Bug#1076900:

2024-07-24 Thread Thomas Ward
I can confirm this happens during a rebuild in my own sbuild chroots. The core issue appears to be that when the make rules call help2man, the version string provided is an empty string. Digging into d/rules, it looks like DEB_VERSION_UPSTREAM_REVISION is unset during the process, which is why

Bug#1067697: Update Build-Depends for the time64 library renames

2024-03-25 Thread Thomas Ward
For everyone's awareness: this same t64 transition is going on downstream in Ubuntu, and I'm also tracing rebuilds, etc. with changed dependencies there as well which are being done by other core devs there, so those changes may trickle back up into Debian here. Thomas (this email is the one

Bug#1067697: Update Build-Depends for the time64 library renames

2024-03-25 Thread Thomas Ward
The only package that has a changed name that I can see is `libqt5sql5` to `libqt5sql5t64`. I have already put this in the revisions in Salsa at the moment. If `libqt5help5` has a rename pending to `libqt5help5t64` and that's not yet in Unstable, then I can't make that revision safely. Thom

Bug#1050186: [Pkg-nginx-maintainers] Bug#1050186: Bug#1050186: libnginx-mod-http-lua: depends on obsolete pcre3 library

2023-08-29 Thread Thomas Ward
nt from my Galaxy Original message From: Jérémy Lal Date: 8/29/23 05:16 (GMT-05:00) To: Thomas Ward , 1050...@bugs.debian.org Cc: Bastian Germann Subject: Re: [Pkg-nginx-maintainers] Bug#1050186: Bug#1050186: libnginx-mod-http-lua: depends on obsolete pcre3 library Le lun. 21 août

Bug#1050186: [Pkg-nginx-maintainers] Bug#1050186: libnginx-mod-http-lua: depends on obsolete pcre3 library

2023-08-21 Thread Thomas Ward
Bastian: As I understand the module, for over a year now the latest Lua module from OpenResty requires LuaJIT to actually compile.  See https://salsa.debian.org/nginx-team/libnginx-mod-http-lua/-/blob/main/debian/control#L8 where this is in the build deps. I have not tested removing the PCRE

Bug#1050186: [Pkg-nginx-maintainers] Bug#1050186: libnginx-mod-http-lua: depends on obsolete pcre3 library

2023-08-21 Thread Thomas Ward
All: See the Lua NGINX module issue here in upstream: https://github.com/openresty/lua-nginx-module/issues/1984 This has been an open issue since December 2021, and there has *NOT* been massive movement yet upstream towards PCRE2 support. The last info on that bug from July 13th indicates t

Bug#1032517: [Pkg-nginx-maintainers] Bug#1032517: Bug#1032517:

2023-03-13 Thread Thomas Ward
I would suggest that we move the configuration files out of `nginx` main and keep it as a separate binary package, whether we call it `nginx-common` or `nginx-config` or whatever. In either case, there are benefits to having the configuration file *separate* from the binaries (see Apache where

Bug#1025035: pastebinit not returning proper URL for pastes going to paste.debian.net

2022-11-28 Thread Thomas Ward
Package: pastebinit Severity: serious Version: 1.6.2-1 (Serious severity selected by Package Maintainer - unfit for release in current state) When using pastebinit to post to the Debian pastebin (default), the system returns a plain "https://paste.debian.net"; link and NO link to an actual p

Bug#1008787: (no subject)

2022-04-11 Thread Thomas Ward
Control: tags -1 pending This will be fixed in -9 when updated packaging is uploaded. A merge request [1] included a downgrade of the Lua module to the last known functional version, which solves the FTBFS problem as that version of the Lua module can still build on s390x due to the older libl

Bug#1008787: Deep dive discovered partial fix

2022-04-02 Thread Thomas Ward
So, it seems that this problem leads to a deeper problem, one with a fix, and one that leaves the s390x support at an impasse. Firstly, mips64el has libluajit available.  We can fix the mips64el builds by adding libluajit-5.1-dev as an explicit dependency for mips64el. However, we can NO LONG

Bug#1008787: NGINX FTBFS: Lua dependencies missing

2022-04-01 Thread Thomas Ward
source: nginx found: 1.18.0-8 severity: serious The builds for mips64el and s390x are failing to build and thus failing to allow 1.18.0-8 to migrate. Both error with luajit not found errors. cc -c -fPIC -g -O2 -ffile-prefix-map=/<>=. -fstack-protector-strong -Wformat -Werror=format-security

Bug#947328: (no subject)

2019-12-27 Thread Thomas Ward
https://bugs.debian.org/943705 has been reported as the core cause. The builds are being give-backed now, as we are fairly sure that the issue reported in the FTBFS bug here was due to debhelper issues which were fixed on the 7th, five days after the autobuilds were triggered. I'm going to ma

Bug#947328: FTBFS Not Reproducible in multiple build test envs (sbuild, pbuilder, etc.)

2019-12-26 Thread Thomas Ward
I ran this exact package through a rebuild in an sbuild environment just now, and cannot reproduce your FTBFS.  Automated build(s) failed to reproduce this in a pbuilder environment as well. Did you do anything to the package to make it trigger this FTBFS?  What Arch and Distro did you build a

Bug#919805: ruby-mail is "too new" for this

2019-01-23 Thread Thomas Ward
3.4.6 Redmine doesn't support ruby-mail beyond 2.6.4.  Neither does the latest 3.4.x release. This package would need to be updated to Redmine 4.0.1 and track the 4.0.x series to get the proper ruby-mail support. (Looking into this downstream in Ubuntu, this was discovered.  I am simply sharing t

Bug#842276: nginx-common.config dpkg --compare-versions will mishandle return codes should the check fail

2016-10-27 Thread Thomas Ward
Source: nginx Severity: serious Version: 1.6.2-5+deb8u3 This was originally identified as a result of my own failure downstream in Ubuntu when applying the patches from Debian for CVE-2016-1247. One of the things added was nginx-common.config. In this, the following set of code exists: log_syml

Bug#792231: This needs examined as soon as possible

2015-08-03 Thread Thomas Ward
On 08/03/2015 10:41 AM, Tristan Seligmann wrote: > Unfortunately there are some significant challenges with 2.0+. The > primary issue is the dependency on tlslite, which was removed from > Debian previously due to being insecure and unmaintained. In addition, > quite a bit of the certificate handli

Bug#792231: This needs examined as soon as possible

2015-08-03 Thread Thomas Ward
1.9.8 is a year old. In addition, 2.4 is the current version. Failing to update breaks recovery of wallets from newer versions, and there are quite a lot of improvements in 2.4 over 1.9.8 that should be reviewed and included. Thomas -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.d

Bug#775225: work around : the crash seems to caused by the AMD fglrx driver and /usr/lib/libamdocl64.so

2015-01-13 Thread Thomas Ward
the crash seems to be caused by the AMD fglrx driver and /usr/lib/libamdocl64.so apt-get purge amd-opencl-icd solves the problem for code-aster I didn't check to see if anything else needed amd-opencl-icd is there anyway to force code aster and associated libraries to not use amd-opencl-icd ?

Bug#773332: Default nginx.conf leaves sites vulnerable to BREACH

2014-12-16 Thread Thomas Ward
Source: nginx Version: 1.6.2-5 Severity: grave Tags: security Originally filed by myself downstream in Ubuntu at https://bugs.launchpad.net/nginx/+bug/1403283 Originally identified in 1.6.2-5, but it likely affects other versions as well, if `gzip on;` is defined in the default configs. (Severit

Bug#742059: nginx: CVE-2014-0133: SPDY heap buffer overflow

2014-03-18 Thread Thomas Ward
Assuming it follows similar build rules in its Debian packaging in Experimental, then I'm assuming it also is covered. On Tue, Mar 18, 2014 at 7:06 PM, James Cloos wrote: >> "y" == yatiohi writes: > > y> we are not vulnerable since nginx is compiled with the --with-debug > y> configure opti