Bug#1065742: dh_install: cannot use empty lines or comments in substitution

2024-03-09 Thread Andreas Metzler
Package: debhelper Version: 13.14.1 Severity: normal Hello, supporting build-profiles like nodoc with dh_install seems to cumbersome. If the not-always-built files were listed in debian/foo.install the build would fail when the build profile was active (because they were not built/available). A

Bug#1065530: ghostscript b-d not needed

2024-03-06 Thread Andreas Metzler
Control: forcemerge 980768 1065530 On 2024-03-06 Matthias Klose wrote: > Package: src:gnupg2 > Version: 2.4.4-2 > Severity: important > while working on the time64 bootstraps, I noticed that the b-d on > ghostscript is unneeded, at least the build succeeds without it. > Please can you check if

Bug#1064282: poppler: NMU diff for 64-bit time_t transition

2024-03-02 Thread Andreas Metzler
On 2024-03-01 Daniel Serpell wrote: > Source: poppler > Followup-For: Bug #1064282 > Control: reopen 1064282 > As reported in bug 1065155, the provided patch was incorrect, the > X-Time64-Compat header is set incorrectly to libpoppler-cpp0v5 for all > the library packages. Good Morning, Also af

Bug#1061190: bullseye-pu: package gnutls28/3.7.1-5+deb11u5

2024-03-01 Thread Andreas Metzler
On 2024-03-01 Salvatore Bonaccorso wrote: > On Thu, Feb 01, 2024 at 06:35:38AM +, Adam D. Barratt wrote: >> Control: tags -1 + confirmed >> On Sat, 2024-01-20 at 15:53 +0100, Andreas Metzler wrote: >>> I would like to fix both CVE-2024-0567 and CVE-2024-0553 via

Bug#1065107: exim4: FTBFS: missing build-dep on libnsl-dev

2024-03-01 Thread Andreas Metzler
On 2024-02-29 Aurelien Jarno wrote: > Source: exim4 > Version: 4.97-1 > Severity: serious > Tags: ftbfs > Justification: fails to build from source (but built successfully in the past) > User: debian-gl...@lists.debian.org > Usertags: libnsl-dev > Dear maintainer, > Starting with glibc 2.31, sup

Bug#1064553: libgdiplus: build-error on current sid (all warnings being treated as errors)

2024-02-23 Thread Andreas Metzler
Source: libgdiplus Version: 6.1+dfsg-1 Severity: serious Tags: ftbfs Justification: fails to build from source (but built successfully in the past) libgdiplus FTBFS on current sid: make[7]: Entering directory '/dev/shm/x/libgdiplus-6.1+dfsg/gtest_build' [ 12%] Building CXX object googletest/CMake

Bug#1010062: RFA: autogen -- automated text file generator

2024-02-18 Thread Andreas Metzler
On 2022-04-23 Andreas Metzler wrote: > Package: wnpp > Severity: normal > X-Debbugs-Cc: auto...@packages.debian.org > Control: affects -1 src:autogen > I request an adopter for the autogen package. [...] Hello, Please note that autogen is nearing EOL. It is also pretty complic

Bug#1008573: [pkg-gnupg-maint] Bug#1008573: gpg-agent -managed SSH keys stored in Yubikeys cannot be used with OpenSSH 8.9

2024-02-17 Thread Andreas Metzler
On 2022-04-28 Daniel Kahn Gillmor wrote: > On Fri 2022-04-22 12:04:15 +0900, NIIBE Yutaka wrote: >> I found an issue of scdaemon. At upstream development, it is tracked by: >> https://dev.gnupg.org/T5935 >> When the data is not so large (smaller than the buffer size of token), >> it works

Bug#964033: /usr/bin/dirmngr: dane key location doesn't validate DNSSEC

2024-02-17 Thread Andreas Metzler
Control: tags -1 wontfix This has been closed upstream as "Wontfix".

Bug#1032752: please drop transitional package gnupg-agent from src:gnupg2

2024-02-17 Thread Andreas Metzler
Control: block -1 by 1064104 1064105 1064110 1064111 1064112 1064113 1064114 1064115 1064116 1064118 1064117 1064119 1064120 On 2023-03-11 Holger Levsen wrote: [...] > Please drop the transitional package gnupg-agent (from the source package > gnupg2) after the release of bookworm, it has been

Bug#1064120: reprepro: Suggests transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Package: reprepro Version: 5.3.1-4 Severity: normal Please update the package's suggests to point to gpg-agent. cu Andreas

Bug#1064119: libmail-gnupg-perl: Suggests transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Package: libmail-gnupg-perl Version: 0.23-3 Severity: normal Please update the package's suggests to point to gpg-agent. cu Andreas

Bug#1064118: keychain: Suggests transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Package: keychain Version: 2.8.5-3 Severity: normal Please update the package's suggests to point to gpg-agent. cu Andreas

Bug#1064117: claws-mail-pgpmime: Suggests transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Package: claws-mail-pgpmime Version: 4.2.0-1 Severity: normal Please update the package's suggests to point to gpg-agent. cu Andreas

Bug#1064116: x2gothinclient: Recommends transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Source: x2gothinclient Version: 1.5.0.1-10 Severity: normal Please update the package's recommends to point to gpg-agent. cu Andreas

Bug#1064114: notmuch: Recommends transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Package: notmuch Version: 0.38.2-1 Severity: normal Please update the package's recommends to point to gpg-agent. cu Andreas

Bug#1064115: nitrocli: Recommends transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Package: nitrocli Version: 0.2.4-2 Severity: normal Please update the package's recommends to point to gpg-agent. cu Andreas

Bug#1064113: kwalletcli: Recommends transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Package: kwalletcli Version: 3.03-1 Severity: normal Please update the package's recommends to point to gpg-agent. cu Andreas

Bug#1064112: kup-client: Recommends transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Package: kup-client Version: 0.3.6-2.1 Severity: normal Please update the package's recommends to point to gpg-agent. cu Andreas

Bug#1064111: kmymoney: Recommends on transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Package: kmymoney Version: 5.1.3-1 Severity: normal Please update the package's recommends to point to gpg-agent. cu Andreas

Bug#1064110: debdelta: Recommends on transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Package: debdelta Version: 0.70 Severity: normal Please update the package's recommends to point to gpg-agent. cu Andreas

Bug#1064105: agent-transfer: Depends on transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Package: agent-transfer Version: 0.43-3.1 Severity: normal Please update the package's dependcies to point to gpg-agent. cu Andreas

Bug#1064104: enigmail: Depends on transitional package gnupg-agent instead of gpg-agent

2024-02-17 Thread Andreas Metzler
Source: enigmail Version: 2:2.2.4-0.3 Severity: normal Please update the package's dependcies to point to gpg-agent. cu Andreas

Bug#1063403: libeegdev-dev,libeegdev0t64: both ship /usr/share/doc/libeegdev0/changelog.gz

2024-02-11 Thread Andreas Metzler
Comtrol: tags -1 patch On 2024-02-07 Andreas Beckmann wrote: > Package: libeegdev-dev,libeegdev0t64 [...] > Something weird happened after the package rename: > /usr/share/doc/libeegdev0/changelog.Debian.gz > /usr/share/doc/libeegdev0/changelog.gz > Are now shipped by libeegdev-dev and libe

Bug#1063401: atm-tools: has gained /usr/share/doc/libatm1/changelog.*

2024-02-10 Thread Andreas Metzler
Control: tags -1 patch On 2024-02-07 Andreas Beckmann wrote: > Package: atm-tools > Version: 1:2.5.1-5.1~exp1 [...] > atm-tools/experimental has gained two unexpected files, causing file > conflicts on upgrades: [...] > There is still an libatm1 dependency, and the new libatm1t64 dependency > see

Bug#1063329: libselinux1t64: breaks system in upgrade from unstable

2024-02-07 Thread Andreas Metzler
On 2024-02-06 Helmut Grohne wrote: > Package: libselinux1t64 [...]> This looks fairly innocuous. We create a minimal sid chroot and install > libselinux1t64 using apt. What could possibly go wrong? Well, apt thinks > that it would be a good idea to avoid coinstalling breaking packages and > first

Bug#698988: O: nvi - 4.4BSD re-implementation of vi

2024-02-06 Thread Andreas Metzler
On 2024-02-05 Tobias Heider wrote: [...] > As an active nvi user I would love to step up and help, but the biggest > problem I see is that the choice of upstream project. Since the original > is gone there isn't a clear successor. > The BSDs all have their own forks which diverged over time (and

Bug#1063170: nettle: NMU diff for 64-bit time_t transition

2024-02-06 Thread Andreas Metzler
On 2024-02-05 Niels Möller wrote: > Graham Inggs writes: >> we have identified nettle as a source package shipping runtime >> libraries whose ABI either is affected by the change in size of >> time_t, or could not be analyzed via abi-compliance-checker (and >> therefore to be on the safe side we

Bug#1058571: gnupg2: please enable TPM2 support

2024-02-02 Thread Andreas Metzler
On 2024-02-03 YunQiang Su wrote: > On Wed, 13 Dec 2023 11:17:10 +0800 YunQiang Su wrote: >> Package: src:gnupg2 >> Version: 2.4.3-2 >> TPM2 support has been introduced into GnuPG since 2.3. >> https://gnupg.org/blog/20210315-using-tpm-with-gnupg-2.3.html >> >> While TPM2 support is not enabled

Bug#1061667: netpbm: ppmtowinicon crash makes kcemu FTBFS

2024-01-28 Thread Andreas Metzler
On 2024-01-28 Adrian Bunk wrote: > ppmtowinicon -andpgms \ > kcemu-winicon_16x16.ppm kcemu-winicon_16x16.alpha.pgm \ > kcemu-winicon_32x32.ppm kcemu-winicon_32x32.alpha.pgm \ > kcemu-winicon_48x48.ppm kcemu-winicon_48x48.alpha.pgm \ > > kcemu-winicon.ico > malloc(): invalid

Bug#1061190: bullseye-pu: package gnutls28/3.7.1-5+deb11u5

2024-01-20 Thread Andreas Metzler
-09 Closes: #1061045 +Fix more timing side-channel inside RSA-PSK key exchange. CVE-2024-0553 +GNUTLS-SA-2024-01-14 Closes: #1061046 + + -- Andreas Metzler Sat, 20 Jan 2024 07:56:15 +0100 + gnutls28 (3.7.1-5+deb11u4) bullseye; urgency=medium * Backport fix for CVE-2023-5981 / GNUTLS-SA-

Bug#1061189: bookworm-pu: package gnutls28/3.7.9-2+deb12u2

2024-01-20 Thread Andreas Metzler
Closes: #1061046 + + -- Andreas Metzler Fri, 19 Jan 2024 18:28:37 +0100 + gnutls28 (3.7.9-2+deb12u1) bookworm; urgency=medium * Backport fix for CVE-2023-5981 / GNUTLS-SA-2023-10-23 (timing sidechannel diff -Nru gnutls28-3.7.9/debian/patches/61-x509-detect-loop-in-certificate-chain.patch

Bug#1061046: Bug#1061045: gnutls28: CVE-2024-0567 / #1061046 gnutls28: CVE-2024-0553

2024-01-20 Thread Andreas Metzler
Hello, do you plan/would you rather fix these two issues (CVE-2024-0567 and CVE-2024-0553) by DSA or should I go for a (old)stable update? TIA, cu Andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure'

Bug#808074: RFA: fbreader -- e-book reader

2024-01-13 Thread Andreas Metzler
On 2015-12-15 "Eugene V. Lyubimkin" wrote: > Package: wnpp > Severity: normal > Hello, > I request an adopter for the fbreader package, since I don't use it > actively anymore. [...] fbreader upstream has switched their business/mainainance model ages ago, it not free software, not even open so

Bug#1014058: Closed as duplicate by error

2024-01-13 Thread Andreas Metzler
Control: reopen 1014058 Control: retitle 1014058 exim4-daemon-heavy: please compile with DMARC support On 2023-03-23 Jämes Ménétrey wrote: > Dear Marc, > I am reaching out to you back regarding the wishlist item that was > mistakenly flagged as a duplicate and subsequently closed. > Indeed, thi

Bug#1060602: efl: Please switch Build-Depends to systemd-dev

2024-01-13 Thread Andreas Metzler
On 2024-01-11 bi...@debian.org wrote: > Source: efl > Version: 1.27.0-1 > Severity: normal > User: pkg-systemd-maintain...@lists.alioth.debian.org > Usertags: systemd-dev > Hi, > your package efl declares a Build-Depends on systemd and/or udev. > In most cases, this build dependency is added to

Bug#1060457: /usr/sbin/exim4: SIGSEGV when remote smtp reject the message

2024-01-12 Thread Andreas Metzler
On 2024-01-11 Giuseppe Sacco wrote: > Package: exim4-daemon-heavy > Version: 4.96-15+deb12u4 > Severity: normal > File: /usr/sbin/exim4 > Dear Maintainer, > I keep finding many messages like this one in paniclog: > 2024-01-11 09:55:20 1rNqqH-008cnX-0s SIGSEGV (fault address: 0x58) > 2024-01-11 0

Bug#1058779: libk5crypto3 fails to install via apt (dpkg error) triggers ci file contains unknown directive 'set'

2024-01-06 Thread Andreas Metzler
On 2023-12-16 Fernando Toledo wrote: > Package: libk5crypto3 > Version: 1.18.3-6+deb11u3 > Severity: important > Dear Maintainer, > running apt upgrade on debian 11 > root@scarlet:~# LANG=C apt upgrade [...] > dpkg: error processing archive > /var/cache/apt/archives/libk5crypto3_1.18.3-6+deb11

Bug#1059387: exim4: CVE-2023-51766

2024-01-01 Thread Andreas Metzler
On 2024-01-01 Salvatore Bonaccorso wrote: > On Mon, Jan 01, 2024 at 04:45:24PM +0100, Andreas Metzler wrote: [...] > > I have prepared updates for either DSA or stable update. (I will be on my > > dayjob again tomorrow, so I will not be that responsive on workdays.) > Hap

Bug#1059387: exim4: CVE-2023-51766

2024-01-01 Thread Andreas Metzler
ood friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' >From ae3c47947917673912c89bf59226f9d205466534 Mon Sep 17 00:00:00 2001 From: Andreas Metzler Date: Sun, 31 Dec 2023 16:44:13 +0100 Subject: [PATCH] CVE-2023-517

Bug#266491: Patch against unstable

2024-01-01 Thread Andreas Metzler
On 2006-08-17 Nigel Williams wrote: > Here's another fix for the bug, this time against the unstable > version. [...] Hello Nigel, could you please doublecheck whether the problem is still present in recent (11.x) versions? cu Andreas -- `What a good friend you are to him, Dr. Maturin. His ot

Bug#325088: netpbm: pnmtopng -alpha produces incorrect output

2023-12-31 Thread Andreas Metzler
On 2005-08-26 Nigel Williams wrote: > Package: netpbm > Version: 2:10.0-8 > Severity: normal > The following sequence of commands should result in an identical bitmap, > but does not. It has a small vertical black bar in it. > --- > pngtopnm yellow_red_gradient.png > x.pnm > pngtopnm -alpha yell

Bug#302715: Please add ppmsvgalib to netpbm

2023-12-31 Thread Andreas Metzler
On 2005-04-02 Michelle Konzack wrote: > Package: netpbm > Version: 2:10.0-8 > Severity: wishlist > Hello Andreas, > please add the 'ppmsvgalib' to the package. I do not like to > compile the packages each time my self by modifiing Makefiles. > And while working on console and with scripts, 'pp

Bug#1059387: exim4: CVE-2023-51766

2023-12-31 Thread Andreas Metzler
On 2023-12-30 Salvatore Bonaccorso wrote: > On Sat, Dec 30, 2023 at 03:40:42PM +0100, Andreas Metzler wrote: > > are you going to release a DSA (I can start preparing one) or should I > > aim for another stable update? > We certainly can do. We have not fully evaluated

Bug#1059387: exim4: CVE-2023-51766

2023-12-30 Thread Andreas Metzler
On 2023-12-24 Salvatore Bonaccorso wrote: > Source: exim4 > Version: 4.97-2 > Severity: important > Tags: security upstream > Forwarded: https://bugs.exim.org/show_bug.cgi?id=3063 [...] > The following vulnerability was published for exim4. > CVE-2023-51766[0]: > | Exim through 4.97 allows SMTP s

Bug#1023954: WX assertion failure within the raw importer

2023-12-29 Thread Andreas Metzler
On 2023-04-25 Michael Deegan wrote: > Package: hugin > Version: 2022.0.0+dfsg-2 > Followup-For: Bug #1023954 > Hello, > I can confirm this bug still also occurs with 2022.0.0+dfsg-2. > I'm currently using dcraw as converter of choice (as having to close > Darktable each time I want to import im

Bug#1058808: exim4: Consider including Authenticated Received Chain (ARC) support in Debian packages

2023-12-16 Thread Andreas Metzler
Control: tags -1 wontfix On 2023-12-16 Athanasius wrote: > Package: exim4 > Version: 4.96-15+deb12u3 > Severity: wishlist > Dear Maintainer, > Given Google's recommendation of using ARC[1] when forwarding emails, > could activation of `EXPERIMENTAL_ARC` support in the Debian packages be > con

Bug#1058807: ITP: acme.sh -- Pure unix shell script implementing ACME client protocol

2023-12-16 Thread Andreas Metzler
On 2023-12-16 Jérémy Lal wrote: [...] > * Package name: acme.sh > Version : 3.0.7 > Upstream Contact: w...@neilpang.com > * URL : https://acme.sh > * License : GPL-3 > Programming Lang: Shell > Description : Pure unix shell script implementing ACME clien

Bug#1057773: [uscan] searchmode=plain disables evaluation of pagemangle

2023-12-08 Thread Andreas Metzler
Package: devscripts Version: 2.23.6 Severity: normal Hello, when searchmode=plain is set pagemangle rules will not be evaluated. Which afaict is not documented. cu Andreas

Bug#1056931: libgphoto2-6: Move files into /usr (incl. DEP17 P7 mitigation)

2023-12-06 Thread Andreas Metzler
On 2023-12-06 Chris Hofstaedtler wrote: [...] > Are there any blockers, or could this move forward? > I expect all other packages will have fixes in unstable on December > 10th, and then I would like to continue with the next steps for the > udev rules migrations. Hello, I have just made the up

Bug#1057285: gsasl: autopkgtest fails sometimes on armhf

2023-12-02 Thread Andreas Metzler
fault" inet://0.0.0.0:19835 imap4d: imap4d (GNU Mailutils 3.16) started imap4d: read error on control stream imap4d: process 16378 finished with code 74 (I/O error) imap4d: Getting auth info for user ametzler imap4d: source=system, name=ametzler, passwd=x, uid=2571, gid=2571, gecos=Andreas Met

Bug#1056931: libgphoto2-6: Move files into /usr (incl. DEP17 P7 mitigation)

2023-11-30 Thread Andreas Metzler
On 2023-11-26 Chris Hofstaedtler wrote: [...] > Please consider applying this patch at your earliest convenience. Looks good to me, thanks! @Ferenc: I can fix this via a Team upload, unless you do not want me to. cu Andreas -- `What a good friend you are to him, Dr. Maturin. His other friends

Bug#1057137: bullseye-pu: package gnutls28/3.7.1-5+deb11u4

2023-11-30 Thread Andreas Metzler
gelog 2023-11-30 11:37:44.0 +0100 @@ -1,3 +1,10 @@ +gnutls28 (3.7.1-5+deb11u4) bullseye; urgency=medium + + * Backport fix for CVE-2023-5981 / GNUTLS-SA-2023-10-23 (timing sidechannel +in RSA-PSK key exchange) from 3.8.2. Closes: #1056188 + + -- Andreas Metzler Thu, 30 Nov 2023 11:3

Bug#1057128: bookworm-pu: package gnutls28/3.7.9-2+deb12u1

2023-11-30 Thread Andreas Metzler
SK key exchange) from 3.8.2. Closes: #1056188 + + -- Andreas Metzler Thu, 30 Nov 2023 07:50:48 +0100 + gnutls28 (3.7.9-2) unstable; urgency=medium * CI: Do not try to run tests/ktls.sh, it uses a helper binary. (Plus gnutls diff -Nru gnutls28-3.7.9/debian/patches/60-auth-rsa_psk-side-step

Bug#1055155: bookworm-pu: package exim4/4.96-15+deb12u3 (2nd try for new bug)

2023-11-19 Thread Andreas Metzler
On 2023-11-04 Andreas Metzler wrote: [...] > Thank you, updated. Another iteration, adding + 76-14-Lookups-Fix-dnsdb-lookup-of-multi-chunk-TXT.-Bug-305.patch Fix regression in dnsdb in CVE-2023-42119 fix. (Upstream bug 3054) dnsdb lookups were swallowing the last character

Bug#1056189: luahbtex: PANIC: unprotected error in call to Lua API (zlib library version does not match - header: 1.2.13, library: 1.3)

2023-11-18 Thread Andreas Metzler
On 2023-11-18 Andreas Metzler wrote: [...] > /tmp/fmtutil.VGYt4Mud (attached) shows: actually attaching now. cu Andreas fmtutil: fmtutil is using the following fmtutil.cnf files (in precedence order): fmtutil: /usr/share/texmf/web2c/fmtutil.cnf fmtutil: /usr/share/texlive/texmf-dist/we

Bug#1056189: luahbtex: PANIC: unprotected error in call to Lua API (zlib library version does not match - header: 1.2.13, library: 1.3)

2023-11-18 Thread Andreas Metzler
Package: texlive-binaries Version: 2023.20230311.66589-7 Severity: important Affects: tex-common Hello, trying to install texlive-latex-base+texlive-plain-generic to fullfill a build dependency resulted in: 8X-- Setting up tex-common (6.18) ... Running mktexlsr. This may take some

Bug#1055780: apt-listchanges: Probably needs special handling for linux/linux-signed

2023-11-11 Thread Andreas Metzler
Package: apt-listchanges Version: 4.4 Severity: normal Hello, linux seems to do strange things with its changelogs: ametzler@argenau:/home$ dpkg -l 'linux-image*' | grep ^ii ii linux-image-6.5.0-2-amd64 6.5.6-1 amd64Linux 6.5 for 64-bit PCs (signed) ii linux-image-6.5.0-3

Bug#873186: please drop transitional package gnupg2

2023-11-05 Thread Andreas Metzler
On 2023-11-04 Bastian Germann wrote: [...] > Please also drop gpgv2, which can be done now because the only reverse > dependency only has an alternative dependency on it. I have done this in debian/experimental GIT. cu Andreas

Bug#873186: please drop transitional package gnupg2

2023-11-05 Thread Andreas Metzler
Control: block -1 by 1055395 1055397 1055398 1055399 1055400 1055401 1055402 1055403 1055404 1055405 1055406 1055407 On 2017-08-25 Holger Levsen wrote: > Package: gnupg2 > Version: 2.1.18-6 > Severity: normal > user: qa.debian@packages.debian.org > usertags: transitional > Please drop trans

Bug#1055407: python3-securesystemslib: recommends transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: python3-securesystemslib Version: 0.26.0-1 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package recommends gnupg2 which has been a transitional package depending on gnupg since 2016. Please refer to gnupg instead. cu Andreas

Bug#1055406: pass-extension-tail: Depends on transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: pass-extension-tail Version: 1.1.1-2.1 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package depends on gnupg2 which has been a transitional package depending on gnupg since 2016. Please depend on gnupg instead. cu Andreas

Bug#1055405: openstack-cluster-installer-utils: Depends on transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: openstack-cluster-installer-utils Version: 42.3.1 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package depends on gnupg2 which has been a transitional package depending on gnupg since 2016. Please depend on gnupg instead. cu Andreas

Bug#1055403: neurodebian-archive-keyring: Depends on transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: neurodebian-archive-keyring Version: 0.42.1 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package depends on gnupg2 which has been a transitional package depending on gnupg since 2016. Please depend on gnupg instead. cu Andreas

Bug#1055404: obs-server: Depends on transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: obs-server Version: 2.9.4-9 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package depends on gnupg2 which has been a transitional package depending on gnupg since 2016. Please depend on gnupg instead. cu Andreas

Bug#1055402: mandos: Depends on transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: mandos Version: 1.8.16-1 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package depends on gnupg2 which has been a transitional package depending on gnupg since 2016. Please depend on gnupg instead. cu Andreas

Bug#1055399: gnupg-pkcs11-scd: suggests transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: gnupg-pkcs11-scd Version: 0.10.0-2 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package suggests gnupg2 which has been a transitional package depending on gnupg since 2016. Please refer to gnupg instead. cu Andreas

Bug#1055401: in-toto: recommends transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: in-toto Version: 1.3.1-1 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package recommends gnupg2 which has been a transitional package depending on gnupg since 2016. Please refer to gnupg instead. cu Andreas

Bug#1055400: gopass: Depends on transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: gopass Version: 1.5.0-1 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package depends on gnupg2 which has been a transitional package depending on gnupg since 2016. Please depend on gnupg instead. cu Andreas

Bug#1055398: debdelta: Depends on transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: debdelta Version: 0.67 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package depends on gnupg2 which has been a transitional package depending on gnupg since 2016. Please depend on gnupg instead. cu Andreas

Bug#1055397: apt-transport-in-toto: Depends on transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: apt-transport-in-toto Version: 0.1.1-3 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package depends on gnupg2 which has been a transitional package depending on gnupg since 2016. Please depend on gnupg instead. cu Andreas

Bug#1055395: acetoneiso: Depends on transition package gnupg2

2023-11-05 Thread Andreas Metzler
Package: acetoneiso Version: 2.4-4 Severity: normal User: pkg-gnupg-ma...@lists.alioth.debian.org Usertags: gnupg2-rdep Hello, this package depends on gnupg2 which has been a transitional package depending on gnupg since 2016. Please depend on gnupg instead. cu Andreas

Bug#1055155: bookworm-pu: package exim4/4.96-15+deb12u3 (2nd try for new bug)

2023-11-04 Thread Andreas Metzler
On 2023-11-04 Salvatore Bonaccorso wrote: > On Wed, Nov 01, 2023 at 12:03:37PM +0100, Andreas Metzler wrote: [...] > > * Update code to 4.96.2, fixing issues with the proxy protocol > > (CVE-2023-42117) and the `dnsdb` lookup subsystem (CVE-2023-42219). It > > als

Bug#1055268: hugin crashes to the point of restarting GDM3

2023-11-03 Thread Andreas Metzler
On 2023-11-03 carsten wolf wrote: > Package: hugin > Version: 2023.0~rc1+dfsg-1 > Severity: normal > Dear Maintainer, > *** Reporter, please consider answering these questions, where appropriate *** >* What led up to the situation? > starting hugin > import 2x png images to stich. >* W

Bug#941804: exim4: remote_smtp_smarthost transport does not set DKIM variables

2023-11-03 Thread Andreas Metzler
On 2023-11-02 Larry Doolittle wrote: > On Thu, Nov 02, 2023 at 04:51:55PM +0100, Andreas Metzler wrote: >> Just to be clear: You have got a domain but lack both control of a >> machine that is not blocked from accessing outgoing port 25 (and could >> deliver) > Right.

Bug#1055238: pinentry: Please add bootstrapping profile

2023-11-02 Thread Andreas Metzler
On 2023-11-02 Samuel Thibault wrote: > Source: pinentry > Severity: normal > Tags: patch > Hello, > When bootstrapping a new port, buildds needs to use gnupg to sign > packages, which depends on gpg-agent, which depends on pinentry. But > pinentry build-deps on qt, gtk etc. which we don't really

Bug#941804: exim4: remote_smtp_smarthost transport does not set DKIM variables

2023-11-02 Thread Andreas Metzler
On 2023-10-28 Larry Doolittle wrote: > Andreas - > On Mon, Oct 16, 2023 at 10:53:17AM -0700, Larry Doolittle wrote: > > My use case is being stuck behind an ISP's firewall, > > so the smarthost is supplied by the ISP. When the ISP > > delivers the mail to gmail, google needs some indication > >

Bug#1042659: closed by Debian FTP Masters (reply to Félix Sipma ) (Bug#1042659: fixed in restic 0.16.0-1)

2023-11-01 Thread Andreas Metzler
On 2023-11-01 Debian Bug Tracking System wrote: [...] > #1042659: restic: FTBFS with Sphinx 7.1, docutils 0.20: TypeError: not all > arguments converted during string formatting > It has been closed by Debian FTP Masters > (reply to Félix Sipma ). [...] >* New upstream version 0.16.0 (Clos

Bug#1023601: libgpgme-dev: removal of gpgme-config breaks the build of software relying on it

2023-11-01 Thread Andreas Metzler
On 2023-11-01 Vincent Lefevre wrote: > On 2023-11-01 18:39:24 +0100, Andreas Metzler wrote: > > I am closing this since afaict this is a solved issue and I do not see > > any TODOs on the gpgme side. > > https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=gpgme-config-transiti

Bug#1042659: restic: diff for NMU version 0.14.0-1.1

2023-11-01 Thread Andreas Metzler
c-fix-building-with-Sphinx-6.patch from upstream to fix +FTBFS against sphinx >= 6. Closes: #1042659 + + -- Andreas Metzler Wed, 01 Nov 2023 13:49:52 +0100 + restic (0.14.0-1) unstable; urgency=medium * New upstream version 0.14.0 (Closes: #1018154) diff -Nru restic-0.14.0/debian/patc

Bug#1055155: bookworm-pu: package exim4/4.96-15+deb12u3 (2nd try for new bug)

2023-11-01 Thread Andreas Metzler
he `dnsdb` lookup subsystem (CVE-2023-42219). It +also includes additional hardening for spf lookups, however CVE-2023-42218 +was diagnosed as a vulnerability in the libspf2 library and needs to be +addressed there. Closes: #1053310 + + -- Andreas Metzler Wed, 01 Nov 2023 07:07:57 +0100

Bug#1049899: bookworm-pu: package exim4/4.96-15+deb12u3

2023-11-01 Thread Andreas Metzler
ulnerability in the libspf2 library and needs to be +addressed there. Closes: #1053310 + + -- Andreas Metzler Wed, 01 Nov 2023 07:07:57 +0100 + exim4 (4.96-15+deb12u2) bookworm-security; urgency=high * Non-maintainer upload by the Security Team. diff -Nru exim4-4.96/debian/patches/75_74-C

Bug#1053310: Fixes for stable/oldstable?

2023-10-31 Thread Andreas Metzler
On 2023-10-31 Tomas Pospisek wrote: [...] > PS: I'd prefer this bugreport to be open as long as the stable and > oldstable packages are still vulnerable... Hello Thomas, The Debian BTS does not use a simple open/close logic, it tracks which specific versions a bug applies to. If you look at h

Bug#1053310: Fixes for stable/oldstable?

2023-10-31 Thread Andreas Metzler
On 2023-10-31 Tomas Pospisek wrote: > On Tue, 31 Oct 2023, Salvatore Bonaccorso wrote: [...] >> Fixes for CVE-2023-42117 and CVE-2023-42119 are right now considered >> no-dsa (see comment on the security-tracker about it), and are going >> to be fixed in the next point releases. > The notes say:

Bug#1042659: restic: FTBFS with Sphinx 7.1, docutils 0.20: TypeError: not all arguments converted during string formatting

2023-10-30 Thread Andreas Metzler
Colntrol: tags -1 patch On 2023-07-30 Lucas Nussbaum wrote: > Source: restic [...] > restic fails to build with Sphinx 7.1 and docutils 0.20, both of which > are currently available in experimental. > Relevant part (hopefully): [...] > > > > Exception occurred: > > File "/usr/lib/python3/dist

Bug#1054786: gpgme1.0: FTBFS: dh_install: error: missing files, aborting

2023-10-27 Thread Andreas Metzler
Contol: tags 1039724 - pending Contol: tags 1039724 - wontfix On 2023-10-27 Lucas Nussbaum wrote: > Source: gpgme1.0 > Version: 1.18.0-3 [...] > During a rebuild of all packages in sid, your package failed to build > on amd64. > Relevant part (hopefully): [...] > > dh_install: warning: Cannot fi

Bug#1054129: Hugin fails to pass error messages from enblend to user

2023-10-27 Thread Andreas Metzler
Control: forwarded -1 https://bugs.launchpad.net/hugin/+bug/2041687 On 2023-10-17 Michael Deegan wrote: > Package: hugin > Version: 2023.0~beta1+dfsg-1 > Severity: normal > Hello, like in #799730, I encountered a case where stitching would abort, > and the user would be left wondering why, with

Bug#1025420: exim4: ${run}expansion fail Bug stiill open [TT#2568022]

2023-10-25 Thread Andreas Metzler
On 2023-10-23 SerNet Support Kevin Ivory wrote: [...] > That binary does not fix the problem of quote with space included: > # /usr/sbin/exim4 -be '${run{/usr/bin/echo ${quote:hello world}}}' > Failed: Expansion of "${quote:hello" from command "/usr/bin/echo > ${quote:hello world}" in ${run} exp

Bug#1025420: exim4: ${run}expansion fail Bug stiill open [TT#2568022]

2023-10-23 Thread Andreas Metzler
On 2023-10-23 SerNet Support Kevin Ivory wrote: > Hello Andreas, > thanks for the info. > I am not familiar with the Repository format at > https://salsa.debian.org/exim-team/exim4/-/tree/12_bookworm?ref_type=heads > Is there a binary or a package that I can test or do > I have to patch and comp

Bug#1025420: exim4: ${run}expansion fail Bug stiill open [TT#2568022]

2023-10-23 Thread Andreas Metzler
On 2023-10-18 SerNet Support Kevin Ivory wrote: > Hello Andreas, > I just realized Debian Bug #1025420 is closed even though > we are still running into it in exim 4.96-15+deb12u2 > Please try: > # /usr/sbin/exim4 -be '${run{/usr/bin/echo ${quote:hello world}}}' > Failed: Expansion of "${quote:

Bug#1054298: apt-listchanges: 4.4 still/again showing old changelogs

2023-10-22 Thread Andreas Metzler
On 2023-10-21 Jonathan Kamens wrote: > On 10/21/23 12:24, Andreas Metzler wrote: > > However I still do not get it. > > * Is there a useful scenario where someone would set save_seen=none in > >the apt stanza? > *shrug* I don't know. That design decision wa

Bug#1054298: apt-listchanges: 4.4 still/again showing old changelogs

2023-10-21 Thread Andreas Metzler
On 2023-10-21 Jonathan Kamens wrote: > I just noticed this: > On 10/21/23 01:39, Andreas Metzler wrote: [...] > > *save_seen=none* > How did you end up with "save_seen=none" here? That's not the default, or at > least it shouldn't be if everything is worki

Bug#1053870: CVE-2023-42118 and perceived impact

2023-10-21 Thread Andreas Metzler
On 2023-10-20 Jeremy Stanley wrote: > It looks to me like the default Exim config in Debian explicitly > calls /usr/bin/spfquery.mail-spf-perl from the spf-tools-perl > package, not the libspf2 implementation supplied by the spfquery > package. Also spf-tools-perl is suggested by exim4-base, while

Bug#1054298: apt-listchanges: 4.4 still/again showing old changelogs

2023-10-20 Thread Andreas Metzler
Package: apt-listchanges Version: 4.4 Severity: normal Hello, I had tested 4.0 and 4.1 and had seen old changelogs. Upgrading to 4.2 did not fix this (although it should have) so I purged apt-listchanges, manually removed /var/lib/apt/listchanges* and reinstalled apt-listchanges. Things seemed to

Bug#941804: exim4: remote_smtp_smarthost transport does not set DKIM variables

2023-10-16 Thread Andreas Metzler
On 2023-10-16 Larry Doolittle wrote: > Control: > found 941804 4.94.2-7+deb11u1 > found 941804 4.96-15+deb12u2 > found 941804 4.97~RC1-2 > severity 941804 normal > thanks > This exim4 bug has taken on increased importance now that gmail requires DKIM > on all (?) incoming messages. > I checked a

Bug#1041731: Hyphens in man pages

2023-10-15 Thread Andreas Metzler
On 2023-10-15 Wookey wrote: [...] > OK. So I read all that, and learned a whole load of stuff I was quite > happy not knowing about. > However despite reading it all, and especially this bit: > "Whenever I've maintained man pages in roff I tend to be precise in > > the usage of - and \-, but TBH

Bug#1053327: p11-kit: Please add nodoc build profile

2023-10-15 Thread Andreas Metzler
On 2023-10-01 Samuel Thibault wrote: > Package: p11-kit > Version: 0.25.0-4 > Severity: important > Tags: patch > Hello, > p11-kit's build-dependency on gtk-doc-tools introduces an ample > dependency loop. This can be avoided by adding a nodoc profile, as the > attached patch does (chmod +x debi

Bug#1053925: apt-listchanges: Data left after purge

2023-10-14 Thread Andreas Metzler
Package: apt-listchanges Version: 4.2 Severity: normal Hello, root@argenau:~# dpkg --purge apt-listchanges (Reading database ... 181039 files and directories currently installed.) Removing apt-listchanges (4.2) ... Purging configuration files for apt-listchanges (4.2) ... Processing triggers for

Bug#1053788: Mismatching references to /etc/default/exim(4)

2023-10-11 Thread Andreas Metzler
Control: tags -1 pending On 2023-10-11 Eugene Berdnikov wrote: > Package: exim4-config > Version: 4.97~RC1-2 > Severity: normal > Hello. > Systemd unit "exi4.service" have "EnvironmentFile=-/etc/default/exim4", > while post-install script generates /etc/default/exim (without "4"). [...] > A

Bug#1049899: bookworm-pu: package exim4/4.96-15+deb12u2

2023-10-07 Thread Andreas Metzler
On 2023-10-07 Jonathan Wiltshire wrote: [...] > The version number in this request matches one we've had via a DSA (5512); > are they the same or does the proposed upload supercede it? [...] Hello, I will need to rebase the proposed changes version on top of the DSA. I got early notice that a s

<    1   2   3   4   5   6   7   8   9   10   >