Bug#933246: virtualbox FTBFS: missing Build-Depends: libgsoap-dev

2019-07-27 Thread Helmut Grohne
Source: virtualbox Version: 6.0.10-dfsg-1 Severity: serious Tags: patch ftbfs We recently noticed that gsoap should not depend on libgsoap-dev (#930961). For this reason gsoap dropped the dependency any any downstream needs to explicitly depend on libgsoap-dev. virtualbox is such a downstream and

Bug#933245: Missing dependency on node-normalize-path

2019-07-27 Thread Pirate Praveen
Package: node-anymatch Version: 3.0.3+~2.0.7-1 Severity: serious Justification: makes package unusable Found this while building node-watchpack 1.6 Error: Cannot find module 'normalize-path' Require stack: - /usr/share/nodejs/anymatch/index.js -

Bug#930030: several errors on vim startup

2019-07-27 Thread Ross Boylan
Package: vim-vimoutliner Version: 0.3.4+pristine-9.3 Followup-For: Bug #930030 Same problem here, also while opening an existing .otl file: Error detected while processing /var/lib/vim/addons/ftplugin/vo_base.vim: line 668: E121: Undefined variable: g:vo_modules_load line 669: E121: Undefined

Bug#933244: ITP: r-cran-multidimbio -- GNU R multivariate analysis and visualization for biological data

2019-07-27 Thread Andreas Tille
Package: wnpp Severity: wishlist Subject: ITP: r-cran-multidimbio -- GNU R multivariate analysis and visualization for biological data Package: wnpp Owner: Andreas Tille Severity: wishlist * Package name: r-cran-multidimbio Version : 1.1.1 Upstream Author : Copyright: (FIXME:

Bug#933243: ITP: r-cran-pdftools -- GNU R text extraction, rendering and converting of PDF documents

2019-07-27 Thread Andreas Tille
Package: wnpp Severity: wishlist Subject: ITP: r-cran-pdftools -- GNU R text extraction, rendering and converting of PDF documents Package: wnpp Owner: Andreas Tille Severity: wishlist * Package name: r-cran-pdftools Version : 2.2 Upstream Author : Jeroen Ooms * URL

Bug#931965: New Debian package squashfs-tools-ng_0.4.2

2019-07-27 Thread Phillip Lougher
Debian distro I notice you have produced a new package squashfs-tools-ng_0.4.2. I have not been able to find any download of that package available. Can you confirm that this package does not repeat the libel contained in the upstream package? Additionally this page

Bug#933242: python-slugify: text-unicode still required dependency

2019-07-27 Thread Hugo Lefeuvre
Source: python-slugify Version: 3.0.2-2 Severity: grave Hi, 3.0.2-2 fixed the missing unidecode binary dependency. However text-unidecode is still registered as a required dependency. This breaks reverse dependencies if text-unidecode is not installed on the system. I'm working on it. regards,

Bug#928971: ITS: libgit2

2019-07-27 Thread Tobias Frost
On Wed, Jul 24, 2019 at 09:16:32PM -0300, Jongmin Kim wrote: > Hi tobi, > > On Tue, Jul 23, 2019 at 12:31:35AM -0300, Tobias Frost wrote: > > Hi Jongming Kim, > > > > In preparation for my talk (ITS -- one year later) I came across this > > bug and as the 21 day delay has been reached I'm

Bug#933241: ITP: caml-mode -- emacs mode for editing OCaml programs

2019-07-27 Thread Ralf Treinen
Package: wnpp Severity: wishlist Owner: Ralf Treinen * Package name: caml-mode Version : recent (*) Upstream Author : Damien Doligez, Jacques Garrigue, Xavier Leroy, Didier Remy, Ian T Zimmerman * URL : https://github.com/ocaml/caml-mode * License : GPL2+

Bug#933240: lintian: add a pedantic tag when Rules-Requires-Root is missing

2019-07-27 Thread Paul Wise
Package: lintian Severity: wishlist I would like lintian to remind me when the new Rules-Requires-Root field is missing from the source stanza in the debian/control file. In the documentation for this tag, please mention that packagers should verify using diffoscope that the binaries built when

Bug#739228: retitle to O: simulavr -- Atmel AVR simulator

2019-07-27 Thread Joaquin de Andres
Control: retitle 739228 ITA: simulavr -- Atmel AVR simulator Control: owner 739228 m...@xcancerberox.com.ar I would like to mantain this package. I have already upload to salsa.debian.org and added salsa CI pipeline [1]. [1] https://salsa.debian.org/xcancerberox-guest/simulavr/

Bug#933209: mark openscad-mcad Multi-Arch: foreign

2019-07-27 Thread Kristian Nielsen
On Sat, 27 Jul 2019 17:06:50 +0200 Helmut Grohne wrote: > openscad fails to cross build from source, because its build dependency > on openscad-mcad is unsatisfiable. In general, Architecture: all > files (textual). Please mark it Multi-Arch: foreign. Thanks, Helmut, sounds good. I will

Bug#933110: pkg-components: No upstream maintainer ⇒ unsuitable for Bullseye

2019-07-27 Thread gregor herrmann
On Fri, 26 Jul 2019 16:42:03 -0300, intrigeri wrote: > > I'll file bugs against all reverse-dependencies to alert their > > maintainer about this situation. > > Done. All such bug reports are usertagged "pkg-components-removal" so > they'll appear there shortly: > >

Bug#932915: RFS: qcoan/2.0-6

2019-07-27 Thread Adam Borowski
On Sat, Jul 27, 2019 at 10:00:45AM +0200, Elmar Stellnberger wrote: > This is a strange error. I have tested the package locally on Debian 10 as > well as on Debian 8 and Debian 9 via the OpenSuSE build service. Well, "Debian 9" is oldstable, while all new packages must go to unstable (and at

Bug#933151: mariadb-10.3: FTBFS on riscv64

2019-07-27 Thread Hector Oron
Hello, Missatge de Otto Kekäläinen del dia ds., 27 de jul. 2019 a les 3:21: > > Package: mariadb-10.3 > X-Debbugs-CC: debian-ri...@lists.debian.org > User: debian-ri...@lists.debian.org > Usertags: riscv64 > > The version of the package currently FTBFS on the riscv64 port. > > >From >

Bug#931651: false positive: Match data clobbered by buffer modification hooks

2019-07-27 Thread David Bremner
David Bremner writes: > Nicholas D Steeves writes: > >> Package: emacs-nox >> Version: 1:26.1+1-3.2 >> Severity: normal >> Tags: upstream >> Forwarded: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=35557 > > This bug is not docker specific, it seems. I saw this bug today on > zelenka, s390x

Bug#931651: false positive: Match data clobbered by buffer modification hooks

2019-07-27 Thread David Bremner
Nicholas D Steeves writes: > Package: emacs-nox > Version: 1:26.1+1-3.2 > Severity: normal > Tags: upstream > Forwarded: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=35557 This bug is not docker specific, it seems. I saw this bug today on zelenka, s390x porterbox. To duplicate 0) copy the

Bug#931386: stretch-pu: package fribidi/0.19.7-1.1

2019-07-27 Thread Jonathan Wiltshire
On Wed, Jul 03, 2019 at 07:36:55PM +0200, Samuel Thibault wrote: > As reported on #917909, the text-based debian installer support for > right-to-left languages is completely broken, only due to a path > mismatch. This was fixed in Buster in January with the attached change, > which I have

Bug#931386: stretch-pu: package fribidi/0.19.7-1.1

2019-07-27 Thread Jonathan Wiltshire
On Mon, Jul 22, 2019 at 05:19:56AM +0200, Cyril Brulebois wrote: > Jonathan Wiltshire (2019-07-21): > > On Wed, Jul 03, 2019 at 07:36:55PM +0200, Samuel Thibault wrote: > > > Package: release.debian.org > > > Severity: normal > > > Tags: stretch > > > User: release.debian@packages.debian.org

Bug#933229: [Pkg-javascript-devel] Bug#933229: yarnpkg: Cannot find module 'babel-runtime/helper/asyncToGenerator'

2019-07-27 Thread Pirate Praveen
Control: severity -1 wishlist On 2019, ജൂലൈ 28 1:48:56 AM IST, Christoph Schulz wrote: >Package: yarnpkg >Version: 1.13.0-1 >Severity: grave >Justification: renders package unusable > > >Dear Maintainer, > >it seems like the yarnpkg executable is broken somehow. > >Please see below for the full

Bug#933239: sagan: fails to start: Cannot open rule file /etc/sagan-rules/windows-security.rules

2019-07-27 Thread Jonas Smedegaard
Package: sagan Version: 1.2.0-1 Severity: important -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Included conffile have sagan attempt to load /etc/sagan-rules/windows-security.rules which is not provided by required version of sagan-rules, causing sagan to fail to start. A dirty workaround

Bug#933238: ITP: r-cran-qpdf -- GNU R split, combine and compress PDF files

2019-07-27 Thread Andreas Tille
Package: wnpp Severity: wishlist Subject: ITP: r-cran-qpdf -- GNU R split, combine and compress PDF files Package: wnpp Owner: Andreas Tille Severity: wishlist * Package name: r-cran-qpdf Version : 1.1 Upstream Author : Jeroen Ooms, * URL :

Bug#933237: ITP: r-cran-gridgraphics -- GNU R redraw base graphics using 'grid' graphics

2019-07-27 Thread Andreas Tille
Package: wnpp Severity: wishlist Subject: ITP: r-cran-gridgraphics -- GNU R redraw base graphics using 'grid' graphics Package: wnpp Owner: Andreas Tille Severity: wishlist * Package name: r-cran-gridgraphics Version : 0.4 Upstream Author : Paul Murrell, * URL :

Bug#931965: squashfs-tools-ng falsehoods and dafamation of myself the Squashfs maintainer

2019-07-27 Thread Phillip Lougher
Debiian distro I object to the following claims made by squashfs-tools-ng and I consider it libellous. > >Dear Maintainer, > > >The package squashfs-tools has not been developed and >maintained by its upstream for more than 5 years. This is untrue and a slander I already asked

Bug#927731: epiphany-browser/i386: private libdazzle not loaded

2019-07-27 Thread 積丹尼 Dan Jacobson
Why don't you guys use a different name for your special load. I don't think there is any other example on Debian where this kind of thing you are doing has been used. And has been used successfully. Just don't use the same name... go into the sources, change whatever your using's name. Call

Bug#933236: ssmtp stopped working after upgrade from stretch to buster

2019-07-27 Thread Mariusz Bialonczyk
Package: ssmtp Version: 2.64-8+b2 Severity: important Dear Maintainer, SSMTP stopped working (configured for gmail) after upgrade from stretch to buster I can see the following differences in the /var/log/mail.info: A working mail (before upgrade): Jul 23 17:12:03 my_host sSMTP[14443]: Creating

Bug#926401: initramfs-tools: update-initramfs -k all -c does not create initrd images anymore

2019-07-27 Thread Ben Hutchings
Control: tag -1 moreinfo On Thu, 04 Apr 2019 15:05:57 +0200 Marc Lehmann wrote: > Package: initramfs-tools > Version: 0.130 > Severity: normal > > Dear Maintainer, > > between versions 0.130 and 0.133 the behaviour of update-initramfs -k all > -c changes considerably. In 0.130, this command

Bug#933235: ITP: fast -- framework for Heterogeneous Medical Image Computing

2019-07-27 Thread Shayan Doust
Package: wnpp Severity: wishlist Subject: ITP: fast -- framework for Heterogeneous Medical Image Computing Package: wnpp Owner: Shayan Doust Severity: wishlist * Package name: fast Version : 3.0.0 Upstream Author : Norwegian University of Science and Technology * URL

Bug#932678: glib2.0: tests timeout on i386 and mips

2019-07-27 Thread Aurelien Jarno
On 2019-07-26 23:39, Simon McVittie wrote: > > On mips, the gvariant test timed out. > > This is failing a fuzz-test that randomly modifies binary data and > tries to parse it. I thought it might be reaching some pathological > case where the parser breaks, but no - it looks like the actual

Bug#711984:

2019-07-27 Thread José Carlos Cabau
$500,000 has been donated to you by frank and laura rivera. Email: frankandlaurariv...@yandex.com for more details

Bug#933221: openarena: suggestion to make openarena -players-mature optional

2019-07-27 Thread Tom Goulet
On Sat, Jul 27, 2019 at 07:42:52PM +0100, Simon McVittie wrote: > On Sat, 27 Jul 2019 at 13:01:48 -0400, Tom Goulet wrote: > > I was hoping to get openarena installed, but without the -mature package. > This was possible in OpenArena 0.8.1, but it can't actually work since > 0.8.5 because of the

Bug#933234: python3-memory-profiler: recommend python3-matplotlib for python3-mprof plot

2019-07-27 Thread Jochen Sprickerhof
Package: python3-memory-profiler Version: 0.52-1 Severity: normal On a system without python3-matplotlib I get: # python3-mprof plot matplotlib is needed for plotting. No module named 'pylab' I would propose to add python3-matplotlib to the Recommends section as other subcommands of

Bug#932753: tag2upload should record git tag signer info in .dsc [and 1 more messages]

2019-07-27 Thread Jonathan McDowell
On Sat, Jul 27, 2019 at 10:40:00PM +0100, Ian Jackson wrote: > Jonathan McDowell writes ("Bug#932753: tag2upload should record git tag > signer info in .dsc [and 1 more messages]"): > > My understanding is this was true in the days of v3 keys/fingerprints > > but is not the case for v4. If we get

Bug#932753: tag2upload should record git tag signer info in .dsc [and 1 more messages]

2019-07-27 Thread Ian Jackson
Jonathan McDowell writes ("Bug#932753: tag2upload should record git tag signer info in .dsc [and 1 more messages]"): > My understanding is this was true in the days of v3 keys/fingerprints > but is not the case for v4. If we get to the point we find a collision > then that's a SHA1 issue that's

Bug#932753: tag2upload should record git tag signer info in .dsc [and 1 more messages]

2019-07-27 Thread Jonathan McDowell
On Fri, Jul 26, 2019 at 09:18:29PM +0100, Sean Whitton wrote: > For the purposes of tag2upload work, would you mind confirming this: > > On Tue 23 Jul 2019 at 06:38AM +01, Sean Whitton wrote: > > > AIUI a fingerprint fails to uniquely identify a PGP key unless you also > > include the

Bug#933128: libparse-debianchangelog-perl: Unsuitable for Bullseye unless someone becomes upstream

2019-07-27 Thread intrigeri
Hi again, intrigeri: > I'm very glad I was mislead. It looks like Dpkg::Changelog{,::*} are > sufficient for many, if not most, use cases of Parse::DebianChangelog :) Hoping it will help other affected folks go through this transition, here are MRs that give examples about how some code can be

Bug#933233: aewm FTCBFS: uses the build architecture pkg-config

2019-07-27 Thread Helmut Grohne
Source: aewm Version: 1.3.12-5 Tags: patch upstream User: debian-cr...@lists.debian.org Usertags: ftcbfs aewm fails to cross build from source, because the upstream Makefile hard codes the build architecture pkg-config. The attached patch makes pkg-config substitutable. Please consider applying

Bug#933232: upx-ucl: CVE-2019-14295 CVE-2019-14296

2019-07-27 Thread Salvatore Bonaccorso
Source: upx-ucl Version: 3.95-1 Severity: normal Tags: security upstream Hi, The following vulnerabilities were published for upx-ucl. CVE-2019-14295[0]: | An Integer overflow in the getElfSections function in p_vmlinx.cpp in | UPX 3.95 allows remote attackers to cause a denial of service

Bug#933132: dh-make-perl: depends on libparse-debianchangelog-perl that has no upstream maintainer

2019-07-27 Thread intrigeri
Control: tag -1 + patch https://salsa.debian.org/perl-team/modules/packages/dh-make-perl/merge_requests/1

Bug#933231: exim4-base: /etc/cron.daily/exim4-base can't detect hostname via hostname --fqdn

2019-07-27 Thread Christian Garbs
Package: exim4-base Version: 4.92-8+deb10u1 Severity: normal Tags: ipv6 After the update from Stretch to Buster, on one of my systems /etc/cron.daily/exim4-base failed on every run with just hostname: Name or service not known as an error message. I could trace this to the usage of "hostname

Bug#933230: acpid: Race during startup can result in event devices not being opened

2019-07-27 Thread anomie
Package: acpid Version: 1:2.0.31-2 When using netlink and the input layer, acpid opens the existing devices in /dev/input/event* first and only after sets an inotify to be told about newly created devices. If an event device is created between the time acpid reads the directory and the time it

Bug#933229: yarnpkg: Cannot find module 'babel-runtime/helper/asyncToGenerator'

2019-07-27 Thread Christoph Schulz
Package: yarnpkg Version: 1.13.0-1 Severity: grave Justification: renders package unusable Dear Maintainer, it seems like the yarnpkg executable is broken somehow. Please see below for the full error. I will resort to the installation method from the yarn site for now. [1] I have installed

Bug#933228: linux-image-4.19.0-5-arm64: Please enable CONFIG_VIDEO_BCM2835=m

2019-07-27 Thread Reco
Package: src:linux Version: 4.19.37-5 Severity: wishlist Dear Maintainer, Raspberry Pi3, from which I write this bugreport, is a popular SoC that finally got a proper support by Debian project. It would be nice to have a kernel module for the camera host interface, which is included into

Bug#874025: Bug#881034: Galera-3 default configuration; nodes beyond primary will not connect

2019-07-27 Thread Otto Kekäläinen
Control: close -1 There was no further input from reporter, thus closing issue.

Bug#932755: sdl-image1.2: multiple security issues

2019-07-27 Thread Felix Geyer
Hi Hugo, On 27.07.19 19:39, Hugo Lefeuvre wrote: Dear SDL packages maintainers, I have uploaded the jessie LTS update. I will coordinate with the security team for stretch and buster fixes via point release. Concerning testing: can I upload the NMU? Sure, please go ahead! Cheers, Felix

Bug#933227: dh-make-perl: t/dists.t fails if $NO_NETWORK is not set

2019-07-27 Thread intrigeri
Package: dh-make-perl Version: 0.106 Severity: normal Hi, since commits 52758d4 and 8f31263, depending on whether we allow the dh-make-perl test suite to use the network or not (which is determined by $NO_NETWORK), when run by t/dists.t, it will either reformat debian/* with cme or not, and then

Bug#933226: notion: homepage moved to https://notionwm.net/

2019-07-27 Thread Patrice Duroux
Source: notion Severity: minor Dear Maintainer, and the upstream VCS is there: https://github.com/raboof/notion Thanks, Patrice -- System Information: Debian Release: bullseye/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1,

Bug#923914: Is the font package used in debian installer?

2019-07-27 Thread Samuel Thibault
Tarun Kumar, le dim. 28 juil. 2019 00:26:03 +0530, a ecrit: > The package is used in debian installer or not? Yes, but apparently it takes it from the bf-utf package, not from the unifont package. Samuel

Bug#933225: Request for a debian-latinoamerica mailing list

2019-07-27 Thread Santiago R.R.
Package: lists.debian.org Severity: wishlist I am filing this bug on behalf of the people that participated in the Debian Latin America y Caribe Meeting during DC19 [0,1]. [0] https://debconf19.debconf.org/talks/162-latin-america-y-caribe-meeting/ [1] https://pad.riseup.net/p/dc19latin-keep

Bug#805108: freedombox-setup: [PATCH] Enable zram

2019-07-27 Thread James Valleroy
retitle 805108 freedombox: integrate zram-tools thanks The zram swap service is now packaged as zram-tools. signature.asc Description: OpenPGP digital signature

Bug#923914: Is the font package used in debian installer?

2019-07-27 Thread Tarun Kumar
The package is used in debian installer or not? signature.asc Description: PGP signature

Bug#933221: openarena: suggestion to make openarena -players-mature optional

2019-07-27 Thread Simon McVittie
Control: tags -1 + upstream wontfix On Sat, 27 Jul 2019 at 13:01:48 -0400, Tom Goulet wrote: > I was hoping to get openarena installed, but without the -mature package. This was possible in OpenArena 0.8.1, but it can't actually work since 0.8.5 because of the way the 0.8.5 and 0.8.8 patches

Bug#933135: pkg-perl-tools: depends on libparse-debianchangelog-perl that has no upstream maintainer

2019-07-27 Thread intrigeri
Control: tag -1 + patch https://salsa.debian.org/perl-team/modules/packages/pkg-perl-tools/merge_requests/4 removes the only dependency.

Bug#917292: ffmpeg: linking with libcrystalhd3 seem of no use at all

2019-07-27 Thread Jonas Smedegaard
Quoting James Cowgill (2019-07-27 12:48:23) > Hi, > > On 27/07/2019 15:52, Jonas Smedegaard wrote: > > Quoting James Cowgill (2019-07-27 11:12:00) > >> Hi, > >> > >>> ffmpeg currently links with libcrystalhd3. > >>> > >>> It seems, however, that libcrystalhd3 is only really useful > >>> together

Bug#933224: dh_installchangelogs manpage does not describe which files are considered as upstream changelog

2019-07-27 Thread Laurent Bigonville
Package: debhelper Version: 12.2.3 Severity: normal Hi, dh_installchangelogs manpage does not describe which files are considered as upstream changelog. Looking at the code, it seems that it looks for files named changelog, changes and history with different extensions (.txt .md .rst). Kind

Bug#932307: multipath-tools does not update wwids file

2019-07-27 Thread Taulelle Lois
On 2019-07-25 17:01, Ritesh Raj Sarraf wrote: On Thu, 2019-07-25 at 16:24 +0200, Taulelle Lois wrote: > A lot has changed lately in how multipath-tools works and you may > have > to fiddle around with settings. Any doc pointer? From Buster manpages, my configuration and my usage are correct.

Bug#924622: [pkg-apparmor] Bug#924622: Can the disabling of AppArmor upon removal of its userland tools be made simpler and more complete?

2019-07-27 Thread intrigeri
Control: retitle -1 Make it easier to fully disable AppArmor Hi Nathan, first, thanks for caring :) Nathan Howard: > Removal of AppArmor from the userland leaves a moreso unexpected kernel > side completely enabled and functioning. So, upon AppArmor's package > removal is it possible to

Bug#933223: ITP: libnbd -- Network Block Device client library

2019-07-27 Thread Hilko Bengen
Package: wnpp Owner: Hilko Bengen Severity: wishlist * Package name: libnbd Version : 0.1.9 Upstream Author : Eric Blake, Richard W.M. Jones * URL or Web page : https://github.com/libguestfs/libnbd * License : LGPL2+ Description : Network Block Device client library

Bug#932755: sdl-image1.2: multiple security issues

2019-07-27 Thread Hugo Lefeuvre
Dear SDL packages maintainers, I have uploaded the jessie LTS update. I will coordinate with the security team for stretch and buster fixes via point release. Concerning testing: can I upload the NMU? cheers, Hugo -- Hugo Lefeuvre (hle)|www.owl.eu.com RSA4096_ 360B

Bug#933222: update for tmux 2.9

2019-07-27 Thread Sebastian Ramacher
Package: tmux-themepack-jimeh Version: 0+git20180910-126150d-1 Severity: normal Please update to at least 1b1b8098419daacb92ca401ad6ee0ca6894a40ca which fixes compatibility with tmux 2.9. See https://github.com/jimeh/tmux-themepack/issues/24 Cheers -- System Information: Debian Release:

Bug#933221: openarena: suggestion to make openarena -players-mature optional

2019-07-27 Thread Tom Goulet
Source: openarena Severity: wishlist Dear Maintainer, I wanted to install Openarena packages, but with no nudity. I went to install openarena with apt-get, but I specified openarena-081-players-mature-, with the minus sign to disable installation of the -mature package. APT refused to install

Bug#782636: Welcome to fubar!

2019-07-27 Thread fubar Accounts
Thank you for signing up for fubar. You have chosen wisely. As you know (or you're about to find out), fubar has some of the coolest, kindest, smartest, weirdest, funniest, most attractive, and over-all best community members on the entire Internet. And now, you're a big part of that. Come

Bug#933220: siridb-server: missing source for Release/makefile

2019-07-27 Thread Helmut Grohne
Source: siridb-server Version: 2.0.34-1 Severity: serious Justification: missing source The Release/makefile starts with: # Automatically-generated file. Do not edit!

Bug#933218: stretch-pu: package libsdl2-image/2.0.1+dfsg-2+deb9u2

2019-07-27 Thread Adam D. Barratt
Control: tags -1 + confirmed On 2019-07-27 13:32, Hugo Lefeuvre wrote: libsdl2-image is currently affected by the following security issues in stretch: * CVE-2018-3977: Heap buffer overflow. * CVE-2019-5052: integer overflow and subsequent buffer overflow in IMG_pcx.c. * CVE-2019-5051:

Bug#933219: Updating the ruby-rspec-puppet Uploaders list

2019-07-27 Thread Tobias Frost
Source: ruby-rspec-puppet Version: 2.6.1-1 Severity: minor User: m...@qa.debian.org Usertags: mia-teammaint Thomas Bechtold has retired, so can't work on the ruby-rspec-puppet package anymore (at least with this address). We are tracking their status in the MIA team and would like to ask you to

Bug#932318: buster-pu: package unzip/6.0-23+deb10u1

2019-07-27 Thread Adam D. Barratt
On 2019-07-27 13:18, Santiago Vila wrote: tags 932318 - moreinfo thanks Hello. The problem with Firefox should now be fixed, and it was unzip's fault. If possible, I'd like this upload I did 6.0-23+deb10u1 to be rejected so that I can reuse the +deb10u1 version with all the fixes included.

Bug#932935: (No Subject)

2019-07-27 Thread Joshua W. Lawson
How does one fix the error if they do not have an older kernel and are stuck with only BusyBox?

Bug#928160: [pkg-apparmor] Bug#928160:

2019-07-27 Thread intrigeri
Control: reopen -1 Control: retitle -1 aa-genprof fails when apparmor-profiles is installed Control: severity -1 important Hi, miteigi: > I'd like to mention that hoxp18 (and I) encountered the bug not when > activating > these extra profiles, but when we used aa-genprof on completely unrelated

Bug#933218: stretch-pu: package libsdl2-image/2.0.1+dfsg-2+deb9u2

2019-07-27 Thread Hugo Lefeuvre
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Hi, libsdl2-image is currently affected by the following security issues in stretch: * CVE-2018-3977: Heap buffer overflow. * CVE-2019-5052: integer overflow and subsequent

Bug#928706: Debian Stretch cannot be installed on QNAP TS-121 (Kirkwood Marvell 6282 CPU w/ 1GB RAM)

2019-07-27 Thread Martin Michlmayr
* Luca Pasquini [2019-05-09 12:31]: > May 9 00:00:50 kernel: [ 12.152446] BUG: Bad rss-counter state > mm:c08593c0 idx:1 val:1 > > The unique known workaround is to lower the RAM from 1G to 768M (link: > https://blog.spblinux.de/2018/09/debian-with-btrfs-on-qnap-11x-21x-kirkwood/). > I'm

Bug#932318: buster-pu: package unzip/6.0-23+deb10u1

2019-07-27 Thread Santiago Vila
tags 932318 - moreinfo thanks Hello. The problem with Firefox should now be fixed, and it was unzip's fault. If possible, I'd like this upload I did 6.0-23+deb10u1 to be rejected so that I can reuse the +deb10u1 version with all the fixes included. Thanks.

Bug#933217: RM: check-mk -- RoQA, RC-Buggy, unmaintained, no reverse dependency

2019-07-27 Thread Tobias Frost
Source: check-mk Severity: serious Justification: QA/MIA-Team Dear maintainers of check-mk, check-mk is currently RC-Buggy with 2 RC bugs: #876686 [S| | ] [check-mk-config-icinga] check-mk-config-icinga: file conflict with check-mk-common: /usr/share/check_mk/cmk/paths.py #924727 [S|

Bug#932404: firefox-esr, FTBFS "possible zip bomb".

2019-07-27 Thread Santiago Vila
On Fri, Jul 26, 2019 at 04:01:15AM +, Adler, Mark wrote: > All, > > Thank you Santiago for the report and David for the diagnosis. Though this is > not a valid zip file, there are in fact no overlapping structures and so > there should not be a bomb alert. > > I have added a commit that

Bug#933216: network-manager: system refuse to work with Intel i210 interface, only work with i217-V. can only use 1 eth conn.

2019-07-27 Thread Mélanie Legault
Package: network-manager Version: 1.14.6-2 Severity: important -- System Information: Debian Release: 10.0 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-5-amd64 (SMP w/8 CPU cores) Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8

Bug#933215: Please remove Python 2 use in this package

2019-07-27 Thread Thomas Goirand
Package: heudiconv Severity: important Hi, Please get rid of all Python 2 in this package, as we're removing it from Sid. Once done, we can get rid of Py2 support in python-datalad and then, in python-httpretty. I'd appreciate a ping when this is done. Cheers, Thomas Goirand (zigo)

Bug#928160:

2019-07-27 Thread miteigi
Greetings, I'd like to mention that hoxp18 (and I) encountered the bug not when activating these extra profiles, but when we used aa-genprof on completely unrelated programs. In other words, it (probably) affects anyone who uses aa-genprof and has the apparmor-profiles package installed, not only

Bug#933214: fdisk: program loops with "Do you really want to quit?"

2019-07-27 Thread Yangfl
Package: fdisk Version: 2.33.1-0.1 Severity: minor Dear Maintainer, The program can be tricked inot a situation where Do you really want to quit? Command (m for help): is printed over and over by issuing the following command sequence: g n

Bug#917292: ffmpeg: linking with libcrystalhd3 seem of no use at all

2019-07-27 Thread James Cowgill
Hi, On 27/07/2019 15:52, Jonas Smedegaard wrote: > Quoting James Cowgill (2019-07-27 11:12:00) >> Hi, >> >>> ffmpeg currently links with libcrystalhd3. >>> >>> It seems, however, that libcrystalhd3 is only really useful together >>> with firmware-crystalhd, which was never really usable in

Bug#933213: upgrades causes problems due newer openssl 102 vs 1.1.1

2019-07-27 Thread PICCORO McKAY Lenz
Package: courier-mta-ssl Version: 0.73.1-1.6 i upgrade from jessie to buster.. when pass to strech got a problem.. i must manually downgrade the openssl to jessie version before upgrade both openssl and courier, minimal version posible 1.0.2 before use the 1.1.1 or more up! Setting up

Bug#933055: aptitude: Unable to satisfy the build-depends: Build-Depends: debhelper-compat (= 12)

2019-07-27 Thread Sven Joachim
Control: merge 509100 -1 On 2019-07-26 08:43 +0200, Jochen Sprickerhof wrote: > Package: aptitude > Version: 0.8.11-7 > Severity: normal > > Hi, > > debhelper 12 supports debhelper-compat as a Build-Depends in > debian/control, instead of a debian/compat. Can you add support for this > in

Bug#933212: dh_dwz: probably shouldn't extract multifiles for udebs

2019-07-27 Thread Simon McVittie
Package: debhelper Version: 12.2.3 Severity: normal I recently converted src:glib2.0 to compat level 12. glib2.0 is unusual in a couple of ways: - multiple shared libraries lib{glib,gobject,gio,...}-2.0.so.0 are bundled into a single binary package libglib2.0-0 - it has a corresponding udeb,

Bug#933211: libosinfo-bin: Debian Buster does not appear in the OS database

2019-07-27 Thread Steven Monai
Package: libosinfo-bin Version: 1.4.0-1 Severity: normal Dear Maintainer, When I run the following on the command line: osinfo-query os | grep -i buster | sed 's/ */ /g' there is no output. I would expect to see a line that is analagous to the output obtained for every previous Debian

Bug#932989: gcc-avr: Package version severely outdated compared to main gcc-toolchain

2019-07-27 Thread nightwalker-87
Hi Hakan, pointing to this issue in a developer discussion and also this link (https://savannah.nongnu.org/forum/forum.php?forum_id=8460 ) led to the maintainer Jörg Wunsch. It looks like as if he could be one of the key persons to

Bug#920373: default soundfonts

2019-07-27 Thread Thorsten Glaser
Fabian Greffrath dixit: >cleared out: Do you suggest for SF2 soundfonts to also provide the sf3- >soundfont-gmvirtual package? I mean, technically they should be >compatible, but this would mean we create a symlink with a different >file extension. Do we want this? Yes, of course we do want

Bug#933128: libparse-debianchangelog-perl: Unsuitable for Bullseye unless someone becomes upstream

2019-07-27 Thread intrigeri
gregor herrmann: > In dpt-new-upstream we're using Dpkg::Changelog::Debian from > libdpkg-perl, which might help here as well. Oh, this is very interesting, thanks! I had taken a look at that module, but from the documentation I understood it only gives us "the number of changelog entries that

Bug#889283: Not found - version 1.35 has left NEW

2019-07-27 Thread Neil Williams
Version: 1.35+dfsg-1 These three bugs appear fixed in unstable. geany-plugin-spellcheck 1.35+dfsg-1 geany-plugins 1.35+dfsg-1 geany 1.35-1 All are now installable in unstable. Closing the two geany-plugin bugs (as the version string is different for geany, just following up to

Bug#933210: rdkit: BD on texlive-generic-extra which isn't build anymore and isn't in bullseye

2019-07-27 Thread Paul Gevers
Source: rdkit Version: 201809.1+dfsg-7 Severity: serious Tags: ftbfs sid bullseye Since version 2019.20190311-1 the texlive-base package doesn't build texlive-generic-extra anymore. This is an issue for your package as it build-depends on it. Please update the building of your package to not need

Bug#926042: [Pkg-privacy-maintainers] Bug#926042: torbrowser-launcher should not be included in Buster

2019-07-27 Thread intrigeri
Roger Shimizu: > Buster is released, so I guess it's okay to reduce the severity to let > it migrate to testing again. Thanks a lot for caring about torbrowser-launcher! FTR, I'm not enthusiastic at the idea of seeing it in testing and backports (I suspect the reasons why torbrowser-launcher was

Bug#933208: qevercloud FTCBFS: missing Build-Depends: qtbase5-dev:native

2019-07-27 Thread Helmut Grohne
Source: qevercloud Version: 3.0.3+ds-4 Tags: patch User: debian-cr...@lists.debian.org Usertags: ftcbfs qevercloud fails to cross build from source, because it fails finding a native qmake. qevercloud first tries to perform a native build of a generator and then a cross build of the actual

Bug#933207: firmware-misc-nonfree: Please include DVBSky S960/S860 / Montage Technology M88DS3103 firmware

2019-07-27 Thread Florian Lohoff
Package: firmware-misc-nonfree Version: 20190114-1 Severity: wishlist -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, would you mind including the firmware for this device: [ 15.093992] usb 1-2: new high-speed USB device number 4 using xhci_hcd [ 15.242748] usb 1-2: New USB device

Bug#799090: Still present in buster version (3.30.1.1-1)

2019-07-27 Thread Jörg Frings-Fürst
tags 799090 - upstream thanks Hello, in my mail from 14-07-2019 I asked to open a new bug report if the bug still exists. Background is * the report was created in 2015 on a now totally outdated system. * This means that current data, which is important for IMHO to re forward to the

Bug#933209: mark openscad-mcad Multi-Arch: foreign

2019-07-27 Thread Helmut Grohne
Package: openscad-mcad Version: 2019.02-1 Tags: patch User: debian-cr...@lists.debian.org Usertags: cross-satisfiability Control: affects -1 + src:openscad openscad fails to cross build from source, because its build dependency on openscad-mcad is unsatisfiable. In general, Architecture: all

Bug#933206: RM: spl-linux -- ROM; replaced by zfs-linux

2019-07-27 Thread Mo Zhou
Package: ftp.debian.org Severity: normal X-Debbugs-CC: a...@debian.org the source code of spl has been merged into src:zfs-linux as of 0.8.0~* version.

Bug#933205: haskell-patience_0.2.1.1-1_all.changes REJECTED

2019-07-27 Thread Aurelien Jarno
Source: haskell-patience Version: 0.2.1.1-1 Severity: serious On 2019-07-27 14:42, Debian FTP Masters wrote: > libghc-patience-doc_0.2.1.1-1_all.deb: has 1 file(s) with a timestamp too far > in the past: > usr/share/doc/libghc-patience-doc/changelog.gz (Thu Jan 1 00:00:00 1970) > > > > ===

Bug#933204: haskell-cgi_3001.3.0.3-1_s390x.changes REJECTED

2019-07-27 Thread Aurelien Jarno
Source: haskell-cgi Version: 3001.3.0.3-1 Severity: serious On 2019-07-27 14:40, Debian FTP Masters wrote: > > > libghc-cgi-dev_3001.3.0.3-1_s390x.deb: has 1 file(s) with a timestamp too far > in the past: > usr/share/doc/libghc-cgi-dev/changelog.gz (Thu Jan 1 00:00:00 1970) > > > > ===

Bug#917292: ffmpeg: linking with libcrystalhd3 seem of no use at all

2019-07-27 Thread Jonas Smedegaard
Quoting James Cowgill (2019-07-27 11:12:00) > Hi, > > > ffmpeg currently links with libcrystalhd3. > > > > It seems, however, that libcrystalhd3 is only really useful together > > with firmware-crystalhd, which was never really usable in Debian, > > leading to that package being dropped: > >

Bug#933069: marked as done (libglib-perl: autopkgtest regression with GLib 2.60.x: GKeyFile comments no longer contain trailing newline)

2019-07-27 Thread intrigeri
Control: reopen -1 autopkgtests still fail on testing with 1.329-3. I've dived deeper into the problem and found the root cause: the (patched) t/g.t adjusts its expectations depending on what version of GLib we were compiled against (in this case: sid's 2.60.5), while it should depend on what

Bug#933203: Phpmyadmin

2019-07-27 Thread x9nico_YT
Package: phpmyadmin Hi, can you update the package to latest version please ? :) Amically.

Bug#917292: ffmpeg: linking with libcrystalhd3 seem of no use at all

2019-07-27 Thread James Cowgill
Hi, > ffmpeg currently links with libcrystalhd3. > > It seems, however, that libcrystalhd3 is only really useful together > with firmware-crystalhd, which was never really usable in Debian, > leading to that package being dropped: https://bugs.debian.org/865978 > > If someone wants to revive

Bug#933202: Additional information

2019-07-27 Thread sixerjman
kernel: [155898.814801] xfdesktop[7896]: segfault at 10 ip b7052d52 sp bfb1a070 error 4 in +libglib-2.0.so.0.5800.3[b700+82000]

  1   2   >