Re: Salsa update: no more "-guest" and more

On 4/28/20 3:20 PM, Thomas Goirand wrote: > That's not the case. An MITM attack could gain a session and maintain it > open, while the end user would just notice "oh shit, I miss-typed the > 2FA numbers, let's try again". Then the only thing the attacker needs to > do is keep the session open t

Re: Mass bug filing: dependencies on GTK 2

On Wed, Apr 29, 2020 at 5:58 PM Adam Borowski wrote: > I wonder, perhaps it'd be better to use "normal" for packages that _use_ > GTK2, and no bug at all for those that provide an input method/theme/etc > for GTK2+3? A bug that's not supposed to be actioned upon is no good. > > And probably an im

Re: Mass bug filing: dependencies on GTK 2

On Wed, 29 Apr 2020 at 23:58:01 +0200, Adam Borowski wrote: > I wonder, perhaps it'd be better to use "normal" for packages that _use_ > GTK2, and no bug at all for those that provide an input method/theme/etc > for GTK2+3? If I can immediately identify a package as providing one of those, I'll sk

Re: Mass bug filing: dependencies on GTK 2

On Wed, Apr 29, 2020 at 06:37:50PM +0100, Simon McVittie wrote: > On Wed, 29 Apr 2020 at 18:04:41 +0200, Mattia Rizzolo wrote: > > I think you should > > file the bugs at severity:minor, given the amount of involved packages, > > and the fact that you state we might not be able to remove gtk2 in ma

Re: Bug#927047 closed by Debian FTP Masters (Bug#959102: Removed package(s) from unstable)

On 4/29/20 10:38 PM, John Paul Adrian Glaubitz wrote: > Aehm, mozjs68 is rust-only, so this is rather unfortunate for Debian > Ports until we got Rust working everywhere (through additional LLVM > backends being worked on and gcc-rs). > > I'm not against Rust per se, I have contributed many patche

Re: Bug#927047 closed by Debian FTP Masters (Bug#959102: Removed package(s) from unstable)

On 4/29/20 10:33 PM, Debian Bug Tracking System wrote: > This is an automatic notification regarding your Bug report > which was filed against the src:mozjs60 package: > > #927047: mozjs60: Please ignore non262/extensions/clone-errors.js on ppc64 > and sparc64 > > It has been closed by Debian FT

Re: Mass bug filing: dependencies on GTK 2

On Wed, 29 Apr 2020 at 21:48:55 +0200, Johannes Schauer wrote: > I wasn't able to figure out what code is generating this but usually the right > tool to analyze transitive dependency relationships is dose3 or tools using it > like build-rdeps from devscripts. I generated the MBF list by using dak

Re: Mass bug filing: dependencies on GTK 2

On Wed, 29 Apr 2020, 9:29 pm Michael Biebl, wrote: > Am 29.04.20 um 19:37 schrieb Simon McVittie: > > On Wed, 29 Apr 2020 at 18:04:41 +0200, Mattia Rizzolo wrote: > > >> I think you should > >> file the bugs at severity:minor, given the amount of involved packages, > >> and the fact that you stat

Re: Mass bug filing: dependencies on GTK 2

Quoting Andreas Henriksson (2020-04-29 12:11:32) > On Wed, Apr 29, 2020 at 11:58:53AM +0200, Jeff wrote: > > Hi Simon, > > > > I don't understand why gscan2pdf is in the list, as the versions in > > stable, testing and unstable are Perl packages which use libgtk3-perl. > > > > Can you explain? >

Re: Mass bug filing: dependencies on GTK 2

Am 29.04.20 um 19:37 schrieb Simon McVittie: > On Wed, 29 Apr 2020 at 18:04:41 +0200, Mattia Rizzolo wrote: >> I think you should >> file the bugs at severity:minor, given the amount of involved packages, >> and the fact that you state we might not be able to remove gtk2 in many >> many years. >

Re: Mass bug filing: dependencies on GTK 2

On Wed, 29 Apr 2020 at 18:04:41 +0200, Mattia Rizzolo wrote: > You haven't included a copy of the proposed text My intention was for it to be very similar to this MBF announcement (apart from adding a few references to "this package" etc.), except in cases where I can tell the dependency is likely

Re: Mass bug filing: dependencies on GTK 2

Hi Andreas, On 29/04/2020 12:11, Andreas Henriksson wrote: > reverse-depends -r testing -b src:gtk+2.0 2>&1 | grep gscan2pdf > * gscan2pdf (for libgail-common) > * gscan2pdf (for libgail-common) Thanks! Regards Jeff signature.asc Description: OpenPGP d

Re: Mass bug filing: dependencies on GTK 2

On Wed, Apr 29, 2020 at 10:38:27AM +0100, Simon McVittie wrote: > Quite a lot of source packages (see attached list and dd-list) have > Build-Depends on GTK 2 (libgtk2.0-dev), or produce binary packages with > a Depends on it. > > Mass-filed bugs for this will be usertagged to appear in > https://

Bug#959121: ITP: qnnpack -- Quantized Neural Network PACKage (pytorch performance)

Package: wnpp Severity: wishlist Owner: Mo Zhou * Package name: qnnpack * URL : https://github.com/pytorch/qnnpack * License : BSD-3 Programming Lang: C++ Description : Quantized Neural Network PACKage (pytorch performance) pytorch performance booster as suggested

Bug#959122: ITP: nnpack -- Acceleration package for neural networks on multi-core CPUs

Package: wnpp Severity: wishlist Owner: Mo Zhou * Package name: nnpack * URL : https://github.com/Maratyszcza/NNPACK * License : BSD-2 Programming Lang: C, C++ Description : Acceleration package for neural networks on multi-core CPUs pytorch performance booster as

Bug#959123: ITP: fbgemm -- Facebook GEneral Matrix Multiplication

Package: wnpp Severity: wishlist Owner: Mo Zhou * Package name: fbgemm * URL : https://github.com/pytorch/FBGEMM * License : BSD-3 Programming Lang: C++ Description : Facebook GEneral Matrix Multiplication pytorch performance booster as suggested by upstream debia

Re: Bug#959099: RFP: core-setup -- Helper library for MSbuild .NET Core support

On Wed, Apr 29, 2020 at 02:00:05PM +0300, EoflaOE wrote: > * Package name: core-setup core-setup is pretty generic as name. Please rename it to something more descriptive. I don't now if the dotnet stuff got a naming schema. Bastian -- There's a way out of any cage. -- Cap

Re: Third-party forks of packaged projects

On Wed, 2020-04-29 at 10:21 +0100, Alastair McKinstry wrote: > I think vendoring libraries that are only used by this package is > fine. > > I would however put them in a "public" place and namespace (eg > /usr/lib/$ARCH/libatl.* ) rather than a subdir or namespace > ('libatl-adios')  so that ther

Bug#959105: ITP: zmk -- collection of reusable Makefiles

Package: wnpp Severity: wishlist Owner: Zygmunt Krynicki Package: wnpp Owner: Zygmunt Krynicki Severity: wishlist * Package name: zmk Version : 0.1 Upstream Author : Zygmunt Krynicki * URL : https://github.com/zyga/zmk/ * License : LGPL-3 Programming Lang:

Bug#959100: ITP: fractal -- Matrix.org messaging app for GNOME written in Rust

Package: wnpp Severity: wishlist Owner: Andrej Shadura -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 * Package name: fractal Version : 4.2.2 Upstream Author : Daniel García Moreno and others * URL : https://gitlab.gnome.org/GNOME/fractal * License : GPL-3

Bug#959099: RFP: core-setup -- Helper library for MSbuild .NET Core support

Package: wnpp Severity: wishlist * Package name: core-setup Version : 3.0.0 Upstream Author : Jo Shields * URL : https://github.com/dotnet/core-setup * License : MIT Programming Lang: C# Description : Helper library for MSbuild .NET Core support This

Re: Mass bug filing: dependencies on GTK 2

Hi Jeff, On Wed, Apr 29, 2020 at 11:58:53AM +0200, Jeff wrote: > Hi Simon, > > I don't understand why gscan2pdf is in the list, as the versions in > stable, testing and unstable are Perl packages which use libgtk3-perl. > > Can you explain? reverse-depends -r testing -b src:gtk+2.0 2>&1 | grep

Re: Mass bug filing: dependencies on GTK 2

Hi Simon, On 29/04/2020 11:38, Simon McVittie wrote: > Quite a lot of source packages (see attached list and dd-list) have > Build-Depends on GTK 2 (libgtk2.0-dev), or produce binary packages with > a Depends on it. I don't understand why gscan2pdf is in the list, as the versions in stable, testi

Bug#959086: ITP: python-pebble -- Threading and multiprocessing eye-candy

Package: wnpp Severity: wishlist Owner: Matthias Klose X-Debbugs-CC: debian-devel@lists.debian.org * Package name: python-pebble (already an unrelated pebble source in the archive) Version : 4.5.1 Upstream Author : Matteo Cafasso * URL : https://git

Mass bug filing: dependencies on GTK 2

Quite a lot of source packages (see attached list and dd-list) have Build-Depends on GTK 2 (libgtk2.0-dev), or produce binary packages with a Depends on it. GTK 2 was superseded by GTK 3 in 2011 (see ). It no longer receives any significant upstream maintenance, and

Bug#959084: ITP: cvise -- super-parallel Python port of the C-Reduce project

Package: wnpp Severity: wishlist Owner: Matthias Klose X-Debbugs-CC: debian-devel@lists.debian.org * Package name: cvise Version : 1.0.0 Upstream Author : Martin Liška and Moritz Pflanzer, The University of Utah * URL : https://github.com/marxin/cvise * License

Re: Third-party forks of packaged projects

On 28/04/2020 21:44, Kyle Edwards wrote: > On Sat, 2020-04-25 at 20:31 +0200, Thomas Goirand wrote: >> I'd say that it depends, and that it should be addressed on the >> case-by-case basis. > I do have another scenario I'd like to address. ADIOS uses a stack of > closely related but separate proj