Bug#985124: fossil: fails to update schema for older repositories

2021-03-12 Thread Sergei Golovan
Package: fossil Version: 1:2.14-1 Severity: grave Tags: upstream fixed-upstream Dear Maintainer, After updating the fossil package to 1:2.14-1, I've found that it fails to open repositories created a while ago. It emits the following error message: SQLITE_ERROR(1): table sqlite_master may not

Bug#985075: recoll: Please provide recoll 1.29.1

2021-03-12 Thread Jean-Francois Dockes
I think that you need to use the sources file for the bullseye package from lesbonscomptes, not buster: deb11-64$ apt-cache policy recoll recoll: Installed: 1.29.1-1~ppa1~bullseye Candidate: 1.29.1-1~ppa1~bullseye Version table: *** 1.29.1-1~ppa1~bullseye 500 500

Bug#810890: Cross references

2021-03-12 Thread Geert Stappers
Hi, This email is for both caddy packaging related reports https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=810890 and https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954793 having a link to each other. Plus a link to https://wiki.debian.org/SummerOfCode2021/Projects/PackagingCaddy

Bug#985057: gitlab-apt-pin-preferences: Pin not specific enough to prevent breaking Gitlab

2021-03-12 Thread Andrei POPESCU
On Vi, 12 mar 21, 16:04:16, Maximilian Stein wrote: > Hello, > > This package is part of Debian Fasttrack. Its source is hosted on Salsa: > https://salsa.debian.org/fasttrack-team/gitlab-apt-pin-preferences/-/tree/master, > and maintainer is Praveen Arimbrathodiyil (in CC). As far as I know

Bug#985123: isenkram-autoinstall-firmware: references obsolete httpredir.debian.org

2021-03-12 Thread Paul Wise
Package: isenkram-cli Version: 0.46 Severity: minor File: /usr/sbin/isenkram-autoinstall-firmware The httpredir.debian.org domain is obsolete, I suggest replacing it with https://deb.debian.org/debian or even better detecting the user's chosen mirror and using that instead of forcing a specific

Bug#985087: [Pkg-rust-maintainers] Bug#985087: CVE-2021-27378

2021-03-12 Thread Wolfgang Silbermayr
On 3/12/21 7:54 PM, Moritz Muehlenhoff wrote: > Source: rust-rand-core > Severity: grave > Tags: security > X-Debbugs-Cc: Debian Security Team > > Please see: > https://rustsec.org/advisories/RUSTSEC-2021-0023.html Thank you for your report. The commit [0] fixed the issue upstream in the

Bug#984940: CVE-2021-28041

2021-03-12 Thread Darren Tucker
On Sat, 13 Mar 2021 at 10:01, Colin Watson wrote: > This patch unfortunately doesn't apply terribly cleanly to OpenSSH > 8.4p1, [...] > If I understand the vulnerability correctly, then it seems to me that > the following shorter patch would fix it, and would run less risk of me > fouling

Bug#985122: gssproxy: upstream website has moved to GitHub

2021-03-12 Thread Paul Wise
Package: gssproxy Severity: minor User: debian...@lists.debian.org Usertags: duck I noticed that the upstream website has been moved to GitHub: $ apt-cache show gssproxy | grep Homepage Homepage: https://pagure.io/gssproxy/ $ chronic apt source gssproxy $ cd gssproxy-0.8.2/

Bug#983873: retroarch: Menu freezes shortly after start

2021-03-12 Thread Ryan Tandy
Thank you for providing the additional info. Are you using sway as compositor? I reproduced the freezing behaviour when running under sway. In a GNOME session on Wayland, retroarch seems to work fine. If that is correct, I think I will downgrade the severity of this bug, as retroarch is

Bug#985121: linux-image-5.10.0-4-rt-arm64: KMS seems broken in vc4.ko

2021-03-12 Thread Ryutaroh Matsumoto
Package: src:linux Version: 5.10.19-1 Severity: normal Tags: upstream sid bullseye X-Debbugs-Cc: debian-...@lists.debian.org Control: forwarded -1 http://lists.infradead.org/pipermail/linux-rpi-kernel/2021-March/008049.html Dear Maintainer, kmscube 0.0.0~git20210103-1 fails to start with the

Bug#985120: CVE-2021-21300 (was: Re: Accepted git 1:2.30.2-1 (source) into unstable)

2021-03-12 Thread Jonathan Nieder
Package: git Version: 1:2.20.1-2+deb10u3 Severity: important Justification: security issue Tags: upstream security Salvatore Bonaccorso wrote: > On Wed, Mar 10, 2021 at 02:21:05AM +, Debian FTP Masters wrote: >>* new upstream point release (see RelNotes/2.30.2.txt). > > This adresses

Bug#984719: lintian: add check for incomplete XS-Go-Import-Path

2021-03-12 Thread Felix Lechner
Hi Alexandre, On Fri, Mar 12, 2021 at 5:47 PM Alexandre Viau wrote: > > If we can check for XS-Go-Import-Path then I think that we can read it? The check you are referring to reads Debian sources (dsc), but the field is not present in the *installable* packages (*.deb) that place the sources in

Bug#984719: lintian: add check for incomplete XS-Go-Import-Path

2021-03-12 Thread Alexandre Viau
On 2021-03-11 3:34 p.m., Felix Lechner wrote: > Hi Alexandre, > > On Sun, Mar 7, 2021 at 8:54 AM Alexandre Viau wrote: >> It would be great if lintian validated that `XS-Go-Import-Path` was correct. > I implemented it on an unreleased branch, but it will not work well > unless the field is

Bug#916756: geeqie: fullscreen spanning multiuple monitors does not work

2021-03-12 Thread Jiri Bohac
On Wed, Mar 10, 2021 at 11:03:57PM +0100, Andreas Ronnquist wrote: > Hi! > > Is this still a problem for you with the version from unstable? > (1:1.6-8) No, I verified that geeqie from unstable works as expected. That is thanks to my patch _and_ geeqie now being compiled with GTK3. Thanks so

Bug#985119: debian-installer: shared-mime-info installed for no apparent reason

2021-03-12 Thread Witold Baryluk
Package: debian-installer Severity: normal X-Debbugs-Cc: witold.bary...@gmail.com I just used the daily netinst for testing on arm64 in qemu. I used the non-expert install (default). In the selection of tasks, I only added "SSH server". No standard utils, laptop tools or desktop, printer or

Bug#985118: ITP: masakari-monitors -- OpenStack Virtual Machine High Availability (VMHA) - monitors

2021-03-12 Thread Thomas Goirand
Package: wnpp Severity: wishlist Owner: Thomas Goirand * Package name: masakari-monitors Version : 10.0.0 Upstream Author : OpenStack Foundation * URL : https://opendev.org/openstack/masakari-monitors * License : Apache-2.0 Programming Lang: Python

Bug#985116: libgrokj2k: FTBFS on i386

2021-03-12 Thread Ivo De Decker
package: src:libgrokj2k version: 7.6.6-2 severity: serious tags: ftbfs Hi, The latest upload of libgrokj2k to unstable fails on i386: https://buildd.debian.org/status/package.php?p=libgrokj2k Cheers, Ivo

Bug#984374: u-boot: ftbfs with GCC-11

2021-03-12 Thread Vagrant Cascadian
On 2021-03-03, Matthias Klose wrote: > The package fails to build in a test rebuild on at least amd64 with > gcc-11/g++-11, but succeeds to build with gcc-10/g++-10. The > severity of this report will be raised before the bookworm release, > so nothing has to be done for the bullseye release. > >

Bug#985115: buster-pu: package iputils/3:20180629-2+deb10u1

2021-03-12 Thread Noah Meyerhans
Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu I'd like to update iputils in buster to address important bugs in the iputils-ping and iputils-tracepath binary packages: * #976277: iputils-tracepath: destination address of ipv6

Bug#985091: docker.io: Needs Backporting: New glibc syscalls aren't allowed in old docker.io versions

2021-03-12 Thread Oskar Roesler
Package: docker.io Version: 18.09.1+dfsg1-7.1 Severity: important Tags: patch Dear Maintainer, New glibc 2.33 introduces new syscalls, which aren't allowed in debian's old docker.io version. Containers with glibc>=2.33 won't run anymore. Backport of this patch would be needed:

Bug#985114: unblock: sendmail/8.15.2-21

2021-03-12 Thread Vagrant Cascadian
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock X-Debbugs-Cc: a...@debian.org Please unblock package sendmail [ Reason ] This version of sendmail fixes a reproducible builds issue with build paths, updates the lintian overrides, minor

Bug#985066: mono-gac: messes with the unpacking of another package

2021-03-12 Thread Guillem Jover
Control: reassign -1 mono-gac 6.8.0.105+dfsg-3 Control: retitle -1 mono-gac: messes with the unpacking of another package [ Leaving context for the reassign. ] Hi! On Fri, 2021-03-12 at 12:54:31 +0100, Andreas Beckmann wrote: > Package: mono-runtime-common,dpkg > Severity: serious > User:

Bug#984940: CVE-2021-28041

2021-03-12 Thread Colin Watson
On Wed, Mar 10, 2021 at 05:57:52PM +0100, Moritz Muehlenhoff wrote: > The following vulnerability was published for openssh. > > CVE-2021-28041[0]: > | ssh-agent in OpenSSH before 8.5 has a double free that may be relevant > | in a few less-common scenarios, such as unconstrained agent-socket > |

Bug#985113: ITP: libqrtr-glib -- library to manage and access the QRTR (Qualcomm IPC Router) bus

2021-03-12 Thread Martin
Package: wnpp Severity: wishlist Owner: Martin X-Debbugs-Cc: debian-de...@lists.debian.org * Package name: libqrtr-glib Version : 1.0.0 Upstream Author : Eric Caruso , Andrew Lassalle , Aleksander Morgado * URL :

Bug#985002: nfs-common: Degraded system state if nfs-common installed and /etc/krb5.keytab present

2021-03-12 Thread Felix Lechner
Hi, On Thu, Mar 11, 2021 at 11:27 AM Joachim Falk wrote: > > gssproxy ... hides this problem Should we recommend, or even require, the use of gssproxy with Kerberos? Then we could keep all keytabs in the single file /etc/krb5.keytab. It would sidestep a huge class of bugs, among them

Bug#985112: ITP: cl-heredoc -- Common Lisp reader heredoc dispatcher

2021-03-12 Thread Sean Whitton
Package: wnpp Severity: wishlist Owner: Sean Whitton X-Debbugs-Cc: debian-de...@lists.debian.org, debian-common-l...@lists.debian.org * Package name: cl-heredoc Version : 0~git20100719.7dc8cab Upstream Author : Alexander Kahl * URL :

Bug#983721: chirp is outdated

2021-03-12 Thread gpe
Le dimanche 28 février 2021 à 14:18 -0800, tony mancill a écrit : > On Sun, Feb 28, 2021 at 10:38:03PM +0100, gpe wrote: > > Le dimanche 28 février 2021 à 21:10 +0100, Christoph Berg a écrit : > > > Control: retitle -1 chirp's python3 support is incomplete > > > > > > Re: gpe92 > > > > chirp in

Bug#935828: u-boot-sunxi: Please build firmware for A13-OLinuXino_MICRO

2021-03-12 Thread Vagrant Cascadian
On 2019-08-26, Vagrant Cascadian wrote: > On 2019-08-26, Jonas Smedegaard wrote: >> Olimex has (had) 3 variants of OLinuXino MICRO, with either of SoCs A13, >> A10s, and A20. ... >> Please consider enabling support for OLinuXino MICRO A13. ... > configs/A13-OLinuXinoM_defconfig Looks to be this

Bug#984791: eatmydata-udeb: udeb included in Debian ISO, but eatmydata and libeatmydata1 are not

2021-03-12 Thread ValdikSS
Indeed, I should have provide more context. Debian Buster installation from DVD1 ISO file takes enormous amount of time in a VM without write cache and on bare metal with older (a bit wore out) HDDs due to excessive fsync() calls. For example, installation from debian-10.6.0-amd64-DVD-1.iso in

Bug#985111: phpabtpl: should not warn to stderr

2021-03-12 Thread David Prévot
Package: pkg-php-tools Version: 1.41 Severity: wishlist Hi, When calling phpabtpl without a composer.json (which may be a standard use case for preparing a template for the testsuite), the following is displayed to stderr: Proceeding without a composer.json file. It forces one to add

Bug#984956: openmpi-bin: with mpirun --host : orte crashes with FORCE-TERMINATE [...] plm_base_launch_support.c

2021-03-12 Thread Matthias Maier
Dear all, A short update on the problem: The ORTE slurm plm is unaffected by this issue. So we were able to use the Debian default openmpi package on the cluster when using slurm to manage tasks. Best, Matthias

Bug#985110: node-url-parse: CVE-2021-27515

2021-03-12 Thread Salvatore Bonaccorso
Source: node-url-parse Version: 1.4.7+repack-2 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for node-url-parse. CVE-2021-27515[0]: | url-parse before 1.5.0 mishandles certain uses of backslash

Bug#985109: node-prismjs: CVE-2021-23341

2021-03-12 Thread Salvatore Bonaccorso
Source: node-prismjs Version: 1.11.0+dfsg-4 Severity: important Tags: security upstream Forwarded: https://github.com/PrismJS/prism/issues/2583 X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for node-prismjs. CVE-2021-23341[0]: | The package

Bug#985108: libgraphics-ocaml: missing Breaks+Replaces: libfindlib-ocaml (<< 1.8.1-2~)

2021-03-12 Thread Andreas Beckmann
Package: libgraphics-ocaml Version: 5.1.0-2 Severity: serious User: debian...@lists.debian.org Usertags: piuparts Control: affects -1 + ocaml-libs Hi, during a test with piuparts I noticed your package fails to upgrade from 'buster'. It installed fine in 'buster', then the upgrade to 'bullseye'

Bug#985107: lemonldap-ng-handler: missing Breaks+Replaces: lemonldap-ng-fastcgi-server (<< 2.0.5)

2021-03-12 Thread Andreas Beckmann
Package: lemonldap-ng-handler Version: 2.0.11+ds-2 Severity: serious User: debian...@lists.debian.org Usertags: piuparts Hi, during a test with piuparts I noticed your package fails to upgrade from 'buster'. It installed fine in 'buster', then the upgrade to 'bullseye' fails because it tries to

Bug#934242:

2021-03-12 Thread Damian Pluta

Bug#985100: server suspended after installation

2021-03-12 Thread Michael Biebl
Am 12.03.21 um 21:51 schrieb picca: Michael Biebl writes: Have you installed a graphical user interface like e.g. GNOME? yes Gnome I'm not sure, why you install GNOME on a server. I guess you need to figure out first, which component triggered the suspend request. Do you know how to

Bug#985105: kexec-tools: CVE-2021-20269

2021-03-12 Thread Salvatore Bonaccorso
Source: kexec-tools Version: 1:2.0.20-2.1 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for kexec-tools. CVE-2021-20269[0]: | incorrect permissions on kdump dmesg file Could you check the details

Bug#985104: neutron: CVE-2021-20267

2021-03-12 Thread Salvatore Bonaccorso
Source: neutron Version: 2:17.1.0-1 Severity: important Tags: security upstream Forwarded: https://bugs.launchpad.net/neutron/+bug/1902917 X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for neutron. CVE-2021-20267[0]: | Anti-spoofing bypass

Bug#959022: cgroup-tools: does not work in cgroup2 / unified hierarchy

2021-03-12 Thread Santiago Ruano Rincón
On Wed, 10 Mar 2021 17:11:49 +0100 Santiago Ruano =?iso-8859-1?Q?Rinc=F3n?= wrote: > On Tue, 28 Apr 2020 15:22:35 +0900 Ryutaroh Matsumoto > wrote: > > Package: cgroup-tools > > Version: 0.41-10 > > Severity: normal > > Tags: wontfix > > User: pkg-systemd-maintain...@lists.alioth.debian.org >

Bug#985098: unblock: glib2.0/2.66.7-2

2021-03-12 Thread Simon McVittie
On Fri, 12 Mar 2021 at 19:59:36 +, Simon McVittie wrote: > [x] attach debdiff against the package in testing Ugh, sorry, see attached. smcv diffstat for glib2.0-2.66.7 glib2.0-2.66.7 changelog | 17

Bug#985100: server suspended after installation

2021-03-12 Thread Michael Biebl
Am 12.03.21 um 21:16 schrieb Picca Frédéric-Emmanuel: Package: general Severity: normal X-Debbugs-Cc: pi...@debian.org Hello, I just wanted to report an issue I am facing with my servers. I used the bullseye beta3 of the installer, but If I remember correctly it was already the same with

Bug#985102: RFS: jupyter-packaging/0.7.12-1 [ITP] -- tools to help build and install Jupyter Python packages

2021-03-12 Thread Emmanuel Arias
Package: sponsorship-requests Severity: wishlist X-Debbugs-Cc: debian-pyt...@lists.debian.org Dear mentors, I am looking for a sponsor for my package "jupyter-packaging": * Package name: jupyter-packaging Version : 0.7.12-1 Upstream Author : Project Jupyter * URL

Bug#985103: src:purify: Uses DEB_BUILD_MULTIARCH for install paths

2021-03-12 Thread Nilesh Patra
Package: src:purify Severity: important X-Debbugs-Cc: nil...@debian.org Dear Maintainer, Hi, src:purify uses DEB_BUILD_MULTIARCH for installation paths. Using this is never right, it should almost always be DEB_HOST_MULTIARCH instead. using DEB_BUILD_MULTIARCH also breaks cross builds. More

Bug#985100: server suspended after installation

2021-03-12 Thread Picca Frédéric-Emmanuel
Package: general Severity: normal X-Debbugs-Cc: pi...@debian.org Hello, I just wanted to report an issue I am facing with my servers. I used the bullseye beta3 of the installer, but If I remember correctly it was already the same with buster. after installation and the final reboot, the server

Bug#985101: netdata-plugins-python: missing Replaces: netdata-core (<< 1.17.0-1~)

2021-03-12 Thread Andreas Beckmann
Package: netdata-plugins-python Version: 1.29.3-3 Severity: serious User: debian...@lists.debian.org Usertags: piuparts Control: found -1 1.17.0-1 Control: affects -1 + netdata Hi, during a test with piuparts I noticed your package fails to upgrade from 'buster'. It installed fine in 'buster',

Bug#985098: unblock: glib2.0/2.66.7-2

2021-03-12 Thread Simon McVittie
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package glib2.0 [ Reason ] Fix a symlink attack in file-roller (CVE-2021-28153) [ Impact ] Unpacking a malicious archive with file-roller (or other users of the

Bug#985097: iniparser: Useful Ubuntu Patch

2021-03-12 Thread Bastian Germann
Source: iniparser Severity: important Tags: patch An Ubuntu patch containing an upstream buffer overflow fix is available at: https://bugs.launchpad.net/ubuntu/+source/iniparser/+bug/1915866 Please consider applying it.

Bug#985096: unblock: systemd/247.3-3

2021-03-12 Thread Michael Biebl
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock X-Debbugs-Cc: pkg-systemd-maintain...@lists.alioth.debian.org, debian-b...@lists.debian.org, k...@debian.org Please unblock package systemd I'd like to see systemd 247.3 unblocked. It

Bug#985095: RFP: python3-reedsolo -- reed solomon encoder/decoder

2021-03-12 Thread Milan Kupcevic
Package: wnpp Severity: wishlist * Package name: python3-reedsolo Version : 1.5.4 Upstream Author : Tomer Filiba * URL : https://github.com/tomerfiliba/reedsolomon * License : CC0 Programming Lang: Python Description : reed solomon encoder/decoder A

Bug#984881: libnvidia-ml-dev: missing libnvidia-ml.so in library search path?

2021-03-12 Thread Andreas Beckmann
On 11/03/2021 16.57, Samuel Thibault wrote: Andreas Beckmann, le mer. 10 mars 2021 10:32:42 +0100, a ecrit: I'll think about where best to add this ... driver or cuda toolkit. Thanks for the nvidia-alternative upload, but it seems that it then doesn't work for ppc64el, which doesn't have the

Bug#985094: ITP: ortools -- Google Optimization Tools

2021-03-12 Thread Romain Porte
Package: wnpp Severity: wishlist Owner: Romain Porte X-Debbugs-Cc: debian-de...@lists.debian.org, deb...@microjoe.org * Package name: ortools Version : 8.2 Upstream Author : Laurent Perron * URL : https://github.com/google/or-tools * License : Apache 2.0

Bug#985093: RFS: vimb/3.6.0-1 [ITP] -- vim like browser

2021-03-12 Thread Martin Atukunda
Package: sponsorship-requests Severity: wishlist Dear mentors, I am looking for a sponsor for my package "vimb": * Package name: vimb Version : 3.6.0-1 Upstream Author : https://fanglibsu.github.io/ * URL : https://fanglingsu.github.io/vimb/ * License :

Bug#985074: x2goclient: [UX] SSH key login discoverability

2021-03-12 Thread JCGoran
Package: x2goclient Version: 4.1.2.2-2 Severity: wishlist X-Debbugs-Cc: jcgo...@protonmail.com Dear Maintainer, When a user either suspends or terminates a running session, they are greeted by a prompt with the fields `Login` and `Password`, but there is no mention of SSH keys. Of course, if the

Bug#985092: CVE-2021-21772

2021-03-12 Thread Moritz Muehlenhoff
Source: lib3mf Severity: grave Tags: security X-Debbugs-Cc: Debian Security Team This was assigned CVE-2021-21772: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1226 Cheers, Moritz

Bug#984791: eatmydata-udeb: udeb included in Debian ISO, but eatmydata and libeatmydata1 are not

2021-03-12 Thread Petter Reinholdtsen
[ValdikSS] > 2. eatmydata and libeatmydata1 packages should present in ISO images > (/pool directory) to make eatmydata-udeb possible to use without the > internet (you say it downloads the packages when internet is > connected, I'm not sure it works though). If it do not work, it

Bug#985090: CVE-2020-35711

2021-03-12 Thread Moritz Muehlenhoff
Source: rust-arc-swap Severity: important Tags: security X-Debbugs-Cc: Debian Security Team CVE-2020-35711 https://github.com/vorner/arc-swap/issues/45 https://rustsec.org/advisories/RUSTSEC-2020-0091.html

Bug#985089: CVE-2020-36277 CVE-2020-36278 CVE-2020-36279 CVE-2020-36280 CVE-2020-36281

2021-03-12 Thread Moritz Muehlenhoff
Source: leptonlib Severity: grave Tags: security X-Debbugs-Cc: Debian Security Team CVE-2020-36281 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22140 https://github.com/DanBloomberg/leptonica/commit/5ee24b398bb67666f6d173763eaaedd9c36fb1e5 CVE-2020-36280

Bug#985088: CVE-2020-6098

2021-03-12 Thread Moritz Muehlenhoff
Package: freediameter Severity: grave Tags: security X-Debbugs-Cc: Debian Security Team Please see https://talosintelligence.com/vulnerability_reports/TALOS-2020-1030 Possible fix:

Bug#985087: CVE-2021-27378

2021-03-12 Thread Moritz Muehlenhoff
Source: rust-rand-core Severity: grave Tags: security X-Debbugs-Cc: Debian Security Team Please see: https://rustsec.org/advisories/RUSTSEC-2021-0023.html Cheers, Moritz

Bug#985086: CVE-2021-23337 CVE-2020-28500

2021-03-12 Thread Moritz Muehlenhoff
Package: node-lodash Severity: grave Tags: security X-Debbugs-Cc: Debian Security Team CVE-2021-23337: https://snyk.io/vuln/SNYK-JS-LODASH-1040724 CVE-2020-28500: https://snyk.io/vuln/SNYK-JS-LODASH-1018905 Cheers, Moritz

Bug#985085: salt: CVE-2021-25315

2021-03-12 Thread Elimar Riesebieter
Source: salt Version: 2016.11.2+ds-1+deb9u6 2018.3.4+dfsg1-6+deb10u2 3002.5+dfsg1-1 Severity: normal Tags: patch security upstream X-Debbugs-Cc: hostmast...@hostsharing.net, Debian Security Team , Debian Security Team Hi, The following vulnerability was published for salt. CVE-2021-25315: A

Bug#985083: qemu: CVE-2021-20263

2021-03-12 Thread Salvatore Bonaccorso
Source: qemu Version: 1:5.2+dfsg-6 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for qemu. CVE-2021-20263[0]: | A flaw was found in the virtio-fs shared file system daemon | (virtiofsd) of QEMU.

Bug#929983: ipxe-qemu: virtio booting no longer works after upgrade to buster

2021-03-12 Thread Thorsten Glaser
retitle 929983 ipxe-qemu: virtio booting broken past jessie notfound 929983 1.0.0+git-20141004.86285d1-1 notfound 929983 1.0.0+git-20150424.a25a16d-1 found 929983 1.0.0+git-20161027.b991c67-1 found 929983 1.0.0+git-20190125.36a4c85-5.1 thanks On Fri, 26 Feb 2021, Thorsten Glaser wrote: > …

Bug#985082: libjpeg-turbo: CVE-2021-0384

2021-03-12 Thread Salvatore Bonaccorso
Source: libjpeg-turbo Version: 1:2.0.6-2 Severity: important Tags: security upstream Forwarded: https://github.com/libjpeg-turbo/libjpeg-turbo/issues/470 X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for libjpeg-turbo. CVE-2021-0384[0]: |

Bug#985075: recoll: Please provide recoll 1.29.1

2021-03-12 Thread Jean-Francois Dockes
Hi, Just a comment: I think that upmpdcli-uprcl works fine with either recoll 1.28 or 1.29, and it's the only upmpdcli component which needs recoll. I'm not sure why there would be a conflict ? J.F. Dockes Eric Valette writes: > Package: recoll > Version: 1.28.5-1 > Severity: wishlist >

Bug#149873: mmv: Options for dealing with this problem

2021-03-12 Thread Reuben Thomas
Thanks, Axel for your kind words, and also for your analysis. I've had a look at renameutils, of which I was not aware, though I have it installed on my machine already! It seems to me that it covers interactive usage neatly, so I'd be happy to remove that from mmv, retaining the -n flag, but

Bug#985075: recoll: Please provide recoll 1.29.1

2021-03-12 Thread Eric Valette
On 3/12/21 6:38 PM, Jean-Francois Dockes wrote: Hi, Just a comment: I think that upmpdcli-uprcl works fine with either recoll 1.28 or 1.29, and it's the only upmpdcli component which needs recoll. I'm not sure why there would be a conflict ? because the .deb from your repository (non

Bug#985081: ITP: masakari -- OpenStack Virtual Machine High Availability (VMHA)

2021-03-12 Thread Thomas Goirand
Package: wnpp Severity: wishlist Owner: Thomas Goirand * Package name: masakari Version : 7.0.0 Upstream Author : OpenStack Foundation * URL : https://opendev.org/openstack/masakari * License : Apache-2.0 Programming Lang: Python Description :

Bug#985059: libwine-development: missing Breaks+Replaces: wine-development (<< 4.8)

2021-03-12 Thread Jens Reyer
On 12.03.21 11:40, Andreas Beckmann wrote: > Unpacking libwine-development:amd64 (5.6-1) over (4.2-4+b1) ... > dpkg: error processing archive > /tmp/apt-dpkg-install-mfCwgB/93-libwine-development_5.6-1_amd64.deb > (--unpack): >trying to overwrite '/usr/lib/wine-development/wineserver',

Bug#985073: multimedia-musiciantools: should prefer the recent version of MuseScore

2021-03-12 Thread Thorsten Glaser
Dixi quod… >I noticed that multimedia-musiciantools Recommends: musescore > >It should instead > Recommends: musescore3 > Suggests: musescore >for bullseye. multimedia-guitar=0.10 (built from the same source package) Suggests musescore; it probably should Suggests musescore3 instead thus. bye,

Bug#985057: gitlab-apt-pin-preferences: Pin not specific enough to prevent breaking Gitlab

2021-03-12 Thread Maximilian Stein
This matching is expected. Can you share the error message? ruby-doorkeeper 5.3 to 5.5 update is not supposed to break gitlab. Basically, the rake commands (check, backup, ...) started to fail: $ gitlab-rake gitlab:check :( Check if Gitlab is configured correctly... fatal: Kein

Bug#985080: Akonadi server crashes because of Apparmor rules

2021-03-12 Thread bs.net
Package: akonadi-server Version: 4:20.08.3-1 Hi, the Akonadi server permanently crashes on login after upgrading to Bullseye. There are several Apparmor messages in the log: Mär 12 18:01:27 mcp kernel: audit: type=1400 audit(1615568487.152:30): apparmor="DENIED" operation="open"

Bug#985078: ITP: python-masakariclient -- OpenStack Virtual Machine High Availability (VMHA) client

2021-03-12 Thread Thomas Goirand
Package: wnpp Severity: wishlist Owner: Thomas Goirand * Package name: python-masakariclient Version : 7.0.0 Upstream Author : OpenStack Foundation * URL : https://opendev.org/openstack/python-masakariclient * License : Apache-2.0 Programming Lang: Python

Bug#984884: libgcrypt20: Unknown error executing apt-key [Bullseye]

2021-03-12 Thread Davide Prina
Hi Andreas, On 10/03/21 07:37, Andreas Metzler wrote: On 2021-03-09 Davide Prina wrote: [...] Some users in Italian mailing list have reported that they have an error when they try upgrade/install packages: [...] dig the problem we found that they have the following files on their system:

Bug#954057:

2021-03-12 Thread Rehan Gokill

Bug#985057: gitlab-apt-pin-preferences: Pin not specific enough to prevent breaking Gitlab

2021-03-12 Thread Pirate Praveen
On Fri, Mar 12, 2021 at 5:52 pm, Maximilian Stein wrote: This matching is expected. Can you share the error message? ruby-doorkeeper 5.3 to 5.5 update is not supposed to break gitlab. Basically, the rake commands (check, backup, ...) started to fail: $ gitlab-rake gitlab:check :(

Bug#985077: ITP: jupyter-packaging -- tools to help build and install Jupyter Python packages

2021-03-12 Thread Emmanuel Arias
Package: wnpp Severity: wishlist Owner: Emmanuel Arias X-Debbugs-Cc: debian-pyt...@lists.debian.org * Package name: jupyter-packaging Version : 0.7.12 Upstream Author : Project Jupyter * URL : https://github.com/jupyter/jupyter-packaging * License :

Bug#985057: gitlab-apt-pin-preferences: Pin not specific enough to prevent breaking Gitlab

2021-03-12 Thread Pirate Praveen
Control: reassign -1 gitlab On Fri, Mar 12, 2021 at 10:02 pm, Pirate Praveen wrote: On Fri, 12 Mar 2021 10:57:45 +0100 Maximilian Stein wrote: > Package: gitlab-apt-pin-preferences > Version: 2021.03.09 > Severity: normal > > Dear Maintainer, > > I am experimenting with

Bug#982010:

2021-03-12 Thread Martin Atukunda
owner ! retitle ITP: vimb - the vim like browser -- - M -

Bug#985076: aptitude fails to resolve build dependencies for node-mermaid buster-backports build but aspcud resolved it correctly

2021-03-12 Thread Julian Andres Klode
On Fri, Mar 12, 2021 at 09:55:32PM +0530, Pirate Praveen wrote: > > and keep printing "Resolving dependencies..." without actually able to > resolve. > > > With the following command, using aspcud instead of aptitude, it works > > sbuild -A -s --force-orig-source -c buster-amd64-sbuild >

Bug#985057: gitlab-apt-pin-preferences: Pin not specific enough to prevent breaking Gitlab

2021-03-12 Thread Pirate Praveen
On Fri, 12 Mar 2021 10:57:45 +0100 Maximilian Stein wrote: > Package: gitlab-apt-pin-preferences > Version: 2021.03.09 > Severity: normal > > Dear Maintainer, > > I am experimenting with gitlab-apt-pin-preferences to get Gitlab's > dependencies right. However, I noticed that now ruby-doorkeeper

Bug#985076: aptitude fails to resolve build dependencies for node-mermaid buster-backports build but aspcud resolved it correctly

2021-03-12 Thread Pirate Praveen
Package: aptitude Version: 0.8.11-7 When building node-mermaid (https://salsa.debian.org/js-team/node-mermaid and buster-backports branch or debian/8.9.1+ds+_cs26.20.25-1_bpo10+1 tag) with this command, sbuild -A -s --force-orig-source -c buster-amd64-sbuild --extra-repository='deb

Bug#984967: queue continuity

2021-03-12 Thread andrew glaeser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 According to my excellent qualities as IT worker of course I am keeping on testing, and the result of this is, that handbrake currently continues to work through the jobs-queue while you keep the x2go window open, and in this respect the

Bug#984994: RFS: ibus-kmfl/14.0.258-1 [ITS] -- KMFL engine for IBus

2021-03-12 Thread Eberhard Beilharz
X-Debbugs-CC: debian-input-met...@lists.debian.org Eberhard Beilharz wrote on 2021-03-11 17:33: Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for my package "ibus-kmfl": * Package name : ibus-kmfl Version : 14.0.258-1 Upstream Author : Keyman team *

Bug#984993: RFS: libkmfl/14.0.258-1 [ITS] -- KMFL library - runtime

2021-03-12 Thread Eberhard Beilharz
X-Debbugs-CC: debian-input-met...@lists.debian.org Eberhard Beilharz wrote on 2021-03-11 17:32: Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for my package "libkmfl": * Package name : libkmfl Version : 14.0.258-1 Upstream Author : Doug Rintoul *

Bug#984992: RFS: kmflcomp/14.0.258-1 [ITS] -- KMFL (Keyboard Mapping for Linux) Compiler

2021-03-12 Thread Eberhard Beilharz
X-Debbugs-CC: debian-input-met...@lists.debian.org Eberhard Beilharz wrote on 2021-03-11 17:32: Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for my package "kmflcomp": * Package name : kmflcomp Version : 14.0.258-1 Upstream Author : Doug Rintoul *

Bug#984991: RFS: keyman-keyboardprocessor/14.0.258-1 [ITS] -- Keyman keyboard processing library

2021-03-12 Thread Eberhard Beilharz
X-Debbugs-CC: debian-input-met...@lists.debian.org Eberhard Beilharz wrote on 2021-03-11 17:31: Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for my package "keyman-keyboardprocessor": * Package name : keyman-keyboardprocessor Version : 14.0.258-1

Bug#984990: RFS: ibus-keyman/14.0.258-1 [ITS] -- Keyman engine for IBus

2021-03-12 Thread Eberhard Beilharz
X-Debbugs-CC: debian-input-met...@lists.debian.org Eberhard Beilharz wrote on 2021-03-11 17:29: Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for my package "ibus-keyman": * Package name : ibus-keyman Version : 14.0.258-1 Upstream Author : Keyman

Bug#984791: eatmydata-udeb: udeb included in Debian ISO, but eatmydata and libeatmydata1 are not

2021-03-12 Thread Petter Reinholdtsen
[Mattia Rizzolo] >> eatmydata-udeb is included in Debian ISO files but can't be used as >> eatmydata and libeatmydata1 are missing in ISO pool on any ISO I've >> tested (CD/DVD, regular/live). Without the library eatmydata-udeb >> does nothing. It also does not attempt to load the library over

Bug#984989: RFS: keyman-config/14.0.258-1 [ITS] -- Keyman for Linux configuration

2021-03-12 Thread Eberhard Beilharz
X-Debbugs-CC: debian-input-met...@lists.debian.org

Bug#984988: pre-approval: unblock: golang-1.15/1.15.9-1

2021-03-12 Thread Shengjing Zhu
On Fri, Mar 12, 2021 at 5:16 PM Sebastian Ramacher wrote: > > unblock golang-1.15/1.15.9-1 > > Assuming the uploads happens soon, please go ahead. > Thansk, it's has been uploaded and built on all arch. -- Shengjing Zhu

Bug#977990: os-autoinst: FTBFS on i386: 3/3 Test #3: test-perl-testsuite ..............***Failed 332.81 sec

2021-03-12 Thread Adrian Bunk
On Thu, Feb 25, 2021 at 09:52:08AM +0100, Paul Gevers wrote: > Control: found -1 4.5.1527308405.8b586d5-4.2 > > Hi Frédéric, Hideki, > > On 17-02-2021 22:01, Paul Gevers wrote: > > If the forth time worked because of sheer luck, then please no, keep the > > bug open until the build is less

Bug#981368: xserver-xorg-video-intel: Xserver becomes unresponsive with some worloads. maybe related to video rendering

2021-03-12 Thread Agustin Martin
Control: reassign -1 linux Control: found -1 5.10.0-2 Control: affects -1 xserver-xorg-video-intel Control: fixed -1 5.10.19-1 Control: close -1 5.10.19-1 On Tue, 23 Feb 2021 22:36:02 +0100 joerg.mechnich wrote: > Looks like this was actually a bug in the i915 module: > >

Bug#985075: recoll: Please provide recoll 1.29.1

2021-03-12 Thread Eric Valette
Package: recoll Version: 1.28.5-1 Severity: wishlist Recoll 1.29.1 has been released. I have some package (upmpdcli) that conflicts. -- System Information: Debian Release: bullseye/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64)

Bug#880697: libwebkit2gtk-4.0: ICC not applied on this jpeg image

2021-03-12 Thread Alberto Garcia
On Sat, Nov 04, 2017 at 12:44:59AM +0100, Jérémy Lal wrote: > this image: > http://okgo.net/build/wp-content/uploads/2016/11/Email-Blast-Photo.jpg > clearly does not have its color profile correctly applied. FYI this has been fixed upstream but the patch will not make it to the upcoming 2.32

Bug#985003: Wrong usage. The bug is in the manpage

2021-03-12 Thread Jorge P. de Morais Neto
Hi Thorsten. This is not a bug in the shellcheck binary, but in the man page. The correct way to use GNU-style long options is with two leading dashes, so you should type: shellcheck --list-optional Probably the man page was written in a markup language that interpreted the two consecutive

Bug#971681: r-cran-openmx regression on arm, will not migrate to testing due to failing autopkgtests

2021-03-12 Thread Joshua N Pritikin
On Wed, Feb 17, 2021 at 07:57:11AM +0100, Andreas Tille wrote: > On Fri, Feb 12, 2021 at 01:03:23PM -0500, Joshua N Pritikin wrote: > > > I submitted a new release to CRAN yesterday. It usually takes a few days > > > to correct any lingering issues and get it approved. > > > > CRAN peeps said

Bug#984791: eatmydata-udeb: udeb included in Debian ISO, but eatmydata and libeatmydata1 are not

2021-03-12 Thread Mattia Rizzolo
Control: tag -1 moreinfo On Mon, Mar 08, 2021 at 03:28:53PM +0300, ValdikSS wrote: > eatmydata-udeb is included in Debian ISO files but can't be used as > eatmydata and libeatmydata1 are missing in ISO pool on any ISO I've tested > (CD/DVD, regular/live). > Without the library eatmydata-udeb does

Bug#984497: weasels and doves

2021-03-12 Thread Andrius Merkys
On 2021-03-10 02:38, George N. White III wrote: > On Mon, 8 Mar 2021 at 12:36, Andrius Merkys > wrote: > Many users will not look into e-mail addresses. They will search online > using the name of the software, and will arrive at the same developers' > desk.

  1   2   >