Bug#853005: marked as done (unblock: allegro4.4/2:4.4.2-10)

Your message dated Sun, 29 Jan 2017 07:51:00 + with message-id <161fd236-4962-f124-9ef6-63817b471...@thykier.net> and subject line Re: Bug#853005: unblock: allegro4.4/2:4.4.2-10 has caused the Debian Bug report #853005, regarding unblock: allegro4.4/2:4.4.2-10 to be marked as done. This means

Bug#852938: marked as done (nmu: botch_0.21-2)

Your message dated Sun, 29 Jan 2017 08:37:40 +0100 with message-id <20170129073740.e662zq5nt2vfm...@seneca.home.org> and subject line Re: Bug#852938: nmu: botch_0.21-2 has caused the Debian Bug report #852938, regarding nmu: botch_0.21-2 to be marked as done. This means that you claim that the pro

Bug#850827: marked as done (unblock: leap-cli/1.9-2)

Your message dated Sat, 28 Jan 2017 22:39:44 + with message-id <20170128223944.uy66bia4jh6iz...@powdarrmonkey.net> and subject line Re: Bug#850827: unblock: leap-cli/1.9-2 has caused the Debian Bug report #850827, regarding unblock: leap-cli/1.9-2 to be marked as done. This means that you clai

Bug#851435: marked as done (unblock: duperemove/0.11-1)

Your message dated Sat, 28 Jan 2017 22:37:17 + with message-id <20170128223717.j54ex2pehvuz3...@powdarrmonkey.net> and subject line Re: Bug#851435: unblock: duperemove/0.11~beta4-1 has caused the Debian Bug report #851435, regarding unblock: duperemove/0.11-1 to be marked as done. This means t

Bug#852865: marked as done (unblock: gnome-orca/3.22.2-2)

Your message dated Sat, 28 Jan 2017 22:25:19 + with message-id <20170128222519.sbb3imlzboom6...@powdarrmonkey.net> and subject line Re: Bug#852865: unblock: gnome-orca/3.22.2-2 has caused the Debian Bug report #852865, regarding unblock: gnome-orca/3.22.2-2 to be marked as done. This means tha

Bug#850440: jessie-pu: package w3m/0.5.3-19+deb8u2

On January 28, 2017 at 5:26PM +, adam (at adam-barratt.org.uk) wrote: >> w3m (0.5.3-19+deb8u2) jessie; urgency=medium >> >> * Fix multiple vulnerabilities (closes: #850432) > > How soon {w,sh}ould we expect a request for +deb8u3 with another huge > pile of changes? Currently, there is no pla

Bug#852938: nmu: botch_0.21-2

Hi, Quoting Ralf Treinen (2017-01-28 12:48:08) > nmu botch_0.21-2 . mips mips64el mipsel ppc64el s390x . unstable . -m > "rebuild against dose3 (5.0.1-8)" it might be best to close this bug without taking action. botch was reported as FTBFS today (#852917), so triggering a binNMU right now woul

Bug#852970: RM: pbcopper/0.0.1+20161202-2

على السبت 28 كانون الثاني 2017 ‫07:45، كتب Simon McVittie: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: rm > X-Debbugs-Cc: Afif Elghraoui > > Afif Elghraoui wrote: >> There is nothing actually wrong with pbcopper, but there is no se

Bug#853005: unblock: allegro4.4/2:4.4.2-10

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package allegro4.4 I would like to get an unblock for allegro4.4 fixing build-depeding on oss4-dev on linux as reported in #852983. Debdiff attached. unblock allegro4.4/2:4

Bug#853001: Unblock tigervnc/1.7.0+dfsg-3

Package: release.debian.org Severity: normal Usertags: unblock Hi I would like you to unblock the last upload of tigervnc. It solved a security RC bug. tigervnc (1.7.0+dfsg-3) unstable; urgency=high [ Salvatore Bonaccorso ] * Fix buffer overflow in ModifiablePixelBuffer::fillRect (CVE-2017-

Re: Draft for taging 32 RC bugs with can-defer, will-remove or is-blocker

On Sat, Jan 28, 2017 at 07:20:00PM +, Niels Thykier wrote: > Moritz Mühlenhoff: > > Niels Thykier schrieb: > >>> 852603virglrenderer can-defer virglrenderer: > >>> CVE-2016-10163 > >>> 852604virglrenderer can-defer virglrenderer: > >>> CVE-2017-5580 >

Bug#852998: jessie-pu: package dropbear/2014.65-1

Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Moritz Mühlenhoff from the Security Team suggested to fix dropbear's known vulnerabilities (CVE-2016-3116 and CVE-2016-740[6-8]) via a point release, since they don't warrant a DSA.

NEW changes in stable-new

Processing changes file: guile-2.0_2.0.11+1-9+deb8u1_mipsel.changes ACCEPT

Re: Draft for taging 32 RC bugs with can-defer, will-remove or is-blocker

Moritz Mühlenhoff: > Niels Thykier schrieb: >>> 852603 virglrenderer can-defer virglrenderer: >>> CVE-2016-10163 >>> 852604 virglrenderer can-defer virglrenderer: >>> CVE-2017-5580 > > This hasn't been in a stable release yet and it already orphaned. If

Processed: 0.11~beta4-1 -> 0.11-1

Processing control commands: > retitle -1 unblock: duperemove/0.11-1 Bug #851435 [release.debian.org] unblock: duperemove/0.11~beta4-1 Changed Bug title to 'unblock: duperemove/0.11-1' from 'unblock: duperemove/0.11~beta4-1'. -- 851435: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851435 De

Bug#851435: 0.11~beta4-1 -> 0.11-1

Control: retitle -1 unblock: duperemove/0.11-1 Hi! On Jan 26 (ie, 10 days before the hard freeze) I've sponsor-uploaded Peter's update, which replaces a beta with a regular upstream release, plus misc changes to the packaging. The rationale being, if you agree to let it pass, we want the package

Bug#827061: transition: openssl

On Sat, Jun 11, 2016 at 20:59:53 +0200, Kurt Roeckx wrote: > OpenSSL will soon release a new upstream version with a new > soname. This new version will break various packages, see: > https://lists.debian.org/debian-devel/2016/06/msg00205.html > > I'm currently not sure when the release will be

Bug#852987: marked as done (unblock: fig2dev/1:3.2.6a-2)

Your message dated Sat, 28 Jan 2017 18:23:01 + with message-id <20170128182301.y6z4ghmzsdnt2...@powdarrmonkey.net> and subject line Re: Bug#852987: unblock: fig2dev/1:3.2.6a-2 has caused the Debian Bug report #852987, regarding unblock: fig2dev/1:3.2.6a-2 to be marked as done. This means that

Bug#852990: marked as done (unblock: s-nail/14.8.16-1)

Your message dated Sat, 28 Jan 2017 18:25:58 + with message-id <20170128182558.ewk3oul7mnjsy...@powdarrmonkey.net> and subject line Re: Bug#852990: unblock: s-nail/14.8.16-1 has caused the Debian Bug report #852990, regarding unblock: s-nail/14.8.16-1 to be marked as done. This means that you

Bug#852993: marked as done (unblock: gall/1.2-1)

Your message dated Sat, 28 Jan 2017 18:19:45 + with message-id <20170128181945.6kntssdc737zr...@powdarrmonkey.net> and subject line Re: Bug#852993: unblock: gall/1.2-1 has caused the Debian Bug report #852993, regarding unblock: gall/1.2-1 to be marked as done. This means that you claim that t

Bug#852993: unblock: gall/1.2-1

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package gall A segfault bug was found by Ian Learmonth which prevented git pushes to a Gitano based git server with objects above a certain size. Sadly he found this bug too

Bug#852855: marked as done (Unblock tigervnc/1:1.3.9-9)

Your message dated Sat, 28 Jan 2017 18:15:38 + with message-id <20170128181538.uu6sb254ozij7...@powdarrmonkey.net> and subject line Re: Bug#852855: Unblock tigervnc/1:1.3.9-9 has caused the Debian Bug report #852855, regarding Unblock tigervnc/1:1.3.9-9 to be marked as done. This means that yo

NEW changes in stable-new

Processing changes file: guile-2.0_2.0.11+1-9+deb8u1_armel.changes ACCEPT Processing changes file: guile-2.0_2.0.11+1-9+deb8u1_armhf.changes ACCEPT

Bug#852990: unblock: s-nail/14.8.16-1

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Hi Please unblock package s-nail The upload to unstable with a new upstream version (but only containing the changes to fix this issue), address #852934, a local root privilege escalation.

Re: Draft for taging 32 RC bugs with can-defer, will-remove or is-blocker

Niels Thykier schrieb: >> 852603 virglrenderer can-defer virglrenderer: >> CVE-2016-10163 >> 852604 virglrenderer can-defer virglrenderer: >> CVE-2017-5580 This hasn't been in a stable release yet and it already orphaned. If noone picks it up or fixes

Bug#852987: unblock: fig2dev/1:3.2.6a-2

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package fig2dev fig2dev 3.2.6a-2 fixes a RC bug #852915 and was uploaded this morning. It is a minimal change over 3.2.6a-1, I only added an additional build dependency, whic

NEW changes in stable-new

Processing changes file: guile-2.0_2.0.11+1-9+deb8u1_mips.changes ACCEPT

Bug#852970: marked as done (RM: pbcopper/0.0.1+20161202-2)

Your message dated Sat, 28 Jan 2017 18:44:36 +0100 with message-id <20170128174436.t56utch7l7tn6...@betterave.cristau.org> and subject line Re: Bug#852970: RM: pbcopper/0.0.1+20161202-2 has caused the Debian Bug report #852970, regarding RM: pbcopper/0.0.1+20161202-2 to be marked as done. This mea

Bug#851151: jessie-pu: package binutils/2.25-5+deb8u1.1

On Sat, Jan 28, 2017 at 05:01:36PM +, Adam Barratt wrote: >Control: tags -1 + confirmed > >On Thu, 2017-01-12 at 13:23 +, Steve McIntyre wrote: >> Binutils in jessie is building (some) broken packages on arm64, >> particularly those using gold. See #850814 for more details - I've >> scanned

Bug#850440: jessie-pu: package w3m/0.5.3-19+deb8u2

Control: tags -1 + moreinfo On Sat, 2017-01-07 at 00:17 +0900, Tatsuya Kinoshita wrote: > I'd like to update package w3m in jessie to fix additional security > issues to 0.5.3-19+deb8u1, mentioned in . > > See this changelog and the attached debdiff. > > w3m (0.5.

Processed: Re: Bug#850440: jessie-pu: package w3m/0.5.3-19+deb8u2

Processing control commands: > tags -1 + moreinfo Bug #850440 [release.debian.org] jessie-pu: package w3m/0.5.3-19+deb8u2 Added tag(s) moreinfo. -- 850440: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850440 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#840643: jessie-pu: package cups/1.7.5-11+deb8u1

Control: tags -1 + moreinfo On Tue, 2016-12-20 at 09:20 +0100, Didier 'OdyX' Raboud wrote: > Control: tag -1 -moreinfo > > Le samedi, 17 décembre 2016, 11.38:59 h CET Julien Cristau a écrit : > > > - and debdiff > > > cups_1.7.5-11+deb8u2.debdiff > > > > The debdiff is the one we tend to look

Processed: Re: Bug#840643: jessie-pu: package cups/1.7.5-11+deb8u1

Processing control commands: > tags -1 + moreinfo Bug #840643 [release.debian.org] jessie-pu: package cups/1.7.5-11+deb8u1 Added tag(s) moreinfo. -- 840643: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840643 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Processed: Re: Bug#851151: jessie-pu: package binutils/2.25-5+deb8u1.1

Processing control commands: > tags -1 + confirmed Bug #851151 [release.debian.org] jessie-pu: package binutils/2.25-5+deb8u1.1 Added tag(s) confirmed. -- 851151: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851151 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#851151: jessie-pu: package binutils/2.25-5+deb8u1.1

Control: tags -1 + confirmed On Thu, 2017-01-12 at 13:23 +, Steve McIntyre wrote: > Binutils in jessie is building (some) broken packages on arm64, > particularly those using gold. See #850814 for more details - I've > scanned the archive for affected packages. > > There's a simple fix propos

Bug#837388: jessie-pu: package scons-doc/2.3.1-1

Ping? On Sat, 2016-09-17 at 22:27 +0100, Adam D. Barratt wrote: > Control: tags -1 + moreinfo > > On Sun, 2016-09-11 at 11:13 +0200, Jörg Frings-Fürst wrote: > > the version 2.3.1-1 contains non free svg files[1]. > > The attached debdiff replace them with free files from upstream. > > So far as

NEW changes in stable-new

Processing changes file: guile-2.0_2.0.11+1-9+deb8u1_arm64.changes ACCEPT Processing changes file: guile-2.0_2.0.11+1-9+deb8u1_ppc64el.changes ACCEPT

Processed: Re: Bug#850931: jessie-pu: package mongodb/1:2.4.10-5

Processing control commands: > tags -1 + confirmed Bug #850931 [release.debian.org] jessie-pu: package mongodb/1:2.4.10-5 Added tag(s) confirmed. -- 850931: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850931 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#850931: jessie-pu: package mongodb/1:2.4.10-5

Control: tags -1 + confirmed On Wed, 2017-01-11 at 12:46 +0200, Apollon Oikonomopoulos wrote: > - CVE-2016-6494[1] is fixed by backporting the patch already applied to >2.6 (once in sid). > > - TEMP-0833087-C5410D[2] is fixed by reimplementing upstream's fix for >2.6[3] using the infr

Bug#851105: jessie-pu: package ndoutils/1.4b9-1.1+deb8u1

Control: tags -1 + confirmed On Thu, 2017-01-12 at 03:22 +0100, Andreas Beckmann wrote: > ndoutils is one of two packages remaining in the archive that use ucf > unconditionally during postrm purge, causing piuparts failures. > Since the package has been removed after jessie, I propose to finally

Processed: Re: Bug#851105: jessie-pu: package ndoutils/1.4b9-1.1+deb8u1

Processing control commands: > tags -1 + confirmed Bug #851105 [release.debian.org] jessie-pu: package ndoutils/1.4b9-1.1+deb8u1 Added tag(s) confirmed. -- 851105: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851105 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

NEW changes in stable-new

Processing changes file: guile-2.0_2.0.11+1-9+deb8u1_i386.changes ACCEPT Processing changes file: guile-2.0_2.0.11+1-9+deb8u1_s390x.changes ACCEPT Processing changes file: smemstat_0.01.10-2_armel.changes ACCEPT

Processed: tagging 852435

Processing commands for cont...@bugs.debian.org: > tags 852435 + pending Bug #852435 [release.debian.org] RM: ccache-dbgsym [amd64] -- RoQA; cruft Added tag(s) pending. > thanks Stopping processing here. Please contact me if you need assistance. -- 852435: http://bugs.debian.org/cgi-bin/bugrepor

Re: Freeze exception for the LDC D compiler and rdeps

2017-01-25 8:52 GMT+01:00 Julien Cristau : > On Mon, Jan 23, 2017 at 16:12:36 +0100, Matthias Klumpp wrote: > >> Hello! >> >> LDC[1] is an LLVM-based compiler for the D programming language. >> Due to a mistake, we currently have a Beta release of LDC in Debian, >> and of course we would like to sh

NEW changes in stable-new

Processing changes file: smemstat_0.01.10-2_armhf.changes ACCEPT

Processed: tagging 852432, retitle 852432 to RM: cgiemail -- RoST; unmaintained

Processing commands for cont...@bugs.debian.org: > tags 852432 + pending Bug #852432 [release.debian.org] RM: cgiemail/1.6-37 Added tag(s) pending. > retitle 852432 RM: cgiemail -- RoST; unmaintained Bug #852432 [release.debian.org] RM: cgiemail/1.6-37 Changed Bug title to 'RM: cgiemail -- RoST; u

NEW changes in stable-new

Processing changes file: smemstat_0.01.10-2_arm64.changes ACCEPT Processing changes file: smemstat_0.01.10-2_i386.changes ACCEPT Processing changes file: smemstat_0.01.10-2_mips.changes ACCEPT Processing changes file: smemstat_0.01.10-2_mipsel.changes ACCEPT Processing changes file: smemsta

Bug#852970: RM: pbcopper/0.0.1+20161202-2

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: rm X-Debbugs-Cc: Afif Elghraoui Afif Elghraoui wrote: > There is nothing actually wrong with pbcopper, but there is no sense in > releasing this package for stretch since it basically only exists t

Processed: Re: Bug#852966: jessie-pu: package libxi/2:1.7.4-1+deb8u1

Processing control commands: > tags -1 + confirmed Bug #852966 [release.debian.org] jessie-pu: package libxi/2:1.7.4-1+deb8u1 Added tag(s) confirmed. -- 852966: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852966 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#852966: jessie-pu: package libxi/2:1.7.4-1+deb8u1

Control: tags -1 + confirmed On Sat, 2017-01-28 at 16:23 +0100, Julien Cristau wrote: > I think this is the last one for this round. It's also the one I'm > least confident about. But it's been in sid and wheezy-lts for a while, > and a couple of issues have already been found and fixed, so mayb

Bug#852966: jessie-pu: package libxi/2:1.7.4-1+deb8u1

Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu I think this is the last one for this round. It's also the one I'm least confident about. But it's been in sid and wheezy-lts for a while, and a couple of issues have already been

Processed: Re: Bug#852965: jessie-pu: package libxvmc/2:1.0.8-2+deb8u1

Processing control commands: > tags -1 + confirmed Bug #852965 [release.debian.org] jessie-pu: package libxvmc/2:1.0.8-2+deb8u1 Added tag(s) confirmed. -- 852965: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852965 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#852965: jessie-pu: package libxvmc/2:1.0.8-2+deb8u1

Control: tags -1 + confirmed On Sat, 2017-01-28 at 16:12 +0100, Julien Cristau wrote: > +libxvmc (2:1.0.8-2+deb8u1) jessie; urgency=medium > + > + * Avoid buffer underflow on empty strings (CVE-2016-7953) Please go ahead. Regards, Adam

Bug#852961: jessie-pu: package libxv/2:1.0.10-1+deb8u1

Control: tags -1 + confirmed On Sat, 2017-01-28 at 16:05 +0100, Julien Cristau wrote: > We're getting used to this by now aren't we. Heh. > +libxv (2:1.0.10-1+deb8u1) jessie; urgency=high > + > + * Protocol handling issues in libXv (CVE-2016-5407) Please go ahead. Regards, Adam

Processed: Re: Bug#852961: jessie-pu: package libxv/2:1.0.10-1+deb8u1

Processing control commands: > tags -1 + confirmed Bug #852961 [release.debian.org] jessie-pu: package libxv/2:1.0.10-1+deb8u1 Added tag(s) confirmed. -- 852961: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852961 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#852958: jessie-pu: package libxtst/2:1.2.2-1+deb8u1

Control: tags -1 + confirmed On Sat, 2017-01-28 at 15:55 +0100, Julien Cristau wrote: > +libxtst (2:1.2.2-1+deb8u1) jessie; urgency=medium > + > + * Insufficient validation of data from the X server can cause out of > +boundary memory access or endless loops. Addresses CVE-2016-7951 and > +

Processed: Re: Bug#852958: jessie-pu: package libxtst/2:1.2.2-1+deb8u1

Processing control commands: > tags -1 + confirmed Bug #852958 [release.debian.org] jessie-pu: package libxtst/2:1.2.2-1+deb8u1 Added tag(s) confirmed. -- 852958: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852958 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#852965: jessie-pu: package libxvmc/2:1.0.8-2+deb8u1

Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Getting there, promise. Cheers, Julien diff -u libxvmc-1.0.8/debian/changelog libxvmc-1.0.8/debian/changelog --- libxvmc-1.0.8/debian/changelog +++ libxvmc-1.0.8/debian/changelog @

Bug#852961: jessie-pu: package libxv/2:1.0.10-1+deb8u1

Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu We're getting used to this by now aren't we. Cheers, Julien diff -u libxv-1.0.10/debian/changelog libxv-1.0.10/debian/changelog --- libxv-1.0.10/debian/changelog +++ libxv-1.0.10/d

Bug#852958: jessie-pu: package libxtst/2:1.2.2-1+deb8u1

Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu And another one. Cheers, Julien diff -u libxtst-1.2.2/debian/changelog libxtst-1.2.2/debian/changelog --- libxtst-1.2.2/debian/changelog +++ libxtst-1.2.2/debian/changelog @@ -1,3

Processed: tagging 852954, tagging 852952

Processing commands for cont...@bugs.debian.org: > # not ready yet; RoM > tags 852954 + moreinfo Bug #852954 [release.debian.org] jessie-pu: package libxrender/1:0.9.8-1+deb8u1 Added tag(s) moreinfo. > tags 852952 + moreinfo Bug #852952 [release.debian.org] jessie-pu: package libxrandr/2:1.4.2-1+d

Re: Draft for taging 32 RC bugs with can-defer, will-remove or is-blocker

On Sat, 2017-01-28 at 16:09 +0200, Adrian Bunk wrote: > On Sat, Jan 28, 2017 at 01:20:00PM +, Niels Thykier wrote: > > * can-defer (serious bug, but not a blocker - could be fixed in via pu > > or a security upload) > >- This implies a "stretch-ignore". > > These are mostly

Bug#852945: RM: packages that migrated by mistake, batch 1

On Sat, 28 Jan 2017 at 15:21:53 +0200, Adrian Bunk wrote: > What is the point in asking for manual removal of packages that are > mostly already scheduled for autoremoval 11 hours from now? Partly making sure that they don't escape the autoremoval for whatever reason; partly trying to get them "o

Processed: Add bug dependencies

Processing commands for cont...@bugs.debian.org: > block 851871 by 852008 852009 Bug #851871 [release.debian.org] RM: gcc-5/5.4.1-4 851871 was not blocked by any bugs. 851871 was not blocking any bugs. Added blocking bug(s) of 851871: 852008 and 852009 > thanks Stopping processing here. Please co

Bug#852954: jessie-pu: package libxrender/1:0.9.8-1+deb8u1

Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu One more. Cheers, Julien diff -u libxrender-0.9.8/debian/changelog libxrender-0.9.8/debian/changelog --- libxrender-0.9.8/debian/changelog +++ libxrender-0.9.8/debian/changelog @@

Re: Draft for taging 32 RC bugs with can-defer, will-remove or is-blocker

On Sat, Jan 28, 2017 at 01:20:00PM +, Niels Thykier wrote: > Hi, > > I have a quick review of the RC bugs in *key* packages that are unfixed > in unstable according to UDD. The following is a list of 32 of these > (out of about 180) with proposed verdicts/tagging to start a debate > about the

Bug#852952: jessie-pu: package libxrandr/2:1.4.2-1+deb8u1

Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu As with libx11 and libxfixes... Cheers, Julien diff -u libxrandr-1.4.2/debian/changelog libxrandr-1.4.2/debian/changelog --- libxrandr-1.4.2/debian/changelog +++ libxrandr-1.4.2/de

Bug#851989: release.debian.org: de-branding Icedove, Thunderbird packages in Stretch?

On Sat, Jan 28, 2017 at 08:55:14 +0100, Carsten Schoenert wrote: > Mozilla upstream released Thunderbird 45.7.0 two days ago. Are you o.k. > if we plan the upload about this version into unstable? > I mean, there are only two packages with that dependency on the -dev > package and other packages w

Bug#852947: jessie-pu: package libx11/2:1.6.2-3+deb8u1

Control: tags -1 + confirmed On Sat, 2017-01-28 at 14:29 +0100, Julien Cristau wrote: > +libx11 (2:1.6.2-3+deb8u1) jessie; urgency=medium > + > + * Insufficient validation of data from the X server can cause out of > +boundary memory read (XGetImage()) or write (XListFonts()). > +Addresse

Processed: Re: Bug#852947: jessie-pu: package libx11/2:1.6.2-3+deb8u1

Processing control commands: > tags -1 + confirmed Bug #852947 [release.debian.org] jessie-pu: package libx11/2:1.6.2-3+deb8u1 Added tag(s) confirmed. -- 852947: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852947 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#852949: jessie-pu: package libxfixes/1:5.0.1-2+deb8u1

Control: tags -1 + confirmed On Sat, 2017-01-28 at 14:40 +0100, Julien Cristau wrote: > +libxfixes (1:5.0.1-2+deb8u1) jessie; urgency=high > + > + * Integer overflow on illegal server response (CVE-2016-7944) Please go ahead. Regards, Adam

Processed: Re: Bug#852949: jessie-pu: package libxfixes/1:5.0.1-2+deb8u1

Processing control commands: > tags -1 + confirmed Bug #852949 [release.debian.org] jessie-pu: package libxfixes/1:5.0.1-2+deb8u1 Added tag(s) confirmed. -- 852949: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852949 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#852949: jessie-pu: package libxfixes/1:5.0.1-2+deb8u1

Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu CVE fix, already in wheezy-lts and sid. Cheers, Julien diff -u libxfixes-5.0.1/debian/changelog libxfixes-5.0.1/debian/changelog --- libxfixes-5.0.1/debian/changelog +++ libxfixes-

Bug#852945: marked as done (RM: packages that migrated by mistake, batch 1)

Your message dated Sat, 28 Jan 2017 14:35:14 +0100 with message-id <20170128133514.wzgomfcv6mr4i...@betterave.cristau.org> and subject line Re: Bug#852945: RM: packages that migrated by mistake, batch 1 has caused the Debian Bug report #852945, regarding RM: packages that migrated by mistake, batch

Bug#852947: jessie-pu: package libx11/2:1.6.2-3+deb8u1

Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu This is a bunch of CVE fixes, already in wheezy-lts and sid. Cheers, Julien diff -u libx11-1.6.2/debian/changelog libx11-1.6.2/debian/changelog --- libx11-1.6.2/debian/changelog ++

Bug#852945: RM: packages that migrated by mistake, batch 1

On Sat, Jan 28, 2017 at 01:11:39PM +, Simon McVittie wrote: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: rm > > Quite a lot of packages accidentally migrated to testing on 2016-12-29 > despite open RC bugs. Here is a first batch. U

Bug#852945: RM: packages that migrated by mistake, batch 1

On Sat, Jan 28, 2017 at 01:11:39PM +, Simon McVittie wrote: > Here is a first batch. Unless I missed something, > they all have popcon < 100 and no maintainer response for a while. you know that several of them will be autoremoved again in few days (i.e. tomorrow), right? Just saying, to save

Re: Please dak copy-installer 20170127

Cyril Brulebois: > Hi, > > FTPmasters, please sync the installer from sid to testing: > > dak copy-installer 20170127 > > > Release team, please hint it into testing: > > urgent debian-installer/20170127 > > > KiBi. > Urgented. ~Niels

Draft for taging 32 RC bugs with can-defer, will-remove or is-blocker

Hi, I have a quick review of the RC bugs in *key* packages that are unfixed in unstable according to UDD. The following is a list of 32 of these (out of about 180) with proposed verdicts/tagging to start a debate about them. There are 3 verdicts: * can-defer (serious bug, but not a blocker -

Bug#852945: RM: packages that migrated by mistake, batch 1

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: rm Quite a lot of packages accidentally migrated to testing on 2016-12-29 despite open RC bugs. Here is a first batch. Unless I missed something, they all have popcon < 100 and no maintainer respons

NEW changes in stable-new

Processing changes file: libphp-swiftmailer_5.2.2-1+deb8u1_amd64.changes ACCEPT Processing changes file: libxpm_3.5.12-0+deb8u1_multi.changes ACCEPT Processing changes file: libxpm_3.5.12-0+deb8u1_amd64.changes ACCEPT Processing changes file: libxpm_3.5.12-0+deb8u1_arm64.changes ACCEPT Proc

Processed: Re: Bug#851397: jessie-pu: package sendmail/8.14.4-8+deb8u2

Processing control commands: > tags -1 + confirmed Bug #851397 [release.debian.org] jessie-pu: package sendmail/8.14.4-8+deb8u2 Added tag(s) confirmed. -- 851397: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851397 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Processed: Re: Bug#851527: jessie-pu: package unzip/6.0-16+deb8u3

Processing control commands: > tags -1 + confirmed Bug #851527 [release.debian.org] jessie-pu: package unzip/6.0-16+deb8u3 Added tag(s) confirmed. -- 851527: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851527 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#851527: jessie-pu: package unzip/6.0-16+deb8u3

Control: tags -1 + confirmed On Sun, 2017-01-15 at 23:47 +0100, Santiago Vila wrote: > The Security Team asked me to do this upload because it does not > deserve a DSA. > > It's just an update of the version currently in stable, taking the > security bits from the last version in unstable. Pleas

Bug#851397: jessie-pu: package sendmail/8.14.4-8+deb8u2

Control: tags -1 + confirmed On Sat, 2017-01-14 at 16:22 +0100, Andreas Beckmann wrote: > sendmail (8.14.4-8+deb8u2) jessie-pu; urgency=medium > > * QA upload. > > Disclaimer: I last ran sendmail about 15 years ago on Solaris 8. > > * Only touch files as smmsp:smmsp in /var/run/sendmail/sta

Bug#851528: jessie-pu: package crafty/23.4-6+deb8u1

Control: tags -1 + confirmed On Sun, 2017-01-15 at 23:55 +0100, Santiago Vila wrote: > After making a QA upload for this package in unstable, I've been > suggested that I should also make an upload for jessie, > and I agree. > > The program does not work at all in old machines. This is not a > se

Processed: Re: Bug#851528: jessie-pu: package crafty/23.4-6+deb8u1

Processing control commands: > tags -1 + confirmed Bug #851528 [release.debian.org] jessie-pu: package crafty/23.4-6+deb8u1 Added tag(s) confirmed. -- 851528: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851528 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#852361: jessie-pu: package initramfs-tools/0.120+deb8u3

Control: tags -1 + confirmed On Mon, 2017-01-23 at 20:50 +, Ben Hutchings wrote: > - Boot failure due to missing drivers on some (mostly ARM-based) systems > (#762634, #825687). This doesn't just appear immediately after > installation but may also appear as a regression when upgrading th

NEW changes in stable-new

Processing changes file: guile-2.0_2.0.11+1-9+deb8u1_amd64.changes ACCEPT Processing changes file: modsecurity-crs_2.2.9-1+deb8u1_amd64.changes ACCEPT

Processed: Re: Bug#852361: jessie-pu: package initramfs-tools/0.120+deb8u3

Processing control commands: > tags -1 + confirmed Bug #852361 [release.debian.org] jessie-pu: package initramfs-tools/0.120+deb8u3 Added tag(s) confirmed. -- 852361: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852361 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#852624: jessie-pu: package libmateweather/1.8.0-2+deb8u2

Control: tags -1 + confirmed On Wed, 2017-01-25 at 18:57 +0100, ZenWalker wrote: > On tzdata 2016g, the Rangoon timezone was renamed to Yangon, and > libmateweather fails to build. > > It has been fixed on stretch, and this update fixes it on jessie. Argh, hard-coding this stuff

Processed: Re: Bug#852624: jessie-pu: package libmateweather/1.8.0-2+deb8u2

Processing control commands: > tags -1 + confirmed Bug #852624 [release.debian.org] jessie-pu: package libmateweather/1.8.0-2+deb8u2 Added tag(s) confirmed. -- 852624: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852624 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#852849: jessie-pu: package keyringer/0.3.7-1

Control: tags -1 + confirmed On Fri, 2017-01-27 at 21:26 +0100, Nicolas Braud-Santoni wrote: > Please consider the attached patch for upload to jessie. > > It is a backport of my patch for bug #847963: keyringer fails to handle > OpenPGP keys which have subkeys that do not expire. > > I believe

Processed: Re: Bug#852849: jessie-pu: package keyringer/0.3.7-1

Processing control commands: > tags -1 + confirmed Bug #852849 [release.debian.org] jessie-pu: package keyringer/0.3.7-1 Added tag(s) confirmed. -- 852849: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852849 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Bug#852939: nmu: opam_1.2.2-5+b2

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu nmu opam_1.2.2-5+b2 . mips mips64el mipsel ppc64el s390x . unstable . -m "rebuild against dose3 (5.0.1-8)" -- System Information: Debian Release: stretch/sid APT prefers unstable APT po

Bug#852938: nmu: botch_0.21-2

Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: binnmu nmu botch_0.21-2 . mips mips64el mipsel ppc64el s390x . unstable . -m "rebuild against dose3 (5.0.1-8)" -- System Information: Debian Release: stretch/sid APT prefers unstable APT polic

Bug#841724: jessie-pu: package guile-2.0/2.0.11+1-9

Control: tags -1 + pending On Sat, 2017-01-14 at 20:14 +0100, Salvatore Bonaccorso wrote: > Hi Rob, > > On Sat, Jan 14, 2017 at 12:58:10PM -0600, Rob Browning wrote: > > Salvatore Bonaccorso writes: > > > > > Any news on that upload? > > > > I should be able to handle it before Tuesday, but le

Bug#842929: jessie-pu: package modsecurity-crs/2.2.9-1

Control: tags -1 + pending On Thu, 2017-01-05 at 20:09 +, Adam D. Barratt wrote: > Control: tags -1 -moreinfo +confirmed > > On Mon, 2016-11-28 at 17:17 +0100, Alberto Gonzalez Iniesta wrote: > > Thanks for the corrections. Please find attached the debdiff file in the > > right direction. #83

Processed: Re: Bug#842929: jessie-pu: package modsecurity-crs/2.2.9-1

Processing control commands: > tags -1 + pending Bug #842929 [release.debian.org] jessie-pu: package modsecurity-crs/2.2.9-1 Added tag(s) pending. -- 842929: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842929 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

Processed: Re: Bug#841724: jessie-pu: package guile-2.0/2.0.11+1-9

Processing control commands: > tags -1 + pending Bug #841724 [release.debian.org] jessie-pu: package guile-2.0/2.0.11+1-9 Added tag(s) pending. -- 841724: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841724 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems

  1   2   >