Bug#1066821: apr-util: FTBFS on arm{el,hf}: /bin/bash: line 3: 3132384 Segmentation fault LD_LIBRARY_PATH="`echo "../crypto/.libs:../dbm/.libs:../dbd/.libs:../ldap/.libs:$LD_LIBRARY_PATH" | sed -e 's/

2024-03-18 Thread Stefan Fritsch
Am 18.03.24 um 19:30 schrieb Stefan Fritsch: Am 13.03.24 um 22:32 schrieb Sebastian Ramacher: Source: apr-util Version: 1.6.3-1.1 Severity: serious Tags: ftbfs Justification: fails to build from source (but built successfully in the past) X-Debbugs-Cc: sramac...@debian.org https

Bug#1066821: apr-util: FTBFS on arm{el,hf}: /bin/bash: line 3: 3132384 Segmentation fault LD_LIBRARY_PATH="`echo "../crypto/.libs:../dbm/.libs:../dbd/.libs:../ldap/.libs:$LD_LIBRARY_PATH" | sed -e 's/

2024-03-18 Thread Stefan Fritsch
Am 13.03.24 um 22:32 schrieb Sebastian Ramacher: Source: apr-util Version: 1.6.3-1.1 Severity: serious Tags: ftbfs Justification: fails to build from source (but built successfully in the past) X-Debbugs-Cc: sramac...@debian.org

Bug#988310: ssl-cert: make-ssl-cert uses same filename for template and output

2021-06-06 Thread Stefan Fritsch
I won't be able to deal with this for at least 1-2 weeks. It would be nice if someone could look at it and downgrade or NMU+unblock. Am 06.06.21 um 13:14 schrieb Stefan Bühler: Hi, On Mon, 10 May 2021 11:09:58 +0200 Parodper wrote: Package: ssl-cert Version: 1.1.0 Severity: grave Tags:

Bug#954311: libgl1-mesa-dri: Makes KDE konsole unusable

2020-03-24 Thread Stefan Fritsch
Hi Timo, Am 20.03.20 um 09:55 schrieb Timo Aaltonen: > Please file it upstream, this is caused by the new 'iris' driver. In the > meantime, you can force the previous driver with this in a ~/.drirc: > > > > > > > > > Or run the app with the driver to verify it actually helps: > >

Bug#947729: radicale: broken after upgrade from stretch

2019-12-29 Thread Stefan Fritsch
Package: radicale Version: 2.1.11-6 Severity: grave Justification: renders package unusable Hi, I have upgraded my system from stretch. After some head scratching due to the new disk format, I have installed the package listen in NEWS.debian, did radicale --export-storage /var/tmp/radicale

Bug#923661: tt-rss: PHP Fatal error: Uncaught PDOException: SQLSTATE[22001]: String data, right truncated

2019-05-11 Thread Stefan Fritsch
Hi Helmut, Am 08.05.19 um 19:23 schrieb Helmut Grohne: Thank you for the detailed analysis. The actual failure we see here is secondary. It tries to log an error and fails. Changing the LOG_DESTINATION fixes the secondary error. The primary cause seems to live in JShrink though and I guess that

Bug#900821: linux-image-4.9.0-6-amd64: apache reads wrong data over cifs filesystems served by samba

2019-04-21 Thread Stefan Fritsch
Hi, by default, apache uses mmap, so probably mmap is broken on cifs. An alternate workaround should be to set EnableMMAP off in the apache config. Cheers, Stefan

Bug#914297: apache2: getrandom call blocks on first startup, systemd kills with timeout

2018-12-15 Thread Stefan Fritsch
reassign 914297 systemd affects 914297 apache2 thanks On Saturday, 15 December 2018 02:24:54 CET Alexander E. Patrakov wrote: > Stefan Fritsch : > > The rng should be initialized after the seed is loaded from disk. > > This is false according to systemd developers. Its s

Bug#914297: apache2: getrandom call blocks on first startup, systemd kills with timeout

2018-12-14 Thread Stefan Fritsch
On Friday, 14 December 2018 12:43:29 CET Adrian Bunk wrote: > On Sun, Nov 25, 2018 at 11:35:37PM +0100, Stefan Fritsch wrote: > >... > > > > I don't see why it should take so > > long for the random number generator to initialize. > > > >... > >

Bug#914297: apache2: getrandom call blocks on first startup, systemd kills with timeout

2018-11-25 Thread Stefan Fritsch
How long is the timeout after which it is killed? What is the status of systemd-random-seed.service in that case? I don't see why it should take so long for the random number generator to initialize. But maybe apache2 needs to add a dependency. Please provide the output of journalctl -b

Bug#902657: Segfault is caused by libcap-ng0 0.7.9

2018-07-28 Thread Stefan Fritsch
retitle 902657 graceful/restart results in segfault if libcap-ng0 is loaded severity 902657 important block 902657 by 904808 thanks The problem is caused by libcap-ng0 0.7.9 . This is usually pulled in by php extensions. There is nothing apache can do. Unfortunately, downgrading to 0.7.7 from

Bug#904808: libcap-ng0: libcap-ng's use of pthread_atfork causes segfaults

2018-07-28 Thread Stefan Fritsch
Package: libcap-ng0 Version: 0.7.9-1 Severity: grave Justification: renders package unusable Hi, apache httpd loads and unloads modules during a reload of the server configuration. This causes the pthread_atfork entry that is installed by libcap-ng0 to point to code that is no longer in the

Bug#902658: apache2: apachectl graceful/restart results in segfault

2018-07-17 Thread Stefan Fritsch
On Tuesday, 17 July 2018 21:12:48 CEST gregor herrmann wrote: > On Tue, 17 Jul 2018 20:54:02 +0200, Stefan Fritsch wrote: > > Can one of you please check how libcap-ng is pulled into the process. > > Something like this should do the trick (replace XXX with the pid of one > &g

Bug#902658: apache2: apachectl graceful/restart results in segfault

2018-07-17 Thread Stefan Fritsch
On Friday, 29 June 2018 10:35:32 CEST mer.at wrote: > when i do an "apachectl graceful" or "apachectl restart", i get > segfaults. I don't think this is a bug in apache, at least not directly. > if i then do a /etc/init.d/apache2 restart, it works normally > /etc/init.d/apache2 restart and

Bug#889170: apr-util: build failure with new gdbm

2018-02-25 Thread Stefan Fritsch
On Friday, 2 February 2018 23:32:35 CET Gianfranco Costamagna wrote: > Hello, before uploading new gdbm in unstable, I tested all the > reverse-dependencies, except for the packages that were already broken/not > building. > > This sounds to be the case for this one, and now I don't know how to

Bug#870831: Broken symbols file creates broken dependencies

2017-08-05 Thread Stefan Fritsch
Package: libbrotli0.6.0 Version: 0.6.0-2~exp0 Severity: serious I have tried to build apache2's mod_brotli with libbrotli0.6.0 / libbrotli-dev from experimental But the resulting packages gets a dependency on the non-existing libbrotli0 (>= 0.6.0). I think the reason for this is that

Bug#861994: live-wrapper: Lacks dependency on python-pycurl

2017-05-07 Thread Stefan Fritsch
Package: live-wrapper Version: 0.6 Severity: serious lwr seems to require pycurl: $ lwr --help Traceback (most recent call last): File "/usr/bin/lwr", line 11, in load_entry_point('live-wrapper==0.6', 'console_scripts', 'lwr')() File

Bug#849082: libapache2-mod-perl2: FTBFS: test failures with Apache 2.4.25

2016-12-23 Thread Stefan Fritsch
On Friday, 23 December 2016 18:56:54 CET Niko Tyni wrote: > This passage in RFC 7230, section 9.4., seems relevant: > >A more effective mitigation is to prevent anything other than the >server's core protocol libraries from sending a CR or LF within the >header section, which means

Bug#828231: alpine: FTBFS with openssl 1.1.0

2016-12-11 Thread Stefan Fritsch
Since the maintainer is on the LowThresholdNmu list, I intend to NMU alpine to switch to openssl 1.0.x in a few days.

Bug#828258: canl-c/gridsite: FTBFS with openssl 1.1.0

2016-12-03 Thread Stefan Fritsch
On Friday, 2 December 2016 00:16:24 CET Sebastian Andrzej Siewior wrote: > is there a reason for gridsite not to go for 3.0 (or backport the > change) and libssl-dev? Apache stays 1.0 but does not expose anything > SSL related (unless I read #828236 too quick). (assuming you meant 1.1 instead of

Bug#844160: Bug#828236: [Pkg-openssl-devel] Bug#844160: openssl 1.1 and apache2

2016-11-19 Thread Stefan Fritsch
On Friday, 18 November 2016 19:20:15 CET Adrian Bunk wrote: > On Fri, Nov 18, 2016 at 06:10:31AM +0100, Stefan Fritsch wrote: > > On Friday, 18 November 2016 01:09:53 CET Adrian Bunk wrote: > > > What does create the dependency in > > > > > > https://bugs.

Bug#844160: Bug#828236: [Pkg-openssl-devel] Bug#844160: openssl 1.1 and apache2

2016-11-17 Thread Stefan Fritsch
On Friday, 18 November 2016 01:09:53 CET Adrian Bunk wrote: > On Thu, Nov 17, 2016 at 11:18:57PM +0100, Stefan Fritsch wrote: > > On Thursday, 17 November 2016 21:39:19 CET Kurt Roeckx wrote: > > > > That header was created for mod_ssl_ct which provides support fo

Bug#844160: Bug#828236: [Pkg-openssl-devel] Bug#844160: openssl 1.1 and apache2

2016-11-17 Thread Stefan Fritsch
On Thursday, 17 November 2016 21:39:19 CET Kurt Roeckx wrote: > > That header was created for mod_ssl_ct which provides support for > > certificate transparency. It's quite new and likely that nothing else > > uses the header. It would probably be acceptable to remove the dependency > > in

Bug#844160: Bug#828236: [Pkg-openssl-devel] Bug#844160: openssl 1.1 and apache2

2016-11-16 Thread Stefan Fritsch
Hi, [I have trimmed the cc list a bit] On Wednesday, 16 November 2016 20:36:49 CET Kurt Roeckx wrote: > On Mon, Nov 14, 2016 at 03:06:44PM -0800, Russ Allbery wrote: > > Stefan Fritsch <s...@debian.org> writes: > > > I must admit that I did not think of php when

Bug#828258: canl-c/gridsite: FTBFS with openssl 1.1.0

2016-11-15 Thread Stefan Fritsch
Hi again, On Saturday, 12 November 2016 07:51:40 CET Stefan Fritsch wrote: > If these two packages cannot transition to openssl 1.1.0 before apache2 > does, I suggest that you build with openssl 1.0.2 explicitly and then > downgrade the bugs and unlink them from the transition bug. I d

Bug#844160: openssl 1.1 and apache2

2016-11-14 Thread Stefan Fritsch
On Monday, 14 November 2016 05:03:45 CET Ondřej Surý wrote: > > Looking at mod_ssl_openssl.h and the comment in #828330, > > I'd suggest the change below to add a dependency on libssl1.0-dev > > to apache2-dev. > > And that exactly happens meaning that PHP 7.0 can no longer be built > unless all

Bug#828330: canl-c/gridsite: FTBFS with openssl 1.1.0

2016-11-11 Thread Stefan Fritsch
Hi, If these two packages cannot transition to openssl 1.1.0 before apache2 does, I suggest that you build with openssl 1.0.2 explicitly and then downgrade the bugs and unlink them from the transition bug. I don't have much hope that apache2 will transition in time for stretch release.

Bug#828236: Processed: tagging 828236

2016-11-09 Thread Stefan Fritsch
Hi Kurt, On Sunday, 25 September 2016 19:51:08 CET Debian Bug Tracking System wrote: > Processing commands for cont...@bugs.debian.org: > > tags 828236 + patch > > Bug #828236 [src:apache2] apache2: FTBFS with openssl 1.1.0 > Added tag(s) patch. I am sorry, but I don't feel qualified to review

Bug#841763: unattended-upgrades: Breaks hard when apt is upgraded

2016-11-02 Thread Stefan Fritsch
Hi, On Sun, 23 Oct 2016, Alexandre Detiste wrote: > I think that adding this snippet to apt's debian/rules would fix this problem, > not tested tough. > > > > override_dh_systemd_start: > dh_systemd_start apt-daily.timer > Not restarting it would be one way to fix it. I don't know

Bug#841763: unattended-upgrades: Breaks hard when apt is upgraded

2016-10-23 Thread Stefan Fritsch
Package: unattended-upgrades Version: 0.92 Severity: grave Dear Maintainer, When unattended-upgrades has to upgrade apt itself, it will be terminated and leaves the system in a state that requires manual intervention, like dpkg --reconfigure --pending apt-get -f install A second bug is

Bug#838544: ext4: ext4_iget:4476: inode #8: comm mount: checksum invalid

2016-09-21 Thread Stefan Fritsch
Package: src:linux Version: 4.7.4-2 Severity: grave Justification: renders package unusable When booting with linux-image-4.7.0-1-amd64 4.7.4-2, one of my filesystems fails to mount with: ext4_iget:4476: inode #8: comm mount: checksum invalid A fsck does not find any errors, though, and the

Bug#829088: ccache may silently miscompile symlinked source files

2016-06-30 Thread Stefan Fritsch
found 829088 3.2.5-1 thanks Version 3.2.5-1 is also affected by this issue. Attached is a log file from that version. Since the path names are rather complicated in the examples: The dir with the symlinked source files is (note the obj in the 3rd component):

Bug#829088: ccache may silently miscompile symlinked source files

2016-06-30 Thread Stefan Fritsch
Package: ccache Version: 3.1.10-1 Severity: grave Hi, the ccache in jessie has a serious regression vs. wheezy. When passing files to the preprocessor, ccache in jessie resolves symlinks and passes the path of the resulting filename on the preprocessor command line. This does however change

Bug#794933: apache2-suexec-custom: prompting due to modified conffiles which were not modified by the user: /etc/apache2/conf-available/security.conf

2016-06-25 Thread Stefan Fritsch
Hi Andreas, sorry this took so long. I was rather busy in June. On Sunday 29 May 2016 19:00:59, Andreas Beckmann wrote: > On 2016-05-28 22:21, Stefan Fritsch wrote: > > I think I have a patch that does this correctly. > > Sounds promising. Be Is it generic enough s.t. it

Bug#794933: apache2-suexec-custom: prompting due to modified conffiles which were not modified by the user: /etc/apache2/conf-available/security.conf

2016-05-28 Thread Stefan Fritsch
Here is a status update. In 2.4.10-10+deb8u2 in the Debian 8.2 point release, I have included this fix: * Fix upgrade logic: When upgrading from wheezy with apache2.2-common but without apache2 installed to jessie, part of the conffile handling logic would not run, causing outdated

Bug#820824: libapache2-mod-perl2: FTBFS: t/protocol/pseudo_http.t failure

2016-05-28 Thread Stefan Fritsch
On Tue, 10 May 2016, Niko Tyni wrote: > On Mon, May 09, 2016 at 09:49:13PM +0300, Niko Tyni wrote: > > > I intend to disable the test in libapache2-mod-perl2 for now until > > a better solution is found. > > Done in 2.0.9-5 which I just uploaded. > > > Do you want to track the apache2 crash >

Bug#820824: libapache2-mod-perl2: FTBFS: t/protocol/pseudo_http.t failure

2016-04-14 Thread Stefan Fritsch
reassign 820824 apache2 found 820824 2.4.20-1 affects 820824 libapache2-mod-perl2 thanks Thanks for the report. On Tuesday 12 April 2016 23:04:42, Niko Tyni wrote: > Looking at the CI results at > > https://ci.debian.net/packages/liba/libapache2-mod-perl2/unstable/a > md64/ this started

Bug#805737: libembperl-perl: FTBFS: apache2 crash during test suite

2015-11-23 Thread Stefan Fritsch
reassign 805737 apache2 found 805737 2.4.17-2 affects 805737 libembperl-perl retitle 805737 apache2 crash when started with -X thanks On Saturday 21 November 2015 22:42:00, Niko Tyni wrote: > The test apache2 process is crashing with this backtrace: > Core was generated by `/usr/sbin/apache2

Bug#794933: apache2-suexec-custom: prompting due to modified conffiles which were not modified by the user: /etc/apache2/conf-available/security.conf

2015-08-15 Thread Stefan Fritsch
AFAICS, this happens when one upgrades from wheezy from a state where only apache2.2-common is installed but not apache2. There is a bug in apache2's preinst in jessie that makes it not recognize this case and not execute the conffile handling. While I think I have a fix, I am not not

Bug#794933: apache2-suexec-custom: prompting due to modified conffiles which were not modified by the user: /etc/apache2/conf-available/security.conf

2015-08-08 Thread Stefan Fritsch
On Saturday 08 August 2015 11:38:14, Andreas Beckmann wrote: during a test with piuparts I noticed your package failed the piuparts upgrade test because dpkg detected a conffile as being modified and then prompted the user for an action. As there is no user input, this fails. But this is not

Bug#789914: apache2: fails to install: ERROR: Module mpm_event is enabled - cannot proceed due to conflicts. It needs to be disabled first!

2015-08-01 Thread Stefan Fritsch
On Monday 20 July 2015 13:33:04, Jean-Michel Vourgère wrote: We want to backport that to jessie, don't we? I mean a minimal fix. Yes, we do. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#789914: apache2: fails to install: ERROR: Module mpm_event is enabled - cannot proceed due to conflicts. It needs to be disabled first!

2015-07-12 Thread Stefan Fritsch
reassign 789914 apache2 found 789914 2.4.10-3 thanks This also affects jessie + stretch. On Thursday 25 June 2015 10:27:59, Andreas Beckmann wrote: Enabling conf serve-cgi-bin. Enabling site 000-default. info: mpm_prefork: No action required This is wrong. There seems to be a ! that

Bug#666826: Will request removal of mod-auth-mysql soon

2015-06-06 Thread Stefan Fritsch
This module has been broken for 2 years. A replacement exists in the form of mod_auth[nz]_dbd in the apache2 package. We will request its removal very soon now. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#755722: systemd must sync systemclock to RTC on shutdown

2015-02-03 Thread Stefan Fritsch
On Wednesday 04 February 2015 01:41:14, Michael Biebl wrote: Am 31.01.2015 um 10:19 schrieb Stefan Fritsch: severity 755722 serious retitle 755722 systemd must sync systemclock to RTC on shutdown thanks Systemd must make sure that the system clock does not go backwards, which

Bug#767850: apache2: unhandled symlink to directory conversion: /usr/share/doc/apache2

2014-11-08 Thread Stefan Fritsch
Thanks for the report. The doc symlinks will be fixed in the next upload. But the errors about conf files seem to be false positives. The upgraded apache2.2-common package does not contain any of those files anymore. Therefore it is correct that they are missing. On Sunday 02 November 2014

Bug#736809: apache2-bin needs proper Breaks: for Apache 2.4 transition

2014-08-27 Thread Stefan Fritsch
serverity 736809 important thanks On Wednesday 30 July 2014 23:22:25, Adrian Bunk wrote: I do not claim to fully understand the Debian apache packaging, and after a quick test it seems you are right that you already have that covered. I am downgrading this for now until it has been proven to

Bug#752872: libapr1: file locking is broken, leading to file corruption in e.g. libapache2-mod-auth-cas session files

2014-08-16 Thread Stefan Fritsch
severity 752872 important found 752872 1.4.6-3 thanks On Friday 27 June 2014 11:37:18, Joost van Baal-Ilić wrote: While libapr1 defaults to fcntl() locking it also supports flock(), which does not have the problems outlined above. A patch is attached which makes libapr1 use flock() even if

Bug#751294: chromium: Does not display any web page or settings (Aw, Snap)

2014-06-11 Thread Stefan Fritsch
Package: chromium Version: 35.0.1916.153-1 Severity: grave Justification: renders package unusable Upgrading chromium chromium-inspector to 35.0.1916.153-1 makes it break completely for me. Every page (including the settings and the startup page) yields the above error message and some

Bug#734865: libapache2-mpm-itk: fails to install

2014-06-08 Thread Stefan Fritsch
Hi Steinar, I have finally removed the obsolete conflict of the mpms with mpm_itk in 2.4.9-2. But in order for libapache2-mpm-itk to install cleanly, it seems you also have to add apache2_switch_mpm prefork to your postinst before you call enmod. Cheers, Stefan -- To UNSUBSCRIBE, email

Bug#748369: apr-util: diff for NMU version 1.5.3-1.1

2014-05-17 Thread Stefan Fritsch
On Friday 16 May 2014 18:39:42, Hector Oron wrote: I've prepared an NMU for apr-util (versioned as 1.5.3-1.1) and did _not_ uploaded it. Please feel free to tell me if you want me to upload it. Thanks for the patch. If you feel that it's urgent, go ahead. Otherwise i will include it in the

Bug#711167: Bug#711213: libapache2-mod-perl2: occasional core dumps after the test suite

2013-06-14 Thread Stefan Fritsch
On Friday 14 June 2013, Niko Tyni wrote: On Sun, Jun 09, 2013 at 11:23:01PM +0300, Niko Tyni wrote: On Fri, Jun 07, 2013 at 02:23:43PM +0300, Niko Tyni wrote: I can reproduce the SIGSEGV at the end of the main test suite (#711213) on amd64. The armel problem might well be related, as

Bug#703313: nvidia-kernel-dkms: Upgrade breaks VT text consoles

2013-03-18 Thread Stefan Fritsch
Package: nvidia-kernel-dkms Version: 304.84-1 Severity: grave Upgrading the nvidia packages from 304.64-4 to 304.84-1 breaks text consoles for me. If I switch VT with ctrl-alt-Fx, the display switches itself off (switching back to the X session works, though). The same happens after the xserver

Bug#702475: apache2: the itk MPM is underlinked: sys/capability.h symbols are not resolved

2013-03-09 Thread Stefan Fritsch
On Saturday 09 March 2013, Steinar H. Gunderson wrote: However, my long-term plan is definitely to build mpm-itk out-of-tree and a separate source package; if the Debian Apache maintainers want to include the patches needed, I think this would make the lives easier for all of us :-) Yes.

Bug#697465: apache2.2-common: initial install fails: Could not read /etc/apache2/envvars

2013-01-15 Thread Stefan Fritsch
severity 697465 normal thanks On Tue, 8 Jan 2013, Jonas Smedegaard wrote: I think you are right that what I experience might be unrelated to apache packaging - I suspect however that it is not multistrap but fakechroot. I will reassing accordingly. I am downgrading this until then. No idea

Bug#697465: apache2.2-common: initial install fails: Could not read /etc/apache2/envvars

2013-01-07 Thread Stefan Fritsch
On Mon, 7 Jan 2013, Jonas Smedegaard wrote: Quoting Jean-Michel Vourgère (2013-01-07 16:58:08) On Sunday 06 January 2013 11:29:55 Arno Töll wrote: (...) Seems that error comes from a2ensite call, so I suspect the cause might be some dependency of that script has not yet been configured.

Bug#694473: apache2: segmentation fault after reload, maybe PHP

2013-01-07 Thread Stefan Fritsch
This seems to be related, but it does not have a definite fix, either: https://bugs.php.net/bug.php?id=62129 -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#670945: Re: About the media types text/x-php and text/x-php-source

2012-08-26 Thread Stefan Fritsch
* The fix for second bug #670945 (e.g. http://localhost/file not caught by mod_negotiation) was fixed in mime-support 3.52-1.1. The two bug reporters, the apache maintainer and me are all saying that this bug should be fixed in apache or PHP, not in mime-support. As pointed out

Bug#674089: Possible release note for systems running PHP through CGI.

2012-08-20 Thread Stefan Fritsch
On Monday 20 August 2012, Ondřej Surý wrote: Ah, I see; it gets executed when there is no know handler or mime-type for second extension. E.g. index.php.jpeg works as expected (e.g. returning PHP source code), index.php.blubb but gets executed. I don't think there's any harm in disabling

Bug#684824: apr: FTBFS: rm: cannot remove `libtoolT': No such file or directory

2012-08-15 Thread Stefan Fritsch
Hi Lucas, On Tuesday 14 August 2012, Lucas Nussbaum wrote: WARNING: This is Linux but configure did not detect POSIX semaphores. ERROR: POSIX semaphores not usable and /dev/shm not mounted. ERROR: Aborting. HINT: If you are using pbuilder or cowbuilder, add /dev/shm to BINDMOUNTS HINT:

Bug#670945: libapache2-mod-php5: Bug #589384 breaks default behaviour for MultiViews

2012-08-15 Thread Stefan Fritsch
FWIW, this bug has been open for 4 months. It would have been nice if you (or the php maintainers) could have sent a note to debian- apache@l.d.o a bit earlier. If mod_negotiation requires some mime-type for .php to work, then the obvious solution would be to add a non-magic type, for example

Bug#674089: [php-maint] Bug#674089: Bug#674089: mime-support: removed application/x-httpd-* can lead to immense security problems

2012-08-15 Thread Stefan Fritsch
Thanks for coming up with some wording. On Wednesday 15 August 2012, Ondřej Surý wrote: In order to avoid any problems when not using Apache PHP5 module, and if you relied on MIME type definitions, read the README.Debian from the php5-common package on how to correctly configure PHP 5

Bug#674089: [php-maint] Bug#674089: Bug#674089: mime-support: removed application/x-httpd-* can lead to immense security problems

2012-08-15 Thread Stefan Fritsch
On Wednesday 15 August 2012, Christoph Anton Mitterer wrote: On Wed, 2012-08-15 at 21:07 +0200, Stefan Fritsch wrote: Since we have gone to great pains to not use the magic MIME types anymore, I think we should not recommend them here. Or at least not as the first option. Stefan, can you

Bug#682401: dbmmanage: please use Digest::SHA instead of Digest::SHA1

2012-07-22 Thread Stefan Fritsch
On Sunday 22 July 2012, Arno Töll wrote: Evidently not too many people are using dbmmanage, even less with SHA1 encryption since it is not the default option but nobody noticed so far. Nonetheless the removal of Digest::SHA1 breaks the application in a fatal way when SHA-1 encryption is

Bug#668663: backtrace

2012-06-17 Thread Stefan Fritsch
a backtrace is attached Starting program: /usr/bin/gtimer [Thread debugging using libthread_db enabled] Using host libthread_db library /lib/i386-linux-gnu/i686/cmov/libthread_db.so.1. ** Message: Building menu Failed: (null) (gtimer:5748): GLib-GObject-CRITICAL **: g_object_ref: assertion

Bug#674089: mime-support: removed application/x-httpd-* can lead to immense security problems

2012-06-02 Thread Stefan Fritsch
On Friday 01 June 2012, Christoph Anton Mitterer wrote: Release notes is a good idea, Stefan, Brian... can anyone of you take care of this or should I (but I'm on vacation starting next Tue, so that would take some time). There is still plenty of time. If you get to it first please cc:

Bug#674089: mime-support: removed application/x-httpd-* can lead to immense security problems

2012-06-01 Thread Stefan Fritsch
On Thursday 31 May 2012, Christoph Anton Mitterer wrote: So from my side I'd say the following: 1) IF a change like this happens,.. it definitely must go to the NEWS file, as - in the case of Apache HTTPD Server - it can even have security relevant outcomes. So Brian, as long as this change

Bug#666828: Apache2 2.4 transition postponed until after Wheezy

2012-05-17 Thread Stefan Fritsch
Hi, we have decided to postpone the transition to apache2 2.4. The main blocker is that mod_perl needs a major new upstream release which very likely won't be ready in time for Wheezy and we don't want to release Wheezy without mod_perl. The transition will probably happen shortly after the

Bug#666865: bug mail bounces

2012-05-17 Thread Stefan Fritsch
Hi, I think the problem is that you can't match on the Sender or From headers, because those remain unmodified for BTS mail. But BTS mail seems to have X-Loop: ow...@bugs.debian.org and X-Debian-PR-Source: name-of-source-package Maybe you can match on either of those. Cheers, Stefan --

Bug#670633: Bug#670572: [xml/sgml-pkgs] Bug#670572: libxml2: missing link from /usr/lib

2012-05-01 Thread Stefan Fritsch
On Monday 30 April 2012, Stefan Fritsch wrote: On Sun, 29 Apr 2012, Julien Cristau wrote: On Sun, Apr 29, 2012 at 13:10:05 +0200, Stefan Fritsch wrote: LoadFile /usr/lib/${DEB_HOST_MULTIARCH}/libxml2.so.2. This would break with non-multiarch versions of libxml2, but that's acceptable

Bug#670633: Bug#670572: [xml/sgml-pkgs] Bug#670572: libxml2: missing link from /usr/lib

2012-04-30 Thread Stefan Fritsch
On Sun, 29 Apr 2012, Julien Cristau wrote: On Sun, Apr 29, 2012 at 13:10:05 +0200, Stefan Fritsch wrote: LoadFile /usr/lib/${DEB_HOST_MULTIARCH}/libxml2.so.2. This would break with non-multiarch versions of libxml2, but that's acceptable. A simple LoadFile libxml2.so.2 doesn't work? Or any

Bug#670633: [xml/sgml-pkgs] Bug#670572: libxml2: missing link from /usr/lib

2012-04-29 Thread Stefan Fritsch
On Friday 27 April 2012, Aron Xu wrote: clone 670572 -1 retitle -1 not usable because libxml2.so.* are moved to Multi-Arch path severity -1 serious reassign -1 src:mod-proxy-html block 670572 by -1 thanks On Thu, Apr 26, 2012 at 21:39, Francesco Potortì poto...@isti.cnr.it wrote:

Bug#624148: Please fix this bug in stable

2012-04-16 Thread Stefan Fritsch
tags squeeze thanks There was a similar issue with the recent apache2 DSA and I expect that it is the same bug. I have unattended-upgrades 0.62.2 installed. Please fix this in the next stable point release. Cheers, Stefan Unattended upgrade returned: False Packages that are upgraded:

Bug#663723: Critical memory leak with mod_rewrite in apache2 using german umlauts

2012-03-13 Thread Stefan Fritsch
severity 663723 wishlist tags 663723 -security retitle 663723 apache2 does not prevent DoS through .htaccess files thanks On Tuesday 13 March 2012, Patrick Matthäi wrote: I noticed on a customers server, that apache periodical crashes the whole system by using the whole available memory until

Bug#663528: libkio5: kmail crashes since upgrade to KDE 4.7.4

2012-03-11 Thread Stefan Fritsch
Package: libkio5 Version: 4:4.7.4-3 Severity: grave Justification: renders package unusable Since upgrading the kde libraries to version 4.7.4, kmail crashes on start before displaying any window. The crash happens in libkio5, therefore I file the bug against this package. Feel free to re-assign.

Bug#663528: libkio5: kmail crashes since upgrade to KDE 4.7.4

2012-03-11 Thread Stefan Fritsch
On Monday 12 March 2012, Pino Toscano wrote: Alle lunedì 12 marzo 2012, Stefan Fritsch ha scritto: Since upgrading the kde libraries to version 4.7.4, kmail crashes on start before displaying any window. Are you using a network proxy? If so, does kmail open if you unset it? Yes and yes

Bug#616323: [php-maint] Bug#616323: segfaults when serving HTTP requests

2011-06-13 Thread Stefan Fritsch
On Sunday 12 June 2011, Robert Millan wrote: Btw, as for #616323, could you consider uploading the same fix to squeeze-proposed-updates Oh, I forgot about that one. Done: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=630356 -- To UNSUBSCRIBE, email to

Bug#629896: segfault while simply get()ing a value from squeeze memcached

2011-06-10 Thread Stefan Fritsch
On Thursday 09 June 2011, Josip Rodin wrote: select(3147, [1024 1223 1224 1227 1230 1231 1235 1241 1242 1243 Hah, I found the apparent problem. The number of fds in those select() calls tipped me off to reexamine a change I recently did as part of the squeeze upgrade - I enabled a large

Bug#619036: [php-maint] Bug#619036: php5: Build-Depends uninstallable

2011-03-21 Thread Stefan Fritsch
On Monday 21 March 2011, Peter Samuelson wrote: Since only a single libdb*-dev can be installed at a time, and since libaprutil1-dev Depends on one of them, any apr-util reverse dep is forced to use the same bdb version. Even though, in Subversion's case, we don't use the apr-util frontend to

Bug#619036: [php-maint] Bug#619036: php5: Build-Depends uninstallable

2011-03-20 Thread Stefan Fritsch
On Sunday 20 March 2011, Raphael Geissert wrote: On Sunday 20 March 2011 11:15:54 Kurt Roeckx wrote: Your build-depends are uninstallable because you build-depend on libdb-dev, which depends on libdb5.1-dev, and apache2-prefork-dev which depends on libaprutil1-dev, which depends on

Bug#613083: libreoffice-common: Deletes /share and /user in preinst

2011-02-12 Thread Stefan Fritsch
Package: libreoffice-common Version: 1:3a3.3.1~rc1-1 Severity: critical Justification: causes serious data loss from preinst: if dpkg --compare-versions $2 lt 1:3.3.0-3; then rm -rf /share rm -rf /user fi Are you mad? You must nod delete

Bug#613083: libreoffice-common: Deletes /share and /user in preinst

2011-02-12 Thread Stefan Fritsch
On Saturday 12 February 2011, you wrote: And what do people store in /share and /user? /share is a common name for additional file systems (e.g. remote NFS shares). You cannot assume that just because a dir is not in the FHS, people don't use it. And you hopefully suggest an alternative way

Bug#613083: libreoffice-common: Deletes /share and /user in preinst

2011-02-12 Thread Stefan Fritsch
On Saturday 12 February 2011, Rene Engelhard wrote: On Sat, Feb 12, 2011 at 06:54:22PM +0100, Stefan Fritsch wrote: On Saturday 12 February 2011, you wrote: And what do people store in /share and /user? /share is a common name for additional file systems (e.g. remote NFS shares). You

Bug#613083: libreoffice-common: Deletes /share and /user in preinst

2011-02-12 Thread Stefan Fritsch
On Saturday 12 February 2011, Rene Engelhard wrote: if dpkg --compare-versions $2 lt 1:3.3.0-3; then BTW, it would be good if you limited the cleanup to the cases where the problematic version was actually installed, i.e. don't clean

Bug#613083: libreoffice-common: Deletes /share and /user in preinst

2011-02-12 Thread Stefan Fritsch
On Saturday 12 February 2011, Rene Engelhard wrote: On Sat, Feb 12, 2011 at 07:21:41PM +0100, Stefan Fritsch wrote: If you know that this is the complete list, including 15 lines of rm -f and 31 lines of rmdir ... 2 /dev/null || true in depth-first order would seem best to me. Or do I

Bug#611461: iceweasel still does insecure ssl renegotiation?!

2011-01-29 Thread Stefan Fritsch
On Saturday 29 January 2011, Christoph Anton Mitterer wrote: It seems that iceweasel still is vulnerable to the SSL renegotiation attack, as simply is configured per default to allow the vulnerable renegotiation: This has to be balanced between compatibility and security. Currently less than

Bug#610984: aegis: Can't close a branch if files have been renamed in particular ways

2011-01-24 Thread Stefan Fritsch
: Walter Franzini walter.franz...@gmail.com To: Stefan Fritsch s...@sfritsch.de Cc: aegis-develop...@lists.sourceforge.net, aegis-us...@auug.org.au Subject: Re: [Aegis-developers] aegis gets confused when renaming files [cc-ing aegis-users since it may be helpful for others] Stefan Fritsch s

Bug#610985: Can't checkout old versions correctly

2011-01-24 Thread Stefan Fritsch
) From: Stefan Fritsch s...@sfritsch.de To: Walter Franzini walter.franz...@gmail.com Cc: aegis-develop...@lists.sourceforge.net Subject: Re: [Aegis-developers] aegis gets confused when renaming files Hi Walter, thanks for your help and sorry for the late response. On Fri, 14 Jan 2011, Walter

Bug#605484: libapache2-mod-fcgid in lenny vulnerable to hole for weeks

2010-12-21 Thread Stefan Fritsch
On Tuesday 21 December 2010, John Goerzen wrote: I reported bug #605484 regarding a security hole in lenny. I believe the security team was CC'd. Prior to my report, http://security-tracker.debian.org/tracker/CVE-2010-3872 said that Debian/stable was not vulnerable. I also notified them

Bug#594711: slapd: Migration of DB format fails during upgrade

2010-08-28 Thread Stefan Fritsch
Package: slapd Version: 2.4.23-4 Severity: grave When upgrading from 2.4.23-2 to 2.4.23-4, I get a debconf message that tells me that slapcat failed during upgrade. dpkg then aborts with a failure. Also, contrary to the debconf message, the database files are not moved into /var/backup. I am

Bug#591286: libapr1: upgrade breaks apache

2010-08-01 Thread Stefan Fritsch
On Sunday 01 August 2010, Adrian Bridgett wrote: However, if I downgrade _just_ libapr1 to 1.2.12-5+lenny1 then posixsem (and sem) work just fine. Which architecture are you using? -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of unsubscribe. Trouble?

Bug#591286: libapr1: upgrade breaks apache

2010-08-01 Thread Stefan Fritsch
On Sunday 01 August 2010, Adrian Bridgett wrote: i386 (but it's a KVM guest, sorry - I should have said). I found out why posixsem does not work: A bug in pbuilder/cowbuilder causes posix shared mem/posix semaphores to not work in the build chroot and this causes apr's configure to disable it.

Bug#583435: NMU diff

2010-07-17 Thread Stefan Fritsch
/changelog 2010-07-17 21:49:33.0 +0200 @@ -1,3 +1,11 @@ +rpcbind (0.2.0-4.1) unstable; urgency=high + + * Non-maintainer upload by the security team. + * CVE-2010-2061: Store state files in /var/run/rpcbind instead of /tmp. +Closes: #583435 + + -- Stefan Fritsch s...@debian.org Sat, 17

Bug#586480: openssh-server: chroot directive is not working when using FISH (File transfer of shell with midnight commander)

2010-06-20 Thread Stefan Fritsch
On Saturday 19 June 2010, you wrote: However, if I use the fish protocol [1] included in midnight commander, I can see the full filesystem hierarchy, and even transfer files from the etc folder, etc... Subsystem sftp internal-sftp Match group sftponly ChrootDirectory /home/%u

Bug#583858: libc6-i686: causes segfaults

2010-05-31 Thread Stefan Fritsch
Hi, I can reproduce this. I have attached a stacktrace and part of the update log which shows that the segfaults start while configuring locales (though probably that this is just the first package with a postinstall after configuring libc6-i686). If you have ideas how I could help further,

Bug#582876: gdc-4.3 needs tighter versioned dependency on gcc-4.3-base

2010-05-25 Thread Stefan Fritsch
On Tuesday 25 May 2010, Iain Buclaw wrote: On 24 May 2010 19:21, Stefan Fritsch s...@sfritsch.de wrote: On Monday 24 May 2010, Matthias Klose wrote: On 24.05.2010 12:35, Stefan Fritsch wrote: Package: gdc-4.3 Version: 1:1.046-4.3.4-5 Severity: serious gdc 4.3.4 does

Bug#582876: gdc-4.3 needs tighter versioned dependency on gcc-4.3-base

2010-05-24 Thread Stefan Fritsch
Package: gdc-4.3 Version: 1:1.046-4.3.4-5 Severity: serious gdc 4.3.4 does not work with gcc-4.3-base 4.3.5: $ gdc -c test_md5.d gdc: error trying to exec 'cc1d': execvp: No such file or directory The problem is that it looks for cc1d in /usr/lib/gcc/i486-linux-gnu/4.3.4/ but gcc-4.3-base

Bug#582876: gdc-4.3 needs tighter versioned dependency on gcc-4.3-base

2010-05-24 Thread Stefan Fritsch
On Monday 24 May 2010, Matthias Klose wrote: On 24.05.2010 12:35, Stefan Fritsch wrote: Package: gdc-4.3 Version: 1:1.046-4.3.4-5 Severity: serious gdc 4.3.4 does not work with gcc-4.3-base 4.3.5: I think you forgot to give an explanation why you closed this bug. Or was the closing

Bug#576399: libao4: Fails to install if libao2 is installed

2010-04-04 Thread Stefan Fritsch
Package: libao4 Version: 1.0.0-2 Severity: serious dpkg: error processing /var/cache/apt/archives/libao4_1.0.0-2_i386.deb (--unpack): trying to overwrite '/etc/libao.conf', which is also in package libao2 0:0.8.8-5.1 Errors were encountered while processing:

Bug#573163: apache2.2-common - mod_proxy_http reports stray timeouts

2010-03-10 Thread Stefan Fritsch
On Wednesday 10 March 2010, Bastian Blank wrote: It checks for POLLIN (aka for readable things) before writing the request, which makes no sense at all. Yes, the bug is that mod_reqtimeout handles the backend connection at all. It should be restricted to the client connection. -- To

Bug#570245: Processed: severity of 570245 is grave

2010-03-01 Thread Stefan Fritsch
On Mon, 1 Mar 2010, Michael Tokarev wrote: Stefen, can you please, this and next time you merely increases severity, give at least some hint about your justification? I thought from the original report it was obvious that this makes kvm unusable, therefore this bug is not only important. I

  1   2   3   4   5   >