Bug#1104135: CVE-2025-3573

2025-04-25 Thread Bastien Roucaries
Source: znuny Version: 6.5.14-1 Severity: important Tags: security upstream X-Debbugs-Cc: ro...@debian.org, Debian Security Team Hi, The following vulnerability was published for src:znuny CVE-2025-3573[0]: | Versions of the package jquery-validation before 1.20.0 are | vulnerable to Cross-sit

Bug#1104136: CVE-2025-3573

2025-04-25 Thread Bastien Roucaries
Source: phpmyadmin Version: 4:5.2.2-really+dfsg-1 Severity: important Tags: security upstream X-Debbugs-Cc: ro...@debian.org, Debian Security Team Hi, The following vulnerability was published for src:phpmyadmin CVE-2025-3573[0]: | Versions of the package jquery-validation before 1.20.0 are | v

Bug#1104145: Embded jquery-validation

2025-04-25 Thread Bastien Roucaries
Source: civicrm Version: 5.68.1+dfsg1-1 Severity: important control: block -1 by 622257 Hi, You should deembed jquery-validation Thanks Bastien signature.asc Description: This is a digitally signed message part.

Bug#1104140: phpmyadmin: Embded jquery-validation

2025-04-25 Thread Bastien Roucaries
Source: phpmyadmin Version: 4:5.2.2-really+dfsg-1 Severity: important control: block -1 by 622257 Hi, You should deembed jquery-validation Thanks Bastien signature.asc Description: This is a digitally signed message part.

Bug#1104144: Embded jquery-validation

2025-04-25 Thread Bastien Roucaries
Source: kalkun Version: 0.8.3.1-1 Severity: important control: block -1 by 622257 Hi, You should deembed jquery-validation Thanks Bastien signature.asc Description: This is a digitally signed message part.

Bug#1104143: Embded jquery-validation

2025-04-25 Thread Bastien Roucaries
Source: znuny Version: 6.5.14-1 Severity: important control: block -1 by 622257 Hi, You should deembed jquery-validation Thanks Bastien signature.asc Description: This is a digitally signed message part.

Bug#1104142: phpmyadmin: Embded jquery-validation

2025-04-25 Thread Bastien Roucaries
Source: znuny Version: 6.5.14-1 Severity: important control: block -1 by 622257 Hi, You should deembed jquery-validation Thanks Bastien signature.asc Description: This is a digitally signed message part.

Bug#1104134: CVE-2025-3573

2025-04-25 Thread Bastien Roucaries
Source: kalkun Version: 0.8.3.1-1 Severity: important Tags: security upstream X-Debbugs-Cc: ro...@debian.org, Debian Security Team Hi, The following vulnerability was published for kalkun CVE-2025-3573[0]: | Versions of the package jquery-validation before 1.20.0 are | vulnerable to Cross-site

Bug#1103018: ruby-rmagick fails to coinstall

2025-04-21 Thread Bastien Roucaries
Le lundi 21 avril 2025, 12:03:52 heure d’été d’Europe centrale Chris Hofstaedtler a écrit : > On Sun, Apr 13, 2025 at 10:50:03PM +0200, Bastien Roucaries wrote: > > Le dimanche 13 avril 2025, 22:47:54 heure d’été d’Europe centrale Chris > > > > Hofstaedtler a écrit : >

Bug#1076350: nodejs i386 affects node-glob

2025-04-21 Thread Bastien Roucaries
Le lundi 21 avril 2025, 10:10:26 heure d’été d’Europe centrale Bastien Roucaries a écrit : > Le lundi 21 avril 2025, 02:06:51 heure d’été d’Europe centrale Jérémy Lal a > > écrit : > > Le lun. 21 avr. 2025 à 02:04, Jérémy Lal a écrit : > > > Le lun. 21 avr. 2025 à 02:

Bug#1076350: nodejs i386 affects node-glob

2025-04-20 Thread Bastien Roucaries
Le lundi 21 avril 2025, 01:51:23 heure d’été d’Europe centrale Jérémy Lal a écrit : > Le lun. 21 avr. 2025 à 00:09, Bastien Roucaries a écrit : > > control: affects -1 node-glob > > > > See https://salsa.debian.org/js-team/node-glob/-/jobs/7463824 > > > >

Bug#1076350: nodejs i386 affects node-glob

2025-04-20 Thread Bastien Roucaries
control: affects -1 node-glob See https://salsa.debian.org/js-team/node-glob/-/jobs/7463824 Kapouer did you try to run under valgrind ? valgrind may be help here or electric fence. Bastien signature.asc Description: This is a digitally signed message part.

Bug#1103686: RM: node-mkdirp-classic -- ROM; RC buggy/no depends

2025-04-20 Thread Bastien Roucaries
Package: ftp.debian.org Severity: normal X-Debbugs-Cc: node-mkdirp-clas...@packages.debian.org Control: affects -1 + src:node-mkdirp-classic User: ftp.debian@packages.debian.org Usertags: remove Could you please remove this package ? THanks signature.asc Description: This is a digitally si

Bug#1103685: RM: RC buggy

2025-04-20 Thread Bastien Roucaries
Source: node-mkdirp-classic Severity: serious This package should be RM this is an old fork of mkdirp with all CVE on it signature.asc Description: This is a digitally signed message part.

Bug#1103668: whalebuilder: Could not run

2025-04-20 Thread Bastien Roucaries
Package: whalebuilder Version: 0.11 Severity: grave Tags: upstream Justification: renders package unusable Fail to run whalebuilder create --debootstrap whalebuilder_debian_debootstrap:sid /usr/bin/whalebuilder:30:in `': undefined method `exists?' for class File (NoMethodError) if

Bug#1103018: ruby-rmagick fails to coinstall

2025-04-13 Thread Bastien Roucaries
Le dimanche 13 avril 2025, 22:47:54 heure d’été d’Europe centrale Chris Hofstaedtler a écrit : > * Bastien Roucaries [250413 22:09]: > >Le dimanche 13 avril 2025, 20:55:07 heure d’été d’Europe centrale Helmut > > > >Grohne a écrit : > >> Package: ruby-rm

Bug#1103018: ruby-rmagick fails to coinstall

2025-04-13 Thread Bastien Roucaries
Le dimanche 13 avril 2025, 20:55:07 heure d’été d’Europe centrale Helmut Grohne a écrit : > Package: ruby-rmagick > Version: 6.0.1-2+b4 > Severity: serious > User: debian...@lists.debian.org > Usertags: fileconflict > > ruby-rmagick fails to coinstall despite explicitly declaring that > capabilit

Bug#1102974: bookworm-pu: package twitter-bootstrap4/4.6.1+dfsg1-4+deb12u1

2025-04-13 Thread Bastien Roucaries
Package: release.debian.org Severity: normal Tags: bookworm X-Debbugs-Cc: twitter-bootstr...@packages.debian.org Control: affects -1 + src:twitter-bootstrap4 User: release.debian@packages.debian.org Usertags: pu [ Reason ] CVE-2024-6531 [ Impact ] CVE-2024-6531 is not closed [ Tests ] No bu

Bug#1102923: bookworm-pu: package twitter-bootstrap3/3.4.1+dfsg-3+deb12u1

2025-04-13 Thread Bastien Roucaries
Package: release.debian.org Severity: normal Tags: bookworm X-Debbugs-Cc: twitter-bootstr...@packages.debian.org Control: affects -1 + src:twitter-bootstrap3 User: release.debian@packages.debian.org Usertags: pu [ Reason ] XSS security problems [ Impact ] Vulnerability to XSS attack [ Tests

Bug#1102677: ckeditor4: EOL upstream commercial support only

2025-04-11 Thread Bastien Roucaries
Source: ckeditor4 Severity: serious Tags: security Justification: security issue X-Debbugs-Cc: Debian Security Team ckeditor4 is end of lifed since June 2023: https://ckeditor.com/blog/ckeditor-4-end-of-life/ ckeditor4 LTS is commercial see https://github.com/ckeditor/ckeditor4/blob/master/LICEN

Bug#1102675: bookworm-pu: package wpa/2:2.10-12+deb12u3

2025-04-11 Thread Bastien Roucaries
Package: release.debian.org Severity: normal Tags: bookworm X-Debbugs-Cc: w...@packages.debian.org Control: affects -1 + src:wpa User: release.debian@packages.debian.org Usertags: pu [ Reason ] CVE-2022-37660 [ Impact ] security problem low [ Tests ] no but patch is straight forward [ Ris

Bug#1064140: imagemagick: NMU diff for 64-bit time_t transition

2024-02-17 Thread Bastien ROUCARIES
Hi, Go ahead ASAP Bastien Le sam. 17 févr. 2024 à 17:40, Steve Langasek a écrit : > > Source: imagemagick > Version: 8:6.9.12.98+dfsg1-5 > Severity: important > Tags: patch pending sid trixie > User: debian-...@lists.debian.org > Usertags: time-t > > NOTICE: these changes must not be uploaded t

Bug#1063508: ITP: node-long -- Class for representing 64-bit two's-complement integer value

2024-02-17 Thread Bastien ROUCARIES
Hi all I have done some work here https://salsa.debian.org/js-team/node-long/ Yadd could you get a glimpse why the webassembly is not strictly identical ? Bastien Le ven. 16 févr. 2024 à 19:16, Bastien ROUCARIES a écrit : > > Hi, > > . > > > > I've give

Bug#1063508: ITP: node-long -- Class for representing 64-bit two's-complement integer value

2024-02-16 Thread Bastien ROUCARIES
Hi, . > > I've given access to the js salsa team. > > [1] https://salsa.debian.org/3v1n0-guest/node-esm2umd/ It is not the node-long tree... >

Bug#1063508: ITP: node-long -- Class for representing 64-bit two's-complement integer value

2024-02-10 Thread Bastien ROUCARIES
t do some repackaged sources. > > Il giorno ven 9 feb 2024 alle ore 21:33 Bastien ROUCARIES > ha scritto: > > > > > > > > Le ven. 9 févr. 2024 à 04:42, Marco Trevisan a écrit : > >> > >> Package: wnpp > >> Severity: wishlist > &

Bug#1063508: ITP: node-long -- Class for representing 64-bit two's-complement integer value

2024-02-09 Thread Bastien ROUCARIES
Le ven. 9 févr. 2024 à 04:42, Marco Trevisan a écrit : > Package: wnpp > Severity: wishlist > Owner: Marco Trevisan (Treviño) > X-Debbugs-CC: debian-de...@lists.debian.org > > * Package name: node-long > Version : 5.2.3 > Upstream Author : Daniel Wirtz > * URL : http

Bug#1038637: closed by Debian FTP Masters (reply to Bastien Roucariès ) (Bug#1038637: fixed in imagemagick 8:6.9.12.98+dfsg1-4)

2023-10-30 Thread Bastien ROUCARIES
Le lun. 30 oct. 2023 à 11:54, Thomas a écrit : > > This is great, but it looks like the change uses libraw-bin, and not > libraw-dev? I may be mistaken, but I believe the latter is required for > compilation? it already use libraw-dev for compilation since last unstable upload. I have only change

Bug#1020358: libmagickcore-6.q16-7: transition gsfonts/gsfonts-x11 --> fonts-urw-base35

2023-10-23 Thread Bastien ROUCARIES
Le lun. 23 oct. 2023 à 11:45, Vincent Lefevre a écrit : > Control: found -1 8:6.9.12.98+dfsg1-2 > > On 2022-09-20 18:18:23 +0200, fab...@debian.org wrote: > > you are receiving this bug report, because your package declares a > > relationship with the gsfonts and/or gsfonts-x11 packages. Both > >

Bug#990028: /usr/bin/mogrify-im6.q16: raw support requires ufraw-batch which is no longer in Debian

2023-07-29 Thread Bastien ROUCARIES
Hi, Help is welcome on the imagemagick side. You could step in as a maint or test salsa tree Le lun. 24 juil. 2023 à 17:21, Darshaka Pathirana a écrit : > > Hi, > > On Fri, 03 Sep 2021 22:00:12 + Debian FTP Masters > wrote: > > Source: imagemagick > > Source-Version: 8:6.9.12.20+dfsg1-1 >

Bug#1037176: ITP: typesense -- Fast, typo-tolerant search engine

2023-06-07 Thread Bastien ROUCARIES
Le mer. 7 juin 2023 à 08:00, Didier 'OdyX' Raboud a écrit : > Package: wnpp > Severity: wishlist > Owner: Didier 'OdyX' Raboud > X-Debbugs-Cc: debian-de...@lists.debian.org > > Package name: typesense > Version : 0.24.1 > Upstream Contact: TypeSense team > URL :

Bug#977027: [Pkg-javascript-devel] Bug#977027: rhino breaks dojo autopkgtest: Cannot set property "dojo" of null to "[object Object]"

2023-04-06 Thread Bastien ROUCARIES
Le jeu. 6 avr. 2023 à 11:24, Paul Gevers a écrit : > > Control: tags -1 pending patch > > On 06-04-2023 12:54, Paul Gevers wrote: > > I'm going to prepare NMU's for rhino and dojo and upload to DELAYED/5 > > Please find the debdiffs attached. Go ahead > > Paul > -- > Pkg-javascript-devel mailing

Bug#977027: [Pkg-javascript-devel] Bug#977027: rhino breaks dojo autopkgtest: Cannot set property "dojo" of null to "[object Object]"

2023-03-27 Thread Bastien ROUCARIES
Le dim. 26 mars 2023 à 21:39, Markus Koschany a écrit : > Hi Graham, > > Am Sonntag, dem 26.03.2023 um 19:28 +0200 schrieb Graham Inggs: > > Hi Markus > > > > On Sun, 26 Mar 2023 at 16:34, Markus Koschany wrote: > > > 1. There is no transition needed because only shrinksafe is affected > by the

Bug#903158: Multi-Arch: foreign and -dbgsym: too weak dependency

2022-10-08 Thread Bastien ROUCARIES
Le sam. 8 oct. 2022 à 11:00, Niels Thykier a écrit : > Hi, > > I have BCC'ed debian-devel on this email to ask for input on this bug > (#903158) and ask parties that are interested to follow up there. I am > considering to remove the dependencies for -dbgsym packages on the > grounds that: > >

Bug#993301: prototypejs: FTBFS

2021-11-18 Thread Bastien ROUCARIES
Le mer. 17 nov. 2021 à 13:02, Andreas Beckmann a écrit : > Control: tag -1 moreinfo > > On Mon, 30 Aug 2021 12:23:22 + "=?utf-8?q?Bastien_Roucari=C3=A8s?=" > wrote: > > Source: prototypejs > > Severity: serious > > Justification: 4 > > > > Dear Maintainer, > > > > The source is https://githu

Bug#996909: [Pkg-javascript-devel] Bug#996909: acorn: Invalid package section for node-debbundle-acorn

2021-10-20 Thread Bastien ROUCARIES
Go nmu I will be far from a computer a few days... Do no t forger to apply to salsa or at least do a merge request Thanks Le mer. 20 oct. 2021 à 18:06, Steve Langasek a écrit : > Package: acorn > Version: 8.5.0+ds+~cs24.17.6-2 > Severity: normal > Tags: patch > User: ubuntu-de...@lists.ubuntu

Bug#996836: [Pkg-javascript-devel] Bug#996836: node-webpack: webpack embeds binary files in es-module-lexer component

2021-10-19 Thread Bastien ROUCARIES
Le mar. 19 oct. 2021 à 16:12, Yadd a écrit : > Source: node-webpack > Version: 5.58.2+~cs5.11.7-1 > Severity: serious > Justification: DFSG > > webpack 5.58 uses es-module-lexer. For now, this component is downloaded > including some binary files (WASM,...). This should be fixed before > going to

Bug#994451: golang-github-containers-common: secomp.json does not include newer syscall used by stable kernel/glibc on arm

2021-09-27 Thread Bastien ROUCARIES
Le lun. 27 sept. 2021 à 16:08, Reinhard Tartler a écrit : > > > On Thu, Sep 16, 2021 at 4:18 AM Bastien Roucariès > wrote: >> >> Package: golang-github-containers-common >> Version: 0.33.4+ds1-1 >> Severity: critical >> Tags: upstream >> Forwarded: >> https://github.com/containers/common/commit

Bug#994974: [Pkg-javascript-devel] Bug#994974: node-define-property: Please deembed and fix vulnereability

2021-09-24 Thread Bastien ROUCARIES
Le ven. 24 sept. 2021 à 08:16, Jonas Smedegaard a écrit : > > Hi Bastien, > > Quoting Bastien Roucariès (2021-09-24 09:49:37) > > Package: node-define-property > > Severity: serious > > Tags: security upstream fixed-upstream > > Justification: security bug > > Forwarded: https://github.com/jonschl

Bug#922075: [Pkg-javascript-devel] Bug#922075: npm: segfault during extract on i386

2021-09-21 Thread Bastien ROUCARIES
Le mar. 21 sept. 2021 à 08:58, Ondrej Zary a écrit : > > On Tuesday 21 September 2021, Bastien ROUCARIES wrote: > > Le mar. 21 sept. 2021 à 07:55, Ondrej Zary a écrit : > > > > > > On Monday 20 September 2021, Bastien Roucariès wrote: > > > > Le lun

Bug#922075: [Pkg-javascript-devel] Bug#922075: npm: segfault during extract on i386

2021-09-21 Thread Bastien ROUCARIES
Le mar. 21 sept. 2021 à 07:55, Ondrej Zary a écrit : > > On Monday 20 September 2021, Bastien Roucariès wrote: > > Le lundi 20 septembre 2021, 19:32:52 UTC Bastien ROUCARIES a écrit : > > Could you try one by one the following untested patch. Please compile and > > run &g

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Could you try first to apply https://github.com/nodejs/node/commit/c60780ff52 And see if the reject are bad ? Bastien Le lun. 20 sept. 2021 à 19:15, Ondrej Zary a écrit : > > > > On Monday 20 September 2021 19:31:56 Bastien ROUCARIES wrote: > > Le lun. 20 sept. 2021 à 17

Bug#922075: [Pkg-javascript-devel] Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Le lun. 20 sept. 2021 à 17:28, Jérémy Lal a écrit : > > > > Le lun. 20 sept. 2021 à 19:15, Ondrej Zary a écrit : > > > > On Monday 20 September 2021 16:56:18 Bastien ROUCARIES wrote: > > > Le lun. 20 sept. 2021 à 14:24, Ondrej Zary a écrit : > > > >

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Le lun. 20 sept. 2021 à 17:15, Ondrej Zary a écrit : > > On Monday 20 September 2021 16:56:18 Bastien ROUCARIES wrote: > > Le lun. 20 sept. 2021 à 14:24, Ondrej Zary a écrit : > > > > > > On Monday 20 September 2021, Bastien ROUCARIES wrote: > > > > Co

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Le lun. 20 sept. 2021 à 15:00, Bastien ROUCARIES a écrit : > > Le lun. 20 sept. 2021 à 14:24, Ondrej Zary a écrit : > > > > On Monday 20 September 2021, Bastien ROUCARIES wrote: > > > Could you try to apply > > > > &g

Bug#994767: [Pkg-javascript-devel] Bug#994767: rails ftbfs in experimental with The following packages have unmet dependencies: node-debbundle-acorn : Depends: nodejs:any (>= 10.12.0~dfsg~)

2021-09-20 Thread Bastien ROUCARIES
Le lun. 20 sept. 2021 à 16:36, Pirate Praveen a écrit : > > Package: apt-cudf > Version: 6.0.1-2 > Severity: important > X-debbugs-cc: pkg-javascript-de...@lists.alioth.debian.org > Control: affected -1 rails > > The following command fails to build rails from experimental (salsa > master), > > DE

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Le lun. 20 sept. 2021 à 14:24, Ondrej Zary a écrit : > > On Monday 20 September 2021, Bastien ROUCARIES wrote: > > Could you try to apply > > > > https://github.com/nodejs/node/commit/aa4611cccbcb197df51a9f7056d019005d91acf4 > > > > I think it desc

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Could you try to apply https://github.com/nodejs/node/commit/aa4611cccbcb197df51a9f7056d019005d91acf4 I think it describe that you see Bastien Le lun. 20 sept. 2021 à 12:51, Ondrej Zary a écrit : > > > Ok are you on IRC ? I am as rouca on #debian-js channel > > No, I'm not. > > > Install the d

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Ok are you on IRC ? I am as rouca on #debian-js channel Install the debug symbols of nodejs and libuv (if available) and try to run valgrind with --smc-check=all --read-var-info=yes --track-origins=yes Bastien Le lun. 20 sept. 2021 à 11:57, Ondrej Zary a écrit : > > > And try to rebuild the w

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Le lun. 20 sept. 2021 à 10:39, Ondrej Zary a écrit : > > > Ok now try to run the whole thing against valgrind... > Seems that valgrind does not work with asan: > > $ LD_PRELOAD=/usr/lib/i386-linux-gnu/libasan.so.5.0.0 valgrind yarnpkg install > ==752== Memcheck, a memory error detector > ==752== C

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Le lun. 20 sept. 2021 à 10:20, Bastien ROUCARIES a écrit : > > Le lun. 20 sept. 2021 à 10:15, Ondrej Zary a écrit : > > > > libuv libuv1:i386 1.24.1-1+deb10u1 with -fsanitize=address,undefined: > > > > yarn install v1.13.0 > > [1/5] Validating package.

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Le lun. 20 sept. 2021 à 10:15, Ondrej Zary a écrit : > > libuv libuv1:i386 1.24.1-1+deb10u1 with -fsanitize=address,undefined: > > yarn install v1.13.0 > [1/5] Validating package.json... > [2/5] Resolving packages... > [3/5] Fetching packages... > [-

Bug#922075: [Pkg-javascript-devel] Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Le lun. 20 sept. 2021 à 12:02, Ondrej Zary a écrit : > I'm unable to compile node with -fsanitize=address,undefined. Seems that > compiler hits 32-bit memory space limit: > cc1plus: out of memory allocating 65536 bytes after a total of 3356393472 > bytes > Libuv only will be Nice Node is not cro

Bug#922075: [Pkg-javascript-devel] Bug#922075: npm: segfault during extract on i386

2021-09-20 Thread Bastien ROUCARIES
Le lun. 20 sept. 2021 à 08:02, Ondrej Zary a écrit : > > Rebuilt Debian libuv1 1.24.1 with -fno-stack-protector - still segfaults. > Rebuilt Debian libuv1 1.42.0 (from unstable) in Buster - still segfaults. Please rebuild both nodejs and libuv with asan (adresse sanitizer) After, I think it i

Bug#994678: [Pkg-javascript-devel] Bug#994678: Bug#994678: pkg-js-tools: MA status

2021-09-19 Thread Bastien ROUCARIES
Le lun. 20 sept. 2021 à 06:03, Yadd a écrit : > Le 19/09/2021 à 12:35, Bastien Roucariès a écrit : > > Package: pkg-js-tools > > Version: 0.9.66 > > Severity: important > > > > Dear Maintainer, > > > > According to a few cross build test (see for instance > > https://salsa.debian.org/js-team/node

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 21:57, Bastien ROUCARIES a écrit : > > try to pass > -fstack-protector-strong to the local version as cflags > > If it fail upstream does not take in acount stack protector > > Le dim. 19 sept. 2021 à 21:45, Bastien ROUCARIES > a écrit : > &g

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
try to pass -fstack-protector-strong to the local version as cflags If it fail upstream does not take in acount stack protector Le dim. 19 sept. 2021 à 21:45, Bastien ROUCARIES a écrit : > > Le dim. 19 sept. 2021 à 21:39, Bastien ROUCARIES > a écrit : > > > > Le dim.

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 21:39, Bastien ROUCARIES a écrit : > > Le dim. 19 sept. 2021 à 21:36, Ondrej Zary a écrit : > > > > I've reinstalled nodejs and libnode64 back to original Buster > > 10.24.0~dfsg-1~deb10u1 and upgraded libuv1 to > > libuv1

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 21:36, Ondrej Zary a écrit : > > I've reinstalled nodejs and libnode64 back to original Buster > 10.24.0~dfsg-1~deb10u1 and upgraded libuv1 to libuv1_1.34.2-1~bpo9+1_i386.deb > from http://snapshot.debian.org > > It still segfaults! > > So it seems that the problem is not

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 21:25, Bastien ROUCARIES a écrit : > > Le dim. 19 sept. 2021 à 21:15, Ondrej Zary a écrit : > > > > Added back --shared-zlib: works. > > Added back also --shared-cares: works. > > > > So you're right: --shared-libuv is the pro

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 21:15, Ondrej Zary a écrit : > > Added back --shared-zlib: works. > Added back also --shared-cares: works. > > So you're right: --shared-libuv is the problem. > Upstream seems to include libuv 1.34.2. > Buster has 1.24.1-1. Do you have valgrind ? If so and if it work (tes

Bug#994720: [Pkg-javascript-devel] Bug#994720: nodejs: Please depends of sse2-support

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 21:03, Jérémy Lal a écrit : > > >> Le dim. 19 sept. 2021 à 22:33, Bastien Roucariès >> a écrit : >> >> Source: nodejs >> Severity: serious >> Tags: patch >> Justification: base arch >> Forwarded: >> https://chromium.googlesource.com/v8/v8.git/+/e825c4318eb2065ffdf9044aa6

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 20:21, Ondrej Zary a écrit : > > On Sunday 19 September 2021 20:13:47 Bastien ROUCARIES wrote: > > Hi, > > > > So you work on oldstable. > > > > Could you check for stable/testing/unstable/experimental ? And mark > > the bug with f

Bug#994703: [Pkg-javascript-devel] Bug#994703: Bug#994703: nodejs: please documents deps or avoid it

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 19:33, Jérémy Lal a écrit : > > > > Le dim. 19 sept. 2021 à 18:54, Bastien Roucariès > a écrit : >> >> Package: nodejs >> Version: 12.22.5~dfsg-2 >> Severity: serious >> >> Dear Maintainer, >> >> README.source should document the deps directory. >> >> It will be better to

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 19:37, Jérémy Lal a écrit : > > > > Le dim. 19 sept. 2021 à 20:18, Bastien ROUCARIES > a écrit : >> >> Hi, >> >> So you work on oldstable. >> >> Could you check for stable/testing/unstable/experimental ? And mark >

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
Hi, So you work on oldstable. Could you check for stable/testing/unstable/experimental ? And mark the bug with found /not found. Thanks Bastien Le dim. 19 sept. 2021 à 18:03, Ondrej Zary a écrit : > > There's no such patch in 10.24.0~dfsg-1~deb10u1 > > -- > Ondrej Zary

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 17:40, Ondrej Zary a écrit : > > Upstream node rebuilt in Debian works. So it's not a compiler or libc problem. Does removing the debian patch large_pages_assembly_gnu_stack.patch Changes something ? Bastien > The Debian (buster) i386 version 10.24.0~dfsg-1~deb10u1 alr

Bug#922075: [Pkg-javascript-devel] Bug#922075: Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 16:33, Ondrej Zary a écrit : > > upstream (strings in bin/node), seems to be statically linked: > gcc 6.3.1 > libc 2.17 according to https://github.com/nodejs/unofficial-builds/ > build log found at > https://unofficial-builds.nodejs.org/logs/202102231620-v10.24.0/x86.log

Bug#922075: [Pkg-javascript-devel] Bug#922075: npm: segfault during extract on i386

2021-09-19 Thread Bastien ROUCARIES
Le dim. 19 sept. 2021 à 15:48, Ondrej Zary a écrit : > > Seems that only Debian i386 build of nodejs is broken. > > Downloaded > https://unofficial-builds.nodejs.org/download/release/v10.24.0/node-v10.24.0-linux-x86.tar.xz > unpacked somewhere and edited /usr/bin/yarnpkg to point to the new bin/n

Bug#994577: lintian: node-* arch:all package should depends on nodejs:any and b-d on nodejs:native

2021-09-18 Thread Bastien ROUCARIES
Le sam. 18 sept. 2021 à 16:57, Mattia Rizzolo a écrit : > (this reply is not related to lintian directly) > > On Fri, Sep 17, 2021 at 09:34:43PM +, Bastien Roucariès wrote: > > In order to improve cross build of nodejs ecosystem, node-* arch:all > package > > should depends on nodejs:any and

Bug#994603: errormsg

2021-09-18 Thread Bastien ROUCARIES
debian/upstream To fix the situation please do the following: 1) Examine debian/copyright_* and referenced files 2) Update debian/copyright as needed 3) Replace debian/copyright_hints with debian/copyright_newhints touch debian/stamp-copyright-check touch debian/stamp-upstream-cruft node-gy

Bug#994571: lintian: please warn javascript package including .node files "*/nodejs/.*\.node$' and ma:foreign

2021-09-17 Thread Bastien ROUCARIES
Le ven. 17 sept. 2021 à 21:20, Felix Lechner a écrit : > > Hi, > > On Fri, Sep 17, 2021 at 1:39 PM Bastien Roucariès > wrote: > > > > Package that include "/usr/(?:lib|share)/(?:[^/]+/)?/nodejs/.*\.node$' are > > arch:any package (include node plugin) and thus should be arch:any > > Thank you for

Bug#994544: [Pkg-javascript-devel] Bug#994544: Bug#994544: npm2deb: nodejs:any for arch:all package

2021-09-17 Thread Bastien ROUCARIES
Le ven. 17 sept. 2021 à 20:24, Yadd a écrit : > > > > Le 17 septembre 2021 21:30:16 GMT+02:00, Bastien ROUCARIES > a écrit : > >Le ven. 17 sept. 2021 à 16:06, Yadd a écrit : > >> > >> Le 17/09/2021 à 16:36, Bastien Roucariès a écrit : > >

Bug#994544: [Pkg-javascript-devel] Bug#994544: Bug#994544: npm2deb: nodejs:any for arch:all package

2021-09-17 Thread Bastien ROUCARIES
control: clone -1 -2 control: reassign -2 pkg-js-tools Le ven. 17 sept. 2021 à 16:06, Yadd a écrit : > > Le 17/09/2021 à 16:36, Bastien Roucariès a écrit : > > Package: npm2deb > > Version: 0.3.0-6 > > Severity: important > > > > Dear Maintainer, > > > > > > In order to help cross build nodejs de

Bug#994544: [Pkg-javascript-devel] Bug#994544: Bug#994544: npm2deb: nodejs:any for arch:all package

2021-09-17 Thread Bastien ROUCARIES
Le ven. 17 sept. 2021 à 16:06, Yadd a écrit : > > Le 17/09/2021 à 16:36, Bastien Roucariès a écrit : > > Package: npm2deb > > Version: 0.3.0-6 > > Severity: important > > > > Dear Maintainer, > > > > > > In order to help cross build nodejs depends should be nodejs:any for purejs > > module in depe

Bug#994118: RFP: ocrodjvu3 -- Python 3 port of ocrodjvu (removed from bullseye)

2021-09-12 Thread Bastien ROUCARIES
Le dim. 12 sept. 2021 à 10:53, Janusz S. Bień a écrit : > On Sun, Sep 12 2021 at 8:42 GMT, Bastien ROUCARIES wrote: > > I can sponsor if needed but I am not upstream so we need to push patches > > > > And I will prefer that you do the packaging. I can help > > I ap

Bug#994118: RFP: ocrodjvu3 -- Python 3 port of ocrodjvu (removed from bullseye)

2021-09-12 Thread Bastien ROUCARIES
vu3 > Version : > Upstream Author : Jakub Wilk and Bastien Roucari`es > * URL or Web page : https://github.com/bastien-roucaries/ocrodjvu > * License : GNU General Public License v2.0 > Description : Python 3 port of ocrodjvu > > -- > , >

Bug#743694: lintian: Downgrade most of privacy-breach* tags from severity: error to pedantic

2021-09-10 Thread Bastien ROUCARIES
Le ven. 10 sept. 2021 à 11:06, Felix Lechner a écrit : > > Hi, > > > The severity chosen for these tags/checks is not justified by any of our > > policies, neither the Debian policy, not the best packaging practises nor > > any legal reason! > > > > There is no technical nor social justification f

Bug#993662: lintian: Please warn for source file that have This file was autogenerated or DO NOT EDIT BY HAND

2021-09-04 Thread Bastien ROUCARIES
control: tag -1 + patch Le sam. 4 sept. 2021 à 15:27, Chris Lamb a écrit : > > tags 993662 - patch > thanks > > Hi Bastien, > > > Doing some code review on mozilla I found this interesting file > > https://sources.debian.org/src/firefox- > > esr/78.13.0esr-1/js/src/frontend/BinASTEnum.h/?hl=1#L1

Bug#907336: still relevant? revert?

2021-09-01 Thread Bastien ROUCARIES
Le mer. 1 sept. 2021 à 08:21, Tomas Pospisek a écrit : > > Dear ImageMagick Packaging Team, > > Short version: is it safe today to reenable PDF/PS conversion again these > days? > > Long version: > > Today I was affected by the problem reported in [1], notably: > > convert: attempt to perform

Bug#929825: Version 7 available upstream

2021-08-31 Thread Bastien ROUCARIES
issue in v6 ? It will help me and allow me to concentrate in v6->v7 transition Bastien Le mar. 31 août 2021 à 08:24, Johannes Schauer Marin Rodrigues a écrit : > > Hi, > > Quoting Bastien ROUCARIES (2021-08-28 11:44:08) > > Le lun. 23 août 2021 à 22:48, Johannes Schauer Marin Ro

Bug#990062: /usr/bin/mogrify-im6.q16: IO error writing tag data when processing tiff file

2021-08-28 Thread Bastien ROUCARIES
Le sam. 19 juin 2021 à 02:15, Brian May a écrit : > Package: imagemagick-6.q16 > Version: 8:6.9.11.60+dfsg-1.3 > Severity: important > File: /usr/bin/mogrify-im6.q16 > > > $ mogrify -verbose -write /dev/null > /home/brian/photos/images/orig/1990/04/01/flood001.tif > /home/brian/photos/images/orig

Bug#929825: Version 7 available upstream

2021-08-28 Thread Bastien ROUCARIES
Le lun. 23 août 2021 à 22:48, Johannes Schauer Marin Rodrigues < jo...@debian.org> a écrit : > Hi, > > this bug affects my package img2pdf, so I wanted to send a friendly ping. > What > is the status of packaging the next version of imagemagick? Do you need > help > Yes i nées help here. Ping me

Bug#992150:

2021-08-16 Thread Bastien ROUCARIES
control: reassign -1 src:firefox-esr

Bug#992150: Please allow symlink in system extension

2021-08-16 Thread Bastien ROUCARIES
Followup-For: Bug #992150 Control: clone -1 -2 Control: assign -1 src:firefox-esr

Bug#992024: ITP: airsane -- SANE WebScan frontend that supports Apple's AirScan protocol

2021-08-12 Thread Bastien ROUCARIES
Le jeu. 12 août 2021 à 15:22, Didier 'OdyX' Raboud a écrit : > Le lundi, 9 août 2021, 11.48:09 h CEST Bastien Roucariès a écrit : > > Package: wnpp > > Severity: wishlist > > Owner: Bastien Roucariès > > X-Debbugs-Cc: debian-de...@lists.debian.org > > > > * Package name: airsane > > Versio

Bug#981171: [PATCH 06/13] Improve pager section by pointing to more

2021-01-29 Thread Bastien ROUCARIES
Le ven. 29 janv. 2021 à 12:28, Michael Kerrisk (man-pages) a écrit : > > On Fri, 29 Jan 2021 at 12:00, Bastien Roucariès > wrote: > > > > Le jeudi 28 janvier 2021, 09:31:00 UTC Michael Kerrisk (man-pages) a écrit : > > > On 1/27/21 4:48 PM, roucaries.bast...@gmail.com wrote: > > > > From: Bastien

Bug#981171: [PATCH 13/13] Document LINES and COLUMNS

2021-01-29 Thread Bastien ROUCARIES
Hi, Le jeu. 28 janv. 2021 à 08:53, Michael Kerrisk (man-pages) a écrit : > > Hello Bastiern, > > On 1/27/21 4:48 PM, roucaries.bast...@gmail.com wrote: > > From: Bastien Roucariès > > > > Document the variable LINES and COLUMN > > > > Signed-off-by: Bastien Roucariès > > --- > > man7/environ.7

Bug#981171: [PATCH 04/13] Document PATH resolution

2021-01-29 Thread Bastien ROUCARIES
Yes, you are right. Le jeu. 28 janv. 2021 à 09:25, Michael Kerrisk (man-pages) a écrit : > > Hello Bastien, > > On 1/27/21 4:48 PM, roucaries.bast...@gmail.com wrote: > > From: Bastien Roucariès > > > > Document PATH resolution, particularly null sequence and empty PATH > > > > Signed-off-by: Ba

Bug#981171: [PATCH 03/13] Document that means at login time for HOME, LOGNAME, SHELL, USER

2021-01-29 Thread Bastien ROUCARIES
Le jeu. 28 janv. 2021 à 08:24, Michael Kerrisk (man-pages) a écrit : > > Hello Bastien, > > On 1/27/21 4:48 PM, roucaries.bast...@gmail.com wrote: > > From: Bastien Roucariès > > > > Clearly document that su by default does not change this variables. > > I'm dubious about this. The place that thi

Bug#981171: [PATCH 01/13] Do not document mktemp (3)

2021-01-29 Thread Bastien ROUCARIES
Hi, Le mer. 27 janv. 2021 à 22:28, Michael Kerrisk (man-pages) a écrit : > > Salut Bastien, > > On 1/27/21 4:48 PM, roucaries.bast...@gmail.com wrote: > > From: Bastien Roucariès > > > > Do not use for documentation purposes the unsecure mktemp function > > This message doesn't correspond to the

Bug#980876: More information

2021-01-24 Thread Bastien ROUCARIES
Hi, BTW -c should be better documented as in bash mentioning the first non option arguments: -cIf the -c option is present, then commands are read from the first non-option argument command_string. If there are arguments after the command_string,

Bug#980202: FTBFS: gscan2pdf tests fail

2021-01-22 Thread Bastien ROUCARIES
Hi, Just uploaded 6.9.11-58 as suggested by upstream. No changes unfortunately Bastien Le ven. 22 janv. 2021 à 19:30, Cristy a écrit : > > Subject "convert fails to create image with text" claims > > convert +matte -depth 1 -colorspace Gray -pointsize 12 -units PixelsPerInch > -density 300 la

Bug#979942: [Pkg-javascript-devel] Bug#979942: Bug#979942: Bug#979942: embedding dead code is no fix to bug for removing that same dead code

2021-01-17 Thread Bastien ROUCARIES
Le mar. 12 janv. 2021 à 21:02, Jonas Smedegaard a écrit : > > Quoting Bastien ROUCARIES (2021-01-12 21:17:36) > > Fixed it was a little bit hard to test options of compression one by > > one but it work now. Hi, It was harder than I thought. This time I document the re

Bug#979942: [Pkg-javascript-devel] Bug#979942: Bug#979942: embedding dead code is no fix to bug for removing that same dead code

2021-01-12 Thread Bastien ROUCARIES
Hi, Fixed it was a little bit hard to test options of compression one by one but it work now. Le mar. 12 janv. 2021 à 17:48, Xavier a écrit : > > Control: tags -1 reopen > Control: severity -1 serious > > Le 12/01/2021 à 18:17, Jonas Smedegaard a écrit : > > Quoting Debian FTP Masters (2021-01-

Bug#971216: Bug#977205: imagemagick: CVE-2020-29599

2021-01-09 Thread Bastien ROUCARIES
hi, I am ok with this but could you mention, the whole list of format instead of ghostscript format in changelog aka (pdf, eps, ps) Bastien Le dim. 3 janv. 2021 à 14:21, Salvatore Bonaccorso a écrit : > > Hi Bastien, > > Hope you are ok. > > On Tue, Dec 15, 2020 at 10:34:5

Bug#977205: imagemagick: CVE-2020-29599

2020-12-15 Thread Bastien ROUCARIES
Hi, As said on debian-provate go ahead please. I am late due to payjob issue. Bastien On Sat, Dec 12, 2020 at 3:06 PM Salvatore Bonaccorso wrote: > > Source: imagemagick > Version: 8:6.9.11.24+dfsg-1 > Severity: grave > Tags: security upstream > Justification: user security hole > X-Debbugs-Cc:

Bug#964090: Please upload backport

2020-12-15 Thread Bastien ROUCARIES
Hi, I agree with salvatore, that in general disabling pdf is the safer solution. I am slowly recovering from work debt due to covid 19 lockdown in France (i was locked down three month, and I could only work by night for payjob so debian work was not done), but I will accept patch. The solution

Bug#840829: upstream bug

2020-07-27 Thread Bastien ROUCARIES
control: forwarded -1 https://github.com/moby/moby/issues/40360 control: tags -1 + upstream According to https://medium.com/nttlabs/cgroup-v2-596d035be4d7 near ready

Bug#921594: Wontfix

2020-07-27 Thread Bastien ROUCARIES
control: tags -1 + wontfix Hi, This problem is due to an experimental version. I will not correct this bug because It is a minor one and moreover this experimental version was experimental. Bastien

Bug#959477: ITP: ckeditor3 -- Javascript rich text editor for embedding into websites (v3)

2020-05-10 Thread Bastien ROUCARIES
On Sat, May 2, 2020 at 9:21 PM Mike Gabriel wrote: > > Package: wnpp > Severity: wishlist > Owner: Mike Gabriel > > * Package name: ckeditor3 > Version : 3.6.6.1 > Upstream Author : Frederico Knabben > * URL : http://ckeditor.com/download > * License : GPL-2+ >

  1   2   3   4   5   6   7   8   9   10   >