Bug#794747: ITP: rapache -- server-side R integration with Apache 2

2015-08-06 Thread Ondřej Surý
Package: wnpp
Severity: wishlist
Owner: "Ondřej Surý" 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

* Package name: rapache
  Version : 1.3.7
  Upstream Author : Vanderbilt University
* URL : http://www.rapache.org/
* License : Apache-2.0
  Programming Lang: C
  Description : server-side R integration with Apache 2

 This package provides the R module that adds support for embedding
 the R interpreter inside Apache 2 webserver.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1
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=YAiU
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20150806094859.19019.8056.report...@lettie.labs.nic.cz



Bug#794749: ITP: hedgehog -- visualisation tool for DNS

2015-08-06 Thread Ondřej Surý
Package: wnpp
Severity: wishlist
Owner: "Ondřej Surý" 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

* Package name: hedgehog
  Version : 2.0.0~rc2
  Upstream Author : Sinodun Ltd.
* URL : http://dns-stats.org/
* License : Apache-2.0
  Programming Lang: C, R
  Description : visualisation tool for DNS

 Hedgehog is a visualisation tool for DNS statistics that consumes data
 acquired with the DSC collector.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1
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=rC36
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20150806095204.19084.63944.report...@lettie.labs.nic.cz



Bug#794764: ITP: git-up -- fetch and rebase all locally-tracked remote branches

2015-08-06 Thread David Suárez
Package: wnpp
Severity: wishlist
X-Debbugs-CC: debian-devel@lists.debian.org


   Package name: git-up
   Version: 0.5.12
  Upstream Author: Aanand Prasad 
  URL: https://github.com/aanand/git-up
  License: Other
  Description: fetch and rebase all locally-tracked remote branches


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/1877901.EaERxQlb74@sephirot



Bug#794775: ITP: erlang-sqlite3 -- SQLite3 wrapper for Erlang applications

2015-08-06 Thread Philipp Huebner
Package: wnpp
Severity: wishlist
Owner: Philipp Huebner 

* Package name: erlang-sqlite3
  Version : 1.1.4
  Upstream Author : Alexey Romanov 
* URL : http://github.com/alexeyr/erlang-sqlite3
* License : EPL-1.1
  Programming Lang: Erlang, C
  Description : SQLite3 wrapper for Erlang applications

 This is an SQLite3 library for Erlang. It is designed to make it easy
 to write Erlang applications that use SQLite3.
 ejabberd (>= 15.04) for example uses it as its sqlite driver.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150806135436.3934.62900.reportbug@carter



Bug#794776: ITP: sphinx-argparse -- Sphinx extension that documents argparse arguments and options

2015-08-06 Thread Daniel Stender
Package: wnpp
Severity: wishlist
Owner: Daniel Stender 

* Package name: sphinx-argparse
  Version : 0.1.15
  Upstream Author : Aleksandr Rudakov 
* URL : https://github.com/ribozz/sphinx-argparse
* License : Expat
  Programming Lang: Python
  Description : documents argparse command line arguments (Sphinx extension)

Sphinx extension not yet available in Debian, used e.g. by the Prospector
docs. I'm going to maintain this for DPMT. The resulting binaries are
going to be python-sphinx-argparse and python3-sphinx-argparse.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150806140236.27228.36175.reportbug@localhost



Bug#794787: ITP: oclgrind -- OpenCL device simulator

2015-08-06 Thread James Price
Package: wnpp
Severity: wishlist
Owner: James Price 

* Package name: oclgrind
  Version : 15.5
  Upstream Author : James Price 
* URL : https://github.com/jrprice/Oclgrind
* License : BSD
  Programming Lang: C++
  Description : OpenCL device simulator

Oclgrind is an extensible OpenCL device simulator that provides a
plugin interface to facilitate the creation of tools to aid analysis
and development of OpenCL programs. Among the tools that Oclgrind
provides are various debugging aids, such as out-of-bounds memory
access checking, data-race detection, and an interactive debugger.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150806152908.20143.9371.reportbug@debian



Re: Adding support for LZIP to dpkg, using that instead of xz, archive wide

2015-08-06 Thread David Weinehall
On Sun, Aug 02, 2015 at 10:47:44PM +0200, Vincent Lefevre wrote:
> On 2015-08-02 11:45:38 -0700, Russ Allbery wrote:
> > There were a few long messages to this thread that I didn't absorb in
> > their entirety, so apologies if this is a repeat.  But another angle of
> > this is that the discussion is about using lzip *for Debian packages*.  In
> > that context, being tolerant of appended data, or *any* other form of
> > modification to the file, is basically pointless.
> 
> I don't think that it is pointless. I would say that it must *not*
> be tolerant to appended data, because...
> 
> > Debian packages are
> > authenticated and protected via cryptographic signatures, which will not
> > match if there are any changes at all to the file, even appending a nul
> > byte.  And if the signature doesn't verify, one should treat the package
> > with extreme suspicion, and certainly should not be installing it on a
> > system except in a very controlled environment for investigative purposes.
> 
> The purpose of adding garbage could be to make a modified tarball
> match the signature. Of course, this would mean that the system
> would no longer be crytographically safe in general, but it might
> still be safe for some class of files with a fixed structure, such
> as xz. And not every one would render a vulnerability public...
> So, it is safer not to accept garbage when decoding.

As soon as someone can generate hash collisions we're screwed anyway.


Regards, David
-- 
 /) David Weinehall  /) Rime on my window   (\
//  ~   //  Diamond-white roses of fire //
\)  http://www.acc.umu.se/~tao/(/   Beautiful hoar-frost   (/


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150806183957.gd27...@suiko.acc.umu.se



Re: Adding support for LZIP to dpkg, using that instead of xz, archive wide

2015-08-06 Thread Philipp Kern
On Sun, Aug 02, 2015 at 10:47:44PM +0200, Vincent Lefevre wrote:
> The purpose of adding garbage could be to make a modified tarball
> match the signature.

Which is why we also supply the length.

Kind regards
Philipp Kern


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150806193109.ga17...@thaum.home.philkern.de



Bug#794816: ITP: python-click-plugins -- Click extension to register external CLI commands (Python 2)

2015-08-06 Thread Johan Van de Wauw
Package: wnpp
Owner: Johan Van de Wauw 
Severity: wishlist
X-Debbugs-CC: debian-devel@lists.debian.org

* Package name: python-click-plugins
  Version : 1.0
  Upstream Author : Kevin Wurster (wurst...@gmail.com)
* URL : https://github.com/click-contrib/click-plugins
* License : BSD-3-Clause
  Programming Lang: Python
  Description : Click extension to register external CLI commands

Click plugins allows developers of Click commandline applications to add
a plugin mechanism to their tools. This allows the creation of
subcommands registered by those plugins.

This is the Python 2 version of the package.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/55c3caa1.7080...@vandewauw.be



Re: Adding support for LZIP to dpkg, using that instead of xz, archive wide

2015-08-06 Thread Jakub Wilk

* Philipp Kern , 2015-08-06, 21:31:
The purpose of adding garbage could be to make a modified tarball 
match the signature.

Which is why we also supply the length.


I thought the idea was to create a smaller malicious tarball, then 
append "garbage" until the size and the hash match.


But let's go back to reality:

If the decompressor ignores trailing garbage, then it's slightly easier 
to perform chosen-prefix collision attack for tarballs[0]. You don't 
have to worry about compressor's CRCs or where to hide collision blocks 
from the sight of an attentive code reviewer.



[0] https://lists.debian.org/20140913162408.ga6...@jwilk.net

--
Jakub Wilk


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150806210953.ga9...@jwilk.net



Work-needing packages report for Aug 7, 2015

2015-08-06 Thread wnpp
The following is a listing of packages for which help has been requested
through the WNPP (Work-Needing and Prospective Packages) system in the
last week.

Total number of orphaned packages: 676 (new: 1)
Total number of packages offered up for adoption: 182 (new: 2)
Total number of packages requested help for: 50 (new: 0)

Please refer to http://www.debian.org/devel/wnpp/ for more information.



The following packages have been orphaned:

   dnswalk (#794457), orphaned 3 days ago
 Description: Checks dns zone information using nameserver lookups
 Installations reported by Popcon: 243

675 older packages have been omitted from this listing, see
http://www.debian.org/devel/wnpp/orphaned for a complete list.



The following packages have been given up for adoption:

   rmilter (#794428), offered 4 days ago
 Installations reported by Popcon: 16

   rspamd (#794429), offered 4 days ago
 Installations reported by Popcon: 16

180 older packages have been omitted from this listing, see
http://www.debian.org/devel/wnpp/rfa_bypackage for a complete list.



For the following packages help is requested:

   apt-xapian-index (#567955), requested 2012 days ago
 Description: maintenance tools for a Xapian index of Debian packages
 Reverse Depends: ept-cache goplay muon muon-discover packagesearch
 Installations reported by Popcon: 51715

   athcool (#278442), requested 3936 days ago
 Description: Enable powersaving mode for Athlon/Duron processors
 Installations reported by Popcon: 32

   awstats (#755797), requested 379 days ago
 Description: powerful and featureful web server log analyzer
 Installations reported by Popcon: 4152

   balsa (#642906), requested 1411 days ago
 Description: An e-mail client for GNOME
 Reverse Depends: balsa-dbg
 Installations reported by Popcon: 728

   cardstories (#624100), requested 1564 days ago
 Description: Find out a card using a sentence made up by another
   player
 Installations reported by Popcon: 7

   cups (#532097), requested 2252 days ago
 Description: Common UNIX Printing System
 Reverse Depends: bluez-cups boomaga chromium
   cinnamon-settings-daemon cloudprint cups cups-backend-bjnp
   cups-browsed cups-bsd cups-client (68 more omitted)
 Installations reported by Popcon: 148156

   debtags (#567954), requested 2012 days ago
 Description: Enables support for package tags
 Reverse Depends: goplay packagesearch
 Installations reported by Popcon: 2067

   developers-reference (#759995), requested 341 days ago
 Description: guidelines and information for Debian developers
 Installations reported by Popcon: 15148

   ejabberd (#767874), requested 276 days ago
 Description: distributed, fault-tolerant Jabber/XMPP server written
   in Erlang
 Reverse Depends: ejabberd-contrib
 Installations reported by Popcon: 802

   fbcat (#565156), requested 2031 days ago
 Description: framebuffer grabber
 Installations reported by Popcon: 161

   freeipmi (#628062), requested 1533 days ago
 Description: GNU implementation of the IPMI protocol
 Reverse Depends: freeipmi freeipmi-bmc-watchdog freeipmi-ipmidetect
   freeipmi-ipmiseld freeipmi-tools ipmitool libfreeipmi-dev
   libfreeipmi16 libipmiconsole-dev libipmiconsole2 (6 more omitted)
 Installations reported by Popcon: 6413

   gnat-gps (#496905), requested 2534 days ago
 Description: co-maintainer needed
 Reverse Depends: gnat-gps gnat-gps-dbg
 Installations reported by Popcon: 514

   gnokii (#677750), requested 1146 days ago
 Description: Datasuite for mobile phone management
 Reverse Depends: gnokii gnokii-cli gnokii-smsd gnokii-smsd-mysql
   gnokii-smsd-pgsql gnome-phone-manager libgnokii-dev libgnokii6
   xgnokii
 Installations reported by Popcon: 1371

   gridengine (#703256), requested 872 days ago
 Description: Distributed resource management
 Reverse Depends: gridengine-client gridengine-drmaa-dev
   gridengine-exec gridengine-master gridengine-qmon
 Installations reported by Popcon: 1063

   grub2 (#248397), requested 4105 days ago
 Description: GRand Unified Bootloader
 Reverse Depends: debootstick grml-rescueboot grml2usb grub-coreboot
   grub-coreboot-bin grub-coreboot-dbg grub-disk grub-efi
   grub-efi-amd64 grub-efi-amd64-bin (38 more omitted)
 Installations reported by Popcon: 170351

   guake (#755928), requested 378 days ago
 Description: Drop-down terminal for GNOME Desktop Environment
 Reverse Depends: guake-indicator
 Installations reported by Popcon: 2225

   hfsprogs (#557892), requested 2080 days ago
 Description: mkfs and fsck for HFS and HFS+ file systems
 Install

Bug#794829: ITP: python-django-cors-headers -- Django app for handling the server headers required for Cross-Origin Resource Sharing (CORS)

2015-08-06 Thread Brian May
Package: wnpp
Severity: wishlist
Owner: Brian May 

* Package name: python-django-cors-headers
  Version : 1.1.0
  Upstream Author : Otto Yiu
* URL : https://github.com/ottoyiu/django-cors-headers/
* License : MIT
  Programming Lang: Python2 and Python3
  Description : Django app for handling the server headers required for 
Cross-Origin Resource Sharing (CORS)

Pypi link: https://pypi.python.org/pypi/django-cors-headers

Will be DPMT maintained. Required for another package I am creating. I
think this is likely to be useful for other people besides myself.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20150807011318.15108.81449.report...@prune.in.vpac.org



Re: Bug#793644: ITP: hadoop -- Apache Hadoop distributed processing framework

2015-08-06 Thread Dmitry Smirnov
On Tuesday 28 July 2015 12:27:21 Emmanuel Bourg wrote:
> I don't think this package will be widely adopted either, not everyone
> churns an amount of data that justifies the use of Hadoop.

IMHO it would be nice to have Hadoop as it allows Debian to be used in  
environments where Hadoop is needed...

Perhaps packaging could be brought to the custody of Debian-Java team?

Also what about FUSE client?

Thanks.

-- 
Cheers,
 Dmitry Smirnov
 GPG key : 4096R/53968D1B

---

It has been said that democracy is the worst form of government except
all the others that have been tried.
-- Winston Churchill


signature.asc
Description: This is a digitally signed message part.