Christoph Anton Mitterer | 5 Mar 22:10 2015

Bug#771301: cannot mount /usr if INITRDSTART in /etc/default/mdadm does not include the necessary device


I'm a bit disturbed by seeing such a regression added so shortly before

AFAIU the NEWS entry:
>* If the /usr filesystem is on a RAID device and the INITRDSTART
>   setting in /etc/default/mdadm is not 'all', you will need to change
>   it to include that device.

the value (which defaults to "none") needs now to be changed on all
systems whose /usr is on a MD device.

But so far, this situation (at least mine, where *everything* is on one
single MD device) has been detected just perfectly well.

I understand that one tries to make "more exotic" setups (e.g. /root not
on MD but /usr on it) working,... in fact I've already wrote years ago about
the whole unfortunate situation in Debian.

But the above seems to go just one further step away from
things-working-out-of-the-box™ and making another place mandatory to
have boot device information configured.

As said, IMHO that really quite unfortunate, especially as we get more
and more locations where people need to configure their stuff - which
shouldn't be the case.
Rather, the devices should be configured in their respective canonical
configuration files/packages and systems on top of these (e.g.
(Continue reading)

Ben Hildred | 5 Mar 22:07 2015

Bug#779874: /usr/bin/grub-mknetdir: grub-mknetdir documentation and permisions werdness

Package: grub-common
Version: 2.02~beta2-21
Severity: minor
File: /usr/bin/grub-mknetdir

grub-mknetdir almost does what I want, I think?

There are two issue with this program, first is permissions: It installs all
files 0700. Directories get reasonable permissions (0755) but all the files can
only be read by the user. If I manually use chmod to change the permissions of
all files to 0644 everything works just fine, but the default does not work
with tftp. The only exception would be if it installs any executable files.
(Speaking of which why does it install It is not needed by the

The other issue is documentation. Kinda. when you run the program with --net-
directory=$DIRA and --subdir=$DIRB (why would you not, the conformation message
tells you to point your dhcp at $DIRA/$DIRB/PATH which is wrong. dhcp should
point to $DIRB/$PATH! Your tftp server should point to $DIRA. The only
exception to this is if your tftp server will serve multiple directory trees,
but that is not common unless DIRA=/ in which case it is only a special case of
the typical installation.

The command line I use is:
grub-mknetdir --compress=xz --net-directory=/tftpboot --subdir=grub \
--modules="bufio normal boot gfxterm video video_fb png echo echo gzio minicmd

P.S. platform specific module options would be nice here too.

(Continue reading)

Kill Your TV | 5 Mar 20:55 2015

Bug#777548: The Sid package also works

Control: fixed -1 libguestfs/1:1.28.6-1

I can confirm that the version from Sid also works. If it's not too
late it would be great to get this version in Jessie.
Andreas Beckmann | 5 Mar 21:52 2015

Bug#776984: closed by Guillem Jover <guillem <at>> (Bug#776984: fixed in dpkg 1.17.24)

Control: found -1 1.17.24

On 2015-02-23 00:51, Debian Bug Tracking System wrote:
> #776984: dpkg: more install-info fallout

Since there was never a fixed version in the archive, these conflicts
must be either unversioned or after the last package in unstable, e.g.
using +rm versions (that would allow later reintroduction of a fixed

octave3.0-info (<< 1:3.0.5-7+rm)
octave3.2-info (<< 3.2.4-12+rm)
polgen-doc (<< 1.3-3+rm)

(I'm now rerunning tests for all packages where dpkg has Breaks/Conflicts)


Yves-Alexis Perez | 5 Mar 21:21 2015

Bug#772515: /usr/bin/uscan: uscan: pgp signature verification using .asc keyring fails with gnupg in experimental

On Mon, 08 Dec 2014 02:27:36 +0200 Tristan Seligmann <mithrandi <at>> wrote:
> Package: devscripts
> Version: 2.14.11
> Severity: normal
> File: /usr/bin/uscan
> When attempting to use uscan with a debian/upstream/signing-key.asc keyring, I
> get a failure like this:
> -- Downloading updated package mutagen-1.27.tar.gz
> -- Downloading OpenPGP signature for package as mutagen-1.27.tar.gz.pgp
> -- Verifying OpenPGP signature mutagen-1.27.tar.gz.pgp for mutagen-1.27.tar.gz
> gpgv: keyblock resource `/tmp/BjrBPn_etd/pubring.gpg': file open error
> gpgv: Signature made Fri 28 Nov 2014 17:23:12 SAST using DSA key ID 0C693B8F
> gpgv: Can't check signature: public key not found
> uscan warning: OpenPGP signature did not verify.
> This ends up being because gpg 2.1.0 (currently in experimental) uses the new
> pubring.kbx keyring by default, rather than pubring.gpg. Unfortunately I could
> not find a way to make it write a new keyring in the old gpg keyring format, it
> always seems to use the new keybox format when creating a new keyring, which is
> not supported by gpgv.

I had the same problem. It seems that gpg2 / gpg (/usr/bin/gpg2 is
preferred over /usr/bin/gpg) is only needed for converting an armored
public key to binary public key for gpgv. So replacing the asc file by
a binary gpg one seems to workaround the problem here.

(Continue reading)

Andreas Beckmann | 5 Mar 20:45 2015

Bug#779873: mariadb-server-core-10.0: missing breaks+replaces mysql-client-5.[56] for /usr/bin/innochecksum takeover

Package: mariadb-server-core-10.0
Version: 10.0.17-1~exp1
Severity: serious
User: debian-qa <at>
Usertags: piuparts


during a test with piuparts I noticed your package fails to upgrade from
'sid' to 'experimental'.
It installed fine in 'sid', then the upgrade to 'experimental' fails
because it tries to overwrite other packages files without declaring a
Breaks+Replaces relation.

See policy 7.6 at

>From the attached log (scroll to the bottom...):

  Selecting previously unselected package mariadb-server-core-10.0.
  Preparing to unpack .../mariadb-server-core-10.0_10.0.17-1~exp1_amd64.deb ...
  Unpacking mariadb-server-core-10.0 (10.0.17-1~exp1) ...
  dpkg: error processing archive
/var/cache/apt/archives/mariadb-server-core-10.0_10.0.17-1~exp1_amd64.deb (--unpack):
   trying to overwrite '/usr/bin/innochecksum', which is also in package mysql-client-5.5 5.5.42-1
  Errors were encountered while processing:

  Selecting previously unselected package mariadb-server-core-10.0.
  Preparing to unpack .../mariadb-server-core-10.0_10.0.17-1~exp1_amd64.deb ...
(Continue reading)

Pierre Schweitzer | 5 Mar 20:32 2015

Bug#779872: Iceweasel incorrectly uses /tmp for temporary files

Package: iceweasel
Version: 31.5.0esr-1~deb7u1
Severity: important
Tags: security

Dear all,

Iceweasel offers the possibility to open a file instead of downloading it. In
such situation, the file is downloaded into /tmp directory and then opened.
The permissions set on the downloaded temporary file are weak allowing anyone
to open it as well. This has the wrong effect of disclosing the file to anyone
who has access to the system, leading to a potential privacy disclose,
depending on the file.

It would be better that iceweasel grants limited permissions to the user only.

-- Package-specific info:

-- Extensions information
Name: Français Language Pack locale
Location: /usr/lib/iceweasel/browser/extensions/langpack-fr <at>
Package: iceweasel-l10n-fr
Status: enabled

Name: Thème par défaut theme
Location: /usr/lib/iceweasel/browser/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}
Package: iceweasel
Status: enabled

-- Plugins information
(Continue reading)

Andreas Beckmann | 5 Mar 20:37 2015

Bug#779112: closed by Tim Potter <tpot <at>> (Bug#779112: fixed in jnr-constants 0.8.6-3)

Control: reassign -1 libjnr-constants-java 0.8.6-2
Control: found -1 0.8.6-3
Control: affects -1 + libconstantine-java

On 2015-03-05 04:21, Debian Bug Tracking System wrote:
>    * Change dependency on libconstantine-java to Conflicts, from
>      Breaks. (Closes: #779112).

No. Breaks should have been sufficient, but you are still missing a Replaces.

  Selecting previously unselected package libconstantine-java.
  Preparing to unpack .../libconstantine-java_0.8.5-1_all.deb ...
  Unpacking libconstantine-java (0.8.5-1) ...
  dpkg: error processing archive /var/cache/apt/archives/libconstantine-java_0.8.5-1_all.deb (--unpack):
   trying to overwrite '/usr/share/java/jnr-constants.jar', which is also in package
libjnr-constants-java 0.8.6-3
  dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)
  Errors were encountered while processing:

Or wait, the changelog wording mislead me. The versioning is wrong:

Replaces: libconstantine-java (<< 0.8.5-1)
Provides: libconstantine-java
Conflicts: libconstantine-java (<< 0.8.5-1)

In your case you either want unversioned Conflicts+Replaces
or (>= 0.8.5) instead.

(Continue reading)

Nils Dagsson Moskopp | 5 Mar 20:25 2015

Bug#779604: network-manager: NetworkManager crashes on modem hangup

Package: network-manager
Followup-For: Bug #779604

Dear Maintainer,

this is becoming annoying. I now do “sudo service network-manager force-reload”
multiple times every day. From my syslog it seems network-manager always says:

--- snib ---
Mar  5 20:04:12 lustschutzbunker dbus[1990]: [system] Activating service
name='org.freedesktop.NetworkManager' (using servicehelper)
Mar  5 20:04:13 lustschutzbunker dbus[1990]: [system] Activated service
'org.freedesktop.NetworkManager' failed: Launch helper exited with unknown return code 1
--- snab ---

I do not know what servicehelper is and could not find such a file or package.

-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.13-1-686-pae (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages network-manager depends on:
(Continue reading)

Andreas Beckmann | 5 Mar 20:17 2015

Bug#779869: python-kmip,python-pykmip: error when trying to install together

Control: reassign -1 python-kmip,python-pykmip,python3-kmip,python3-pykmip
Control: found -1 0.2.0-1

The python3 packages are affected as well:

  Selecting previously unselected package python3-pykmip.
  Preparing to unpack .../python3-pykmip_0.2.0-1_all.deb ...
  Unpacking python3-pykmip (0.2.0-1) ...
  dpkg: error processing archive /var/cache/apt/archives/python3-pykmip_0.2.0-1_all.deb (--unpack):
   trying to overwrite
'/usr/lib/python3/dist-packages/PyKMIP-0.2.0.egg-info/dependency_links.txt', which is also in
package python3-kmip 0.2.0-1
  Errors were encountered while processing:

Andreas Beckmann | 5 Mar 20:14 2015

Bug#779871: python-awsauth, python-requests-aws, python3-awsauth, python3-requests-aws: error when trying to install together

Package: python-awsauth,python-requests-aws,python3-awsauth,python3-requests-aws
Version: 0.1.6-1
Severity: serious
User: treinen <at>
Usertags: edos-file-overwrite

Architecture: amd64
Distribution: sid


automatic installation tests of packages that share a file and at the
same time do not conflict by their package dependency relationships has
detected the following problem:

  Selecting previously unselected package python-requests-aws.
  Preparing to unpack .../python-requests-aws_0.1.6-1_all.deb ...
  Unpacking python-requests-aws (0.1.6-1) ...
  dpkg: error processing archive /var/cache/apt/archives/python-requests-aws_0.1.6-1_all.deb (--unpack):
   trying to overwrite '/usr/lib/python2.7/dist-packages/', which is also in package
python-awsauth 0.1.5-1
  Errors were encountered while processing:

  Selecting previously unselected package python3-requests-aws.
  Preparing to unpack .../python3-requests-aws_0.1.6-1_all.deb ...
  Unpacking python3-requests-aws (0.1.6-1) ...
  dpkg: error processing archive /var/cache/apt/archives/python3-requests-aws_0.1.6-1_all.deb (--unpack):
   trying to overwrite '/usr/lib/python3/dist-packages/', which is also in package
python3-awsauth 0.1.5-1
(Continue reading)