Bug#1104012: valkey: CVE-2025-21605

2025-04-23 Thread Salvatore Bonaccorso
Source: valkey Version: 8.0.2+dfsg1-1 Severity: grave Tags: security upstream Forwarded: https://github.com/valkey-io/valkey/pull/1994 X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for valkey. CVE-2025-21605[0]: | Redis is an open source, in

Bug#1104011: redict: CVE-2025-21605

2025-04-23 Thread Salvatore Bonaccorso
Source: redict Version: 7.3.2+ds-1 Severity: grave Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for redict. CVE-2025-21605[0]: | Redis is an open source, in-memory database that persists on disk. | In versions starti

Bug#1104010: redis: CVE-2025-21605

2025-04-23 Thread Salvatore Bonaccorso
Source: redis Version: 5:7.0.15-3 Severity: grave Tags: security upstream Justification: user security hole X-Debbugs-Cc: car...@debian.org, Debian Security Team Control: found -1 5:7.0.15-1~deb12u3 Control: found -1 5:7.0.15-1 Hi, The following vulnerability was published for redis. CVE-2025-2

Bug#1104009: busybox: CVE-2024-58251

2025-04-23 Thread Salvatore Bonaccorso
Source: busybox Version: 1:1.37.0-4 Severity: important Tags: security upstream Forwarded: https://bugs.busybox.net/show_bug.cgi?id=15922 X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for busybox. CVE-2024-58251[0]: | In netstat in BusyBox t

Bug#1104008: busybox: CVE-2025-46394

2025-04-23 Thread Salvatore Bonaccorso
Source: busybox Version: 1:1.37.0-4 Severity: important Tags: security upstream Forwarded: https://bugs.busybox.net/show_bug.cgi?id=16018 X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for busybox. CVE-2025-46394[0]: | In tar in BusyBox throu

Bug#1103995: [Pkg-rust-maintainers] Bug#1103995: unblock: rust-debcargo/2.7.8-4

2025-04-23 Thread Fabian Grünbichler
On Thu, Apr 24, 2025 at 07:29:27AM +0200, Fabian Grünbichler wrote: > On Thu, Apr 24, 2025, at 2:13 AM, Peter Green wrote: > >> > >> If preferred, a variant of the proposed changes with a default of "no" > >> would > >> also be possible > > > > I think the default (for bin packages) should be not

Bug#1103595: Bug#1103423: src:kitty: fails to migrate to testing for too long: FTBFS on s390x

2025-04-23 Thread Paul Gevers
Hi, Looping in Pranav, On 24-04-2025 00:18, Chris Hofstaedtler wrote: * Nilesh Patra [250423 20:54]: Upstream has explicitly denied to provide any support for s390x see[1]. And I don't think I have the interest, time and energy to support a port this for big endian arch myself. That's OK.

Bug#1104007: chromium: Chromium opens but is invisible, takes long to load.

2025-04-23 Thread Andres Salomon
Hi, Thanks for the report. I could use more details: Are you using KDE or Gnome (or something else) for the desktop environment? Wayland or X? If Wayland, did you enable wayland support in chromium or not (eg, running 'chromium --ozone-platform-hint=auto' or changing that in chromium's setti

Bug#1103899: Accepted openjdk-11 11.0.27+6-1 (source) into unstable

2025-04-23 Thread Salvatore Bonaccorso
Source: openjdk-11 Source-Version: 11.0.27+6-1 On Thu, Apr 24, 2025 at 01:56:35AM +, Debian FTP Masters wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Format: 1.8 > Date: Thu, 24 Apr 2025 02:53:57 +0200 > Source: openjdk-11 > Architecture: source > Version: 11.0.27+6-1 > Distr

Bug#1103898: Accepted openjdk-17 17.0.15+6-1 (source) into unstable

2025-04-23 Thread Salvatore Bonaccorso
Source: openjdk-17 Source-Version: 17.0.15+6-1 On Thu, Apr 24, 2025 at 01:13:43AM +, Debian FTP Masters wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Format: 1.8 > Date: Thu, 24 Apr 2025 02:05:43 +0200 > Source: openjdk-17 > Architecture: source > Version: 17.0.15+6-1 > Distr

Bug#1103897: Accepted openjdk-21 21.0.7+6-1 (source) into unstable

2025-04-23 Thread Salvatore Bonaccorso
Source: openjdk-21 Source-Version: 21.0.7+6-1 On Thu, Apr 24, 2025 at 12:26:35AM +, Debian FTP Masters wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Format: 1.8 > Date: Thu, 24 Apr 2025 01:57:46 +0200 > Source: openjdk-21 > Architecture: source > Version: 21.0.7+6-1 > Distrib

Bug#1103995: [Pkg-rust-maintainers] Bug#1103995: unblock: rust-debcargo/2.7.8-4

2025-04-23 Thread Fabian Grünbichler
On Thu, Apr 24, 2025, at 2:13 AM, Peter Green wrote: >> >> If preferred, a variant of the proposed changes with a default of "no" would >> also be possible > > I think the default (for bin packages) should be not to generate a multi-arch: > field at all. > > This is behaviorally equivalent to mult

Bug#1103906: qemu-efi-aarch64: Secure Boot regression for some arm64 VMs

2025-04-23 Thread dann frazier
On Wed, Apr 23, 2025, 17:41 Mathias Gibbens wrote: > control: retitle -1 qemu-efi-aarch64: Secure Boot regression for some > arm64 VMs > control: reassign -1 qemu-efi-aarch64 2025.02-7 > control: severity -1 serious > control: affects -1 incus > > Release 2025.02-5 of src:edk2 dropped the patch

Bug#1104007: chromium: Chromium opens but is invisible, takes long to load.

2025-04-23 Thread Serena Star
Package: chromium Version: 135.0.7049.95-1~deb12u1 Severity: important Dear Maintainer, Starting Chromium shows the icon in my task manager and an invisible window which is unusable. Apparently if I wait long enough, the program does become visible but I should not have to wait so long for the p

Bug#1103959: firmware-realtek: Corrupted firmware file rtw8852c_fw-1.bin

2025-04-23 Thread Salvatore Bonaccorso
Hi, On Wed, Apr 23, 2025 at 08:18:01AM +0200, Tomasz Jeruzalski wrote: > Package: firmware-realtek > Version: 20250410-1 > Severity: important > X-Debbugs-Cc: t.jeruzal...@hobosystems.pl > > > Dear Maintainer, > > package firmware-realtek in version 20250410-1 has corrupted firmware > file rtw8

Bug#1104006: mnemosyne: closing preview window closes edit window

2025-04-23 Thread Jeffrey Cliff
Package: mnemosyne Version: 2.11+ds1-2 Severity: minor Dear Maintainer, to reproduce 1) when you have a card already presented to you, click on the edit button 2) add something to one of the fields such as the meaning field, [for example some latex that would require testing to make sure it rende

Bug#1103996: RFS: hujson/0.0~git20250226.ec1d1c1-1 [ITP] -- JSON for Humans (JWCC: JSON w/ comments and trailing commas)

2025-04-23 Thread Phil Wyett
On Wed, 2025-04-23 at 17:31 -0300, Facundo Acevedo wrote: > Hi, > > I've just changed it in the same changelog line and reuploaded the > package, but the change doesn't seem to be reflected in the mentors > page, should I add a new changelog entry? > > Thanks > > On 4/23/25 15:36, Phil Wyett w

Bug#1103770: Does not accept -name command line option

2025-04-23 Thread Nilesh Patra
On 23 April 2025 7:36:44 pm IST, martin f krafft wrote: >Regarding the following, written by "Nilesh Patra" on 2025-04-22 at 17:59 Uhr >+0530: >> As per upstream we need to use "xdg-terminal-exec". However, I could not >> find an alternative system by that name yet in Debian. > >To be honest, I

Bug#1101418: Please help confirm: Does #1101418 sound like it will break havoc?

2025-04-23 Thread Guillem Jover
Hi! On Wed, 2025-04-23 at 23:16:51 +0200, Guillem Jover wrote: > On Wed, 2025-04-23 at 21:23:20 +0200, Philipp Kern wrote: > > Can we push .gpg and .pgp files with identical content for a while? > > That'd decouple necessary realtime interactions. I realize that this > > does not fix the fact that

Bug#1103627: openjdk-20: Remove from Debian?

2025-04-23 Thread Matthias Klose (Ubuntu)
Control: severity -1 important On 19.04.25 20:58, Jeremy Bícha wrote: Source: openjdk-20 Version: 20.0.2+9-1 Severity: serious X-Debbugs-CC: d...@ubuntu.com Can we remove OpenJDK 20 from Debian now? It is only in Unstable. It is also not included in any currently supported Ubuntu release. OpenJ

Bug#1100677: Request for clarification: Bug#1100677: debian-reference*

2025-04-23 Thread Osamu Aoki
Helmut, Thanks for quick and effective response. Yes, this is a bug. Below is my current thought: On Wed, 2025-04-23 at 07:19 +0200, Helmut Grohne wrote: > Hi Osamu, > ... > mmdebstrap ... && apt-get download debian-reference-de && dpkg --unpack -- > auto-deconfigure *.deb && apt-get -y -f inst

Bug#1103397: linux-image-amd64: Kernel Panic: copy_fpstate_to_sigfrane crashes.

2025-04-23 Thread Ben Hutchings
Control: tag -1 moreinfo On Thu, 17 Apr 2025 11:57:47 +0800 root wrote: > Package: linux-image-amd64 > Version: 6.12.22-1 > Severity: important > > Dear Maintainer, > > After linux-image-6.11.9-amd64, my laptop has never booted from linux-image- > amd64 any more. It shows "Kernel panic" after G

Bug#1103995: [Pkg-rust-maintainers] Bug#1103995: unblock: rust-debcargo/2.7.8-4

2025-04-23 Thread Peter Green
If preferred, a variant of the proposed changes with a default of "no" would also be possible I think the default (for bin packages) should be not to generate a multi-arch: field at all. This is behaviorally equivalent to multi-arch: no, but it IMO has different implications, it implies "noone

Bug#1102592: src:lsp-plugins: fails to migrate to testing for too long

2025-04-23 Thread NoisyCoil
Source: lsp-plugins Followup-For: Bug #1102592 X-Debbugs-Cc: noisyc...@tutanota.com, s...@debian.org Hi there, I think migration of lsp-plugins to testing is currently blocked because a removal from armel was not requested? Current excuses says: ``` - Migration status for lsp-plugins (1.2.16-1

Bug#1103906: qemu-efi-aarch64: Secure Boot regression for some arm64 VMs

2025-04-23 Thread Mathias Gibbens
control: retitle -1 qemu-efi-aarch64: Secure Boot regression for some arm64 VMs control: reassign -1 qemu-efi-aarch64 2025.02-7 control: severity -1 serious control: affects -1 incus Release 2025.02-5 of src:edk2 dropped the patch Revert-ArmVirtPkg- make-EFI_LOADER_DATA-non-executabl.patch. This

Bug#1094561: ruby-vcr: FTBFS: ERROR: Test "ruby3.3" failed: cannot load such file -- rack/handler/webrick

2025-04-23 Thread Antonio Terceiro
On Sat, 19 Apr 2025 15:08:13 +0530 Pirate Praveen wrote: > On Fri, 11 Apr 2025 14:24:34 +0200 Lucas Nussbaum wrote: > > > nanoc > > > ruby-coveralls > > > ruby-graphlient > > This is already removed from the archive. > > > > ruby-html-proofer > > $ reverse-depends -b ruby-html-proofer > Revers

Bug#1094965: wtmpdb: provides no way to prune rotated logs

2025-04-23 Thread Andrew Bower
I have received some helpful feedback on this, essentially to the effect that the current policy is worse than useless because not only does it not prune but that the over-fragmented log files are just less useful. The suggestion is that rotation should either be disabled or given a long period li

Bug#1103552: globus-gram-job-manager: writes to $HOME during build

2025-04-23 Thread Santiago Vila
retitle 1103552 globus-gram-job-manager: writes to $HOME during build reassign 1103552 src:globus-gram-job-manager found 1103552 15.8-2 affects 1103552 = tags 1103552 bookworm trixie sid thanks Hi. As we already did with incus, I'm going to consider this bug also as a bug in globus-gram-job-mana

Bug#1096198: Accepted nagios-plugins-contrib 47.20250420 (source) into unstable

2025-04-23 Thread Holger Levsen
On Sun, Apr 20, 2025 at 08:35:27PM +, Debian FTP Masters wrote: > Changes: > nagios-plugins-contrib (47.20250420) unstable; urgency=medium > [...] >[ Bas Couwenberg ] >* [6924874] Add patch to fix check_running_kernel on riscv64 with vmlinux > images. (closes: #1096198) [...] I

Bug#1104005: unblock: displaylink-driver/6.1-2

2025-04-23 Thread Thorsten Alteholz
Package: release.debian.org Severity: normal Control: affects -1 + src:displaylink-driver User: release.debian@packages.debian.org Usertags: unblock Please unblock package displaylink-driver [ Reason ] This package supports docking stations with DisplayLink technology, which basically provi

Bug#1102386: scaphandre: FTBFS: [ERROR] (mdbook::utils): Caused By: Duplicate file in SUMMARY.md: "references/sensor-msr_rapl.md"

2025-04-23 Thread NoisyCoil
Source: scaphandre Followup-For: Bug #1102386 X-Debbugs-Cc: noisyc...@tutanota.com Control: tags -1 + patch Came across this while doing other work, you will find a patch in attachment. Cheers! mdbook-fix.patch Description: application/mbox

Bug#1103423: src:kitty: fails to migrate to testing for too long: FTBFS on s390x

2025-04-23 Thread Chris Hofstaedtler
* Nilesh Patra [250423 20:54]: Your package src:kitty has been trying to migrate for 31 days [2], hence this bug report. The current output of the migration software for this package is copied to the bottom of this report and should list the reason why the package is blocked. This migration is

Bug#1103855: thunar: crash on entering folder view when folder has moved

2025-04-23 Thread Jean-Francois Pirus
Here' a gdb debug log file of the crash. SignalStop Print Pass to program Description SIG38 No Yes Yes Real-time event 38 SignalStop Print Pass to program Description SIGPIPE No Yes Yes Broken pipe Starting program: /usr/bin/thunar [Thread debugging using libthread

Bug#1103832: [Pkg-shadow-devel] Bug#1103832: Bug#1103832: shadow: CVE-2024-56433

2025-04-23 Thread Serge E. Hallyn
On Tue, Apr 22, 2025 at 09:46:14PM +0200, Chris Hofstaedtler wrote: > * Serge E. Hallyn [250422 15:48]: > > On Mon, Apr 21, 2025 at 08:08:50PM +0200, Salvatore Bonaccorso wrote: > > > Thought this will not really be fixable in code, it depends on how > > > uids were assigned in within a group of s

Bug#1103997: unblock: epiphany-browser/48.2-1

2025-04-23 Thread Jeremy Bícha
Package: release.debian.org Control: affects -1 + src:epiphany-browser X-Debbugs-Cc: epiphany-brow...@packages.debian.org User: release.debian@packages.debian.org Usertags: unblock Please allow epiphany-browser 48.2-1 to migrate faster than 10 days. [ Reason ] This package update includes reg

Bug#1103879: ejabberd cluster node does not start after upgrade (bookworm -> trixie)

2025-04-23 Thread Markus Gschwendt
On Wed, 2025-04-23 at 23:20 +0200, Philipp Huebner wrote: > Hi, > you can now grab an ejabberd package with the proposed fix for > testing/unstable from this location: > https://apt.debalance.de/pool/main/e/ejabberd/ejabberd_24.12-4_amd64.deb > > > Please let me know if that solves your problem.

Bug#1104004: boot-info-script: Boot Procedure Does Not Maintain Resolution Settings

2025-04-23 Thread KitchM
Package: boot-info-script Version: Debian 12 Severity: important X-Debbugs-Cc: kit...@tutanota.com Dear Maintainer, Tried various settings in GRUB2, but resolution during boot is displaying tiny text. This persists up to and including desktop login (Xfce) load_video gfxmode $linux_gfx_mode insm

Bug#1103902: austin: Vcs-* fields incorrectly refer to upstream

2025-04-23 Thread Colin Watson
On Wed, Apr 23, 2025 at 09:04:48PM +0100, Gabriele wrote: Thanks for reaching out. The package sources are available from the devel branch of the upstream repository (https://github.com/P403n1x87/austin/tree/debian). It would be great if one could specify a branch (I haven't looked into Debian pa

Bug#1103981: proftpd-core: Does not start with default configuration (unknown configuration directive 'ShowSymlinks')

2025-04-23 Thread Hilmar Preuße
Hello, I'm wondering if the three modules mod_delay, mod_ls and mod_xfer are loaded in your file /etc/proftpd/modules.conf Hilmar 23.04.2025 15:06:10 David Prévot : > Package: proftpd-core > Version: 1.3.8.c+dfsg-3 > Severity: important > > Dear Maintainer, > > I was hoping this would be cau

Bug#1104003: yaru-theme-gnome-shell: selector configuration dropdown menu split

2025-04-23 Thread Joseph Hayden
Package: yaru-theme-gnome-shell Version: 24.04.3-1 Severity: normal X-Debbugs-Cc: tails...@live.com Dear Maintainer, I love debian, and the yaru theme is rather interesting, so I thought I would try it from the official repos, however, as I have tried this, it has broken internally. On the top ri

Bug#1103992: logcheck: Could not run journalctl or save output

2025-04-23 Thread Mathias Gibbens
Source: logcheck Version: 1.4.3 Severity: serious On a fresh minimal trixie install, logcheck fails to read the systemd journal and exits with the following error: > Logcheck failed: Your log entries may not have been checked. > > Details: > Could not run journalctl or save output Adding th

Bug#1103931: gnupg2: Please don't build-depend on swtpm on unsupported architectures

2025-04-23 Thread John Paul Adrian Glaubitz
Hi Gregor, On Wed, 2025-04-23 at 21:44 +0200, Gregor Riepl wrote: > (sorry, this should have included a Cc... I added some additional analysis > below) > > > Also I am not to hot about hardcoding the list of archs where swtpm is > > available in debian/control but do not see a better alternative

Bug#1103879: ejabberd cluster node does not start after upgrade (bookworm -> trixie)

2025-04-23 Thread Philipp Huebner
Hi, you can now grab an ejabberd package with the proposed fix for testing/unstable from this location: https://apt.debalance.de/pool/main/e/ejabberd/ejabberd_24.12-4_amd64.deb Please let me know if that solves your problem. Best wishes -- ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ Philipp Huebner ⢿⡄⠘⠷⠚⠋⠀ OpenPGP:

Bug#1101418: Please help confirm: Does #1101418 sound like it will break havoc?

2025-04-23 Thread Guillem Jover
Hi! On Wed, 2025-04-23 at 21:23:20 +0200, Philipp Kern wrote: > On 2025-04-23 19:17, Gunnar Wolf wrote: > > Adam D. Barratt dijo [Wed, Apr 23, 2025 at 05:13:07PM +0100]: > > > > Ah, then this would seem to be safe to deploy now, and the file types > > > > problem could be fixed later on. I have ha

Bug#1104002: mariadb: FTBFS on sparc64: new LLM embedding / vector functions crash on sparc64

2025-04-23 Thread John Paul Adrian Glaubitz
Hi Otto, On Wed, 2025-04-23 at 13:32 -0700, Otto Kekäläinen wrote: > I reported this to upstream, who is willing to look into it, but have > no sparc64 access. > > Thus I was hoping some of the Debian sparc64 porters could step in and > test a bit, and help upstream, as they seem responsive to fi

Bug#1103770: kitty: Does not accept -name command line option

2025-04-23 Thread Bill Allombert
On Wed, Apr 23, 2025 at 06:04:53PM +0200, martin f krafft wrote: > Regarding the following, written by "Simon McVittie" on 2025-04-23 at 16:46 > Uhr +0100: > > If the maintainers of kitty don't want to add a -name option, then I > > think this should be closed as "won't fix". Policy is clear about

Bug#1104002: mariadb: FTBFS on sparc64: new LLM embedding / vector functions crash on sparc64

2025-04-23 Thread Otto Kekäläinen
Package: mariadb Version: 1:11.8.1-1 Tags: ftbfs X-Debbugs-CC: debian-sp...@lists.debian.org User: debian-sp...@lists.debian.org Usertags: sparc64 Forwarded: https://jira.mariadb.org/browse/MDEV-36670 **REQUESTING HELP FROM SPARC64 PORTERS IN DEBIAN** In a build of MariaDB 11.8.1 on official Debi

Bug#1103996: RFS: hujson/0.0~git20250226.ec1d1c1-1 [ITP] -- JSON for Humans (JWCC: JSON w/ comments and trailing commas)

2025-04-23 Thread Facundo Acevedo
Hi, I've just changed it in the same changelog line and reuploaded the package, but the change doesn't seem to be reflected in the mentors page, should I add a new changelog entry? Thanks On 4/23/25 15:36, Phil Wyett wrote: Control: tags -1 +moreinfo Hi, Please target either the 'unstable

Bug#1103999: unblock: yelp-xsl/42.1-3

2025-04-23 Thread Jeremy Bícha
Package: release.debian.org Control: affects -1 + src:yelp-xsl X-Debbugs-Cc: yelp-...@packages.debian.org User: release.debian@packages.debian.org Usertags: unblock Please allow yelp-xsl 42.1-3 to migrate faster than 10 days. [ Reason ] This is the yelp-xsl part of the security fix for https:

Bug#1055307: busybox: CVE-2023-39810

2025-04-23 Thread Salvatore Bonaccorso
Control: tags -1 + fixed-upstream On Fri, Nov 03, 2023 at 08:26:28PM +0100, Moritz Mühlenhoff wrote: > Source: busybox > X-Debbugs-CC: t...@security.debian.org > Severity: important > Tags: security > > Hi, > > The following vulnerability was published for busybox. > > CVE-2023-39810[0]: > | An

Bug#1103959: firmware-realtek: Corrupted firmware file rtw8852c_fw-1.bin

2025-04-23 Thread Vladimir K
I'm on current sid. Downgrading to firmware-realtek 20250311-1 and re-modprobing rtw89_8852ce fixes the issue.

Bug#1103909: libnuma1: free(): invalid pointer in set_nodemask_size

2025-04-23 Thread Richard Stanway
Hi Ian, Thanks for the quick response! Unfortunately it seems I may have jumped the gun here - I saw the bugfix commit specifically mentioned mimalloc which I am also trying to use and running into segfaults, however after further debugging and testing I have been able to reproduce my mimalloc-rela

Bug#1104001: displaycal: Dependency not installed with the package via apt

2025-04-23 Thread amir alavi
Package: displaycal Version: 3.9.15-1 Severity: important Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** -Installing the package via Apt package manager and trying to start, won't start properly/ -I started the application from start menu,

Bug#1103959: firmware-realtek: Corrupted firmware file rtw8852c_fw-1.bin

2025-04-23 Thread Vladimir K
Not sure if related, but my laptop's BIOS freaked out and did an autorestore from its backup (LENOVO ThinkBook 14 G7 IML, BIOS version 1.38 P3CN38WW). The first thing I encountered after that and resume from hibernation, is broken rtw89_8852ce due to this firmware bug.

Bug#1103902: austin: Vcs-* fields incorrectly refer to upstream

2025-04-23 Thread Gabriele
Hi Colin Thanks for reaching out. The package sources are available from the devel branch of the upstream repository (https://github.com/P403n1x87/austin/tree/debian). It would be great if one could specify a branch (I haven't looked into Debian packaging in a while, so I don't know if that's now

Bug#1103921: fossil FTCBFS for arm64: passes -mbranch-protection=standard to the build compiler

2025-04-23 Thread Helmut Grohne
Hi Ema, On Wed, Apr 23, 2025 at 10:09:41AM +0200, Emanuele Rocca wrote: > On 2025-04-22 10:19, Helmut Grohne wrote: > > +override_dh_auto_build: > > + dh_auto_build -- 'BCCFLAGS=$(CPPFLAGS_FOR_BUIL) $(CFLAGS_FOR_BUILD)' > > It looks like there's a typo here, this should be CPPFLAGS_FOR_BUILD.

Bug#1098822: otpclient: otpclient complains about lock memory limits (show_memlock_warning)

2025-04-23 Thread Soren Stoutner
It looks like the otpclient package could change the default maximum memlock for all users by installing a config file in /etc/systemd/ user.conf.d. There are two memlock values, one for root and one for other users. The current value for root can be read from /proc/1/limits. On my system it

Bug#1101418: Please help confirm: Does #1101418 sound like it will break havoc?

2025-04-23 Thread Adam D. Barratt
On Wed, 2025-04-23 at 02:24 +0200, Guillem Jover wrote: > Hi! > > On Mon, 2025-04-21 at 22:00:09 +0100, Adam D. Barratt wrote: > [...] > > userdir-ldap maintains its own list of keyrings which are deployed > > to those hosts requesting them (e.g. ftp-master). While the > > keyrings are copied fro

Bug#1101455: Thank you!

2025-04-23 Thread Rylie Pavlik
Ah, so that's why it's broken... Sorry I had missed that, hadn't looked at the actual contents of the manifest in a while. I can actually just fix that with a CMake flag to tell it to spit out a manifest containing only the SONAME, which is what I thought it was doing already. I'll include a fix

Bug#1103931: gnupg2: Please don't build-depend on swtpm on unsupported architectures

2025-04-23 Thread Gregor Riepl
(sorry, this should have included a Cc... I added some additional analysis below) Also I am not to hot about hardcoding the list of archs where swtpm is available in debian/control but do not see a better alternatives. - Any ideas? swtpm is a software TPM implementation[1] and shouldn't deman

Bug#959159: export-orig fails to recreate tarball from `origin/pristine-tar` when signatures are used

2025-04-23 Thread Otto Kekäläinen
This https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=959159 seems as a duplicate of https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850167 In both cases a `origin/pristine-tar` already exists but git-buildpackage does not automatically use it, because a local `pristine-tar` branch didn't exist

Bug#1102673: haproxy: diff for NMU version 3.0.10-0.1

2025-04-23 Thread Adrian Bunk
Control: tags 1102673 + patch Control: tags 1102673 + pending Dear maintainer, I've prepared an NMU for haproxy (versioned as 3.0.10-0.1) and uploaded it to DELAYED/7. Please feel free to tell me if I should cancel it. Upgrading to 3.0.10 looked more reasonable to me than backporting just the

Bug#1101418: Please help confirm: Does #1101418 sound like it will break havoc?

2025-04-23 Thread Philipp Kern
On 2025-04-23 19:17, Gunnar Wolf wrote: Adam D. Barratt dijo [Wed, Apr 23, 2025 at 05:13:07PM +0100]: Ah, then this would seem to be safe to deploy now, and the file types problem could be fixed later on. I have had several changes for userdir-ldap pending submission, but not this one about shut

Bug#1102958: Failure due to /tmp permissions

2025-04-23 Thread Brian Pellin
The tests are failing, because pdsh identities the module directory as insecure during the test run in the build environment. pdsh@sbuild: module path "/build/reproducible-path/pdsh-2.34/src/modules/.libs" insecure. pdsh@sbuild: "/tmp": Owner not root, current uid, or pdsh executable owner

Bug#1103998: unblock: yelp/42.2-3

2025-04-23 Thread Jeremy Bícha
I posted the wrong CVE link. For yelp and yelp-xsl it is https://security-tracker.debian.org/tracker/CVE-2025-3155 Thank you, Jeremy Bícha

Bug#1103996: RFS: hujson/0.0~git20250226.ec1d1c1-1 [ITP] -- JSON for Humans (JWCC: JSON w/ comments and trailing commas)

2025-04-23 Thread Phil Wyett
Control: tags -1 +moreinfo Hi, Please target either the 'unstable' or 'experimental' distribution. -- Regards Phil Donate: https://buymeacoffee.com/kathenasorg -- "I play the game for the game’s own sake" Arthur Conan Doyle - The Adventure of the Bruce-Partington Plans -- Internet Relay

Bug#1104000: unblock: pymupdf/1.25.4+ds1-3

2025-04-23 Thread Johannes Schauer Marin Rodrigues
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock X-Debbugs-Cc: pymu...@packages.debian.org, b...@debian.org Control: affects -1 + src:pymupdf Please unblock package pymupdf [ Reason ] pymupdf was removed from testing because of this bug:

Bug#1103998: unblock: yelp/42.2-3

2025-04-23 Thread Jeremy Bícha
Package: release.debian.org Control: affects -1 + src:epiphany-browser X-Debbugs-Cc: epiphany-brow...@packages.debian.org User: release.debian@packages.debian.org Usertags: unblock Please allow yelp 42.2-3 to migrate faster than 10 days. [ Reason ] This is the yelp part of the security fix fo

Bug#1103993: Acknowledgement (installation-reports: network configuration does not ask for ESSID in Thinkpad P1 Gen7)

2025-04-23 Thread Marcin Owsiany
I noticed after filing that report #1095302 is even better, apart from its submitter not being sure if WiFi should work in the installer. I'm sure it should, because it worked flawlessly on an older ThinkPad P1 for me. Marcin

Bug#980148: mesa-vulkan-drivers: file content conflict in Multi-Arch:same package

2025-04-23 Thread Simon McVittie
Control: tags -1 + patch On Wed, 23 Apr 2025 at 15:59:00 +0100, Simon McVittie wrote: I think the "option 2" that I proposed is entirely feasible for trixie, actually. I'm testing an implementation now. https://salsa.debian.org/xorg-team/lib/mesa/-/merge_requests/55 works successfully on my I

Bug#1103938: curl FTCBFS: intentionally broken for cross compilation

2025-04-23 Thread Helmut Grohne
Hello Daniel, please accept apologies for my bad conduct. What I have written does not meet Debian's code of conduct and its second item in particular. I sent it in a hurry after having been faced with a multitude of regressions in various packages while feeling pressured by Debian's freeze timel

Bug#1103423: src:kitty: fails to migrate to testing for too long: FTBFS on s390x

2025-04-23 Thread Nilesh Patra
Hi Paul, On 17/04/25 4:20 pm, Paul Gevers wrote: > Source: kitty > Version: 0.39.1-1 > Severity: serious > Control: close -1 0.40.0-1 > Tags: sid trixie > User: release.debian@packages.debian.org > Usertags: out-of-sync > X-Debbugs-CC: debian-s...@lists.debian.org > User: debian-s...@lists.deb

Bug#1068578: RFH: singularity-container -- container platform focused on supporting "Mobility of Compute"

2025-04-23 Thread Nilesh Patra
As I told here as well[1], this is a quick message to the bug report to say this that I will no longer be making further uploads of this package. I have effectively single handedly maintained it for over 2 years -- that was a good run! With apptainer coming up as almost a drop-in replacement, I

Bug#1103995: unblock: rust-debcargo/2.7.8-4

2025-04-23 Thread Fabian Grünbichler
Package: release.debian.org Severity: normal X-Debbugs-Cc: rust-debca...@packages.debian.org, debian-r...@lists.debian.org, debian@fabian.gruenbichler.email Control: affects -1 + src:rust-debcargo User: release.debian@packages.debian.org Usertags: unblock Please unblock package rust-debcargo

Bug#1103879: ejabberd cluster node does not start after upgrade (bookworm -> trixie)

2025-04-23 Thread Markus Gschwendt
On Wed, 2025-04-23 at 16:44 +0200, Philipp Huebner wrote: > > for what architecture do you need the supposedly fixed ejabberd > package? Thx for the rocket-fast response :) amd64 Markus

Bug#1103996: RFS: hujson/0.0~git20250226.ec1d1c1-1 [ITP] -- JSON for Humans (JWCC: JSON w/ comments and trailing commas)

2025-04-23 Thread Facundo Acevedo
Package: sponsorship-requests Severity: wishlist Dear mentors, I am looking for a sponsor for my package "hujson": * Package name : hujson Version : 0.0~git20250226.ec1d1c1-1 Upstream contact : i...@tailscale.com * URL : https://github.com/tailscale/hujson * License : BSD-3-clause * Vcs : https

Bug#993856: SR-IOV vf assignment fails using network pool instead of hard-coded PCEe bus address

2025-04-23 Thread Tim Small
This bug still seems to be present in Trixie. Looking at the contents of the libvirt-.files which is generated by libvirt, it's missing the necessary PCI permissions when an SR-IOV virtual function is assigned via a network instead of via a static PCI device address. Specifically in this case, th

Bug#1103989: RFS: avocado/110.0-1 [ITP] -- Set of tools and libraries to help with automated testing

2025-04-23 Thread Phil Wyett
Control: tags -1 +moreinfo Arif, Review of upload: 2025-04-23 16:41 For information about the tests run, see: https://wiki.debian.org/PhilWyett/DebianMentoring Test 7 (licenserecon): Information only philwyett@ks-tarkin:~/Development/builder/debian/avocado-110.0$ lrc en: Versions: licensereco

Bug#1103239: marked as done (all-knowing-dns: service doesn't start at all (Net::DNS incompatibility))

2025-04-23 Thread Manawyrm
Hi, sorry to bother again. Sadly the bugfix wasn't entirely OK. all-knowing-dns will terminate after 10 minutes because of a hardcoded (and unchangeable) timeout. This was work-arounded in https://github.com/all-knowing-dns/all-knowing-dns/pull/6 Just pulling this change isn't quite enough

Bug#1103994: dh-make-R: 'generic' runner runs testthat tests from wrong directory, failing them

2025-04-23 Thread Rebecca N. Palmer
Package: dh-r Version: 20241218 Tags: patch The 'generic' test runner (but not 'run-unit-test') runs tests/*.R with the current directory at the package root. This fails for tests that refer to other files and expect to be run from the tests directory (e.g. this is standard for tests that use

Bug#1102928: mpich: mpi-defaults autopkgtest regressions on 32-bit

2025-04-23 Thread Simon McVittie
Control: clone 1102928 -2 Control: retitle 1102928 mpich: mpi-c.pc no longer available, causing mpi-defaults autopkgtest regression Control: retitle -2 mpich: mpi-fort.pc no longer available, causing mpi-defaults autopkgtest regression On Wed, 23 Apr 2025 at 10:58:30 +0100, Alastair McKinstry w

Bug#1101418: Please help confirm: Does #1101418 sound like it will break havoc?

2025-04-23 Thread Gunnar Wolf
Adam D. Barratt dijo [Wed, Apr 23, 2025 at 05:13:07PM +0100]: Ah, then this would seem to be safe to deploy now, and the file types problem could be fixed later on. I have had several changes for userdir-ldap pending submission, but not this one about shutil.copy(), thanks. Will see how to improv

Bug#1103894: RUSTSEC-2025-0020

2025-04-23 Thread NoisyCoil
Source: rust-pyo3 Followup-For: Bug #1103894 X-Debbugs-Cc: noisyc...@tutanota.com Control: tags -1 + pending It looks like the fix [1] can be easily backported to v0.22, so we can avoid a transition to v0.24 late in the trixie freeze. Fixed in VCS, waiting for upload. Thanks! [1] https://github

Bug#1103990: -quiet shows informational messages

2025-04-23 Thread martin f krafft
Package: xclip Version: 0.13-4 Severity: minor File: /usr/bin/xclip >From the manpage: > -quiet show informational messages on the terminal and run in the foreground No. Just no. ;) (it actually does do this, but that is not being -quiet) -- System Information: Debian Release: trixie/sid APT

Bug#1103787: gpgme1.0: Testsuite error on 32bit archs with 64bit time (FAIL with gnupg 2.4, SKIP with 2.2)

2025-04-23 Thread Andreas Metzler
On 2025-04-21 Andreas Metzler wrote: > Source: gpgme1.0 [...] > FAIL! : AddExistingSubkeyJobTest::testAddExistingSubkeyWithExpiration() > Compared values are not the same >Actual (result.code()) : 0 >Expected (static_cast(GPG_ERR_INV_TIME)): 161 >Loc: [../../../

Bug#1103985: ITP: cadquery -- Python module for building parametric 3D CAD models

2025-04-23 Thread Matthias Urlichs
Thanks, that's a good idea. Building that thing from scratch is a PITA, and so is getting it from Conda. Maybe also add build123d? And/or cq-editor? * Package name: cadquery Version : 2.5.2 Upstream Contact: David Cowden -- -- regards -- -- Matthias Urlichs BEGIN:VCARD VER

Bug#1103989: RFS: avocado/110.0-1 [ITP] -- Set of tools and libraries to help with automated testing

2025-04-23 Thread Arif Ali
Package: sponsorship-requests Severity: wishlist Dear mentors, This is my second attempt, the previous one got rejected yesterday, hopefully this will resolve the issues wrt adding more items to debian/copyright that I had missed. I am looking for a sponsor for my package "avocado": * Package

Bug#1103889: Please switch to libpdfbox2-java

2025-04-23 Thread gregor herrmann
On Tue, 22 Apr 2025 16:07:59 +0200, Moritz Muehlenhoff wrote: Your package depends on libpdfbox-java, which is a long EOLed version with open security issues of what is packaged as libpdfbox2-java for the current releases of Pdfbox. Please port your package to use libpdfbox2-java instead. FWI

Bug#1070999: liquidctl: Add Appstream metainfo announcing HW support

2025-04-23 Thread Petter Reinholdtsen
[László Böszörményi] > Do you consider this forwarding to upstream? It would help all users > of liquidctl, not just Debian ones. It is a good idea, but I have not had capacity to do so. I would love it if someone did pass it upstream. -- Happy hacking Petter Reinholdtsen

Bug#1102554: Outdated pkgconfig/xmlrpc.pc

2025-04-23 Thread Richard Fuchs
Hi, The packages pkgconfig/xmlrpc.pc file still refers to xmlrpc_expat which now doesn't exist any more, so building anything against xmlrpc-c fails. $ pkg-config xmlrpc --libs Package xmlrpc_expat was not found in the pkg-config search path. Perhaps you should add the directory containing `xm

Bug#1103770: kitty: Does not accept -name command line option

2025-04-23 Thread martin f krafft
Regarding the following, written by "Simon McVittie" on 2025-04-23 at 16:46 Uhr +0100: If the maintainers of kitty don't want to add a -name option, then I think this should be closed as "won't fix". Policy is clear about the requirements for a terminal to be available via the x-terminal-emula

Bug#1103613: /usr/bin/fvwm3: After a while FVWM pager ceases to draw WindowLabels (*FvwmPager: SmallFont) for freshly opened windows

2025-04-23 Thread Jaimos Skriletz
On Sat, 19 Apr 2025 18:31:28 +0200 Axel Rohde wrote: > The bug is actually already present in FVWM2 since 2.6.8, there I've been > doing the following to work around the issue: > git revert ffe942d66cdb1a24d761d9e89c1a4dab49f2400c > Have you tested is reverting that commit in fvwm3 has any effec

Bug#1103988: rust-tokio: RUSTSEC-2025-0023: Broadcast channel calls clone in parallel, but does not require Sync

2025-04-23 Thread NoisyCoil
Source: rust-tokio Followup-For: Bug #1103988 X-Debbugs-Cc: noisyc...@tutanota.com Control: tags -1 + pending Fixed in VCS, waiting for upload. Thanks!

Bug#1103770: kitty: Does not accept -name command line option

2025-04-23 Thread Nilesh Patra
Control: tags -1 wontfix Control: close -1 Thanks a lot Simon. I'm closing the bug as such then. Best, Nilesh

Bug#1042468: scrcpy: import version 2.1.1 into debian

2025-04-23 Thread martin f krafft
Regarding the following, written by "Yangfl" on 2025-03-27 at 22:40 Uhr +0800: I've sent RFS request #1077968, but the sponsor is not responding. I'm still looking for an upload sponsor. Crossing my fingers. I haven't done anything for Debian in years, and forgot most of it, so I cannot help,

Bug#1094825: wpa: Please package new upstream release: 2.11

2025-04-23 Thread Bin Li
Hi Santiago & wpa maintainer, I’m not a maintainer but am working on packaging a more recent upstream version of wpa for unstable, as requested by customers to support WIFI 7. Since the Trixie soft freeze started on April 15, 2025, is it possible that we put the new version into Trixie? I’d welc

Bug#1070999: liquidctl: Add Appstream metainfo announcing HW support

2025-04-23 Thread GCS
Hi Petter, On Sun, May 12, 2024 at 9:00 PM Petter Reinholdtsen wrote: > Here is a patch for liquidctl to add Appstream metainfo XML announcing the > hardware handled by this package. > > Including this information in the package will ensure programs mapping > hardware to packages using Appstream

Bug#1093851: liquidctl fails on start since python3-pil 11.1.0-1

2025-04-23 Thread GCS
Hi Nick, Can you please try upgrading your system? It was #1093826 [1] I believe, a bug in python3-pil itself. Regards, Laszlo/GCS [1] https://bugs.debian.org/1093826

Bug#1103770: kitty: Does not accept -name command line option

2025-04-23 Thread Simon McVittie
Some missing context here is the original bug report from martin f krafft: Unfortunately, Kitty does not accept the `-name` command-line option, and instead spews and error message. This is a problem when it is used as a drop-in to `x-terminal-emulator`, which sometimes gets passed the `-name`

Bug#1099076: RFS: redwax-tool/0.9.9-1 [ITP] -- Read certificates and keys from your chosen sources, filter the certificates

2025-04-23 Thread Phil Wyett
Control: tags -1 -moreinfo Control: tags -1 +confirmed Graham, Looks good to me and am tagging as 'confirmed'. I hope a DD can have a look at the package soon, offer issues or sponsor. -- Regards Phil Donate: https://buymeacoffee.com/kathenasorg -- "I play the game for the game’s own sake"

  1   2   >