awffull is marked for autoremoval from testing

2017-11-04 Thread Debian testing autoremoval watch
awffull 3.10.2-4 is marked for autoremoval from testing on 2017-11-20 It is affected by these RC bugs: 728362: awffull: /etc/cron.daily/awffull needs update 833915: awffull: awffull cron script broken

Bug#769719: nviboot fails to send recovery mail

2017-11-04 Thread Jakub Wilk
Control: tags -1 + security * Adam M. Costello , 2014-11-15, 20:47: (su - nobody -s /bin/sh -c "$SENDMAIL $owner < $i" &) /dev/null 2>&0 Note that "$i" is a name of a file any user can create. This allows executing arbitrary code as user "nobody". PoC exploit: $ echo 'X-vi-recover-path: /e

Processed: Re: Bug#769719: nviboot fails to send recovery mail

2017-11-04 Thread Debian Bug Tracking System
Processing control commands: > tags -1 + security Bug #769719 [nvi] nviboot fails to send recovery mail Added tag(s) security. -- 769719: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769719 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Processed: Merge duplicates, seems RC

2017-11-04 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forcemerge 728362 833915 Bug #728362 [awffull] awffull: /etc/cron.daily/awffull needs update Bug #833915 [awffull] awffull cron script broken Severity set to 'important' from 'normal' Marked as found in versions awffull/3.10.2-4. Added tag(s) patc

Bug#880788: w3c-markup-validator build depends on removed transitional package lynx-cur

2017-11-04 Thread Adrian Bunk
Source: w3c-markup-validator Version: 1.3+dfsg-3 Severity: serious Tags: buster sid The following packages have unmet dependencies: builddeps:w3c-markup-validator : Depends: lynx-cur but it is not installable Please update the build dependency to lynx.

Bug#880784: webdruid build depends on removed libgd2*-dev provides

2017-11-04 Thread Adrian Bunk
Source: webdruid Version: 0.5.4-14 Severity: serious Tags: buster sid The following packages have unmet dependencies: builddeps:webdruid : Depends: libgd2-noxpm-dev but it is not installable Please update the build dependency to libgd-dev.

Bug#880779: png2html build depends on removed libgd2*-dev provides

2017-11-04 Thread Adrian Bunk
Source: png2html Version: 1.1-6 Severity: serious Tags: buster sid The following packages have unmet dependencies: builddeps:png2html : Depends: libgd2-noxpm-dev but it is not installable Please change the build dependency to libgd-dev.

Bug#880764: awffull build depends on removed libgd2*-dev provides

2017-11-04 Thread Adrian Bunk
Source: awffull Version: 3.10.2-4 Severity: serious Tags: buster sid The following packages have unmet dependencies: builddeps:awffull : Depends: libgd2-xpm-dev but it is not installable or libgd2-noxpm-dev but it is not installable Please change the build dependen