Bug#886852: marked as done (nvidia-graphics-drivers: CVE-2017-5753/CVE-2017-5715 (spectre), CVE-2017-5754 (meltdown))

2018-01-12 Thread Debian Bug Tracking System
Your message dated Sat, 13 Jan 2018 06:19:49 + with message-id and subject line Bug#886852: fixed in nvidia-graphics-drivers 390.12-1 has caused the Debian Bug report #886852, regarding nvidia-graphics-drivers: CVE-2017-5753/CVE-2017-5715 (spectre), CVE-2017-5754 (meltdown) to be marked as do

Bug#885758: marked as done (mp3splt: Don't Build-Depend on libgnomeui-dev)

2018-01-12 Thread Debian Bug Tracking System
Your message dated Sat, 13 Jan 2018 05:35:07 + with message-id and subject line Bug#885758: fixed in mp3splt 2.6.2+20170630-3 has caused the Debian Bug report #885758, regarding mp3splt: Don't Build-Depend on libgnomeui-dev to be marked as done. This means that you claim that the problem has

Bug#886743: virtualbox-dkms now requires package libelf-dev to work

2018-01-12 Thread Awtul
Package: linux-headers-4.14.0-3-amd64 Version: 4.14.12-2 Followup-For: Bug #886743 Dear Maintainer(s), I just wanted to confirm this bug and say that when I execute "VBoxManage clonehd --format RAW Debian-Sid-amd64-2.vdi Debian-Sid-amd64-2.raw" I get the following: "WARNING: The character device

Processed: tagging 884874, found 886676 in 1.9.13, reassign 886814 to boxer-data, severity of 886814 is serious ...

2018-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 884874 + sid buster Bug #884874 {Done: Pino Toscano } [src:phonon-backend-vlc] phonon-backend-vlc: Application using phonon are crashing with vlc 3.0.0~rc2 Added tag(s) buster and sid. > found 886676 1.9.13 Bug #886676 [parl-desktop-eu,parl-

Bug#828449: net-snmp and openssl 1.1.0

2018-01-12 Thread Bart Van Assche
On 01/12/18 13:06, Sebastian Andrzej Siewior wrote: On 2018-01-12 21:44:19 [+0100], Magnus Fromreide wrote: On Thu, Jan 11, 2018 at 07:07:45PM -0800, Bart Van Assche wrote: On 12/23/17 15:17, Sebastian Andrzej Siewior wrote: added those, added a const and removed the "HAVE_EVP_MD_CTX_CREATE" t

Bug#828449: net-snmp and openssl 1.1.0

2018-01-12 Thread Bart Van Assche
On 01/12/18 12:44, Magnus Fromreide wrote: On Thu, Jan 11, 2018 at 07:07:45PM -0800, Bart Van Assche wrote: On 12/23/17 15:17, Sebastian Andrzej Siewior wrote: added those, added a const and removed the "HAVE_EVP_MD_CTX_CREATE" thingy. Hello Sebastian and Andreas, Please have a look at the c

Processed: found 885935 in 0.6.14-1, reassign 886842 to libreswan, fixed 886842 in 3.22-4, affects 886842 ...

2018-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 885935 0.6.14-1 Bug #885935 [pysodium] python-pysodium depends on cruft package libsodium18 There is no source info for the package 'pysodium' at version '0.6.14-1' with architecture '' Unable to make a source version for version '0.6.14-1'

Processed: bug 853474 is forwarded to https://github.com/KhronosGroup/OpenCL-CLHPP/issues/36, tagging 853474

2018-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 853474 https://github.com/KhronosGroup/OpenCL-CLHPP/issues/36 Bug #853474 [src:khronos-opencl-clhpp] khronos-opencl-clhpp: ftbfs with GCC-7 Set Bug forwarded-to-address to 'https://github.com/KhronosGroup/OpenCL-CLHPP/issues/36'. > tags

Bug#881301: marked as pending

2018-01-12 Thread Mike Hommey
On Sun, Jan 07, 2018 at 09:51:09PM +, Simon McVittie wrote: > tag 881301 pending > thanks > > Hello, > > Bug #881301 reported by you has been fixed in the Git repository. You can > see the changelog below, and you can check the diff of the fix at: > > > https://anonscm.debian.org/cgit/p

Bug#887034: marked as done (pdns-recursor: FTBFS on mips64el - mtasker related failures)

2018-01-12 Thread Debian Bug Tracking System
Your message dated Fri, 12 Jan 2018 21:50:36 + with message-id and subject line Bug#887034: fixed in pdns-recursor 4.1.0-3 has caused the Debian Bug report #887034, regarding pdns-recursor: FTBFS on mips64el - mtasker related failures to be marked as done. This means that you claim that the p

Bug#828449: net-snmp and openssl 1.1.0

2018-01-12 Thread Sebastian Andrzej Siewior
On 2018-01-12 21:44:19 [+0100], Magnus Fromreide wrote: > On Thu, Jan 11, 2018 at 07:07:45PM -0800, Bart Van Assche wrote: > > On 12/23/17 15:17, Sebastian Andrzej Siewior wrote: > > > added those, added a const and removed the "HAVE_EVP_MD_CTX_CREATE" > > > thingy. > > > > Hello Sebastian and An

Bug#828449: net-snmp and openssl 1.1.0

2018-01-12 Thread Magnus Fromreide
On Thu, Jan 11, 2018 at 07:07:45PM -0800, Bart Van Assche wrote: > On 12/23/17 15:17, Sebastian Andrzej Siewior wrote: > > added those, added a const and removed the "HAVE_EVP_MD_CTX_CREATE" thingy. > > Hello Sebastian and Andreas, > > Please have a look at the current trunk. OpenSSL 1.1.0 suppor

Bug#825501: CVE-2016-4434

2018-01-12 Thread Moritz Muehlenhoff
On Thu, Jan 11, 2018 at 02:03:23PM +0200, Faidon Liambotis wrote: > On Fri, May 27, 2016 at 11:58:33AM +0200, Moritz Muehlenhoff wrote: > > please see http://seclists.org/oss-sec/2016/q2/413 for details. > > That link says: > Versions Affected: > Apache Tika 0.10 to 1.12 > > So perhaps 1.5

Bug#886494: polymake: Can't locate loadable object for module Polymake::Ext in @INC

2018-01-12 Thread Niko Tyni
Control: reassign -1 perl Control: affects -1 polymake Control: severity -1 important On Tue, Jan 09, 2018 at 04:55:26PM +, Dominic Hargreaves wrote: > On Mon, Jan 08, 2018 at 10:40:19PM +0200, Niko Tyni wrote: > > A test build fixes the polymake issue and doesn't seem to break anything > > m

Processed: Re: Bug#886494: polymake: Can't locate loadable object for module Polymake::Ext in @INC

2018-01-12 Thread Debian Bug Tracking System
Processing control commands: > reassign -1 perl Bug #886494 [polymake] polymake: Can't locate loadable object for module Polymake::Ext in @INC Bug reassigned from package 'polymake' to 'perl'. No longer marked as found in versions polymake/3.1-5. Ignoring request to alter fixed versions of bug #8

Processed: Re: Bug#887018: fails to compile against linux 3.16+63+deb8u1

2018-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > reassign 887018 src:openafs Bug #887018 [openafs-modules-dkms] fails to compile against linux 3.16+63+deb8u1 Bug reassigned from package 'openafs-modules-dkms' to 'src:openafs'. No longer marked as found in versions openafs/1.6.18.2-1~bpo8+1. Igno

Bug#887018: fails to compile against linux 3.16+63+deb8u1

2018-01-12 Thread Benjamin Kaduk
reassign 887018 src:openafs severity 887018 important merge 886719 887018 retitle 886719 meltdown/spectre kernel (old)stable-security kernel breaks openafs module thanks On Fri, Jan 12, 2018 at 09:29:52AM -0600, Chad Seys wrote: > Package: openafs-modules-dkms > Version: 1.6.18.2-1~bpo8+1 > Sever

Bug#885525: /usr/bin/nm-applet: nm-applet crashes when connecting to VPN

2018-01-12 Thread MikeJJ
Hi Sean, The patch stops the crashing for me, but a VPN session doesn't get established. Maybe problem my end. Or maybe related to a little part missing, which is on the upstream patch ? @@ -30,7 +30,7 @@ _get_keys_cb (const char *key, const char *val, gpointer user_data) { GPtrArray *a = us

Bug#878633: python-pgpy FTBFS with more than one supported Python3 version

2018-01-12 Thread Daniel Kahn Gillmor
On Sun 2017-10-15 13:50:56 +0300, Adrian Bunk wrote: > ... >debian/rules override_dh_auto_test > make[1]: Entering directory '/build/1st/python-pgpy-0.4.3' > LC_ALL=C.UTF-8 dh_auto_test -O--buildsystem=pybuild > I: pybuild base:184: cd > /build/1st/python-pgpy-0.4.3/.pybuild/pythonX.Y_3.5/buil

Processed: Not a problem in stretch

2018-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 887028 buster sid Bug #887028 [src:uqm] uqm: FTBFS: arilouc.c:231:22: error: 'bye_angry_space' undeclared Added tag(s) sid and buster. > thanks Stopping processing here. Please contact me if you need assistance. -- 887028: https://bugs.deb

Processed: found 886990 in 2.84-0.2

2018-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 886990 2.84-0.2 Bug #886990 [src:transmission] transmission: rpc session-id mechanism design flaw results in RCE Marked as found in versions transmission/2.84-0.2. > thanks Stopping processing here. Please contact me if you need assistance

Bug#887034: pdns-recursor: FTBFS on mips64el - mtasker related failures

2018-01-12 Thread James Cowgill
Source: pdns-recursor Version: 4.1.0-1 Severity: serious Tags: sid buster patch Hi, pdns-recursor FTBFS on mips64el due segfaulting (or another crash) while executing the mtasker tests. Build log (exit status 139 = SIGSEGV): > Checking bad value for record type SOA test #1 > FAIL testrunner (exi

Bug#887032: sane-backends: FTBFS twice in a row

2018-01-12 Thread Andreas Beckmann
Source: sane-backends Version: 1.0.27-1~experimental3 Severity: serious Justification: fails to build from source (but built successfully in the past) Hi, sane-backends FTBFS twice in a row. The first build succeeds, the following 'debian/rules clean' deletes 'm4/libtool.m4' and the subsequent au

Processed: Re: Bug#874826: libkdewebkit5/libplasma3 removal from buster

2018-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 874980 wishlist Bug #874980 [src:kremotecontrol] [kremotecontrol] Future Qt4 removal from Buster Severity set to 'wishlist' from 'serious' > tags 874980 = Bug #874980 [src:kremotecontrol] [kremotecontrol] Future Qt4 removal from Buster Re

Bug#874980: Bug#874826: libkdewebkit5/libplasma3 removal from buster

2018-01-12 Thread Pino Toscano
severity 874980 wishlist tags 874980 = thanks On domenica 3 dicembre 2017 14:01:33 CET Adrian Bunk wrote: > As part of the removal of Qt4's WebKit it is planned to remove > libkdewebkit5 and libplasma3 from buster soon, even earlier > than the rest of the Qt4 removal. The upload of kremotecontro

Bug#887028: uqm: FTBFS: arilouc.c:231:22: error: 'bye_angry_space' undeclared

2018-01-12 Thread Andreas Beckmann
Source: uqm Version: 0.6.2.dfsg-9.4 Severity: serious Hi, uqm recently started to FTBFS in sid and buster: gcc -c -o "obj/release/src/sc2code/comm/arilou/arilouc.c.o" -g -O2 -fdebug-prefix-map=/build/uqm-0.6.2.dfsg=. -specs=/usr/share/dpkg/no-pie-compile.specs -fstack-protector-strong -Wforma

Processed: bug 887001 is forwarded to https://sourceware.org/bugzilla/show_bug.cgi?id=22679

2018-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 887001 https://sourceware.org/bugzilla/show_bug.cgi?id=22679 Bug #887001 [src:glibc] glibc: CVE-2018-101: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation Ignoring request to change the for

Bug#887018: fails to compile against linux 3.16+63+deb8u1

2018-01-12 Thread Chad Seys
Package: openafs-modules-dkms Version: 1.6.18.2-1~bpo8+1 Severity: grave Hello, With linux version 3.16+63+deb8u1 openafs-modules-dkms fails to compile. Attached is the make.log from the build attempt. Thanks for your time! C. -- System Information: Debian Release: 8.10 APT prefers oldsta

Processed: bug 887001 is forwarded to https://sourceware.org/bugzilla/show_bug.cgi?id=22679

2018-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 887001 https://sourceware.org/bugzilla/show_bug.cgi?id=22679 Bug #887001 [src:glibc] glibc: CVE-2018-101: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation Changed Bug forwarded-to-address t

Bug#886604: marked as done (FTBFS: race condition running tests 7 and 10 in parallel)

2018-01-12 Thread Debian Bug Tracking System
Your message dated Fri, 12 Jan 2018 15:05:17 + with message-id and subject line Bug#886604: fixed in gambc 4.8.8-3 has caused the Debian Bug report #886604, regarding FTBFS: race condition running tests 7 and 10 in parallel to be marked as done. This means that you claim that the problem has

Bug#884222: valabind: Fails to build with vala 0.38

2018-01-12 Thread Sebastian Reichel
Hi, This has been fixed upstream, but the new bugfix release requires vala 0.40. Reading the discussion between upstream valabind and vala, it looks like vala 0.38 cannot be supported. -- Sebastian signature.asc Description: PGP signature

Bug#887004: liborcus: segfaults while running tests

2018-01-12 Thread Andreas Beckmann
On 2018-01-12 14:58, Rene Engelhard wrote: > Anyway, if this is so this will be automatically fixed in ~ 3 weeks when > the thing (libxion -> liborcus) will be uploaded to unstable (for > LibreOffice 6.0 needing it; that's also the only r-dep and the > dependency obviously will be strict enough if

Bug#887004: liborcus: segfaults while running tests

2018-01-12 Thread Rene Engelhard
Hi, On Fri, Jan 12, 2018 at 02:02:14PM +0100, Andreas Beckmann wrote: > Making check in python > make[4]: Entering directory '/build/liborcus-0.13.1/src/python' > make check-TESTS > make[5]: Entering directory '/build/liborcus-0.13.1/src/python' > make[6]: Entering directory '/build/liborcus-0.13

Bug#887011: cdo: make distclean deletes contrib/cdoCompletion.bash, which is not regenerated

2018-01-12 Thread Andreas Beckmann
Source: cdo Version: 1.9.2+dfsg.1-3 Severity: serious Justification: fails to build from source (but built successfully in the past) Hi, cdo fails to build twice in a row. The first build succeeds, the subsequent 'debian/rules clean' runs 'make distclean' which deletes 'b/cdoCompletion.bash', but

Bug#887010: telegram-desktop segfaults on debian buster (amd64) using Gnome3

2018-01-12 Thread Robin
Package: telegram-desktop Version: 1.1.23-3 Severity: grave Justification: renders package unusable Dear maintainer(s), the telegram-desktop application is segfaulting during startup. The following lines are are the stdout and syslog entries related to the issue: (telegram-desktop:6324): GLib-G

Bug#880554: xen domu freezes with kernel linux-image-4.9.0-4-amd64

2018-01-12 Thread Hans van Kranenburg
On 01/12/2018 12:43 PM, Valentin Vidic wrote: > On Fri, Jan 12, 2018 at 01:34:10AM +0100, Hans van Kranenburg wrote: >> Is the 59 your lots-o-vcpu-monster? > > Yes, that is the one with a larger vcpu count. Check. >> I just finished with the initial preparation of a Xen 4.10 package for >> unsta

Bug#886122: android-platform-system-core: ftbfs with GCC-7

2018-01-12 Thread Riku Voipio
The attached paches fixes the build by - use system definition for ucontext_t - compile the affected file with clang++ The latter is not the correct fix, but an upstream commit[1] suggests these types are deprecated. The correct fix is then to replace the usage with std::vector etc. https://and

Bug#887005: openturns: FTBFS on arm64, i386, ppc64el, s390x

2018-01-12 Thread Andreas Beckmann
Source: openturns Version: 1.10-1 Severity: serious Justification: fails to build from source (but built successfully in the past) Hi, openturns/experimental FTBFS on several architectures where it built on sid: https://buildd.debian.org/status/package.php?p=openturns&suite=experimental There a

Bug#887004: liborcus: segfaults while running tests

2018-01-12 Thread Andreas Beckmann
Package: liborcus Version: 0.13.1-3 Severity: serious Justification: fails to build from source (but built successfully in the past) Hi, liborcus/experimental recently started to FTBFS since it reproducibly segfaults while running the tests. This is in an up-to-date sid+experimental minimal pbuil

Processed: closing 873416

2018-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > close 873416 1.2.3+dfsg-5 Bug #873416 [src:starpu-contrib] starpu-contrib: Please update to llvm-toolchain 4.0 or, better, 5.0 Bug #873427 [src:starpu-contrib] starpu-contrib: Please update to llvm-toolchain 4.0 or, better, 5.0 Bug #873428 [src:

Bug#887001: glibc: CVE-2018-1000001: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation

2018-01-12 Thread Salvatore Bonaccorso
Source: glibc Version: 2.19-18 Severity: grave Tags: security upstream Forwarded: https://sourceware.org/bugzilla/show_bug.cgi?id=18203 Hi glibc maintainers, the following vulnerability was published for glibc, filling as grave due to the privilege escalation potential, but by default in Debian u

Bug#873407: closing 873407

2018-01-12 Thread Samuel Thibault
close 873407 1.1-7-5 thanks

Processed: closing 873407

2018-01-12 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > close 873407 1.1-7-5 Bug #873407 [src:eztrace-contrib] eztrace-contrib: Please update to llvm-toolchain 4.0 or, better, 5.0 Marked as fixed in versions eztrace-contrib/1.1-7-5. Bug #873407 [src:eztrace-contrib] eztrace-contrib: Please update to

Bug#873416: closing 873416

2018-01-12 Thread Samuel Thibault
close 873416 1.2.3+dfsg-5 thanks

Bug#886998: if you downgrade, do it to the 20171117 release, NOT 20171215

2018-01-12 Thread Henrique de Moraes Holschuh
On Fri, 12 Jan 2018, Henrique de Moraes Holschuh wrote: > Should you face issues with the new microcode (note: test it with an > older kernel as well, since the current crop of new kernels are *ALSO* > causing boot and resume-from-sleep issues that are completely unrelated > to the microcode update

Bug#884432: pytest-httpbin: test_httpbin_accepts_lots_of_get_requests_in_single_session FAILED

2018-01-12 Thread Pierre-Elliott Bécue
I'm unable to reproduce. I guess it's the kind of non-deterministic tests people set up on their own laptop and that seems to work but that isn't secured enough to race conditions. We should file a bug upstream at least, but in the meantime, shouldn't we lower the severity until we find a solution

Bug#880554: xen domu freezes with kernel linux-image-4.9.0-4-amd64

2018-01-12 Thread Valentin Vidic
On Fri, Jan 12, 2018 at 01:34:10AM +0100, Hans van Kranenburg wrote: > Is the 59 your lots-o-vcpu-monster? Yes, that is the one with a larger vcpu count. > I just finished with the initial preparation of a Xen 4.10 package for > unstable and have it running in my test environment. Unrelated to t

Bug#886998: intel-microcode: regressions on Haswell, Broadwell (crashes/reboots) and Kaby Lake (sleep-to-ram)

2018-01-12 Thread Henrique de Moraes Holschuh
Package: intel-microcode Version: 3.20180108.1 Severity: grave According to this: https://newsroom.intel.com/news/intel-security-issue-update-addressing-reboot-issues/ and this far more helpful information: https://pcsupport.lenovo.com/br/en/product_security/ps500151 A subset of systems with the

Bug#880885: caffe-contrib: B-D on obsolete compiler gcc-5 not available in testing

2018-01-12 Thread Andreas Beckmann
Followup-For: Bug #880885 Hi lumin, I missed to put you in the loop, but the CUDA 9.0 transition has now started, so you can switch to gcc-6 (the best version supported by CUDA so far). Andreas

Bug#885284: gbirthday: Depends on unmaintained pygtk

2018-01-12 Thread Rolf Leggewie
On 11.01.2018 21:49, Jérôme wrote: > QBirthday now has a setup.py which makes it easier to install. I hope > it also makes it easier to create a .deb from the sources. > > Rolf (or anyone), would you like to package QBirthday? Jerome, thank you. That sounds pretty good. I shall look into it.

Bug#886859: marked as done (fp-utils-3.0.4: fails to upgrade from 'testing' - trying to overwrite /usr/share/man/man1/grab_vcsa-3.0.4.1.gz)

2018-01-12 Thread Debian Bug Tracking System
Your message dated Fri, 12 Jan 2018 10:19:41 + with message-id and subject line Bug#886859: fixed in fpc 3.0.4+dfsg-13 has caused the Debian Bug report #886859, regarding fp-utils-3.0.4: fails to upgrade from 'testing' - trying to overwrite /usr/share/man/man1/grab_vcsa-3.0.4.1.gz to be marke

Bug#886990: transmission: rpc session-id mechanism design flaw results in RCE

2018-01-12 Thread Salvatore Bonaccorso
Source: transmission Version: 2.92-2 Severity: grave Tags: security upstream Forwarded: https://github.com/transmission/transmission/pull/468 Hi See the post on oss-security for details: http://www.openwall.com/lists/oss-security/2018/01/11/1 Upstream: https://github.com/transmission/transmissio

Bug#886474: More errors

2018-01-12 Thread Juan Mendez
After adding libelf-dev and compiling the module for 4.14.0-3-amd64 dkms is failing when compiling for broadcom-sta-dkms with: # cat /var/lib/dkms/broadcom-sta/6.30.223.271/build/make.log DKMS make.log for broadcom-sta-6.30.223.271 for kernel 4.14.0-3-amd64 (x86_64) Fri Jan 12 10:49:26 CET 2018

Bug#873468: CUDA 9.0 transition

2018-01-12 Thread Samuel Thibault
Andreas Beckmann, on jeu. 11 janv. 2018 16:47:57 +0100, wrote: > On 2018-01-11 09:35, Graham Inggs wrote: > > On 10/01/2018 06:19, Andreas Beckmann wrote: > >> CUDA 9.0 finally reached experimental. Did someone get around testing > >> it, yet? > > > > I sync'd it into Ubuntu as soon as it cleared