot load system exclude list or list supplied via --exclude Aborted However, if I pass:

Bug#849789: publishing NEW packages properly

2016-12-30 Thread Ian Jackson
Package: dgit-infrastructure Version: 2.0 There is some problem with packages which make it out of NEW not apearing on browse.dgit.d.o. I suspect the cron jobs are insufficient somehow. AFAICT the problem was fixed when I ran /srv/dgit.debian.org/dgit-live/infra/dgit-mirror-rsync

Bug#849788: mirror submission for debian.redlibre.cl

2016-12-30 Thread Pablo Umanzor
Package: mirrors Severity: wishlist User: mirr...@packages.debian.org Usertags: mirror-submission Submission-Type: new Site: debian.redlibre.cl Type: leaf Archive-architecture: amd64 i386 Archive-http: /debian/ IPv6: no Archive-upstream: mirrors.kernel.org Updates: four Maintainer: Pablo Umanzor

Bug#849597: libguestfs0: Missing multiple dependencies

2016-12-30 Thread Richard W.M. Jones
In Fedora we package up the icoutils dependencies in a separate subpackage to avoid pulling in all of X and Perl when installing the main library: http://pkgs.fedoraproject.org/cgit/rpms/libguestfs.git/tree/libguestfs.spec#n427 Rich. -- Richard Jones, Virtualization Group, Red Hat

Bug#849787: mcstrans: Running mcstrans triggers 849748 and is the most serious SE Linux problem

2016-12-30 Thread Russell Coker
Package: mcstrans Version: 2.6-2 Severity: critical Tags: upstream Justification: breaks unrelated software While mcstrans has no problems for what it does, it triggers bad interactions between systemd, dbus, and SE Linux. I don't think it is possible to properly solve these issues before the

Bug#726530: (no subject)

2016-12-30 Thread Thomas Adam
Hi, Without a proper stacktrace from a corefile, this won't get any investigation. Since you're the only one so far to have reported a problem, I'm going to put this down to your hardware. But until I get a stacktrace from you via a corefile, you're stuck on an unsupported version. Why don't

Bug#848184: Processed: reassign 848184 to bugs.debian.org

2016-12-30 Thread Don Armstrong
Control: tag -1 moreinfo Control: Hey; I need to know the text for the pseudopackage description, a the e-mail address that the bugs should be sent to, and (ideally) a few bugs which will be immediately assigned to the package. [The latter isn't strictly necessary, but it's basically a test to

Bug#848194: Want way to get Release (or InRelease) file from cache

2016-12-30 Thread Ian Jackson
David Kalnischkies writes ("Re: Bug#848194: Want way to get Release (or InRelease) file from cache"): > On Mon, Dec 19, 2016 at 01:18:13AM +, Ian Jackson wrote: > > I get a sense of puzzlement from your mail. I will try to explain why > > I want these seemingly-daft things. > > My

Bug#849422: (no subject)

2016-12-30 Thread Thomas Adam
Fixed in Git.

Bug#788253: gfsd: unowned files after purge (policy 6.8, 10.8): /var/lib/systemd/deb-systemd-helper-masked/gfsd.service

2016-12-30 Thread Dmitry Smirnov
On Tuesday, 20 December 2016 9:32:18 PM AEDT Felipe Sateler wrote: > Moving > the removal to after the debhelper block should fix this as well. Would that be an ugly workaround for bug in the other package? > Upon package remove but not purge, dh_systemd will mask the unit so > that upon the

Bug#848194: Want way to get Release (or InRelease) file from cache

2016-12-30 Thread David Kalnischkies
On Mon, Dec 19, 2016 at 01:18:13AM +, Ian Jackson wrote: > I get a sense of puzzlement from your mail. I will try to explain why > I want these seemingly-daft things. My puzzlement comes mostly from you seeming to have a very clear idea about what you want (= the Origin and Codename field of

Bug#849077: [pkg-wpa-devel] Bug#849077: wpasupplicant: [Regression] Updating wpasupplicant makes not possible to connect to encrypted WiFi

2016-12-30 Thread Michael Owen
I had the exact same error with all my ralink, broadcom and realtek adapters. Adding the lines to NetworkManager.conf [device] wifi.scan-rand-mac-address=no fixed them all. I did not have the problem with the internal Atheros on my Inspiron. Fixing this is excellent, I no longer have

Bug#803232: fixed in irqbalance 1.1.0-2.1

2016-12-30 Thread Laurent Bigonville
found 803232 1.1.0-2.1 reopen 803232 thanks Well, this is not fixed :/ I think the problem comes from the is_irqbalance_enabled() function in the config script. In the case of the upgrade when running systemd, we cannot trust systemctl is-enabled to make any decisions as the .service file

Bug#849786: ITP: avldrums.lv2 - Drum Sample Player Plugin

2016-12-30 Thread Jaromír Mikeš
Package: wnpp Severity: wishlist Owner: mira.mi...@seznam.cz * Package name : avldrums.lv2 Version : 0.2.2 Upstream Author : Robin Gareus ro...@gareus.org * URL : https://github.com/x42/avldrums.lv2 * License : GPL-2+ Programming Lang: C Description : a Drum Sample Player Plugin avldrums.lv2 is

Bug#849785: RM: mcmcpack -- RoQA; renamed to r-cran-mcmcpack

2016-12-30 Thread Andreas Beckmann
Package: ftp.debian.org Severity: normal please remove the obsolete source package src:mcmcpack, it has been renamed to r-cran-mcmcpack: r-cran-mcmcpack (1.3-8-1) unstable; urgency=medium * Team upload. * New upstream version * Consistent naming between source and binary package ...

Bug#845014: Duplicate

2016-12-30 Thread Linas Vepstas
Possible duplicate of https://github.com/lxc/lxc/issues/1370

Bug#849782: .apk files not consistently detected

2016-12-30 Thread Christoph Biedl
Control: tags 849782 moreinfo Control: merge 849782 849783 Hans-Christoph Steiner wrote... > Previously, with 1:5.29-2, APK files seemed to be always detected as JAR > files. Please clarify. The "tmp" (md5:67b44d779578cbddf6e17db92290e987) gets detected as Zip in all versions of file supported

Bug#849781: Please add a systemd service file

2016-12-30 Thread Andrey Rahmatullin
Control: tags -1 + help On Fri, Dec 30, 2016 at 11:43:50PM +0100, Laurent Bigonville wrote: > The upstream tarball contains a systemd .service file, but that file is > not installed in the package. > > Could you please have a look at this? The main problem with this is the current setup: the

Bug#849661: gap-guava: FTBFS with some SHELLs(?): cd: too many arguments

2016-12-30 Thread Jerome BENOIT
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello GUAVA enthusiasts, @Chris, thanks for report the issue. On 29/12/16 16:08, Chris West (Faux) wrote: > Source: gap-guava > Version: 3.13+ds-1 > Severity: serious > Justification: fails to build from source > Tags: sid stretch > User:

Bug#849779: nvidia-driver: Nvidia packages crashed the OS - Not bootable after installing them

2016-12-30 Thread Luca Boccassi
Control: severity -1 normal Control: close -1 On Fri, 2016-12-30 at 19:20 -0300, Mariel Opazo Damiani wrote: > Package: nvidia-driver > Version: dont know, had to purge it out of the system. Latest one available > right before Dec 30, 2016. > Severity: critical > Justification: breaks the whole

Bug#845193: [Pkg-openssl-devel] Bug#845193: Bug#845193: dpkg: recent -specs PIE changes break openssl

2016-12-30 Thread Sebastian Andrzej Siewior
On 2016-12-29 00:25:05 [+0100], To Kurt Roeckx wrote: > > Figure out why it uses link_a instead of link_o, and maybe fix it? so that link_a instead of link_o is always used - not just on x32. Replacing _a with _o here gets the build to continue but fails later in a (normal) link_o rule:

Bug#849784: lomoco: udev support broken, missing file /lib/udev/udev.lomoco

2016-12-30 Thread dju
Package: lomoco Version: 1.0.0-2 Severity: normal Dear Maintainer, I recently upgraded from 1.0.0-1 to 1.0.0-2 and now my mouse (Logitech MX510) is now at the default resolution after reboot instead of being automatically set to 800 DPI just as before. It seems that the /lib/udev/udev.lomoco

Bug#849779: More information

2016-12-30 Thread Mariel O
I first tried to fix the system by deleting xorg.conf, since it was the only file the commands said they had changed. When turning on my computer an error appeared that it couldn't log in, a white screen with an image and message that I don't recall what said. It wasn't the black screen that

Bug#849782: .apk files not consistently detected

2016-12-30 Thread Hans-Christoph Steiner
Package: file Version: 1:5.29-2 Severity: important Android APK files are the standard app package for Android. They are a slightly custom version of JAR format. Basically, they are JAR files with standard files included in them, a custom padding method, and now a new custom signature format.

Bug#849783: .apk files not consistently detected

2016-12-30 Thread Hans-Christoph Steiner
Package: file Version: 1:5.29-2 Severity: important Android APK files are the standard app package for Android. They are a slightly custom version of JAR format. Basically, they are JAR files with standard files included in them, a custom padding method, and now a new custom signature format.

Bug#846792: linux-image-4.8.0-1-amd64: ACPI : EC: EC started delay on boot

2016-12-30 Thread Jakobus Schürz
Am 2016-12-30 um 23:30 schrieb Jakobus Schürz: > Hi Salvatore! > > Thanks for your reply! > > I know that is right now not a big help, but confirming if it is not a Debian specific change, would help, to make aware upstream. >>> >>> >>> I build a vanilla-kernel from the

Bug#835542: flex: comparison between signed and unsigned integer expressions

2016-12-30 Thread Christoph Berg
Control: tag -1 patch pending Re: Vladimír Čunát 2016-09-27 > I'm curious: will there be a fix for 2.6.1? I've just uploaded flex_2.6.1-1.2_source.changes fixing this to delayed/5, patch attached. debian/NEWS.Debian |2

Bug#849780: apcupsd communication lost with Back-UPS Pro 650 via cable when USB printer is started

2016-12-30 Thread PhLinuX
Package: apcupsd Version: 3.14.12-1.1 Severity: important Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? * What exactly did you do (or not do) that was effective (or ineffective)? * What was the

Bug#849781: Please add a systemd service file

2016-12-30 Thread Laurent Bigonville
Package: mcelog Version: 144+dfsg-1 Severity: normal User: pkg-systemd-maintain...@lists.alioth.debian.org Usertags: systemd-units Hi, The upstream tarball contains a systemd .service file, but that file is not installed in the package. Could you please have a look at this? Regards, Laurent

Bug#849531: [Logwatch-devel] Bug#849531: Possible security problem, new logwatch sends mails with charset UTF-8

2016-12-30 Thread 'Klaus Ethgen'
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am Fr den 30. Dez 2016 um 22:53 schrieb Jason Pyeron: > You would have the same issue with cat /var/log/x True. That is the reason I always tell the people not to use cat for that. (There is only little you should use cat for ever.) I seen

Bug#846792: linux-image-4.8.0-1-amd64: ACPI : EC: EC started delay on boot

2016-12-30 Thread Jakobus Schürz
Hi Salvatore! Thanks for your reply! >>> I know that is right now not a big help, but confirming if it is not a >>> Debian specific change, would help, to make aware upstream. >> >> >> I build a vanilla-kernel from the kernel.org-sources (Don't know, if i >> made it correct). But I got a

Bug#849779: nvidia-driver: Nvidia packages crashed the OS - Not bootable after installing them

2016-12-30 Thread Mariel Opazo Damiani
Package: nvidia-driver Version: dont know, had to purge it out of the system. Latest one available right before Dec 30, 2016. Severity: critical Justification: breaks the whole system Dear Maintainer, Was trying to install an nvidia video card driver because linux didnt detect it existed at

Bug#844184: RFS: muse-el/3.20+dfsg-1 [ITA]

2016-12-30 Thread Sean Whitton
On Fri, Dec 30, 2016 at 04:59:11PM +, Sean Whitton wrote: > Just to let you know, we've already missed the deadline to add elpa-muse > to stretch (it was Christmas day, due to 10 day migrations). Sorry, looks like we were both wrong -- the deadline for binNEW is February 5th. -- Sean

Bug#849700: [Pkg-mc-devel] Bug#849700: mcedit does not more work

2016-12-30 Thread Dmitry Smirnov
On Friday, 30 December 2016 9:54:33 AM AEDT Michelle Konzack wrote: > There is NO-WAY for me installing Debian 8 because of systemd which does > not work for me. Since you are on amd64, systemd would probably work for you but if you have a non-technical problem with it (systemd fobia?) then just

Bug#846792: linux-image-4.8.0-1-amd64: ACPI : EC: EC started delay on boot

2016-12-30 Thread Jakobus Schürz
Hi Salvatore! No problem. I know, christmas is the most busy time in the year... :) Same here. > Apologies for the delay in coming back to you. So I'm not having > really an idea. I suggest the following in case it is feasible for > you: > > Try to reproduce the problem with "vanilla" kernel.

Bug#849775: emacs24: FTBFS randomly (Wrong type argument: number-or-marker-p, nil)

2016-12-30 Thread Rob Browning
Santiago Vila writes: > This is essentially the same bug as #842728, but in emacs24. > [ If you need a full build log, just say so and I will include it ] > > I guess, but I don't really know, that the same fix that worked > for emacs25 should work here as well. OK, thanks

Bug#849778: postfix: [INTL:sk] Slovak po-debconf translation

2016-12-30 Thread helix84
Package: postfix Version: 3.1.3-6 Priority: wishlist Tags: l10n patch .po attached ~~helix84 sk.po Description: Binary data

Bug#849531: [Logwatch-devel] Bug#849531: Possible security problem, new logwatch sends mails with charset UTF-8

2016-12-30 Thread Jason Pyeron
> -Original Message- > From: Willi Mann > Sent: Friday, December 30, 2016 16:21 > To: Klaus Ethgen; 849...@bugs.debian.org > Cc: logwatch-de...@lists.sourceforge.net > Subject: Re: [Logwatch-devel] Bug#849531: Possible security > problem, new logwatch sends mails with charset UTF-8 > >

Bug#849637: [DSE-Dev] Bug#849637: /sys/devices/system/cpu/online SELinux context

2016-12-30 Thread cgzones
But isn't genfscon with subcontexts only available on the /proc filesystem? 2016-12-30 22:18 GMT+01:00 Dominick Grift : > On Fri, 30 Dec 2016 12:39:05 +0100 Laurent Bigonville > wrote: >> reassign 849637 policycoreutils >> thanks >> >> On Thu, 29 Dec

Bug#849748: dbus is translating SE Linux contexts when it's not appropriate

2016-12-30 Thread Simon McVittie
On Fri, 30 Dec 2016 at 23:55:58 +1100, Russell Coker wrote: > Below is part of the SE Linux audit log on one of my test systems. These > entries have a MCS context of "s0" which is being translated to "SystemLow" > in a very similar way to translating a UID to a username. However the > software

Bug#849703: ITP: ansible-doc -- Documentation for Ansible

2016-12-30 Thread Evgeni Golov
Hi Toni, On Fri, Dec 30, 2016 at 12:58:02AM +0100, Toni Mueller wrote: > Package: wnpp > Severity: wishlist > Owner: Toni Mueller > > * Package name: ansible-doc > Version : 2.2.0.0-1 > Upstream Author : RedHat > * URL :

Bug#849776: openbsd-inetd: PID file not created any more so update-inetd can't reload the service

2016-12-30 Thread Valentin Vidic
Package: openbsd-inetd Version: 0.20160825-1 Severity: normal Dear Maintainer, New version of the package does not create the PID file in /var/run/inetd.pid anymore. This was previously used by update-inetd to reload the daemon after updating the configuration. AFAICT, PID needs to be created

Bug#709384: dh_installinit: Please add an option to no enable the service at installation

2016-12-30 Thread Evgeni Golov
[ only 3 years later… ] On Mon, Jan 27, 2014 at 01:32:35AM +0100, Laurent Bigonville wrote: > Le Sat, 25 Jan 2014 15:40:18 -0400, > Joey Hess a écrit : > > > Laurent Bigonville wrote: > > > Now that the usage of /etc/default/* file to prevent a service to > > > start is

Bug#849777: shutter: CVE-2016-10081: Insecure use of perl exec()

2016-12-30 Thread Salvatore Bonaccorso
Source: shutter Version: 0.88.3-1 Severity: grave Tags: upstream security Justification: user security hole Forwarded: https://bugs.launchpad.net/shutter/+bug/1652600 Hi, the following vulnerability was published for shutter. CVE-2016-10081[0]: | /usr/bin/shutter in Shutter through 0.93.1

Bug#849577: stubby also

2016-12-30 Thread Stephane Bortzmeyer
Note that stubby has the same bug: % stubby @2001:4b98:dc2:43:216:3eff:fea9:41a -L -z 127.0.0.1:8053 Could not convert "2001:4b98:dc2:43:216:3eff:fea9:41a" to an IP dict: A helper function was supposed to return a certain type for an item, but the wrong type was given. Could not convert

Bug#848721: apt: please make the moo reproducible

2016-12-30 Thread David Kalnischkies
Good day mere mortal, On Mon, Dec 19, 2016 at 08:57:57PM +0100, Chris Lamb wrote: > Whilst working on the Reproducible Builds effort [0], we noticed > that apt could not moo reproducibly. Your prayer has been received by deity@ … > Patch attached. … but your sacrifice is not enough. Given

Bug#842239: Not fixed in 1.6.0-2, please reopen

2016-12-30 Thread Jeffrey Ratcliffe
On 30 December 2016 at 18:46, Roderich Schupp wrote: > I expected the date field to default to "now", not "last night 1 am". Ah. The date field should default to the offset of "now" you last used. i.e. if you set it to today before saving, then the next time you start

Bug#849775: emacs24: FTBFS randomly (Wrong type argument: number-or-marker-p, nil)

2016-12-30 Thread Santiago Vila
Package: src:emacs24 Version: 24.5+1-7.1 Severity: serious Dear maintainer: I tried to build this package in stretch with "dpkg-buildpackage -A" (which is what the "Arch: all" autobuilder would do to build it) but it failed:

Bug#849637: /sys/devices/system/cpu/online SELinux context

2016-12-30 Thread Dominick Grift
On Fri, 30 Dec 2016 17:17:24 +0100 cgzones wrote: > Hi, > thanks for your response. > I assigned this bug to systemd, cause I did not know any better and > thought the sysfs filesystem is managed by systemd, like /run. > > Btw, /dev/pts/ptmx is also mislabeled: > >

Bug#849531: Possible security problem, new logwatch sends mails with charset UTF-8

2016-12-30 Thread Willi Mann
Hi Klaus, Am 2016-12-30 um 18:36 schrieb Klaus Ethgen: > Hi Willi, > > Am Fr den 30. Dez 2016 um 18:18 schrieb Willi Mann: >> can you elaborate how this could be exploited? > > Well, log principally contains untrusted data that could be injected > from untrusted source. That is no security hole

Bug#849637: /sys/devices/system/cpu/online SELinux context

2016-12-30 Thread Dominick Grift
On Fri, 30 Dec 2016 12:39:05 +0100 Laurent Bigonville wrote: > reassign 849637 policycoreutils > thanks > > On Thu, 29 Dec 2016 12:36:30 +0100 cgzones wrote: > > > When running a SELinux enabled system /sys/devices/system/cpu/online > > is mislabeled

Bug#767071: rdnssd drops settings from /etc/resolv.conf

2016-12-30 Thread Milan Zamazal
I wonder why such a serious bug hasn't been fixed yet. I had to reinstall a Debian machine unexpectedly and being confronted with this bug in the rush was no pleasant experience. I wasted a significant amount of time finding out what was the hidden thing rendering my newly installed system into

Bug#843589: Change severity

2016-12-30 Thread bugs-debian
Hi, I don't really know if this should be an RC bug, but this package has entered testing. And as such, migration is not possible without fetching source package. Adrien

Bug#849774: perl: SSl certificate verify failing for www.spdyn.de

2016-12-30 Thread Tobias Rupf
Package: perl Version: 5.24.1~rc4-1 Severity: important Dear Maintainer, * What led up to the situation? update from Debian stable to testing * What exactly did you do (or not do) that was effective (or ineffective)? using ddclient with update.spdyn.de with ssl=true hich was

Bug#849627: RFS: xtrkcad/1:4.2.4a-1 ITA

2016-12-30 Thread Gianfranco Costamagna
Hello, >I found one more issue... > >- /usr/share/xtrkcad/{logo.bmp, html, examples, demo} should be in >/usr/share/doc/xtrkcad did you also merge the debian improvements from Mike? G.

Bug#849636: apt-daily: do not use pidof

2016-12-30 Thread David Kalnischkies
Control: severity -1 wishlist On Thu, Dec 29, 2016 at 12:22:02PM +0100, cgzones wrote: > The script '/usr/lib/apt/apt.systemd.daily' uses 'pidof dbus-daemon' > to check whether dbus is running and whether to send a message. > With SELinux enabled this causes avc denials like: […] > I do not like

Bug#439121: Add a .pc file for libapt-pkt

2016-12-30 Thread David Kalnischkies
Hi, On Wed, Dec 28, 2016 at 12:24:41AM +0100, Corentin Noël wrote: > Please note that I haven't been able to test the new test in the debian > package. Feel free to ask specifics as this is supposed to be easy™ and more and more packages use this, so knowing how to run them should be useful for

Bug#849773: O: libnss-extrausers

2016-12-30 Thread Bernhard R. Link
Package: wnpp Severity: normal Hi, I'm hereby orphaning libnss-extrausers, after neglecting it a bit for too long. There is some open bug report with patches that do not apply, and the whole thing got a bit out of date as nss is a moving target (and the nss modules it was forked of are now very

Bug#849700: [Pkg-mc-devel] Bug#849700: mcedit does not more work

2016-12-30 Thread Michelle Konzack
Now I have tested it with a new user and it does not have this problem. However, I have even this problem, if I log into the console without X. I have removed my ~/.bashrc and ~/.bash_login plus ~/.config/mc and ~/.cache/mc and the error persist. On the other side, it pase som old copied

Bug#849403: androguard

2016-12-30 Thread Hans-Christoph Steiner
androguard can extract and convert the binary AndroidManifest.xml, its python2 and already in Debian.

Bug#849759: duperemove: programs should be in /usr/bin rather than /usr/sbin

2016-12-30 Thread Peter Zahradnik
On 12/30/2016 07:56 PM, Adam Borowski wrote: Package: duperemove Version: 0.11~beta4-1 Severity: normal Hi! For some reason you've put the executables in /usr/sbin. All of programs shipped by duperemove are fully functional as non-root, and often useful: an user may want to dedupe their data

Bug#849390: google-android-installers

2016-12-30 Thread Hans-Christoph Steiner
It turns out that the approach in google-android-installers is not maintainable going forward, so we need to split out each source package from google-android-installers into its own source package. So we'll need to remove google-android-ndk-installer from google-android-installers. We can

Bug#849772: RM: xfm -- ROM; dependencies lost required functionality

2016-12-30 Thread Bernhard R. Link
Package: ftp.debian.org Severity: normal Please remove xfm from unstable. It wasn't in jessie and isn't that useful anymore since magic dropped the support it needs to identify file types. Bernhard R. Link -- F8AC 04D5 0B9B 064B 3383 C3DA AFFC 96D1 151D FFDC

Bug#849592: bug report - icedove: href links inoperative

2016-12-30 Thread Rick Lutowski
On 12/30/2016 02:10 AM, Carsten Schoenert wrote: Regarding the solutions in the web post you referenced: 1. My system /usr/bin already has a link pointing iceweasel to icedove. You mean /usr/bin/iceweasel -> /usr/bin/firefox-esr ? Yes. Sorry for the typo. Link in /usr/bin is iceweasel ->

Bug#849196: Sometimes, supress_warnings misses one of its attributes

2016-12-30 Thread Ole Streicher
Hi Sandro, On 30.12.2016 15:01, Sandro Tosi wrote: > On Fri, Dec 23, 2016 at 9:47 AM, Ole Streicher wrote: >> This is a regression; it did not happen with 1.11. Please fix this >> regression ASAP so that skimage can migrate safely before the freeze. > > as asked on the

Bug#849771: synaptic: feature request: recommend reload in synaptic if packages are not found

2016-12-30 Thread Georg Stillfried
Package: synaptic Version: 0.81.2 Severity: wishlist Dear Maintainer, I ran into a newbie's mistake. I wanted to install a new package using synaptic and received an error that the package was not found. The problem was that the local repository database was out of date. After reloading the

Bug#849666: gradm2: FTBFS on arm64: /usr/bin/ld: cannot find -lfl

2016-12-30 Thread GCS
Control: tags -1 -unreproducible On Fri, Dec 30, 2016 at 12:10 PM, Adrian Bunk wrote: > On Fri, Dec 30, 2016 at 08:36:55AM +0100, László Böszörményi wrote: >> Will try the QEMU + pbuilder build as >> well, but you might just got some other, transient problem. > > This does not

Bug#849531: [Logwatch-devel] Bug#849531: Possible security problem,new logwatch sends mails with charset UTF-8

2016-12-30 Thread Jason Pyeron
A very rudimentary test: /projects/logwatch $ perl -e 'for ($i=0; $i<256; ++$i) {print chr($i);}' | hexdump.exe -C 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f || 0010 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f || 0020 20 21 22 23 24

Bug#849768: mousepad: no markdown option

2016-12-30 Thread mrtea
Package: mousepad Version: 0.4.0-4ubuntu1 Severity: wishlist Hi, I recently made to move to Debian. For text editing I've mostly used Mousepad. In my previous distribution (Ubuntu) there was an option to set markdown as filetype. This helped me because I use markdown. I don't find any

Bug#849770: exim4: bogus reject response on overlong lines

2016-12-30 Thread Adam Borowski
Package: exim4 Version: 4.88-2 Severity: normal Hi! If an user agent attempts to send a mail containing lines longer than SMTP's allowed max of 998 bytes (such as reportbug -- #849765), exim's response is extremely unhelpful. The user gets: .[ Mail delivery failed: returning message to

Bug#849577: Works upstream

2016-12-30 Thread Stephane Bortzmeyer
The bug does not seem to be upstream, with today upstream git repository, it works: % src/test/getdns_query @2001:4b98:dc2:43:216:3eff:fea9:41a -s www.bortzmeyer.org SYNC response: { "answer_type": GETDNS_NAMETYPE_DNS, "canonical_name": , ...

Bug#849769: [mipsel]: string.sub sometimes returns incorrect slice

2016-12-30 Thread James McCoy
Package: luajit Version: 2.0.4+dfsg-1 Severity: important Dear Maintainer, Neovim's test suite was periodically failing on mipsel and after looking into it, it turns out that luajit sometimes incorrectly handles str:sub(i, j). I instrumented the test to log the i, j, and size of the returned

Bug#849767: php5-fpm: segfault when using pdo_mysql.so

2016-12-30 Thread Antonio Silva
Package: php5-fpm Version: 5.6.29+dfsg-0+deb8u1 php5-fmp is crashing when connecting to mysql using pdo with segfault. The web server is nginx and i connect using fastcig parameter: fastcgi_pass unix:/var/run/php5-fpm-internal.sock; with default parameters. I get the following gdb: [New

Bug#849765: [Reportbug-maint] Bug#849765: reportbug: produces invalid mails when there are long lines

2016-12-30 Thread Adam Borowski
On Fri, Dec 30, 2016 at 01:48:59PM -0500, Sandro Tosi wrote: > On Fri, Dec 30, 2016 at 1:41 PM, Adam Borowski wrote: > > If the bug report contains an overlong line -- for example, mutt's bug > > script includes its configure options, 1017 characters long -- reportbug > >

Bug#849531: [Logwatch-devel] Bug#849531: Possible security problem,new logwatch sends mails with charset UTF-8

2016-12-30 Thread Jason Pyeron
I have opened https://sourceforge.net/p/logwatch/bugs/56/ . I am working a test case for this right now. As I see it, there are 3 paths to test. Output as STDOUT, file, and email. In each case does an 8bit value (0x00..0xff unsigned) result in a valid UTF-8 character. Is binmode(STDOUT,

Bug#849750: Crashes the (LXDE) desktop

2016-12-30 Thread James Cowgill
Control: reassign libsfml-window2.4 2.4.1+dfsg-1 Control: tags -1 pending Hi, On 30/12/16 17:24, Markus Koschany wrote: > Control: severity -1 serious > > On 30.12.2016 15:27, Julien Puydt wrote: >> Package: marsshooter >> Version: 0.7.6-1+b1 >> Severity: critical >> >> Hi, >> >> I installed

Bug#849646: ImportError: No module named lldb.embedded_interpreter

2016-12-30 Thread Sylvestre Ledru
merge 849646 846612 thanks Le 29/12/2016 à 14:27, Ole Andreas W. Lyngvaer a écrit : > Package: lldb > Version: 1:3.8-34 > Severity: important > > clean install lldb doesn't function due to missing python module > 'lldb.embedded_interpreter'. dup of 846612 > when given any input, the prompt

Bug#849765: [Reportbug-maint] Bug#849765: reportbug: produces invalid mails when there are long lines

2016-12-30 Thread Sandro Tosi
On Fri, Dec 30, 2016 at 1:41 PM, Adam Borowski wrote: > If the bug report contains an overlong line -- for example, mutt's bug > script includes its configure options, 1017 characters long -- reportbug > will send that unescaped. would you be able to retrieve the saved

Bug#849765: reportbug: produces invalid mails when there are long lines

2016-12-30 Thread Adam Borowski
Package: reportbug Version: 7.1.1 Severity: normal Hi! If the bug report contains an overlong line -- for example, mutt's bug script includes its configure options, 1017 characters long -- reportbug will send that unescaped. The mail will then be rejected by certain MTAs, such as exim in

  1   2   3   >