[DRE-maint] Bug#1037178: puppet does not sync files anymore after recent ruby2.5 security upload

2023-06-07 Thread Utkarsh Gupta
Hi Bernhard, Kees, On Wed, Jun 7, 2023 at 6:58 PM Schmidt, Bernhard wrote: > > I've prepared a fix for the regression and uploaded the binaries at: > > https://people.debian.org/~utkarsh/lts/ruby2.5/ > > > > Can you please give these a try and see if that fixes the regression > > you're seeing? >

[DRE-maint] Bug#1037178: puppet does not sync files anymore after recent ruby2.5 security upload

2023-06-07 Thread Utkarsh Gupta
Hi Chris, On Wed, Jun 7, 2023 at 9:01 PM Chris Lamb wrote: > I see your 2.5.5-3+deb10u6 update on the debian/buster branch which > fixes the broken +deb10u5 upload, but I don't see it in the archive > yet. > > Although you mentioned you were going to wait a bit more, I'm just > 100%-checking you

[DRE-maint] Bug#1037178: puppet does not sync files anymore after recent ruby2.5 security upload

2023-06-07 Thread Utkarsh Gupta
Hi Kees, On Wed, Jun 7, 2023 at 6:53 PM Kees Meijs | Nefos wrote: > I know you were asking Bernhard, but I downloaded and installed as well. > Our Puppet agent seems to be happy again. I had missed your comment in the bug but super, many thanks for testing this out! I'll wait a bit more before I

[DRE-maint] Bug#1037178: puppet does not sync files anymore after recent ruby2.5 security upload

2023-06-07 Thread Utkarsh Gupta
Hi Bernhard, On Wed, Jun 7, 2023 at 4:16 PM Utkarsh Gupta wrote: > Yep, I'm taking a look to prep something for 2.5. I've prepared a fix for the regression and uploaded the binaries at: https://people.debian.org/~utkarsh/lts/ruby2.5/ Can you please give these a try and see if t

[DRE-maint] Bug#1037178: puppet does not sync files anymore after recent ruby2.5 security upload

2023-06-07 Thread Utkarsh Gupta
Hiya, On Wed, Jun 7, 2023 at 2:39 PM Moritz Muehlenhoff wrote: > Specifically > https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/ > states: > > | For Ruby 2.7: Update to uri 0.10.0.1 > | For Ruby 3.0: Update to uri 0.10.2 > | For Ruby 3.1: Update to uri 0.11.1 > | For Rub

[DRE-maint] Bug#1037178: puppet does not sync files anymore after recent ruby2.5 security upload

2023-06-07 Thread Utkarsh Gupta
Hi Chris, On Wed, Jun 7, 2023 at 12:56 PM Salvatore Bonaccorso wrote: > Can you please have a look, as this seems to be caused by the DLA > issued as DLA-3447-1. This has been caused by the ruby2.5 update. Can you please TAL? This is perhaps because of the URI version in buster v/s URI version u

[DRE-maint] Bug#1022818: Update redmine to 5.0.3

2022-10-26 Thread Utkarsh Gupta
Source: redmine Version: 5.0.2-2 Severity: wishlist Hello, Please consider updating src:redmine to 5.0.3. TIA. - u -- System Information: Debian Release: bullseye/sid APT prefers focal-updates APT policy: (500, 'focal-updates'), (500, 'focal-security'), (500, 'focal') Architecture: amd64 (

[DRE-maint] Bug#1022817: Unnecessary recursive chown'ing?

2022-10-26 Thread Utkarsh Gupta
Source: redmine Version: 5.0.2-2 Severity: normal Hello, The package update performs a recursive chown, unnecessarily increasing the update time (for instance, the recursive chown is unnecessarily applied to ~60 000 files in an instance). Please TAL and fix this if possible. Thanks! - u -- Sy

[DRE-maint] Bug#1022816: chown'ing Gemfil makes UID approach incompatible

2022-10-26 Thread Utkarsh Gupta
Source: redmine Version: 5.0.2-2 Severity: normal Hello, Activating cert-based authentication on PostgreSQL requires having redmine on its own UID. However the current Debian package tries to chown a Gemfile, making this UID approach incompatible with the current package. Please TAL and fix this

[DRE-maint] Bug#1022815: REDMINE_INSTANCE_OWNERSHIP option not supported

2022-10-26 Thread Utkarsh Gupta
Source: redmine Version: 5.0.2-2 Severity: normal Hello, Redmine installed from its Debian package should be able to run from its own (Linux) user. The REDMINE_INSTANCE_OWNERSHIP option in the default configuration file (/etc/default/redmine/) seems to indicate that such an execution mode is poss

[DRE-maint] Bug#988214: fixed in rails 2:6.0.3.7+dfsg-1

2021-06-04 Thread Utkarsh Gupta
Hi Paul, On Fri, Jun 4, 2021 at 1:38 AM Paul Gevers wrote: > > You haven't answered my question: "does rails still work with the old > > version of ruby-marcel and can the version bump be reverted" > > Ping. Without a proper answer, I can't decide. Thanks, I'm yet to figure that out and hopefull

[DRE-maint] Bug#988214: fixed in rails 2:6.0.3.7+dfsg-1

2021-05-24 Thread Utkarsh Gupta
Hi Paul, On Wed, 19 May 2021 22:12:59 +0200 Paul Gevers wrote: > This new rails version renewed its versioned dependency on ruby-marcel. > The new ruby-marcel version doesn't look like a targeted fix, so it > doesn't fit the freeze policy. If I read the changelog correctly, this > dependency is t

[DRE-maint] Bug#986806: CVE-2021-28965

2021-04-17 Thread Utkarsh Gupta
Hi Praveen, On Fri, Apr 16, 2021 at 3:24 PM Pirate Praveen wrote: > I think the separate package was introduced by mistake without seeing > the copy embedded in ruby. I think the right way is to fix this in ruby > and remove this separate package. But I'd like someone from ruby team > to confirm

[DRE-maint] Bug#984689: ruby-vcr: DFSG violation (Hippocratic license)

2021-03-07 Thread Utkarsh Gupta
On Sun, Mar 7, 2021 at 10:49 PM Utkarsh Gupta wrote: > On Sun, Mar 7, 2021 at 10:15 PM Pirate Praveen > wrote: > > It looks like we will have to remove ruby-vcr and we will have to > > disable tests for the following packages. I don't think there is > > another w

[DRE-maint] Bug#984689: ruby-vcr: DFSG violation (Hippocratic license)

2021-03-07 Thread Utkarsh Gupta
Hi Praveen, On Sun, Mar 7, 2021 at 10:15 PM Pirate Praveen wrote: > It looks like we will have to remove ruby-vcr and we will have to > disable tests for the following packages. I don't think there is > another way, thoughts? Maybe worth opening an issue upstream and discuss the cons of this cha

[DRE-maint] Bug#963477: ruby-rack: CVE-2020-8184

2021-01-16 Thread Utkarsh Gupta
Hi Salvatore, On Sun, Jan 3, 2021 at 1:34 AM Salvatore Bonaccorso wrote: > Not any right now. Well there is CVE-2020-26247 but that one might be > too risky at this stage (AFAIU it is a breaking change, and thus ws > moved to the 1.11.x version). Lucas uploaded a new version, thereby fixing this

[DRE-maint] Bug#963477: ruby-rack: CVE-2020-8184

2021-01-02 Thread Utkarsh Gupta
Hi Salvatore, On Sat, Jan 2, 2021 at 5:55 PM Salvatore Bonaccorso wrote: > > Of course. Uploaded a fix! :) > > (thanks for the explicit CC, please do it next time as well if you > > want me to take care of something which falls under the Ruby team). > > Thanks! About the explicit CC, well actuall

[DRE-maint] Bug#963477: ruby-rack: CVE-2020-8184

2021-01-02 Thread Utkarsh Gupta
Hello, On Sat, Jan 2, 2021 at 2:02 AM Salvatore Bonaccorso wrote: > While strictly speaking this issue is no-dsa for buster, I'm raising > the severity to RC, would it be possible to address this issue for > unstable (and so bullseye) before the freeze? Of course. Uploaded a fix! :) (thanks for

[DRE-maint] Bug#976291: rails: please drop Build-Depends on qunit-selenium

2020-12-11 Thread Utkarsh Gupta
Hello, On Fri, Dec 11, 2020 at 2:52 PM Pirate Praveen wrote: > On Wed, 2 Dec 2020 22:11:27 +0100 Paul Gevers wrote: > > I love tests. As one of the maintainers of the ci.debian.net > > infrastructure, I really do. However, with my Release Team member hat > > on, I'm asking you to stop Build-D

[DRE-maint] Bug#964432: ruby-rails update destroy redmine issue number linking

2020-08-03 Thread Utkarsh Gupta
Hi Sylvain, On Mon, Aug 3, 2020 at 5:15 PM Sylvain Beucler wrote: > Then I realized that this is about Debian Jessie which reached > end-of-life a month ago, so the solution is to upgrade to Debian 9. Whilst I am totally fine by this suggestion, but still asking.. Would it make sense to fix this

[DRE-maint] Bug#964432: ruby-rails update destroy redmine issue number linking

2020-08-03 Thread Utkarsh Gupta
On 8/3/20 1:56 PM, Utkarsh Gupta wrote: > On Tue, 07 Jul 2020 09:36:20 +0200 "s.jaekel" wrote: >> Package: ruby-rails >> Version: 2:4.1.8-1+deb8u7 >> Severity: important >> Tags: upstream >> >> I updated the ruby-rails packages last week. >&g

[DRE-maint] Bug#964432: ruby-rails update destroy redmine issue number linking

2020-08-03 Thread Utkarsh Gupta
Hi On Tue, 07 Jul 2020 09:36:20 +0200 "s.jaekel" wrote: > Package: ruby-rails > Version: 2:4.1.8-1+deb8u7 > Severity: important > Tags: upstream > > I updated the ruby-rails packages last week. > Since then i can use the also installed redmine (3.0~20140825-8~deb8u4) > no longer link tickets tog

Re: [DRE-maint] ruby-growl_4.1-2_amd64.changes REJECTED

2020-07-16 Thread Utkarsh Gupta
Hi Thorsten, On Thu, Apr 23, 2020 at 2:30 AM Thorsten Alteholz wrote: > you should have mentioned ruby-growl-4.1/lib/ruby-growl/ruby_logo.rb in your > debian/copyright. > Unfortunately the license of this file is not compatible with DFSG, so this > software can not be part of Debian. Re-sponso

Re: [DRE-maint] rails update

2020-06-22 Thread Utkarsh Gupta
Hi, On Mon, Jun 22, 2020 at 3:11 PM Sylvain Beucler wrote: > Hmm, are you the only active maintainer for rails? There are 3 maintainers. CC'ed rails@p.d.o. However, since you have already worked on preparing the fix for Jessie, it's much easier on your part to do it for Stretch and Buster. But t

[DRE-maint] Bug#951806: ruby-serverengine: FTBFS aginst Ruby2.5 and Ruby2.7

2020-03-17 Thread Utkarsh Gupta
Hi all, On Sun, Mar 8, 2020 at 1:15 PM Hideki Yamane wrote: > I've investigated it and it seems that failure happens with ruby-rspec > 3.9.0c1e0m1s2-1, not 3.8.0c0e1m0s0-1 in buster. Hm, interesting. Could someone take a look at this whenever free? I, myself, don't have enough time to take a l

[DRE-maint] Bug#951806: ruby-serverengine: FTBFS aginst Ruby2.5 and Ruby2.7

2020-02-21 Thread Utkarsh Gupta
Package: ruby-serverengine Version: 2.2.0-1 Severity: critical User pkg-ruby-extras-maintain...@lists.alioth.debian.org Usertags: ruby2.7-transition Dear Maintainer, Whilst building ruby-serverengine against Ruby2.5 and Ruby2.7, I noticed that all the tests are failing and at one point, the tests

[DRE-maint] Bug#834716: bundler: man-pages in wrong directory

2020-02-07 Thread Utkarsh Gupta
close 834716 thanks On Thu, 18 Aug 2016 11:08:57 +0200 Paul van Tilburg wrote: Package: bundler Version: 1.12.5-3 Severity: normal Dear Maintainer, The man-pages are installed in the Ruby library directory, as a result, they are unavailable to the user. See the following partial file listing

[DRE-maint] Bug#950843: chef: FTBFS against Ruby2.7 and Bundler 2.1.4

2020-02-07 Thread Utkarsh Gupta
Package: chef Version: 13.8.7-4 Severity: critical Dear Maintainer, chef currently doesn't have support for Ruby2.7 and the latest version of bundler, that is, 2.1.4. The logs for Ruby2.7 failures are as follows: https://people.debian.org/~kanashiro/ruby2.7/builds/7/chef/chef_13.8.7-4+rebuild

[DRE-maint] Bug#945232: ruby-benchmark-suite fails to build with ruby-benchmark-ips 2.7 in experimental

2019-11-21 Thread Utkarsh Gupta
e9d3ebbdb8340b26424c10e5a55e7d6ef26e1ce0 [2]: https://salsa.debian.org/ruby-team/ruby-benchmark-suite [3]: https://github.com/evanphx/benchmark_suite Description: Remove "requirement" of benchmark/helpers. This file is no longer provided by the upstream. Author: Utkarsh Gupta B

[DRE-maint] Bug#944906: gitlab fails to install with missing rubyzip dependency

2019-11-19 Thread Utkarsh Gupta
. Right, since the CI passes on my fork, I've written a patch that is attached. Hope that should fix this :) Additionally shall fix this in the repo as well. Best, Utkarsh Description: This patch bumps rubyzip to 2.0. Author: Utkarsh Gupta Bug-Debian: https://bugs.debian.org/944906 Las

[DRE-maint] Bug#943987: non-free file in "debian/missing-sources"

2019-11-02 Thread Utkarsh Gupta
Hi Dmitry, On Sat, 02 Nov 2019 11:13:57 +1100 Dmitry Smirnov wrote: > Package: gitlab > Version: 12.2.9-1 > Severity: serious > Usertags: dfsg > > > In most recent upload Utkarsh Gupta circumvented legitimate Lintian error > > > E: gitlab source: source-is-mis

[DRE-maint] Bug#931932: fixed in ruby-mini-magick 4.9.2-1+deb10u1

2019-07-23 Thread Utkarsh Gupta
Hey, On 24/07/19 10:53 am, Salvatore Bonaccorso wrote: > Hey! > > On Wed, Jul 24, 2019 at 10:43:40AM +0530, Utkarsh Gupta wrote: >> Hey Salvatore, >> >> On Tue, 16 Jul 2019 21:07:05 + Salvatore Bonaccorso >> wrote: >>> Source: ruby-mini-magick >

[DRE-maint] Bug#931932: fixed in ruby-mini-magick 4.9.2-1+deb10u1

2019-07-23 Thread Utkarsh Gupta
Hey Salvatore, On Tue, 16 Jul 2019 21:07:05 + Salvatore Bonaccorso wrote: > Source: ruby-mini-magick > Source-Version: 4.9.2-1+deb10u1 > > We believe that the bug you reported is fixed in the latest version of > ruby-mini-magick, which is due to be installed in the Debian FTP archive. Where

[DRE-maint] Bug#915050: Proposal: Repository for fast-paced package backports

2019-05-19 Thread Utkarsh Gupta
Hi Dominik, On 26/12/18 2:16 am, Dominik George wrote: > Heisann, alle sammen, > > as announced in the recent thread about maintaining, I hereby propose a > repository that allows making “backports” of packages available to users > of the stable distribution, if those packages cannot be maintained

Re: [DRE-maint] ruby-maxitest_3.1.0-1_amd64.changes REJECTED

2019-04-06 Thread Utkarsh Gupta
Hey, On Mon 1 Apr, 2019, 2:31 AM Thorsten Alteholz, < ftpmas...@ftp-master.debian.org> wrote: > > Hi, > > please mention all licenses and all copyright holders in your > debian/copyright. > Fixed and uploaded. Please check the same :) Thanks! > Thorsten > > > > > === > > Please feel free to re

[DRE-maint] Bug#925554: ruby-rails-assets-jquery-fullscreen-plugin: Missing copyright details of the uploader

2019-03-26 Thread Utkarsh Gupta
Package: ruby-rails-assets-jquery-fullscreen-plugin Version: 0.5.0+dfsg-1 Severity: normal Dear Maintainer, The copyright details of the uploader are missing. You should generally mention the copyright in order to avoid issues later on. Please update the same. Best, Utkarsh -- System Informat

[DRE-maint] Bug#925313: rails: No manual page for rails

2019-03-22 Thread Utkarsh Gupta
Package: rails Version: 2:5.2.2.1+dfsg-1 Severity: minor Dear Maintainer, It'd be good to have a manual page for rails. There are basic commands/subcommands like `rails new`, `rails generate`, etc and it'd be wonderful to have a quick look at the man page to know what it does, briefly and also to

[DRE-maint] Bug#918356: ruby-prawn-svg: Vcs doesn't exist

2019-03-05 Thread Utkarsh Gupta
Hey, It doesn't, because the package is in the maintainer's personal repository[1]. He's the author of the gem itself, maybe that's why? But shouldn't we be having it under the debian repositories with the "debian" folder which is missing in this case (see [1])? [1]: https://salsa.debian.org/kei

[DRE-maint] Bug#830091: Tests not found by autopkgtest

2019-03-05 Thread Utkarsh Gupta
Hey, Although it is now detecting the tests but the autopkgtest is still failing. I shall get this fixed in the next upload :) Best, Utkarsh signature.asc Description: OpenPGP digital signature ___ Pkg-ruby-extras-maintainers mailing list Pkg-ruby-